Hallo.
Heute hab ich in meinem Benutzerordner C:\Users\Rene 2 merkwürdige dinge gefunden: wgsdgsdgdsgsd.dll <- die war da vorher nicht drin
und einen Ordner "Tracing", welchen ich auch vorher noch nie gesehen hab. Nun sagt Avira gefühlt alle 2 Minuten, dass in der wgsdgsdgdsgsd.dll ein virus/unerwünschtes Programm gefunden wurde "TR/Ransom.if". Symptom könnte sein, dass der Task Mananger nicht mehr funktioniert, jedenfalls immer sofort verschwindet.
Ich hab mich hier im Forum schon ein wenig schlau gemacht und mit OTL mal gescannt. Mehr trau ich mich noch nicht, da ich von der Materie nicht viel versteh.
Im Anhang sind der avira-bericht, der Malwarebyte-bericht, der defogger-log und die beiden Dateien, die OTL erstellt hat.
Bei defogger hab ich noch nicht auf re-enable gedrückt! Sollte ja erst nach Anweisung geschehen...
Kann mir da jemand helfen?

gruß Rene

hi
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

18:41:39.0518 3700 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:41:39.0721 3700 ============================================================
18:41:39.0736 3700 Current date / time: 2012/12/29 18:41:39.0721
18:41:39.0736 3700 SystemInfo:
18:41:39.0736 3700
18:41:39.0736 3700 OS Version: 6.1.7601 ServicePack: 1.0
18:41:39.0736 3700 Product type: Workstation
18:41:39.0736 3700 ComputerName: RENE-PC
18:41:39.0736 3700 UserName: Rene
18:41:39.0736 3700 Windows directory: C:\Windows
18:41:39.0736 3700 System windows directory: C:\Windows
18:41:39.0736 3700 Running under WOW64
18:41:39.0736 3700 Processor architecture: Intel x64
18:41:39.0736 3700 Number of processors: 2
18:41:39.0736 3700 Page size: 0x1000
18:41:39.0736 3700 Boot type: Normal boot
18:41:39.0736 3700 ============================================================
18:41:41.0671 3700 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:41:41.0671 3700 ============================================================
18:41:41.0671 3700 \Device\Harddisk0\DR0:
18:41:41.0671 3700 MBR partitions:
18:41:41.0671 3700 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E00800, BlocksNum 0x32000
18:41:41.0671 3700 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E32800, BlocksNum 0x38553000
18:41:41.0671 3700 ============================================================
18:41:41.0702 3700 C: <-> \Device\Harddisk0\DR0\Partition2
18:41:41.0702 3700 ============================================================
18:41:41.0702 3700 Initialize success
18:41:41.0702 3700 ============================================================
18:42:12.0964 0820 ============================================================
18:42:12.0964 0820 Scan started
18:42:12.0964 0820 Mode: Manual; SigCheck; TDLFS;
18:42:12.0964 0820 ============================================================
18:42:13.0136 0820 ================ Scan system memory ========================
18:42:13.0136 0820 System memory - ok
18:42:13.0152 0820 ================ Scan services =============================
18:42:13.0292 0820 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
18:42:13.0401 0820 1394ohci - ok
18:42:13.0432 0820 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
18:42:13.0464 0820 ACPI - ok
18:42:13.0495 0820 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
18:42:13.0573 0820 AcpiPmi - ok
18:42:13.0744 0820 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
18:42:13.0744 0820 AdobeFlashPlayerUpdateSvc - ok
18:42:13.0838 0820 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
18:42:13.0854 0820 adp94xx - ok
18:42:13.0900 0820 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
18:42:13.0916 0820 adpahci - ok
18:42:13.0932 0820 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
18:42:13.0963 0820 adpu320 - ok
18:42:13.0994 0820 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:42:14.0103 0820 AeLookupSvc - ok
18:42:14.0181 0820 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
18:42:14.0244 0820 AFD - ok
18:42:14.0290 0820 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:42:14.0306 0820 agp440 - ok
18:42:14.0353 0820 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
18:42:14.0400 0820 ALG - ok
18:42:14.0431 0820 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
18:42:14.0431 0820 aliide - ok
18:42:14.0446 0820 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
18:42:14.0462 0820 amdide - ok
18:42:14.0493 0820 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
18:42:14.0509 0820 AmdK8 - ok
18:42:14.0509 0820 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
18:42:14.0540 0820 AmdPPM - ok
18:42:14.0571 0820 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
18:42:14.0587 0820 amdsata - ok
18:42:14.0602 0820 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
18:42:14.0618 0820 amdsbs - ok
18:42:14.0649 0820 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
18:42:14.0665 0820 amdxata - ok
18:42:14.0914 0820 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
18:42:14.0930 0820 AntiVirSchedulerService - ok
18:42:14.0977 0820 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
18:42:14.0977 0820 AntiVirService - ok
18:42:15.0055 0820 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
18:42:15.0211 0820 AppID - ok
18:42:15.0226 0820 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:42:15.0289 0820 AppIDSvc - ok
18:42:15.0320 0820 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
18:42:15.0367 0820 Appinfo - ok
18:42:15.0398 0820 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
18:42:15.0414 0820 arc - ok
18:42:15.0445 0820 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
18:42:15.0445 0820 arcsas - ok
18:42:15.0726 0820 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
18:42:15.0741 0820 aspnet_state - ok
18:42:15.0772 0820 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:42:15.0819 0820 AsyncMac - ok
18:42:15.0882 0820 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
18:42:15.0897 0820 atapi - ok
18:42:15.0960 0820 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:42:16.0006 0820 AudioEndpointBuilder - ok
18:42:16.0022 0820 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
18:42:16.0069 0820 AudioSrv - ok
18:42:16.0147 0820 [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
18:42:16.0194 0820 avgntflt - ok
18:42:16.0272 0820 [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
18:42:16.0287 0820 avipbb - ok
