|
Plagegeister aller Art und deren Bekämpfung: Tracker.Tradedoubler.com soll ausgeführt werdenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
27.02.2013, 19:48 | #1 |
| Tracker.Tradedoubler.com soll ausgeführt werden Hallo, seit einigen Tagen geht in meinem mailprogramm gmx immer ein Fenster auf, ähnlich wie vor einem Download, mit der Meldung: "Möchten sie imp.js von tracker.tradedoubler.com öffnen oder speichern?" Ich habe Ihre Anleitung "abgearbeitet" und poste nun die Inhalte in der Hoffnung, Sie können mir helfen. Anhang 51013 Anhang 51014 Anhang 51015 Vielen Dank! Gabi |
27.02.2013, 19:51 | #2 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden Hi,
__________________otl fix Fixen mit OTL
Code:
ATTFilter :OTL O4 - HKLM..\Run: [] File not found :files :Commands [emptytemp]
__________________ |
28.02.2013, 20:23 | #3 |
| Tracker.Tradedoubler.com soll ausgeführt werden Uiih, ihr seid ja schneller, als die Polizei erlaubt!
__________________Also, habe die Anweisung abgearbeitet - das Resultat im Anhang: |
28.02.2013, 20:25 | #4 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden Macht nichts, so lange du uns nicht verpfeifst... Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
28.02.2013, 20:49 | #5 |
| Tracker.Tradedoubler.com soll ausgeführt werden ..alles, was Du willst: 20:42:59.0906 0272 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 20:43:01.0925 0272 ============================================================ 20:43:01.0925 0272 Current date / time: 2013/02/28 20:43:01.0925 20:43:01.0925 0272 SystemInfo: 20:43:01.0925 0272 20:43:01.0925 0272 OS Version: 6.1.7601 ServicePack: 1.0 20:43:01.0925 0272 Product type: Workstation 20:43:01.0925 0272 ComputerName: HÖHN-PC 20:43:01.0925 0272 UserName: Höhn 20:43:01.0925 0272 Windows directory: C:\Windows 20:43:01.0925 0272 System windows directory: C:\Windows 20:43:01.0925 0272 Processor architecture: Intel x86 20:43:01.0925 0272 Number of processors: 2 20:43:01.0925 0272 Page size: 0x1000 20:43:01.0925 0272 Boot type: Normal boot 20:43:01.0925 0272 ============================================================ 20:43:03.0283 0272 Drive \Device\Harddisk0\DR0 - Size: 0x2540BE4000 (149.01 Gb), SectorSize: 0x200, Cylinders: 0x4BFC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 20:43:03.0283 0272 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 20:43:03.0361 0272 ============================================================ 20:43:03.0361 0272 \Device\Harddisk0\DR0: 20:43:03.0361 0272 MBR partitions: 20:43:03.0361 0272 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x62800 20:43:03.0361 0272 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x63000, BlocksNum 0x129A2800 20:43:03.0361 0272 \Device\Harddisk1\DR1: 20:43:03.0361 0272 MBR partitions: 20:43:03.0361 0272 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982 20:43:03.0361 0272 ============================================================ 20:43:03.0407 0272 C: <-> \Device\Harddisk0\DR0\Partition2 20:43:03.0407 0272 G: <-> \Device\Harddisk1\DR1\Partition1 20:43:03.0407 0272 ============================================================ 20:43:03.0407 0272 Initialize success 20:43:03.0407 0272 ============================================================ 20:44:27.0664 4212 ============================================================ 20:44:27.0664 4212 Scan started 20:44:27.0664 4212 Mode: Manual; SigCheck; TDLFS; 20:44:27.0664 4212 ============================================================ 20:44:28.0943 4212 ================ Scan system memory ======================== 20:44:28.0943 4212 System memory - ok 20:44:28.0943 4212 ================ Scan services ============================= 20:44:29.0115 4212 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 20:44:29.0224 4212 1394ohci - ok 20:44:29.0240 4212 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys 20:44:29.0255 4212 ACPI - ok 20:44:29.0286 4212 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 20:44:29.0318 4212 AcpiPmi - ok 20:44:29.0380 4212 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 20:44:29.0396 4212 AdobeARMservice - ok 20:44:29.0411 4212 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 20:44:29.0474 4212 adp94xx - ok 20:44:29.0505 4212 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\drivers\adpahci.sys 20:44:29.0536 4212 adpahci - ok 20:44:29.0567 4212 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 20:44:29.0598 4212 adpu320 - ok 20:44:29.0630 4212 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 20:44:29.0661 4212 AeLookupSvc - ok 20:44:29.0708 4212 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys 20:44:29.0754 4212 AFD - ok 20:44:29.0770 4212 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys 20:44:29.0801 4212 agp440 - ok 20:44:29.0832 4212 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\drivers\djsvs.sys 20:44:29.0848 4212 aic78xx - ok 20:44:29.0864 4212 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe 20:44:29.0926 4212 ALG - ok 20:44:29.0957 4212 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys 20:44:30.0035 4212 aliide - ok 20:44:30.0082 4212 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys 20:44:30.0113 4212 amdagp - ok 20:44:30.0129 4212 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys 20:44:30.0160 4212 amdide - ok 20:44:30.0191 4212 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 20:44:30.0207 4212 AmdK8 - ok 20:44:30.0238 4212 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys 20:44:30.0285 4212 AmdPPM - ok 20:44:30.0316 4212 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys 20:44:30.0347 4212 amdsata - ok 20:44:30.0378 4212 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 20:44:30.0410 4212 amdsbs - ok 20:44:30.0425 4212 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys 20:44:30.0456 4212 amdxata - ok 20:44:30.0550 4212 [ 6DB54F2A69E07C25A79E23B1AC87A0AC ] AntiVirFirewallService C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe 20:44:30.0566 4212 AntiVirFirewallService - ok 20:44:30.0628 4212 [ BD6469AB30F7B6EDED03ECF7712208EA ] AntiVirMailService C:\Program Files\Avira\AntiVir Desktop\avmailc.exe 20:44:30.0644 4212 AntiVirMailService - ok 20:44:30.0659 4212 [ 7BF68342758EC38D3378543AD53843CA ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe 20:44:30.0675 4212 AntiVirSchedulerService - ok 20:44:30.0722 4212 [ 8E1404EB1A49007203B310A8FFE9CBB5 ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe 20:44:30.0722 4212 AntiVirService - ok 20:44:30.0768 4212 [ FC3EE590B471815A4CA6AFDF8A435DE2 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE 20:44:30.0831 4212 