Hilfe habe Trojaner am PC! Forderungsseite geht auf mit Bundesadler!

markusg · 11.07.2013, 17:18

lass es einfach weg und mach mit tdss killer weiter.

claudia123 · 11.07.2013, 17:32

[CODE18:26:24.0521 1888 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:26:24.0802 1888 ============================================================
18:26:24.0802 1888 Current date / time: 2013/07/11 18:26:24.0802
18:26:24.0802 1888 SystemInfo:
18:26:24.0802 1888
18:26:24.0802 1888 OS Version: 6.1.7601 ServicePack: 1.0
18:26:24.0802 1888 Product type: Workstation
18:26:24.0802 1888 ComputerName: MEZGERP-PC
18:26:24.0802 1888 UserName: mezgerp
18:26:24.0802 1888 Windows directory: C:\Windows
18:26:24.0802 1888 System windows directory: C:\Windows
18:26:24.0802 1888 Running under WOW64
18:26:24.0802 1888 Processor architecture: Intel x64
18:26:24.0802 1888 Number of processors: 4
18:26:24.0802 1888 Page size: 0x1000
18:26:24.0802 1888 Boot type: Normal boot
18:26:24.0802 1888 ============================================================
18:26:25.0114 1888 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:26:25.0130 1888 Drive \Device\Harddisk1\DR1 - Size: 0x73467E800 (28.82 Gb), SectorSize: 0x200, Cylinders: 0xEB2, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:26:25.0130 1888 ============================================================
18:26:25.0130 1888 \Device\Harddisk0\DR0:
18:26:25.0130 1888 MBR partitions:
18:26:25.0130 1888 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
18:26:25.0130 1888 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x2BDB9637
18:26:25.0130 1888 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x2BDEBE38, BlocksNum 0x1E86C1C8
18:26:25.0130 1888 \Device\Harddisk1\DR1:
18:26:25.0130 1888 MBR partitions:
18:26:25.0130 1888 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0x39A2C81
18:26:25.0130 1888 ============================================================
18:26:25.0145 1888 C: <-> \Device\Harddisk0\DR0\Partition2
18:26:25.0177 1888 D: <-> \Device\Harddisk0\DR0\Partition3
18:26:25.0177 1888 ============================================================
18:26:25.0177 1888 Initialize success
18:26:25.0177 1888 ============================================================
18:28:12.0037 2796 ============================================================
18:28:12.0037 2796 Scan started
18:28:12.0037 2796 Mode: Manual; SigCheck; TDLFS;
18:28:12.0037 2796 ============================================================
18:28:12.0240 2796 ================ Scan system memory ========================
18:28:12.0240 2796 System memory - ok
18:28:12.0240 2796 ================ Scan services =============================
18:28:12.0380 2796 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
18:28:12.0474 2796 1394ohci - ok
18:28:12.0567 2796 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
18:28:12.0598 2796 ACPI - ok
18:28:12.0614 2796 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
18:28:12.0692 2796 AcpiPmi - ok
18:28:12.0739 2796 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
18:28:12.0786 2796 adp94xx - ok
18:28:12.0817 2796 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
18:28:12.0832 2796 adpahci - ok
18:28:12.0848 2796 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
18:28:12.0864 2796 adpu320 - ok
18:28:12.0895 2796 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:28:12.0973 2796 AeLookupSvc - ok
18:28:13.0066 2796 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
18:28:13.0129 2796 AFD - ok
18:28:13.0176 2796 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:28:13.0207 2796 agp440 - ok
18:28:13.0254 2796 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
18:28:13.0332 2796 ALG - ok
18:28:13.0347 2796 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
18:28:13.0363 2796 aliide - ok
18:28:13.0378 2796 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
18:28:13.0394 2796 amdide - ok
18:28:13.0410 2796 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
18:28:13.0456 2796 AmdK8 - ok
18:28:13.0488 2796 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
18:28:13.0550 2796 AmdPPM - ok
18:28:13.0612 2796 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
18:28:13.0628 2796 amdsata - ok
18:28:13.0675 2796 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
18:28:13.0690 2796 amdsbs - ok
18:28:13.0706 2796 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
18:28:13.0706 2796 amdxata - ok
18:28:13.0737 2796 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
18:28:13.0800 2796 AppID - ok
18:28:13.0831 2796 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:28:13.0909 2796 AppIDSvc - ok
18:28:13.0940 2796 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
18:28:13.0971 2796 Appinfo - ok
18:28:14.0018 2796 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
18:28:14.0018 2796 arc - ok
18:28:14.0049 2796 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
18:28:14.0065 2796 arcsas - ok
18:28:14.0112 2796 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:28:14.0190 2796 AsyncMac - ok
18:28:14.0236 2796 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
18:28:14.0252 2796 atapi - ok
18:28:14.0283 2796 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:28:14.0361 2796 AudioEndpointBuilder - ok
18:28:14.0377 2796 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
18:28:14.0424 2796 AudioSrv - ok
18:28:14.0642 2796 [ 50185186719134FA8F307D269106A51C ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
18:28:14.0736 2796 AVGIDSAgent - ok
18:28:14.0798 2796 [ 139BD30C32BEE830D0CF39C5324D79DE ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys
18:28:14.0829 2796 AVGIDSDriver - ok
18:28:14.0876 2796 [ 2940FACB6EF92BD1936E4A1E2502468E ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys
18:28:14.0892 2796 AVGIDSHA - ok
18:28:14.0954 2796 [ 54B66C4AEEC6C4F742F3569EBA03EBB8 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
18:28:14.0985 2796 Avgldx64 - ok
18:28:15.0001 2796 [ 13667B5D6310228A9FEF2BA5FCD9081F ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys
18:28:15.0016 2796 Avgloga - ok
18:28:15.0048 2796 [ BE82F9A1F2CCF4CE746D0C645D94079E ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
18:28:15.0063 2796 Avgmfx64 - ok
18:28:15.0094 2796 [ 5D11620DEF66F9DC9468FEE385A8429B ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
18:28:15.0110 2796 Avgrkx64 - ok
18:28:15.0157 2796 [ 69BD90E337625F96C718CACE7A9C9E29 ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys
18:28:15.0188 2796 Avgtdia - ok
18:28:15.0235 2796 [ 3A0977CB68AF13E2579E47EB8984056B ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
18:28:15.0266 2796 avgwd - ok
18:28:15.0297 2796 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:28:15.0391 2796 AxInstSV - ok
18:28:15.0438 2796 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
18:28:15.0500 2796 b06bdrv - ok
18:28:15.0516 2796 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
18:28:15.0578 2796 b57nd60a - ok
18:28:15.0625 2796 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
18:28:15.0656 2796 BDESVC - ok
18:28:15.0687 2796 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
18:28:15.0750 2796 Beep - ok
18:28:15.0812 2796 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
18:28:15.0921 2796 BFE - ok
18:28:15.0968 2796 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
18:28:16.0062 2796 BITS - ok
18:28:16.0093 2796 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:28:16.0140 2796 blbdrive - ok
18:28:16.0202 2796 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:28:16.0233 2796 bowser - ok
18:28:16.0280 2796 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:28:16.0342 2796 BrFiltLo - ok
18:28:16.0374 2796 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:28:16.0420 2796 BrFiltUp - ok
18:28:16.0452 2796 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
18:28:16.0514 2796 Browser - ok
18:28:16.0545 2796 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:28:16.0592 2796 Brserid - ok
18:28:16.0639 2796 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:28:16.0686 2796 BrSerWdm - ok
18:28:16.0717 2796 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:28:16.0764 2796 BrUsbMdm - ok
18:28:16.0795 2796 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:28:16.0826 2796 BrUsbSer - ok
18:28:16.0857 2796 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:28:16.0904 2796 BTHMODEM - ok
18:28:16.0951 2796 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
18:28:17.0013 2796 bthserv - ok
18:28:17.0091 2796 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:28:17.0185 2796 cdfs - ok
18:28:17.0232 2796 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:28:17.0278 2796 cdrom - ok
18:28:17.0310 2796 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
18:28:17.0372 2796 CertPropSvc - ok
18:28:17.0419 2796 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:28:17.0466 2796 circlass - ok
18:28:17.0528 2796 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
18:28:17.0559 2796 CLFS - ok
18:28:17.0622 2796 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:28:17.0637 2796 clr_optimization_v2.0.50727_32 - ok
18:28:17.0684 2796 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:28:17.0715 2796 clr_optimization_v2.0.50727_64 - ok
18:28:17.0778 2796 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:28:17.0809 2796 clr_optimization_v4.0.30319_32 - ok
18:28:17.0824 2796 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:28:17.0840 2796 clr_optimization_v4.0.30319_64 - ok
18:28:17.0887 2796 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys
18:28:17.0902 2796 clwvd - ok
18:28:17.0949 2796 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:28:17.0996 2796 CmBatt - ok
18:28:18.0027 2796 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:28:18.0043 2796 cmdide - ok
18:28:18.0090 2796 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
18:28:18.0121 2796 CNG - ok
18:28:18.0168 2796 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:28:18.0199 2796 Compbatt - ok
18:28:18.0230 2796 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
18:28:18.0277 2796 CompositeBus - ok
18:28:18.0308 2796 COMSysApp - ok
18:28:18.0339 2796 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
18:28:18.0355 2796 crcdisk - ok
18:28:18.0386 2796 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:28:18.0417 2796 CryptSvc - ok
18:28:18.0448 2796 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:28:18.0511 2796 DcomLaunch - ok
18:28:18.0542 2796 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
18:28:18.0604 2796 defragsvc - ok
18:28:18.0667 2796 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:28:18.0745 2796 DfsC - ok
18:28:18.0807 2796 [ 41AC348DBD378F618CB4FDEE54270692 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
18:28:18.0823 2796 dg_ssudbus - ok
18:28:18.0870 2796 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
18:28:18.0948 2796 Dhcp - ok
18:28:18.0994 2796 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
18:28:19.0072 2796 discache - ok
18:28:19.0119 2796 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
18:28:19.0150 2796 Disk - ok
18:28:19.0182 2796 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:28:19.0244 2796 Dnscache - ok
18:28:19.0260 2796 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:28:19.0322 2796 dot3svc - ok
18:28:19.0369 2796 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
18:28:19.0447 2796 DPS - ok
18:28:19.0494 2796 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:28:19.0540 2796 drmkaud - ok
18:28:19.0634 2796 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:28:19.0681 2796 DXGKrnl - ok
18:28:19.0712 2796 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
18:28:19.0774 2796 EapHost - ok
18:28:19.0884 2796 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
18:28:19.0946 2796 ebdrv - ok
18:28:19.0977 2796 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
18:28:20.0040 2796 EFS - ok
18:28:20.0133 2796 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:28:20.0227 2796 ehRecvr - ok
18:28:20.0258 2796 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
18:28:20.0320 2796 ehSched - ok
18:28:20.0352 2796 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
18:28:20.0398 2796 elxstor - ok
18:28:20.0414 2796 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:28:20.0461 2796 ErrDev - ok
18:28:20.0523 2796 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
18:28:20.0601 2796 EventSystem - ok
18:28:20.0648 2796 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
18:28:20.0710 2796 exfat - ok
18:28:20.0757 2796 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:28:20.0835 2796 fastfat - ok
18:28:20.0882 2796 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
18:28:20.0960 2796 Fax - ok
18:28:20.0976 2796 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:28:21.0007 2796 fdc - ok
18:28:21.0038 2796 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
18:28:21.0147 2796 fdPHost - ok
18:28:21.0163 2796 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
18:28:21.0256 2796 FDResPub - ok
18:28:21.0334 2796 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:28:21.0350 2796 FileInfo - ok
18:28:21.0381 2796 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:28:21.0428 2796 Filetrace - ok
18:28:21.0444 2796 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:28:21.0490 2796 flpydisk - ok
18:28:21.0553 2796 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:28:21.0584 2796 FltMgr - ok
18:28:21.0631 2796 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
18:28:21.0693 2796 FontCache - ok
18:28:21.0740 2796 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:28:21.0771 2796 FontCache3.0.0.0 - ok
18:28:21.0787 2796 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:28:21.0802 2796 FsDepends - ok
18:28:21.0849 2796 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:28:21.0865 2796 Fs_Rec - ok
18:28:21.0896 2796 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:28:21.0912 2796 fvevol - ok
18:28:21.0943 2796 fvnjrxdx - ok
18:28:21.0958 2796 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
18:28:21.0974 2796 gagp30kx - ok
18:28:22.0021 2796 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
18:28:22.0083 2796 gpsvc - ok
18:28:22.0161 2796 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:22.0192 2796 gupdate - ok
18:28:22.0208 2796 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:22.0208 2796 gupdatem - ok
18:28:22.0239 2796 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
18:28:22.0255 2796 gusvc - ok
18:28:22.0286 2796 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:28:22.0333 2796 hcw85cir - ok
18:28:22.0364 2796 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:28:22.0411 2796 HdAudAddService - ok
18:28:22.0442 2796 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
18:28:22.0473 2796 HDAudBus - ok
18:28:22.0520 2796 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
18:28:22.0551 2796 HECIx64 - ok
18:28:22.0582 2796 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
18:28:22.0629 2796 HidBatt - ok
18:28:22.0660 2796 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
18:28:22.0692 2796 HidBth - ok
18:28:22.0723 2796 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:28:22.0738 2796 HidIr - ok
18:28:22.0754 2796 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
18:28:22.0801 2796 hidserv - ok
18:28:22.0816 2796 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:28:22.0832 2796 HidUsb - ok
18:28:22.0863 2796 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:28:22.0941 2796 hkmsvc - ok
18:28:22.0972 2796 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:28:23.0050 2796 HomeGroupListener - ok
18:28:23.0082 2796 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:28:23.0128 2796 HomeGroupProvider - ok
18:28:23.0160 2796 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
18:28:23.0175 2796 HpSAMD - ok
18:28:23.0238 2796 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:28:23.0316 2796 HTTP - ok
18:28:23.0378 2796 [ 8F9B0FC4EC3A8194BD4CBC5ED3E7ABEB ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
18:28:23.0425 2796 hwdatacard - ok
18:28:23.0456 2796 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:28:23.0472 2796 hwpolicy - ok
18:28:23.0503 2796 [ B45B3647BA32749B94FA689175EC8C26 ] hwusbdev C:\Windows\system32\DRIVERS\ewusbdev.sys
18:28:23.0550 2796 hwusbdev - ok
18:28:23.0596 2796 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
18:28:23.0628 2796 i8042prt - ok
18:28:23.0643 2796 [ ABBF174CB394F5C437410A788B7E404A ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
