Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter

pn20 · 16.05.2013, 18:01

Sorry für Doppelpost.
Ich hätte nach dem fix.datei laden über OTL wie beim letzten Mal alles gemacht wie vorher. Nur weiß ich nicht, ob es die gleiche Fix ist - also Editordateiinhalt da gleich ist, oder jetzt anders?
Habe mir nun auch F-Secure gekauft.

Ich danke dir.
Dann Posten oder wie beim letzten mal die Schritte durchgehen?

markusg · 16.05.2013, 18:02

hättest mit dem kauf warten sollen, aber f-secure is auch ok,
fix steht oben vor deinem post :-)

pn20 · 16.05.2013, 18:14

Ist irgendwie immer etwas mit skype.data?
Was hat es denn damit auf sich?
Und wieso warten mit Kauf?
Sorry der ganzen Fragen wegen ;-D
Hier nach dem Fix:

Code:

ATTFilter

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-3109638477-127064589-495194791-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Users\figur\AppData\Roaming\skype.dat deleted successfully.
C:\Users\figur\AppData\Roaming\skype.dat moved successfully.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: figur
->Temp folder emptied: 1203075 bytes
->Temporary Internet Files folder emptied: 243962887 bytes
->Java cache emptied: 13934 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 5075184 bytes
->Flash cache emptied: 3345 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16315080 bytes
RecycleBin emptied: 823 bytes
 
Total Files Cleaned = 254,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 05162013_190401

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

markusg · 16.05.2013, 18:17

na, damit es legitim aussieht wird halt der Name Skype missbraucht.
ich hätt dir n anderes Programm genannt, f-secure is aber auch ok.
nu noch mal Malwarebytes updaten und komplett scan.

pn20 · 16.05.2013, 19:53

Der Scan:

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.05.16.07

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
figur :: FIGUR-PC [Administrator]

16.05.2013 19:15:32
mbam-log-2013-05-16 (19-15-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 487015
Laufzeit: 1 Stunde(n), 23 Minute(n), 22 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Und auch gleich noch (wie beim letzten mal auch) der Scan mit dem TDSSKiller.

Code:

ATTFilter

21:27:07.0735 2680  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:27:08.0062 2680  ============================================================
21:27:08.0062 2680  Current date / time: 2013/05/16 21:27:08.0062
21:27:08.0062 2680  SystemInfo:
21:27:08.0062 2680  
21:27:08.0062 2680  OS Version: 6.1.7601 ServicePack: 1.0
21:27:08.0062 2680  Product type: Workstation
21:27:08.0062 2680  ComputerName: FIGUR-PC
21:27:08.0062 2680  UserName: figur
21:27:08.0062 2680  Windows directory: C:\Windows
21:27:08.0062 2680  System windows directory: C:\Windows
21:27:08.0062 2680  Processor architecture: Intel x86
21:27:08.0062 2680  Number of processors: 4
21:27:08.0062 2680  Page size: 0x1000
21:27:08.0062 2680  Boot type: Normal boot
21:27:08.0062 2680  ============================================================
21:27:09.0186 2680  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xFC59, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
21:27:09.0201 2680  ============================================================
21:27:09.0201 2680  \Device\Harddisk0\DR0:
21:27:09.0201 2680  MBR partitions:
21:27:09.0201 2680  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:27:09.0201 2680  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x77CE000
21:27:09.0201 2680  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x7800800, BlocksNum 0xC800000
21:27:09.0201 2680  \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x14000800, BlocksNum 0x26385000
21:27:09.0201 2680  ============================================================
21:27:09.0217 2680  C: <-> \Device\Harddisk0\DR0\Partition2
21:27:09.0248 2680  D: <-> \Device\Harddisk0\DR0\Partition3
21:27:09.0310 2680  E: <-> \Device\Harddisk0\DR0\Partition4
21:27:09.0310 2680  ============================================================
21:27:09.0310 2680  Initialize success
21:27:09.0310 2680  ============================================================
21:27:19.0310 1276  ============================================================
21:27:19.0310 1276  Scan started
21:27:19.0310 1276  Mode: Manual; SigCheck; TDLFS; 
21:27:19.0310 1276  ============================================================
21:27:20.0433 1276  ================ Scan system memory ========================
21:27:20.0433 1276  System memory - ok
21:27:20.0433 1276  ================ Scan services =============================
21:27:20.0589 1276  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
21:27:20.0714 1276  1394ohci - ok
21:27:20.0745 1276  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:27:20.0761 1276  ACPI - ok
21:27:20.0792 1276  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
21:27:20.0839 1276  AcpiPmi - ok
21:27:20.0854 1276  adfs - ok
21:27:20.0964 1276  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
21:27:20.0995 1276  AdobeARMservice - ok
21:27:21.0057 1276  [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:27:21.0088 1276  AdobeFlashPlayerUpdateSvc - ok
21:27:21.0104 1276  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
21:27:21.0135 1276  adp94xx - ok
21:27:21.0135 1276  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
21:27:21.0151 1276  adpahci - ok
21:27:21.0166 1276  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
21:27:21.0182 1276  adpu320 - ok
21:27:21.0198 1276  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
21:27:21.0244 1276  AeLookupSvc - ok
21:27:21.0291 1276  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD             C:\Windows\system32\drivers\afd.sys
21:27:21.0338 1276  AFD - ok
21:27:21.0369 1276  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\drivers\agp440.sys
21:27:21.0400 1276  agp440 - ok
21:27:21.0416 1276  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys
21:27:21.0432 1276  aic78xx - ok
21:27:21.0447 1276  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG             C:\Windows\System32\alg.exe
21:27:21.0510 1276  ALG - ok
21:27:21.0525 1276  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\drivers\aliide.sys
21:27:21.0541 1276  aliide - ok
21:27:21.0556 1276  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
21:27:21.0588 1276  amdagp - ok
21:27:21.0588 1276  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\drivers\amdide.sys
21:27:21.0603 1276  amdide - ok
21:27:21.0619 1276  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
21:27:21.0666 1276  AmdK8 - ok
21:27:21.0681 1276  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:27:21.0712 1276  AmdPPM - ok
21:27:21.0744 1276  [ D320BF87125326F996D4904FE24300FC ] amdsata         C:\Windows\system32\drivers\amdsata.sys
21:27:21.0775 1276  amdsata - ok
21:27:21.0775 1276  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:27:21.0790 1276  amdsbs - ok
21:27:21.0806 1276  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
21:27:21.0822 1276  amdxata - ok
21:27:21.0884 1276  [ DD8D9C597AF7CD2F6B70A3D6A4A1ACEA ] androidusb      C:\Windows\system32\Drivers\ssadadb.sys
21:27:21.0962 1276  androidusb - ok
21:27:22.0024 1276  [ C27D46B06D340293670450FCE9DFB166 ] AntiVirSchedulerService E:\Program Files\Avira\AntiVir Desktop\sched.exe
21:27:22.0056 1276  AntiVirSchedulerService - ok
21:27:22.0071 1276  [ 72D90E56563165984224493069C69ED4 ] AntiVirService  E:\Program Files\Avira\AntiVir Desktop\avguard.exe
21:27:22.0087 1276  AntiVirService - ok
21:27:22.0118 1276  [ AEA177F783E20150ACE5383EE368DA19 ] AppID           C:\Windows\system32\drivers\appid.sys
21:27:22.0227 1276  AppID - ok
21:27:22.0243 1276  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:27:22.0274 1276  AppIDSvc - ok
21:27:22.0305 1276  [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo         C:\Windows\System32\appinfo.dll
21:27:22.0352 1276  Appinfo - ok
21:27:22.0399 1276  [ 75A8B998EB259DD512F01EA25BEC7F3B ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys
21:27:22.0414 1276  AppleCharger - ok
21:27:22.0430 1276  [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe
21:27:22.0446 1276  AppleChargerSrv - ok
21:27:22.0477 1276  [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt         C:\Windows\System32\appmgmts.dll
21:27:22.0508 1276  AppMgmt - ok
21:27:22.0539 1276  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc             C:\Windows\system32\DRIVERS\arc.sys
21:27:22.0555 1276  arc - ok
21:27:22.0570 1276  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:27:22.0570 1276  arcsas - ok
21:27:22.0648 1276  [ 39CDCB109BF200CC8A05B9C7E6272D11 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
21:27:22.0680 1276  aspnet_state - ok
21:27:22.0695 1276  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:27:22.0789 1276  AsyncMac - ok
21:27:22.0820 1276  [ 338C86357871C167A96AB976519BF59E ] atapi           C:\Windows\system32\drivers\atapi.sys
21:27:22.0820 1276  atapi - ok
21:27:22.0914 1276  [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
21:27:22.0945 1276  atksgt - ok
21:27:22.0976 1276  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:27:23.0038 1276  AudioEndpointBuilder - ok
21:27:23.0054 1276  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:27:23.0085 1276  Audiosrv - ok
21:27:23.0101 1276  [ 1E4114685DE1FFA9675E09C6A1FB3F4B ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
21:27:23.0116 1276  avgntflt - ok
21:27:23.0148 1276  [ 0F78D3DAE6DEDD99AE54C9491C62ADF2 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
21:27:23.0179 1276  avipbb - ok
21:27:23.0194 1276  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:27:23.0257 1276  AxInstSV - ok
21:27:23.0288 1276  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys
21:27:23.0319 1276  b06bdrv - ok
21:27:23.0335 1276  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
21:27:23.0350 1276  b57nd60x - ok
21:27:23.0382 1276  [ 382B151DAFFE4A9CE9DA9F564B66761E ] BCUService      C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
21:27:23.0382 1276  BCUService - ok
21:27:23.0413 1276  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:27:23.0460 1276  BDESVC - ok
21:27:23.0475 1276  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:27:23.0538 1276  Beep - ok
21:27:23.0569 1276  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE             C:\Windows\System32\bfe.dll
21:27:23.0616 1276  BFE - ok
21:27:23.0647 1276  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\Windows\system32\qmgr.dll
21:27:23.0662 1276  BITS - ok
21:27:23.0694 1276  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:27:23.0725 1276  blbdrive - ok
21:27:23.0772 1276  [ D002033C1A37F6AF51B5F0BA6D0211BC ] BMLoad          C:\Windows\system32\drivers\BMLoad.sys