18:42:16.0318 0820 [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
18:42:16.0334 0820 avkmgr - ok
18:42:16.0396 0820 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:42:16.0506 0820 AxInstSV - ok
18:42:16.0537 0820 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
18:42:16.0584 0820 b06bdrv - ok
18:42:16.0615 0820 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
18:42:16.0646 0820 b57nd60a - ok
18:42:16.0802 0820 [ 85111026F1C5A1C4CCE3697F0DA7BC1A ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
18:42:16.0958 0820 BCM43XX - ok
18:42:16.0974 0820 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
18:42:17.0005 0820 BDESVC - ok
18:42:17.0036 0820 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
18:42:17.0098 0820 Beep - ok
18:42:17.0161 0820 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
18:42:17.0239 0820 BFE - ok
18:42:17.0286 0820 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
18:42:17.0364 0820 BITS - ok
18:42:17.0410 0820 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
18:42:17.0442 0820 blbdrive - ok
18:42:17.0473 0820 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:42:17.0520 0820 bowser - ok
18:42:17.0566 0820 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
18:42:17.0598 0820 BrFiltLo - ok
18:42:17.0598 0820 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
18:42:17.0613 0820 BrFiltUp - ok
18:42:17.0660 0820 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
18:42:17.0691 0820 Browser - ok
18:42:17.0722 0820 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:42:17.0769 0820 Brserid - ok
18:42:17.0785 0820 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:42:17.0816 0820 BrSerWdm - ok
18:42:17.0832 0820 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:42:17.0863 0820 BrUsbMdm - ok
18:42:17.0878 0820 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:42:17.0894 0820 BrUsbSer - ok
18:42:17.0910 0820 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
18:42:17.0941 0820 BTHMODEM - ok
18:42:17.0988 0820 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
18:42:18.0034 0820 bthserv - ok
18:42:18.0050 0820 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:42:18.0097 0820 cdfs - ok
18:42:18.0144 0820 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:42:18.0175 0820 cdrom - ok
18:42:18.0222 0820 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
18:42:18.0284 0820 CertPropSvc - ok
18:42:18.0300 0820 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
18:42:18.0346 0820 circlass - ok
18:42:18.0362 0820 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
18:42:18.0378 0820 CLFS - ok
18:42:18.0424 0820 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:42:18.0440 0820 clr_optimization_v2.0.50727_32 - ok
18:42:18.0471 0820 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:42:18.0487 0820 clr_optimization_v2.0.50727_64 - ok
18:42:18.0721 0820 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:42:18.0736 0820 clr_optimization_v4.0.30319_32 - ok
18:42:18.0768 0820 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:42:18.0783 0820 clr_optimization_v4.0.30319_64 - ok
18:42:18.0830 0820 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
18:42:18.0861 0820 CmBatt - ok
18:42:18.0892 0820 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:42:18.0892 0820 cmdide - ok
18:42:18.0955 0820 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
18:42:18.0986 0820 CNG - ok
18:42:19.0017 0820 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
18:42:19.0033 0820 Compbatt - ok
18:42:19.0033 0820 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
18:42:19.0048 0820 CompositeBus - ok
18:42:19.0080 0820 COMSysApp - ok
18:42:19.0080 0820 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
18:42:19.0095 0820 crcdisk - ok
18:42:19.0142 0820 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:42:19.0204 0820 CryptSvc - ok
18:42:19.0251 0820 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:42:19.0314 0820 DcomLaunch - ok
18:42:19.0345 0820 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
18:42:19.0407 0820 defragsvc - ok
18:42:19.0454 0820 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:42:19.0516 0820 DfsC - ok
18:42:19.0579 0820 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
18:42:19.0626 0820 Dhcp - ok
18:42:19.0672 0820 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
18:42:19.0735 0820 discache - ok
18:42:19.0750 0820 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
18:42:19.0766 0820 Disk - ok
18:42:19.0813 0820 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:42:19.0860 0820 dot3svc - ok
18:42:19.0860 0820 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
18:42:19.0922 0820 DPS - ok
18:42:19.0969 0820 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:42:20.0000 0820 drmkaud - ok
18:42:20.0094 0820 [ 9CF46FDF163E06B83D03FF929EF2296C ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe
18:42:20.0109 0820 DsiWMIService - ok
18:42:20.0187 0820 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
18:42:20.0203 0820 dtsoftbus01 - ok
18:42:20.0250 0820 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:42:20.0312 0820 DXGKrnl - ok
18:42:20.0328 0820 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
18:42:20.0390 0820 EapHost - ok
18:42:20.0468 0820 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
18:42:20.0577 0820 ebdrv - ok
18:42:20.0624 0820 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
18:42:20.0671 0820 EFS - ok
18:42:20.0749 0820 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:42:20.0827 0820 ehRecvr - ok
18:42:20.0858 0820 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
18:42:20.0936 0820 ehSched - ok
18:42:20.0967 0820 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
18:42:20.0998 0820 elxstor - ok
18:42:21.0108 0820 [ 2AEE0416C54A1A86D035366DE192B2F0 ] ePowerSvc C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
18:42:21.0139 0820 ePowerSvc - ok
18:42:21.0154 0820 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:42:21.0186 0820 ErrDev - ok
18:42:21.0248 0820 [ 0975BF32399A24117E317B5BF1D5D0AA ] ETD C:\Windows\system32\DRIVERS\ETD.sys
18:42:21.0264 0820 ETD - ok
18:42:21.0295 0820 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
18:42:21.0342 0820 EventSystem - ok
18:42:21.0373 0820 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
18:42:21.0420 0820 exfat - ok
