Hallo,

offenbar habe ich mir was auf meinem Windows 7-Rechner eingefangen. Wenn ich Dateien auf den Desktop ablege, werden diese umgehend verschlüsselt und ich habe darauf keinen Zugriff mehr. Ich kann sie weder öffnen noch kopieren. Löschen funktioniert aber.

Hier gibt es bereits einen ähnlichen (identischen?) Fall. Die dortige Anleitung arbeite ich gerade durch. Vielleicht kann ja jemand bereits was mit den Logs anfangen.

Das System wurde vor ca. 6-8 Wochen neu aufgesetzt. Es sind externe Festplatten im Dauergebrauch angeschlossen. Diese sind aber zur Zeit ausgestöpselt und werden von mir noch komplett gescannt.

Folgendes habe ich bereits gemacht:

- Eine automatische Verschlüüselung ausgeschaltet, gemäß dieser Anleitung.

- Einen OLT Scan; die Logdateien füge ich unten bei

- Avira läuft grad noch, hat aber nichts gefunden bisher

- Malwarebytes heruntergeladen, noch nicht ausgeführt

- Eset Smartinstaller heruntergeladen, noch nicht ausgeführt

Hi
werden die Dateien umbenannt oder gibt es sonst irgendwelche meldungen beim öffnen?

Avira ist durchgelaufen, keine Fundmeldung.

Dateien werden nicht umbenannt, sie werden lediglich verschlüsselt. Ich kann auch keine Downloads auf den Desktop speichern.

Bei JPGs gibt es folgende Meldung, wenn ich sie mit der Windows-Fotoanzeige öffne:
"Das Bils kann nicht geöffnet werden, da Sie nicht berechtigt sind, auf den Speicherort zuzugreifen."

PDF öffne ich mit dem Acrobat Reader:
"Beim Öffnen dieses Dokuments ist ein Fehler aufgetreten. Zugriff verweigert."

Ich habe nur einen Benuzer eingerichtet, der natürlich auch Adminrechte hat.
Nicht verschlüsselte Dateien kann ich wie gewohnt nutzen.
Möchte ich Ordner öffnen, die auf dem Desktop liegen, bekomme ich die Meldung:
"Sie verfügen momentan nicht über die Berechtigung des Zugriffs auf diesen Ordner. Klicken Sie auf 'Fortsetzen', um dauerhaft Zugriff auf diesen Ordner zu erhalten."

Edit 1:
Ich sehe gerade, die Links im ersten Beitrag sind nicht übernommen worden:

http://www.trojaner-board.de/123811-...rtet-win7.html

hxxp://www.winfaq.de/faq_html/Content/tip2500/onlinefaq.php?h=tip2512.htm

Edit 2:

Malwarebytes hat auch nichts gefunden im Quick-Scan:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.06.16.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
DoVi :: DOVI-PC [Administrator]

16.06.2013 18:21:08
mbam-log-2013-06-16 (18-21-08).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 253941
Laufzeit: 4 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

hör bitte auf, irgendwelche scans zu machen, die nicht angefordert sind
was ist, wenn du die Dateien an nen andern ort kopierst, gehen sie dann?

Zwei Scans laufen grad noch, Malwarebytes hat bereits einen Fund.

Ich benötige Adminrechte, um die Datei zu kopieren, anschließend heißt es "Dateizugriff wurde verweigert. Sie benötigen Berechtigungen zur Durchführung des Vorgangs.
Sie müssen die erforderlichen Berechtigungen von 'DoVi-PC\DoVi' erhalten, um Änderungen an dieser Datei durchführen zu können."
(Das ist eben mein Benutzerkonto...)
Dann kann ich wiederholen oder abbrechen klicken.

du sollst keine weiteren scans laufen lassen sagte ich ja.

warum ist in der hosts datei adobe geblockt?

Was hat das für einen Vorteil wenn ich die Scans abbreche? Oder soll ich erst was anderes machen, bevor ich scannen lasse?

Kann ich dir nicht sagen. Ich hab die Installation nicht vorgenommen. Hat ein Kumpel gemacht. Er sagte, er hätte von der Arbeit her Mehrfachlizenzen oder so, keine Ahnung.

scans abbrechen, und vor allem nich mehrere auf einmal.
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Auf dem Desktop kann ich die nicht speichern bzw. ich kann die Datei anschließend nicht öffnen. Kann ich das in einem anderen Ordner machen?

Folgende Meldung erhalte ich beim Öffnen:
"Aufdas angegebene Gerät bzw. den Pfad kann nicht zugegriffen werden.Si verfügen eventuell nicht über ausreichende Berechtigungen, um auf das Element zugreifen zu können."

a kannst du

Logfile TDSSKiller:

19:03:57.0942 3896  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:03:58.0062 3896  ============================================================
19:03:58.0062 3896  Current date / time: 2013/06/16 19:03:58.0062
19:03:58.0062 3896  SystemInfo:
19:03:58.0062 3896  
19:03:58.0062 3896  OS Version: 6.1.7601 ServicePack: 1.0
19:03:58.0062 3896  Product type: Workstation
19:03:58.0062 3896  ComputerName: DOVI-PC
19:03:58.0062 3896  UserName: DoVi
19:03:58.0062 3896  Windows directory: C:\Windows
19:03:58.0062 3896  System windows directory: C:\Windows
19:03:58.0062 3896  Running under WOW64
19:03:58.0062 3896  Processor architecture: Intel x64
19:03:58.0062 3896  Number of processors: 2
19:03:58.0062 3896  Page size: 0x1000
19:03:58.0062 3896  Boot type: Normal boot
19:03:58.0062 3896  ============================================================
19:03:59.0052 3896  Drive \Device\Harddisk0\DR0 - Size: 0x132C570000 (76.69 Gb), SectorSize: 0x200, Cylinders: 0x271B, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:03:59.0062 3896  ============================================================
19:03:59.0062 3896  \Device\Harddisk0\DR0:
19:03:59.0072 3896  MBR partitions:
19:03:59.0072 3896  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:03:59.0072 3896  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x992F800
19:03:59.0072 3896  ============================================================
19:03:59.0092 3896  C: <-> \Device\Harddisk0\DR0\Partition2
19:03:59.0092 3896  ============================================================
19:03:59.0092 3896  Initialize success
19:03:59.0092 3896  ============================================================
19:07:30.0179 4356  ============================================================
19:07:30.0179 4356  Scan started
19:07:30.0179 4356  Mode: Manual; SigCheck; TDLFS; 
19:07:30.0179 4356  ============================================================
19:07:31.0459 4356  ================ Scan system memory ========================
19:07:31.0459 4356  System memory - ok
19:07:31.0459 4356  ================ Scan services =============================
19:07:31.0609 4356  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
19:07:31.0719 4356  1394ohci - ok
19:07:31.0769 4356  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
19:07:31.0789 4356  ACPI - ok
19:07:31.0819 4356  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
19:07:31.0889 4356  AcpiPmi - ok
19:07:31.0989 4356  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:07:32.0019 4356  AdobeARMservice - ok
19:07:32.0119 4356  [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:07:32.0149 4356  AdobeFlashPlayerUpdateSvc - ok
19:07:32.0199 4356  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
19:07:32.0229 4356  adp94xx - ok
19:07:32.0249 4356  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
19:07:32.0269 4356  adpahci - ok
19:07:32.0289 4356  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
19:07:32.0309 4356  adpu320 - ok
19:07:32.0339 4356  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
19:07:32.0469 4356  AeLookupSvc - ok
19:07:32.0509 4356  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
19:07:32.0569 4356  AFD - ok
19:07:32.0609 4356  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
19:07:32.0619 4356  agp440 - ok
19:07:32.0649 4356  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
19:07:32.0709 4356  ALG - ok
19:07:32.0729 4356  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
19:07:32.0739 4356  aliide - ok
19:07:32.0749 4356  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
19:07:32.0759 4356  amdide - ok
19:07:32.0799 4356  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
19:07:32.0849 4356  AmdK8 - ok
19:07:32.0869 4356  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
19:07:32.0909 4356  AmdPPM - ok
19:07:32.0949 4356  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
19:07:32.0959 4356  amdsata - ok
19:07:32.0989 4356  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
19:07:33.0009 4356  amdsbs - ok
19:07:33.0019 4356  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
19:07:33.0029 4356  amdxata - ok
19:07:33.0079 4356  [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
19:07:33.0089 4356  AntiVirSchedulerService - ok
19:07:33.0109 4356  [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
19:07:33.0119 4356  AntiVirService - ok
19:07:33.0149 4356  [ 9EDAE2D1CA368E8D01BEE8BFBC9488E4 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
19:07:33.0169 4356  AntiVirWebService - ok
19:07:33.0209 4356  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
19:07:33.0369 4356  AppID - ok
19:07:33.0389 4356  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
19:07:33.0459 4356  AppIDSvc - ok
19:07:33.0509 4356  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll
19:07:33.0539 4356  Appinfo - ok
19:07:33.0579 4356  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll
19:07:33.0619 4356  AppMgmt - ok
19:07:33.0659 4356  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
19:07:33.0679 4356  arc - ok
19:07:33.0689 4356  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
19:07:33.0709 4356  arcsas - ok
19:07:33.0789 4356  [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:07:33.0809 4356  aspnet_state - ok
19:07:33.0839 4356  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
19:07:33.0899 4356  AsyncMac - ok
19:07:33.0929 4356  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
19:07:33.0939 4356  atapi - ok
19:07:33.0989 4356  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:07:34.0049 4356  AudioEndpointBuilder - ok
19:07:34.0069 4356  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
19:07:34.0109 4356  AudioSrv - ok
19:07:34.0129 4356  [ 09E6069EF94B345061B4BD3CEBD974C8 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
19:07:34.0169 4356  avgntflt - ok
19:07:34.0189 4356  [ 488486DAD09A5B6C6DBB8B990A8B2307 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
19:07:34.0199 4356  avipbb - ok
19:07:34.0229 4356  [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
19:07:34.0239 4356  avkmgr - ok
19:07:34.0289 4356  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
19:07:34.0379 4356  AxInstSV - ok
19:07:34.0419 4356  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
19:07:34.0469 4356  b06bdrv - ok
19:07:34.0509 4356  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
19:07:34.0539 4356  b57nd60a - ok
19:07:34.0569 4356  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
19:07:34.0599 4356  BDESVC - ok
19:07:34.0619 4356  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
19:07:34.0689 4356  Beep - ok
19:07:34.0749 4356  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
19:07:34.0799 4356  BFE - ok
19:07:34.0829 4356  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
19:07:34.0889 4356  BITS - ok
19:07:34.0899 4356  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
19:07:34.0929 4356  blbdrive - ok
19:07:34.0949 4356  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
19:07:34.0989 4356  bowser - ok
19:07:35.0029 4356  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:07:35.0109 4356  BrFiltLo - ok
