Unerwünschte Werbe-Links zu de.clickcompare

Tina_aus_S · 20.02.2013, 10:06

Hallo liebes Trojanerboard-Team,

ich habe ein Problem, dass vermutlich gleich/ähnlich diesem hier ist:
http://www.trojaner-board.de/130819-...entfernen.html

OTL hängt sich bei mir ebenfalls auf.

Kann ich bedenkenlos der beschriebenen Anleitung folgen? Ich bin nicht besonders erfahren in diesen Dingen und bin Euch daher für Eure Hilfe sehr, sehr dankbar!

Viele Grüße
Tina

Anbei die anderen Logfiles:

Defogger:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 09:48 on 20/02/2013 (User)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

Malwarebytes:
Malwarebytes Anti-Malware (Test) 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.02.19.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: XXX [Administrator]

Schutz: Aktiviert

19.02.2013 23:09:16
MBAM-log-2013-02-19 (23-16-21).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 225931
Laufzeit: 6 Minute(n), 38 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS (PUP.CrossFire.SA) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstalledBrowserExtensions\215 Apps|4479 (PUP.CrossFire.SA) -> Daten: Giant Savings -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

GMER:GMER Logfile:

Code:

ATTFilter

GMER 2.1.18952 - hxxp://www.gmer.net
Rootkit scan 2013-02-20 09:40:48
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD3200BEVT-08A23T1 rev.02.01A02 298,09GB
Running: GMER_2.1.18952.exe; Driver: C:\Users\User\AppData\Local\Temp\kxlyrpog.sys


---- User code sections - GMER 2.1 ----

.text  C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe[2676] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69   0000000077281465 2 bytes [28, 77]
.text  C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe[2676] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155  00000000772814bb 2 bytes [28, 77]
.text  ...                                                                                                                   * 2

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\70f3954ab068                                           
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\70f3954ab068 (not active ControlSet)                       

---- EOF - GMER 2.1 ----

--- --- ---

markusg · 20.02.2013, 12:10

Hi,
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Tina_aus_S · 20.02.2013, 12:49

Hallo,

Vielen Dank für die super-schnelle Rückantwort.

Ergebnis war: No threats found.