21:27:23.0803 1276  BMLoad ( UnsignedFile.Multi.Generic ) - warning
21:27:23.0803 1276  BMLoad - detected UnsignedFile.Multi.Generic (1)
21:27:23.0834 1276  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:27:23.0881 1276  bowser - ok
21:27:23.0896 1276  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:27:23.0943 1276  BrFiltLo - ok
21:27:23.0959 1276  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:27:23.0974 1276  BrFiltUp - ok
21:27:24.0021 1276  [ 77361D72A04F18809D0EFB6CCEB74D4B ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
21:27:24.0068 1276  BridgeMP - ok
21:27:24.0084 1276  [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser         C:\Windows\System32\browser.dll
21:27:24.0099 1276  Browser - ok
21:27:24.0115 1276  [ 845B8CE732E67F3B4133164868C666EA ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
21:27:24.0177 1276  Brserid - ok
21:27:24.0193 1276  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:27:24.0224 1276  BrSerWdm - ok
21:27:24.0240 1276  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:27:24.0255 1276  BrUsbMdm - ok
21:27:24.0271 1276  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:27:24.0302 1276  BrUsbSer - ok
21:27:24.0302 1276  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:27:24.0333 1276  BTHMODEM - ok
21:27:24.0349 1276  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv         C:\Windows\system32\bthserv.dll
21:27:24.0380 1276  bthserv - ok
21:27:24.0458 1276  catchme - ok
21:27:24.0489 1276  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:27:24.0567 1276  cdfs - ok
21:27:24.0598 1276  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
21:27:24.0630 1276  cdrom - ok
21:27:24.0661 1276  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc     C:\Windows\System32\certprop.dll
21:27:24.0708 1276  CertPropSvc - ok
21:27:24.0739 1276  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:27:24.0754 1276  circlass - ok
21:27:24.0786 1276  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys
21:27:24.0801 1276  CLFS - ok
21:27:24.0832 1276  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:27:24.0832 1276  clr_optimization_v2.0.50727_32 - ok
21:27:24.0895 1276  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:27:24.0926 1276  clr_optimization_v4.0.30319_32 - ok
21:27:24.0942 1276  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:27:24.0957 1276  CmBatt - ok
21:27:24.0988 1276  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
21:27:25.0004 1276  cmdide - ok
21:27:25.0051 1276  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG             C:\Windows\system32\Drivers\cng.sys
21:27:25.0098 1276  CNG - ok
21:27:25.0113 1276  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:27:25.0129 1276  Compbatt - ok
21:27:25.0160 1276  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
21:27:25.0176 1276  CompositeBus - ok
21:27:25.0176 1276  COMSysApp - ok
21:27:25.0191 1276  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
21:27:25.0207 1276  crcdisk - ok
21:27:25.0238 1276  [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:27:25.0285 1276  CryptSvc - ok
21:27:25.0316 1276  [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC             C:\Windows\system32\drivers\csc.sys
21:27:25.0363 1276  CSC - ok
21:27:25.0394 1276  [ 15F93B37F6801943360D9EB42485D5D3 ] CscService      C:\Windows\System32\cscsvc.dll
21:27:25.0425 1276  CscService - ok
21:27:25.0441 1276  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:27:25.0488 1276  DcomLaunch - ok
21:27:25.0503 1276  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc       C:\Windows\System32\defragsvc.dll
21:27:25.0519 1276  defragsvc - ok
21:27:25.0581 1276  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
21:27:25.0644 1276  DfsC - ok
21:27:25.0675 1276  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:27:25.0690 1276  Dhcp - ok
21:27:25.0722 1276  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys
21:27:25.0800 1276  discache - ok
21:27:25.0831 1276  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:27:25.0831 1276  Disk - ok
21:27:25.0862 1276  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:27:25.0924 1276  Dnscache - ok
21:27:25.0956 1276  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc         C:\Windows\System32\dot3svc.dll
21:27:26.0002 1276  dot3svc - ok
21:27:26.0018 1276  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS             C:\Windows\system32\dps.dll
21:27:26.0065 1276  DPS - ok
21:27:26.0096 1276  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
21:27:26.0112 1276  drmkaud - ok
21:27:26.0158 1276  [ 16498EBC04AE9DD07049A8884B205C05 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
21:27:26.0205 1276  DXGKrnl - ok
21:27:26.0221 1276  EagleXNt - ok
21:27:26.0252 1276  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost         C:\Windows\System32\eapsvc.dll
21:27:26.0283 1276  EapHost - ok
21:27:26.0377 1276  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys
21:27:26.0486 1276  ebdrv - ok
21:27:26.0502 1276  [ 81951F51E318AECC2D68559E47485CC4 ] EFS             C:\Windows\System32\lsass.exe
21:27:26.0517 1276  EFS - ok
21:27:26.0564 1276  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
21:27:26.0626 1276  ehRecvr - ok
21:27:26.0642 1276  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched         C:\Windows\ehome\ehsched.exe
21:27:26.0673 1276  ehSched - ok
21:27:26.0689 1276  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
21:27:26.0704 1276  elxstor - ok
21:27:26.0767 1276  [ B4556F3D468C8DCB0B259D9D866CD4C4 ] enodpl          C:\Windows\system32\drivers\enodpl.sys
21:27:26.0782 1276  enodpl ( UnsignedFile.Multi.Generic ) - warning
21:27:26.0782 1276  enodpl - detected UnsignedFile.Multi.Generic (1)
21:27:26.0814 1276  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
21:27:26.0845 1276  ErrDev - ok
21:27:26.0876 1276  [ B8FA96995726D1FA58476E352C02AD82 ] ES lite Service C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
21:27:26.0907 1276  ES lite Service - ok
21:27:26.0938 1276  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem     C:\Windows\system32\es.dll
21:27:26.0985 1276  EventSystem - ok
21:27:27.0001 1276  [ 2DC9108D74081149CC8B651D3A26207F ] exfat           C:\Windows\system32\drivers\exfat.sys
21:27:27.0016 1276  exfat - ok
21:27:27.0032 1276  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
21:27:27.0079 1276  fastfat - ok
21:27:27.0110 1276  [ 967EA5B213E9984CBE270205DF37755B ] Fax             C:\Windows\system32\fxssvc.exe
21:27:27.0157 1276  Fax - ok
21:27:27.0172 1276  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
21:27:27.0188 1276  fdc - ok
21:27:27.0204 1276  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost         C:\Windows\system32\fdPHost.dll
21:27:27.0250 1276  fdPHost - ok
21:27:27.0250 1276  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll
21:27:27.0282 1276  FDResPub - ok
21:27:27.0297 1276  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:27:27.0313 1276  FileInfo - ok
21:27:27.0313 1276  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
21:27:27.0344 1276  Filetrace - ok
21:27:27.0344 1276  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:27:27.0360 1276  flpydisk - ok
21:27:27.0375 1276  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:27:27.0375 1276  FltMgr - ok
21:27:27.0406 1276  [ E12C4928B32ACE04610259647F072635 ] FontCache       C:\Windows\system32\FntCache.dll
21:27:27.0469 1276  FontCache - ok
21:27:27.0516 1276  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:27:27.0516 1276  FontCache3.0.0.0 - ok
21:27:27.0531 1276  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
21:27:27.0547 1276  FsDepends - ok
21:27:27.0609 1276  [ BFAAA92861526BB0ADCD01E964AB6609 ] fssfltr         C:\Windows\system32\DRIVERS\fssfltr.sys
21:27:27.0625 1276  fssfltr - ok
21:27:27.0734 1276  [ 40CDFAD174B3D5E80F95DDA003C0B97F ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
21:27:27.0796 1276  fsssvc - ok
21:27:27.0828 1276  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:27:27.0859 1276  Fs_Rec - ok
21:27:27.0890 1276  [ E306A24D9694C724FA2491278BF50FDB ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:27:27.0921 1276  fvevol - ok
21:27:27.0952 1276  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:27:27.0984 1276  gagp30kx - ok
21:27:28.0062 1276  [ D556CB79967E92B5CC69686D16C1D846 ] gdrv            C:\Windows\gdrv.sys
21:27:28.0077 1276  gdrv - ok
