|
Plagegeister aller Art und deren Bekämpfung: Antivirus und andere Programm lassen sich nicht installierenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.01.2015, 15:57 | #1 |
| Antivirus und andere Programm lassen sich nicht installieren Hallo! Habe seit heute morgen ein ziemliches Problem mit meinem PC. Nach Start des PC, bekam ich eine Fehlermeldung, dass der Papierkorb defekt ist. Weiters funktionierte mein Mail nicht mehr. Nach Systemwiederherstellung bekam ich mehrere Fehlermeldungen, die ich in Laufe des Tages beheben konnte. Versuche nun schon seit Stunden mein Antivirusprogramm zu installieren. Es funkt nicht. Auch nicht, Antivir, Kasperksy, usw ... . Ich weiß nicht mehr weiter, ich kann kein Programm installieren. Bitte um eure Hilfe! Besten Dank!! Geändert von Quella1977 (12.01.2015 um 16:04 Uhr) |
12.01.2015, 16:12 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antivirus und andere Programm lassen sich nicht installieren Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
12.01.2015, 17:01 | #3 |
| Antivirus und andere Programm lassen sich nicht installieren Hallo!
__________________Zuerst möchte ich dir für deine Hilfe danken!! Nein, ich habe bis jetzt keine Logs. Weiters möchte ich dich darauf hinweisen, dass ich diesen PC privat und beruflich nutze. Gibt es dabei ein Problem? Vielen lieben Dank, Susanne FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 Ran by susi (administrator) on EMESA_PC-THINK on 12-01-2015 16:55:39 Running from C:\Users\susi\Downloads Loaded Profile: susi (Available profiles: ***_PC & susi) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe (Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Farbar) C:\Users\susi\Downloads\FRST64 (2).exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2876816 2013-03-12] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13535304 2013-04-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor) HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [384344 2014-02-17] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295712 2014-08-07] (Lenovo Group Limited) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63776 2014-07-10] (Lenovo) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-04-12] (Lenovo) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-12-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-12-03] (Adobe Systems Inc.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [DBAgent] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1519176 2014-02-10] (Seagate Technology LLC) HKLM-x32\...\Run: [Launch Backup Service Once] => C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrstrigger.exe [135016 2013-09-25] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.) Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\susi\AppData\Roaming\Mozilla\Firefox\Profiles\0uplgfza.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-10-22] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-12] CHR Extension: (Google Docs) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-12] CHR Extension: (Google Drive) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-12] CHR Extension: (YouTube) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12] CHR Extension: (Google-Suche) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12] CHR Extension: (Google Tabellen) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-12] CHR Extension: (Google Wallet) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-12] CHR Extension: (Google Mail) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12] CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - No Path CHR HKLM-x32\...\Chrome\Extension: [dflinnddekagfkncpgojoppgnppfkbkj] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2009-07-14] (Microsoft Corporation) [File not signed] S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation) [File not signed] S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2014-08-19] (Microsoft Corporation) [File not signed] R3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2013-02-27] (Microsoft Corporation) [File not signed] S3 AppMgmt; C:\Windows\System32\appmgmts.dll [193536 2009-07-14] (Microsoft Corporation) [File not signed] S3 AppMgmt; C:\Windows\SysWOW64\appmgmts.dll [149504 2009-07-14] (Microsoft Corporation) [File not signed] R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-21] (Microsoft Corporation) [File not signed] S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation) [File not signed] R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-21] (Microsoft Corporation) [File not signed] R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-21] (Microsoft Corporation) [File not signed] R3 Browser; C:\Windows\System32\browser.dll [136704 2013-02-11] (Microsoft Corporation) [File not signed] S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation) [File not signed] S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [187904 2014-07-07] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2014-07-07] (Microsoft Corporation) [File not signed] R2 CscService; C:\Windows\System32\cscsvc.dll [692224 2010-11-21] (Microsoft Corporation) [File not signed] R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2013-02-11] (Microsoft Corporation) [File not signed] S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-21] (Microsoft Corporation) [File not signed] S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-05-15] (Lenovo.) R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-21] (Microsoft Corporation) [File not signed] R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation) [File not signed] R2 EFS; C:\Windows\System32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-21] (Microsoft Corporation) [File not signed] S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation) [File not signed] R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-21] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation) [File not signed] R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-04-12] (Lenovo) S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-21] (Microsoft Corporation) [File not