19:07:35.0119 4356  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:07:35.0139 4356  BrFiltUp - ok
19:07:35.0169 4356  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
19:07:35.0199 4356  Browser - ok
19:07:35.0229 4356  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
19:07:35.0269 4356  Brserid - ok
19:07:35.0279 4356  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
19:07:35.0299 4356  BrSerWdm - ok
19:07:35.0319 4356  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
19:07:35.0339 4356  BrUsbMdm - ok
19:07:35.0349 4356  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
19:07:35.0369 4356  BrUsbSer - ok
19:07:35.0409 4356  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
19:07:35.0479 4356  BthEnum - ok
19:07:35.0489 4356  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
19:07:35.0519 4356  BTHMODEM - ok
19:07:35.0549 4356  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
19:07:35.0569 4356  BthPan - ok
19:07:35.0629 4356  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys
19:07:35.0699 4356  BTHPORT - ok
19:07:35.0729 4356  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
19:07:35.0779 4356  bthserv - ok
19:07:35.0799 4356  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
19:07:35.0829 4356  BTHUSB - ok
19:07:35.0849 4356  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
19:07:35.0909 4356  cdfs - ok
19:07:35.0959 4356  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys
19:07:35.0989 4356  cdrom - ok
19:07:36.0029 4356  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
19:07:36.0089 4356  CertPropSvc - ok
19:07:36.0109 4356  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
19:07:36.0149 4356  circlass - ok
19:07:36.0189 4356  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
19:07:36.0209 4356  CLFS - ok
19:07:36.0259 4356  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:07:36.0289 4356  clr_optimization_v2.0.50727_32 - ok
19:07:36.0329 4356  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:07:36.0339 4356  clr_optimization_v2.0.50727_64 - ok
19:07:36.0399 4356  [ 6D7C8A951AF6AD6835C029B3CB88D333 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:07:36.0419 4356  clr_optimization_v4.0.30319_32 - ok
19:07:36.0429 4356  [ 86329C35FF23CFEF0FB6C0023BA06BCE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:07:36.0449 4356  clr_optimization_v4.0.30319_64 - ok
19:07:36.0469 4356  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
19:07:36.0509 4356  CmBatt - ok
19:07:36.0529 4356  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
19:07:36.0539 4356  cmdide - ok
19:07:36.0579 4356  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
19:07:36.0619 4356  CNG - ok
19:07:36.0649 4356  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
19:07:36.0659 4356  Compbatt - ok
19:07:36.0699 4356  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
19:07:36.0739 4356  CompositeBus - ok
19:07:36.0749 4356  COMSysApp - ok
19:07:36.0769 4356  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
19:07:36.0779 4356  crcdisk - ok
19:07:36.0819 4356  [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc        C:\Windows\system32\cryptsvc.dll
19:07:36.0859 4356  CryptSvc - ok
19:07:36.0899 4356  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys
19:07:36.0939 4356  CSC - ok
19:07:36.0969 4356  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
19:07:37.0009 4356  CscService - ok
19:07:37.0069 4356  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
19:07:37.0109 4356  DcomLaunch - ok
19:07:37.0149 4356  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
19:07:37.0199 4356  defragsvc - ok
19:07:37.0249 4356  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
19:07:37.0299 4356  DfsC - ok
19:07:37.0339 4356  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
19:07:37.0379 4356  Dhcp - ok
19:07:37.0409 4356  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
19:07:37.0459 4356  discache - ok
19:07:37.0489 4356  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
19:07:37.0509 4356  Disk - ok
19:07:37.0529 4356  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
19:07:37.0569 4356  Dnscache - ok
19:07:37.0599 4356  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
19:07:37.0659 4356  dot3svc - ok
19:07:37.0689 4356  [ B42ED0320C6E41102FDE0005154849BB ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
19:07:37.0719 4356  Dot4 - ok
19:07:37.0769 4356  [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print       C:\Windows\system32\drivers\Dot4Prt.sys
19:07:37.0789 4356  Dot4Print - ok
19:07:37.0809 4356  [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
19:07:37.0839 4356  dot4usb - ok
19:07:37.0879 4356  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
19:07:37.0939 4356  DPS - ok
19:07:37.0969 4356  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
19:07:37.0989 4356  drmkaud - ok
19:07:38.0039 4356  [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:07:38.0049 4356  dtsoftbus01 - ok
19:07:38.0109 4356  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
19:07:38.0169 4356  DXGKrnl - ok
19:07:38.0189 4356  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
19:07:38.0239 4356  EapHost - ok
19:07:38.0329 4356  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
19:07:38.0409 4356  ebdrv - ok
19:07:38.0429 4356  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
19:07:38.0469 4356  EFS - ok
19:07:38.0529 4356  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
19:07:38.0599 4356  ehRecvr - ok
19:07:38.0639 4356  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
19:07:38.0689 4356  ehSched - ok
19:07:38.0729 4356  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
19:07:38.0759 4356  elxstor - ok
19:07:38.0789 4356  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
19:07:38.0819 4356  ErrDev - ok
19:07:38.0859 4356  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
19:07:38.0929 4356  EventSystem - ok
19:07:38.0949 4356  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
19:07:38.0999 4356  exfat - ok
19:07:39.0019 4356  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
19:07:39.0079 4356  fastfat - ok
19:07:39.0139 4356  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
19:07:39.0199 4356  Fax - ok
19:07:39.0229 4356  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
19:07:39.0239 4356  fdc - ok
19:07:39.0269 4356  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
19:07:39.0319 4356  fdPHost - ok
19:07:39.0329 4356  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
19:07:39.0379 4356  FDResPub - ok
19:07:39.0399 4356  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
19:07:39.0409 4356  FileInfo - ok
19:07:39.0419 4356  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
19:07:39.0469 4356  Filetrace - ok
19:07:39.0489 4356  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
19:07:39.0499 4356  flpydisk - ok
19:07:39.0549 4356  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
19:07:39.0569 4356  FltMgr - ok
19:07:39.0629 4356  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll
19:07:39.0679 4356  FontCache - ok
19:07:39.0729 4356  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:07:39.0739 4356  FontCache3.0.0.0 - ok