Report:
12:40:09.0394 1252 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
12:40:09.0530 1252 ============================================================
12:40:09.0530 1252 Current date / time: 2013/02/20 12:40:09.0530
12:40:09.0530 1252 SystemInfo:
12:40:09.0530 1252
12:40:09.0530 1252 OS Version: 6.1.7601 ServicePack: 1.0
12:40:09.0530 1252 Product type: Workstation
12:40:09.0530 1252 ComputerName: XXX
12:40:09.0531 1252 UserName: User
12:40:09.0531 1252 Windows directory: C:\Windows
12:40:09.0531 1252 System windows directory: C:\Windows
12:40:09.0531 1252 Running under WOW64
12:40:09.0531 1252 Processor architecture: Intel x64
12:40:09.0531 1252 Number of processors: 4
12:40:09.0531 1252 Page size: 0x1000
12:40:09.0531 1252 Boot type: Normal boot
12:40:09.0531 1252 ============================================================
12:40:11.0555 1252 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0xA181, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
12:40:11.0573 1252 ============================================================
12:40:11.0573 1252 \Device\Harddisk0\DR0:
12:40:11.0574 1252 MBR partitions:
12:40:11.0574 1252 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
12:40:11.0574 1252 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x190AB800
12:40:11.0574 1252 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x190DE000, BlocksNum 0xC34F800
12:40:11.0574 1252 ============================================================
12:40:11.0632 1252 C: <-> \Device\Harddisk0\DR0\Partition2
12:40:11.0746 1252 D: <-> \Device\Harddisk0\DR0\Partition3
12:40:11.0746 1252 ============================================================
12:40:11.0747 1252 Initialize success
12:40:11.0747 1252 ============================================================
12:41:00.0736 4360 ============================================================
12:41:00.0737 4360 Scan started
12:41:00.0737 4360 Mode: Manual; SigCheck; TDLFS;
12:41:00.0737 4360 ============================================================
12:41:03.0448 4360 ================ Scan system memory ========================
12:41:03.0448 4360 System memory - ok
12:41:03.0449 4360 ================ Scan services =============================
12:41:03.0879 4360 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
12:41:03.0985 4360 1394ohci - ok
12:41:04.0020 4360 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
12:41:04.0052 4360 ACPI - ok
12:41:04.0076 4360 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
12:41:04.0109 4360 AcpiPmi - ok
12:41:04.0157 4360 [ E5568164C070A4988BD79C896920B3C6 ] acsock C:\Windows\system32\DRIVERS\acsock64.sys
12:41:04.0208 4360 acsock - ok
12:41:04.0353 4360 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
12:41:04.0373 4360 AdobeARMservice - ok
12:41:04.0509 4360 [ 563CDCFEEAEF97163E206AF71A61AA6E ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
12:41:04.0534 4360 AdobeFlashPlayerUpdateSvc - ok
12:41:04.0583 4360 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
12:41:04.0630 4360 adp94xx - ok
12:41:04.0666 4360 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
12:41:04.0686 4360 adpahci - ok
12:41:04.0692 4360 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
12:41:04.0707 4360 adpu320 - ok
12:41:04.0739 4360 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:41:04.0774 4360 AeLookupSvc - ok
12:41:04.0831 4360 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
12:41:04.0881 4360 AFD - ok
12:41:04.0917 4360 [ 685CDCC64481C1918F59751C30412C50 ] AFSLibrary C:\Windows\system32\DRIVERS\AFSRedirLib.sys
12:41:04.0933 4360 AFSLibrary - ok
12:41:04.0958 4360 [ BF3580CC9C6AF04AFEAC0FE550311F00 ] AFSRedirector C:\Windows\system32\DRIVERS\AFSRedir.sys
12:41:04.0971 4360 AFSRedirector - ok
12:41:05.0007 4360 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
12:41:05.0020 4360 agp440 - ok
12:41:05.0039 4360 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
12:41:05.0068 4360 ALG - ok
12:41:05.0086 4360 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
12:41:05.0098 4360 aliide - ok
12:41:05.0124 4360 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
12:41:05.0136 4360 amdide - ok
12:41:05.0169 4360 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:41:05.0195 4360 AmdK8 - ok
12:41:05.0214 4360 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
12:41:05.0241 4360 AmdPPM - ok
12:41:05.0270 4360 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:41:05.0285 4360 amdsata - ok
12:41:05.0303 4360 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
12:41:05.0319 4360 amdsbs - ok
12:41:05.0332 4360 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:41:05.0346 4360 amdxata - ok
12:41:05.0388 4360 [ 4DE0D5D747A73797C95A97DCCE5018B5 ] androidusb C:\Windows\system32\Drivers\ssadadb.sys
12:41:05.0430 4360 androidusb - ok
12:41:05.0540 4360 [ 459465DA28E49B358ECFE0D788F328F4 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
12:41:05.0559 4360 AntiVirSchedulerService - ok
12:41:05.0614 4360 [ BCDD17E8469D647A71B347C4B6F86685 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
12:41:05.0632 4360 AntiVirService - ok
12:41:05.0718 4360 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
12:41:05.0779 4360 AppID - ok
12:41:05.0798 4360 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:41:05.0831 4360 AppIDSvc - ok
12:41:05.0851 4360 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
12:41:05.0884 4360 Appinfo - ok
12:41:05.0944 4360 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
12:41:06.0005 4360 AppMgmt - ok
12:41:06.0059 4360 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
12:41:06.0080 4360 arc - ok
12:41:06.0113 4360 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
12:41:06.0124 4360 arcsas - ok
12:41:06.0261 4360 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
12:41:06.0278 4360 aspnet_state - ok
12:41:06.0350 4360 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:41:06.0409 4360 AsyncMac - ok
12:41:06.0438 4360 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
12:41:06.0447 4360 atapi - ok
12:41:06.0498 4360 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:41:06.0573 4360 AudioEndpointBuilder - ok
12:41:06.0593 4360 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
12:41:06.0632 4360 AudioSrv - ok
12:41:06.0665 4360 [ BFE9598EBC3934CF8D876A303849C896 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
12:41:06.0685 4360 avgntflt - ok
12:41:06.0712 4360 [ F74D86A9FB35FA5F24627B8DBBF3A9A4 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
12:41:06.0725 4360 avipbb - ok
12:41:06.0738 4360 [ CD0E732347BF09717E0BDDC0C66699AB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
12:41:06.0750 4360 avkmgr - ok
12:41:06.0789 4360 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:41:06.0833 4360 AxInstSV - ok
12:41:06.0881 4360 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
12:41:06.0933 4360 b06bdrv - ok
12:41:06.0974 4360 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
12:41:07.0009 4360 b57nd60a - ok
12:41:07.0065 4360 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
12:41:07.0085 4360 BDESVC - ok
12:41:07.0091 4360 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
12:41:07.0147 4360 Beep - ok
12:41:07.0199 4360 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
12:41:07.0277 4360 BFE - ok
12:41:07.0302 4360 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
12:41:07.0359 4360 BITS - ok
12:41:07.0380 4360 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:41:07.0390 4360 blbdrive - ok
12:41:07.0421 4360 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:41:07.0446 4360 bowser - ok
12:41:07.0465 4360 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:41:07.0540 4360 BrFiltLo - ok
12:41:07.0554 4360 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:41:07.0594 4360 BrFiltUp - ok
12:41:07.0625 4360 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
12:41:07.0645 4360 Browser - ok
12:41:07.0666 4360 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:41:07.0721 4360 Brserid - ok
12:41:07.0743 4360 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:41:07.0776 4360 BrSerWdm - ok
12:41:07.0800 4360 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:41:07.0824 4360 BrUsbMdm - ok