18:28:23.0659 2796 iaStor - ok
18:28:23.0737 2796 [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
18:28:23.0752 2796 IAStorDataMgrSvc - ok
18:28:23.0768 2796 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
18:28:23.0799 2796 iaStorV - ok
18:28:23.0862 2796 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:28:23.0893 2796 idsvc - ok
18:28:24.0174 2796 [ 677AA5991026A65ADA128C4B59CF2BAD ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
18:28:24.0298 2796 igfx - ok
18:28:24.0330 2796 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
18:28:24.0361 2796 iirsp - ok
18:28:24.0408 2796 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
18:28:24.0501 2796 IKEEXT - ok
18:28:24.0579 2796 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\DRIVERS\Impcd.sys
18:28:24.0610 2796 Impcd - ok
18:28:24.0735 2796 [ 4E2745DB3ADEF0FFA5E14857666AAE13 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:28:24.0798 2796 IntcAzAudAddService - ok
18:28:24.0844 2796 [ 03C74719D48056A1078F3A51CEB76BAA ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
18:28:24.0876 2796 IntcDAud - ok
18:28:24.0891 2796 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
18:28:24.0907 2796 intelide - ok
18:28:24.0938 2796 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:28:24.0985 2796 intelppm - ok
18:28:25.0016 2796 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:28:25.0094 2796 IPBusEnum - ok
18:28:25.0125 2796 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:28:25.0172 2796 IpFilterDriver - ok
18:28:25.0203 2796 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:28:25.0234 2796 iphlpsvc - ok
18:28:25.0266 2796 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
18:28:25.0297 2796 IPMIDRV - ok
18:28:25.0328 2796 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:28:25.0406 2796 IPNAT - ok
18:28:25.0437 2796 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:28:25.0484 2796 IRENUM - ok
18:28:25.0515 2796 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:28:25.0531 2796 isapnp - ok
18:28:25.0562 2796 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
18:28:25.0578 2796 iScsiPrt - ok
18:28:25.0578 2796 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
18:28:25.0593 2796 kbdclass - ok
18:28:25.0624 2796 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
18:28:25.0656 2796 kbdhid - ok
18:28:25.0671 2796 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
18:28:25.0687 2796 KeyIso - ok
18:28:25.0718 2796 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:28:25.0734 2796 KSecDD - ok
18:28:25.0749 2796 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:28:25.0765 2796 KSecPkg - ok
18:28:25.0780 2796 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
18:28:25.0827 2796 ksthunk - ok
18:28:25.0874 2796 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
18:28:25.0936 2796 KtmRm - ok
18:28:25.0999 2796 [ 48686C29856F46443952A831424F8D6F ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
18:28:26.0014 2796 L1C - ok
18:28:26.0046 2796 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
18:28:26.0108 2796 LanmanServer - ok
18:28:26.0139 2796 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:28:26.0217 2796 LanmanWorkstation - ok
18:28:26.0248 2796 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:28:26.0326 2796 lltdio - ok
18:28:26.0358 2796 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:28:26.0420 2796 lltdsvc - ok
18:28:26.0451 2796 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:28:26.0498 2796 lmhosts - ok
18:28:26.0576 2796 [ 1E2F802846EB944E0333EFEE7C9532A8 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
18:28:26.0607 2796 LMS - ok
18:28:26.0638 2796 lnqsfepf - ok
18:28:26.0670 2796 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
18:28:26.0685 2796 LSI_FC - ok
18:28:26.0701 2796 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
18:28:26.0716 2796 LSI_SAS - ok
18:28:26.0763 2796 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:28:26.0779 2796 LSI_SAS2 - ok
18:28:26.0794 2796 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:28:26.0810 2796 LSI_SCSI - ok
18:28:26.0841 2796 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
18:28:26.0904 2796 luafv - ok
18:28:26.0919 2796 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:28:26.0950 2796 Mcx2Svc - ok
18:28:27.0044 2796 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
18:28:27.0075 2796 MDM - ok
18:28:27.0091 2796 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
18:28:27.0106 2796 megasas - ok
18:28:27.0138 2796 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
18:28:27.0169 2796 MegaSR - ok
18:28:27.0184 2796 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
18:28:27.0247 2796 MMCSS - ok
18:28:27.0309 2796 [ B6187C5F104DA7F2519BB996F9653F01 ] mod7764 C:\Windows\system32\DRIVERS\mod77-64.sys
18:28:27.0387 2796 mod7764 - ok
18:28:27.0418 2796 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
18:28:27.0496 2796 Modem - ok
18:28:27.0528 2796 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:28:27.0574 2796 monitor - ok
18:28:27.0606 2796 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:28:27.0621 2796 mouclass - ok
18:28:27.0637 2796 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:28:27.0668 2796 mouhid - ok
18:28:27.0699 2796 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:28:27.0715 2796 mountmgr - ok
18:28:27.0746 2796 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
18:28:27.0762 2796 mpio - ok
18:28:27.0824 2796 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:28:27.0886 2796 mpsdrv - ok
18:28:27.0933 2796 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
18:28:28.0027 2796 MpsSvc - ok
18:28:28.0058 2796 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:28:28.0120 2796 MRxDAV - ok
18:28:28.0152 2796 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:28:28.0183 2796 mrxsmb - ok
18:28:28.0245 2796 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:28:28.0292 2796 mrxsmb10 - ok
18:28:28.0308 2796 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:28:28.0354 2796 mrxsmb20 - ok
18:28:28.0386 2796 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
18:28:28.0417 2796 msahci - ok
18:28:28.0448 2796 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:28:28.0464 2796 msdsm - ok
18:28:28.0495 2796 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
18:28:28.0526 2796 MSDTC - ok
18:28:28.0573 2796 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:28:28.0635 2796 Msfs - ok
18:28:28.0651 2796 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:28:28.0713 2796 mshidkmdf - ok
18:28:28.0744 2796 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:28:28.0760 2796 msisadrv - ok
18:28:28.0791 2796 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:28:28.0869 2796 MSiSCSI - ok
18:28:28.0869 2796 msiserver - ok
18:28:28.0900 2796 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:28:28.0932 2796 MSKSSRV - ok
18:28:28.0963 2796 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:28:29.0010 2796 MSPCLOCK - ok
18:28:29.0041 2796 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:28:29.0088 2796 MSPQM - ok
18:28:29.0119 2796 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:28:29.0134 2796 MsRPC - ok
18:28:29.0166 2796 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
18:28:29.0181 2796 mssmbios - ok
18:28:29.0197 2796 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:28:29.0259 2796 MSTEE - ok
18:28:29.0290 2796 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
18:28:29.0322 2796 MTConfig - ok
18:28:29.0337 2796 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
18:28:29.0353 2796 Mup - ok
18:28:29.0384 2796 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
18:28:29.0446 2796 napagent - ok
18:28:29.0462 2796 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:28:29.0509 2796 NativeWifiP - ok
18:28:29.0556 2796 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:28:29.0602 2796 NDIS - ok
18:28:29.0618 2796 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:28:29.0680 2796 NdisCap - ok
18:28:29.0727 2796 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:28:29.0790 2796 NdisTapi - ok
18:28:29.0821 2796 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:28:29.0868 2796 Ndisuio - ok
18:28:29.0930 2796 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:28:29.0977 2796 NdisWan - ok
18:28:30.0008 2796 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:28:30.0039 2796 NDProxy - ok
18:28:30.0055 2796 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:28:30.0102 2796 NetBIOS - ok
18:28:30.0148 2796 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:28:30.0226 2796 NetBT - ok
18:28:30.0242 2796 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
18:28:30.0258 2796 Netlogon - ok
18:28:30.0289 2796 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
18:28:30.0382 2796 Netman - ok
18:28:30.0414 2796 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
18:28:30.0460 2796 netprofm - ok
18:28:30.0492 2796 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:28:30.0523 2796 NetTcpPortSharing - ok
18:28:30.0570 2796 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
18:28:30.0585 2796 nfrd960 - ok
18:28:30.0616 2796 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:28:30.0663 2796 NlaSvc - ok
18:28:30.0679 2796 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:28:30.0726 2796 Npfs - ok
18:28:30.0757 2796 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
18:28:30.0788 2796 nsi - ok
18:28:30.0804 2796 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:28:30.0850 2796 nsiproxy - ok
18:28:30.0913 2796 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:28:30.0960 2796 Ntfs - ok
18:28:30.0975 2796 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
18:28:31.0069 2796 Null - ok
18:28:31.0131 2796 [ 786DB821BFD57C0551DBBE4F75384A7D ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
18:28:31.0178 2796 nusb3hub - ok
18:28:31.0209 2796 [ DAA8005CAF745042BB427A1ED7433354 ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
18:28:31.0240 2796 nusb3xhc - ok
18:28:31.0474 2796 [ DD81FBC57AB9134CDDC5CE90880BFD80 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:28:31.0662 2796 nvlddmkm - ok
18:28:31.0724 2796 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:28:31.0755 2796 nvraid - ok
18:28:31.0771 2796 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:28:31.0786 2796 nvstor - ok
18:28:31.0802 2796 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:28:31.0818 2796 nv_agp - ok
18:28:31.0880 2796 [ C64097401081D5D641924E8B96332F75 ] NxpCap64 C:\Windows\system32\DRIVERS\NxpCap64.sys
18:28:31.0958 2796 NxpCap64 ( UnsignedFile.Multi.Generic ) - warning
18:28:31.0958 2796 NxpCap64 - detected UnsignedFile.Multi.Generic (1)
18:28:31.0989 2796 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:28:32.0052 2796 ohci1394 - ok
18:28:32.0098 2796 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:28:32.0114 2796 ose - ok
18:28:32.0161 2796 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:28:32.0223 2796 p2pimsvc - ok
18:28:32.0270 2796 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
18:28:32.0317 2796 p2psvc - ok
18:28:32.0332 2796 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:28:32.0364 2796 Parport - ok
18:28:32.0395 2796 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:28:32.0410 2796 partmgr - ok
18:28:32.0426 2796 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:28:32.0488 2796 PcaSvc - ok
18:28:32.0551 2796 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
18:28:32.0582 2796 pci - ok
18:28:32.0598 2796 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
18:28:32.0613 2796 pciide - ok
18:28:32.0629 2796 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
18:28:32.0644 2796 pcmcia - ok
18:28:32.0691 2796 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
18:28:32.0707 2796 pcw - ok
18:28:32.0738 2796 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:28:32.0785 2796 PEAUTH - ok
18:28:32.0847 2796 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
18:28:32.0878 2796 PerfHost - ok
18:28:32.0941 2796 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
18:28:33.0019 2796 pla - ok
18:28:33.0050 2796 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:28:33.0097 2796 PlugPlay - ok
18:28:33.0112 2796 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:28:33.0159 2796 PNRPAutoReg - ok
18:28:33.0190 2796 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:28:33.0206 2796 PNRPsvc - ok
18:28:33.0253 2796 [ B8D8EC78B0F9ED8E220506181274F3D3 ] Point64 C:\Windows\system32\DRIVERS\point64.sys
18:28:33.0253 2796 Point64 - ok
18:28:33.0300 2796 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:28:33.0378 2796 PolicyAgent - ok
18:28:33.0409 2796 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
18:28:33.0471 2796 Power - ok
18:28:33.0487 2796 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:28:33.0549 2796 PptpMiniport - ok
18:28:33.0580 2796 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:28:33.0627 2796 Processor - ok
18:28:33.0658 2796 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
18:28:33.0721 2796 ProfSvc - ok
18:28:33.0721 2796 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:28:33.0736 2796 ProtectedStorage - ok
18:28:33.0783 2796 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:28:33.0846 2796 Psched - ok
18:28:33.0908 2796 [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2 c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
18:28:33.0924 2796 PSI_SVC_2 - ok
18:28:33.0970 2796 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
18:28:34.0017 2796 ql2300 - ok
18:28:34.0048 2796 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
18:28:34.0064 2796 ql40xx - ok
18:28:34.0080 2796 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
18:28:34.0111 2796 QWAVE - ok
18:28:34.0111 2796 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:28:34.0158 2796 QWAVEdrv - ok
18:28:34.0173 2796 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:28:34.0204 2796 RasAcd - ok
18:28:34.0236 2796 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:28:34.0298 2796 RasAgileVpn - ok
18:28:34.0314 2796 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
18:28:34.0376 2796 RasAuto - ok
18:28:34.0423 2796 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:28:34.0501 2796 Rasl2tp - ok
18:28:34.0532 2796 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
18:28:34.0579 2796 RasMan - ok
18:28:34.0626 2796 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:28:34.0688 2796 RasPppoe - ok
18:28:34.0704 2796 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:28:34.0782 2796 RasSstp - ok
18:28:34.0844 2796 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:28:34.0906 2796 rdbss - ok
18:28:34.0922 2796 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
18:28:34.0953 2796 rdpbus - ok
18:28:34.0984 2796 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:28:35.0047 2796 RDPCDD - ok
18:28:35.0078 2796 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:28:35.0125 2796 RDPENCDD - ok
18:28:35.0156 2796 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:28:35.0187 2796 RDPREFMP - ok
18:28:35.0218 2796 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:28:35.0281 2796 RDPWD - ok
18:28:35.0312 2796 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:28:35.0359 2796 rdyboost - ok
18:28:35.0374 2796 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:28:35.0437 2796 RemoteAccess - ok
18:28:35.0484 2796 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:28:35.0546 2796 RemoteRegistry - ok
18:28:35.0655 2796 [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
18:28:35.0686 2796 RichVideo ( UnsignedFile.Multi.Generic ) - warning
18:28:35.0686 2796 RichVideo - detected UnsignedFile.Multi.Generic (1)
18:28:35.0718 2796 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:28:35.0780 2796 RpcEptMapper - ok
18:28:35.0811 2796 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
18:28:35.0827 2796 RpcLocator - ok
18:28:35.0874 2796 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
18:28:35.0936 2796 RpcSs - ok
18:28:35.0952 2796 rqttipne - ok
18:28:35.0967 2796 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:28:36.0030 2796 rspndr - ok
18:28:36.0061 2796 [ 44ED82612403021E36998E1ECB1198F1 ] RSUSBSTOR C:\Windows\System32\Drivers\RtsUStor.sys
18:28:36.0076 2796 RSUSBSTOR - ok
18:28:36.0108 2796 [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
18:28:36.0139 2796 RTL8167 - ok