19:07:39.0769 4356  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
19:07:39.0779 4356  FsDepends - ok
19:07:39.0799 4356  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
19:07:39.0809 4356  Fs_Rec - ok
19:07:39.0859 4356  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
19:07:39.0879 4356  fvevol - ok
19:07:39.0899 4356  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
19:07:39.0919 4356  gagp30kx - ok
19:07:39.0969 4356  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
19:07:40.0029 4356  gpsvc - ok
19:07:40.0219 4356  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:07:40.0249 4356  gupdate - ok
19:07:40.0439 4356  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:07:40.0459 4356  gupdatem - ok
19:07:40.0489 4356  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
19:07:40.0529 4356  hcw85cir - ok
19:07:40.0599 4356  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:07:40.0639 4356  HdAudAddService - ok
19:07:40.0659 4356  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
19:07:40.0689 4356  HDAudBus - ok
19:07:40.0709 4356  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
19:07:40.0739 4356  HidBatt - ok
19:07:40.0749 4356  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
19:07:40.0779 4356  HidBth - ok
19:07:40.0799 4356  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
19:07:40.0829 4356  HidIr - ok
19:07:40.0849 4356  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
19:07:40.0899 4356  hidserv - ok
19:07:40.0949 4356  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
19:07:40.0969 4356  HidUsb - ok
19:07:40.0989 4356  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
19:07:41.0049 4356  hkmsvc - ok
19:07:41.0079 4356  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:07:41.0119 4356  HomeGroupListener - ok
19:07:41.0149 4356  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:07:41.0179 4356  HomeGroupProvider - ok
19:07:41.0219 4356  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
19:07:41.0239 4356  HpSAMD - ok
19:07:41.0289 4356  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
19:07:41.0349 4356  HTTP - ok
19:07:41.0379 4356  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
19:07:41.0399 4356  hwpolicy - ok
19:07:41.0429 4356  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
19:07:41.0449 4356  i8042prt - ok
19:07:41.0509 4356  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
19:07:41.0529 4356  iaStorV - ok
19:07:41.0599 4356  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:07:41.0639 4356  idsvc - ok
19:07:41.0669 4356  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
19:07:41.0689 4356  iirsp - ok
19:07:41.0739 4356  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
19:07:41.0809 4356  IKEEXT - ok
19:07:41.0929 4356  [ 254FAAE42AFC641C0BE628DE123EA9DE ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:07:42.0009 4356  IntcAzAudAddService - ok
19:07:42.0049 4356  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
19:07:42.0079 4356  intelide - ok
19:07:42.0109 4356  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
19:07:42.0139 4356  intelppm - ok
19:07:42.0159 4356  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
19:07:42.0209 4356  IPBusEnum - ok
19:07:42.0239 4356  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:07:42.0289 4356  IpFilterDriver - ok
19:07:42.0329 4356  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
19:07:42.0379 4356  iphlpsvc - ok
19:07:42.0409 4356  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
19:07:42.0439 4356  IPMIDRV - ok
19:07:42.0459 4356  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
19:07:42.0509 4356  IPNAT - ok
19:07:42.0539 4356  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
19:07:42.0599 4356  IRENUM - ok
19:07:42.0619 4356  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
19:07:42.0629 4356  isapnp - ok
19:07:42.0669 4356  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
19:07:42.0689 4356  iScsiPrt - ok
19:07:42.0719 4356  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
19:07:42.0739 4356  kbdclass - ok
19:07:42.0769 4356  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
19:07:42.0799 4356  kbdhid - ok
19:07:42.0829 4356  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
19:07:42.0839 4356  KeyIso - ok
19:07:42.0869 4356  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
19:07:42.0879 4356  KSecDD - ok
19:07:42.0899 4356  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
19:07:42.0909 4356  KSecPkg - ok
19:07:42.0939 4356  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
19:07:42.0989 4356  ksthunk - ok
19:07:43.0019 4356  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
19:07:43.0079 4356  KtmRm - ok
19:07:43.0119 4356  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
19:07:43.0169 4356  LanmanServer - ok
19:07:43.0209 4356  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:07:43.0249 4356  LanmanWorkstation - ok
19:07:43.0279 4356  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
19:07:43.0319 4356  lltdio - ok
19:07:43.0359 4356  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
19:07:43.0409 4356  lltdsvc - ok
19:07:43.0439 4356  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
19:07:43.0479 4356  lmhosts - ok
19:07:43.0509 4356  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
19:07:43.0519 4356  LSI_FC - ok
19:07:43.0549 4356  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
19:07:43.0559 4356  LSI_SAS - ok
19:07:43.0569 4356  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:07:43.0589 4356  LSI_SAS2 - ok
19:07:43.0609 4356  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:07:43.0619 4356  LSI_SCSI - ok
19:07:43.0649 4356  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
19:07:43.0689 4356  luafv - ok
19:07:43.0719 4356  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
19:07:43.0749 4356  Mcx2Svc - ok
19:07:43.0769 4356  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
19:07:43.0779 4356  megasas - ok
19:07:43.0829 4356  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
19:07:43.0849 4356  MegaSR - ok
19:07:43.0889 4356  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
19:07:43.0939 4356  MMCSS - ok
19:07:43.0969 4356  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
19:07:43.0999 4356  Modem - ok
19:07:44.0019 4356  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
19:07:44.0039 4356  monitor - ok
19:07:44.0079 4356  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\drivers\mouclass.sys
19:07:44.0089 4356  mouclass - ok
19:07:44.0119 4356  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
19:07:44.0149 4356  mouhid - ok
19:07:44.0189 4356  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
19:07:44.0209 4356  mountmgr - ok
19:07:44.0259 4356  [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:07:44.0279 4356  MozillaMaintenance - ok
19:07:44.0299 4356  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
19:07:44.0319 4356  mpio - ok
19:07:44.0359 4356  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
19:07:44.0409 4356  mpsdrv - ok
19:07:44.0449 4356  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
19:07:44.0499 4356  MpsSvc - ok