signed] R3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation) [File not signed] R2 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation) [File not signed] R2 FontCache; C:\Windows\system32\FntCache.dll [1175552 2013-09-11] (Microsoft Corporation) [File not signed] R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-21] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) [File not signed] S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-21] (Microsoft Corporation) [File not signed] S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2014-11-22] (Microsoft Corporation) [File not signed] R2 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation) [File not signed] R2 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation) [File not signed] R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2013-02-11] (Microsoft Corporation) [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation) R3 KeyIso; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation) [File not signed] R2 LanmanServer; C:\Windows\system32\srvsvc.dll [236032 2010-11-21] (Microsoft Corporation) [File not signed] R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-21] (Microsoft Corporation) [File not signed] S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (Lenovo) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197408 2014-08-07] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation) [File not signed] R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation) [File not signed] S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] () S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-21] (Microsoft Corporation) [File not signed] R2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-21] (Microsoft Corporation) [File not signed] S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation) [File not signed] S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2010-11-21] (Microsoft Corporation) [File not signed] S3 msiserver; C:\WINDOWS\SysWOW64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation) [File not signed] S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-21] (Microsoft Corporation) [File not signed] S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2013-02-11] (Microsoft Corporation) [File not signed] R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation) [File not signed] R2 PcaSvc; C:\Windows\System32\pcasvc.dll [188416 2014-07-07] (Microsoft Corporation) [File not signed] S3 PeerDistSvc; C:\Windows\system32\peerdistsvc.dll [1361920 2009-07-14] (Microsoft Corporation) [File not signed] S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-21] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-21] (Microsoft Corporation) [File not signed] R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2013-02-11] (Microsoft Corporation) [File not signed] S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation) [File not signed] S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-21] (Microsoft Corporation) [File not signed] R2 Power; C:\Windows\system32\umpo.dll [163840 2013-09-11] (Microsoft Corporation) [File not signed] R2 ProfSvc; C:\Windows\system32\profsvc.dll [209920 2013-02-11] (Microsoft Corporation) [File not signed] S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-21] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation) [File not signed] S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] R2 SamSs; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation) [File not signed] R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-21] (Microsoft Corporation) [File not signed] S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-21] (Microsoft Corporation) [File not signed] R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2014-02-10] (Seagate Technology LLC) R2 Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [157264 2014-02-10] (Seagate Technology LLC) S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-21] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\System32\sens.dll [64512 2009-07-14] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation) [File not signed] S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-21] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-21] (Microsoft Corporation) [File not signed] S3 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-21] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-21] (Microsoft Corporation) [File not signed] S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation) [File not signed] R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2013-02-11] (Microsoft Corporation) [File not signed] R2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-21] (Microsoft Corporation) [File not signed] S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation) [File not signed] S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-21] (Microsoft Corporation) [File not signed] S3 StorSvc; C:\Windows\system32\storsvc.dll [17920 2009-07-14] (Microsoft Corporation) [File not signed] S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation) [File not signed] R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2010-11-21] (Microsoft Corporation) [File not signed] S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-21] (Microsoft Corporation) [File not signed] S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-21] (Microsoft Corporation) [File not signed] S3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-21] (Microsoft Corporation) [File not signed] S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] S3 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation) [File not signed] R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [File not signed] S4 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed] S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation) [File not signed] R3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-21] (Microsoft Corporation) [File not signed] R3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1526120 2013-09-25] (Lenovo Group Limited) S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation) [File not