AntiVirWebService - ok 20:44:30.0862 4212 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys 20:44:30.0924 4212 AppID - ok 20:44:30.0956 4212 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll 20:44:31.0002 4212 AppIDSvc - ok 20:44:31.0018 4212 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll 20:44:31.0065 4212 Appinfo - ok 20:44:31.0080 4212 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\drivers\arc.sys 20:44:31.0112 4212 arc - ok 20:44:31.0127 4212 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\drivers\arcsas.sys 20:44:31.0158 4212 arcsas - ok 20:44:31.0190 4212 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 20:44:31.0221 4212 AsyncMac - ok 20:44:31.0236 4212 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys 20:44:31.0268 4212 atapi - ok 20:44:31.0299 4212 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 20:44:31.0377 4212 AudioEndpointBuilder - ok 20:44:31.0408 4212 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll 20:44:31.0455 4212 Audiosrv - ok 20:44:31.0470 4212 [ 662ECAEC0FAE2C2069B75EF8A762BE87 ] avfwim C:\Windows\system32\DRIVERS\avfwim.sys 20:44:31.0517 4212 avfwim - ok 20:44:31.0548 4212 [ E4DC0228AB7492086B96FCC8298CF3B6 ] avfwot C:\Windows\system32\DRIVERS\avfwot.sys 20:44:31.0580 4212 avfwot - ok 20:44:31.0626 4212 [ 2060DAAC61CC3F65B6517CE840E4F6DA ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 20:44:31.0658 4212 avgntflt - ok 20:44:31.0704 4212 [ F3AF2B17AE92A378979ADD8D6981E818 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 20:44:31.0782 4212 avipbb - ok 20:44:31.0798 4212 [ 793C820F0199C2964A908C9F0748E99D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 20:44:31.0845 4212 avkmgr - ok 20:44:31.0892 4212 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll 20:44:31.0954 4212 AxInstSV - ok 20:44:31.0985 4212 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\drivers\bxvbdx.sys 20:44:32.0063 4212 b06bdrv - ok 20:44:32.0094 4212 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys 20:44:32.0141 4212 b57nd60x - ok 20:44:32.0172 4212 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll 20:44:32.0219 4212 BDESVC - ok 20:44:32.0235 4212 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys 20:44:32.0282 4212 Beep - ok 20:44:32.0313 4212 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll 20:44:32.0344 4212 BFE - ok 20:44:32.0375 4212 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll 20:44:32.0406 4212 BITS - ok 20:44:32.0422 4212 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 20:44:32.0469 4212 blbdrive - ok 20:44:32.0500 4212 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 20:44:32.0547 4212 bowser - ok 20:44:32.0594 4212 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 20:44:32.0640 4212 BrFiltLo - ok 20:44:32.0656 4212 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 20:44:32.0703 4212 BrFiltUp - ok 20:44:32.0734 4212 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll 20:44:32.0765 4212 Browser - ok 20:44:32.0796 4212 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys 20:44:32.0843 4212 Brserid - ok 20:44:32.0859 4212 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 20:44:32.0890 4212 BrSerWdm - ok 20:44:32.0921 4212 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 20:44:32.0952 4212 BrUsbMdm - ok 20:44:32.0968 4212 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 20:44:33.0015 4212 BrUsbSer - ok 20:44:33.0030 4212 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 20:44:33.0062 4212 BTHMODEM - ok 20:44:33.0093 4212 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll 20:44:33.0140 4212 bthserv - ok 20:44:33.0155 4212 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 20:44:33.0218 4212 cdfs - ok 20:44:33.0233 4212 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 20:44:33.0280 4212 cdrom - ok 20:44:33.0311 4212 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll 20:44:33.0342 4212 CertPropSvc - ok 20:44:33.0358 4212 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\drivers\circlass.sys 20:44:33.0405 4212 circlass - ok 20:44:33.0420 4212 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys 20:44:33.0436 4212 CLFS - ok 20:44:33.0483 4212 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 20:44:33.0514 4212 clr_optimization_v2.0.50727_32 - ok 20:44:33.0576 4212 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 20:44:33.0608 4212 clr_optimization_v4.0.30319_32 - ok 20:44:33.0639 4212 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 20:44:33.0686 4212 CmBatt - ok 20:44:33.0701 4212 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys 20:44:33.0732 4212 cmdide - ok 20:44:33.0779 4212 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys 20:44:33.0842 4212 CNG - ok 20:44:33.0873 4212 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\drivers\compbatt.sys 20:44:33.0888 4212 Compbatt - ok 20:44:33.0904 4212 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys 20:44:33.0935 4212 CompositeBus - ok 20:44:33.0935 4212 COMSysApp - ok 20:44:33.0951 4212 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 20:44:33.0998 4212 crcdisk - ok 20:44:34.0029 4212 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll 20:44:34.0060 4212 CryptSvc - ok 20:44:34.0091 4212 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll 20:44:34.0122 4212 DcomLaunch - ok 20:44:34.0154 4212 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll 20:44:34.0200 4212 defragsvc - ok 20:44:34.0232 4212 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 20:44:34.0278 4212 DfsC - ok 20:44:34.0294 4212 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll 20:44:34.0325 4212 Dhcp - ok 20:44:34.0356 4212 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys 20:44:34.0388 4212 discache - ok 20:44:34.0403 4212 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\drivers\disk.sys 20:44:34.0434 4212 Disk - ok 20:44:34.0481 4212 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll 20:44:34.0512 4212 Dnscache - ok 20:44:34.0544 4212 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll 20:44:34.0606 4212 dot3svc - ok 20:44:34.0622 4212 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll 20:44:34.0668 4212 DPS - ok 20:44:34.0684 4212 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 20:44:34.0715 4212 drmkaud - ok 20:44:34.0746 4212 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 20:44:34.0809 4212 DXGKrnl - ok 20:44:34.0824 4212 [ CF0A6015F437161698C5B2A0A12CF052 ] e1express C:\Windows\system32\DRIVERS\e1e6032.sys 20:44:34.0871 4212 e1express - ok 20:44:34.0887 4212 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll 20:44:34.0934 4212 EapHost - ok 20:44:35.0027 4212 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\drivers\evbdx.sys 20:44:35.0214 4212 ebdrv - ok 20:44:35.0246 4212 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe 20:44:35.0277 4212 EFS - ok 20:44:35.0339 4212 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 20:44:35.0402 4212 ehRecvr - ok 20:44:35.0417 4212 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe 20:44:35.0448 4212 ehSched - ok 20:44:35.0480 4212 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\drivers\elxstor.sys 20:44:35.0526 4212 elxstor - ok 20:44:35.0542 4212 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys 20:44:35.0573 4212 ErrDev - ok 20:44:35.0620 4212 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll 20:44:35.0651 4212 EventSystem - ok 20:44:35.0667 4212 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys 20:44:35.0714 4212 exfat - ok 20:44:35.0729 4212 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys 20:44:35.0792 4212 fastfat - ok 20:44:35.0807 4212 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe 20:44:35.0854 4212 Fax - ok 20:44:35.0870 4212 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\drivers\fdc.sys 20:44:35.0901 4212 fdc - ok 20:44:35.0916 4212 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll 20:44:35.0948 4212 fdPHost - ok 20:44:35.0979 4212 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll 20:44:35.0994 4212 FDResPub - ok 20:44:36.0026 4212 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 20:44:36.0057 4212 FileInfo - ok 20:44:36.0057 4212 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 20:44:36.0135 4212 Filetrace - ok 20:44:36.0150 4212 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 20:44:36.0166 4212 flpydisk - ok 20:44:36.0182 4212 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 20:44:36.0213 4212 FltMgr - ok 20:44:36.0275 4212 [ E12C4928B32ACE04610259647F072635 ] FontCache C:\Windows\system32\FntCache.dll 20:44:36.0306 4212 FontCache - ok 20:44:36.0353 4212 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 20:44:36.0369 4212 FontCache3.0.0.0 - ok 20:44:36.0384 4212 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 20:44:36.0416 4212 FsDepends - ok 20:44:36.0447 4212 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 20:44:36.0478 4212 Fs_Rec - ok 20:44:36.0494 4212 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 20:44:36.0525 4212 fvevol - ok 20:44:36.0540 4212 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 20:44:36.0572 4212 gagp30kx - ok 20:44:36.0618 4212 [ 4AC51459805264AFFD5F6FDFB9D9235F ] GEARAspiWDM C:\Windows\system32\Drivers\GEARAspiWDM.sys 20:44:36.0665 4212 GEARAspiWDM - ok 20:44:36.0743 4212 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll 20:44:36.0790 4212 gpsvc - ok 20:44:36.0821 4212 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 20:44:36.0852 4212 hcw85cir - ok 20:44:36.0884 4212 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 20:44:36.0946 4212 HdAudAddService - ok 20:44:36.0962 4212 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 20:44:36.0977 4212 HDAudBus - ok 20:44:36.0993 4212 [ C865D1F6D03595DF213DC3C67E4E4C58 ] HECI C:\Windows\system32\drivers\HECI.sys 20:44:37.0040 4212 HECI - ok 20:44:37.0055 4212 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 20:44:37.0118 4212 HidBatt - ok 20:44:37.0133 4212 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\drivers\hidbth.sys 20:44:37.0164 4212 HidBth - ok 20:44:37.0180 4212 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\drivers\hidir.sys 20:44:37.0227 4212 HidIr - ok 20:44:37.0242 4212 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll 20:44:37.0274 4212 hidserv - ok 20:44:37.0289 4212 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 20:44:37.0320 4212 HidUsb - ok 20:44:37.0336 4212 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll 20:44:37.0383 4212 hkmsvc - ok 20:44:37.0398 4212 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 20:44:37.0430 4212 HomeGroupListener - ok 20:44:37.0461 4212 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 20:44:37.0492 4212 HomeGroupProvider - ok 20:44:37.0508 4212 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 20:44:37.0539 4212 HpSAMD - ok 20:44:37.0570 4212 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys 20:44:37.0695 4212 HTTP - ok 20:44:37.0710 4212 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 20:44:37.0742 4212 hwpolicy - ok 20:44:37.0773 4212 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 20:44:37.0804 4212 i8042prt - ok 20:44:37.0820 4212 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 20:44:37.0866 4212 iaStorV - ok 20:44:37.0913 4212 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 20:44:37.0991 4212 idsvc - ok 20:44:38.0100 4212 [ AD626F6964F4D364D226C39E06872DD3 ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys 20:44:38.0272 4212 igfx - ok 20:44:38.0303 4212 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\drivers\iirsp.sys 20:44:38.0334 4212 iirsp - ok 20:44:38.0366 4212 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll 20:44:38.0412 4212 IKEEXT - ok 20:44:38.0444 4212 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys 20:44:38.0459 4212 intelide - ok 20:44:38.0475 4212 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\drivers\intelppm.sys 20:44:38.0506 4212 intelppm - ok 20:44:38.0522 4212 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 20:44:38.0568 4212 IPBusEnum - ok 20:44:38.0584 4212 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 20:44:38.0631 4212 IpFilterDriver - ok 20:44:38.0678 4212 [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 20:44:38.0693 4212 iphlpsvc - ok 20:44:38.0724 4212 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 20:44:38.0740 4212 IPMIDRV - ok 20:44:38.0756 4212 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys 20:44:38.0802 4212 IPNAT - ok 20:44:38.0834 4212 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys 20:44:38.0865 4212 IRENUM - ok 20:44:38.0896 4212 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys 20:44:38.0927 4212 isapnp - ok 20:44:38.0958 4212 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 20:44:39.0005 4212 iScsiPrt - ok 20:44:39.0021 4212 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 20:44:39.0083 4212 kbdclass - ok 20:44:39.0146 4212 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 20:44:39.0192 4212 kbdhid - ok 20:44:39.0224 4212 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe 20:44:39.0239 4212 KeyIso - ok 20:44:39.0270 4212 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 