18:28:36.0217 2796 [ A5986B46C4348CB35EBB98F220948DF7 ] rtl8192se C:\Windows\system32\DRIVERS\rtl8192se.sys
18:28:36.0264 2796 rtl8192se - ok
18:28:36.0279 2796 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
18:28:36.0295 2796 SamSs - ok
18:28:36.0310 2796 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:28:36.0326 2796 sbp2port - ok
18:28:36.0357 2796 SBRE - ok
18:28:36.0373 2796 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:28:36.0435 2796 SCardSvr - ok
18:28:36.0466 2796 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:28:36.0513 2796 scfilter - ok
18:28:36.0560 2796 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
18:28:36.0622 2796 Schedule - ok
18:28:36.0638 2796 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
18:28:36.0685 2796 SCPolicySvc - ok
18:28:36.0700 2796 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:28:36.0763 2796 SDRSVC - ok
18:28:36.0794 2796 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:28:36.0872 2796 secdrv - ok
18:28:36.0903 2796 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
18:28:36.0950 2796 seclogon - ok
18:28:36.0981 2796 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
18:28:37.0044 2796 SENS - ok
18:28:37.0059 2796 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:28:37.0106 2796 SensrSvc - ok
18:28:37.0122 2796 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:28:37.0153 2796 Serenum - ok
18:28:37.0184 2796 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:28:37.0231 2796 Serial - ok
18:28:37.0278 2796 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
18:28:37.0309 2796 sermouse - ok
18:28:37.0371 2796 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
18:28:37.0465 2796 SessionEnv - ok
18:28:37.0496 2796 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:28:37.0543 2796 sffdisk - ok
18:28:37.0574 2796 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:28:37.0621 2796 sffp_mmc - ok
18:28:37.0621 2796 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:28:37.0683 2796 sffp_sd - ok
18:28:37.0714 2796 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
18:28:37.0761 2796 sfloppy - ok
18:28:37.0792 2796 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:28:37.0870 2796 SharedAccess - ok
18:28:37.0902 2796 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:28:37.0948 2796 ShellHWDetection - ok
18:28:37.0964 2796 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:28:37.0980 2796 SiSRaid2 - ok
18:28:38.0011 2796 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
18:28:38.0042 2796 SiSRaid4 - ok
18:28:38.0073 2796 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:28:38.0136 2796 Smb - ok
18:28:38.0151 2796 smsgiqvq - ok
18:28:38.0182 2796 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:28:38.0214 2796 SNMPTRAP - ok
18:28:38.0229 2796 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
18:28:38.0245 2796 spldr - ok
18:28:38.0276 2796 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
18:28:38.0307 2796 Spooler - ok
18:28:38.0416 2796 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
18:28:38.0526 2796 sppsvc - ok
18:28:38.0588 2796 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:28:38.0666 2796 sppuinotify - ok
18:28:38.0728 2796 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
18:28:38.0775 2796 srv - ok
18:28:38.0806 2796 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:28:38.0853 2796 srv2 - ok
18:28:38.0869 2796 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:28:38.0900 2796 srvnet - ok
18:28:38.0947 2796 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:28:39.0009 2796 SSDPSRV - ok
18:28:39.0025 2796 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:28:39.0056 2796 SstpSvc - ok
18:28:39.0103 2796 [ B4C983DA20E2970E21893BF0E4EE2AD8 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
18:28:39.0118 2796 ssudmdm - ok
18:28:39.0150 2796 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
18:28:39.0150 2796 stexstor - ok
18:28:39.0197 2796 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
18:28:39.0259 2796 stisvc - ok
18:28:39.0290 2796 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
18:28:39.0306 2796 swenum - ok
18:28:39.0337 2796 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
18:28:39.0415 2796 swprv - ok
18:28:39.0462 2796 [ 064A2530A4A7C7CEC1BE6A1945645BE4 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
18:28:39.0477 2796 SynTP - ok
18:28:39.0540 2796 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
18:28:39.0587 2796 SysMain - ok
18:28:39.0633 2796 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:28:39.0680 2796 TabletInputService - ok
18:28:39.0711 2796 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:28:39.0758 2796 TapiSrv - ok
18:28:39.0789 2796 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
18:28:39.0852 2796 TBS - ok
18:28:39.0930 2796 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:28:39.0977 2796 Tcpip - ok
18:28:40.0008 2796 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:28:40.0055 2796 TCPIP6 - ok
18:28:40.0086 2796 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:28:40.0117 2796 tcpipreg - ok
18:28:40.0148 2796 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:28:40.0179 2796 TDPIPE - ok
18:28:40.0211 2796 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:28:40.0242 2796 TDTCP - ok
18:28:40.0289 2796 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:28:40.0335 2796 tdx - ok
18:28:40.0367 2796 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
18:28:40.0398 2796 TermDD - ok
18:28:40.0429 2796 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
18:28:40.0491 2796 TermService - ok
18:28:40.0523 2796 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
18:28:40.0554 2796 Themes - ok
18:28:40.0554 2796 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
18:28:40.0585 2796 THREADORDER - ok
18:28:40.0679 2796 [ 023317B4CB35E1E87FC12D43B7BA4864 ] TrdCap64 C:\Windows\system32\DRIVERS\TrdCap64.sys
18:28:40.0725 2796 TrdCap64 - ok
18:28:40.0757 2796 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
18:28:40.0803 2796 TrkWks - ok
18:28:40.0866 2796 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:28:40.0959 2796 TrustedInstaller - ok
18:28:40.0991 2796 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:28:41.0069 2796 tssecsrv - ok
18:28:41.0115 2796 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
18:28:41.0162 2796 TsUsbFlt - ok
18:28:41.0193 2796 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:28:41.0240 2796 tunnel - ok
18:28:41.0256 2796 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
18:28:41.0271 2796 uagp35 - ok
18:28:41.0303 2796 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:28:41.0349 2796 udfs - ok
18:28:41.0381 2796 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:28:41.0396 2796 UI0Detect - ok
18:28:41.0412 2796 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:28:41.0427 2796 uliagpkx - ok
18:28:41.0459 2796 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
18:28:41.0474 2796 umbus - ok
18:28:41.0521 2796 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
18:28:41.0552 2796 UmPass - ok
18:28:41.0693 2796 [ AF905F4966CFC8B973623AB150CD4B2B ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
18:28:41.0739 2796 UNS - ok
18:28:41.0802 2796 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
18:28:41.0864 2796 upnphost - ok
18:28:41.0911 2796 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:28:41.0942 2796 usbccgp - ok
18:28:41.0973 2796 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:28:42.0005 2796 usbcir - ok
18:28:42.0051 2796 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
18:28:42.0067 2796 usbehci - ok
18:28:42.0083 2796 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:28:42.0098 2796 usbhub - ok
18:28:42.0129 2796 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:28:42.0129 2796 usbohci - ok
18:28:42.0161 2796 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:28:42.0192 2796 usbprint - ok
18:28:42.0223 2796 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
18:28:42.0254 2796 usbscan - ok
18:28:42.0301 2796 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:28:42.0332 2796 USBSTOR - ok
18:28:42.0348 2796 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
18:28:42.0379 2796 usbuhci - ok
18:28:42.0441 2796 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
18:28:42.0488 2796 usbvideo - ok
18:28:42.0519 2796 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
18:28:42.0582 2796 UxSms - ok
18:28:42.0597 2796 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
18:28:42.0613 2796 VaultSvc - ok
18:28:42.0644 2796 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
18:28:42.0660 2796 vdrvroot - ok
18:28:42.0691 2796 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
18:28:42.0738 2796 vds - ok
18:28:42.0769 2796 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:28:42.0785 2796 vga - ok
18:28:42.0816 2796 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
18:28:42.0863 2796 VgaSave - ok
18:28:42.0863 2796 vggekkrm - ok
18:28:42.0909 2796 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
18:28:42.0925 2796 vhdmp - ok
18:28:42.0956 2796 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
18:28:42.0956 2796 viaide - ok
18:28:42.0972 2796 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:28:42.0987 2796 volmgr - ok
18:28:43.0034 2796 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:28:43.0065 2796 volmgrx - ok
18:28:43.0097 2796 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:28:43.0112 2796 volsnap - ok
18:28:43.0143 2796 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
18:28:43.0143 2796 vsmraid - ok
18:28:43.0206 2796 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
18:28:43.0284 2796 VSS - ok
18:28:43.0331 2796 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
18:28:43.0393 2796 vwifibus - ok
18:28:43.0424 2796 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
18:28:43.0455 2796 vwififlt - ok
18:28:43.0487 2796 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
18:28:43.0549 2796 W32Time - ok
18:28:43.0580 2796 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
18:28:43.0611 2796 WacomPen - ok
18:28:43.0643 2796 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:28:43.0705 2796 WANARP - ok
18:28:43.0705 2796 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:28:43.0736 2796 Wanarpv6 - ok
18:28:43.0799 2796 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
18:28:43.0877 2796 wbengine - ok
18:28:43.0892 2796 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:28:43.0939 2796 WbioSrvc - ok
18:28:43.0970 2796 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:28:44.0017 2796 wcncsvc - ok
18:28:44.0033 2796 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:28:44.0095 2796 WcsPlugInService - ok
18:28:44.0111 2796 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
18:28:44.0126 2796 Wd - ok
18:28:44.0173 2796 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:28:44.0204 2796 Wdf01000 - ok
18:28:44.0220 2796 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:28:44.0329 2796 WdiServiceHost - ok
18:28:44.0329 2796 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:28:44.0360 2796 WdiSystemHost - ok
18:28:44.0391 2796 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
18:28:44.0423 2796 WebClient - ok
18:28:44.0438 2796 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:28:44.0485 2796 Wecsvc - ok
18:28:44.0501 2796 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:28:44.0547 2796 wercplsupport - ok
18:28:44.0563 2796 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
18:28:44.0625 2796 WerSvc - ok
18:28:44.0657 2796 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:28:44.0703 2796 WfpLwf - ok
18:28:44.0719 2796 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:28:44.0735 2796 WIMMount - ok
18:28:44.0766 2796 WinDefend - ok
18:28:44.0766 2796 WinHttpAutoProxySvc - ok
18:28:44.0828 2796 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:28:44.0906 2796 Winmgmt - ok
18:28:44.0984 2796 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
18:28:45.0062 2796 WinRM - ok
18:28:45.0125 2796 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:28:45.0156 2796 WinUsb - ok
18:28:45.0234 2796 [ 4C69A8E2E159C1C59BC4B688E9DD7F8C ] WisLMSvc C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
18:28:45.0265 2796 WisLMSvc - ok
18:28:45.0296 2796 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
18:28:45.0343 2796 Wlansvc - ok
18:28:45.0437 2796 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
18:28:45.0452 2796 wlcrasvc - ok
18:28:45.0530 2796 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:28:45.0577 2796 wlidsvc - ok
18:28:45.0608 2796 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
18:28:45.0655 2796 WmiAcpi - ok
18:28:45.0686 2796 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:28:45.0733 2796 wmiApSrv - ok
18:28:45.0780 2796 WMPNetworkSvc - ok
18:28:45.0795 2796 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:28:45.0842 2796 WPCSvc - ok
18:28:45.0873 2796 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:28:45.0905 2796 WPDBusEnum - ok
18:28:45.0967 2796 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:28:46.0029 2796 ws2ifsl - ok
18:28:46.0045 2796 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
18:28:46.0092 2796 wscsvc - ok
18:28:46.0107 2796 WSearch - ok
18:28:46.0185 2796 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
18:28:46.0232 2796 wuauserv - ok
18:28:46.0263 2796 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:28:46.0295 2796 WudfPf - ok
18:28:46.0326 2796 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:28:46.0357 2796 WUDFRd - ok
18:28:46.0404 2796 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:28:46.0435 2796 wudfsvc - ok
18:28:46.0482 2796 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
18:28:46.0544 2796 WwanSvc - ok
18:28:46.0560 2796 [ BAA813A76F5DB6CC3C2CEAB7D82B6972 ] X10Hid C:\Windows\System32\Drivers\x10hid.sys
18:28:46.0575 2796 X10Hid - ok
18:28:46.0622 2796 [ 5A0C788C5BC5F2C993CB60940ADCF95E ] x10nets C:\PROGRA~2\COMMON~1\X10\Common\x10nets.exe
18:28:46.0638 2796 x10nets ( UnsignedFile.Multi.Generic ) - warning
18:28:46.0638 2796 x10nets - detected UnsignedFile.Multi.Generic (1)
18:28:46.0669 2796 [ A4B2A8751A8F96134BE6063B8A759116 ] XUIF C:\Windows\System32\Drivers\x10ufx2.sys
18:28:46.0685 2796 XUIF - ok
18:28:46.0731 2796 ================ Scan global ===============================
18:28:46.0763 2796 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:28:46.0794 2796 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
18:28:46.0809 2796 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
18:28:46.0825 2796 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:28:46.0872 2796 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:28:46.0872 2796 [Global] - ok
18:28:46.0872 2796 ================ Scan MBR ==================================
18:28:46.0887 2796 [ 8B790A79784018D2B00DC944072570F8 ] \Device\Harddisk0\DR0
18:28:49.0196 2796 \Device\Harddisk0\DR0 - ok
18:28:49.0196 2796 [ DDAE9D649DB12F6AFF24483F2C298989 ] \Device\Harddisk1\DR1
18:28:49.0321 2796 \Device\Harddisk1\DR1 - ok
18:28:49.0321 2796 ================ Scan VBR ==================================
18:28:49.0337 2796 [ DF0A5F15B0D2BD459D141162D87652BB ] \Device\Harddisk0\DR0\Partition1
18:28:49.0337 2796 \Device\Harddisk0\DR0\Partition1 - ok
18:28:49.0352 2796 [ C66BDF867758C7427BF47CF42AB5609E ] \Device\Harddisk0\DR0\Partition2
18:28:49.0368 2796 \Device\Harddisk0\DR0\Partition2 - ok
18:28:49.0383 2796 [ D57F010848173F6384103951015AB23C ] \Device\Harddisk0\DR0\Partition3
18:28:49.0383 2796 \Device\Harddisk0\DR0\Partition3 - ok
18:28:49.0383 2796 [ C6E1C70369D39067E02D730B9FEC10C5 ] \Device\Harddisk1\DR1\Partition1
18:28:49.0383 2796 \Device\Harddisk1\DR1\Partition1 - ok
18:28:49.0383 2796 ============================================================
18:28:49.0383 2796 Scan finished
18:28:49.0383 2796 ============================================================
18:28:49.0399 2056 Detected object count: 3
18:28:49.0399 2056 Actual detected object count: 3
18:30:05.0808 2056 NxpCap64 ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056 NxpCap64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:30:05.0808 2056 RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056 RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:30:05.0808 2056 x10nets ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056 x10nets ( UnsignedFile.Multi.Generic ) - User select action: Skip
][/CODE]