18:42:21.0420 0820 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:42:21.0498 0820 fastfat - ok
18:42:21.0544 0820 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
18:42:21.0607 0820 Fax - ok
18:42:21.0622 0820 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
18:42:21.0638 0820 fdc - ok
18:42:21.0700 0820 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
18:42:21.0763 0820 fdPHost - ok
18:42:21.0763 0820 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
18:42:21.0825 0820 FDResPub - ok
18:42:21.0841 0820 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:42:21.0856 0820 FileInfo - ok
18:42:21.0856 0820 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:42:21.0903 0820 Filetrace - ok
18:42:21.0950 0820 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
18:42:21.0966 0820 flpydisk - ok
18:42:21.0997 0820 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:42:22.0012 0820 FltMgr - ok
18:42:22.0044 0820 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
18:42:22.0137 0820 FontCache - ok
18:42:22.0184 0820 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:42:22.0184 0820 FontCache3.0.0.0 - ok
18:42:22.0215 0820 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:42:22.0231 0820 FsDepends - ok
18:42:22.0246 0820 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:42:22.0262 0820 Fs_Rec - ok
18:42:22.0293 0820 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:42:22.0309 0820 fvevol - ok
18:42:22.0324 0820 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
18:42:22.0340 0820 gagp30kx - ok
18:42:22.0387 0820 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
18:42:22.0449 0820 gpsvc - ok
18:42:22.0512 0820 [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
18:42:22.0512 0820 GREGService - ok
18:42:22.0543 0820 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:42:22.0574 0820 hcw85cir - ok
18:42:22.0621 0820 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:42:22.0652 0820 HdAudAddService - ok
18:42:22.0699 0820 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
18:42:22.0730 0820 HDAudBus - ok
18:42:22.0761 0820 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\drivers\HECIx64.sys
18:42:22.0777 0820 HECIx64 - ok
18:42:22.0808 0820 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
18:42:22.0808 0820 HidBatt - ok
18:42:22.0824 0820 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
18:42:22.0870 0820 HidBth - ok
18:42:22.0886 0820 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
18:42:22.0902 0820 HidIr - ok
18:42:22.0917 0820 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
18:42:22.0980 0820 hidserv - ok
18:42:23.0011 0820 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:42:23.0026 0820 HidUsb - ok
18:42:23.0073 0820 [ 9C66FEEFCA9D5DD712AB78D17BB16DA8 ] HitmanProScheduler C:\Program Files\HitmanPro\hmpsched.exe
18:42:23.0089 0820 HitmanProScheduler - ok
18:42:23.0120 0820 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:42:23.0182 0820 hkmsvc - ok
18:42:23.0214 0820 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:42:23.0260 0820 HomeGroupListener - ok
18:42:23.0292 0820 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:42:23.0323 0820 HomeGroupProvider - ok
18:42:23.0354 0820 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
18:42:23.0370 0820 HpSAMD - ok
18:42:23.0401 0820 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:42:23.0479 0820 HTTP - ok
18:42:23.0494 0820 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:42:23.0494 0820 hwpolicy - ok
18:42:23.0526 0820 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:42:23.0541 0820 i8042prt - ok
18:42:23.0588 0820 [ 1384872112E8E7FD5786ECEB8BDDF4C9 ] iaStor C:\Windows\system32\drivers\iaStor.sys
18:42:23.0619 0820 iaStor - ok
18:42:23.0682 0820 [ 6B24D1C3096DE796D15571079EA5E98C ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
18:42:23.0682 0820 IAStorDataMgrSvc - ok
18:42:23.0728 0820 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
18:42:23.0760 0820 iaStorV - ok
18:42:23.0806 0820 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:42:23.0853 0820 idsvc - ok
18:42:24.0134 0820 [ 31569A2E836C12014148BF7342716946 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
18:42:24.0430 0820 igfx - ok
18:42:24.0446 0820 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
18:42:24.0462 0820 iirsp - ok
18:42:24.0508 0820 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
18:42:24.0571 0820 IKEEXT - ok
18:42:24.0602 0820 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\DRIVERS\Impcd.sys
18:42:24.0664 0820 Impcd - ok
18:42:24.0742 0820 [ 235362D403D9D677514649D88DB31914 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:42:24.0836 0820 IntcAzAudAddService - ok
18:42:24.0898 0820 [ 03C74719D48056A1078F3A51CEB76BAA ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
18:42:24.0914 0820 IntcDAud - ok
18:42:24.0930 0820 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
18:42:24.0945 0820 intelide - ok
18:42:24.0961 0820 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:42:24.0976 0820 intelppm - ok
18:42:25.0008 0820 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:42:25.0070 0820 IPBusEnum - ok
18:42:25.0086 0820 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:42:25.0132 0820 IpFilterDriver - ok
18:42:25.0164 0820 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:42:25.0210 0820 iphlpsvc - ok
18:42:25.0242 0820 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
18:42:25.0273 0820 IPMIDRV - ok
18:42:25.0273 0820 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:42:25.0320 0820 IPNAT - ok
18:42:25.0351 0820 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:42:25.0382 0820 IRENUM - ok
18:42:25.0413 0820 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:42:25.0429 0820 isapnp - ok
18:42:25.0444 0820 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
18:42:25.0460 0820 iScsiPrt - ok
18:42:25.0507 0820 [ F415A88162D23977B5EDAE4F0410E903 ] IviRegMgr C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
18:42:25.0522 0820 IviRegMgr - ok
18:42:25.0569 0820 [ 37E053A2CF8F0082B689ED74106E0CEC ] k57nd60a C:\Windows\system32\DRIVERS\k57nd60a.sys
18:42:25.0585 0820 k57nd60a - ok
18:42:25.0632 0820 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
18:42:25.0647 0820 kbdclass - ok
18:42:25.0678 0820 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
18:42:25.0694 0820 kbdhid - ok