20:44:39.0302 4212 KSecDD - ok 20:44:39.0317 4212 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 20:44:39.0364 4212 KSecPkg - ok 20:44:39.0395 4212 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll 20:44:39.0458 4212 KtmRm - ok 20:44:39.0489 4212 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll 20:44:39.0520 4212 LanmanServer - ok 20:44:39.0551 4212 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 20:44:39.0582 4212 LanmanWorkstation - ok 20:44:39.0614 4212 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 20:44:39.0645 4212 lltdio - ok 20:44:39.0676 4212 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll 20:44:39.0738 4212 lltdsvc - ok 20:44:39.0754 4212 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll 20:44:39.0785 4212 lmhosts - ok 20:44:39.0816 4212 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 20:44:39.0832 4212 LSI_FC - ok 20:44:39.0863 4212 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 20:44:39.0894 4212 LSI_SAS - ok 20:44:39.0910 4212 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 20:44:39.0941 4212 LSI_SAS2 - ok 20:44:39.0972 4212 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 20:44:39.0988 4212 LSI_SCSI - ok 20:44:40.0004 4212 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys 20:44:40.0050 4212 luafv - ok 20:44:40.0082 4212 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 20:44:40.0113 4212 MBAMProtector - ok 20:44:40.0238 4212 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe 20:44:40.0284 4212 MBAMScheduler - ok 20:44:40.0409 4212 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 20:44:40.0456 4212 MBAMService - ok 20:44:40.0503 4212 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 20:44:40.0550 4212 Mcx2Svc - ok 20:44:40.0581 4212 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\drivers\megasas.sys 20:44:40.0612 4212 megasas - ok 20:44:40.0659 4212 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 20:44:40.0706 4212 MegaSR - ok 20:44:40.0737 4212 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll 20:44:40.0768 4212 MMCSS - ok 20:44:40.0799 4212 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys 20:44:40.0862 4212 Modem - ok 20:44:40.0877 4212 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 20:44:40.0893 4212 monitor - ok 20:44:40.0924 4212 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 20:44:40.0955 4212 mouclass - ok 20:44:40.0971 4212 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 20:44:41.0002 4212 mouhid - ok 20:44:41.0018 4212 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 20:44:41.0064 4212 mountmgr - ok 20:44:41.0080 4212 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys 20:44:41.0127 4212 mpio - ok 20:44:41.0127 4212 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 20:44:41.0158 4212 mpsdrv - ok 20:44:41.0205 4212 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll 20:44:41.0252 4212 MpsSvc - ok 20:44:41.0267 4212 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 20:44:41.0314 4212 MRxDAV - ok 20:44:41.0345 4212 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 20:44:41.0408 4212 mrxsmb - ok 20:44:41.0439 4212 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 20:44:41.0501 4212 mrxsmb10 - ok 20:44:41.0501 4212 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 20:44:41.0532 4212 mrxsmb20 - ok 20:44:41.0564 4212 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys 20:44:41.0595 4212 msahci - ok 20:44:41.0610 4212 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys 20:44:41.0642 4212 msdsm - ok 20:44:41.0657 4212 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe 20:44:41.0720 4212 MSDTC - ok 20:44:41.0735 4212 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys 20:44:41.0782 4212 Msfs - ok 20:44:41.0798 4212 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 20:44:41.0844 4212 mshidkmdf - ok 20:44:41.0876 4212 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 20:44:41.0891 4212 msisadrv - ok 20:44:41.0922 4212 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 20:44:41.0985 4212 MSiSCSI - ok 20:44:41.0985 4212 msiserver - ok 20:44:42.0000 4212 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 20:44:42.0032 4212 MSKSSRV - ok 20:44:42.0047 4212 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 20:44:42.0078 4212 MSPCLOCK - ok 20:44:42.0094 4212 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 20:44:42.0141 4212 MSPQM - ok 20:44:42.0156 4212 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 20:44:42.0172 4212 MsRPC - ok 20:44:42.0203 4212 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 20:44:42.0203 4212 mssmbios - ok 20:44:42.0219 4212 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 20:44:42.0250 4212 MSTEE - ok 20:44:42.0266 4212 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 20:44:42.0297 4212 MTConfig - ok 20:44:42.0297 4212 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys 20:44:42.0328 4212 Mup - ok 20:44:42.0359 4212 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll 20:44:42.0375 4212 napagent - ok 20:44:42.0406 4212 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 20:44:42.0453 4212 NativeWifiP - ok 20:44:42.0500 4212 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys 20:44:42.0515 4212 NDIS - ok 20:44:42.0546 4212 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 20:44:42.0593 4212 NdisCap - ok 20:44:42.0609 4212 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 20:44:42.0656 4212 NdisTapi - ok 20:44:42.0671 4212 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 20:44:42.0718 4212 Ndisuio - ok 20:44:42.0734 4212 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 20:44:42.0780 4212 NdisWan - ok 20:44:42.0796 4212 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 20:44:42.0827 4212 NDProxy - ok 20:44:42.0843 4212 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 20:44:42.0874 4212 NetBIOS - ok 20:44:42.0890 4212 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 20:44:42.0921 4212 NetBT - ok 20:44:42.0936 4212 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe 20:44:42.0952 4212 Netlogon - ok 20:44:42.0983 4212 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll 20:44:43.0014 4212 Netman - ok 20:44:43.0030 4212 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll 20:44:43.0077 4212 netprofm - ok 20:44:43.0108 4212 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 20:44:43.0139 4212 NetTcpPortSharing - ok 20:44:43.0155 4212 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 20:44:43.0186 4212 nfrd960 - ok 20:44:43.0217 4212 [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc C:\Windows\System32\nlasvc.dll 20:44:43.0248 4212 NlaSvc - ok 20:44:43.0264 4212 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys 20:44:43.0295 4212 Npfs - ok 20:44:43.0326 4212 [ 75AC610A7481CB1F343DC971249BCB19 ] NPF_devolo C:\Windows\system32\drivers\npf_devolo.sys 20:44:43.0358 4212 NPF_devolo ( UnsignedFile.Multi.Generic ) - warning 20:44:43.0358 4212 NPF_devolo - detected UnsignedFile.Multi.Generic (1) 20:44:43.0373 4212 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll 20:44:43.0404 4212 nsi - ok 20:44:43.0436 4212 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 20:44:43.0529 4212 nsiproxy - ok 20:44:43.0592 4212 [ 0D87503986BB3DFED58E343FE39DDE13 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 20:44:43.0670 4212 Ntfs - ok 20:44:43.0685 4212 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys 20:44:43.0732 4212 Null - ok 20:44:43.0919 4212 [ B0881DDA5A8160422561FFAB7F0008B1 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys 20:44:44.0231 4212 nvlddmkm - ok 20:44:44.0278 4212 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys 20:44:44.0309 4212 nvraid - ok 20:44:44.0356 4212 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys 20:44:44.0356 4212 nvstor - ok 20:44:44.0372 4212 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 20:44:44.0418 4212 nv_agp - ok 20:44:44.0450 4212 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 20:44:44.0481 4212 ohci1394 - ok 20:44:44.0512 4212 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 20:44:44.0543 4212 ose - ok 20:44:44.0699 4212 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 20:44:44.0871 4212 osppsvc - ok 20:44:44.0902 4212 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 20:44:44.0933 4212 p2pimsvc - ok 20:44:44.0964 4212 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll 20:44:44.0980 4212 p2psvc - ok 20:44:45.0011 4212 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys 20:44:45.0042 4212 Parport - ok 20:44:45.0074 4212 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys 20:44:45.0120 4212 partmgr - ok 20:44:45.0136 4212 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys 20:44:45.0152 4212 Parvdm - ok 20:44:45.0167 4212 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll 20:44:45.0198 4212 PcaSvc - ok 20:44:45.0230 4212 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys 20:44:45.0261 4212 pci - ok 20:44:45.0292 4212 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys 20:44:45.0323 4212 pciide - ok 20:44:45.0339 4212 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 20:44:45.0386 4212 pcmcia - ok 20:44:45.0401 4212 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys 20:44:45.0432 4212 pcw - ok 20:44:45.0448 4212 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys 20:44:45.0526 4212 PEAUTH - ok 20:44:45.0588 4212 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll 20:44:45.0698 4212 pla - ok 20:44:45.0729 4212 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll 20:44:45.0776 4212 PlugPlay - ok 20:44:45.0807 4212 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 20:44:45.0869 4212 PNRPAutoReg - ok 20:44:45.0900 4212 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 20:44:45.0932 4212 PNRPsvc - ok 20:44:45.0947 4212 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 20:44:46.0010 4212 PolicyAgent - ok 20:44:46.0041 4212 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll 20:44:46.0072 4212 Power - ok 20:44:46.0103 4212 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 20:44:46.0150 4212 PptpMiniport - ok 20:44:46.0166 4212 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\drivers\processr.sys 20:44:46.0197 4212 Processor - ok 20:44:46.0244 4212 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll 20:44:46.0275 4212 ProfSvc - ok 20:44:46.0290 4212 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe 20:44:46.0322 4212 ProtectedStorage - ok 20:44:46.0322 4212 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys 20:44:46.0353 4212 Psched - ok 20:44:46.0400 4212 [ 543A4EF0923BF70D126625B034EF25AF ] PSI_SVC_2 c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe 20:44:46.0431 4212 PSI_SVC_2 - ok 20:44:46.0493 4212 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 20:44:46.0602 4212 ql2300 - ok 20:44:46.0618 4212 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 20:44:46.0649 4212 ql40xx - ok 20:44:46.0680 4212 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll 20:44:46.0727 4212 QWAVE - ok 20:44:46.0743 4212 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 20:44:46.0790 4212 QWAVEdrv - ok 20:44:46.0805 4212 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 20:44:46.0852 4212 RasAcd - ok 20:44:46.0868 4212 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 20:44:46.0930 4212 RasAgileVpn - ok 20:44:46.0946 4212 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll 20:44:47.0008 4212 RasAuto - ok 20:44:47.0024 4212 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 20:44:47.0070 4212 Rasl2tp - ok 20:44:47.0117 4212 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32\rasmans.dll 20:44:47.0226 4212 RasMan - ok 20:44:47.0242 4212 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 20:44:47.0304 4212 RasPppoe - ok 20:44:47.0336 4212 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 20:44:47.0382 4212 RasSstp - ok 20:44:47.0398 4212 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 20:44:47.0460 4212 rdbss - ok 20:44:47.0476 4212 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 20:44:47.0507 4212 rdpbus - ok 20:44:47.0523 4212 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 20:44:47.0570 4212 RDPCDD - ok 20:44:47.0585 4212 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 20:44:47.0632 4212 RDPENCDD - ok 20:44:47.0648 4212 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 20:44:47.0694 4212 RDPREFMP - ok 20:44:47.0726 4212 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 20:44:47.0804 4212 RDPWD - ok 20:44:47.0850 4212 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 20:44:47.0866 4212 rdyboost - ok 20:44:47.0897 4212 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll 20:44:47.0944 4212 RemoteAccess - ok 20:44:47.0975 4212 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll 20:44:48.0026 4212 RemoteRegistry - ok 20:44:48.0042 4212 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 20:44:48.0073 4212 RpcEptMapper - ok 20:44:48.0107 4212 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe 20:44:48.0146 4212 RpcLocator - ok 20:44:48.0177 4212 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll 20:44:48.0217 4212 RpcSs - ok 20:44:48.0227 