12:41:07.0854 4360 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:41:07.0890 4360 BrUsbSer - ok
12:41:07.0933 4360 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
12:41:07.0949 4360 BthEnum - ok
12:41:07.0970 4360 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:41:07.0996 4360 BTHMODEM - ok
12:41:08.0026 4360 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
12:41:08.0047 4360 BthPan - ok
12:41:08.0068 4360 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
12:41:08.0109 4360 BTHPORT - ok
12:41:08.0159 4360 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
12:41:08.0203 4360 bthserv - ok
12:41:08.0212 4360 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
12:41:08.0223 4360 BTHUSB - ok
12:41:08.0249 4360 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:41:08.0292 4360 cdfs - ok
12:41:08.0341 4360 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys
12:41:08.0366 4360 cdrom - ok
12:41:08.0402 4360 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
12:41:08.0458 4360 CertPropSvc - ok
12:41:08.0475 4360 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
12:41:08.0502 4360 circlass - ok
12:41:08.0550 4360 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
12:41:08.0582 4360 CLFS - ok
12:41:08.0659 4360 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:41:08.0692 4360 clr_optimization_v2.0.50727_32 - ok
12:41:08.0730 4360 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:41:08.0750 4360 clr_optimization_v2.0.50727_64 - ok
12:41:08.0923 4360 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:41:08.0952 4360 clr_optimization_v4.0.30319_32 - ok
12:41:08.0969 4360 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:41:08.0986 4360 clr_optimization_v4.0.30319_64 - ok
12:41:09.0031 4360 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:41:09.0054 4360 CmBatt - ok
12:41:09.0085 4360 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
12:41:09.0097 4360 cmdide - ok
12:41:09.0135 4360 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
12:41:09.0162 4360 CNG - ok
12:41:09.0181 4360 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:41:09.0193 4360 Compbatt - ok
12:41:09.0228 4360 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
12:41:09.0246 4360 CompositeBus - ok
12:41:09.0257 4360 COMSysApp - ok
12:41:09.0278 4360 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
12:41:09.0291 4360 crcdisk - ok
12:41:09.0330 4360 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:41:09.0347 4360 CryptSvc - ok
12:41:09.0387 4360 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
12:41:09.0422 4360 CSC - ok
12:41:09.0443 4360 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
12:41:09.0467 4360 CscService - ok
12:41:09.0488 4360 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
12:41:09.0530 4360 DcomLaunch - ok
12:41:09.0552 4360 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
12:41:09.0603 4360 defragsvc - ok
12:41:09.0652 4360 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:41:09.0689 4360 DfsC - ok
12:41:09.0722 4360 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
12:41:09.0751 4360 Dhcp - ok
12:41:09.0783 4360 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
12:41:09.0855 4360 discache - ok
12:41:09.0879 4360 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
12:41:09.0890 4360 Disk - ok
12:41:09.0926 4360 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:41:09.0946 4360 Dnscache - ok
12:41:09.0971 4360 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
12:41:10.0032 4360 dot3svc - ok
12:41:10.0056 4360 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
12:41:10.0089 4360 DPS - ok
12:41:10.0129 4360 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:41:10.0171 4360 drmkaud - ok
12:41:10.0229 4360 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:41:10.0286 4360 DXGKrnl - ok
12:41:10.0327 4360 [ BF3AF22106627DFF3EF7BAB133C969EA ] e1kexpress C:\Windows\system32\DRIVERS\e1k62x64.sys
12:41:10.0340 4360 e1kexpress - ok
12:41:10.0374 4360 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
12:41:10.0407 4360 EapHost - ok
12:41:10.0504 4360 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
12:41:10.0618 4360 ebdrv - ok
12:41:10.0657 4360 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
12:41:10.0680 4360 EFS - ok
12:41:10.0733 4360 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:41:10.0786 4360 ehRecvr - ok
12:41:10.0812 4360 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
12:41:10.0850 4360 ehSched - ok
12:41:10.0909 4360 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
12:41:10.0956 4360 elxstor - ok
12:41:10.0972 4360 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
12:41:10.0999 4360 ErrDev - ok
12:41:11.0067 4360 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
12:41:11.0121 4360 EventSystem - ok
12:41:11.0254 4360 [ 6EB16C7286FBCD3AB206743BA813EC48 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
12:41:11.0303 4360 EvtEng - ok
12:41:11.0340 4360 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
12:41:11.0414 4360 exfat - ok
12:41:11.0437 4360 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:41:11.0472 4360 fastfat - ok
12:41:11.0529 4360 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
12:41:11.0589 4360 Fax - ok
12:41:11.0606 4360 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:41:11.0635 4360 fdc - ok
12:41:11.0679 4360 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
12:41:11.0744 4360 fdPHost - ok
12:41:11.0764 4360 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
12:41:11.0798 4360 FDResPub - ok
12:41:11.0814 4360 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:41:11.0825 4360 FileInfo - ok
12:41:11.0834 4360 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:41:11.0868 4360 Filetrace - ok
12:41:11.0883 4360 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:41:11.0905 4360 flpydisk - ok
12:41:11.0950 4360 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:41:11.0965 4360 FltMgr - ok
12:41:12.0032 4360 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
12:41:12.0133 4360 FontCache - ok
12:41:12.0228 4360 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:41:12.0244 4360 FontCache3.0.0.0 - ok
12:41:12.0280 4360 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:41:12.0300 4360 FsDepends - ok
12:41:12.0325 4360 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:41:12.0342 4360 Fs_Rec - ok
12:41:12.0384 4360 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:41:12.0410 4360 fvevol - ok
12:41:12.0433 4360 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
12:41:12.0451 4360 gagp30kx - ok
12:41:12.0490 4360 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
12:41:12.0554 4360 gpsvc - ok
12:41:12.0569 4360 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:41:12.0581 4360 hcw85cir - ok
12:41:12.0626 4360 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:41:12.0644 4360 HdAudAddService - ok
12:41:12.0670 4360 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
12:41:12.0685 4360 HDAudBus - ok
12:41:12.0728 4360 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
12:41:12.0745 4360 HECIx64 - ok
12:41:12.0759 4360 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:41:12.0773 4360 HidBatt - ok
12:41:12.0793 4360 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
12:41:12.0812 4360 HidBth - ok
12:41:12.0831 4360 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
12:41:12.0864 4360 HidIr - ok
12:41:12.0888 4360 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
12:41:12.0933 4360 hidserv - ok
12:41:12.0981 4360 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:41:13.0002 4360 HidUsb - ok
12:41:13.0044 4360 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:41:13.0103 4360 hkmsvc - ok
12:41:13.0145 4360 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:41:13.0181 4360 HomeGroupListener - ok
12:41:13.0214 4360 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:41:13.0237 4360 HomeGroupProvider - ok
12:41:13.0273 4360 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
12:41:13.0292 4360 HpSAMD - ok
12:41:13.0339 4360 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:41:13.0408 4360 HTTP - ok
12:41:13.0430 4360 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:41:13.0439 4360 hwpolicy - ok