claudia123 · 11.07.2013, 17:36

Code:

ATTFilter

18:26:24.0521 1888  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:26:24.0802 1888  ============================================================
18:26:24.0802 1888  Current date / time: 2013/07/11 18:26:24.0802
18:26:24.0802 1888  SystemInfo:
18:26:24.0802 1888  
18:26:24.0802 1888  OS Version: 6.1.7601 ServicePack: 1.0
18:26:24.0802 1888  Product type: Workstation
18:26:24.0802 1888  ComputerName: MEZGERP-PC
18:26:24.0802 1888  UserName: mezgerp
18:26:24.0802 1888  Windows directory: C:\Windows
18:26:24.0802 1888  System windows directory: C:\Windows
18:26:24.0802 1888  Running under WOW64
18:26:24.0802 1888  Processor architecture: Intel x64
18:26:24.0802 1888  Number of processors: 4
18:26:24.0802 1888  Page size: 0x1000
18:26:24.0802 1888  Boot type: Normal boot
18:26:24.0802 1888  ============================================================
18:26:25.0114 1888  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:26:25.0130 1888  Drive \Device\Harddisk1\DR1 - Size: 0x73467E800 (28.82 Gb), SectorSize: 0x200, Cylinders: 0xEB2, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:26:25.0130 1888  ============================================================
18:26:25.0130 1888  \Device\Harddisk0\DR0:
18:26:25.0130 1888  MBR partitions:
18:26:25.0130 1888  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
18:26:25.0130 1888  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x2BDB9637
18:26:25.0130 1888  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x2BDEBE38, BlocksNum 0x1E86C1C8
18:26:25.0130 1888  \Device\Harddisk1\DR1:
18:26:25.0130 1888  MBR partitions:
18:26:25.0130 1888  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0x39A2C81
18:26:25.0130 1888  ============================================================
18:26:25.0145 1888  C: <-> \Device\Harddisk0\DR0\Partition2
18:26:25.0177 1888  D: <-> \Device\Harddisk0\DR0\Partition3
18:26:25.0177 1888  ============================================================
18:26:25.0177 1888  Initialize success
18:26:25.0177 1888  ============================================================
18:28:12.0037 2796  ============================================================
18:28:12.0037 2796  Scan started
18:28:12.0037 2796  Mode: Manual; SigCheck; TDLFS; 
18:28:12.0037 2796  ============================================================
18:28:12.0240 2796  ================ Scan system memory ========================
18:28:12.0240 2796  System memory - ok
18:28:12.0240 2796  ================ Scan services =============================
18:28:12.0380 2796  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
18:28:12.0474 2796  1394ohci - ok
18:28:12.0567 2796  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:28:12.0598 2796  ACPI - ok
18:28:12.0614 2796  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
18:28:12.0692 2796  AcpiPmi - ok
18:28:12.0739 2796  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
18:28:12.0786 2796  adp94xx - ok
18:28:12.0817 2796  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
18:28:12.0832 2796  adpahci - ok
18:28:12.0848 2796  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
18:28:12.0864 2796  adpu320 - ok
18:28:12.0895 2796  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
18:28:12.0973 2796  AeLookupSvc - ok
18:28:13.0066 2796  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
18:28:13.0129 2796  AFD - ok
18:28:13.0176 2796  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
18:28:13.0207 2796  agp440 - ok
18:28:13.0254 2796  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
18:28:13.0332 2796  ALG - ok
18:28:13.0347 2796  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
18:28:13.0363 2796  aliide - ok
18:28:13.0378 2796  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
18:28:13.0394 2796  amdide - ok
18:28:13.0410 2796  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
18:28:13.0456 2796  AmdK8 - ok
18:28:13.0488 2796  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
18:28:13.0550 2796  AmdPPM - ok
18:28:13.0612 2796  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
18:28:13.0628 2796  amdsata - ok
18:28:13.0675 2796  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
18:28:13.0690 2796  amdsbs - ok
18:28:13.0706 2796  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
18:28:13.0706 2796  amdxata - ok
18:28:13.0737 2796  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
18:28:13.0800 2796  AppID - ok
18:28:13.0831 2796  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
18:28:13.0909 2796  AppIDSvc - ok
18:28:13.0940 2796  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll
18:28:13.0971 2796  Appinfo - ok
18:28:14.0018 2796  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
18:28:14.0018 2796  arc - ok
18:28:14.0049 2796  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
18:28:14.0065 2796  arcsas - ok
18:28:14.0112 2796  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
18:28:14.0190 2796  AsyncMac - ok
18:28:14.0236 2796  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
18:28:14.0252 2796  atapi - ok
18:28:14.0283 2796  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:28:14.0361 2796  AudioEndpointBuilder - ok
18:28:14.0377 2796  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
18:28:14.0424 2796  AudioSrv - ok
18:28:14.0642 2796  [ 50185186719134FA8F307D269106A51C ] AVGIDSAgent     C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
18:28:14.0736 2796  AVGIDSAgent - ok
18:28:14.0798 2796  [ 139BD30C32BEE830D0CF39C5324D79DE ] AVGIDSDriver    C:\Windows\system32\DRIVERS\avgidsdrivera.sys
18:28:14.0829 2796  AVGIDSDriver - ok
18:28:14.0876 2796  [ 2940FACB6EF92BD1936E4A1E2502468E ] AVGIDSHA        C:\Windows\system32\DRIVERS\avgidsha.sys
18:28:14.0892 2796  AVGIDSHA - ok
18:28:14.0954 2796  [ 54B66C4AEEC6C4F742F3569EBA03EBB8 ] Avgldx64        C:\Windows\system32\DRIVERS\avgldx64.sys
18:28:14.0985 2796  Avgldx64 - ok
18:28:15.0001 2796  [ 13667B5D6310228A9FEF2BA5FCD9081F ] Avgloga         C:\Windows\system32\DRIVERS\avgloga.sys
18:28:15.0016 2796  Avgloga - ok
18:28:15.0048 2796  [ BE82F9A1F2CCF4CE746D0C645D94079E ] Avgmfx64        C:\Windows\system32\DRIVERS\avgmfx64.sys
18:28:15.0063 2796  Avgmfx64 - ok
18:28:15.0094 2796  [ 5D11620DEF66F9DC9468FEE385A8429B ] Avgrkx64        C:\Windows\system32\DRIVERS\avgrkx64.sys
18:28:15.0110 2796  Avgrkx64 - ok
18:28:15.0157 2796  [ 69BD90E337625F96C718CACE7A9C9E29 ] Avgtdia         C:\Windows\system32\DRIVERS\avgtdia.sys
18:28:15.0188 2796  Avgtdia - ok
18:28:15.0235 2796  [ 3A0977CB68AF13E2579E47EB8984056B ] avgwd           C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
18:28:15.0266 2796  avgwd - ok
18:28:15.0297 2796  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
18:28:15.0391 2796  AxInstSV - ok
18:28:15.0438 2796  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
18:28:15.0500 2796  b06bdrv - ok
18:28:15.0516 2796  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
18:28:15.0578 2796  b57nd60a - ok
18:28:15.0625 2796  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
18:28:15.0656 2796  BDESVC - ok
18:28:15.0687 2796  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
18:28:15.0750 2796  Beep - ok
18:28:15.0812 2796  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
18:28:15.0921 2796  BFE - ok
18:28:15.0968 2796  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
18:28:16.0062 2796  BITS - ok
18:28:16.0093 2796  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
18:28:16.0140 2796  blbdrive - ok
18:28:16.0202 2796  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
18:28:16.0233 2796  bowser - ok
18:28:16.0280 2796  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:28:16.0342 2796  BrFiltLo - ok
18:28:16.0374 2796  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:28:16.0420 2796  BrFiltUp - ok
18:28:16.0452 2796  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
18:28:16.0514 2796  Browser - ok
18:28:16.0545 2796  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
18:28:16.0592 2796  Brserid - ok
18:28:16.0639 2796  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
18:28:16.0686 2796  BrSerWdm - ok
18:28:16.0717 2796  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
18:28:16.0764 2796  BrUsbMdm - ok
18:28:16.0795 2796  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
18:28:16.0826 2796  BrUsbSer - ok
18:28:16.0857 2796  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
18:28:16.0904 2796  BTHMODEM - ok
18:28:16.0951 2796  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
18:28:17.0013 2796  bthserv - ok
18:28:17.0091 2796  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
18:28:17.0185 2796  cdfs - ok
18:28:17.0232 2796  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
18:28:17.0278 2796  cdrom - ok
18:28:17.0310 2796  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
18:28:17.0372 2796  CertPropSvc - ok
18:28:17.0419 2796  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
18:28:17.0466 2796  circlass - ok
18:28:17.0528 2796  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
18:28:17.0559 2796  CLFS - ok
18:28:17.0622 2796  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:28:17.0637 2796  clr_optimization_v2.0.50727_32 - ok
18:28:17.0684 2796  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:28:17.0715 2796  clr_optimization_v2.0.50727_64 - ok
18:28:17.0778 2796  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:28:17.0809 2796  clr_optimization_v4.0.30319_32 - ok
18:28:17.0824 2796  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:28:17.0840 2796  clr_optimization_v4.0.30319_64 - ok
18:28:17.0887 2796  [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd           C:\Windows\system32\DRIVERS\clwvd.sys
18:28:17.0902 2796  clwvd - ok
18:28:17.0949 2796  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
18:28:17.0996 2796  CmBatt - ok
18:28:18.0027 2796  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
18:28:18.0043 2796  cmdide - ok
18:28:18.0090 2796  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
18:28:18.0121 2796  CNG - ok
18:28:18.0168 2796  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
18:28:18.0199 2796  Compbatt - ok
18:28:18.0230 2796  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
18:28:18.0277 2796  CompositeBus - ok
18:28:18.0308 2796  COMSysApp - ok
18:28:18.0339 2796  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
18:28:18.0355 2796  crcdisk - ok
18:28:18.0386 2796  [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc        C:\Windows\system32\cryptsvc.dll
18:28:18.0417 2796  CryptSvc - ok
18:28:18.0448 2796  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
18:28:18.0511 2796  DcomLaunch - ok
18:28:18.0542 2796  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
18:28:18.0604 2796  defragsvc - ok
18:28:18.0667 2796  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
18:28:18.0745 2796  DfsC - ok
18:28:18.0807 2796  [ 41AC348DBD378F618CB4FDEE54270692 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
18:28:18.0823 2796  dg_ssudbus - ok
18:28:18.0870 2796  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
18:28:18.0948 2796  Dhcp - ok
18:28:18.0994 2796  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
18:28:19.0072 2796  discache - ok
18:28:19.0119 2796  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
18:28:19.0150 2796  Disk - ok
18:28:19.0182 2796  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
18:28:19.0244 2796  Dnscache - ok
18:28:19.0260 2796  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
18:28:19.0322 2796  dot3svc - ok
18:28:19.0369 2796  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
18:28:19.0447 2796  DPS - ok
18:28:19.0494 2796  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
18:28:19.0540 2796  drmkaud - ok
18:28:19.0634 2796  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
18:28:19.0681 2796  DXGKrnl - ok
18:28:19.0712 2796  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
18:28:19.0774 2796  EapHost - ok
18:28:19.0884 2796  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
18:28:19.0946 2796  ebdrv - ok
18:28:19.0977 2796  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
18:28:20.0040 2796  EFS - ok
18:28:20.0133 2796  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
18:28:20.0227 2796  ehRecvr - ok
18:28:20.0258 2796  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
18:28:20.0320 2796  ehSched - ok
18:28:20.0352 2796  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
18:28:20.0398 2796  elxstor - ok
18:28:20.0414 2796  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
18:28:20.0461 2796  ErrDev - ok
18:28:20.0523 2796  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
18:28:20.0601 2796  EventSystem - ok
18:28:20.0648 2796  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
18:28:20.0710 2796  exfat - ok
18:28:20.0757 2796  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
18:28:20.0835 2796  fastfat - ok
18:28:20.0882 2796  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
18:28:20.0960 2796  Fax - ok
18:28:20.0976 2796  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
18:28:21.0007 2796  fdc - ok
18:28:21.0038 2796  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
18:28:21.0147 2796  fdPHost - ok
18:28:21.0163 2796  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
18:28:21.0256 2796  FDResPub - ok
18:28:21.0334 2796  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
18:28:21.0350 2796  FileInfo - ok
18:28:21.0381 2796  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
18:28:21.0428 2796  Filetrace - ok
18:28:21.0444 2796  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
18:28:21.0490 2796  flpydisk - ok
18:28:21.0553 2796  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
18:28:21.0584 2796  FltMgr - ok
18:28:21.0631 2796  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll
18:28:21.0693 2796  FontCache - ok
18:28:21.0740 2796  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:28:21.0771 2796  FontCache3.0.0.0 - ok
18:28:21.0787 2796  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
18:28:21.0802 2796  FsDepends - ok
18:28:21.0849 2796  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
18:28:21.0865 2796  Fs_Rec - ok
18:28:21.0896 2796  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
18:28:21.0912 2796  fvevol - ok
18:28:21.0943 2796  fvnjrxdx - ok
18:28:21.0958 2796  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
18:28:21.0974 2796  gagp30kx - ok
18:28:22.0021 2796  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
18:28:22.0083 2796  gpsvc - ok
18:28:22.0161 2796  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:22.0192 2796  gupdate - ok
18:28:22.0208 2796  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:28:22.0208 2796  gupdatem - ok
18:28:22.0239 2796  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
18:28:22.0255 2796  gusvc - ok
18:28:22.0286 2796  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
18:28:22.0333 2796  hcw85cir - ok
18:28:22.0364 2796  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:28:22.0411 2796  HdAudAddService - ok
18:28:22.0442 2796  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
18:28:22.0473 2796  HDAudBus - ok
18:28:22.0520 2796  [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64         C:\Windows\system32\DRIVERS\HECIx64.sys
18:28:22.0551 2796  HECIx64 - ok
18:28:22.0582 2796  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
18:28:22.0629 2796  HidBatt - ok
18:28:22.0660 2796  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
18:28:22.0692 2796  HidBth - ok
18:28:22.0723 2796  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
18:28:22.0738 2796  HidIr - ok
18:28:22.0754 2796  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
18:28:22.0801 2796  hidserv - ok
18:28:22.0816 2796  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
18:28:22.0832 2796  HidUsb - ok
18:28:22.0863 2796  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
18:28:22.0941 2796  hkmsvc - ok
18:28:22.0972 2796  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:28:23.0050 2796  HomeGroupListener - ok
18:28:23.0082 2796  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:28:23.0128 2796  HomeGroupProvider - ok
18:28:23.0160 2796  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
18:28:23.0175 2796  HpSAMD - ok
18:28:23.0238 2796  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
18:28:23.0316 2796  HTTP - ok
18:28:23.0378 2796  [ 8F9B0FC4EC3A8194BD4CBC5ED3E7ABEB ] hwdatacard      C:\Windows\system32\DRIVERS\ewusbmdm.sys
18:28:23.0425 2796  hwdatacard - ok
18:28:23.0456 2796  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
18:28:23.0472 2796  hwpolicy - ok
18:28:23.0503 2796  [ B45B3647BA32749B94FA689175EC8C26 ] hwusbdev        C:\Windows\system32\DRIVERS\ewusbdev.sys
18:28:23.0550 2796  hwusbdev - ok
18:28:23.0596 2796  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
18:28:23.0628 2796  i8042prt - ok
18:28:23.0643 2796  [ ABBF174CB394F5C437410A788B7E404A ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
18:28:23.0659 2796  iaStor - ok