signed] R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [61440 2008-01-10] (Ulead Systems, Inc.) [File not signed] S3 UmRdpService; C:\Windows\System32\umrdp.dll [214528 2010-11-21] (Microsoft Corporation) [File not signed] S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation) [File not signed] S3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) [File not signed] R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-21] (Microsoft Corporation) [File not signed] S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-21] (Microsoft Corporation) [File not signed] S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation) [File not signed] S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-21] (Microsoft Corporation) [File not signed] S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-21] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-21] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\System32\webclnt.dll [259584 2013-07-04] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [205824 2013-07-04] (Microsoft Corporation) [File not signed] S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation) [File not signed] S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation) [File not signed] S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation) [File not signed] S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-21] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-21] (Microsoft Corporation) [File not signed] R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation) [File not signed] R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation) [File not signed] S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation) [File not signed] S3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-21] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) [File not signed] S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-21] (Microsoft Corporation) [File not signed] R2 wscsvc; C:\Windows\System32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2013-02-11] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2013-02-11] (Microsoft Corporation) [File not signed] R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation) [File not signed] S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation) [File not signed] S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-21] (Microsoft Corporation) [File not signed] R3 5U877; C:\Windows\System32\DRIVERS\5U877.sys [214912 2012-01-25] (Ricoh co.,Ltd.) [File not signed] S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-21] (Microsoft Corporation) [File not signed] R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] (Microsoft Corporation) [File not signed] S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-14] (Microsoft Corporation) [File not signed] S3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2014-08-19] (Microsoft Corporation) [File not signed] S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed] S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [File not signed] S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [File not signed] S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.) R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] (Microsoft Corporation) [File not signed] R1 blbdrive; C:\Windows\System32\DRIVERS\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation) [File not signed] R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation) [File not signed] S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.) [File not signed] S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BthEnum; C:\Windows\System32\DRIVERS\BthEnum.sys [41984 2009-07-14] (Microsoft Corporation) [File not signed] S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [File not signed] S3 BthPan; C:\Windows\System32\DRIVERS\bthpan.sys [118784 2009-07-14] (Microsoft Corporation) [File not signed] S3 BTHPORT; C:\Windows\System32\Drivers\BTHport.sys [552960 2013-02-11] (Microsoft Corporation) [File not signed] S3 BTHUSB; C:\Windows\System32\Drivers\BTHUSB.sys [80384 2013-02-11] (Microsoft Corporation) [File not signed] S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation) [File not signed] S1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] (Microsoft Corporation) [File not signed] S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [File not signed] R3 CmBatt; C:\Windows\System32\DRIVERS\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation) [File not signed] R3 CompositeBus; C:\Windows\System32\DRIVERS\CompositeBus.sys [38912 2010-11-21] (Microsoft Corporation) [File not signed] R1 CSC; C:\Windows\System32\drivers\csc.sys [514560 2010-11-21] (Microsoft Corporation) [File not signed] R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-21] (Microsoft Corporation) [File not signed] R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] S3 dmvsc; C:\Windows\system32\drivers\dmvsc.sys [71168 2010-11-21] (Microsoft Corporation) [File not signed] S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation) [File not signed] S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [File not signed] S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation) [File not signed] S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [55536 2013-04-12] (Windows (R) Win 7 DDK provider) R3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation) [File not signed] S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-14] (Microsoft Corporation) [File not signed] S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation) [File not signed] S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed] S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-21] (Microsoft Corporation) [File not signed] S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [753664 2010-11-21] (Microsoft Corporation) [File not signed] R3 i8042prt; C:\Windows\System32\DRIVERS\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation) [File not signed] R3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [9000256 2013-02-19] (Intel Corporation) [File not signed] R3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [331264 