18:42:25.0710 0820 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
18:42:25.0725 0820 KeyIso - ok
18:42:25.0772 0820 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:42:25.0788 0820 KSecDD - ok
18:42:25.0834 0820 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:42:25.0850 0820 KSecPkg - ok
18:42:25.0881 0820 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
18:42:25.0944 0820 ksthunk - ok
18:42:25.0975 0820 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
18:42:26.0037 0820 KtmRm - ok
18:42:26.0084 0820 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
18:42:26.0131 0820 LanmanServer - ok
18:42:26.0193 0820 [ 6BCEE9C766815BFFF89DE7D81AF34CE1 ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
18:42:26.0209 0820 Live Updater Service - ok
18:42:26.0240 0820 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:42:26.0302 0820 lltdio - ok
18:42:26.0334 0820 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:42:26.0396 0820 lltdsvc - ok
18:42:26.0412 0820 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:42:26.0474 0820 lmhosts - ok
18:42:26.0552 0820 [ DBC1136A62BD4DECC3632DF650284C2E ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
18:42:26.0568 0820 LMS - ok
18:42:26.0599 0820 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
18:42:26.0614 0820 LSI_FC - ok
18:42:26.0630 0820 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
18:42:26.0646 0820 LSI_SAS - ok
18:42:26.0646 0820 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
18:42:26.0661 0820 LSI_SAS2 - ok
18:42:26.0677 0820 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
18:42:26.0692 0820 LSI_SCSI - ok
18:42:26.0724 0820 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
18:42:26.0770 0820 luafv - ok
18:42:26.0833 0820 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
18:42:26.0833 0820 MBAMProtector - ok
18:42:26.0895 0820 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:42:26.0911 0820 MBAMScheduler - ok
18:42:26.0926 0820 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:42:26.0973 0820 MBAMService - ok
18:42:27.0004 0820 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:42:27.0036 0820 Mcx2Svc - ok
18:42:27.0051 0820 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
18:42:27.0067 0820 megasas - ok
18:42:27.0114 0820 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
18:42:27.0129 0820 MegaSR - ok
18:42:27.0160 0820 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
18:42:27.0207 0820 MMCSS - ok
18:42:27.0223 0820 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
18:42:27.0270 0820 Modem - ok
18:42:27.0285 0820 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:42:27.0316 0820 monitor - ok
18:42:27.0348 0820 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:42:27.0363 0820 mouclass - ok
18:42:27.0379 0820 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:42:27.0426 0820 mouhid - ok
18:42:27.0441 0820 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:42:27.0457 0820 mountmgr - ok
18:42:27.0566 0820 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
18:42:27.0582 0820 MozillaMaintenance - ok
18:42:27.0628 0820 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
18:42:27.0660 0820 MpFilter - ok
18:42:27.0691 0820 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
18:42:27.0706 0820 mpio - ok
18:42:27.0722 0820 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:42:27.0769 0820 mpsdrv - ok
18:42:27.0800 0820 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
18:42:27.0862 0820 MpsSvc - ok
18:42:27.0894 0820 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:42:27.0925 0820 MRxDAV - ok
18:42:27.0956 0820 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:42:28.0003 0820 mrxsmb - ok
18:42:28.0018 0820 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:42:28.0050 0820 mrxsmb10 - ok
18:42:28.0065 0820 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:42:28.0081 0820 mrxsmb20 - ok
18:42:28.0096 0820 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
18:42:28.0112 0820 msahci - ok
18:42:28.0128 0820 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:42:28.0143 0820 msdsm - ok
18:42:28.0159 0820 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
18:42:28.0174 0820 MSDTC - ok
18:42:28.0206 0820 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:42:28.0252 0820 Msfs - ok
18:42:28.0268 0820 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:42:28.0315 0820 mshidkmdf - ok
18:42:28.0315 0820 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:42:28.0330 0820 msisadrv - ok
18:42:28.0362 0820 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:42:28.0424 0820 MSiSCSI - ok
18:42:28.0424 0820 msiserver - ok
18:42:28.0455 0820 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:42:28.0502 0820 MSKSSRV - ok
18:42:28.0611 0820 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
18:42:28.0611 0820 MsMpSvc - ok
18:42:28.0642 0820 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:42:28.0689 0820 MSPCLOCK - ok
18:42:28.0705 0820 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:42:28.0752 0820 MSPQM - ok
18:42:28.0783 0820 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:42:28.0798 0820 MsRPC - ok
18:42:28.0814 0820 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
18:42:28.0830 0820 mssmbios - ok
18:42:28.0830 0820 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:42:28.0892 0820 MSTEE - ok
18:42:28.0892 0820 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
18:42:28.0908 0820 MTConfig - ok
18:42:28.0923 0820 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
18:42:28.0939 0820 Mup - ok
18:42:28.0970 0820 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
18:42:29.0048 0820 napagent - ok
18:42:29.0095 0820 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:42:29.0126 0820 NativeWifiP - ok
18:42:29.0204 0820 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:42:29.0251 0820 NDIS - ok
18:42:29.0266 0820 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:42:29.0313 0820 NdisCap - ok
18:42:29.0344 0820 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:42:29.0391 0820 NdisTapi - ok
18:42:29.0407 0820 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:42:29.0469 0820 Ndisuio - ok
18:42:29.0485 0820 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:42:29.0547 0820 NdisWan - ok
18:42:29.0547 0820 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:42:29.0594 0820 NDProxy - ok