4212 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 20:44:48.0277 4212 rspndr - ok 20:44:48.0293 4212 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe 20:44:48.0309 4212 SamSs - ok 20:44:48.0324 4212 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 20:44:48.0389 4212 sbp2port - ok 20:44:48.0420 4212 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll 20:44:48.0503 4212 SCardSvr - ok 20:44:48.0519 4212 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 20:44:48.0568 4212 scfilter - ok 20:44:48.0596 4212 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll 20:44:48.0641 4212 Schedule - ok 20:44:48.0643 4212 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll 20:44:48.0674 4212 SCPolicySvc - ok 20:44:48.0690 4212 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll 20:44:48.0721 4212 SDRSVC - ok 20:44:48.0737 4212 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys 20:44:48.0784 4212 secdrv - ok 20:44:48.0799 4212 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll 20:44:48.0846 4212 seclogon - ok 20:44:48.0862 4212 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll 20:44:48.0893 4212 SENS - ok 20:44:48.0924 4212 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll 20:44:48.0955 4212 SensrSvc - ok 20:44:48.0986 4212 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 20:44:49.0002 4212 Serenum - ok 20:44:49.0018 4212 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys 20:44:49.0049 4212 Serial - ok 20:44:49.0064 4212 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\drivers\sermouse.sys 20:44:49.0096 4212 sermouse - ok 20:44:49.0127 4212 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll 20:44:49.0158 4212 SessionEnv - ok 20:44:49.0158 4212 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 20:44:49.0189 4212 sffdisk - ok 20:44:49.0205 4212 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 20:44:49.0236 4212 sffp_mmc - ok 20:44:49.0283 4212 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 20:44:49.0345 4212 sffp_sd - ok 20:44:49.0361 4212 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 20:44:49.0454 4212 sfloppy - ok 20:44:49.0501 4212 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll 20:44:49.0564 4212 SharedAccess - ok 20:44:49.0610 4212 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 20:44:49.0688 4212 ShellHWDetection - ok 20:44:49.0720 4212 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys 20:44:49.0751 4212 sisagp - ok 20:44:49.0782 4212 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 20:44:49.0798 4212 SiSRaid2 - ok 20:44:49.0829 4212 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 20:44:49.0844 4212 SiSRaid4 - ok 20:44:49.0860 4212 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys 20:44:49.0907 4212 Smb - ok 20:44:49.0938 4212 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 20:44:49.0969 4212 SNMPTRAP - ok 20:44:50.0000 4212 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys 20:44:50.0016 4212 spldr - ok 20:44:50.0047 4212 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe 20:44:50.0078 4212 Spooler - ok 20:44:50.0172 4212 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe 20:44:50.0234 4212 sppsvc - ok 20:44:50.0266 4212 [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify C:\Windows\system32\sppuinotify.dll 20:44:50.0312 4212 sppuinotify - ok 20:44:50.0375 4212 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys 20:44:50.0531 4212 srv - ok 20:44:50.0546 4212 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 20:44:50.0593 4212 srv2 - ok 20:44:50.0624 4212 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 20:44:50.0671 4212 srvnet - ok 20:44:50.0702 4212 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 20:44:50.0734 4212 SSDPSRV - ok 20:44:50.0780 4212 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys 20:44:50.0812 4212 ssmdrv - ok 20:44:50.0812 4212 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll 20:44:50.0858 4212 SstpSvc - ok 20:44:50.0874 4212 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\drivers\stexstor.sys 20:44:50.0905 4212 stexstor - ok 20:44:50.0936 4212 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll 20:44:50.0983 4212 StiSvc - ok 20:44:50.0999 4212 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys 20:44:51.0014 4212 swenum - ok 20:44:51.0046 4212 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll 20:44:51.0108 4212 swprv - ok 20:44:51.0155 4212 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll 20:44:51.0202 4212 SysMain - ok 20:44:51.0233 4212 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll 20:44:51.0264 4212 TabletInputService - ok 20:44:51.0280 4212 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll 20:44:51.0404 4212 TapiSrv - ok 20:44:51.0420 4212 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll 20:44:51.0467 4212 TBS - ok 20:44:51.0514 4212 [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 20:44:51.0638 4212 Tcpip - ok 20:44:51.0670 4212 [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 20:44:51.0685 4212 TCPIP6 - ok 20:44:51.0748 4212 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 20:44:51.0779 4212 tcpipreg - ok 20:44:51.0810 4212 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 20:44:51.0857 4212 TDPIPE - ok 20:44:51.0888 4212 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 20:44:51.0919 4212 TDTCP - ok 20:44:51.0935 4212 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 20:44:51.0982 4212 tdx - ok 20:44:51.0997 4212 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 20:44:52.0028 4212 TermDD - ok 20:44:52.0060 4212 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll 20:44:52.0075 4212 TermService - ok 20:44:52.0106 4212 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll 20:44:52.0138 4212 Themes - ok 20:44:52.0153 4212 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll 20:44:52.0184 4212 THREADORDER - ok 20:44:52.0200 4212 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll 20:44:52.0231 4212 TrkWks - ok 20:44:52.0262 4212 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 20:44:52.0294 4212 TrustedInstaller - ok 20:44:52.0325 4212 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 20:44:52.0372 4212 tssecsrv - ok 20:44:52.0387 4212 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 20:44:52.0434 4212 TsUsbFlt - ok 20:44:52.0434 4212 [ 01246F0BAAD7B68EC0F472AA41E33282 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 20:44:52.0481 4212 TsUsbGD - ok 20:44:52.0481 4212 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 20:44:52.0528 4212 tunnel - ok 20:44:52.0543 4212 