|
Plagegeister aller Art und deren Bekämpfung: Verbindungsabrüche bei verschiedenen ServicenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.01.2015, 14:16 | #1 |
| Verbindungsabrüche bei verschiedenen Servicen Guten Tag, ich habe seit ca. 3 Monaten Verbindungsabrüche mit bestimmten Servicen (Skype und League of Legends) im ca. 20 Sekunden abstand. Interessant ist hier, dass die die Verbindungsabrüche weniger auftreten wenn ich in den Servicen aktiv bin. Außerdem habe ich bei der Problemsuche erfahren, dass meine IP (dynamisch) bei Spamhaus in der XBL/CBL war und momentan auch noch in der PBL ist. In der vorletzten CBL-Listung stand, dass diese von Conficker befallen ist und an einem Botnet teilhat. Allerdings wurde in der nächsten Listung nicht mehr der Conficker genannt, sondern nur gewarnt das die IP an einem Botnet teilhat. Ich bin momentan seit 2 Tagen in keiner XBL/CBL nur noch in der PBL. Das Problem habe ich auch auf meinem Laptop, dieser ist allerdings über WLAN verbunden und mein Rechner über LAN. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01 Ran by Moussaoui (administrator) on MOUSSAOUI-PC on 25-01-2015 13:45:59 Running from F:\Downloads Loaded Profiles: Moussaoui (Available profiles: Moussaoui) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Binary Fortress Software) E:\DisplayFusion\DisplayFusionService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe () C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe () E:\Rainmeter\Rainmeter.exe () C:\ProgramData\gaupdt\service\0\gaupsvc.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe () C:\Windows\System32\PnkBstrA.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) E:\Teamviewer\TeamViewer_Service.exe (Chris Pietschmann (hxxp://pietschsoft.com)) E:\VirtualRouter\VirtualRouterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (Samsung Electronics.) E:\Samsung Magician\Samsung Magician.exe (Piotr Pawlowski) E:\foobar2000\foobar2000.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Microsoft Corporation) C:\Windows\System32\alg.exe () C:\Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.232\deploy\LoLLauncher.exe () C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\LoLPatcher.exe () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\LolClient.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Mozilla Corporation) E:\Mozilla Firefox\firefox.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe (Mozilla Corporation) E:\Thunderbird\thunderbird.exe (Mozilla Corporation) E:\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe () F:\Downloads\Defogger.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor) HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] () HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\RunOnce: [Adobe Speed Launcher] => 1422094966 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe () Startup: C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk ShortcutTarget: Rainmeter.lnk -> E:\Rainmeter\Rainmeter.exe () ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006 SearchScopes: HKLM -> DefaultScope {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> E:\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> E:\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> E:\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - E:\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{25338E54-3931-45FE-AC3A-C94BC9DD3569}: [NameServer] 8.8.8.8 FireFox: ======== FF ProfilePath: C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default FF SelectedSearchEngine: Google FF Homepage: about:home FF NetworkProxy: "autoconfig_url", "data:application/x-ns-proxy-autoconfig;base64,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" FF NetworkProxy: "ftp", "64.31.22.131" FF NetworkProxy: "ftp_port", 8089 FF NetworkProxy: "gopher", "64.31.22.131" FF NetworkProxy: "gopher_port", 8089 FF NetworkProxy: "socks", "64.31.22.131" FF NetworkProxy: "socks_port", 8089 FF NetworkProxy: "ssl", "64.31.22.131" FF NetworkProxy: "ssl_port", 8089 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> E:\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> E:\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect -> E:\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> E:\ITunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> E:\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> E:\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-1621062894-2451693253-3220061068-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Moussaoui\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF user.js: detected! => C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Extension: United States English Spellchecker - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\en-US@dictionaries.addons.mozilla.org [2014-10-06] FF Extension: Customize about:newtab - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\customizenewtab@alejandrobrizuela.com.ar.xpi [2014-11-24] FF Extension: MEGA - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\firefox@mega.co.nz.xpi [2014-12-25] FF Extension: ProxTube - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\ich@maltegoetz.de.xpi [2014-10-02] FF Extension: BetterTTV - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\jid0-OeCFXKAPh2tC0bN3Li9ajRAZx6c@jetpack.xpi [2014-10-19] FF Extension: Reddit Enhancement Suite - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2014-08-28] FF Extension: Deutsch (DE) Language Pack - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-10-22] FF Extension: SciLor's Grooveshark(tm) Unlocker for Germany - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\SciLorsGrooveUnlocker@scilor.com.xpi [2014-11-06] FF Extension: Adblock Plus - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-28] StartMenuInternet: FIREFOX.EXE - E:\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "" CHR Profile: C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-10-02] CHR Extension: (BetterTTV) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-04-24] CHR Extension: (Google Docs) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-13] CHR Extension: (Google Drive) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-13] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-28] CHR Extension: (YouTube) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-13] CHR Extension: (Adblock Plus) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-21] CHR Extension: (Google-Suche) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-13] CHR Extension: (Hola Better Internet Engine) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\epbfmioobedknooiakdehepogalbgkng [2014-11-22] CHR Extension: (Hola Besseres Internet) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-11-22] CHR Extension: (Reddit Enhancement Suite) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-04-24] CHR Extension: (Steam Theme) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcphcjcjgkjmbphkfjleamgkinaeebnm [2014-04-24] CHR Extension: (Google Wallet) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-13] CHR Extension: (Google Mail) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-13] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed] R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L) R2 DisplayFusionService; E:\DisplayFusion\DisplayFusionService.exe [5278064 2014-09-09] (Binary Fortress Software) R2 GaUpdateService; C:\ProgramData\gaupdt\service\0\gaupsvc.exe [1558032 2013-03-19] () R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation) R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58387104 2014-07-12] (Microsoft Corporation) S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation) S3 Origin Client Service; D:\Origin\OriginClientService.exe [1903472 2014-12-31] (Electronic Arts) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-09] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-08] () R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia) S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441504 2014-07-12] (Microsoft Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; E:\Teamviewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 Virtual Router; E:\VirtualRouter\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (hxxp://pietschsoft.com)) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 A5AGU; C:\Windows\System32\DRIVERS\AGUx64.sys [1077760 2008-08-06] (D-Link Corporation) R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [18963552 2012-06-27] (Advanced Micro Devices, Inc.) [File not signed] R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] () S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation) R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2014-08-19] (Riverbed Technology, Inc.) R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1328128 2013-02-07] (C-Media Electronics Inc) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation ) R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [38912 2014-10-30] (SteelSeries ApS) S3 cpuz134; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X] S3 GPU-Z; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\GPU-Z.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] S1 wStLibG64; system32\drivers\wStLibG64.sys [X] U3 kwtciuow; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\kwtciuow.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-25 13:45 - 2015-01-25 13:46 - 00000000 ____D () C:\FRST 2015-01-25 13:43 - 2015-01-25 13:43 - 00000000 _____ () C:\Users\Moussaoui\defogger_reenable 2015-01-24 10:54 - 2015-01-24 15:44 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-01-23 17:27 - 2015-01-23 17:27 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\ATI 2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\ATI 2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\ProgramData\ATI 2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 _____ () C:\Windows\ativpsrm.bin 2015-01-23 16:05 - 2015-01-23 16:05 - 00000000 ____D () C:\Program Files (x86)\AMD AVT 2015-01-23 16:04 - 2015-01-23 16:04 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201501231604595491.log 2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\Program Files (x86)\AMD 2015-01-23 16:02 - 2015-01-23 16:02 - 00000000 ____D () C:\AMD 2015-01-23 11:02 - 2011-02-16 17:11 - 00428136 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2015-01-23 11:02 - 2011-02-16 17:11 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2015-01-23 11:02 - 2011-02-16 17:11 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll 2015-01-22 15:24 - 2015-01-22 15:24 - 00460680 _____ () C:\Windows\Minidump\012215-8626-01.dmp 2015-01-21 22:25 - 2015-01-21 22:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Router 2015-01-20 19:30 - 2015-01-20 19:30 - 00000496 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BitTorrent Sync.lnk 2015-01-19 19:47 - 2015-01-19 19:47 - 00000000 ____D () C:\NPE 2015-01-19 19:44 - 2015-01-23 15:56 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\NPE 2015-01-19 19:44 - 2015-01-19 19:44 - 00000000 ____D () C:\ProgramData\Norton 2015-01-18 19:53 - 2015-01-20 20:39 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\BitTorrent Sync 