2011-12-05] (Intel(R) Corporation) [File not signed] R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) [File not signed] S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation) [File not signed] S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed] R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] (Microsoft Corporation) [File not signed] R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation) [File not signed] R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation) [File not signed] S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [File not signed] R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation) [File not signed] R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation) [File not signed] S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [140800 2013-07-04] (Microsoft Corporation) [File not signed] R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2013-02-11] (Microsoft Corporation) [File not signed] R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2013-02-11] (Microsoft Corporation) [File not signed] R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2013-02-11] (Microsoft Corporation) [File not signed] R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] (Microsoft Corporation) [File not signed] S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation) [File not signed] S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation) [File not signed] R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation) [File not signed] S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation) [File not signed] R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-21] (Microsoft Corporation) [File not signed] R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-21] (Microsoft Corporation) [File not signed] R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-21] (Microsoft Corporation) [File not signed] S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2013-08-06] (Apple Inc.) [File not signed] R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) [File not signed] R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-21] (Microsoft Corporation) [File not signed] R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] (Microsoft Corporation) [File not signed] R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) [File not signed] S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation) [File not signed] S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2014-07-07] (Microsoft Corporation) [File not signed] R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-21] (Microsoft Corporation) [File not signed] S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-21] (Microsoft Corporation) [File not signed] S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-21] (Microsoft Corporation) [File not signed] R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation) [File not signed] R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-21] (Microsoft Corporation) [File not signed] R3 rdpbus; C:\Windows\System32\DRIVERS\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [165888 2010-11-21] (Microsoft Corporation) [File not signed] R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] (Microsoft Corporation) [File not signed] S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] (Microsoft Corporation) [File not signed] S3 RFCOMM; C:\Windows\System32\DRIVERS\rfcomm.sys [158720 2009-07-14] (Microsoft Corporation) [File not signed] S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [260712 2012-01-30] (Realtek Semiconductor Corp.) R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation) [File not signed] S3 s3cap; C:\Windows\system32\drivers\vms3cap.sys [6656 2010-11-21] (Microsoft Corporation) [File not signed] S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-21] (Microsoft Corporation) [File not signed] R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed] S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] (Microsoft Corporation) [File not signed] S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Microsoft Corporation) [File not signed] S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-21] (Microsoft Corporation) [File not signed] S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation) [File not signed] S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation) [File not signed] R2 smihlp2; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.) R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2013-02-11] (Microsoft Corporation) [File not signed] R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2013-02-11] (Microsoft Corporation) [File not signed] R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2013-02-11] (Microsoft Corporation) [File not signed] R3 StillCam; C:\Windows\System32\DRIVERS\serscan.sys [12288 2009-07-14] (Microsoft Corporation) [File not signed] R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2013-02-11] (Microsoft Corporation) [File not signed] S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation) [File not signed] S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation) [File not signed] R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] (Microsoft Corporation) [File not signed] R3 TPM; C:\Windows\System32\drivers\tpm.sys [38400 2009-07-14] (Microsoft Corporation) [File not signed] S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation) [File not signed] S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [56832 2013-10-02] (Microsoft Corporation) [File not signed] S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [30208 2012-08-23] (Microsoft Corporation) [File not signed] R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-21] (Microsoft Corporation) [File not signed] R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility) S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-21] (Microsoft Corporation) [File not signed] R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] (Microsoft Corporation) [File not signed] S3 UmPass; C:\Windows\System32\DRIVERS\umpass.