19:07:44.0529 4356  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
19:07:44.0569 4356  MRxDAV - ok
19:07:44.0609 4356  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
19:07:44.0649 4356  mrxsmb - ok
19:07:44.0669 4356  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:07:44.0699 4356  mrxsmb10 - ok
19:07:44.0729 4356  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:07:44.0749 4356  mrxsmb20 - ok
19:07:44.0779 4356  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
19:07:44.0799 4356  msahci - ok
19:07:44.0829 4356  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
19:07:44.0839 4356  msdsm - ok
19:07:44.0879 4356  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
19:07:44.0899 4356  MSDTC - ok
19:07:44.0929 4356  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
19:07:44.0969 4356  Msfs - ok
19:07:44.0989 4356  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
19:07:45.0029 4356  mshidkmdf - ok
19:07:45.0059 4356  MSICDSetup - ok
19:07:45.0079 4356  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
19:07:45.0089 4356  msisadrv - ok
19:07:45.0119 4356  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
19:07:45.0159 4356  MSiSCSI - ok
19:07:45.0169 4356  msiserver - ok
19:07:45.0189 4356  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
19:07:45.0229 4356  MSKSSRV - ok
19:07:45.0229 4356  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
19:07:45.0269 4356  MSPCLOCK - ok
19:07:45.0289 4356  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
19:07:45.0339 4356  MSPQM - ok
19:07:45.0379 4356  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
19:07:45.0399 4356  MsRPC - ok
19:07:45.0439 4356  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
19:07:45.0449 4356  mssmbios - ok
19:07:45.0469 4356  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
19:07:45.0529 4356  MSTEE - ok
19:07:45.0559 4356  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
19:07:45.0589 4356  MTConfig - ok
19:07:45.0699 4356  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
19:07:45.0709 4356  Mup - ok
19:07:45.0769 4356  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
19:07:45.0819 4356  napagent - ok
19:07:45.0849 4356  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
19:07:45.0889 4356  NativeWifiP - ok
19:07:45.0939 4356  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
19:07:45.0979 4356  NDIS - ok
19:07:45.0999 4356  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
19:07:46.0029 4356  NdisCap - ok
19:07:46.0059 4356  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
19:07:46.0109 4356  NdisTapi - ok
19:07:46.0139 4356  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
19:07:46.0189 4356  Ndisuio - ok
19:07:46.0229 4356  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
19:07:46.0279 4356  NdisWan - ok
19:07:46.0309 4356  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
19:07:46.0359 4356  NDProxy - ok
19:07:46.0389 4356  [ D5AC41AE382738483FAFFBD7E373D49A ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
19:07:46.0399 4356  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:07:46.0399 4356  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:07:46.0439 4356  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
19:07:46.0489 4356  NetBIOS - ok
19:07:46.0529 4356  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
19:07:46.0579 4356  NetBT - ok
19:07:46.0589 4356  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
19:07:46.0609 4356  Netlogon - ok
19:07:46.0639 4356  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
19:07:46.0709 4356  Netman - ok
19:07:46.0741 4356  [ 5243CFC2E7161C91C2B355240035B9E4 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:07:46.0771 4356  NetMsmqActivator - ok
19:07:46.0771 4356  [ 5243CFC2E7161C91C2B355240035B9E4 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:07:46.0791 4356  NetPipeActivator - ok
19:07:46.0811 4356  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
19:07:46.0871 4356  netprofm - ok
19:07:46.0881 4356  [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:07:46.0891 4356  NetTcpActivator - ok
19:07:46.0901 4356  [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:07:46.0921 4356  NetTcpPortSharing - ok
19:07:46.0941 4356  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
19:07:46.0961 4356  nfrd960 - ok
19:07:46.0991 4356  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
19:07:47.0021 4356  NlaSvc - ok
19:07:47.0031 4356  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
19:07:47.0071 4356  Npfs - ok
19:07:47.0091 4356  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
19:07:47.0141 4356  nsi - ok
19:07:47.0161 4356  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
19:07:47.0201 4356  nsiproxy - ok
19:07:47.0261 4356  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
19:07:47.0321 4356  Ntfs - ok
19:07:47.0340 4356  NTIOLib_1_0_C - ok
19:07:47.0379 4356  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
19:07:47.0423 4356  Null - ok
19:07:47.0745 4356  [ FCBA1C22727939E7CFF9EB08FE9692AB ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:07:48.0157 4356  nvlddmkm - ok
19:07:48.0200 4356  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
19:07:48.0219 4356  nvraid - ok
19:07:48.0259 4356  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
19:07:48.0279 4356  nvstor - ok
19:07:48.0329 4356  [ 10C232F6CFFD51D2332898AE7AE0FF23 ] nvsvc           C:\Windows\system32\nvvsvc.exe
19:07:48.0369 4356  nvsvc - ok
19:07:48.0439 4356  [ 4789E020D2617046862D1790FC235FF6 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:07:48.0479 4356  nvUpdatusService - ok
19:07:48.0519 4356  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
19:07:48.0539 4356  nv_agp - ok
19:07:48.0579 4356  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
19:07:48.0619 4356  ohci1394 - ok
19:07:48.0699 4356  [ B9C125314A025127FE562C116D614AA3 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:07:48.0719 4356  ose64 - ok
19:07:48.0879 4356  [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:07:49.0079 4356  osppsvc - ok
19:07:49.0109 4356  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
19:07:49.0159 4356  p2pimsvc - ok
19:07:49.0179 4356  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
19:07:49.0209 4356  p2psvc - ok
19:07:49.0261 4356  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
19:07:49.0271 4356  Parport - ok
19:07:49.0301 4356  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
19:07:49.0341 4356  partmgr - ok
19:07:49.0381 4356  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
19:07:49.0421 4356  PcaSvc - ok
19:07:49.0461 4356  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
19:07:49.0481 4356  pci - ok
19:07:49.0501 4356  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
19:07:49.0511 4356  pciide - ok
19:07:49.0541 4356  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
19:07:49.0561 4356  pcmcia - ok
19:07:49.0571 4356  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
19:07:49.0581 4356  pcw - ok
19:07:49.0671 4356  [ 20372BE109FEE1C37E2D5216680DB9EB ] PDF Architect Helper Service C:\Program Files (x86)\PDF Architect\HelperService.exe
19:07:49.0721 4356  PDF Architect Helper Service - ok