21:27:28.0124 1276  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc           C:\Windows\System32\gpsvc.dll
21:27:28.0186 1276  gpsvc - ok
21:27:28.0280 1276  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
21:27:28.0311 1276  gupdate - ok
21:27:28.0342 1276  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
21:27:28.0374 1276  gupdatem - ok
21:27:28.0405 1276  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
21:27:28.0436 1276  gusvc - ok
21:27:28.0452 1276  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:27:28.0483 1276  hcw85cir - ok
21:27:28.0498 1276  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:27:28.0530 1276  HdAudAddService - ok
21:27:28.0545 1276  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
21:27:28.0576 1276  HDAudBus - ok
21:27:28.0576 1276  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
21:27:28.0592 1276  HidBatt - ok
21:27:28.0608 1276  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:27:28.0623 1276  HidBth - ok
21:27:28.0639 1276  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
21:27:28.0654 1276  HidIr - ok
21:27:28.0670 1276  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv         C:\Windows\System32\hidserv.dll
21:27:28.0701 1276  hidserv - ok
21:27:28.0717 1276  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:27:28.0732 1276  HidUsb - ok
21:27:28.0748 1276  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:27:28.0779 1276  hkmsvc - ok
21:27:28.0810 1276  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:27:28.0842 1276  HomeGroupListener - ok
21:27:28.0888 1276  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:27:28.0935 1276  HomeGroupProvider - ok
21:27:28.0966 1276  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:27:28.0982 1276  HpSAMD - ok
21:27:29.0013 1276  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:27:29.0044 1276  HTTP - ok
21:27:29.0076 1276  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:27:29.0091 1276  hwpolicy - ok
21:27:29.0122 1276  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
21:27:29.0154 1276  i8042prt - ok
21:27:29.0185 1276  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
21:27:29.0200 1276  iaStorV - ok
21:27:29.0247 1276  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:27:29.0310 1276  idsvc - ok
21:27:29.0325 1276  [ 4173FF5708F3236CF25195FECD742915 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
21:27:29.0341 1276  iirsp - ok
21:27:29.0372 1276  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:27:29.0419 1276  IKEEXT - ok
21:27:29.0497 1276  [ AEE99ECF06CD1CEA95816CCB5BF73EC8 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:27:29.0606 1276  IntcAzAudAddService - ok
21:27:29.0622 1276  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\drivers\intelide.sys
21:27:29.0622 1276  intelide - ok
21:27:29.0637 1276  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:27:29.0637 1276  intelppm - ok
21:27:29.0653 1276  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
21:27:29.0684 1276  IPBusEnum - ok
21:27:29.0700 1276  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:27:29.0715 1276  IpFilterDriver - ok
21:27:29.0746 1276  [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:27:29.0793 1276  iphlpsvc - ok
21:27:29.0824 1276  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
21:27:29.0824 1276  IPMIDRV - ok
21:27:29.0840 1276  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
21:27:29.0902 1276  IPNAT - ok
21:27:29.0918 1276  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:27:29.0949 1276  IRENUM - ok
21:27:29.0965 1276  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:27:29.0980 1276  isapnp - ok
21:27:29.0996 1276  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
21:27:30.0012 1276  iScsiPrt - ok
21:27:30.0027 1276  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
21:27:30.0043 1276  kbdclass - ok
21:27:30.0074 1276  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
21:27:30.0105 1276  kbdhid - ok
21:27:30.0121 1276  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\Windows\system32\lsass.exe
21:27:30.0136 1276  KeyIso - ok
21:27:30.0152 1276  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:27:30.0183 1276  KSecDD - ok
21:27:30.0214 1276  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
21:27:30.0230 1276  KSecPkg - ok
21:27:30.0246 1276  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm           C:\Windows\system32\msdtckrm.dll
21:27:30.0292 1276  KtmRm - ok
21:27:30.0324 1276  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\Windows\System32\srvsvc.dll
21:27:30.0386 1276  LanmanServer - ok
21:27:30.0417 1276  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:27:30.0464 1276  LanmanWorkstation - ok
21:27:30.0480 1276  [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
21:27:30.0480 1276  lirsgt - ok
21:27:30.0495 1276  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:27:30.0526 1276  lltdio - ok
21:27:30.0542 1276  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
21:27:30.0589 1276  lltdsvc - ok
21:27:30.0604 1276  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts         C:\Windows\System32\lmhsvc.dll
21:27:30.0620 1276  lmhosts - ok
21:27:30.0636 1276  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:27:30.0636 1276  LSI_FC - ok
21:27:30.0651 1276  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
21:27:30.0667 1276  LSI_SAS - ok
21:27:30.0682 1276  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:27:30.0682 1276  LSI_SAS2 - ok
21:27:30.0698 1276  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:27:30.0698 1276  LSI_SCSI - ok
21:27:30.0745 1276  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv           C:\Windows\system32\drivers\luafv.sys
21:27:30.0776 1276  luafv - ok
21:27:30.0807 1276  [ F0435FE3C1EC2659D2BBF073CA0752EE ] massfilter      C:\Windows\system32\DRIVERS\massfilter.sys
21:27:30.0838 1276  massfilter - ok
21:27:30.0885 1276  [ 3C7B3072C3C5CC23F5FD46F8DFDA7480 ] massfilter_hs   C:\Windows\system32\drivers\massfilter_hs.sys
21:27:30.0901 1276  massfilter_hs - ok
21:27:30.0932 1276  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
21:27:30.0963 1276  Mcx2Svc - ok
21:27:30.0979 1276  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
21:27:30.0994 1276  megasas - ok
21:27:31.0010 1276  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:27:31.0026 1276  MegaSR - ok
21:27:31.0072 1276  [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
21:27:31.0104 1276  Microsoft Office Groove Audit Service - ok
21:27:31.0119 1276  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS           C:\Windows\system32\mmcss.dll
21:27:31.0150 1276  MMCSS - ok
21:27:31.0182 1276  [ F001861E5700EE84E2D4E52C712F4964 ] Modem           C:\Windows\system32\drivers\modem.sys
21:27:31.0228 1276  Modem - ok
21:27:31.0260 1276  [ 79D10964DE86B292320E9DFE02282A23 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
21:27:31.0275 1276  monitor - ok
21:27:31.0306 1276  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:27:31.0322 1276  mouclass - ok
21:27:31.0322 1276  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:27:31.0353 1276  mouhid - ok
21:27:31.0369 1276  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:27:31.0384 1276  mountmgr - ok
21:27:31.0400 1276  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\Windows\system32\drivers\mpio.sys
21:27:31.0416 1276  mpio - ok
21:27:31.0431 1276  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:27:31.0462 1276  mpsdrv - ok
21:27:31.0494 1276  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:27:31.0525 1276  MpsSvc - ok
21:27:31.0540 1276  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:27:31.0556 1276  MRxDAV - ok
21:27:31.0587 1276  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:27:31.0618 1276  mrxsmb - ok
21:27:31.0634 1276  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:27:31.0681 1276  mrxsmb10 - ok
21:27:31.0712 1276  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:27:31.0728 1276  mrxsmb20 - ok
21:27:31.0743 1276  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\Windows\system32\drivers\msahci.sys
21:27:31.0759 1276  msahci - ok
21:27:31.0774 1276  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
21:27:31.0790 1276  msdsm - ok
21:27:31.0806 1276  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC           C:\Windows\System32\msdtc.exe
21:27:31.0821 1276  MSDTC - ok
21:27:31.0852 1276  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:27:31.0884 1276  Msfs - ok
21:27:31.0884 1276  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