2015-01-17 20:15 - 2015-01-20 20:18 - 00005167 _____ () C:\Windows\system32\ScanResults.xml 2015-01-17 20:09 - 2015-01-20 20:16 - 00000464 _____ () C:\Windows\system32\ScannerSettings 2015-01-15 20:08 - 2015-01-17 20:20 - 00000165 _____ () C:\Windows\Reimage.ini 2015-01-15 16:23 - 2015-01-22 15:24 - 501084813 _____ () C:\Windows\MEMORY.DMP 2015-01-15 16:23 - 2015-01-15 16:23 - 00275888 _____ () C:\Windows\Minidump\011515-9703-01.dmp 2015-01-14 20:21 - 2015-01-14 20:21 - 00000529 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk 2015-01-14 18:21 - 2015-01-14 18:21 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap 2015-01-14 18:20 - 2015-01-14 18:20 - 00000000 ____D () C:\Program Files\WinPcap 2015-01-14 17:59 - 2015-01-14 17:59 - 00390776 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\TrufosAlt.sys 2015-01-14 17:56 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-14 17:56 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-14 17:56 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-01-14 17:56 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-01-14 17:56 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-01-14 17:56 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-01-14 17:56 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-01-14 17:56 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-01-14 17:56 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-01-14 17:56 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-01-14 17:56 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-14 17:56 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-01-14 17:56 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-13 16:30 - 2015-01-21 12:19 - 00003546 _____ () C:\Windows\PFRO.log 2015-01-13 09:47 - 2015-01-24 11:24 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-13 09:47 - 2015-01-13 09:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-01-13 09:47 - 2015-01-13 09:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-01-13 09:47 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-13 09:47 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-13 09:47 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-13 09:37 - 2015-01-14 16:02 - 00001092 _____ () C:\Windows\SecuniaPackage.log 2015-01-13 09:33 - 2015-01-13 09:33 - 00001073 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2015-01-13 09:33 - 2015-01-13 09:33 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Secunia PSI 2015-01-13 09:33 - 2015-01-13 09:33 - 00000000 ____D () C:\Program Files (x86)\Secunia 2015-01-13 05:55 - 2015-01-13 13:31 - 00000000 ____D () C:\Program Files (x86)\stinger 2015-01-12 23:45 - 2015-01-12 23:46 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\CyberGhost 2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5 2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\Program Files\TAP-Windows 2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\Program Files\CyberGhost 5 2015-01-12 23:36 - 2015-01-12 23:36 - 00000600 _____ () C:\Users\Moussaoui\PUTTY.RND 2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2015-01-12 16:59 - 2015-01-24 11:22 - 00003539 _____ () C:\Windows\setupact.log 2015-01-12 16:59 - 2015-01-12 16:59 - 05066752 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-01-12 16:59 - 2015-01-12 16:59 - 00114976 _____ () C:\Users\Moussaoui\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-12 16:59 - 2015-01-12 16:59 - 00000000 _____ () C:\Windows\setuperr.log 2015-01-11 14:26 - 2015-01-11 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Network Monitor 3.4 2015-01-11 00:15 - 2015-01-11 13:21 - 00000000 ____D () C:\ProgramData\TEMP 2015-01-11 00:15 - 2015-01-11 00:15 - 00001024 _____ () C:\.rnd 2015-01-11 00:15 - 2015-01-11 00:15 - 00000000 ____D () C:\ProgramData\Paessler 2015-01-11 00:15 - 2015-01-11 00:15 - 00000000 ____D () C:\ProgramData\Licenses 2015-01-06 02:53 - 2015-01-06 02:53 - 00000000 ____D () C:\ProgramData\VS 2015-01-06 02:50 - 2015-01-06 02:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-06 02:44 - 2011-09-22 21:07 - 00105832 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL 2015-01-06 02:44 - 2011-09-22 21:06 - 00109416 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2015-01-06 02:44 - 2011-09-22 17:18 - 00073064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2015-01-06 02:43 - 2015-01-06 02:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0 2015-01-06 02:40 - 2015-01-06 02:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2015-01-06 02:40 - 2015-01-06 02:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2015-01-06 02:17 - 2015-01-06 02:17 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2015-01-06 02:17 - 2015-01-06 02:17 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2015-01-06 02:17 - 2015-01-06 02:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2015-01-02 22:24 - 2015-01-02 23:26 - 00000000 ____D () C:\Program Files\Recuva 2015-01-02 18:34 - 2015-01-02 18:34 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\AAA_Internet_Publishing,_ 2015-01-02 18:34 - 2014-10-15 14:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SPORDER.DLL 2015-01-02 16:56 - 2015-01-02 16:56 - 00000000 ____D () C:\ProgramData\TP-LINK 2015-01-02 16:56 - 2015-01-02 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK 2015-01-02 16:56 - 2013-03-05 14:14 - 01528976 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtwlanu.sys 2015-01-02 16:56 - 2013-03-05 14:14 - 01528976 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTWlanU.sys 2015-01-02 16:56 - 2013-02-25 07:57 - 00007865 _____ () C:\Windows\system32\netrtwlanu.cat 2015-01-02 05:21 - 2015-01-25 01:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-01-02 05:03 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-01-02 05:03 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2015-01-02 05:03 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-01-02 05:03 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-01-02 05:03 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-01-02 05:03 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-01-02 05:03 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2015-01-02 05:03 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2015-01-02 05:03 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2015-01-02 05:03 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2015-01-01 03:52 - 2015-01-01 03:52 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Introversion 2014-12-31 22:24 - 2014-12-31 22:24 - 00000000 ____D () C:\Program Files (x86)\Livestreamer 2014-12-27 18:37 - 2014-12-27 18:59 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Ubisoft Game Launcher 2014-12-27 17:59 - 2014-12-27 18:08 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Ubisoft 2014-12-27 17:47 - 2014-12-29 04:33 - 00000000 ____D () C:\ProgramData\BlueStacksSetup ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-25 13:45 - 2014-04-05 22:52 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Skype 2015-01-25 13:45 - 2014-04-05 20:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-25 13:43 - 2014-04-05 19:53 - 00000000 ____D () C:\Users\Moussaoui 2015-01-25 13:04 - 2014-12-23 13:27 - 00000511 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2015-01-25 12:50 - 2014-04-13 09:19 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-25 11:38 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-25 11:38 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-25 11:34 - 2014-04-05 19:52 - 02041188 _____ () C:\Windows\WindowsUpdate.log 2015-01-25 08:50 - 2014-04-13 09:19 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-25 06:21 - 2014-11-30 14:33 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896} 2015-01-25 05:45 - 2014-04-05 20:42 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-25 05:45 - 2014-04-05 20:42 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-25 05:45 - 2014-04-05 20:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-25 02:00 - 2014-06-26 15:37 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Adobe 2015-01-25 01:52 - 2014-04-11 15:36 - 00000000 ____D () C:\ProgramData\Oracle 2015-01-25 01:52 - 2014-04-08 07:16 - 00000000 ____D () C:\Program Files (x86)\Java 2015-01-24 22:22 - 2014-07-07 07:25 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\CrashDumps 2015-01-24 22:22 - 2014-04-16 11:32 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\vlc 2015-01-24 11:36 - 2014-11-08 18:48 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\DisplayFusion 2015-01-24 11:27 - 2010-11-21 07:50 - 02603542 _____ () C:\Windows\system32\perfh007.dat 2015-01-24 11:27 - 2010-11-21 07:50 - 00749832 _____ () C:\Windows\system32\perfc007.dat 2015-01-24 11:27 - 2009-07-14 06:13 - 00006626 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-24 11:22 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-23 16:05 - 2014-05-08 00:56 - 00000000 ____D () C:\ProgramData\AMD 2015-01-23 16:04 - 2014-04-05 21:19 - 00000000 ____D () C:\Program Files\AMD 2015-01-23 15:33 - 2014-04-05 22:50 - 00000000 ____D () C:\Windows\pss 2015-01-23 11:02 - 2014-04-05 20:04 - 00001769 _____ () C:\Windows\Language_trs.ini 2015-01-23 11:02 - 2014-04-05 20:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-23 11:02 - 2014-04-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Realtek 2015-01-22 19:37 - 2014-07-19 12:00 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\OBS 2015-01-22 15:24 - 2014-04-14 21:00 - 00000000 ____D () C:\Windows\Minidump 2015-01-18 19:37 - 2014-04-05 20:43 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Adobe 2015-01-14 14:18 - 2014-04-15 18:39 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Black_Tree_Gaming 2015-01-13 16:30 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-13 16:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2015-01-13 11:37 - 2014-04-09 04:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-01-13 11:14 - 2014-12-17 19:54 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\TeamViewer 2015-01-12 23:46 - 2014-04-05 19:53 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\VirtualStore 2015-01-12 23:43 - 2014-12-18 18:47 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\iFunbox_UserCache 2015-01-12 18:48 - 2011-04-07 09:21 - 00000000 ____D () C:\Program Files (x86)\Adobe 2015-01-06 23:04 - 2014-05-01 09:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 2015-01-06 23:03 - 2014-05-01 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express 2015-01-06 23:03 - 2014-04-09 02:51 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2015-01-06 23:03 - 2014-04-09 02:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server 2015-01-06 02:57 - 2014-04-09 02:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-01-06 02:57 - 2014-04-08 14:03 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-01-06 02:55 - 2014-04-05 19:50 - 00114976 _____ () C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-06 02:55 - 2014-04-05 19:50 - 00114976 _____ () C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-06 02:47 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini 2015-01-06 02:17 - 2011-04-07 08:41 - 00001912 _____ () C:\Windows\epplauncher.mif 