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed] R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [File not signed] R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [53248 2013-11-27] (Microsoft Corporation) [File not signed] R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbprint; C:\Windows\system32\drivers\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed] R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2013-02-11] (Microsoft Corporation) [File not signed] S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation) [File not signed] S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] S3 VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [21760 2010-11-21] (Microsoft Corporation) [File not signed] R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] (Microsoft Corporation) [File not signed] R3 vwifimp; C:\Windows\System32\DRIVERS\vwifimp.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed] S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-14] (Microsoft Corporation) [File not signed] S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation) [File not signed] R3 WinUsb; C:\Windows\System32\DRIVERS\WinUSB.sys [41984 2010-11-21] (Microsoft Corporation) [File not signed] R3 WmiAcpi; C:\Windows\System32\DRIVERS\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation) [File not signed] S3 WSDPrintDevice; C:\Windows\System32\DRIVERS\WSDPrint.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed] S3 WSDScan; C:\Windows\system32\drivers\WSDScan.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed] R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation) [File not signed] R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) [File not signed] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] U2 TMAgent; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-12 16:55 - 2015-01-12 16:55 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64 (2).exe 2015-01-12 16:13 - 2015-01-12 16:13 - 00000000 ____D () C:\Users\susi\AppData\Roaming\PowerFolder 2015-01-12 16:10 - 2015-01-12 16:10 - 26316120 _____ (Mozilla) C:\Users\susi\Downloads\Thunderbird Setup 31.3.0.exe 2015-01-12 16:10 - 2015-01-12 16:10 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Thunderbird 2015-01-12 16:10 - 2015-01-12 16:10 - 00000000 ____D () C:\Users\susi\AppData\Local\Thunderbird 2015-01-12 16:09 - 2015-01-12 16:09 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Mozilla 2015-01-12 16:09 - 2015-01-12 16:09 - 00000000 ____D () C:\Users\susi\AppData\Local\Mozilla 2015-01-12 16:07 - 2015-01-12 16:07 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\susi\Downloads\tdsskiller.exe 2015-01-12 15:54 - 2015-01-12 15:54 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64 (1).exe 2015-01-12 15:53 - 2015-01-12 15:53 - 00000000 _____ () C:\Users\susi\defogger_reenable 2015-01-12 15:52 - 2015-01-12 15:53 - 00000470 _____ () C:\Users\susi\Downloads\defogger_disable.log 2015-01-12 15:52 - 2015-01-12 15:53 - 00000242 _____ () C:\Users\susi\Downloads\defogger_enable.log 2015-01-12 15:52 - 2015-01-12 15:52 - 00050477 _____ () C:\Users\susi\Downloads\Defogger.exe 2015-01-12 15:16 - 2015-01-12 15:16 - 291313628 ____C () C:\Registirerungsdatei 12.01.2015.reg 2015-01-12 14:48 - 2015-01-12 14:51 - 63320784 _____ (Microsoft Corporation) C:\Users\susi\Downloads\IE11-Windows6.1-x64-de-de.exe 2015-01-12 14:48 - 2015-01-12 14:50 - 36904648 _____ (Microsoft Corporation) C:\Users\susi\Downloads\Windows-KB890830-x64-V5.19.exe 2015-01-12 14:40 - 2015-01-12 14:40 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.ProgramInstallUninstall.FISC.199344494501377141.1.4.Run.exe 2015-01-12 14:32 - 2015-01-12 14:32 - 01205440 _____ (Microsoft Corporation) C:\Users\susi\Downloads\NDP453-KB2969353-Web.exe 2015-01-12 14:29 - 2015-01-12 14:29 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.ProgramInstallUninstall.MATSKB.Run.exe 2015-01-12 14:27 - 2015-01-12 14:27 - 03327000 _____ () C:\Users\susi\Downloads\WindowsXP-KB942288-v3-x86.exe 2015-01-12 14:24 - 2015-01-12 14:28 - 205268600 _____ (Symantec Corporation) C:\Users\susi\Downloads\NIS2014_Lenovo_OEM.exe 2015-01-12 14:19 - 2015-01-12 14:20 - 14107296 _____ (Microsoft Corporation) C:\Users\susi\Downloads\mseinstall.exe 2015-01-12 14:17 - 2015-01-12 14:17 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinSecurity.FISC.199344494501377141.1.3.Run.exe 2015-01-12 13:57 - 2015-01-12 13:57 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.maintenance.FISC.199344494501377141.1.2.Run.exe 2015-01-12 13:55 - 2015-01-12 13:55 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinFileFolder.FISC.199344494501377141.1.1.Run.exe 2015-01-12 13:55 - 2015-01-12 13:55 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinFileFolder.FISC.199344494501377141.1.1.Run (1).exe 2015-01-12 13:51 - 2015-01-12 13:56 - 00000000 ____D () C:\Program Files (x86)\Free Window Registry Repair 2015-01-12 13:51 - 2015-01-12 13:51 - 00001046 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\Desktop\Free Window Registry Repair.lnk 2015-01-12 13:51 - 2015-01-12 13:51 - 00001046 _____ () C:\Users\susi\Desktop\Free Window Registry Repair.lnk 2015-01-12 13:51 - 2015-01-12 13:51 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair 2015-01-12 13:51 - 2015-01-12 13:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair 2015-01-12 13:49 - 2015-01-12 13:50 - 00804985 _____ () C:\Users\susi\Downloads\RegpairSetup_CB-DL-Manager.exe 2015-01-12 13:49 - 2015-01-12 13:49 - 00823792 _____ ( ) C:\Users\susi\Downloads\RegpairSetup_CB-DL-Manager (1).exe 2015-01-12 13:48 - 2015-01-12 13:48 - 00000000 ____D () C:\Users\susi\AppData\Local\CrashDumps 2015-01-12 13:36 - 2015-01-12 13:40 - 00004144 _____ () C:\Windows\system32\ASOROSet.bin 2015-01-12 13:36 - 2015-01-12 13:36 - 00000000 ____D () C:\Windows\system32\config\RCCBakup 2015-01-12 13:35 - 2015-01-12 15:15 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Ipswitch 2015-01-12 13:35 - 2015-01-12 13:35 - 00000000 ____D () C:\Users\susi\AppData\Roaming\reaper 2015-01-12 13:31 - 2015-01-12 13:49 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Solvusoft 2015-01-12 13:31 - 2015-01-12 13:31 - 03894696 _____ (solvusoft