21:27:31.0899 1276  mshidkmdf - ok
21:27:31.0930 1276  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:27:31.0930 1276  msisadrv - ok
21:27:31.0946 1276  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
21:27:31.0962 1276  MSiSCSI - ok
21:27:31.0977 1276  msiserver - ok
21:27:31.0977 1276  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
21:27:31.0993 1276  MSKSSRV - ok
21:27:32.0008 1276  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:27:32.0024 1276  MSPCLOCK - ok
21:27:32.0040 1276  [ F456E973590D663B1073E9C463B40932 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
21:27:32.0071 1276  MSPQM - ok
21:27:32.0086 1276  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
21:27:32.0102 1276  MsRPC - ok
21:27:32.0118 1276  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
21:27:32.0133 1276  mssmbios - ok
21:27:32.0149 1276  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
21:27:32.0164 1276  MSTEE - ok
21:27:32.0180 1276  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:27:32.0180 1276  MTConfig - ok
21:27:32.0211 1276  [ 159FAD02F64E6381758C990F753BCC80 ] Mup             C:\Windows\system32\Drivers\mup.sys
21:27:32.0211 1276  Mup - ok
21:27:32.0242 1276  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\Windows\system32\qagentRT.dll
21:27:32.0274 1276  napagent - ok
21:27:32.0305 1276  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
21:27:32.0336 1276  NativeWifiP - ok
21:27:32.0367 1276  [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:27:32.0398 1276  NDIS - ok
21:27:32.0414 1276  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
21:27:32.0430 1276  NdisCap - ok
21:27:32.0430 1276  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:27:32.0461 1276  NdisTapi - ok
21:27:32.0492 1276  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
21:27:32.0539 1276  Ndisuio - ok
21:27:32.0570 1276  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
21:27:32.0601 1276  NdisWan - ok
21:27:32.0617 1276  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
21:27:32.0648 1276  NDProxy - ok
21:27:32.0679 1276  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
21:27:32.0726 1276  NetBIOS - ok
21:27:32.0757 1276  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
21:27:32.0788 1276  NetBT - ok
21:27:32.0804 1276  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\Windows\system32\lsass.exe
21:27:32.0820 1276  Netlogon - ok
21:27:32.0835 1276  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll
21:27:32.0866 1276  Netman - ok
21:27:32.0882 1276  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll
21:27:32.0960 1276  netprofm - ok
21:27:32.0976 1276  [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:27:32.0991 1276  NetTcpPortSharing - ok
21:27:33.0007 1276  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
21:27:33.0022 1276  nfrd960 - ok
21:27:33.0038 1276  [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:27:33.0116 1276  NlaSvc - ok
21:27:33.0132 1276  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:27:33.0178 1276  Npfs - ok
21:27:33.0194 1276  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi             C:\Windows\system32\nsisvc.dll
21:27:33.0210 1276  nsi - ok
21:27:33.0225 1276  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:27:33.0256 1276  nsiproxy - ok
21:27:33.0303 1276  [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:27:33.0366 1276  Ntfs - ok
21:27:33.0366 1276  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\Windows\system32\drivers\Null.sys
21:27:33.0397 1276  Null - ok
21:27:33.0428 1276  [ A0A9E53B4AAC3C6534A063ABA69BC19F ] NVHDA           C:\Windows\system32\drivers\nvhda32v.sys
21:27:33.0475 1276  NVHDA - ok
21:27:33.0662 1276  [ B69E6F70CE1151C8D62ABC9DEF64DFBE ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:27:33.0865 1276  nvlddmkm - ok
21:27:33.0880 1276  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:27:33.0896 1276  nvraid - ok
21:27:33.0927 1276  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:27:33.0927 1276  nvstor - ok
21:27:33.0974 1276  [ E4284FCF99FEA13A7E1836F87AE356F6 ] NVSvc           C:\Windows\system32\nvvsvc.exe
21:27:33.0990 1276  NVSvc - ok
21:27:34.0021 1276  [ 03E60E0BFA53ED15DC984FA34B44BB0F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
21:27:34.0052 1276  nvUpdatusService - ok
21:27:34.0083 1276  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:27:34.0099 1276  nv_agp - ok
21:27:34.0146 1276  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:27:34.0192 1276  odserv - ok
21:27:34.0208 1276  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
21:27:34.0239 1276  ohci1394 - ok
21:27:34.0255 1276  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:27:34.0270 1276  ose - ok
21:27:34.0286 1276  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:27:34.0333 1276  p2pimsvc - ok
21:27:34.0348 1276  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\Windows\system32\p2psvc.dll
21:27:34.0364 1276  p2psvc - ok
21:27:34.0395 1276  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
21:27:34.0411 1276  Parport - ok
21:27:34.0426 1276  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
21:27:34.0442 1276  partmgr - ok
21:27:34.0473 1276  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
21:27:34.0473 1276  Parvdm - ok
21:27:34.0489 1276  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:27:34.0504 1276  PcaSvc - ok
21:27:34.0551 1276  [ 673E55C3498EB970088E812EA820AA8F ] pci             C:\Windows\system32\drivers\pci.sys
21:27:34.0582 1276  pci - ok
21:27:34.0582 1276  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\Windows\system32\drivers\pciide.sys
21:27:34.0598 1276  pciide - ok
21:27:34.0614 1276  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:27:34.0629 1276  pcmcia - ok
21:27:34.0645 1276  [ 250F6B43D2B613172035C6747AEEB19F ] pcw             C:\Windows\system32\drivers\pcw.sys
21:27:34.0660 1276  pcw - ok
21:27:34.0676 1276  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:27:34.0707 1276  PEAUTH - ok
21:27:34.0738 1276  [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
21:27:34.0785 1276  PeerDistSvc - ok
21:27:34.0848 1276  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla             C:\Windows\system32\pla.dll
21:27:34.0894 1276  pla - ok
21:27:34.0926 1276  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:27:34.0941 1276  PlugPlay - ok
21:27:34.0957 1276  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
21:27:34.0972 1276  PNRPAutoReg - ok
21:27:34.0988 1276  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
21:27:35.0004 1276  PNRPsvc - ok
21:27:35.0019 1276  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
21:27:35.0050 1276  PolicyAgent - ok
21:27:35.0066 1276  [ F87D30E72E03D579A5199CCB3831D6EA ] Power           C:\Windows\system32\umpo.dll
21:27:35.0082 1276  Power - ok
21:27:35.0097 1276  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:27:35.0113 1276  PptpMiniport - ok
21:27:35.0128 1276  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
21:27:35.0160 1276  Processor - ok
21:27:35.0175 1276  [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc         C:\Windows\system32\profsvc.dll
21:27:35.0238 1276  ProfSvc - ok
21:27:35.0238 1276  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:27:35.0253 1276  ProtectedStorage - ok
21:27:35.0269 1276  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:27:35.0300 1276  Psched - ok
21:27:35.0316 1276  [ 053A608BCFEB5A4D0CECDDA703B08C83 ] PxHelp20        C:\Windows\system32\Drivers\PxHelp20.sys
21:27:35.0331 1276  PxHelp20 - ok
21:27:35.0362 1276  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
21:27:35.0409 1276  ql2300 - ok
21:27:35.0425 1276  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
21:27:35.0425 1276  ql40xx - ok
21:27:35.0456 1276  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE           C:\Windows\system32\qwave.dll
21:27:35.0472 1276  QWAVE - ok
21:27:35.0487 1276  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:27:35.0503 1276  QWAVEdrv - ok
21:27:35.0518 1276  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:27:35.0581 1276  RasAcd - ok
21:27:35.0596 1276  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
21:27:35.0643 1276  RasAgileVpn - ok
21:27:35.0659 1276  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto         C:\Windows\System32\rasauto.dll
21:27:35.0674 1276  RasAuto - ok
21:27:35.0690 1276  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
21:27:35.0721 1276  Rasl2tp - ok