18:28:23.0737 2796  [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
18:28:23.0752 2796  IAStorDataMgrSvc - ok
18:28:23.0768 2796  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
18:28:23.0799 2796  iaStorV - ok
18:28:23.0862 2796  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:28:23.0893 2796  idsvc - ok
18:28:24.0174 2796  [ 677AA5991026A65ADA128C4B59CF2BAD ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
18:28:24.0298 2796  igfx - ok
18:28:24.0330 2796  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
18:28:24.0361 2796  iirsp - ok
18:28:24.0408 2796  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
18:28:24.0501 2796  IKEEXT - ok
18:28:24.0579 2796  [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys
18:28:24.0610 2796  Impcd - ok
18:28:24.0735 2796  [ 4E2745DB3ADEF0FFA5E14857666AAE13 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:28:24.0798 2796  IntcAzAudAddService - ok
18:28:24.0844 2796  [ 03C74719D48056A1078F3A51CEB76BAA ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
18:28:24.0876 2796  IntcDAud - ok
18:28:24.0891 2796  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
18:28:24.0907 2796  intelide - ok
18:28:24.0938 2796  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
18:28:24.0985 2796  intelppm - ok
18:28:25.0016 2796  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
18:28:25.0094 2796  IPBusEnum - ok
18:28:25.0125 2796  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:28:25.0172 2796  IpFilterDriver - ok
18:28:25.0203 2796  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
18:28:25.0234 2796  iphlpsvc - ok
18:28:25.0266 2796  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
18:28:25.0297 2796  IPMIDRV - ok
18:28:25.0328 2796  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
18:28:25.0406 2796  IPNAT - ok
18:28:25.0437 2796  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
18:28:25.0484 2796  IRENUM - ok
18:28:25.0515 2796  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
18:28:25.0531 2796  isapnp - ok
18:28:25.0562 2796  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
18:28:25.0578 2796  iScsiPrt - ok
18:28:25.0578 2796  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
18:28:25.0593 2796  kbdclass - ok
18:28:25.0624 2796  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
18:28:25.0656 2796  kbdhid - ok
18:28:25.0671 2796  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
18:28:25.0687 2796  KeyIso - ok
18:28:25.0718 2796  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
18:28:25.0734 2796  KSecDD - ok
18:28:25.0749 2796  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
18:28:25.0765 2796  KSecPkg - ok
18:28:25.0780 2796  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
18:28:25.0827 2796  ksthunk - ok
18:28:25.0874 2796  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
18:28:25.0936 2796  KtmRm - ok
18:28:25.0999 2796  [ 48686C29856F46443952A831424F8D6F ] L1C             C:\Windows\system32\DRIVERS\L1C62x64.sys
18:28:26.0014 2796  L1C - ok
18:28:26.0046 2796  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
18:28:26.0108 2796  LanmanServer - ok
18:28:26.0139 2796  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:28:26.0217 2796  LanmanWorkstation - ok
18:28:26.0248 2796  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
18:28:26.0326 2796  lltdio - ok
18:28:26.0358 2796  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
18:28:26.0420 2796  lltdsvc - ok
18:28:26.0451 2796  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
18:28:26.0498 2796  lmhosts - ok
18:28:26.0576 2796  [ 1E2F802846EB944E0333EFEE7C9532A8 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
18:28:26.0607 2796  LMS - ok
18:28:26.0638 2796  lnqsfepf - ok
18:28:26.0670 2796  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
18:28:26.0685 2796  LSI_FC - ok
18:28:26.0701 2796  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
18:28:26.0716 2796  LSI_SAS - ok
18:28:26.0763 2796  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:28:26.0779 2796  LSI_SAS2 - ok
18:28:26.0794 2796  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:28:26.0810 2796  LSI_SCSI - ok
18:28:26.0841 2796  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
18:28:26.0904 2796  luafv - ok
18:28:26.0919 2796  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
18:28:26.0950 2796  Mcx2Svc - ok
18:28:27.0044 2796  [ 11F714F85530A2BD134074DC30E99FCA ] MDM             C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
18:28:27.0075 2796  MDM - ok
18:28:27.0091 2796  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
18:28:27.0106 2796  megasas - ok
18:28:27.0138 2796  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
18:28:27.0169 2796  MegaSR - ok
18:28:27.0184 2796  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
18:28:27.0247 2796  MMCSS - ok
18:28:27.0309 2796  [ B6187C5F104DA7F2519BB996F9653F01 ] mod7764         C:\Windows\system32\DRIVERS\mod77-64.sys
18:28:27.0387 2796  mod7764 - ok
18:28:27.0418 2796  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
18:28:27.0496 2796  Modem - ok
18:28:27.0528 2796  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
18:28:27.0574 2796  monitor - ok
18:28:27.0606 2796  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
18:28:27.0621 2796  mouclass - ok
18:28:27.0637 2796  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
18:28:27.0668 2796  mouhid - ok
18:28:27.0699 2796  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
18:28:27.0715 2796  mountmgr - ok
18:28:27.0746 2796  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
18:28:27.0762 2796  mpio - ok
18:28:27.0824 2796  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
18:28:27.0886 2796  mpsdrv - ok
18:28:27.0933 2796  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
18:28:28.0027 2796  MpsSvc - ok
18:28:28.0058 2796  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
18:28:28.0120 2796  MRxDAV - ok
18:28:28.0152 2796  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
18:28:28.0183 2796  mrxsmb - ok
18:28:28.0245 2796  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:28:28.0292 2796  mrxsmb10 - ok
18:28:28.0308 2796  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:28:28.0354 2796  mrxsmb20 - ok
18:28:28.0386 2796  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
18:28:28.0417 2796  msahci - ok
18:28:28.0448 2796  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
18:28:28.0464 2796  msdsm - ok
18:28:28.0495 2796  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
18:28:28.0526 2796  MSDTC - ok
18:28:28.0573 2796  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
18:28:28.0635 2796  Msfs - ok
18:28:28.0651 2796  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
18:28:28.0713 2796  mshidkmdf - ok
18:28:28.0744 2796  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
18:28:28.0760 2796  msisadrv - ok
18:28:28.0791 2796  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
18:28:28.0869 2796  MSiSCSI - ok
18:28:28.0869 2796  msiserver - ok
18:28:28.0900 2796  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
18:28:28.0932 2796  MSKSSRV - ok
18:28:28.0963 2796  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
18:28:29.0010 2796  MSPCLOCK - ok
18:28:29.0041 2796  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
18:28:29.0088 2796  MSPQM - ok
18:28:29.0119 2796  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
18:28:29.0134 2796  MsRPC - ok
18:28:29.0166 2796  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
18:28:29.0181 2796  mssmbios - ok
18:28:29.0197 2796  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
18:28:29.0259 2796  MSTEE - ok
18:28:29.0290 2796  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
18:28:29.0322 2796  MTConfig - ok
18:28:29.0337 2796  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
18:28:29.0353 2796  Mup - ok
18:28:29.0384 2796  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
18:28:29.0446 2796  napagent - ok
18:28:29.0462 2796  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
18:28:29.0509 2796  NativeWifiP - ok
18:28:29.0556 2796  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
18:28:29.0602 2796  NDIS - ok
18:28:29.0618 2796  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
18:28:29.0680 2796  NdisCap - ok
18:28:29.0727 2796  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
18:28:29.0790 2796  NdisTapi - ok
18:28:29.0821 2796  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
18:28:29.0868 2796  Ndisuio - ok
18:28:29.0930 2796  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
18:28:29.0977 2796  NdisWan - ok
18:28:30.0008 2796  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
18:28:30.0039 2796  NDProxy - ok
18:28:30.0055 2796  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
18:28:30.0102 2796  NetBIOS - ok
18:28:30.0148 2796  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
18:28:30.0226 2796  NetBT - ok
18:28:30.0242 2796  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
18:28:30.0258 2796  Netlogon - ok
18:28:30.0289 2796  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
18:28:30.0382 2796  Netman - ok
18:28:30.0414 2796  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
18:28:30.0460 2796  netprofm - ok
18:28:30.0492 2796  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:28:30.0523 2796  NetTcpPortSharing - ok
18:28:30.0570 2796  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
18:28:30.0585 2796  nfrd960 - ok
18:28:30.0616 2796  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
18:28:30.0663 2796  NlaSvc - ok
18:28:30.0679 2796  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
18:28:30.0726 2796  Npfs - ok
18:28:30.0757 2796  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
18:28:30.0788 2796  nsi - ok
18:28:30.0804 2796  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
18:28:30.0850 2796  nsiproxy - ok
18:28:30.0913 2796  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
18:28:30.0960 2796  Ntfs - ok
18:28:30.0975 2796  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
18:28:31.0069 2796  Null - ok
18:28:31.0131 2796  [ 786DB821BFD57C0551DBBE4F75384A7D ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys
18:28:31.0178 2796  nusb3hub - ok
18:28:31.0209 2796  [ DAA8005CAF745042BB427A1ED7433354 ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys
18:28:31.0240 2796  nusb3xhc - ok
18:28:31.0474 2796  [ DD81FBC57AB9134CDDC5CE90880BFD80 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:28:31.0662 2796  nvlddmkm - ok
18:28:31.0724 2796  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
18:28:31.0755 2796  nvraid - ok
18:28:31.0771 2796  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
18:28:31.0786 2796  nvstor - ok
18:28:31.0802 2796  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
18:28:31.0818 2796  nv_agp - ok
18:28:31.0880 2796  [ C64097401081D5D641924E8B96332F75 ] NxpCap64        C:\Windows\system32\DRIVERS\NxpCap64.sys
18:28:31.0958 2796  NxpCap64 ( UnsignedFile.Multi.Generic ) - warning
18:28:31.0958 2796  NxpCap64 - detected UnsignedFile.Multi.Generic (1)
18:28:31.0989 2796  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
18:28:32.0052 2796  ohci1394 - ok
18:28:32.0098 2796  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:28:32.0114 2796  ose - ok
18:28:32.0161 2796  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
18:28:32.0223 2796  p2pimsvc - ok
18:28:32.0270 2796  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
18:28:32.0317 2796  p2psvc - ok
18:28:32.0332 2796  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
18:28:32.0364 2796  Parport - ok
18:28:32.0395 2796  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
18:28:32.0410 2796  partmgr - ok
18:28:32.0426 2796  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
18:28:32.0488 2796  PcaSvc - ok
18:28:32.0551 2796  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
18:28:32.0582 2796  pci - ok
18:28:32.0598 2796  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
18:28:32.0613 2796  pciide - ok
18:28:32.0629 2796  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
18:28:32.0644 2796  pcmcia - ok
18:28:32.0691 2796  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
18:28:32.0707 2796  pcw - ok
18:28:32.0738 2796  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
18:28:32.0785 2796  PEAUTH - ok
18:28:32.0847 2796  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
18:28:32.0878 2796  PerfHost - ok
18:28:32.0941 2796  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
18:28:33.0019 2796  pla - ok
18:28:33.0050 2796  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
18:28:33.0097 2796  PlugPlay - ok
18:28:33.0112 2796  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
18:28:33.0159 2796  PNRPAutoReg - ok
18:28:33.0190 2796  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
18:28:33.0206 2796  PNRPsvc - ok
18:28:33.0253 2796  [ B8D8EC78B0F9ED8E220506181274F3D3 ] Point64         C:\Windows\system32\DRIVERS\point64.sys
18:28:33.0253 2796  Point64 - ok
18:28:33.0300 2796  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
18:28:33.0378 2796  PolicyAgent - ok
18:28:33.0409 2796  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
18:28:33.0471 2796  Power - ok
18:28:33.0487 2796  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
18:28:33.0549 2796  PptpMiniport - ok
18:28:33.0580 2796  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
18:28:33.0627 2796  Processor - ok
18:28:33.0658 2796  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
18:28:33.0721 2796  ProfSvc - ok
18:28:33.0721 2796  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:28:33.0736 2796  ProtectedStorage - ok
18:28:33.0783 2796  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
18:28:33.0846 2796  Psched - ok
18:28:33.0908 2796  [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2       c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
18:28:33.0924 2796  PSI_SVC_2 - ok
18:28:33.0970 2796  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
18:28:34.0017 2796  ql2300 - ok
18:28:34.0048 2796  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
18:28:34.0064 2796  ql40xx - ok
18:28:34.0080 2796  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
18:28:34.0111 2796  QWAVE - ok
18:28:34.0111 2796  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
18:28:34.0158 2796  QWAVEdrv - ok
18:28:34.0173 2796  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
18:28:34.0204 2796  RasAcd - ok
18:28:34.0236 2796  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
18:28:34.0298 2796  RasAgileVpn - ok
18:28:34.0314 2796  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
18:28:34.0376 2796  RasAuto - ok
18:28:34.0423 2796  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
18:28:34.0501 2796  Rasl2tp - ok
18:28:34.0532 2796  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
18:28:34.0579 2796  RasMan - ok
18:28:34.0626 2796  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
18:28:34.0688 2796  RasPppoe - ok
18:28:34.0704 2796  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
18:28:34.0782 2796  RasSstp - ok
18:28:34.0844 2796  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
18:28:34.0906 2796  rdbss - ok
18:28:34.0922 2796  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
18:28:34.0953 2796  rdpbus - ok
18:28:34.0984 2796  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
18:28:35.0047 2796  RDPCDD - ok
18:28:35.0078 2796  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
18:28:35.0125 2796  RDPENCDD - ok
18:28:35.0156 2796  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
18:28:35.0187 2796  RDPREFMP - ok
18:28:35.0218 2796  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
18:28:35.0281 2796  RDPWD - ok
18:28:35.0312 2796  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
18:28:35.0359 2796  rdyboost - ok
18:28:35.0374 2796  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
18:28:35.0437 2796  RemoteAccess - ok
18:28:35.0484 2796  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
18:28:35.0546 2796  RemoteRegistry - ok
18:28:35.0655 2796  [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo       C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
18:28:35.0686 2796  RichVideo ( UnsignedFile.Multi.Generic ) - warning
18:28:35.0686 2796  RichVideo - detected UnsignedFile.Multi.Generic (1)
18:28:35.0718 2796  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
18:28:35.0780 2796  RpcEptMapper - ok
18:28:35.0811 2796  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
18:28:35.0827 2796  RpcLocator - ok
18:28:35.0874 2796  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
18:28:35.0936 2796  RpcSs - ok
18:28:35.0952 2796  rqttipne - ok
18:28:35.0967 2796  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
18:28:36.0030 2796  rspndr - ok
18:28:36.0061 2796  [ 44ED82612403021E36998E1ECB1198F1 ] RSUSBSTOR       C:\Windows\System32\Drivers\RtsUStor.sys
18:28:36.0076 2796  RSUSBSTOR - ok
18:28:36.0108 2796  [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
18:28:36.0139 2796  RTL8167 - ok