19:07:49.0751 4356  [ B90A279073A815A4AA2C45A09EE004FA ] PDF Architect Service C:\Program Files (x86)\PDF Architect\ConversionService.exe
19:07:49.0781 4356  PDF Architect Service - ok
19:07:49.0811 4356  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
19:07:49.0881 4356  PEAUTH - ok
19:07:49.0941 4356  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
19:07:50.0011 4356  PeerDistSvc - ok
19:07:50.0081 4356  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
19:07:50.0111 4356  PerfHost - ok
19:07:50.0183 4356  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
19:07:50.0263 4356  pla - ok
19:07:50.0293 4356  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
19:07:50.0333 4356  PlugPlay - ok
19:07:50.0353 4356  [ 37F6046CDC630442D7DC087501FF6FC6 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
19:07:50.0363 4356  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
19:07:50.0363 4356  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
19:07:50.0383 4356  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
19:07:50.0403 4356  PNRPAutoReg - ok
19:07:50.0433 4356  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
19:07:50.0443 4356  PNRPsvc - ok
19:07:50.0483 4356  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
19:07:50.0543 4356  PolicyAgent - ok
19:07:50.0573 4356  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
19:07:50.0613 4356  Power - ok
19:07:50.0653 4356  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
19:07:50.0703 4356  PptpMiniport - ok
19:07:50.0753 4356  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
19:07:50.0823 4356  Processor - ok
19:07:50.0893 4356  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
19:07:50.0933 4356  ProfSvc - ok
19:07:50.0953 4356  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:07:50.0963 4356  ProtectedStorage - ok
19:07:51.0013 4356  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
19:07:51.0063 4356  Psched - ok
19:07:51.0113 4356  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
19:07:51.0163 4356  ql2300 - ok
19:07:51.0193 4356  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
19:07:51.0213 4356  ql40xx - ok
19:07:51.0243 4356  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
19:07:51.0273 4356  QWAVE - ok
19:07:51.0283 4356  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
19:07:51.0323 4356  QWAVEdrv - ok
19:07:51.0333 4356  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
19:07:51.0393 4356  RasAcd - ok
19:07:51.0433 4356  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
19:07:51.0473 4356  RasAgileVpn - ok
19:07:51.0493 4356  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
19:07:51.0543 4356  RasAuto - ok
19:07:51.0573 4356  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
19:07:51.0623 4356  Rasl2tp - ok
19:07:51.0673 4356  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
19:07:51.0733 4356  RasMan - ok
19:07:51.0773 4356  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
19:07:51.0833 4356  RasPppoe - ok
19:07:51.0862 4356  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
19:07:51.0905 4356  RasSstp - ok
19:07:51.0955 4356  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
19:07:52.0005 4356  rdbss - ok
19:07:52.0025 4356  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
19:07:52.0045 4356  rdpbus - ok
19:07:52.0065 4356  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
19:07:52.0095 4356  RDPCDD - ok
19:07:52.0145 4356  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
19:07:52.0165 4356  RDPDR - ok
19:07:52.0185 4356  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
19:07:52.0235 4356  RDPENCDD - ok
19:07:52.0255 4356  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
19:07:52.0295 4356  RDPREFMP - ok
19:07:52.0325 4356  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
19:07:52.0365 4356  RDPWD - ok
19:07:52.0425 4356  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
19:07:52.0435 4356  rdyboost - ok
19:07:52.0465 4356  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
19:07:52.0515 4356  RemoteAccess - ok
19:07:52.0545 4356  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
19:07:52.0595 4356  RemoteRegistry - ok
19:07:52.0635 4356  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
19:07:52.0655 4356  RFCOMM - ok
19:07:52.0685 4356  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
19:07:52.0735 4356  RpcEptMapper - ok
19:07:52.0765 4356  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
19:07:52.0785 4356  RpcLocator - ok
19:07:52.0842 4356  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
19:07:52.0877 4356  RpcSs - ok
19:07:52.0927 4356  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
19:07:52.0987 4356  rspndr - ok
19:07:53.0027 4356  [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
19:07:53.0047 4356  RTL8167 - ok
19:07:53.0087 4356  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
19:07:53.0107 4356  s3cap - ok
19:07:53.0127 4356  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
19:07:53.0137 4356  SamSs - ok
19:07:53.0157 4356  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
19:07:53.0177 4356  sbp2port - ok
19:07:53.0207 4356  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
19:07:53.0267 4356  SCardSvr - ok
19:07:53.0287 4356  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
19:07:53.0337 4356  scfilter - ok
19:07:53.0397 4356  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
19:07:53.0457 4356  Schedule - ok
19:07:53.0497 4356  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
19:07:53.0537 4356  SCPolicySvc - ok
19:07:53.0577 4356  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
19:07:53.0617 4356  SDRSVC - ok
19:07:53.0663 4356  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
19:07:53.0719 4356  secdrv - ok
19:07:53.0751 4356  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
19:07:53.0811 4356  seclogon - ok
19:07:53.0841 4356  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
19:07:53.0901 4356  SENS - ok
19:07:53.0921 4356  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
19:07:53.0951 4356  SensrSvc - ok
19:07:53.0991 4356  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
19:07:54.0021 4356  Serenum - ok
19:07:54.0056 4356  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
19:07:54.0083 4356  Serial - ok
19:07:54.0103 4356  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
19:07:54.0133 4356  sermouse - ok
19:07:54.0193 4356  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
19:07:54.0233 4356  SessionEnv - ok
19:07:54.0285 4356  [ 02DED435FCAA1C02959051AF636E154A ] sesvc           C:\Program Files (x86)\ShadowExplorer\sesvc.exe
19:07:54.0295 4356  sesvc ( UnsignedFile.Multi.Generic ) - warning
19:07:54.0295 4356  sesvc - detected UnsignedFile.Multi.Generic (1)
19:07:54.0343 4356  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
19:07:54.0387 4356  sffdisk - ok
19:07:54.0407 4356  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
19:07:54.0447 4356  sffp_mmc - ok
19:07:54.0467 4356  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
19:07:54.0499 4356  sffp_sd - ok
19:07:54.0529 4356  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
19:07:54.0549 4356  sfloppy - ok