18:42:29.0610 0820 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:42:29.0672 0820 NetBIOS - ok
18:42:29.0688 0820 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:42:29.0734 0820 NetBT - ok
18:42:29.0750 0820 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
18:42:29.0766 0820 Netlogon - ok
18:42:29.0812 0820 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
18:42:29.0890 0820 Netman - ok
18:42:29.0937 0820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:42:29.0953 0820 NetMsmqActivator - ok
18:42:29.0968 0820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:42:29.0968 0820 NetPipeActivator - ok
18:42:30.0000 0820 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
18:42:30.0078 0820 netprofm - ok
18:42:30.0078 0820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:42:30.0093 0820 NetTcpActivator - ok
18:42:30.0109 0820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:42:30.0109 0820 NetTcpPortSharing - ok
18:42:30.0140 0820 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
18:42:30.0156 0820 nfrd960 - ok
18:42:30.0171 0820 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
18:42:30.0187 0820 NisDrv - ok
18:42:30.0265 0820 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
18:42:30.0280 0820 NisSrv - ok
18:42:30.0358 0820 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:42:30.0390 0820 NlaSvc - ok
18:42:30.0421 0820 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:42:30.0468 0820 Npfs - ok
18:42:30.0483 0820 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
18:42:30.0530 0820 nsi - ok
18:42:30.0530 0820 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:42:30.0592 0820 nsiproxy - ok
18:42:30.0655 0820 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:42:30.0733 0820 Ntfs - ok
18:42:30.0795 0820 [ 9A308FCDCCA98A15B6F62D36A272160E ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
18:42:30.0811 0820 NTI IScheduleSvc - ok
18:42:30.0842 0820 [ 28C59F594044CBF8598B18C927097091 ] NTIBackupSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
18:42:30.0842 0820 NTIBackupSvc - ok
18:42:30.0889 0820 [ 710263B44C1D1AEE07525A53401FBE48 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
18:42:30.0889 0820 NTIDrvr - ok
18:42:30.0920 0820 [ B8D903B2894FF9AFBD99CA51C35590D7 ] NTISchedulerSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
18:42:30.0936 0820 NTISchedulerSvc - ok
18:42:30.0951 0820 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
18:42:31.0014 0820 Null - ok
18:42:31.0045 0820 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:42:31.0060 0820 nvraid - ok
18:42:31.0092 0820 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:42:31.0107 0820 nvstor - ok
18:42:31.0123 0820 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:42:31.0138 0820 nv_agp - ok
18:42:31.0154 0820 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:42:31.0170 0820 ohci1394 - ok
18:42:31.0201 0820 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:42:31.0248 0820 p2pimsvc - ok
18:42:31.0279 0820 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
18:42:31.0294 0820 p2psvc - ok
18:42:31.0326 0820 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
18:42:31.0341 0820 Parport - ok
18:42:31.0372 0820 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:42:31.0388 0820 partmgr - ok
18:42:31.0404 0820 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:42:31.0435 0820 PcaSvc - ok
18:42:31.0466 0820 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
18:42:31.0482 0820 pci - ok
18:42:31.0497 0820 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
18:42:31.0513 0820 pciide - ok
18:42:31.0528 0820 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
18:42:31.0544 0820 pcmcia - ok
18:42:31.0560 0820 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
18:42:31.0560 0820 pcw - ok
18:42:31.0591 0820 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:42:31.0669 0820 PEAUTH - ok
18:42:31.0716 0820 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
18:42:31.0747 0820 PerfHost - ok
18:42:31.0809 0820 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
18:42:31.0903 0820 pla - ok
18:42:31.0981 0820 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:42:32.0059 0820 PlugPlay - ok
18:42:32.0074 0820 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:42:32.0106 0820 PNRPAutoReg - ok
18:42:32.0121 0820 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:42:32.0137 0820 PNRPsvc - ok
18:42:32.0184 0820 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:42:32.0246 0820 PolicyAgent - ok
18:42:32.0277 0820 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
18:42:32.0340 0820 Power - ok
18:42:32.0386 0820 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:42:32.0433 0820 PptpMiniport - ok
18:42:32.0464 0820 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
18:42:32.0480 0820 Processor - ok
18:42:32.0527 0820 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
18:42:32.0558 0820 ProfSvc - ok
18:42:32.0589 0820 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:42:32.0605 0820 ProtectedStorage - ok
18:42:32.0620 0820 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:42:32.0683 0820 Psched - ok
18:42:32.0714 0820 [ F036CFB275D0C55F4E45FBBF5F98B3C8 ] PSI_SVC_2 C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
18:42:32.0792 0820 PSI_SVC_2 - ok
18:42:32.0839 0820 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
18:42:32.0901 0820 ql2300 - ok
18:42:32.0917 0820 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
18:42:32.0932 0820 ql40xx - ok
18:42:32.0948 0820 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
18:42:32.0979 0820 QWAVE - ok
18:42:32.0995 0820 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:42:33.0026 0820 QWAVEdrv - ok
18:42:33.0026 0820 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:42:33.0088 0820 RasAcd - ok
18:42:33.0135 0820 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:42:33.0182 0820 RasAgileVpn - ok
18:42:33.0213 0820 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
18:42:33.0260 0820 RasAuto - ok
18:42:33.0291 0820 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:42:33.0338 0820 Rasl2tp - ok
18:42:33.0354 0820 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
18:42:33.0400 0820 RasMan - ok
18:42:33.0400 0820 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:42:33.0447 0820 RasPppoe - ok