18:28:36.0217 2796  [ A5986B46C4348CB35EBB98F220948DF7 ] rtl8192se       C:\Windows\system32\DRIVERS\rtl8192se.sys
18:28:36.0264 2796  rtl8192se - ok
18:28:36.0279 2796  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
18:28:36.0295 2796  SamSs - ok
18:28:36.0310 2796  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
18:28:36.0326 2796  sbp2port - ok
18:28:36.0357 2796  SBRE - ok
18:28:36.0373 2796  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
18:28:36.0435 2796  SCardSvr - ok
18:28:36.0466 2796  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
18:28:36.0513 2796  scfilter - ok
18:28:36.0560 2796  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
18:28:36.0622 2796  Schedule - ok
18:28:36.0638 2796  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
18:28:36.0685 2796  SCPolicySvc - ok
18:28:36.0700 2796  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
18:28:36.0763 2796  SDRSVC - ok
18:28:36.0794 2796  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
18:28:36.0872 2796  secdrv - ok
18:28:36.0903 2796  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
18:28:36.0950 2796  seclogon - ok
18:28:36.0981 2796  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
18:28:37.0044 2796  SENS - ok
18:28:37.0059 2796  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
18:28:37.0106 2796  SensrSvc - ok
18:28:37.0122 2796  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
18:28:37.0153 2796  Serenum - ok
18:28:37.0184 2796  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
18:28:37.0231 2796  Serial - ok
18:28:37.0278 2796  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
18:28:37.0309 2796  sermouse - ok
18:28:37.0371 2796  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
18:28:37.0465 2796  SessionEnv - ok
18:28:37.0496 2796  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
18:28:37.0543 2796  sffdisk - ok
18:28:37.0574 2796  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
18:28:37.0621 2796  sffp_mmc - ok
18:28:37.0621 2796  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
18:28:37.0683 2796  sffp_sd - ok
18:28:37.0714 2796  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
18:28:37.0761 2796  sfloppy - ok
18:28:37.0792 2796  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
18:28:37.0870 2796  SharedAccess - ok
18:28:37.0902 2796  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:28:37.0948 2796  ShellHWDetection - ok
18:28:37.0964 2796  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:28:37.0980 2796  SiSRaid2 - ok
18:28:38.0011 2796  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
18:28:38.0042 2796  SiSRaid4 - ok
18:28:38.0073 2796  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
18:28:38.0136 2796  Smb - ok
18:28:38.0151 2796  smsgiqvq - ok
18:28:38.0182 2796  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
18:28:38.0214 2796  SNMPTRAP - ok
18:28:38.0229 2796  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
18:28:38.0245 2796  spldr - ok
18:28:38.0276 2796  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
18:28:38.0307 2796  Spooler - ok
18:28:38.0416 2796  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
18:28:38.0526 2796  sppsvc - ok
18:28:38.0588 2796  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
18:28:38.0666 2796  sppuinotify - ok
18:28:38.0728 2796  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
18:28:38.0775 2796  srv - ok
18:28:38.0806 2796  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
18:28:38.0853 2796  srv2 - ok
18:28:38.0869 2796  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
18:28:38.0900 2796  srvnet - ok
18:28:38.0947 2796  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
18:28:39.0009 2796  SSDPSRV - ok
18:28:39.0025 2796  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
18:28:39.0056 2796  SstpSvc - ok
18:28:39.0103 2796  [ B4C983DA20E2970E21893BF0E4EE2AD8 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
18:28:39.0118 2796  ssudmdm - ok
18:28:39.0150 2796  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
18:28:39.0150 2796  stexstor - ok
18:28:39.0197 2796  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
18:28:39.0259 2796  stisvc - ok
18:28:39.0290 2796  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
18:28:39.0306 2796  swenum - ok
18:28:39.0337 2796  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
18:28:39.0415 2796  swprv - ok
18:28:39.0462 2796  [ 064A2530A4A7C7CEC1BE6A1945645BE4 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
18:28:39.0477 2796  SynTP - ok
18:28:39.0540 2796  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
18:28:39.0587 2796  SysMain - ok
18:28:39.0633 2796  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:28:39.0680 2796  TabletInputService - ok
18:28:39.0711 2796  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
18:28:39.0758 2796  TapiSrv - ok
18:28:39.0789 2796  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
18:28:39.0852 2796  TBS - ok
18:28:39.0930 2796  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
18:28:39.0977 2796  Tcpip - ok
18:28:40.0008 2796  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
18:28:40.0055 2796  TCPIP6 - ok
18:28:40.0086 2796  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
18:28:40.0117 2796  tcpipreg - ok
18:28:40.0148 2796  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
18:28:40.0179 2796  TDPIPE - ok
18:28:40.0211 2796  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
18:28:40.0242 2796  TDTCP - ok
18:28:40.0289 2796  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
18:28:40.0335 2796  tdx - ok
18:28:40.0367 2796  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
18:28:40.0398 2796  TermDD - ok
18:28:40.0429 2796  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
18:28:40.0491 2796  TermService - ok
18:28:40.0523 2796  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
18:28:40.0554 2796  Themes - ok
18:28:40.0554 2796  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
18:28:40.0585 2796  THREADORDER - ok
18:28:40.0679 2796  [ 023317B4CB35E1E87FC12D43B7BA4864 ] TrdCap64        C:\Windows\system32\DRIVERS\TrdCap64.sys
18:28:40.0725 2796  TrdCap64 - ok
18:28:40.0757 2796  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
18:28:40.0803 2796  TrkWks - ok
18:28:40.0866 2796  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:28:40.0959 2796  TrustedInstaller - ok
18:28:40.0991 2796  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
18:28:41.0069 2796  tssecsrv - ok
18:28:41.0115 2796  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
18:28:41.0162 2796  TsUsbFlt - ok
18:28:41.0193 2796  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
18:28:41.0240 2796  tunnel - ok
18:28:41.0256 2796  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
18:28:41.0271 2796  uagp35 - ok
18:28:41.0303 2796  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
18:28:41.0349 2796  udfs - ok
18:28:41.0381 2796  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
18:28:41.0396 2796  UI0Detect - ok
18:28:41.0412 2796  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
18:28:41.0427 2796  uliagpkx - ok
18:28:41.0459 2796  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
18:28:41.0474 2796  umbus - ok
18:28:41.0521 2796  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
18:28:41.0552 2796  UmPass - ok
18:28:41.0693 2796  [ AF905F4966CFC8B973623AB150CD4B2B ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
18:28:41.0739 2796  UNS - ok
18:28:41.0802 2796  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
18:28:41.0864 2796  upnphost - ok
18:28:41.0911 2796  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
18:28:41.0942 2796  usbccgp - ok
18:28:41.0973 2796  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
18:28:42.0005 2796  usbcir - ok
18:28:42.0051 2796  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\drivers\usbehci.sys
18:28:42.0067 2796  usbehci - ok
18:28:42.0083 2796  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
18:28:42.0098 2796  usbhub - ok
18:28:42.0129 2796  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
18:28:42.0129 2796  usbohci - ok
18:28:42.0161 2796  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
18:28:42.0192 2796  usbprint - ok
18:28:42.0223 2796  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
18:28:42.0254 2796  usbscan - ok
18:28:42.0301 2796  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:28:42.0332 2796  USBSTOR - ok
18:28:42.0348 2796  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
18:28:42.0379 2796  usbuhci - ok
18:28:42.0441 2796  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
18:28:42.0488 2796  usbvideo - ok
18:28:42.0519 2796  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
18:28:42.0582 2796  UxSms - ok
18:28:42.0597 2796  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
18:28:42.0613 2796  VaultSvc - ok
18:28:42.0644 2796  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
18:28:42.0660 2796  vdrvroot - ok
18:28:42.0691 2796  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
18:28:42.0738 2796  vds - ok
18:28:42.0769 2796  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
18:28:42.0785 2796  vga - ok
18:28:42.0816 2796  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
18:28:42.0863 2796  VgaSave - ok
18:28:42.0863 2796  vggekkrm - ok
18:28:42.0909 2796  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
18:28:42.0925 2796  vhdmp - ok
18:28:42.0956 2796  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
18:28:42.0956 2796  viaide - ok
18:28:42.0972 2796  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
18:28:42.0987 2796  volmgr - ok
18:28:43.0034 2796  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
18:28:43.0065 2796  volmgrx - ok
18:28:43.0097 2796  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
18:28:43.0112 2796  volsnap - ok
18:28:43.0143 2796  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
18:28:43.0143 2796  vsmraid - ok
18:28:43.0206 2796  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
18:28:43.0284 2796  VSS - ok
18:28:43.0331 2796  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
18:28:43.0393 2796  vwifibus - ok
18:28:43.0424 2796  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
18:28:43.0455 2796  vwififlt - ok
18:28:43.0487 2796  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
18:28:43.0549 2796  W32Time - ok
18:28:43.0580 2796  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
18:28:43.0611 2796  WacomPen - ok
18:28:43.0643 2796  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
18:28:43.0705 2796  WANARP - ok
18:28:43.0705 2796  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
18:28:43.0736 2796  Wanarpv6 - ok
18:28:43.0799 2796  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
18:28:43.0877 2796  wbengine - ok
18:28:43.0892 2796  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
18:28:43.0939 2796  WbioSrvc - ok
18:28:43.0970 2796  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
18:28:44.0017 2796  wcncsvc - ok
18:28:44.0033 2796  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:28:44.0095 2796  WcsPlugInService - ok
18:28:44.0111 2796  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
18:28:44.0126 2796  Wd - ok
18:28:44.0173 2796  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
18:28:44.0204 2796  Wdf01000 - ok
18:28:44.0220 2796  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
18:28:44.0329 2796  WdiServiceHost - ok
18:28:44.0329 2796  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
18:28:44.0360 2796  WdiSystemHost - ok
18:28:44.0391 2796  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
18:28:44.0423 2796  WebClient - ok
18:28:44.0438 2796  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
18:28:44.0485 2796  Wecsvc - ok
18:28:44.0501 2796  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
18:28:44.0547 2796  wercplsupport - ok
18:28:44.0563 2796  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
18:28:44.0625 2796  WerSvc - ok
18:28:44.0657 2796  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
18:28:44.0703 2796  WfpLwf - ok
18:28:44.0719 2796  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
18:28:44.0735 2796  WIMMount - ok
18:28:44.0766 2796  WinDefend - ok
18:28:44.0766 2796  WinHttpAutoProxySvc - ok
18:28:44.0828 2796  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
18:28:44.0906 2796  Winmgmt - ok
18:28:44.0984 2796  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
18:28:45.0062 2796  WinRM - ok
18:28:45.0125 2796  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
18:28:45.0156 2796  WinUsb - ok
18:28:45.0234 2796  [ 4C69A8E2E159C1C59BC4B688E9DD7F8C ] WisLMSvc        C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
18:28:45.0265 2796  WisLMSvc - ok
18:28:45.0296 2796  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
18:28:45.0343 2796  Wlansvc - ok
18:28:45.0437 2796  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
18:28:45.0452 2796  wlcrasvc - ok
18:28:45.0530 2796  [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:28:45.0577 2796  wlidsvc - ok
18:28:45.0608 2796  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
18:28:45.0655 2796  WmiAcpi - ok
18:28:45.0686 2796  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
18:28:45.0733 2796  wmiApSrv - ok
18:28:45.0780 2796  WMPNetworkSvc - ok
18:28:45.0795 2796  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
18:28:45.0842 2796  WPCSvc - ok
18:28:45.0873 2796  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
18:28:45.0905 2796  WPDBusEnum - ok
18:28:45.0967 2796  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
18:28:46.0029 2796  ws2ifsl - ok
18:28:46.0045 2796  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
18:28:46.0092 2796  wscsvc - ok
18:28:46.0107 2796  WSearch - ok
18:28:46.0185 2796  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
18:28:46.0232 2796  wuauserv - ok
18:28:46.0263 2796  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
18:28:46.0295 2796  WudfPf - ok
18:28:46.0326 2796  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
18:28:46.0357 2796  WUDFRd - ok
18:28:46.0404 2796  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
18:28:46.0435 2796  wudfsvc - ok
18:28:46.0482 2796  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll
18:28:46.0544 2796  WwanSvc - ok
18:28:46.0560 2796  [ BAA813A76F5DB6CC3C2CEAB7D82B6972 ] X10Hid          C:\Windows\System32\Drivers\x10hid.sys
18:28:46.0575 2796  X10Hid - ok
18:28:46.0622 2796  [ 5A0C788C5BC5F2C993CB60940ADCF95E ] x10nets         C:\PROGRA~2\COMMON~1\X10\Common\x10nets.exe
18:28:46.0638 2796  x10nets ( UnsignedFile.Multi.Generic ) - warning
18:28:46.0638 2796  x10nets - detected UnsignedFile.Multi.Generic (1)
18:28:46.0669 2796  [ A4B2A8751A8F96134BE6063B8A759116 ] XUIF            C:\Windows\System32\Drivers\x10ufx2.sys
18:28:46.0685 2796  XUIF - ok
18:28:46.0731 2796  ================ Scan global ===============================
18:28:46.0763 2796  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:28:46.0794 2796  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
18:28:46.0809 2796  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
18:28:46.0825 2796  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:28:46.0872 2796  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:28:46.0872 2796  [Global] - ok
18:28:46.0872 2796  ================ Scan MBR ==================================
18:28:46.0887 2796  [ 8B790A79784018D2B00DC944072570F8 ] \Device\Harddisk0\DR0
18:28:49.0196 2796  \Device\Harddisk0\DR0 - ok
18:28:49.0196 2796  [ DDAE9D649DB12F6AFF24483F2C298989 ] \Device\Harddisk1\DR1
18:28:49.0321 2796  \Device\Harddisk1\DR1 - ok
18:28:49.0321 2796  ================ Scan VBR ==================================
18:28:49.0337 2796  [ DF0A5F15B0D2BD459D141162D87652BB ] \Device\Harddisk0\DR0\Partition1
18:28:49.0337 2796  \Device\Harddisk0\DR0\Partition1 - ok
18:28:49.0352 2796  [ C66BDF867758C7427BF47CF42AB5609E ] \Device\Harddisk0\DR0\Partition2
18:28:49.0368 2796  \Device\Harddisk0\DR0\Partition2 - ok
18:28:49.0383 2796  [ D57F010848173F6384103951015AB23C ] \Device\Harddisk0\DR0\Partition3
18:28:49.0383 2796  \Device\Harddisk0\DR0\Partition3 - ok
18:28:49.0383 2796  [ C6E1C70369D39067E02D730B9FEC10C5 ] \Device\Harddisk1\DR1\Partition1
18:28:49.0383 2796  \Device\Harddisk1\DR1\Partition1 - ok
18:28:49.0383 2796  ============================================================
18:28:49.0383 2796  Scan finished
18:28:49.0383 2796  ============================================================
18:28:49.0399 2056  Detected object count: 3
18:28:49.0399 2056  Actual detected object count: 3
18:30:05.0808 2056  NxpCap64 ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056  NxpCap64 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
18:30:05.0808 2056  RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056  RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip 
18:30:05.0808 2056  x10nets ( UnsignedFile.Multi.Generic ) - skipped by user
18:30:05.0808 2056  x10nets ( UnsignedFile.Multi.Generic ) - User select action: Skip 
18:33:23.0975 0788  Deinitialize success