12:41:13.0476 4360 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
12:41:13.0500 4360 i8042prt - ok
12:41:13.0516 4360 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:41:13.0537 4360 iaStorV - ok
12:41:13.0561 4360 [ 16A43ABB5A334C7842F4A60CF9FF8041 ] IBMPMDRV C:\Windows\system32\DRIVERS\ibmpmdrv.sys
12:41:13.0572 4360 IBMPMDRV - ok
12:41:13.0587 4360 [ 32B778CCF1F3B1458EDDA98FB8431EAC ] IBMPMSVC C:\Windows\system32\ibmpmsvc.exe
12:41:13.0597 4360 IBMPMSVC - ok
12:41:13.0652 4360 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:41:13.0703 4360 idsvc - ok
12:41:13.0733 4360 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
12:41:13.0742 4360 iirsp - ok
12:41:13.0784 4360 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
12:41:13.0883 4360 IKEEXT - ok
12:41:13.0935 4360 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\DRIVERS\Impcd.sys
12:41:13.0971 4360 Impcd - ok
12:41:14.0005 4360 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
12:41:14.0017 4360 intelide - ok
12:41:14.0069 4360 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:41:14.0091 4360 intelppm - ok
12:41:14.0139 4360 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:41:14.0202 4360 IPBusEnum - ok
12:41:14.0226 4360 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:41:14.0273 4360 IpFilterDriver - ok
12:41:14.0310 4360 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:41:14.0344 4360 iphlpsvc - ok
12:41:14.0381 4360 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
12:41:14.0402 4360 IPMIDRV - ok
12:41:14.0440 4360 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:41:14.0507 4360 IPNAT - ok
12:41:14.0637 4360 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:41:14.0711 4360 IRENUM - ok
12:41:14.0907 4360 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
12:41:14.0927 4360 isapnp - ok
12:41:14.0947 4360 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
12:41:14.0963 4360 iScsiPrt - ok
12:41:14.0985 4360 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:41:14.0998 4360 kbdclass - ok
12:41:15.0029 4360 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:41:15.0050 4360 kbdhid - ok
12:41:15.0079 4360 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
12:41:15.0093 4360 KeyIso - ok
12:41:15.0121 4360 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:41:15.0135 4360 KSecDD - ok
12:41:15.0148 4360 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:41:15.0160 4360 KSecPkg - ok
12:41:15.0189 4360 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
12:41:15.0221 4360 ksthunk - ok
12:41:15.0259 4360 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
12:41:15.0312 4360 KtmRm - ok
12:41:15.0368 4360 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
12:41:15.0421 4360 LanmanServer - ok
12:41:15.0443 4360 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:41:15.0477 4360 LanmanWorkstation - ok
12:41:15.0525 4360 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:41:15.0582 4360 lltdio - ok
12:41:15.0616 4360 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:41:15.0670 4360 lltdsvc - ok
12:41:15.0721 4360 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
12:41:15.0769 4360 lmhosts - ok
12:41:15.0796 4360 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
12:41:15.0807 4360 LSI_FC - ok
12:41:15.0818 4360 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
12:41:15.0829 4360 LSI_SAS - ok
12:41:15.0840 4360 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:41:15.0851 4360 LSI_SAS2 - ok
12:41:15.0855 4360 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:41:15.0866 4360 LSI_SCSI - ok
12:41:15.0912 4360 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
12:41:15.0945 4360 luafv - ok
12:41:15.0997 4360 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
12:41:16.0013 4360 MBAMProtector - ok
12:41:16.0099 4360 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
12:41:16.0127 4360 MBAMScheduler - ok
12:41:16.0179 4360 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
12:41:16.0194 4360 MBAMService - ok
12:41:16.0288 4360 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
12:41:16.0309 4360 McComponentHostService - ok
12:41:16.0340 4360 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:41:16.0353 4360 Mcx2Svc - ok
12:41:16.0380 4360 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
12:41:16.0391 4360 megasas - ok
12:41:16.0416 4360 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
12:41:16.0431 4360 MegaSR - ok
12:41:16.0469 4360 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
12:41:16.0503 4360 MMCSS - ok
12:41:16.0516 4360 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
12:41:16.0549 4360 Modem - ok
12:41:16.0572 4360 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:41:16.0585 4360 monitor - ok
12:41:16.0627 4360 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:41:16.0649 4360 mouclass - ok
12:41:16.0669 4360 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:41:16.0683 4360 mouhid - ok
12:41:16.0724 4360 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:41:16.0738 4360 mountmgr - ok
12:41:16.0785 4360 [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
12:41:16.0806 4360 MozillaMaintenance - ok
12:41:16.0830 4360 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
12:41:16.0851 4360 mpio - ok
12:41:16.0866 4360 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:41:16.0900 4360 mpsdrv - ok
12:41:16.0936 4360 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
12:41:17.0010 4360 MpsSvc - ok
12:41:17.0036 4360 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:41:17.0052 4360 MRxDAV - ok
12:41:17.0085 4360 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:41:17.0105 4360 mrxsmb - ok
12:41:17.0121 4360 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:41:17.0138 4360 mrxsmb10 - ok
12:41:17.0151 4360 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:41:17.0164 4360 mrxsmb20 - ok
12:41:17.0191 4360 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
12:41:17.0203 4360 msahci - ok
12:41:17.0219 4360 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
12:41:17.0233 4360 msdsm - ok
12:41:17.0248 4360 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
12:41:17.0264 4360 MSDTC - ok
12:41:17.0313 4360 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:41:17.0378 4360 Msfs - ok
12:41:17.0403 4360 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:41:17.0443 4360 mshidkmdf - ok
12:41:17.0454 4360 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
12:41:17.0464 4360 msisadrv - ok
12:41:17.0488 4360 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:41:17.0530 4360 MSiSCSI - ok
12:41:17.0534 4360 msiserver - ok
12:41:17.0560 4360 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:41:17.0627 4360 MSKSSRV - ok
12:41:17.0636 4360 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:41:17.0684 4360 MSPCLOCK - ok
12:41:17.0687 4360 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:41:17.0737 4360 MSPQM - ok
12:41:17.0772 4360 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:41:17.0787 4360 MsRPC - ok
12:41:17.0823 4360 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
12:41:17.0833 4360 mssmbios - ok
12:41:17.0853 4360 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:41:17.0901 4360 MSTEE - ok
12:41:17.0917 4360 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
12:41:17.0938 4360 MTConfig - ok
12:41:17.0960 4360 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
12:41:17.0971 4360 Mup - ok
12:41:17.0998 4360 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
12:41:18.0037 4360 napagent - ok
12:41:18.0068 4360 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:41:18.0086 4360 NativeWifiP - ok
12:41:18.0141 4360 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:41:18.0189 4360 NDIS - ok
12:41:18.0201 4360 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:41:18.0249 4360 NdisCap - ok
12:41:18.0281 4360 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:41:18.0313 4360 NdisTapi - ok
12:41:18.0345 4360 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:41:18.0377 4360 Ndisuio - ok
12:41:18.0408 4360 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:41:18.0441 4360 NdisWan - ok
12:41:18.0474 4360 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:41:18.0524 4360 NDProxy - ok