2015-01-05 03:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-01-04 06:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-01-03 22:57 - 2014-07-19 12:00 - 00000000 ____D () C:\Program Files\OBS 2015-01-02 05:21 - 2014-08-20 07:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-01-02 05:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-01-02 05:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2015-01-02 04:47 - 2014-04-05 21:35 - 00000000 ____D () C:\ProgramData\AVAST Software 2015-01-01 15:12 - 2014-04-21 00:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Battle.net 2015-01-01 14:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-12-31 23:23 - 2014-05-01 15:37 - 00007598 _____ () C:\Users\Moussaoui\AppData\Local\Resmon.ResmonCfg 2014-12-31 22:26 - 2014-07-23 20:34 - 00000000 ____D () C:\ProgramData\Origin 2014-12-31 22:24 - 2014-04-16 11:27 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\livestreamer 2014-12-31 13:12 - 2014-04-05 21:26 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-31 12:14 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-12-29 05:06 - 2014-04-10 09:33 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\SteelSeries Engine 3 Client 2014-12-29 04:34 - 2014-04-12 17:41 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Notepad++ 2014-12-29 04:33 - 2014-06-29 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania 5 2014-12-29 04:33 - 2014-05-27 01:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT 2014-12-27 13:32 - 2014-10-20 07:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-12-27 13:32 - 2014-04-05 22:52 - 00000000 ____D () C:\ProgramData\Skype ==================== Files in the root of some directories ======= 2014-12-18 20:25 - 2014-12-18 21:32 - 0000600 _____ () C:\Users\Moussaoui\AppData\Roaming\winscp.rnd 2014-12-18 21:02 - 2014-12-18 21:24 - 0000600 _____ () C:\Users\Moussaoui\AppData\Local\PUTTY.RND 2014-05-01 15:37 - 2014-12-31 23:23 - 0007598 _____ () C:\Users\Moussaoui\AppData\Local\Resmon.ResmonCfg 2014-04-07 02:58 - 2014-04-07 02:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Some content of TEMP: ==================== C:\Users\Moussaoui\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Moussaoui\AppData\Local\Temp\namebench.exe C:\Users\Moussaoui\AppData\Local\Temp\python27.dll C:\Users\Moussaoui\AppData\Local\Temp\sfamcc00001.dll C:\Users\Moussaoui\AppData\Local\Temp\sqlite3.exe C:\Users\Moussaoui\AppData\Local\Temp\tcl85.dll C:\Users\Moussaoui\AppData\Local\Temp\tk85.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-24 04:40 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2015 01 Ran by Moussaoui at 2015-01-25 13:46:23 Running from F:\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Disabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AS: Microsoft Security Essentials (Disabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Anno 1404 (HKLM-x32\...\Steam App 33250) (Version: - Blue Byte) Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version: - Blue Byte) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BitTorrent Sync (HKLM-x32\...\BitTorrent Sync) (Version: 1.4.106 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software) CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform) Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine) Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version: - Crytek Studios) CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DisplayFusion 6.1.2 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 6.1.2.0 - Binary Fortress Software) Dragon Age Redesigned © Morrigan (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned © Morrigan) (Version: - ) Dragon Age Redesigned© (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned©) (Version: - ) Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned© Wynne) (Version: - ) Dragon Age: Origins - Ultimate Edition (HKLM-x32\...\Steam App 47810) (Version: - BioWare) Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group) GDR 5520 für SQL Server 2008 (KB 2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) iFunbox (v2.6.2375.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.6.2375.747 - ) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Livestreamer 1.11.1 (HKLM-x32\...\Livestreamer) (Version: - ) LOOT (HKLM-x32\...\LOOT) (Version: 0.6.0 - LOOT Development Team) Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation) Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{12FE6AA6-65D2-40EE-B925-62193128A0E6}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{393CA5BF-0362-42FD-ABC2-BA9D22EF925E}) (Version: 10.3.5520.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Mortal Kombat Komplete Edition (HKLM-x32\...\Steam App 237110) (Version: - NetherRealm Studios) Mount&Blade Warband (HKLM-x32\...\Mount&Blade Warband) (Version: - ) Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla) Mozilla Firefox 35.0 (x86 de) (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.1.2 - Mozilla) Mozilla Thunderbird 31.1.2 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.1.2 (x86 de)) (Version: 31.1.2 - Mozilla) Mozilla Thunderbird 31.4.0 (x86 de) (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla) MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD) Need for Speed™ SHIFT (HKLM-x32\...\{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}) (Version: 1.0.0.0 - Electronic Arts) Nmap 6.47 (HKLM-x32\...\Nmap) (Version: - ) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team) NVIDIA PhysX (HKLM-x32\...\{5DB65884-C963-4454-AABA-4CA3089281FA}) (Version: 9.09.0720 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.) Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Plantronics® GameCom 780/788 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.20.0001 - Plantronics) puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2 beta r2326 - ) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics) Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia) Service Pack 3 für SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) SteelSeries Engine 3.3.1 (HKLM\...\SteelSeries Engine 3) (Version: 3.3.1 - SteelSeries ApS) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer) TP-LINK TL-WN725N_TL-WN723N Treiber (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 1.3.1 - TP-LINK) Unity Web Player (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS) Virtual Router v1.0 (HKLM-x32\...\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}) (Version: 1.0 - Chris Pietschmann) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies) WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) Wireshark 1.12.3 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.3 - The Wireshark developer community, hxxp://www.wireshark.org) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000_Classes\CLSID\{077f9ad2-15a7-445e-a33a-e21809138189}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000_Classes\CLSID\{AB246BE9-1623-4A84-ABDA-CFF4D4A273CB}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation) ==================== Restore Points ========================= ATTENTION: System Restore is disabled. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-04-09 05:25 - 00001827 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 ereg.wip3.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 adobe.activate.com 127.0.0.1 hl2rcv.adobe.com 127.0.0.1 209.34.83.73:443 127.0.0.1 209.34.83.73:43 127.0.0.1 209.34.83.73 127.0.0.1 209.34.83.67:443 127.0.0.1 209.34.83.67:43 127.0.0.1 209.34.83.67 127.0.0.1 ood.opsource.net 127.0.0.1 CRL.VERISIGN.NET 127.0.0.1 199.7.52.190:80 There are 4 more lines. ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0A86C16B-F7D5-42C4-B181-2AC7322D4B1C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => E:\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {69BDBC84-E1CF-43FA-AB37-9296F3B72FE1} - System32\Tasks\SamsungMagician => E:\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.) Task: {7D308554-CD75-497C-A416-791C550C2188} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {9757F5D9-CCDA-4F81-8807-0D80FD874343} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => E:\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {9FE829BA-D753-403D-AA46-AC3BA9EF0364} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-13] (Google Inc.) Task: {A6685FFD-5DA2-4A2C-A5C3-44A466A19449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated) Task: {AE2C019F-FBD3-427C-A221-D11070A5374D} - System32\Tasks\CCleanerSkipUAC => E:\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd) Task: {B088DC82-D36E-4DF9-99D3-825CF2537A6F} - System32\Tasks\AdobeAAMUpdater-1.0-Moussaoui-PC-Moussaoui => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated) Task: {D371A330-50BB-4484-9E3F-13D3FA881555} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Task: {DE108908-9D87-4834-9B1A-7C8C9401C19D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-13] (Google Inc.) Task: {E8ECAD8E-8D36-4A8B-8F8F-7FFEE6FD8276} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.) Task: {ED37AB3D-A50B-4573-819D-767FDD2940EA} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2015-01-20 19:30 - 2015-01-20 19:30 - 00102912 _____ () E:\BT\SyncShellContextMenu.dll 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () E:\Notepad++\NppShell_05.dll 2014-11-20 21:23 - 2014-11-20 21:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll 2014-11-20 21:23 - 2014-11-20 21:23 - 00127488 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2014-04-12 20:23 - 2014-01-21 15:40 - 00817440 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe 2014-11-13 22:19 - 2014-11-13 22:19 - 17542656 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe 2014-10-14 15:10 - 2014-10-14 15:10 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll 2014-09-17 14:13 - 2014-09-17 14:13 - 00036536 _____ () E:\Rainmeter\Rainmeter.exe 2014-09-17 14:13 - 2014-09-17 14:13 - 00752312 _____ () E:\Rainmeter\Rainmeter.dll 2014-09-17 14:12 - 2014-09-17 14:12 - 00056832 _____ () E:\Rainmeter\Plugins\WebParser.dll 2014-07-06 06:09 - 2013-03-19 12:05 - 01558032 _____ () C:\ProgramData\gaupdt\service\0\gaupsvc.exe 2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2014-08-09 16:12 - 2014-08-09 16:12 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2014-01-21 16:54 - 2014-12-21 18:54 - 01294336 _____ () C:\Games\League of Legends\RADS\system\rads_user_kernel.exe 2014-12-21 18:54 - 2015-01-15 18:36 - 02436600 _____ () C:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.232\deploy\LoLLauncher.exe 2015-01-15 18:36 - 2015-01-15 18:36 - 04113400 _____ () C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\LoLPatcher.exe 2014-12-21 18:56 - 2014-12-21 18:56 - 00074752 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\LolClient.exe 2015-01-25 13:42 - 2015-01-25 13:42 - 00050477 _____ () F:\Downloads\Defogger.exe 2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-04-12 20:23 - 2014-01-21 15:40 - 00149792 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\VmixPLGC.dll 2014-07-06 06:09 - 2012-08-01 10:42 - 00156160 _____ () C:\ProgramData\gaupdt\service\0\libzmq.dll 2014-07-06 06:09 - 2013-02-22 03:08 - 00454656 _____ () C:\ProgramData\gaupdt\service\0\archive.dll 2014-04-05 22:31 - 2014-09-28 17:59 - 00019872 _____ () E:\Samsung Magician\SAMSUNG_SSD.dll 2013-05-04 12:57 - 2013-05-04 12:57 - 00095712 _____ () E:\foobar2000\zlib1.dll 2014-04-11 10:51 - 2014-04-11 10:51 - 00156624 _____ () E:\foobar2000\shared.