Corporation ) C:\Users\susi\Downloads\Setup_WinThruster_2015.exe 2015-01-12 13:31 - 2012-10-15 17:02 - 00019888 _____ (solvusoft) C:\Windows\system32\roboot64.exe 2015-01-12 13:18 - 2015-01-12 13:18 - 00495712 _____ (Kaspersky Lab) C:\Users\susi\Downloads\setup.exe 2015-01-12 13:18 - 2015-01-12 13:18 - 00035283 _____ () C:\Users\susi\Downloads\Addition.txt 2015-01-12 13:16 - 2015-01-12 16:55 - 00055329 _____ () C:\Users\susi\Downloads\FRST.txt 2015-01-12 13:15 - 2015-01-12 16:55 - 00000000 ___DC () C:\FRST 2015-01-12 13:15 - 2015-01-12 13:15 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64.exe 2015-01-12 13:13 - 2015-01-12 13:13 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\susi\Downloads\avira_de_av_5777685461__ws.exe 2015-01-12 13:13 - 2015-01-12 13:13 - 00000000 ___DC () C:\OETemp 2015-01-12 13:09 - 2015-01-12 16:51 - 00013982 _____ () C:\Windows\PFRO.log 2015-01-12 13:07 - 2015-01-12 13:08 - 12327440 _____ (Trend Micro Inc.) C:\Users\susi\Downloads\TiUnTool_60_MUI.exe 2015-01-12 13:01 - 2015-01-12 13:01 - 00000036 _____ () C:\Users\susi\AppData\Local\housecall.guid.cache 2015-01-12 13:00 - 2015-01-12 13:00 - 00000000 ____D () C:\Users\susi\AppData\Roaming\PwrMgr 2015-01-12 13:00 - 2015-01-12 13:00 - 00000000 ____D () C:\Users\susi\AppData\Local\Trend Micro 2015-01-12 12:57 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Roaming\LSC 2015-01-12 12:47 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Adobe 2015-01-12 12:47 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Local\Adobe 2015-01-12 12:47 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\susi\AppData\Local\Lenovo 2015-01-12 12:47 - 2015-01-12 12:47 - 00122624 _____ () C:\Users\susi\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-12 12:47 - 2015-01-12 12:47 - 00001436 _____ () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Leadertech 2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Local\Google 2015-01-12 12:46 - 2015-01-12 15:53 - 00000000 ____D () C:\Users\susi 2015-01-12 12:46 - 2015-01-12 12:46 - 00000020 ___SH () C:\Users\susi\ntuser.ini 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Vorlagen 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Startmenü 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Netzwerkumgebung 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Lokale Einstellungen 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Eigene Dateien 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Druckumgebung 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Documents\Eigene Musik 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Documents\Eigene Bilder 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Local\Verlauf 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Local\Anwendungsdaten 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Anwendungsdaten 2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 ____D () C:\Users\susi\AppData\Local\VirtualStore 2015-01-12 12:46 - 2013-10-16 13:18 - 00000000 ____D () C:\Users\susi\AppData\Local\Microsoft Help 2015-01-12 12:46 - 2013-09-11 04:28 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Macromedia 2015-01-12 12:46 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-01-12 12:46 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-01-12 12:45 - 2015-01-12 14:21 - 00002122 _____ () C:\Windows\epplauncher.mif 2015-01-12 12:45 - 2015-01-12 12:45 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\PwrMgr 2015-01-12 12:35 - 2015-01-12 12:35 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\LSC 2015-01-12 12:32 - 2015-01-12 12:32 - 00001378 _____ () C:\Users\Public\Desktop\Installationsprogramm für Trend Micro Titanium Maximum Security.lnk 2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieUserList 2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieSiteList 2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieBrowserModeList 2015-01-12 12:27 - 2015-01-12 12:27 - 00122624 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\PowerFolder 2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Leadertech 2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Lenovo 2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Adobe 2015-01-12 12:26 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Adobe 2015-01-12 12:26 - 2015-01-12 12:26 - 00001436 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-01-12 12:26 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-12 12:26 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Google 2015-01-12 12:24 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003 2015-01-12 12:24 - 2015-01-12 12:24 - 00000020 ___SH () C:\Users\TEMP.Emesa_PC-THINK.003\ntuser.ini 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Vorlagen 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Startmenü 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Netzwerkumgebung 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Lokale Einstellungen 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Eigene Dateien 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Druckumgebung 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Documents\Eigene Musik 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Documents\Eigene Bilder 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Verlauf 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Anwendungsdaten 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Anwendungsdaten 2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\VirtualStore 2015-01-12 12:24 - 2013-10-16 13:18 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Microsoft Help 2015-01-12 12:24 - 2013-09-11 04:28 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Macromedia 2015-01-12 12:24 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-01-12 12:24 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-01-12 11:21 - 2015-01-12 11:24 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.002 2015-01-12 11:13 - 2015-01-12 11:19 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.001 2015-01-12 10:55 - 2015-01-12 11:29 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup 2015-01-12 