12:41:18.0542 4360 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:41:18.0575 4360 NetBIOS - ok
12:41:18.0609 4360 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:41:18.0642 4360 NetBT - ok
12:41:18.0667 4360 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
12:41:18.0679 4360 Netlogon - ok
12:41:18.0715 4360 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
12:41:18.0773 4360 Netman - ok
12:41:18.0797 4360 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:41:18.0814 4360 NetMsmqActivator - ok
12:41:18.0833 4360 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:41:18.0842 4360 NetPipeActivator - ok
12:41:18.0851 4360 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
12:41:18.0890 4360 netprofm - ok
12:41:18.0896 4360 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:41:18.0905 4360 NetTcpActivator - ok
12:41:18.0908 4360 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:41:18.0917 4360 NetTcpPortSharing - ok
12:41:19.0144 4360 [ 219A40EEEA50D638BA9D08680C354A0C ] NETwNs64 C:\Windows\system32\DRIVERS\Netwsw00.sys
12:41:19.0451 4360 NETwNs64 - ok
12:41:19.0508 4360 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
12:41:19.0531 4360 nfrd960 - ok
12:41:19.0575 4360 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
12:41:19.0599 4360 NlaSvc - ok
12:41:19.0609 4360 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:41:19.0653 4360 Npfs - ok
12:41:19.0683 4360 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
12:41:19.0740 4360 nsi - ok
12:41:19.0751 4360 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:41:19.0785 4360 nsiproxy - ok
12:41:19.0851 4360 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:41:19.0934 4360 Ntfs - ok
12:41:20.0000 4360 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
12:41:20.0056 4360 Null - ok
12:41:20.0099 4360 [ 181E7FE39211E04128A30708906627D8 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
12:41:20.0107 4360 NVHDA - ok
12:41:20.0336 4360 [ 04625E1D4821E66C2BEAB2C7E64AE416 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
12:41:20.0670 4360 nvlddmkm - ok
12:41:20.0708 4360 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:41:20.0719 4360 nvraid - ok
12:41:20.0731 4360 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:41:20.0742 4360 nvstor - ok
12:41:20.0779 4360 [ 86F74594F4994EC42CC55712A4713835 ] nvsvc C:\Windows\system32\nvvsvc.exe
12:41:20.0793 4360 nvsvc - ok
12:41:20.0816 4360 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
12:41:20.0827 4360 nv_agp - ok
12:41:20.0953 4360 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
12:41:20.0983 4360 odserv - ok
12:41:21.0005 4360 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
12:41:21.0022 4360 ohci1394 - ok
12:41:21.0078 4360 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:41:21.0097 4360 ose - ok
12:41:21.0264 4360 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
12:41:21.0419 4360 osppsvc - ok
12:41:21.0463 4360 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:41:21.0509 4360 p2pimsvc - ok
12:41:21.0536 4360 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
12:41:21.0578 4360 p2psvc - ok
12:41:21.0606 4360 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:41:21.0637 4360 Parport - ok
12:41:21.0662 4360 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:41:21.0680 4360 partmgr - ok
12:41:21.0698 4360 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:41:21.0715 4360 PcaSvc - ok
12:41:21.0751 4360 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
12:41:21.0777 4360 pci - ok
12:41:21.0794 4360 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
12:41:21.0813 4360 pciide - ok
12:41:21.0834 4360 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:41:21.0850 4360 pcmcia - ok
12:41:21.0864 4360 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
12:41:21.0877 4360 pcw - ok
12:41:21.0899 4360 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:41:21.0966 4360 PEAUTH - ok
12:41:22.0007 4360 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
12:41:22.0078 4360 PeerDistSvc - ok
12:41:22.0195 4360 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
12:41:22.0225 4360 PerfHost - ok
12:41:22.0304 4360 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
12:41:22.0470 4360 pla - ok
12:41:22.0528 4360 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:41:22.0572 4360 PlugPlay - ok
12:41:22.0606 4360 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:41:22.0626 4360 PNRPAutoReg - ok
12:41:22.0640 4360 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:41:22.0666 4360 PNRPsvc - ok
12:41:22.0694 4360 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:41:22.0756 4360 PolicyAgent - ok
12:41:22.0795 4360 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
12:41:22.0829 4360 Power - ok
12:41:22.0876 4360 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:41:22.0930 4360 PptpMiniport - ok
12:41:22.0964 4360 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
12:41:22.0995 4360 Processor - ok
12:41:23.0034 4360 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
12:41:23.0058 4360 ProfSvc - ok
12:41:23.0068 4360 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:41:23.0087 4360 ProtectedStorage - ok
12:41:23.0126 4360 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:41:23.0175 4360 Psched - ok
12:41:23.0229 4360 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
12:41:23.0319 4360 ql2300 - ok
12:41:23.0354 4360 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
12:41:23.0364 4360 ql40xx - ok
12:41:23.0397 4360 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
12:41:23.0445 4360 QWAVE - ok
12:41:23.0459 4360 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:41:23.0498 4360 QWAVEdrv - ok
12:41:23.0510 4360 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:41:23.0569 4360 RasAcd - ok
12:41:23.0613 4360 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:41:23.0650 4360 RasAgileVpn - ok
12:41:23.0658 4360 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
12:41:23.0692 4360 RasAuto - ok
12:41:23.0719 4360 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:41:23.0751 4360 Rasl2tp - ok
12:41:23.0800 4360 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
12:41:23.0861 4360 RasMan - ok
12:41:23.0880 4360 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:41:23.0917 4360 RasPppoe - ok
12:41:23.0971 4360 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:41:24.0016 4360 RasSstp - ok
12:41:24.0031 4360 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:41:24.0066 4360 rdbss - ok
12:41:24.0081 4360 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:41:24.0095 4360 rdpbus - ok
12:41:24.0104 4360 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:41:24.0137 4360 RDPCDD - ok
12:41:24.0172 4360 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
12:41:24.0203 4360 RDPDR - ok
12:41:24.0230 4360 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:41:24.0282 4360 RDPENCDD - ok
12:41:24.0292 4360 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:41:24.0325 4360 RDPREFMP - ok
12:41:24.0353 4360 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:41:24.0382 4360 RDPWD - ok
12:41:24.0429 4360 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:41:24.0454 4360 rdyboost - ok
12:41:24.0507 4360 [ F09087C51C6AE42AE7DABE1EB3E44C17 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
12:41:24.0523 4360 RegSrvc - ok
12:41:24.0556 4360 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
12:41:24.0615 4360 RemoteAccess - ok
12:41:24.0649 4360 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:41:24.0713 4360 RemoteRegistry - ok
12:41:24.0756 4360 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
12:41:24.0785 4360 RFCOMM - ok
12:41:24.0829 4360 [ 3DCA561AAF776AA2E356FB5B142AA5F8 ] rimspci C:\Windows\system32\DRIVERS\rimspe64.sys
12:41:24.0868 4360 rimspci - ok
12:41:24.0891 4360 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:41:24.0942 4360 RpcEptMapper - ok
12:41:24.0968 4360 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
12:41:25.0013 4360 RpcLocator - ok
12:41:25.0057 4360 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
12:41:25.0114 4360 RpcSs - ok
12:41:25.0153 4360 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:41:25.0214 4360 rspndr - ok