18:42:33.0463 0820 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:42:33.0525 0820 RasSstp - ok
18:42:33.0556 0820 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:42:33.0619 0820 rdbss - ok
18:42:33.0619 0820 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
18:42:33.0650 0820 rdpbus - ok
18:42:33.0666 0820 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:42:33.0712 0820 RDPCDD - ok
18:42:33.0728 0820 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:42:33.0790 0820 RDPENCDD - ok
18:42:33.0790 0820 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:42:33.0837 0820 RDPREFMP - ok
18:42:33.0868 0820 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:42:33.0900 0820 RDPWD - ok
18:42:33.0946 0820 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:42:33.0978 0820 rdyboost - ok
18:42:34.0024 0820 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:42:34.0087 0820 RemoteAccess - ok
18:42:34.0180 0820 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:42:34.0258 0820 RemoteRegistry - ok
18:42:34.0274 0820 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:42:34.0336 0820 RpcEptMapper - ok
18:42:34.0368 0820 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
18:42:34.0399 0820 RpcLocator - ok
18:42:34.0430 0820 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
18:42:34.0477 0820 RpcSs - ok
18:42:34.0508 0820 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:42:34.0555 0820 rspndr - ok
18:42:34.0602 0820 [ 763AE0C6D9DF4C24B7E2C26036A8188A ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
18:42:34.0617 0820 RSUSBSTOR - ok
18:42:34.0664 0820 [ 7CB9F0FDD730F4A4ECF6CDE15EA12E8A ] RS_Service C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
18:42:34.0680 0820 RS_Service - ok
18:42:34.0695 0820 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
18:42:34.0695 0820 SamSs - ok
18:42:34.0711 0820 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:42:34.0742 0820 sbp2port - ok
18:42:34.0758 0820 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:42:34.0804 0820 SCardSvr - ok
18:42:34.0836 0820 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:42:34.0867 0820 scfilter - ok
18:42:34.0898 0820 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
18:42:34.0976 0820 Schedule - ok
18:42:35.0007 0820 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
18:42:35.0054 0820 SCPolicySvc - ok
18:42:35.0054 0820 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:42:35.0101 0820 SDRSVC - ok
18:42:35.0148 0820 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:42:35.0210 0820 secdrv - ok
18:42:35.0241 0820 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
18:42:35.0288 0820 seclogon - ok
18:42:35.0288 0820 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
18:42:35.0350 0820 SENS - ok
18:42:35.0366 0820 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:42:35.0397 0820 SensrSvc - ok
18:42:35.0428 0820 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
18:42:35.0444 0820 Serenum - ok
18:42:35.0475 0820 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
18:42:35.0506 0820 Serial - ok
18:42:35.0506 0820 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
18:42:35.0538 0820 sermouse - ok
18:42:35.0569 0820 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
18:42:35.0631 0820 SessionEnv - ok
18:42:35.0647 0820 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:42:35.0678 0820 sffdisk - ok
18:42:35.0694 0820 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:42:35.0725 0820 sffp_mmc - ok
18:42:35.0740 0820 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:42:35.0756 0820 sffp_sd - ok
18:42:35.0756 0820 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
18:42:35.0787 0820 sfloppy - ok
18:42:35.0818 0820 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:42:35.0881 0820 SharedAccess - ok
18:42:35.0928 0820 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:42:35.0990 0820 ShellHWDetection - ok
18:42:36.0021 0820 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
18:42:36.0037 0820 SiSRaid2 - ok
18:42:36.0037 0820 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
18:42:36.0052 0820 SiSRaid4 - ok
18:42:36.0084 0820 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:42:36.0130 0820 Smb - ok
18:42:36.0146 0820 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:42:36.0177 0820 SNMPTRAP - ok
18:42:36.0193 0820 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
18:42:36.0208 0820 spldr - ok
18:42:36.0255 0820 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
18:42:36.0286 0820 Spooler - ok
18:42:36.0396 0820 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
18:42:36.0536 0820 sppsvc - ok
18:42:36.0552 0820 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:42:36.0598 0820 sppuinotify - ok
18:42:36.0645 0820 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
18:42:36.0692 0820 srv - ok
18:42:36.0723 0820 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:42:36.0739 0820 srv2 - ok
18:42:36.0754 0820 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:42:36.0770 0820 srvnet - ok
18:42:36.0817 0820 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:42:36.0879 0820 SSDPSRV - ok
18:42:36.0895 0820 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:42:36.0942 0820 SstpSvc - ok
18:42:36.0973 0820 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
18:42:36.0988 0820 stexstor - ok
18:42:37.0035 0820 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
18:42:37.0082 0820 stisvc - ok
18:42:37.0098 0820 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
18:42:37.0113 0820 swenum - ok
18:42:37.0129 0820 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
18:42:37.0191 0820 swprv - ok
18:42:37.0238 0820 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
18:42:37.0332 0820 SysMain - ok
18:42:37.0394 0820 [ 1A78D70D7A02C920A18843426682899B ] SystemStore C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe
18:42:37.0410 0820 SystemStore ( UnsignedFile.Multi.Generic ) - warning
18:42:37.0410 0820 SystemStore - detected UnsignedFile.Multi.Generic (1)
18:42:37.0534 0820 [ 7017BC8488459E3B7BE018B84285CD13 ] SystemStoreService C:\Program Files (x86)\SelfUpdater\SystemStore.exe
18:42:37.0581 0820 SystemStoreService ( UnsignedFile.Multi.Generic ) - warning
18:42:37.0581 0820 SystemStoreService - detected UnsignedFile.Multi.Generic (1)