markusg · 11.07.2013, 17:38

Sieht gut aus.
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

claudia123 · 11.07.2013, 17:54

[CODECombofix Logfile:

Code:

ATTFilter

ComboFix 13-07-11.03 - mezgerp 11.07.2013  18:44:33.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3893.2255 [GMT 2:00]
ausgeführt von:: c:\users\mezgerp\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\2433f433
c:\users\mezgerp\AppData\Roaming\2433f433
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\muzapp.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-11 bis 2013-07-11  ))))))))))))))))))))))))))))))
.
.
2013-07-11 16:50 . 2013-07-11 16:50	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-11 15:26 . 2013-07-11 15:26	--------	d-----w-	C:\FRST
2013-06-25 13:33 . 2013-06-25 13:33	--------	d-----w-	c:\program files (x86)\MarkAny
2013-06-24 11:39 . 2013-04-25 23:30	1505280	----a-w-	c:\windows\SysWow64\d3d11.dll
2013-06-24 11:39 . 2013-03-31 22:52	1887232	----a-w-	c:\windows\system32\d3d11.dll
2013-06-12 14:10 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-13 10:00 . 2010-07-07 15:49	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-05-18 08:20 . 2010-06-24 18:33	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-04 11:47 . 2013-05-04 11:47	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-04 11:47 . 2013-05-04 11:47	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-05-04 11:47 . 2013-05-04 11:47	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-05-04 11:47 . 2013-05-04 11:47	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-05-04 11:47 . 2013-05-04 11:47	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-05-04 11:47 . 2013-05-04 11:47	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-05-04 11:47 . 2013-05-04 11:47	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-05-04 11:47 . 2013-05-04 11:47	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-05-04 11:47 . 2013-05-04 11:47	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-05-04 11:47 . 2013-05-04 11:47	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-05-04 11:47 . 2013-05-04 11:47	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-05-04 11:47 . 2013-05-04 11:47	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-05-04 11:47 . 2013-05-04 11:47	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-04 11:47 . 2013-05-04 11:47	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-05-04 11:47 . 2013-05-04 11:47	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-05-04 11:47 . 2013-05-04 11:47	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-05-04 11:47 . 2013-05-04 11:47	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-05-04 11:47 . 2013-05-04 11:47	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-05-04 11:47 . 2013-05-04 11:47	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-05-04 11:47 . 2013-05-04 11:47	81408	----a-w-	c:\windows\system32\icardie.dll
2013-05-04 11:47 . 2013-05-04 11:47	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-05-04 11:47 . 2013-05-04 11:47	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-05-04 11:47 . 2013-05-04 11:47	441856	----a-w-	c:\windows\system32\html.iec
2013-05-04 11:47 . 2013-05-04 11:47	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-05-04 11:47 . 2013-05-04 11:47	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-05-04 11:47 . 2013-05-04 11:47	235008	----a-w-	c:\windows\system32\url.dll
2013-05-04 11:47 . 2013-05-04 11:47	216064	----a-w-	c:\windows\system32\msls31.dll
2013-05-04 11:47 . 2013-05-04 11:47	197120	----a-w-	c:\windows\system32\msrating.dll
2013-05-04 11:47 . 2013-05-04 11:47	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-05-04 11:47 . 2013-05-04 11:47	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-05-04 11:47 . 2013-05-04 11:47	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-05-04 11:47 . 2013-05-04 11:47	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-05-04 11:47 . 2013-05-04 11:47	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-05-04 11:47 . 2013-05-04 11:47	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-05-04 11:47 . 2013-05-04 11:47	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-05-04 11:47 . 2013-05-04 11:47	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-05-04 11:47 . 2013-05-04 11:47	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-05-04 11:47 . 2013-05-04 11:47	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-05-04 11:47 . 2013-05-04 11:47	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-05-04 11:47 . 2013-05-04 11:47	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-05-04 11:47 . 2013-05-04 11:47	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-05-04 11:47 . 2013-05-04 11:47	149504	----a-w-	c:\windows\system32\occache.dll
2013-05-04 11:47 . 2013-05-04 11:47	144896	----a-w-	c:\windows\system32\wextract.exe
2013-05-04 11:47 . 2013-05-04 11:47	13824	----a-w-	c:\windows\system32\mshta.exe
2013-05-04 11:47 . 2013-05-04 11:47	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-05-04 11:47 . 2013-05-04 11:47	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-05-04 11:47 . 2013-05-04 11:47	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-05-04 11:47 . 2013-05-04 11:47	102912	----a-w-	c:\windows\system32\inseng.dll
2013-05-04 11:47 . 2013-05-04 11:47	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-05-04 11:30 . 2013-05-04 11:30	9728	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	9728	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	4096	---ha-w-	c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3584	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	2560	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	2560	---ha-w-	c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	1158144	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2013-05-04 11:30 . 2013-05-04 11:30	10752	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	10752	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-04 11:30 . 2013-05-04 11:30	364544	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-04 11:30 . 2013-05-04 11:30	522752	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-05-04 11:30 . 2013-05-04 11:30	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-05-04 11:30 . 2013-05-04 11:30	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-05-04 11:30 . 2013-05-04 11:30	3928064	----a-w-	c:\windows\system32\d2d1.dll
2013-05-04 11:30 . 2013-05-04 11:30	363008	----a-w-	c:\windows\system32\dxgi.dll
2013-05-04 11:30 . 2013-05-04 11:30	2776576	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2013-05-04 11:30 . 2013-05-04 11:30	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2013-05-04 11:30 . 2013-05-04 11:30	249856	----a-w-	c:\windows\SysWow64\d3d10_1core.dll
2013-05-04 11:30 . 2013-05-04 11:30	2284544	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-04 11:30 . 2013-05-04 11:30	220160	----a-w-	c:\windows\SysWow64\d3d10core.dll
2013-05-04 11:30 . 2013-05-04 11:30	207872	----a-w-	c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-04 11:30 . 2013-05-04 11:30	1682432	----a-w-	c:\windows\system32\XpsPrint.dll
2013-05-04 11:30 . 2013-05-04 11:30	1643520	----a-w-	c:\windows\system32\DWrite.dll
2013-05-04 11:30 . 2013-05-04 11:30	161792	----a-w-	c:\windows\SysWow64\d3d10_1.dll
2013-05-04 11:30 . 2013-05-04 11:30	1247744	----a-w-	c:\windows\SysWow64\DWrite.dll
2013-05-04 11:30 . 2013-05-04 11:30	1175552	----a-w-	c:\windows\system32\FntCache.dll
2013-05-04 11:30 . 2013-05-04 11:30	1080832	----a-w-	c:\windows\SysWow64\d3d10.dll
2013-05-04 11:30 . 2013-05-04 11:30	604160	----a-w-	c:\windows\SysWow64\d3d10level9.dll
2013-05-04 11:30 . 2013-05-04 11:30	648192	----a-w-	c:\windows\system32\d3d10level9.dll
2013-05-04 11:30 . 2013-05-04 11:30	3419136	----a-w-	c:\windows\SysWow64\d2d1.dll
2013-05-04 11:30 . 2013-05-04 11:30	333312	----a-w-	c:\windows\system32\d3d10_1core.dll
2013-05-04 11:30 . 2013-05-04 11:30	296960	----a-w-	c:\windows\system32\d3d10core.dll
2013-05-04 11:30 . 2013-05-04 11:30	293376	----a-w-	c:\windows\SysWow64\dxgi.dll
2013-05-04 11:30 . 2013-05-04 11:30	245248	----a-w-	c:\windows\system32\WindowsCodecsExt.dll
2013-05-04 11:30 . 2013-05-04 11:30	221184	----a-w-	c:\windows\system32\UIAnimation.dll
2013-05-04 11:30 . 2013-05-04 11:30	1988096	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2013-05-04 11:30 . 2013-05-04 11:30	194560	----a-w-	c:\windows\system32\d3d10_1.dll
2013-05-04 11:30 . 2013-05-04 11:30	187392	----a-w-	c:\windows\SysWow64\UIAnimation.dll
2013-05-04 11:30 . 2013-05-04 11:30	1238528	----a-w-	c:\windows\system32\d3d10.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
2012-04-11 20:08	87440	----a-w-	c:\program files (x86)\adawaretb\adawareDx.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2012-04-11 87440]
.
[HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-01-21 39408]
"HW_OPENEYE_OUC_T-Mobile Internet Manager"="c:\program files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe" [2009-12-31 110592]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2013-05-23 1561968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HotkeyApp"="c:\program files (x86)\Launch Manager\HotkeyApp.exe" [2009-12-14 200704]
"LMgrVolOSD"="c:\program files (x86)\Launch Manager\OSD.exe" [2009-12-11 348960]
"Wbutton"="c:\program files (x86)\Launch Manager\Wbutton.exe" [2010-06-21 436264]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"DataCardMonitor"="c:\program files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe" [2011-05-30 253952]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-05-23 311152]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"YouCam Mirage"="c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R1 fvnjrxdx;fvnjrxdx;c:\windows\system32\drivers\fvnjrxdx.sys;c:\windows\SYSNATIVE\drivers\fvnjrxdx.sys [x]
R1 lnqsfepf;lnqsfepf;c:\windows\system32\drivers\lnqsfepf.sys;c:\windows\SYSNATIVE\drivers\lnqsfepf.sys [x]
R1 rqttipne;rqttipne;c:\windows\system32\drivers\rqttipne.sys;c:\windows\SYSNATIVE\drivers\rqttipne.sys [x]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys;c:\windows\SYSNATIVE\drivers\SBREdrv.sys [x]
R1 smsgiqvq;smsgiqvq;c:\windows\system32\drivers\smsgiqvq.sys;c:\windows\SYSNATIVE\drivers\smsgiqvq.sys [x]
R1 vggekkrm;vggekkrm;c:\windows\system32\drivers\vggekkrm.sys;c:\windows\SYSNATIVE\drivers\vggekkrm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 mod7764;Tv Tuner device;c:\windows\system32\DRIVERS\mod77-64.sys;c:\windows\SYSNATIVE\DRIVERS\mod77-64.sys [x]
R3 NxpCap64;CTX capture service;c:\windows\system32\DRIVERS\NxpCap64.sys;c:\windows\SYSNATIVE\DRIVERS\NxpCap64.sys [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TrdCap64;CTX's capture service;c:\windows\system32\DRIVERS\TrdCap64.sys;c:\windows\SYSNATIVE\DRIVERS\TrdCap64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192se.sys [x]
S3 WisLMSvc;WisLMSvc;c:\program files (x86)\Launch Manager\WisLMSvc.exe;c:\program files (x86)\Launch Manager\WisLMSvc.exe [x]
S3 X10Hid;X10 Hid Device;c:\windows\System32\Drivers\x10hid.sys;c:\windows\SYSNATIVE\Drivers\x10hid.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 19638516
*NewlyCreated* - 89294560
*Deregistered* - 19638516
*Deregistered* - 89294560
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-24 11:32	1165776	----a-w-	c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-21 12:27]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-21 12:27]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-03 11548264]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-11-03 2181224]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-KiesAirMessage - c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe
Wow6432Node-HKLM-Run-ROC_roc_dec12 - c:\program files (x86)\AVG Secure Search\ROC_roc_dec12.exe
SafeBoot-BsScanner
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-ALDI SÜD Mah Jong - c:\windows\system32\Uninstall ALDI SÜD Mah Jong.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-11  18:53:29
ComboFix-quarantined-files.txt  2013-07-11 16:53
.
Vor Suchlauf: 9 Verzeichnis(se), 330.300.637.184 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 331.115.110.400 Bytes frei
.
- - End Of File - - 279468349A29BB449AE2177A8564CC45