12:41:25.0243 4360 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
12:41:25.0255 4360 s3cap - ok
12:41:25.0268 4360 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
12:41:25.0281 4360 SamSs - ok
12:41:25.0301 4360 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
12:41:25.0314 4360 sbp2port - ok
12:41:25.0340 4360 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:41:25.0385 4360 SCardSvr - ok
12:41:25.0418 4360 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:41:25.0467 4360 scfilter - ok
12:41:25.0513 4360 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
12:41:25.0603 4360 Schedule - ok
12:41:25.0635 4360 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
12:41:25.0667 4360 SCPolicySvc - ok
12:41:25.0711 4360 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys
12:41:25.0740 4360 sdbus - ok
12:41:25.0775 4360 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:41:25.0800 4360 SDRSVC - ok
12:41:25.0842 4360 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:41:25.0936 4360 secdrv - ok
12:41:25.0960 4360 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
12:41:26.0027 4360 seclogon - ok
12:41:26.0071 4360 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
12:41:26.0121 4360 SENS - ok
12:41:26.0133 4360 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:41:26.0152 4360 SensrSvc - ok
12:41:26.0171 4360 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
12:41:26.0183 4360 Serenum - ok
12:41:26.0196 4360 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
12:41:26.0223 4360 Serial - ok
12:41:26.0276 4360 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
12:41:26.0296 4360 sermouse - ok
12:41:26.0336 4360 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
12:41:26.0377 4360 SessionEnv - ok
12:41:26.0407 4360 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
12:41:26.0440 4360 sffdisk - ok
12:41:26.0452 4360 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
12:41:26.0469 4360 sffp_mmc - ok
12:41:26.0480 4360 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
12:41:26.0497 4360 sffp_sd - ok
12:41:26.0535 4360 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
12:41:26.0568 4360 sfloppy - ok
12:41:26.0604 4360 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:41:26.0652 4360 SharedAccess - ok
12:41:26.0674 4360 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:41:26.0710 4360 ShellHWDetection - ok
12:41:26.0730 4360 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:41:26.0739 4360 SiSRaid2 - ok
12:41:26.0757 4360 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
12:41:26.0768 4360 SiSRaid4 - ok
12:41:26.0913 4360 [ 388AE59FE75F1B959DFA0900923C61BB ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
12:41:26.0966 4360 Skype C2C Service - ok
12:41:27.0027 4360 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
12:41:27.0047 4360 SkypeUpdate - ok
12:41:27.0077 4360 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:41:27.0118 4360 Smb - ok
12:41:27.0170 4360 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:41:27.0195 4360 SNMPTRAP - ok
12:41:27.0226 4360 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
12:41:27.0245 4360 spldr - ok
12:41:27.0290 4360 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
12:41:27.0333 4360 Spooler - ok
12:41:27.0426 4360 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
12:41:27.0554 4360 sppsvc - ok
12:41:27.0565 4360 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:41:27.0607 4360 sppuinotify - ok
12:41:27.0640 4360 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
12:41:27.0669 4360 srv - ok
12:41:27.0692 4360 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:41:27.0706 4360 srv2 - ok
12:41:27.0756 4360 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS
12:41:27.0784 4360 SrvHsfHDA - ok
12:41:27.0837 4360 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS
12:41:27.0913 4360 SrvHsfV92 - ok
12:41:27.0959 4360 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
12:41:28.0014 4360 SrvHsfWinac - ok
12:41:28.0046 4360 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:41:28.0065 4360 srvnet - ok
12:41:28.0110 4360 [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys
12:41:28.0135 4360 ssadbus - ok
12:41:28.0175 4360 [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys
12:41:28.0210 4360 ssadmdfl - ok
12:41:28.0229 4360 [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys
12:41:28.0245 4360 ssadmdm - ok
12:41:28.0282 4360 [ D33D1BD3EC0E766211A234F56A12726D ] ssadserd C:\Windows\system32\DRIVERS\ssadserd.sys
12:41:28.0295 4360 ssadserd - ok
12:41:28.0340 4360 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:41:28.0375 4360 SSDPSRV - ok
12:41:28.0394 4360 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:41:28.0427 4360 SstpSvc - ok
12:41:28.0460 4360 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
12:41:28.0470 4360 stexstor - ok
12:41:28.0516 4360 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
12:41:28.0568 4360 stisvc - ok
12:41:28.0601 4360 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
12:41:28.0611 4360 storflt - ok
12:41:28.0619 4360 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
12:41:28.0638 4360 StorSvc - ok
12:41:28.0652 4360 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
12:41:28.0662 4360 storvsc - ok
12:41:28.0676 4360 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
12:41:28.0686 4360 swenum - ok
12:41:28.0705 4360 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
12:41:28.0756 4360 swprv - ok
12:41:28.0814 4360 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
12:41:28.0885 4360 SysMain - ok
12:41:28.0911 4360 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:41:28.0937 4360 TabletInputService - ok
12:41:28.0957 4360 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
12:41:29.0001 4360 TapiSrv - ok
12:41:29.0021 4360 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
12:41:29.0088 4360 TBS - ok
12:41:29.0164 4360 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:41:29.0248 4360 Tcpip - ok
12:41:29.0326 4360 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:41:29.0376 4360 TCPIP6 - ok
12:41:29.0409 4360 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:41:29.0420 4360 tcpipreg - ok
12:41:29.0451 4360 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:41:29.0481 4360 TDPIPE - ok
12:41:29.0509 4360 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:41:29.0538 4360 TDTCP - ok
12:41:29.0569 4360 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:41:29.0618 4360 tdx - ok
12:41:29.0644 4360 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
12:41:29.0659 4360 TermDD - ok
12:41:29.0687 4360 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
12:41:29.0783 4360 TermService - ok
12:41:29.0818 4360 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
12:41:29.0850 4360 Themes - ok
12:41:29.0869 4360 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
12:41:29.0912 4360 THREADORDER - ok
12:41:29.0952 4360 [ DBCC20C02E8A3E43B03C304A4E40A84F ] TPM C:\Windows\system32\drivers\tpm.sys
12:41:29.0976 4360 TPM - ok
12:41:30.0099 4360 [ DFFB9EE50C2BB25EE76F8B905ADA3D90 ] TransarcAFSDaemon C:\Program Files\OpenAFS\Client\Program\afsd_service.exe
12:41:30.0132 4360 TransarcAFSDaemon - ok
12:41:30.0173 4360 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
12:41:30.0214 4360 TrkWks - ok
12:41:30.0273 4360 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:41:30.0342 4360 TrustedInstaller - ok
12:41:30.0367 4360 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:41:30.0398 4360 tssecsrv - ok
12:41:30.0453 4360 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
12:41:30.0482 4360 TsUsbFlt - ok
12:41:30.0524 4360 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:41:30.0571 4360 tunnel - ok
12:41:30.0590 4360 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
12:41:30.0600 4360 uagp35 - ok
12:41:30.0638 4360 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:41:30.0722 4360 udfs - ok
12:41:30.0759 4360 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:41:30.0772 4360 UI0Detect - ok
12:41:30.0801 4360 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
12:41:30.0811 4360 uliagpkx - ok
12:41:30.0842 4360 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
12:41:30.0854 4360 umbus - ok