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00199168 _____ () E:\foobar2000\components\foo_dsp_eq.dll 2014-04-11 10:51 - 2014-04-11 10:51 - 00945128 _____ () E:\foobar2000\components\foo_ui_std.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00199680 _____ () E:\foobar2000\components\foo_dsp_std.dll 2014-06-26 20:41 - 2011-05-29 10:26 - 00334848 _____ () E:\foobar2000\components\foo_quicksearch.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00285696 _____ () E:\foobar2000\components\foo_fileops.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00299520 _____ () E:\foobar2000\components\foo_freedb2.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00304640 _____ () E:\foobar2000\components\foo_cdda.dll 2014-06-26 20:41 - 2011-07-24 18:08 - 00271872 _____ () E:\foobar2000\components\foo_uie_library_tree.dll 2014-06-26 20:41 - 2012-10-16 07:45 - 00946176 _____ () E:\foobar2000\components\foo_uie_wsh_panel_mod.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00501248 _____ () E:\foobar2000\components\foo_converter.dll 2014-06-26 20:41 - 2010-10-30 20:51 - 00452608 _____ () E:\foobar2000\components\foo_uie_elplaylist.dll 2014-06-26 20:41 - 2012-06-15 16:59 - 00802816 _____ () E:\foobar2000\components\foo_uie_lyrics3.dll 2014-06-26 20:41 - 2010-12-11 08:47 - 00337920 _____ () E:\foobar2000\components\foo_uie_biography.dll 2014-04-11 10:51 - 2014-04-11 10:51 - 01391080 _____ () E:\foobar2000\components\foo_input_std.dll 2014-04-11 10:48 - 2014-04-11 10:48 - 00173056 _____ () E:\foobar2000\components\foo_unpack.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00353280 _____ () E:\foobar2000\components\foo_rgscan.dll 2014-06-26 20:41 - 2009-12-10 00:16 - 00356352 _____ () E:\foobar2000\components\foo_uie_panel_splitter.dll 2014-06-26 20:41 - 2011-07-13 10:47 - 00230912 _____ () E:\foobar2000\components\foo_playcount.dll 2014-06-26 20:41 - 2009-09-28 10:32 - 00242176 _____ () E:\foobar2000\components\foo_vis_shpeck.dll 2014-06-26 20:41 - 2011-02-27 22:22 - 01608192 _____ () E:\foobar2000\components\foo_ui_columns.dll 2014-04-11 10:49 - 2014-04-11 10:49 - 00350720 _____ () E:\foobar2000\components\foo_albumlist.dll 2014-06-26 20:41 - 2012-12-24 03:42 - 00241664 _____ () E:\foobar2000\components\foo_ui_hacks.dll 2015-01-15 18:36 - 2015-01-15 18:36 - 01617400 _____ () C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\RiotLauncher.dll 2014-12-21 18:55 - 2014-12-21 18:55 - 04774248 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll 2014-12-21 18:55 - 2014-12-21 18:55 - 16032616 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll 2015-01-13 17:07 - 2015-01-13 17:07 - 03925104 _____ () E:\Mozilla Firefox\mozjs.dll 2015-01-14 18:56 - 2015-01-14 18:56 - 03347056 _____ () E:\Thunderbird\mozjs.dll 2015-01-14 18:56 - 2015-01-14 18:56 - 00158832 _____ () E:\Thunderbird\NSLDAP32V60.dll 2015-01-14 18:56 - 2015-01-14 18:56 - 00023152 _____ () E:\Thunderbird\NSLDAPPR32V60.dll 2015-01-25 05:45 - 2015-01-25 05:45 - 16844976 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Virtual Router Manager.lnk => C:\Windows\pss\Virtual Router Manager.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Moussaoui^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk => C:\Windows\pss\Samsung Magician.lnk.Startup MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe MSCONFIG\startupreg: CCleaner Monitoring => "E:\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart MSCONFIG\startupreg: DAEMON Tools Lite => "E:\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: FreeAC => E:\FreeAlarmClock\FreeAlarmClock.exe -autorun MSCONFIG\startupreg: GoogleChromeAutoLaunch_EBB30A86BE3F353108A4E918AEE1F548 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe MSCONFIG\startupreg: iTunesHelper => "E:\ITunes\iTunesHelper.exe" MSCONFIG\startupreg: LogMeIn Hamachi Ui => "E:\Hamachi\hamachi-2-ui.exe" --auto-start MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup MSCONFIG\startupreg: Spotify => "C:\Users\Moussaoui\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Moussaoui\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: VirtualCloneDrive => "E:\VirtualCloneDrive\VCDDaemon.exe" /s MSCONFIG\startupreg: WTFast Tray => "E:\WTFast\WTFast.exe" trayonly ========================= Accounts: ========================== Administrator (S-1-5-21-1621062894-2451693253-3220061068-500 - Administrator - Disabled) Gast (S-1-5-21-1621062894-2451693253-3220061068-501 - Limited - Disabled) Moussaoui (S-1-5-21-1621062894-2451693253-3220061068-1000 - Administrator - Enabled) => C:\Users\Moussaoui ==================== Faulty Device Manager Devices ============= Name: TeamViewer VPN Adapter Description: TeamViewer VPN Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TeamViewer GmbH Service: teamviewervpn Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: TAP-Windows Adapter V9 Description: TAP-Windows Adapter V9 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TAP-Windows Provider V9 Service: tap0901 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: wStLibG64 Description: wStLibG64 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: wStLibG64 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/25/2015 00:30:50 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 162c Startzeit: 01d0389259a0448c Endzeit: 