--- --- ---
D41D8CD98F00B204E9800998ECF8427E
][/CODE]

markusg · 11.07.2013, 18:09

Hi,
es sind 2 Logs zu erstellen, poste sie möglichst gleichzeitig.
1.
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

neustarten.
2.

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

claudia123 · 11.07.2013, 18:11

was soll ich noch machen?

markusg · 11.07.2013, 18:23

steht doch da oder nicht...

claudia123 · 11.07.2013, 18:24

in Arbeit!

markusg · 11.07.2013, 18:25

lass bitte solche zwischenposts weg, da weitere an den angehangen werden

claudia123 · 11.07.2013, 20:24

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.07.11.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
mezgerp :: MEZGERP-PC [Administrator]

Schutz: Aktiviert

11.07.2013 19:23:22
mbam-log-2013-07-11 (19-23-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 395356
Laufzeit: 1 Stunde(n), 48 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\mezgerp\AppData\Local\2433f433 (Trojan.Agent.TPL) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

markusg · 11.07.2013, 20:51

Hi
hatte ich dich nicht gebeten, beide Logs gleichzeitig zu posten, gab es Probleme dabei oder warum hast du das nicht so gemacht?
Denn wie ich oben gesagt hatte, wenn du die Logs bzw antworten einzeln postest, wird dann das nächste Mal weiteres an den vorherigen Post angehangen, und ich muss dann immer hier reingucken.
lies also bitte meine Anweisungen vernünftig durch.

claudia123 · 11.07.2013, 21:12

Code:

ATTFilter

ALLE pROGRAMME WERDEN BENÖTIGT!!!!!


Acrobat.com	Adobe Systems Incorporated	13.10.2010	1,60MB	1.6.65 alle werden benötigt!!   alle werden benötigt!!  alle werden benötigt!!
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh	Microsoft Corporation	05.11.2010	5,57MB	15.4.5722.2
Ad-Aware Browsing Protection	Lavasoft	16.06.2012		0.9.0.2
Ad-Aware Security Toolbar	Lavasoft	16.06.2012		2.1.0.20
Adobe AIR	Adobe Systems Inc.	27.10.2010		2.5.0.16600
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	21.01.2011	6,00MB	10.1.85.3
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	21.01.2011	6,00MB	10.1.85.3
Adobe Reader 9.5.5 MUI	Adobe Systems Incorporated	18.05.2013	656MB	9.5.5
ALDI SÜD Mah Jong		21.01.2011		
Ashampoo Burning Studio	ashampoo GmbH & Co. KG	02.11.2010	130MB	9.23.0
Ashampoo Photo Commander	ashampoo GmbH & Co. KG	02.11.2010	115MB	8.3.2
Ashampoo Photo Optimizer	ashampoo GmbH & Co. KG	02.11.2010	37,1MB	3.12.0
Ashampoo Snap	ashampoo GmbH & Co. KG	02.11.2010	29,7MB	3.4.1
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver	Atheros Communications Inc.	02.11.2010		1.0.0.27
AVG 2013	AVG Technologies	11.07.2013		2013.0.3349
CCleaner	Piriform	19.06.2013		4.03
Cisco EAP-FAST Module	Cisco Systems, Inc.	02.11.2010	1,55MB	2.2.14
Cisco LEAP Module	Cisco Systems, Inc.	02.11.2010	644KB	1.0.19
Cisco PEAP Module	Cisco Systems, Inc.	02.11.2010	1,23MB	1.1.6
Control ActiveX de Windows Live Mesh para conexiones remotas	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Controlo ActiveX do Windows Live Mesh para Ligações Remotas	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Contrôle ActiveX Windows Live Mesh pour connexions à distance	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
CorelDRAW Essentials 4	Corel Corporation	21.01.2011		
CorelDRAW Essentials 4 - Windows Shell Extension	Corel Corporation	21.01.2011	2,93MB	
CyberLink LabelPrint	CyberLink Corp.	06.11.2010	148MB	2.5.3418
CyberLink MediaShow	CyberLink Corp.	06.11.2010	251MB	5.0.1410a
CyberLink MediaShow Espresso	CyberLink Corp.	06.11.2010	82,0MB	5.5.1412_24021a
CyberLink PhotoNow	CyberLink Corp.	06.11.2010	21,8MB	1.1.0.6904
CyberLink Power2Go	CyberLink Corp.	06.11.2010	115MB	6.1.3802
CyberLink PowerDirector	CyberLink Corp.	06.11.2010	356MB	8.0.3224a
CyberLink PowerDVD 10	CyberLink Corp.	06.11.2010	184MB	10.0.2225
CyberLink PowerDVD Copy	CyberLink Corp.	06.11.2010	30,9MB	1.5.1306
CyberLink PowerProducer	CyberLink Corp.	06.11.2010	166MB	5.0.2.2429
CyberLink YouCam	CyberLink Corp.	06.11.2010	135MB	3.1.3428
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Google Chrome	Google Inc.	21.01.2011		28.0.1500.71
Google Toolbar for Internet Explorer	Google Inc.	25.06.2013		7.5.4209.2358
Haali Media Splitter		21.01.2011		
Intel(R) Graphics Media Accelerator Driver	Intel Corporation	12.02.2011		8.15.10.2189
Intel(R) Management Engine Components	Intel Corporation	02.11.2010		6.0.0.1179
Intel(R) Rapid Storage Technology	Intel Corporation	02.11.2010		9.6.0.1014
Java(TM) 6 Update 22	Oracle	13.10.2010	97,0MB	6.0.220
Java(TM) 6 Update 22 (64-bit)	Oracle	13.10.2010	90,6MB	6.0.220
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Launch Manager	Wistron Corp.	02.11.2010		1.5.1.2
Malwarebytes Anti-Malware Version 1.75.0.1300	Malwarebytes Corporation	11.07.2013	19,2MB	1.75.0.1300
Medion Home Cinema	CyberLink Corp.	06.11.2010	36,5MB	8.0.2213
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	26.03.2013	38,8MB	4.0.30320
Microsoft IntelliPoint 8.0	Microsoft	12.02.2011	37,9MB	8.0.225.0
Microsoft Office File Validation Add-In	Microsoft Corporation	18.12.2011	7,95MB	14.0.5130.5003
Microsoft Office Live Add-in 1.5	Microsoft Corporation	21.04.2012	508KB	2.0.4024.1
Microsoft Office Standard Edition 2003	Microsoft Corporation	11.07.2013	1,48GB	11.0.8173.0
Microsoft Silverlight	Microsoft Corporation	11.07.2013	100MB	5.1.20513.0
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	27.10.2010	1,69MB	3.1.0000
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053	Microsoft Corporation	07.07.2010	260KB	8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	22.06.2011	300KB	8.0.61001
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148	Microsoft Corporation	12.02.2011	212KB	9.0.30729.4148
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148	Microsoft Corporation	12.02.2011	200KB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570	Microsoft Corporation	16.06.2011	790KB	9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570	Microsoft Corporation	16.06.2011	598KB	9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	06.11.2010	788KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	22.06.2011	788KB	9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	06.11.2010	596KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	22.06.2011	600KB	9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219	Microsoft Corporation	15.02.2012	16,5MB	10.0.40219
Moorhuhn Remake		12.02.2011		1.00.0000
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	07.07.2010	1,34MB	4.20.9876.0
MyFreeCodec		26.03.2013		
PlayReady PC Runtime amd64	Microsoft Corporation	21.01.2011	2,05MB	1.3.0
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	11.11.2010		6.0.1.6237
Realtek USB 2.0 Card Reader	Realtek Semiconductor Corp.	02.11.2010		6.1.7600.30121
REALTEK Wireless LAN Driver	REALTEK Semiconductor Corp.	02.11.2010		1.00.0148
Renesas Electronics USB 3.0 Host Controller Driver	Renesas Electronics Corporation	02.11.2010	1,00MB	2.0.26.0
Samsung Kies	Samsung Electronics Co., Ltd.	26.03.2013	158MB	2.5.2.13021_10
SAMSUNG USB Driver for Mobile Phones	SAMSUNG Electronics Co., Ltd.	26.03.2013	33,8MB	1.5.18.0
Synaptics Pointing Device Driver	Synaptics Incorporated	02.11.2010		14.0.19.0
T-Mobile Internet Manager	Huawei Technologies Co.,Ltd	30.05.2011		11.301.05.00.108
Total Commander (Remove or Repair)	Ghisler Software GmbH	12.02.2011		7.50a
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Visual Studio 2010 x64 Redistributables	AVG Technologies	08.05.2013	12,4MB	13.0.0.1
Windows Live Essentials	Microsoft Corporation	27.10.2010		15.4.3502.0922
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Windows Live Mesh ActiveX Control for Remote Connections	Microsoft Corporation	27.10.2010	5,37MB	15.4.5722.2
Windows Live Mesh ActiveX control for remote connections	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger	Microsoft Corporation	05.11.2010	5,57MB	15.4.5722.2
Windows Live Mesh ActiveX-objekt til fjernforbindelser	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz	Microsoft Corporation	27.10.2010	5,57MB	15.4.5722.2
Windows Live Meshin etäyhteyksien ActiveX-komponentti	Microsoft Corporation	05.11.2010	5,57MB	15.4.5722.2
Windows Media Encoder 9 Series		02.11.2010		
X10 Hardware(TM)		21.01.2011		
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις	Microsoft Corporation	27.10.2010	5,38MB	15.4.5722.2

markusg · 11.07.2013, 21:17

Hi, es sind wieder mehrere Arbeisschritte zu erledigen und Logs zu erstellen, poste sie gleichzeitig, in einem Post.

1.
das du dir Schadsoftware eingefangen hast, ist kein Wunder, da du einiges an veralteter Software nutzt, und damit sicherheitslücken offen hast.
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
2.
Google Toolbar : Bitte nutze keine Toolbars, sie sind nur ein zusätzliches Risiko.
Java: alle
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
deinstaliere:

Öffne bitte CCleaner, analysieren, starten, PC neustarten.

2.
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Neustarten.
3.
HitmanPro - Download - Filepony
Hitmanpro laden, doppelklicken, Scan klicken.
Nichts löschen.
Weiter klicken.
Log speichern und posten, bzw als XML exportieren, packen und anhängen.

claudia123 · 11.07.2013, 22:16

Code:

ATTFilter

# AdwCleaner v2.303 - Datei am 11/07/2013 um 23:08:46 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : mezgerp - MEZGERP-PC
# Bootmodus : Normal
# Ausgeführt unter : F:\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Google Chrome v28.0.1500.71

Datei : C:\Users\mezgerp\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S2].txt - [702 octets] - [11/07/2013 23:08:46]

########## EOF - C:\AdwCleaner[S2].txt - [761 octets] ##########

11.07.2013, 18:23	#23
markusg /// Malware-holic	Hilfe habe Trojaner am PC! Forderungsseite geht auf mit Bundesadler! steht doch da oder nicht... __________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet

Hilfe habe Trojaner am PC! Forderungsseite geht auf mit Bundesadler!

Log-Analyse und Auswertung: Hilfe habe Trojaner am PC! Forderungsseite geht auf mit Bundesadler!