19:07:54.0596 4356  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
19:07:54.0641 4356  SharedAccess - ok
19:07:54.0693 4356  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:07:54.0753 4356  ShellHWDetection - ok
19:07:54.0778 4356  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:07:54.0785 4356  SiSRaid2 - ok
19:07:54.0815 4356  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
19:07:54.0834 4356  SiSRaid4 - ok
19:07:54.0847 4356  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
19:07:54.0902 4356  Smb - ok
19:07:54.0943 4356  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
19:07:54.0979 4356  SNMPTRAP - ok
19:07:54.0999 4356  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
19:07:55.0019 4356  spldr - ok
19:07:55.0063 4356  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
19:07:55.0111 4356  Spooler - ok
19:07:55.0243 4356  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
19:07:55.0363 4356  sppsvc - ok
19:07:55.0385 4356  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
19:07:55.0457 4356  sppuinotify - ok
19:07:55.0487 4356  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
19:07:55.0527 4356  srv - ok
19:07:55.0557 4356  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
19:07:55.0587 4356  srv2 - ok
19:07:55.0627 4356  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
19:07:55.0647 4356  srvnet - ok
19:07:55.0677 4356  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
19:07:55.0737 4356  SSDPSRV - ok
19:07:55.0757 4356  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
19:07:55.0797 4356  SstpSvc - ok
19:07:55.0847 4356  [ 5A19667A580B1CE886EAF968B9743F45 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:07:55.0867 4356  Stereo Service - ok
19:07:55.0897 4356  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
19:07:55.0907 4356  stexstor - ok
19:07:55.0967 4356  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
19:07:56.0007 4356  stisvc - ok
19:07:56.0027 4356  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
19:07:56.0047 4356  storflt - ok
19:07:56.0077 4356  [ C40841817EF57D491F22EB103DA587CC ] StorSvc         C:\Windows\system32\storsvc.dll
19:07:56.0107 4356  StorSvc - ok
19:07:56.0137 4356  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
19:07:56.0147 4356  storvsc - ok
19:07:56.0177 4356  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
19:07:56.0197 4356  swenum - ok
19:07:56.0287 4356  [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
19:07:56.0307 4356  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
19:07:56.0307 4356  SwitchBoard - detected UnsignedFile.Multi.Generic (1)
19:07:56.0337 4356  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
19:07:56.0397 4356  swprv - ok
19:07:56.0467 4356  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
19:07:56.0537 4356  SysMain - ok
19:07:56.0567 4356  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:07:56.0607 4356  TabletInputService - ok
19:07:56.0627 4356  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
19:07:56.0687 4356  TapiSrv - ok
19:07:56.0707 4356  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
19:07:56.0757 4356  TBS - ok
19:07:56.0837 4356  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
19:07:56.0897 4356  Tcpip - ok
19:07:56.0937 4356  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
19:07:56.0977 4356  TCPIP6 - ok
19:07:57.0017 4356  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
19:07:57.0027 4356  tcpipreg - ok
19:07:57.0067 4356  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
19:07:57.0097 4356  TDPIPE - ok
19:07:57.0127 4356  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
19:07:57.0147 4356  TDTCP - ok
19:07:57.0197 4356  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
19:07:57.0247 4356  tdx - ok
19:07:57.0274 4356  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
19:07:57.0289 4356  TermDD - ok
19:07:57.0339 4356  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
19:07:57.0409 4356  TermService - ok
19:07:57.0439 4356  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
19:07:57.0459 4356  Themes - ok
19:07:57.0489 4356  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
19:07:57.0529 4356  THREADORDER - ok
19:07:57.0549 4356  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
19:07:57.0599 4356  TrkWks - ok
19:07:57.0659 4356  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:07:57.0709 4356  TrustedInstaller - ok
19:07:57.0749 4356  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
19:07:57.0789 4356  tssecsrv - ok
19:07:57.0839 4356  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
19:07:57.0869 4356  TsUsbFlt - ok
19:07:57.0909 4356  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
19:07:57.0959 4356  tunnel - ok
19:07:57.0989 4356  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
19:07:57.0999 4356  uagp35 - ok
19:07:58.0039 4356  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
19:07:58.0099 4356  udfs - ok
19:07:58.0129 4356  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
19:07:58.0149 4356  UI0Detect - ok
19:07:58.0179 4356  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
19:07:58.0199 4356  uliagpkx - ok
19:07:58.0259 4356  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
19:07:58.0289 4356  umbus - ok
19:07:58.0309 4356  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
19:07:58.0319 4356  UmPass - ok
19:07:58.0359 4356  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
19:07:58.0389 4356  UmRdpService - ok
19:07:58.0429 4356  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
19:07:58.0469 4356  upnphost - ok
19:07:58.0499 4356  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
19:07:58.0539 4356  usbccgp - ok
19:07:58.0549 4356  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
19:07:58.0579 4356  usbcir - ok
19:07:58.0619 4356  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
19:07:58.0639 4356  usbehci - ok
19:07:58.0669 4356  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
19:07:58.0709 4356  usbhub - ok
19:07:58.0729 4356  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
19:07:58.0759 4356  usbohci - ok
19:07:58.0799 4356  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
19:07:58.0829 4356  usbprint - ok
19:07:58.0839 4356  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
19:07:58.0869 4356  usbscan - ok
19:07:58.0879 4356  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:07:58.0919 4356  USBSTOR - ok
19:07:58.0959 4356  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
19:07:58.0979 4356  usbuhci - ok
19:07:59.0029 4356  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
19:07:59.0049 4356  usbvideo - ok
19:07:59.0079 4356  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
19:07:59.0129 4356  UxSms - ok
19:07:59.0149 4356  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
19:07:59.0169 4356  VaultSvc - ok
19:07:59.0209 4356  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
19:07:59.0219 4356  vdrvroot - ok
19:07:59.0259 4356  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
19:07:59.0309 4356  vds - ok
19:07:59.0349 4356  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
19:07:59.0371 4356  vga - ok