18:42:37.0612 0820 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:42:37.0644 0820 TabletInputService - ok
18:42:37.0659 0820 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:42:37.0722 0820 TapiSrv - ok
18:42:37.0722 0820 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
18:42:37.0768 0820 TBS - ok
18:42:37.0846 0820 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:42:37.0924 0820 Tcpip - ok
18:42:38.0034 0820 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:42:38.0080 0820 TCPIP6 - ok
18:42:38.0127 0820 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:42:38.0143 0820 tcpipreg - ok
18:42:38.0174 0820 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:42:38.0221 0820 TDPIPE - ok
18:42:38.0268 0820 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:42:38.0283 0820 TDTCP - ok
18:42:38.0314 0820 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:42:38.0377 0820 tdx - ok
18:42:38.0392 0820 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
18:42:38.0408 0820 TermDD - ok
18:42:38.0455 0820 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
18:42:38.0517 0820 TermService - ok
18:42:38.0533 0820 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
18:42:38.0548 0820 Themes - ok
18:42:38.0580 0820 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
18:42:38.0626 0820 THREADORDER - ok
18:42:38.0658 0820 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
18:42:38.0704 0820 TrkWks - ok
18:42:38.0767 0820 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:42:38.0814 0820 TrustedInstaller - ok
18:42:38.0829 0820 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:42:38.0892 0820 tssecsrv - ok
18:42:38.0923 0820 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
18:42:38.0954 0820 TsUsbFlt - ok
18:42:38.0970 0820 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
18:42:38.0970 0820 TsUsbGD - ok
18:42:39.0188 0820 [ E8985332F611F56ADBCFF987E7D67D51 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
18:42:39.0282 0820 TuneUp.UtilitiesSvc - ok
18:42:39.0328 0820 [ 7BC3381C0713F613B31ACDE38B71CB53 ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys
18:42:39.0344 0820 TuneUpUtilitiesDrv - ok
18:42:39.0375 0820 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:42:39.0438 0820 tunnel - ok
18:42:39.0469 0820 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
18:42:39.0484 0820 uagp35 - ok
18:42:39.0516 0820 [ 40079B0B801C5432BA435B5AD61CE6E3 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
18:42:39.0531 0820 UBHelper - ok
18:42:39.0547 0820 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:42:39.0625 0820 udfs - ok
18:42:39.0640 0820 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:42:39.0656 0820 UI0Detect - ok
18:42:39.0687 0820 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:42:39.0687 0820 uliagpkx - ok
18:42:39.0750 0820 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:42:39.0765 0820 umbus - ok
18:42:39.0765 0820 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
18:42:39.0781 0820 UmPass - ok
18:42:39.0890 0820 [ 7466809E6DA561D60C2F1CE8EDE3C73F ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
18:42:39.0999 0820 UNS - ok
18:42:40.0015 0820 Update-Service - ok
18:42:40.0077 0820 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
18:42:40.0124 0820 upnphost - ok
18:42:40.0155 0820 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:42:40.0186 0820 usbccgp - ok
18:42:40.0218 0820 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:42:40.0233 0820 usbcir - ok
18:42:40.0264 0820 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
18:42:40.0311 0820 usbehci - ok
18:42:40.0342 0820 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:42:40.0358 0820 usbhub - ok
18:42:40.0374 0820 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:42:40.0405 0820 usbohci - ok
18:42:40.0436 0820 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:42:40.0467 0820 usbprint - ok
18:42:40.0498 0820 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
18:42:40.0514 0820 usbscan - ok
18:42:40.0545 0820 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:42:40.0592 0820 USBSTOR - ok
18:42:40.0639 0820 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
18:42:40.0654 0820 usbuhci - ok
18:42:40.0686 0820 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
18:42:40.0732 0820 usbvideo - ok
18:42:40.0748 0820 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
18:42:40.0810 0820 UxSms - ok
18:42:40.0826 0820 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
18:42:40.0842 0820 VaultSvc - ok
18:42:40.0857 0820 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
18:42:40.0873 0820 vdrvroot - ok
18:42:40.0904 0820 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
18:42:40.0966 0820 vds - ok
18:42:40.0998 0820 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:42:41.0013 0820 vga - ok
18:42:41.0013 0820 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
18:42:41.0076 0820 VgaSave - ok
18:42:41.0091 0820 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
18:42:41.0122 0820 vhdmp - ok
18:42:41.0122 0820 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
18:42:41.0138 0820 viaide - ok
18:42:41.0154 0820 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:42:41.0169 0820 volmgr - ok
18:42:41.0185 0820 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:42:41.0200 0820 volmgrx - ok
18:42:41.0216 0820 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:42:41.0247 0820 volsnap - ok
18:42:41.0278 0820 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
18:42:41.0294 0820 vsmraid - ok
18:42:41.0356 0820 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
18:42:41.0450 0820 VSS - ok
18:42:41.0466 0820 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
18:42:41.0497 0820 vwifibus - ok
18:42:41.0544 0820 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
18:42:41.0575 0820 vwififlt - ok
18:42:41.0590 0820 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
18:42:41.0637 0820 W32Time - ok
18:42:41.0668 0820 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
18:42:41.0700 0820 WacomPen - ok
18:42:41.0731 0820 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:42:41.0793 0820 WANARP - ok
18:42:41.0824 0820 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:42:41.0856 0820 Wanarpv6 - ok
18:42:41.0918 0820 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
18:42:42.0012 0820 wbengine - ok