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\drivers\uagp35.sys 20:44:52.0574 4212 uagp35 - ok 20:44:52.0606 4212 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys 20:44:52.0652 4212 udfs - ok 20:44:52.0684 4212 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe 20:44:52.0730 4212 UI0Detect - ok 20:44:52.0746 4212 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 20:44:52.0762 4212 uliagpkx - ok 20:44:52.0777 4212 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\DRIVERS\umbus.sys 20:44:52.0808 4212 umbus - ok 20:44:52.0824 4212 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\drivers\umpass.sys 20:44:52.0855 4212 UmPass - ok 20:44:52.0886 4212 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll 20:44:52.0918 4212 upnphost - ok 20:44:52.0949 4212 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 20:44:53.0027 4212 usbccgp - ok 20:44:53.0058 4212 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys 20:44:53.0105 4212 usbcir - ok 20:44:53.0152 4212 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 20:44:53.0183 4212 usbehci - ok 20:44:53.0198 4212 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 20:44:53.0245 4212 usbhub - ok 20:44:53.0261 4212 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 20:44:53.0276 4212 usbohci - ok 20:44:53.0308 4212 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 20:44:53.0339 4212 usbprint - ok 20:44:53.0370 4212 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 20:44:53.0401 4212 usbscan - ok 20:44:53.0432 4212 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 20:44:53.0464 4212 USBSTOR - ok 20:44:53.0479 4212 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 20:44:53.0510 4212 usbuhci - ok 20:44:53.0526 4212 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll 20:44:53.0573 4212 UxSms - ok 20:44:53.0573 4212 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe 20:44:53.0604 4212 VaultSvc - ok 20:44:53.0620 4212 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 20:44:53.0635 4212 vdrvroot - ok 20:44:53.0651 4212 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe 20:44:53.0713 4212 vds - ok 20:44:53.0729 4212 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 20:44:53.0776 4212 vga - ok 20:44:53.0776 4212 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys 20:44:53.0807 4212 VgaSave - ok 20:44:53.0838 4212 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 20:44:53.0916 4212 vhdmp - ok 20:44:53.0947 4212 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys 20:44:54.0010 4212 viaagp - ok 20:44:54.0025 4212 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\drivers\viac7.sys 20:44:54.0072 4212 ViaC7 - ok 20:44:54.0088 4212 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys 20:44:54.0103 4212 viaide - ok 20:44:54.0119 4212 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys 20:44:54.0150 4212 volmgr - ok 20:44:54.0181 4212 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 20:44:54.0212 4212 volmgrx - ok 20:44:54.0244 4212 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys 20:44:54.0275 4212 volsnap - ok 20:44:54.0306 4212 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 20:44:54.0337 4212 vsmraid - ok 20:44:54.0368 4212 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe 20:44:54.0415 4212 VSS - ok 20:44:54.0431 4212 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys 20:44:54.0462 4212 vwifibus - ok 20:44:54.0493 4212 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll 20:44:54.0524 4212 W32Time - ok 20:44:54.0540 4212 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 20:44:54.0571 4212 WacomPen - ok 20:44:54.0587 4212 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 20:44:54.0618 4212 WANARP - ok 20:44:54.0634 4212 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 20:44:54.0649 4212 Wanarpv6 - ok 20:44:54.0680 4212 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe 20:44:54.0743 4212 wbengine - ok 20:44:54.0758 4212 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 20:44:54.0805 4212 WbioSrvc - ok 20:44:54.0821 4212 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll 20:44:54.0836 4212 wcncsvc - ok 20:44:54.0852 4212 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 20:44:54.0899 4212 WcsPlugInService - ok 20:44:54.0914 4212 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\drivers\wd.sys 20:44:54.0930 4212 Wd - ok 20:44:54.0961 4212 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 20:44:55.0008 4212 Wdf01000 - ok 20:44:55.0024 4212 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll 20:44:55.0102 4212 WdiServiceHost - ok 20:44:55.0102 4212 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll 20:44:55.0148 4212 WdiSystemHost - ok 20:44:55.0226 4212 [ 500D9370DE82CDEE6779A97D494DF236 ] Web Assistant Updater C:\Program Files\Web Assistant\ExtensionUpdaterService.exe 20:44:55.0258 4212 Web Assistant Updater ( UnsignedFile.Multi.Generic ) - warning 20:44:55.0258 4212 Web Assistant Updater - detected UnsignedFile.Multi.Generic (1) 20:44:55.0273 4212 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll 20:44:55.0336 4212 WebClient - ok 20:44:55.0351 4212 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll 20:44:55.0398 4212 Wecsvc - ok 20:44:55.0414 4212 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll 20:44:55.0445 4212 wercplsupport - ok 20:44:55.0460 4212 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll 20:44:55.0507 4212 WerSvc - ok 20:44:55.0538 4212 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 20:44:55.0570 4212 WfpLwf - ok 20:44:55.0585 4212 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys 20:44:55.0616 4212 WIMMount - ok 20:44:55.0648 4212 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll 20:44:55.0679 4212 WinDefend - ok 20:44:55.0679 4212 WinHttpAutoProxySvc - ok 20:44:55.0741 4212 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 20:44:55.0757 4212 Winmgmt - ok 20:44:55.0788 4212 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll 20:44:55.0850 4212 WinRM - ok 20:44:55.0913 4212 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUSB C:\Windows\system32\DRIVERS\winusb.sys 20:44:55.0944 4212 WinUSB - ok 20:44:55.0975 4212 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll 20:44:56.0053 4212 Wlansvc - ok 20:44:56.0069 4212 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 20:44:56.0100 4212 WmiAcpi - ok 20:44:56.0116 4212 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 20:44:56.0194 4212 wmiApSrv - ok 20:44:56.0272 4212 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe 20:44:56.0318 4212 WMPNetworkSvc - ok 20:44:56.0334 4212 