12:41:30.0866 4360 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
12:41:30.0886 4360 UmPass - ok
12:41:30.0908 4360 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
12:41:30.0936 4360 UmRdpService - ok
12:41:30.0957 4360 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
12:41:31.0042 4360 upnphost - ok
12:41:31.0079 4360 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:41:31.0120 4360 usbccgp - ok
12:41:31.0156 4360 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
12:41:31.0198 4360 usbcir - ok
12:41:31.0225 4360 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
12:41:31.0243 4360 usbehci - ok
12:41:31.0276 4360 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:41:31.0299 4360 usbhub - ok
12:41:31.0319 4360 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:41:31.0351 4360 usbohci - ok
12:41:31.0396 4360 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:41:31.0426 4360 usbprint - ok
12:41:31.0460 4360 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:41:31.0474 4360 USBSTOR - ok
12:41:31.0483 4360 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:41:31.0496 4360 usbuhci - ok
12:41:31.0516 4360 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
12:41:31.0560 4360 UxSms - ok
12:41:31.0567 4360 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
12:41:31.0579 4360 VaultSvc - ok
12:41:31.0593 4360 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
12:41:31.0603 4360 vdrvroot - ok
12:41:31.0637 4360 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
12:41:31.0678 4360 vds - ok
12:41:31.0704 4360 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:41:31.0718 4360 vga - ok
12:41:31.0735 4360 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
12:41:31.0769 4360 VgaSave - ok
12:41:31.0794 4360 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
12:41:31.0807 4360 vhdmp - ok
12:41:31.0824 4360 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
12:41:31.0837 4360 viaide - ok
12:41:31.0865 4360 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
12:41:31.0878 4360 vmbus - ok
12:41:31.0891 4360 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
12:41:31.0925 4360 VMBusHID - ok
12:41:31.0948 4360 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
12:41:31.0958 4360 volmgr - ok
12:41:32.0001 4360 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:41:32.0016 4360 volmgrx - ok
12:41:32.0029 4360 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
12:41:32.0044 4360 volsnap - ok
12:41:32.0116 4360 [ 80E63B86C40C5E067475DC98F845A6DD ] vpnagent C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
12:41:32.0143 4360 vpnagent - ok
12:41:32.0172 4360 [ A8D4FED106B4BD337DF3DA20BA44E18E ] vpnva C:\Windows\system32\DRIVERS\vpnva64.sys
12:41:32.0186 4360 vpnva - ok
12:41:32.0237 4360 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
12:41:32.0262 4360 vsmraid - ok
12:41:32.0316 4360 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
12:41:32.0414 4360 VSS - ok
12:41:32.0425 4360 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
12:41:32.0440 4360 vwifibus - ok
12:41:32.0463 4360 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
12:41:32.0479 4360 vwififlt - ok
12:41:32.0532 4360 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
12:41:32.0620 4360 W32Time - ok
12:41:32.0645 4360 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
12:41:32.0670 4360 WacomPen - ok
12:41:32.0722 4360 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:41:32.0773 4360 WANARP - ok
12:41:32.0788 4360 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:41:32.0823 4360 Wanarpv6 - ok
12:41:32.0877 4360 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
12:41:32.0948 4360 wbengine - ok
12:41:32.0984 4360 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:41:33.0001 4360 WbioSrvc - ok
12:41:33.0032 4360 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:41:33.0078 4360 wcncsvc - ok
12:41:33.0096 4360 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:41:33.0110 4360 WcsPlugInService - ok
12:41:33.0136 4360 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
12:41:33.0148 4360 Wd - ok
12:41:33.0181 4360 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:41:33.0238 4360 Wdf01000 - ok
12:41:33.0256 4360 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:41:33.0273 4360 WdiServiceHost - ok
12:41:33.0277 4360 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:41:33.0294 4360 WdiSystemHost - ok
12:41:33.0332 4360 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
12:41:33.0380 4360 WebClient - ok
12:41:33.0403 4360 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:41:33.0486 4360 Wecsvc - ok
12:41:33.0499 4360 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:41:33.0546 4360 wercplsupport - ok
12:41:33.0577 4360 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
12:41:33.0612 4360 WerSvc - ok
12:41:33.0642 4360 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:41:33.0675 4360 WfpLwf - ok
12:41:33.0690 4360 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:41:33.0699 4360 WIMMount - ok
12:41:33.0715 4360 WinDefend - ok
12:41:33.0720 4360 WinHttpAutoProxySvc - ok
12:41:33.0774 4360 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:41:33.0817 4360 Winmgmt - ok
12:41:33.0887 4360 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
12:41:33.0972 4360 WinRM - ok
12:41:34.0028 4360 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
12:41:34.0078 4360 Wlansvc - ok
12:41:34.0100 4360 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
12:41:34.0112 4360 WmiAcpi - ok
12:41:34.0155 4360 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:41:34.0196 4360 wmiApSrv - ok
12:41:34.0230 4360 WMPNetworkSvc - ok
12:41:34.0242 4360 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:41:34.0264 4360 WPCSvc - ok
12:41:34.0290 4360 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:41:34.0309 4360 WPDBusEnum - ok
12:41:34.0327 4360 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:41:34.0382 4360 ws2ifsl - ok
12:41:34.0396 4360 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
12:41:34.0418 4360 wscsvc - ok
12:41:34.0422 4360 WSearch - ok
12:41:34.0505 4360 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
12:41:34.0607 4360 wuauserv - ok
12:41:34.0642 4360 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:41:34.0654 4360 WudfPf - ok
12:41:34.0676 4360 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:41:34.0697 4360 WUDFRd - ok
12:41:34.0724 4360 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:41:34.0752 4360 wudfsvc - ok
12:41:34.0783 4360 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
12:41:34.0822 4360 WwanSvc - ok
12:41:34.0947 4360 [ 5BCB1F6CB749B6826BE1C0F16FF2F600 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
12:41:35.0059 4360 ZeroConfigService - ok
12:41:35.0087 4360 ================ Scan global ===============================
12:41:35.0108 4360 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
12:41:35.0139 4360 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
12:41:35.0161 4360 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
12:41:35.0194 4360 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
12:41:35.0228 4360 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
12:41:35.0238 4360 [Global] - ok
12:41:35.0239 4360 ================ Scan MBR ==================================
12:41:35.0253 4360 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
12:41:35.0664 4360 \Device\Harddisk0\DR0 - ok
12:41:35.0664 4360 ================ Scan VBR ==================================
12:41:35.0668 4360 [ 6BD84FDE8B6F3EACCCB392098E432397 ] \Device\Harddisk0\DR0\Partition1
12:41:35.0670 4360 \Device\Harddisk0\DR0\Partition1 - ok
12:41:35.0707 4360 [ 1FED2909F25DA5A96556DAF1FA79DB0F ] \Device\Harddisk0\DR0\Partition2
12:41:35.0710 4360 \Device\Harddisk0\DR0\Partition2 - ok
12:41:35.0740 4360 [ CF9784115F9D2757B1BDA096F162EBA4 ] \Device\Harddisk0\DR0\Partition3
12:41:35.0742 4360 \Device\Harddisk0\DR0\Partition3 - ok
12:41:35.0743 4360 ============================================================
12:41:35.0743 4360 Scan finished
12:41:35.0743 4360 ============================================================
12:41:35.0754 4128 Detected object count: 0
12:41:35.0754 4128 Actual detected object count: 0