19:07:59.0391 4356  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
19:07:59.0441 4356  VgaSave - ok
19:07:59.0481 4356  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
19:07:59.0491 4356  vhdmp - ok
19:07:59.0521 4356  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
19:07:59.0531 4356  viaide - ok
19:07:59.0561 4356  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys
19:07:59.0581 4356  vmbus - ok
19:07:59.0627 4356  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
19:07:59.0653 4356  VMBusHID - ok
19:07:59.0683 4356  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
19:07:59.0693 4356  volmgr - ok
19:07:59.0743 4356  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
19:07:59.0763 4356  volmgrx - ok
19:07:59.0783 4356  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
19:07:59.0803 4356  volsnap - ok
19:07:59.0843 4356  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
19:07:59.0863 4356  vsmraid - ok
19:07:59.0935 4356  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
19:08:00.0005 4356  VSS - ok
19:08:00.0015 4356  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
19:08:00.0035 4356  vwifibus - ok
19:08:00.0075 4356  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
19:08:00.0115 4356  W32Time - ok
19:08:00.0145 4356  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
19:08:00.0165 4356  WacomPen - ok
19:08:00.0215 4356  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
19:08:00.0265 4356  WANARP - ok
19:08:00.0265 4356  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
19:08:00.0305 4356  Wanarpv6 - ok
19:08:00.0385 4356  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
19:08:00.0455 4356  wbengine - ok
19:08:00.0485 4356  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
19:08:00.0505 4356  WbioSrvc - ok
19:08:00.0545 4356  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
19:08:00.0575 4356  wcncsvc - ok
19:08:00.0595 4356  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:08:00.0625 4356  WcsPlugInService - ok
19:08:00.0655 4356  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
19:08:00.0665 4356  Wd - ok
19:08:00.0715 4356  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
19:08:00.0745 4356  Wdf01000 - ok
19:08:00.0765 4356  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
19:08:00.0855 4356  WdiServiceHost - ok
19:08:00.0855 4356  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
19:08:00.0885 4356  WdiSystemHost - ok
19:08:00.0905 4356  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
19:08:00.0945 4356  WebClient - ok
19:08:00.0985 4356  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
19:08:01.0065 4356  Wecsvc - ok
19:08:01.0095 4356  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
19:08:01.0145 4356  wercplsupport - ok
19:08:01.0175 4356  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
19:08:01.0215 4356  WerSvc - ok
19:08:01.0235 4356  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
19:08:01.0275 4356  WfpLwf - ok
19:08:01.0295 4356  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
19:08:01.0315 4356  WIMMount - ok
19:08:01.0325 4356  WinDefend - ok
19:08:01.0335 4356  WinHttpAutoProxySvc - ok
19:08:01.0385 4356  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
19:08:01.0445 4356  Winmgmt - ok
19:08:01.0525 4356  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
19:08:01.0615 4356  WinRM - ok
19:08:01.0655 4356  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
19:08:01.0685 4356  WinUsb - ok
19:08:01.0735 4356  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
19:08:01.0785 4356  Wlansvc - ok
19:08:01.0805 4356  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
19:08:01.0825 4356  WmiAcpi - ok
19:08:01.0855 4356  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
19:08:01.0885 4356  wmiApSrv - ok
19:08:01.0905 4356  WMPNetworkSvc - ok
19:08:01.0945 4356  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
19:08:01.0965 4356  WPCSvc - ok
19:08:02.0005 4356  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
19:08:02.0035 4356  WPDBusEnum - ok
19:08:02.0065 4356  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
19:08:02.0115 4356  ws2ifsl - ok
19:08:02.0135 4356  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
19:08:02.0175 4356  wscsvc - ok
19:08:02.0175 4356  WSearch - ok
19:08:02.0265 4356  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
19:08:02.0335 4356  wuauserv - ok
19:08:02.0365 4356  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
19:08:02.0395 4356  WudfPf - ok
19:08:02.0435 4356  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
19:08:02.0475 4356  WUDFRd - ok
19:08:02.0512 4356  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
19:08:02.0537 4356  wudfsvc - ok
19:08:02.0577 4356  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll
19:08:02.0627 4356  WwanSvc - ok
19:08:02.0637 4356  ================ Scan global ===============================
19:08:02.0657 4356  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:08:02.0687 4356  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:08:02.0687 4356  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:08:02.0707 4356  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:08:02.0737 4356  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:08:02.0747 4356  [Global] - ok
19:08:02.0747 4356  ================ Scan MBR ==================================
19:08:02.0757 4356  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:08:02.0927 4356  \Device\Harddisk0\DR0 - ok
19:08:02.0927 4356  ================ Scan VBR ==================================
19:08:02.0937 4356  [ 13FDAE27B70640B1F01D2693FAFC1EC8 ] \Device\Harddisk0\DR0\Partition1
19:08:02.0937 4356  \Device\Harddisk0\DR0\Partition1 - ok
19:08:02.0967 4356  [ 64A93CFD78238F483B8E86AA2B41BF1C ] \Device\Harddisk0\DR0\Partition2
19:08:02.0967 4356  \Device\Harddisk0\DR0\Partition2 - ok
19:08:02.0967 4356  ============================================================
19:08:02.0967 4356  Scan finished
19:08:02.0967 4356  ============================================================
19:08:02.0987 3724  Detected object count: 4
19:08:02.0987 3724  Actual detected object count: 4
19:08:35.0579 3724  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:08:35.0579 3724  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:08:35.0579 3724  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
19:08:35.0579 3724  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:08:35.0579 3724  sesvc ( UnsignedFile.Multi.Generic ) - skipped by user
19:08:35.0579 3724  sesvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:08:35.0579 3724  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
19:08:35.0579 3724  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

weiter:
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Ist das normal, dass jetzt kein Browser funktioniert? Bin grad mobil online

während des scans sollst du nicht am pc arbeiten, und nach dem scan musst du evtl. neustarten, steht alles in der anleitung

Klar. Ich frage nur, weil avira einen registry Zugriff blockiert hat, obwohl ich den echtzeitscanner deaktiviert hatte. Demnach ist avira gar nicht komplett abgeschaltet. Wie mache ich das denn?