21:27:35.0752 1276  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\Windows\System32\rasmans.dll
21:27:35.0799 1276  RasMan - ok
21:27:35.0799 1276  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:27:35.0830 1276  RasPppoe - ok
21:27:35.0846 1276  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
21:27:35.0862 1276  RasSstp - ok
21:27:35.0908 1276  [ D528BC58A489409BA40334EBF96A311B ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
21:27:35.0971 1276  rdbss - ok
21:27:36.0002 1276  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:27:36.0033 1276  rdpbus - ok
21:27:36.0064 1276  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:27:36.0080 1276  RDPCDD - ok
21:27:36.0111 1276  [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
21:27:36.0142 1276  RDPDR - ok
21:27:36.0142 1276  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:27:36.0174 1276  RDPENCDD - ok
21:27:36.0174 1276  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:27:36.0189 1276  RDPREFMP - ok
21:27:36.0236 1276  [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:27:36.0298 1276  RdpVideoMiniport - ok
21:27:36.0314 1276  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
21:27:36.0376 1276  RDPWD - ok
21:27:36.0408 1276  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:27:36.0454 1276  rdyboost - ok
21:27:36.0470 1276  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:27:36.0517 1276  RemoteAccess - ok
21:27:36.0532 1276  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:27:36.0564 1276  RemoteRegistry - ok
21:27:36.0564 1276  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:27:36.0595 1276  RpcEptMapper - ok
21:27:36.0610 1276  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\Windows\system32\locator.exe
21:27:36.0626 1276  RpcLocator - ok
21:27:36.0642 1276  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs           C:\Windows\system32\rpcss.dll
21:27:36.0657 1276  RpcSs - ok
21:27:36.0704 1276  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:27:36.0782 1276  rspndr - ok
21:27:36.0813 1276  [ 1A42B4CBA44778D312E668CD166CBCBB ] RTL8167         C:\Windows\system32\DRIVERS\Rt86win7.sys
21:27:36.0829 1276  RTL8167 - ok
21:27:36.0860 1276  [ 08E0B15F88CBFFEE0BB18D321C42E1B4 ] RTL8192cu       C:\Windows\system32\DRIVERS\RTL8192cu.sys
21:27:36.0876 1276  RTL8192cu - ok
21:27:36.0922 1276  [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
21:27:36.0969 1276  s3cap - ok
21:27:36.0985 1276  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs           C:\Windows\system32\lsass.exe
21:27:37.0000 1276  SamSs - ok
21:27:37.0032 1276  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:27:37.0063 1276  sbp2port - ok
21:27:37.0094 1276  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:27:37.0125 1276  SCardSvr - ok
21:27:37.0156 1276  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:27:37.0188 1276  scfilter - ok
21:27:37.0219 1276  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\Windows\system32\schedsvc.dll
21:27:37.0281 1276  Schedule - ok
21:27:37.0281 1276  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc     C:\Windows\System32\certprop.dll
21:27:37.0312 1276  SCPolicySvc - ok
21:27:37.0344 1276  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:27:37.0390 1276  SDRSVC - ok
21:27:37.0422 1276  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:27:37.0437 1276  secdrv - ok
21:27:37.0468 1276  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\Windows\system32\seclogon.dll
21:27:37.0500 1276  seclogon - ok
21:27:37.0515 1276  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\Windows\system32\sens.dll
21:27:37.0546 1276  SENS - ok
21:27:37.0562 1276  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:27:37.0578 1276  SensrSvc - ok
21:27:37.0593 1276  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
21:27:37.0609 1276  Serenum - ok
21:27:37.0624 1276  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
21:27:37.0640 1276  Serial - ok
21:27:37.0656 1276  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
21:27:37.0671 1276  sermouse - ok
21:27:37.0687 1276  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\Windows\system32\sessenv.dll
21:27:37.0718 1276  SessionEnv - ok
21:27:37.0749 1276  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
21:27:37.0780 1276  sffdisk - ok
21:27:37.0796 1276  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
21:27:37.0827 1276  sffp_mmc - ok
21:27:37.0843 1276  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
21:27:37.0858 1276  sffp_sd - ok
21:27:37.0874 1276  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
21:27:37.0905 1276  sfloppy - ok
21:27:37.0936 1276  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:27:37.0983 1276  SharedAccess - ok
21:27:38.0014 1276  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:27:38.0030 1276  ShellHWDetection - ok
21:27:38.0046 1276  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\Windows\system32\drivers\sisagp.sys
21:27:38.0046 1276  sisagp - ok
21:27:38.0077 1276  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:27:38.0092 1276  SiSRaid2 - ok
21:27:38.0092 1276  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
21:27:38.0108 1276  SiSRaid4 - ok
21:27:38.0124 1276  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb             C:\Windows\system32\DRIVERS\smb.sys
21:27:38.0139 1276  Smb - ok
21:27:38.0202 1276  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:27:38.0233 1276  SNMPTRAP - ok
21:27:38.0295 1276  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr           C:\Windows\system32\drivers\spldr.sys
21:27:38.0326 1276  spldr - ok
21:27:38.0373 1276  [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler         C:\Windows\System32\spoolsv.exe
21:27:38.0404 1276  Spooler - ok
21:27:38.0498 1276  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\Windows\system32\sppsvc.exe
21:27:38.0607 1276  sppsvc - ok
21:27:38.0638 1276  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
21:27:38.0654 1276  sppuinotify - ok
21:27:38.0685 1276  [ CDDDEC541BC3C96F91ECB48759673505 ] sptd            C:\Windows\system32\Drivers\sptd.sys
21:27:38.0685 1276  Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
21:27:38.0685 1276  sptd ( LockedFile.Multi.Generic ) - warning
21:27:38.0685 1276  sptd - detected LockedFile.Multi.Generic (1)
21:27:38.0732 1276  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv             C:\Windows\system32\DRIVERS\srv.sys
21:27:38.0794 1276  srv - ok
21:27:38.0826 1276  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:27:38.0841 1276  srv2 - ok
21:27:38.0857 1276  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:27:38.0872 1276  srvnet - ok
21:27:38.0950 1276  [ 64E44ACD8C238FCBBB78F0BA4BDC4B05 ] ssadbus         C:\Windows\system32\DRIVERS\ssadbus.sys
21:27:38.0997 1276  ssadbus - ok
21:27:39.0013 1276  [ BB2C84A15C765DA89FD832B0E73F26CE ] ssadmdfl        C:\Windows\system32\DRIVERS\ssadmdfl.sys
21:27:39.0060 1276  ssadmdfl - ok
21:27:39.0060 1276  [ 6D0D132DDC6F43EDA00DCED6D8B1CA31 ] ssadmdm         C:\Windows\system32\DRIVERS\ssadmdm.sys
21:27:39.0075 1276  ssadmdm - ok
21:27:39.0091 1276  [ 1A5A397BC459F346AB56492B61EF79F6 ] ssadserd        C:\Windows\system32\DRIVERS\ssadserd.sys
21:27:39.0122 1276  ssadserd - ok
21:27:39.0153 1276  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
21:27:39.0216 1276  SSDPSRV - ok
21:27:39.0247 1276  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys
21:27:39.0247 1276  ssmdrv - ok
21:27:39.0262 1276  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
21:27:39.0278 1276  SstpSvc - ok
21:27:39.0325 1276  [ 5A19667A580B1CE886EAF968B9743F45 ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:27:39.0356 1276  Stereo Service - ok
21:27:39.0372 1276  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
21:27:39.0387 1276  stexstor - ok
21:27:39.0434 1276  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\Windows\System32\wiaservc.dll
21:27:39.0465 1276  StiSvc - ok
21:27:39.0496 1276  [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
21:27:39.0512 1276  storflt - ok
21:27:39.0528 1276  [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
21:27:39.0543 1276  storvsc - ok
21:27:39.0559 1276  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\Windows\system32\drivers\swenum.sys
21:27:39.0574 1276  swenum - ok
21:27:39.0652 1276  [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard     C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
21:27:39.0684 1276  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