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll 20:44:56.0381 4212 WPCSvc - ok 20:44:56.0412 4212 [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 20:44:56.0428 4212 WPDBusEnum - ok 20:44:56.0459 4212 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 20:44:56.0506 4212 ws2ifsl - ok 20:44:56.0521 4212 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll 20:44:56.0537 4212 wscsvc - ok 20:44:56.0552 4212 WSearch - ok 20:44:56.0615 4212 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll 20:44:56.0662 4212 wuauserv - ok 20:44:56.0693 4212 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 20:44:56.0740 4212 WudfPf - ok 20:44:56.0740 4212 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 20:44:56.0771 4212 WUDFRd - ok 20:44:56.0802 4212 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 20:44:56.0833 4212 wudfsvc - ok 20:44:56.0849 4212 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll 20:44:56.0896 4212 WwanSvc - ok 20:44:56.0911 4212 ================ Scan global =============================== 20:44:56.0927 4212 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll 20:44:56.0958 4212 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll 20:44:56.0974 4212 [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll 20:44:57.0005 4212 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll 20:44:57.0036 4212 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe 20:44:57.0052 4212 [Global] - ok 20:44:57.0052 4212 ================ Scan MBR ================================== 20:44:57.0052 4212 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 20:44:57.0410 4212 \Device\Harddisk0\DR0 - ok 20:44:57.0426 4212 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1 20:44:57.0535 4212 \Device\Harddisk1\DR1 - ok 20:44:57.0535 4212 ================ Scan VBR ================================== 20:44:57.0535 4212 [ 02DE644E887024366CFAF6619BB7D9FC ] \Device\Harddisk0\DR0\Partition1 20:44:57.0535 4212 \Device\Harddisk0\DR0\Partition1 - ok 20:44:57.0582 4212 [ 1671DCFB6E704560EE0BECE56E78E5A6 ] \Device\Harddisk0\DR0\Partition2 20:44:57.0582 4212 \Device\Harddisk0\DR0\Partition2 - ok 20:44:57.0582 4212 [ 3B929189014B97ABACAB73A25492C45F ] \Device\Harddisk1\DR1\Partition1 20:44:57.0582 4212 \Device\Harddisk1\DR1\Partition1 - ok 20:44:57.0582 4212 ============================================================ 20:44:57.0582 4212 Scan finished 20:44:57.0582 4212 ============================================================ 20:44:57.0613 3856 Detected object count: 2 20:44:57.0613 3856 Actual detected object count: 2 20:46:47.0764 3856 NPF_devolo ( UnsignedFile.Multi.Generic ) - skipped by user 20:46:47.0764 3856 NPF_devolo ( UnsignedFile.Multi.Generic ) - User select action: Skip 20:46:47.0764 3856 Web Assistant Updater ( UnsignedFile.Multi.Generic ) - skipped by user 20:46:47.0764 3856 Web Assistant Updater ( UnsignedFile.Multi.Generic ) - User select action: Skip 20:46:52.0849 1816 Deinitialize success LG Gabi |
28.02.2013, 20:50 | #6 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden Sowas hat ja noch niemand zu mir gesagt Scan mit Combofix
__________________ --> Tracker.Tradedoubler.com soll ausgeführt werden |
28.02.2013, 21:15 | #7 |
| Tracker.Tradedoubler.com soll ausgeführt werden tja, einmal ist immer das erste Mal ... Hoffe, ich habe alles zu Deiner Zufriedenheit erledigt? |
28.02.2013, 21:51 | #8 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden ich bin begeistert. lade den CCleaner standard: CCleaner - Download - Filepony falls der CCleaner bereits instaliert, überspringen. öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen. hinter, jedes von dir benötigte programm, schreibe notwendig. hinter, jedes, von dir nicht benötigte, unnötig. hinter, dir unbekannte, unbekannt. liste posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
01.03.2013, 17:10 | #9 |
| Tracker.Tradedoubler.com soll ausgeführt werden ... und da bin ich wieder! Mit Anhang der tiefsten Geheimnisse meines Computer-Innenlebens ;-) LG Gabi |
01.03.2013, 17:32 | #10 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden So geheim sind sie nu auch wieder nicht :-) deinstaliere: Adobe Flash Player alle Adobe - Adobe Flash Player installieren neueste version laden, instalieren. adobe reader: Adobe - Adobe Reader herunterladen - Alle Versionen haken bei mcafee security scan raus nehmen bitte auch mal den adobe reader wie folgt konfigurieren: adobe reader öffnen, bearbeiten, voreinstellungen. allgemein: nur zertifizierte zusatz module verwenden, anhaken. Sicherheit (erweitert) Erweiterte Sicherheit anhaken und alle Dateien auswählen. internet: hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc. es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht. bei javascript den haken bei java script verwenden raus nehmen bei updater, automatisch instalieren wählen. übernehmen /ok deinstaliere: Avira SearchFree : beide auf jeden fall weg, zu den Vorschlägen kommen wir später CDBurnerXP Java : wenn du dir sicher bist, dass du es nicht brauchst, lasse es weg, ansonsten: downloade Java jre: Java-Downloads für alle Betriebssysteme klicke: Download der Java-Software für Windows Offline laden, und instalieren deinstaliere: Lernstudio Nero PDFCreator Philips QuickTime Web Assistant Öffne CCleaner, analysieren, starten, PC neustarten. Downloade Dir bitte AdwCleaner auf deinen Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
01.03.2013, 18:17 | #11 |
| Tracker.Tradedoubler.com soll ausgeführt werden Ist das aufregend - mir ist schon ganz schlecht ... Neustart erfolgt nur einmal! Aber ich bin mir sicher, dass Du das auch ohne mich rausbekommen hättest --- |
01.03.2013, 18:26 | #12 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden Hi, kein Grund aufgeregt zu sein. HitmanPro - Download - Filepony Hitmanpro laden, doppelklicken. lizenz, Testlizenz. auf Scan, nichts löschen. auf weiter, Log als xml exportieren und posten, bzw packen und anhängen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
01.03.2013, 18:32 | #13 |
| Tracker.Tradedoubler.com soll ausgeführt werden .. na wenn Du das sagst... |
01.03.2013, 18:34 | #14 |
/// Malware-holic | Tracker.Tradedoubler.com soll ausgeführt werden Sieht gut aus. noch mal ein neues OTL log bitte
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
01.03.2013, 18:42 | #15 |
| Tracker.Tradedoubler.com soll ausgeführt werden Ist es jetzt nur eine txt? |
Themen zu Tracker.Tradedoubler.com soll ausgeführt werden |
anleitung, ausgeführt, download, fenster, gmx, hoffnung, inhalte, leitung, mailprogramm, meldung, poste, speicher, speichern, tagen, ähnlich, öffnen |