18:42:42.0027 0820 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:42:42.0043 0820 WbioSrvc - ok
18:42:42.0058 0820 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:42:42.0090 0820 wcncsvc - ok
18:42:42.0105 0820 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:42:42.0136 0820 WcsPlugInService - ok
18:42:42.0168 0820 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
18:42:42.0183 0820 Wd - ok
18:42:42.0230 0820 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:42:42.0277 0820 Wdf01000 - ok
18:42:42.0308 0820 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:42:42.0386 0820 WdiServiceHost - ok
18:42:42.0402 0820 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:42:42.0417 0820 WdiSystemHost - ok
18:42:42.0433 0820 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
18:42:42.0589 0820 WebClient - ok
18:42:42.0589 0820 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:42:42.0714 0820 Wecsvc - ok
18:42:42.0729 0820 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:42:42.0823 0820 wercplsupport - ok
18:42:42.0838 0820 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
18:42:43.0010 0820 WerSvc - ok
18:42:43.0088 0820 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:42:43.0135 0820 WfpLwf - ok
18:42:43.0166 0820 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:42:43.0182 0820 WIMMount - ok
18:42:43.0197 0820 WinDefend - ok
18:42:43.0213 0820 WinHttpAutoProxySvc - ok
18:42:43.0244 0820 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:42:43.0306 0820 Winmgmt - ok
18:42:43.0369 0820 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
18:42:43.0478 0820 WinRM - ok
18:42:43.0572 0820 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:42:43.0603 0820 WinUsb - ok
18:42:43.0650 0820 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
18:42:43.0712 0820 Wlansvc - ok
18:42:43.0774 0820 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
18:42:43.0790 0820 wlcrasvc - ok
18:42:43.0884 0820 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:42:43.0977 0820 wlidsvc - ok
18:42:44.0008 0820 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
18:42:44.0024 0820 WmiAcpi - ok
18:42:44.0055 0820 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:42:44.0118 0820 wmiApSrv - ok
18:42:44.0164 0820 WMPNetworkSvc - ok
18:42:44.0196 0820 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:42:44.0211 0820 WPCSvc - ok
18:42:44.0227 0820 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:42:44.0242 0820 WPDBusEnum - ok
18:42:44.0258 0820 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:42:44.0305 0820 ws2ifsl - ok
18:42:44.0336 0820 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
18:42:44.0367 0820 wscsvc - ok
18:42:44.0383 0820 WSearch - ok
18:42:44.0445 0820 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
18:42:44.0554 0820 wuauserv - ok
18:42:44.0586 0820 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:42:44.0617 0820 WudfPf - ok
18:42:44.0679 0820 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:42:44.0695 0820 WUDFRd - ok
18:42:44.0726 0820 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:42:44.0757 0820 wudfsvc - ok
18:42:44.0804 0820 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
18:42:44.0835 0820 WwanSvc - ok
18:42:44.0866 0820 ================ Scan global ===============================
18:42:44.0898 0820 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:42:44.0929 0820 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
18:42:44.0944 0820 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
18:42:44.0976 0820 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:42:45.0007 0820 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:42:45.0007 0820 [Global] - ok
18:42:45.0007 0820 ================ Scan MBR ==================================
18:42:45.0022 0820 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:42:45.0381 0820 \Device\Harddisk0\DR0 - ok
18:42:45.0381 0820 ================ Scan VBR ==================================
18:42:45.0412 0820 [ 8751ECA5DDCAE90507C1A0AFD7C9061C ] \Device\Harddisk0\DR0\Partition1
18:42:45.0412 0820 \Device\Harddisk0\DR0\Partition1 - ok
18:42:45.0428 0820 [ 1353556445B20DB18622457F3C4C1673 ] \Device\Harddisk0\DR0\Partition2
18:42:45.0428 0820 \Device\Harddisk0\DR0\Partition2 - ok
18:42:45.0428 0820 ============================================================
18:42:45.0428 0820 Scan finished
18:42:45.0428 0820 ============================================================
18:42:45.0444 5048 Detected object count: 2
18:42:45.0444 5048 Actual detected object count: 2
18:42:58.0704 5048 SystemStore ( UnsignedFile.Multi.Generic ) - skipped by user
18:42:58.0704 5048 SystemStore ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:42:58.0704 5048 SystemStoreService ( UnsignedFile.Multi.Generic ) - skipped by user
18:42:58.0704 5048 SystemStoreService ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:43:15.0583 1096 Deinitialize success


den ransom-virus hab ich hoffentlich erledigt. Ein Bekannter hat unerwartet Hilfe leisten können. Dennoch sind 2 Funde von diesem Programm leicht beunruhigend.
Zur Info: Mir wurde das Programm hitmanPro nahe gelegt, um den Schädling zu entfernen. Weitere Scans mit OTL, Avira, hitmanPro, Microsoft security essential und Malewarebyte waren alle negativ( 0 Funde). scheint also wieder alles zu laufen (auch der Taskmanager). Die 2 Funde oben scheinen was anderes zu sein,wie soll ich mit denen weiterverfahren?

Hi,
warum fragt man irgendwo nach Hilfe, wenn man dann sowieso tut was man will?
wo sind die Logs mit Funden? (hitman zb)

hallo. tut mir leid,normalerweise wäre ich auch ohne Hilfe von dir aufgeschmissen gewesen.
Es hat sich aber die Hilfe eines Experten vor Ort ergeben, der seinen Urlaub abbrechen musste. Wie du vielleicht ahnst, muss ich mit meinem Gerät arbeiten, also war es für mich angenehmer, wenn ein bekannter Experte sich der Sache schnell annimmt. Ich schätze euer engangement hier und zweifle nicht an eurem Fachwissen, nur war mein Lösungsweg angenehmer für mich und meiner Arbeit. Hoffe, du bist nicht all zu sauer und verstehst, dass ich mir so hab helfen lassen.# Also sag ich danke für deine Hilfsbereitschaft und bitte dich um Verzeihung.
MfG farrson

Hi, musst du wissen wie du das machst, mit der entfernung von Dateien ists aber nicht getan, die Sicherheitslücken exsistieren noch immer