21:27:39.0684 1276  SwitchBoard - detected UnsignedFile.Multi.Generic (1)
21:27:39.0699 1276  [ A28BD92DF340E57B024BA433165D34D7 ] swprv           C:\Windows\System32\swprv.dll
21:27:39.0715 1276  swprv - ok
21:27:39.0746 1276  Synth3dVsc - ok
21:27:39.0793 1276  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain         C:\Windows\system32\sysmain.dll
21:27:39.0840 1276  SysMain - ok
21:27:39.0855 1276  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:27:39.0871 1276  TabletInputService - ok
21:27:39.0902 1276  [ 126D7B3B4C7B724491C604060E1F4E14 ] tandpl          C:\Windows\system32\drivers\tandpl.sys
21:27:39.0902 1276  tandpl ( UnsignedFile.Multi.Generic ) - warning
21:27:39.0902 1276  tandpl - detected UnsignedFile.Multi.Generic (1)
21:27:39.0918 1276  [ 613BF4820361543956909043A265C6AC ] TapiSrv         C:\Windows\System32\tapisrv.dll
21:27:39.0949 1276  TapiSrv - ok
21:27:39.0949 1276  [ B799D9FDB26111737F58288D8DC172D9 ] TBS             C:\Windows\System32\tbssvc.dll
21:27:39.0980 1276  TBS - ok
21:27:40.0027 1276  [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
21:27:40.0089 1276  Tcpip - ok
21:27:40.0105 1276  [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:27:40.0120 1276  TCPIP6 - ok
21:27:40.0167 1276  [ DCFEB82CA988598CEB8F83148616038E ] tcpipBM         C:\Windows\system32\drivers\tcpipBM.sys
21:27:40.0167 1276  tcpipBM ( UnsignedFile.Multi.Generic ) - warning
21:27:40.0167 1276  tcpipBM - detected UnsignedFile.Multi.Generic (1)
21:27:40.0183 1276  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:27:40.0214 1276  tcpipreg - ok
21:27:40.0245 1276  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:27:40.0276 1276  TDPIPE - ok
21:27:40.0308 1276  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
21:27:40.0339 1276  TDTCP - ok
21:27:40.0386 1276  [ B459575348C20E8121D6039DA063C704 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
21:27:40.0448 1276  tdx - ok
21:27:40.0573 1276  [ 2BBB318EA9F34FDC508CEA4AAB98D770 ] TeamViewer7     E:\teamviewer\Version7\TeamViewer_Service.exe
21:27:40.0651 1276  TeamViewer7 - ok
21:27:40.0682 1276  [ 9101FFFCFCCD1A30E870A5B8A9091B10 ] teamviewervpn   C:\Windows\system32\DRIVERS\teamviewervpn.sys
21:27:40.0729 1276  teamviewervpn - ok
21:27:40.0760 1276  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\Windows\system32\drivers\termdd.sys
21:27:40.0791 1276  TermDD - ok
21:27:40.0822 1276  [ 382C804C92811BE57829D8E550A900E2 ] TermService     C:\Windows\System32\termsrv.dll
21:27:40.0854 1276  TermService - ok
21:27:40.0869 1276  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\Windows\system32\themeservice.dll
21:27:40.0885 1276  Themes - ok
21:27:40.0900 1276  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER     C:\Windows\system32\mmcss.dll
21:27:40.0916 1276  THREADORDER - ok
21:27:40.0932 1276  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\Windows\System32\trkwks.dll
21:27:40.0963 1276  TrkWks - ok
21:27:41.0025 1276  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:27:41.0072 1276  TrustedInstaller - ok
21:27:41.0088 1276  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:27:41.0103 1276  tssecsrv - ok
21:27:41.0134 1276  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:27:41.0166 1276  TsUsbFlt - ok
21:27:41.0181 1276  tsusbhub - ok
21:27:41.0212 1276  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:27:41.0244 1276  tunnel - ok
21:27:41.0259 1276  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
21:27:41.0275 1276  uagp35 - ok
21:27:41.0290 1276  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:27:41.0337 1276  udfs - ok
21:27:41.0368 1276  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
21:27:41.0384 1276  UI0Detect - ok
21:27:41.0400 1276  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:27:41.0415 1276  uliagpkx - ok
21:27:41.0431 1276  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus           C:\Windows\system32\drivers\umbus.sys
21:27:41.0446 1276  umbus - ok
21:27:41.0462 1276  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
21:27:41.0462 1276  UmPass - ok
21:27:41.0493 1276  [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService    C:\Windows\System32\umrdp.dll
21:27:41.0540 1276  UmRdpService - ok
21:27:41.0556 1276  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\Windows\System32\upnphost.dll
21:27:41.0587 1276  upnphost - ok
21:27:41.0649 1276  [ 1D9F2BD026E8E2D45033A4DF3F16B78C ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
21:27:41.0680 1276  usbaudio - ok
21:27:41.0712 1276  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
21:27:41.0774 1276  usbccgp - ok
21:27:41.0805 1276  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
21:27:41.0821 1276  usbcir - ok
21:27:41.0852 1276  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
21:27:41.0852 1276  usbehci - ok
21:27:41.0883 1276  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
21:27:41.0930 1276  usbhub - ok
21:27:41.0961 1276  [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
21:27:41.0992 1276  usbohci - ok
21:27:42.0039 1276  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
21:27:42.0070 1276  usbprint - ok
21:27:42.0102 1276  [ F991AB9CC6B908DB552166768176896A ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:27:42.0148 1276  USBSTOR - ok
21:27:42.0164 1276  [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
21:27:42.0195 1276  usbuhci - ok
21:27:42.0211 1276  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms           C:\Windows\System32\uxsms.dll
21:27:42.0226 1276  UxSms - ok
21:27:42.0242 1276  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\Windows\system32\lsass.exe
21:27:42.0242 1276  VaultSvc - ok
21:27:42.0258 1276  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:27:42.0273 1276  vdrvroot - ok
21:27:42.0289 1276  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds             C:\Windows\System32\vds.exe
21:27:42.0320 1276  vds - ok
21:27:42.0320 1276  [ 17C408214EA61696CEC9C66E388B14F3 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
21:27:42.0351 1276  vga - ok
21:27:42.0351 1276  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave         C:\Windows\System32\drivers\vga.sys
21:27:42.0367 1276  VgaSave - ok
21:27:42.0382 1276  VGPU - ok
21:27:42.0414 1276  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
21:27:42.0445 1276  vhdmp - ok
21:27:42.0460 1276  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
21:27:42.0460 1276  viaagp - ok
21:27:42.0476 1276  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys
21:27:42.0492 1276  ViaC7 - ok
21:27:42.0523 1276  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\Windows\system32\drivers\viaide.sys
21:27:42.0523 1276  viaide - ok
21:27:42.0554 1276  [ C2F2911156FDC7817C52829C86DA494E ] vmbus           C:\Windows\system32\drivers\vmbus.sys
21:27:42.0570 1276  vmbus - ok
21:27:42.0570 1276  [ D4D77455211E204F370D08F4963063CE ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
21:27:42.0601 1276  VMBusHID - ok
21:27:42.0679 1276  [ C6E18C3B43378AE3FCECDFF0F0BB7BE7 ] VMCService      E:\Program Files\VMC\Bin\VMCService.exe
21:27:42.0710 1276  VMCService ( UnsignedFile.Multi.Generic ) - warning
21:27:42.0710 1276  VMCService - detected UnsignedFile.Multi.Generic (1)
21:27:42.0726 1276  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:27:42.0757 1276  volmgr - ok
21:27:42.0772 1276  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
21:27:42.0788 1276  volmgrx - ok
21:27:42.0804 1276  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
21:27:42.0804 1276  volsnap - ok
21:27:42.0819 1276  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
21:27:42.0835 1276  vsmraid - ok
21:27:42.0882 1276  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS             C:\Windows\system32\vssvc.exe
21:27:42.0944 1276  VSS - ok
21:27:42.0960 1276  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
21:27:42.0975 1276  vwifibus - ok
21:27:43.0006 1276  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
21:27:43.0022 1276  vwififlt - ok
21:27:43.0053 1276  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time         C:\Windows\system32\w32time.dll
21:27:43.0069 1276  W32Time - ok
21:27:43.0069 1276  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
21:27:43.0100 1276  WacomPen - ok
21:27:43.0116 1276  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:27:43.0147 1276  WANARP - ok
21:27:43.0147 1276  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:27:43.0162 1276  Wanarpv6 - ok
21:27:43.0178 1276  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\Windows\system32\wbengine.exe