10:55 - 2015-01-12 11:23 - 00000278 _____ () C:\Windows\Tasks\PC-Mechanic Startup.job 2015-01-12 10:54 - 2015-01-12 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue 2015-01-12 10:54 - 2015-01-12 10:54 - 00000000 ____D () C:\Program Files (x86)\Uniblue 2015-01-12 10:36 - 2015-01-12 11:01 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.000 2015-01-12 08:47 - 2015-01-12 08:51 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK 2015-01-12 08:31 - 2015-01-12 08:39 - 00000000 ____D () C:\Users\TEMP 2015-01-07 12:18 - 2015-01-07 12:18 - 00000000 ____D () C:\Users\Emesa_PC\Desktop\2015-01-07 Vertrag EA Speed Wash 2015-01-02 20:17 - 2015-01-12 16:58 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\vlc 2015-01-02 20:16 - 2015-01-12 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2015-01-02 20:16 - 2015-01-02 20:16 - 00000000 ____D () C:\Program Files\VideoLAN 2015-01-02 11:05 - 2015-01-02 11:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2015-01-02 10:51 - 2012-05-30 13:42 - 00569152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys 2015-01-02 10:44 - 2013-04-30 21:12 - 03388744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2015-01-02 10:44 - 2013-04-30 19:53 - 03693640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\SET4373.tmp 2015-01-02 10:44 - 2013-04-30 17:37 - 00551917 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2015-01-02 10:44 - 2013-04-30 17:32 - 00140872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2015-01-02 10:44 - 2013-04-30 14:28 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2015-01-02 10:44 - 2013-04-29 18:27 - 23609344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2015-01-02 10:44 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2015-01-02 10:44 - 2013-04-24 09:38 - 01002056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2015-01-02 10:44 - 2013-04-23 00:40 - 02735648 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2015-01-02 10:44 - 2013-04-15 11:19 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2015-01-02 10:44 - 2013-04-10 17:22 - 02802760 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2015-01-02 10:44 - 2013-03-23 03:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2015-01-02 10:44 - 2013-02-20 18:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2015-01-02 10:44 - 2012-10-02 14:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2015-01-02 10:44 - 2012-10-02 14:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2015-01-02 10:44 - 2012-10-02 14:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2015-01-02 10:44 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2015-01-02 10:44 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\SET48CA.tmp 2015-01-02 10:44 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\SET47EE.tmp 2015-01-02 10:44 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\SET4A71.tmp 2015-01-02 10:44 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2015-01-02 10:44 - 2012-06-20 17:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2015-01-02 10:34 - 2015-01-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2015-01-02 10:34 - 2015-01-02 10:34 - 00001215 _____ () C:\Users\Public\Desktop\SHAREit.lnk 2014-12-26 09:30 - 2014-12-26 09:30 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2014-12-19 08:04 - 2014-12-19 08:04 - 01054912 _____ (Adobe) C:\Users\Emesa_PC\Downloads\install_flashplayer16x32au_mssa_aaa_aih.exe 2014-12-18 15:45 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-18 15:45 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-15 09:21 - 2014-12-15 09:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-13 01:37 - 2013-09-11 04:33 - 00000000 ____D () C:\swshare 2015-01-12 16:58 - 2013-02-11 19:28 - 00000000 ___RD () C:\Users\Public\Recorded TV 2015-01-12 16:55 - 2013-09-11 13:59 - 00699342 _____ () C:\Windows\system32\perfh007.dat 2015-01-12 16:55 - 2013-09-11 13:59 - 00149450 _____ () C:\Windows\system32\perfc007.dat 2015-01-12 16:55 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-12 16:51 - 2013-10-15 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-12 16:51 - 2013-10-15 11:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-12 16:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-12 16:51 - 2009-07-14 05:51 - 00127134 _____ () C:\Windows\setupact.log 2015-01-12 16:25 - 2013-09-11 04:15 - 01588576 _____ () C:\Windows\WindowsUpdate.log 2015-01-12 16:21 - 2009-07-14 05:45 - 00034432 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-12 16:21 - 2009-07-14 05:45 - 00034432 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-12 16:10 - 2014-06-11 08:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2015-01-12 16:10 - 2013-10-15 16:37 - 00002101 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2015-01-12 16:08 - 2013-12-04 08:49 - 00000000 ____D () C:\ProgramData\Trend Micro 2015-01-12 16:08 - 2013-10-15 11:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-12 15:42 - 2013-10-15 11:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-12 13:40 - 2009-07-14 03:34 - 82051072 _____ () C:\Windows\system32\config\software.bak 2015-01-12 13:40 - 2009-07-14 03:34 - 21495808 _____ () C:\Windows\system32\config\system.bak 2015-01-12 13:40 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2015-01-12 13:37 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2015-01-12 13:24 - 2013-10-16 10:35 - 00000000 ____D () C:\Windows\system32\appmgmt 2015-01-12 13:00 - 2013-12-04 08:49 - 00000000 ____D () C:\Program Files\Trend Micro 2015-01-12 12:50 - 2013-12-04 08:50 - 00000418 __RSH () C:\ProgramData\ntuser.pol 2015-01-12 11:30 - 2013-12-04 09:47 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\PSpad 2015-01-12 11:30 - 2013-11-05 08:26 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\PowerFolder 2015-01-12 11:30 - 2013-10-15 16:07 - 00000000 ____D () C:\Users\Emesa_PC 2015-01-12 11:30 - 2013-10-15 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-12 11:30 - 2013-09-11 04:41 - 00000000 ____D () C:\Windows\System32\Tasks\TVT 2015-01-12 11:30 - 2013-09-11 04:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-01-12 11:30 - 