markusg · 20.02.2013, 17:57

sehr gut.
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Tina_aus_S · 21.02.2013, 11:26

Danke für die Hilfe!

Habs gemacht. Hab einen 2. Anlauf gestartet, weil ich eine Meldung von Avira bekommen habe. Anbei die Logfiles.
1. Anlauf: log.txt
2. Anlauf ComboFix.txt

markusg · 21.02.2013, 17:49

Hi und die Avira Fundmeldung soll ich erraten? posten bitte
http://www.trojaner-board.de/125889-...en-posten.html

Tina_aus_S · 21.02.2013, 20:40

Tut mir leid. Also nee, kein Fund. Es kam die Meldung, dass ein Programm in die Registry eingreift. Ich hatte vermutlich nur Avira nicht voll ausgeschaltet?

markusg · 21.02.2013, 20:48

Richtig :-)
Macht aber nichts
lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Tina_aus_S · 21.02.2013, 21:16

Done.

Das ganze technische sagt mir nichts und ich hab keine Ahnung was man davon braucht und was nicht

markusg · 25.02.2013, 18:41

deinstaliere:
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
Deinstaliere:
ArcGIS
Giant
Java(TM
JDownloader
openLCA
Secure Download
Öffne CCleaner, analysieren, starten, PC neustarten.
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Tina_aus_S · 25.02.2013, 20:31

Hallo Markus, vielen Dank für die Rückantwort! Anbei die Log-Datei.

markusg · 25.02.2013, 20:36

Hi,
HitmanPro - Download - Filepony
lade bitte Hitmanpro.
Doppelklick, Lizenz, Testlizenz.
Auf Scan.
Nichts löschen.
Auf Weiter, log osten

Tina_aus_S · 25.02.2013, 21:00

Hallo Markus,

bin fertig. Here it is:

Code:

ATTFilter

HitmanPro 3.7.2.189
www.hitmanpro.com

   Computer name . . . . : xxx
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : xxx\User
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2013-02-25 20:48:42
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 7m 44s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 0

   Objects scanned . . . : 1.861.895
   Files scanned . . . . : 77.718
   Remnants scanned  . . : 449.606 files / 1.334.571 keys

markusg · 25.02.2013, 21:01

ok, sieht gut aus.
poste mir ein neues OTL log bitte.

Tina_aus_S · 28.02.2013, 22:32

Hallo Markus,

vielen Dank erstmal für die Hilfe. OTL hängt sich bei mir bei Firefox auf. Hast Du einen Tipp für mich?

VG

21.02.2013, 17:49	#6
markusg /// Malware-holic	Unerwünschte Werbe-Links zu de.clickcompare Hi und die Avira Fundmeldung soll ich erraten? posten bitte http://www.trojaner-board.de/125889-...en-posten.html __________________ --> Unerwünschte Werbe-Links zu de.clickcompare

25.02.2013, 21:01	#14
markusg /// Malware-holic	Unerwünschte Werbe-Links zu de.clickcompare ok, sieht gut aus. poste mir ein neues OTL log bitte. __________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet

Unerwünschte Werbe-Links zu de.clickcompare

Log-Analyse und Auswertung: Unerwünschte Werbe-Links zu de.clickcompare