21:27:43.0225 1276  wbengine - ok
21:27:43.0240 1276  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:27:43.0256 1276  WbioSrvc - ok
21:27:43.0287 1276  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc         C:\Windows\System32\wcncsvc.dll
21:27:43.0365 1276  wcncsvc - ok
21:27:43.0381 1276  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:27:43.0428 1276  WcsPlugInService - ok
21:27:43.0428 1276  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\Windows\system32\DRIVERS\wd.sys
21:27:43.0443 1276  Wd - ok
21:27:43.0474 1276  [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:27:43.0521 1276  Wdf01000 - ok
21:27:43.0537 1276  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:27:43.0599 1276  WdiServiceHost - ok
21:27:43.0599 1276  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost   C:\Windows\system32\wdi.dll
21:27:43.0615 1276  WdiSystemHost - ok
21:27:43.0646 1276  [ A9D880F97530D5B8FEE278923349929D ] WebClient       C:\Windows\System32\webclnt.dll
21:27:43.0677 1276  WebClient - ok
21:27:43.0693 1276  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:27:43.0724 1276  Wecsvc - ok
21:27:43.0740 1276  [ AC804569BB2364FB6017370258A4091B ] wercplsupport   C:\Windows\System32\wercplsupport.dll
21:27:43.0771 1276  wercplsupport - ok
21:27:43.0771 1276  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:27:43.0802 1276  WerSvc - ok
21:27:43.0818 1276  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:27:43.0833 1276  WfpLwf - ok
21:27:43.0849 1276  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:27:43.0849 1276  WIMMount - ok
21:27:43.0896 1276  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
21:27:43.0942 1276  WinDefend - ok
21:27:43.0958 1276  WinHttpAutoProxySvc - ok
21:27:44.0005 1276  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
21:27:44.0067 1276  Winmgmt - ok
21:27:44.0114 1276  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM           C:\Windows\system32\WsmSvc.dll
21:27:44.0176 1276  WinRM - ok
21:27:44.0223 1276  [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
21:27:44.0254 1276  WinUsb - ok
21:27:44.0317 1276  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc         C:\Windows\System32\wlansvc.dll
21:27:44.0364 1276  Wlansvc - ok
21:27:44.0442 1276  [ 6067ACEF367E79914AF628FA1E9B5330 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
21:27:44.0457 1276  wlcrasvc - ok
21:27:44.0551 1276  [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:27:44.0613 1276  wlidsvc - ok
21:27:44.0644 1276  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
21:27:44.0691 1276  WmiAcpi - ok
21:27:44.0722 1276  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:27:44.0769 1276  wmiApSrv - ok
21:27:44.0847 1276  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
21:27:44.0910 1276  WMPNetworkSvc - ok
21:27:44.0925 1276  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:27:44.0956 1276  WPCSvc - ok
21:27:44.0988 1276  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:27:45.0050 1276  WPDBusEnum - ok
21:27:45.0097 1276  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
21:27:45.0144 1276  ws2ifsl - ok
21:27:45.0175 1276  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\Windows\system32\wscsvc.dll
21:27:45.0206 1276  wscsvc - ok
21:27:45.0206 1276  WSearch - ok
21:27:45.0253 1276  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll
21:27:45.0300 1276  wuauserv - ok
21:27:45.0346 1276  [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:27:45.0378 1276  WudfPf - ok
21:27:45.0378 1276  [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:27:45.0393 1276  WUDFRd - ok
21:27:45.0424 1276  [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
21:27:45.0456 1276  wudfsvc - ok
21:27:45.0487 1276  [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc         C:\Windows\System32\wwansvc.dll
21:27:45.0518 1276  WwanSvc - ok
21:27:45.0565 1276  [ 9474B548D96FBE5E5A99B9AC8AF65BD8 ] zghsdiag        C:\Windows\system32\DRIVERS\zghsdiag.sys
21:27:45.0596 1276  zghsdiag - ok
21:27:45.0612 1276  [ 5CBAFE90E78C13C0429971E2FA05B48A ] zghsmdm         C:\Windows\system32\DRIVERS\zghsmdm.sys
21:27:45.0643 1276  zghsmdm - ok
21:27:45.0674 1276  [ DEC848571EB87EF2F10FA289320D7A44 ] zghsnmea        C:\Windows\system32\DRIVERS\zghsnmea.sys
21:27:45.0690 1276  zghsnmea - ok
21:27:45.0705 1276  [ C2215C6ADA8B1E9FEB507CEE9B446661 ] ZTEusbmdm6k     C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys
21:27:45.0736 1276  ZTEusbmdm6k - ok
21:27:45.0752 1276  [ 9862F9D2FF50AE748ED42C022E6AAC15 ] ZTEusbnet       C:\Windows\system32\DRIVERS\ZTEusbnet.sys
21:27:45.0768 1276  ZTEusbnet - ok
21:27:45.0783 1276  [ F16CE3C7690AB7426DC96520D54A737E ] ZTEusbnmea      C:\Windows\system32\DRIVERS\ZTEusbnmea.sys
21:27:45.0814 1276  ZTEusbnmea - ok
21:27:45.0814 1276  [ C2215C6ADA8B1E9FEB507CEE9B446661 ] ZTEusbser6k     C:\Windows\system32\DRIVERS\ZTEusbser6k.sys
21:27:45.0830 1276  ZTEusbser6k - ok
21:27:45.0846 1276  [ F16CE3C7690AB7426DC96520D54A737E ] ZTEusbvoice     C:\Windows\system32\DRIVERS\ZTEusbvoice.sys
21:27:45.0846 1276  ZTEusbvoice - ok
21:27:45.0861 1276  ================ Scan global ===============================
21:27:45.0924 1276  [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
21:27:45.0955 1276  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:27:45.0970 1276  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\Windows\system32\winsrv.dll
21:27:46.0002 1276  [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
21:27:46.0017 1276  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
21:27:46.0017 1276  [Global] - ok
21:27:46.0017 1276  ================ Scan MBR ==================================
21:27:46.0033 1276  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:27:46.0438 1276  \Device\Harddisk0\DR0 - ok
21:27:46.0438 1276  ================ Scan VBR ==================================
21:27:46.0438 1276  [ 2BCA57A5544EFA7843D3397D6F43C02A ] \Device\Harddisk0\DR0\Partition1
21:27:46.0438 1276  \Device\Harddisk0\DR0\Partition1 - ok
21:27:46.0485 1276  [ 99200672EC99E77D8952E7E529DEDD4A ] \Device\Harddisk0\DR0\Partition2
21:27:46.0485 1276  \Device\Harddisk0\DR0\Partition2 - ok
21:27:46.0501 1276  [ 7121F92D8BA49FD731F3ED6F22B5EC10 ] \Device\Harddisk0\DR0\Partition3
21:27:46.0501 1276  \Device\Harddisk0\DR0\Partition3 - ok
21:27:46.0516 1276  [ 8CB2DF087D07941900F5D07328D049F6 ] \Device\Harddisk0\DR0\Partition4
21:27:46.0516 1276  \Device\Harddisk0\DR0\Partition4 - ok
21:27:46.0516 1276  ============================================================
21:27:46.0516 1276  Scan finished
21:27:46.0516 1276  ============================================================
21:27:46.0548 1692  Detected object count: 7
21:27:46.0548 1692  Actual detected object count: 7
21:29:39.0601 1692  BMLoad ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  BMLoad ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  enodpl ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  enodpl ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  sptd ( LockedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  sptd ( LockedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  tandpl ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  tandpl ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  tcpipBM ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  tcpipBM ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:29:39.0601 1692  VMCService ( UnsignedFile.Multi.Generic ) - skipped by user
21:29:39.0601 1692  VMCService ( UnsignedFile.Multi.Generic ) - User select action: Skip

So, nun auch mit CC Cleaner die letzt mal genannten Schritte durchgeführt. Lasse momentan den AdwCleaner laufen wie oben beschrieben. Danach pack ich F-Secure rauf. Sollte dann wohl passen?

markusg · 16.05.2013, 23:44

weiter mit den de und reinstalationen bitte

16.05.2013, 18:02	#17
markusg /// Malware-holic	Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter hättest mit dem kauf warten sollen, aber f-secure is auch ok, fix steht oben vor deinem post :-) __________________ __________________

16.05.2013, 23:44	#21
markusg /// Malware-holic	Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter weiter mit den de und reinstalationen bitte __________________ --> Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter

Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter

Plagegeister aller Art und deren Bekämpfung: Weißer-Bildschirm mit Zahlungsaufforderung, Abgesicherter Modus fährt sofort runter