2013-09-11 04:23 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2015-01-12 11:30 - 2013-09-11 04:18 - 00000000 ____D () C:\Program Files\Elantech 2015-01-12 11:30 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\security 2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-01-12 11:29 - 2014-03-19 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird.bak 2015-01-12 11:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-01-12 11:28 - 2013-10-15 10:21 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\Adobe 2015-01-12 11:28 - 2013-09-10 21:49 - 00000000 ____D () C:\ProgramData\Lenovo 2015-01-12 11:27 - 2013-09-11 04:22 - 00000000 ____D () C:\Program Files (x86)\Realtek 2015-01-12 11:27 - 2013-09-11 04:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-12 08:02 - 2014-02-27 08:03 - 00000000 ____D () C:\temp 2015-01-09 10:33 - 2013-10-15 09:55 - 00002332 ____H () C:\Users\Emesa_PC\Documents\Default.rdp 2015-01-09 08:44 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2015-01-08 11:20 - 2014-09-15 08:36 - 00000000 ____D () C:\Users\Emesa_PC\Documents\MailStore Home 2015-01-08 11:20 - 2014-05-13 13:33 - 00000000 ____D () C:\ProgramData\firebird 2015-01-08 08:11 - 2013-10-15 16:38 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\Thunderbird 2015-01-02 20:18 - 2013-10-17 10:59 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\CrashDumps 2015-01-02 10:49 - 2013-09-11 04:28 - 00000000 ____D () C:\Windows\Downloaded Installations 2015-01-02 10:48 - 2013-09-11 04:27 - 00003020 _____ () C:\Windows\System32\Tasks\PMTask 2015-01-02 10:48 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media 2015-01-02 10:45 - 2013-09-11 04:23 - 00002556 ____C () C:\RHDSetup.log 2015-01-02 10:45 - 2013-09-11 04:23 - 00000000 ___HD () C:\Program Files (x86)\Temp 2015-01-02 10:35 - 2014-12-10 08:17 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\LSC 2014-12-23 09:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-12-17 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\spool 2014-12-16 09:13 - 2013-10-16 10:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-12-15 09:10 - 2013-10-15 11:07 - 00002186 _____ () C:\Users\Public\Desktop\Google Chrome.lnk Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.6376.dll Some content of TEMP: ==================== C:\Users\Emesa_PC\AppData\Local\Temp\desktoputils.dll C:\Users\Emesa_PC\AppData\Local\Temp\jnotify.dll C:\Users\Emesa_PC\AppData\Local\Temp\udt.dll C:\Users\Emesa_PC\AppData\Local\Temp\udt4j.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-08 12:19 ==================== End Of Log ============================ --- --- --- |
12.01.2015, 17:02 | #4 |
| Antivirus und andere Programm lassen sich nicht installieren ddd |
12.01.2015, 19:08 | #5 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antivirus und andere Programm lassen sich nicht installierenZitat:
"Bei Kleinunternehmen, welche keinen eigenen IT Support haben, machen wir da eine Ausnahme und helfen gerne (kleine Spende hilft auch uns). Voraussetzung: Ihr teilt uns dies in eurer ersten Antwort mit. Bedenkt jedoch, dass Logfiles viele heikle Informationen enthalten können (Kundendaten, Bankdaten, etc.) sowie das Malware genauso wie unsere Scanner die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen. Hier legen wir euch ein Formatieren und Neuaufsetzen nahe. Hier gilt insbesondere, dass wir im Nachhinein keine Logfiles löschen werden, egal wie sehr "euer Chef das auch will". Gelesen und verstanden?
__________________ Logfiles bitte immer in CODE-Tags posten |
12.01.2015, 19:25 | #6 |
| Antivirus und andere Programm lassen sich nicht installieren Hallo! Danke für deinen Hinweis. Dann werde ich eure Hilfe wohl doch nicht in Anspruch nehmen können. Schade! Warum kann ich meinen Beitrag mit dem Logfile nicht mehr löschen? Besten Dank für die Antwort!! Geändert von Quella1977 (12.01.2015 um 19:37 Uhr) |
12.01.2015, 19:37 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antivirus und andere Programm lassen sich nicht installieren Hast du mal deine Beiträge gelesen Ich steig bei deiner letzten Antwort nicht mehr durch....die Vorschaufunktion ist hier auch nur aus Spaß da
__________________ Logfiles bitte immer in CODE-Tags posten |
12.01.2015, 19:50 | #8 |
| Antivirus und andere Programm lassen sich nicht installieren Ich meinte damit, dass wenn ... " Logfiles viele heikle Informationen enthalten können (Kundendaten, Bankdaten, etc.) sowie das Malware genauso wie unsere Scanner die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen." ich das Risiko, dass jemand diese Daten von mir benutzen kann, mir dann doch zu gefährlich ist. Sorry für mein unklares Posting. Kann ich nun meinen Beitrag mit der Logfiledatei nachträglich bearbeiten? Dank! |
12.01.2015, 20:00 | #9 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antivirus und andere Programm lassen sich nicht installierenZitat:
Es steht alles da. Es ist deine Pflicht vorher zu prüfen was in den Logs steht. Nachträglich können zB Nachnamen entfernt werden, wenn du GuRu eine PN schickst. Was hast du jetzt vor? Weitermachen oder des Thema jetzt beenden?
__________________ Logfiles bitte immer in CODE-Tags posten |
12.01.2015, 20:11 | #10 |
| Antivirus und andere Programm lassen sich nicht installieren Es tut mir leid, das ich dich verärgert habe. Es stehen so viele Infos auf eurer Seite, das man da schon mal etwas überlesen kann. Ich bin ein Laie in solchen Sachen, daher habe ich mich auch an Euch gewandt. Danke, aber ich werde das Thema beenden. |
12.01.2015, 20:31 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antivirus und andere Programm lassen sich nicht installieren Bin nicht verärgert...merk auch grade, dass mein Beitrag zu schroff rüberkommt war nicht meine Absicht
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Antivirus und andere Programm lassen sich nicht installieren |
andere, antivirus, antivirusprogramm, beheben, defekt, ellung, fehlermeldung, fehlermeldungen, funktionier, heute, hilfe, installiere, installieren, laufe, mail, morgen, nach start, papierkorb, problem, programm, start, stunde, stunden, systemwiederherstellung |