2 Anwendungspfad: C:\Games\League of Legends\RADS\system\rads_user_kernel.exe Berichts-ID: 9bf1724d-a485-11e4-b8d2-5404a6b5cce5 Error: (01/25/2015 04:16:17 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (01/24/2015 10:22:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000018e5d ID des fehlerhaften Prozesses: 0x16d4 Startzeit der fehlerhaften Anwendung: 0xvlc.exe0 Pfad der fehlerhaften Anwendung: vlc.exe1 Pfad des fehlerhaften Moduls: vlc.exe2 Berichtskennung: vlc.exe3 Error: (01/24/2015 05:14:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000018e5d ID des fehlerhaften Prozesses: 0x19d0 Startzeit der fehlerhaften Anwendung: 0xvlc.exe0 Pfad der fehlerhaften Anwendung: vlc.exe1 Pfad des fehlerhaften Moduls: vlc.exe2 Berichtskennung: vlc.exe3 Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (01/24/2015 11:24:35 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. System errors: ============= Error: (01/25/2015 07:50:57 AM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (01/25/2015 05:45:14 AM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (01/25/2015 03:23:28 AM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (01/24/2015 00:39:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/24/2015 00:39:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (01/24/2015 11:24:22 AM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (01/24/2015 11:24:10 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: wStLibG64 Error: (01/24/2015 11:24:10 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "VirtualRouterService" wurde nicht richtig gestartet. Error: (01/24/2015 11:22:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\Rtlihvs.dll Fehlercode: 126 Error: (01/24/2015 11:12:19 AM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Microsoft Office Sessions: ========================= Error: (01/25/2015 00:30:50 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: rads_user_kernel.exe0.0.0.0162c01d0389259a0448c2C:\Games\League of Legends\RADS\system\rads_user_kernel.exe9bf1724d-a485-11e4-b8d2-5404a6b5cce5 Error: (01/25/2015 04:16:17 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifeste:\CCleaner\CCleaner.exe Error: (01/24/2015 10:22:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d16d401d03817464181bdE:\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll19f7dede-a40f-11e4-b8d2-5404a6b5cce5 Error: (01/24/2015 05:14:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d19d001d037e965fbeb07E:\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll071cc993-a3e4-11e4-b8d2-5404a6b5cce5 Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (01/24/2015 11:24:35 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 ==================== Memory info =========================== Processor: AMD FX(tm)-8120 Eight-Core Processor Percentage of memory in use: 49% Total physical RAM: 8191.1 MB Available physical RAM: 4108.81 MB Total Pagefile: 9213.28 MB Available Pagefile: 4700 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.79 GB) (Free:31.22 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Games) (Fixed) (Total:390.62 GB) (Free:278.19 GB) NTFS Drive e: (Programs) (Fixed) (Total:244.14 GB) (Free:206.28 GB) NTFS Drive f: (Media) (Fixed) (Total:296.74 GB) (Free:141.68 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 91ED5CA2) Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: ED7A8D49) Partition 1: (Not Active) - (Size=390.6 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=296.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2015-01-25 14:03:09 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000006a Samsung_ rev.EXT0 111,79GB Running: Gmer-19357.exe; Driver: C:\Users\MOUSSA~1\AppData\Local\Temp\kwtciuow.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 586 fffff8000200008a 7 bytes [00, 00, 00, 00, 00, 00, 03] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 594 fffff80002000092 4 bytes [00, 00, 00, 00] ---- User code sections - GMER 2.1 ---- .text C:\Windows\system32\PnkBstrA.exe[2288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text C:\Windows\system32\PnkBstrA.exe[2288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 .text C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 .text E:\Teamviewer\TeamViewer_Service.exe[3320] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text E:\Teamviewer\TeamViewer_Service.exe[3320] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 .text C:\Program Files\CyberGhost 5\Service.exe[1048] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text C:\Program Files\CyberGhost 5\Service.exe[1048] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 .text C:\Program Files (x86)\Secunia\PSI\sua.exe[4352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text C:\Program Files (x86)\Secunia\PSI\sua.exe[4352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 ? C:\Windows\system32\mssprxy.dll [6196] entry point in ".rdata" section 000000005eab71e6 .text F:\Downloads\Defogger.exe[7664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074cb1465 2 bytes [CB, 74] .text F:\Downloads\Defogger.exe[7664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074cb14bb 2 bytes [CB, 74] .text ... * 2 ---- Processes - GMER 2.1 ---- Library C:\ProgramData\gaupdt\service\0\libzmq.dll (*** suspicious ***) @ C:\ProgramData\gaupdt\service\0\gaupsvc.exe [2468](2014-07-06 05:09:40) 00000000707b0000 Library C:\ProgramData\gaupdt\service\0\archive.dll (*** suspicious ***) @ C:\ProgramData\gaupdt\service\0\gaupsvc.exe [2468](2014-07-06 05:09:40) 0000000070220000 ---- Files - GMER 2.1 ---- File C:\Program Files (x86)\Secunia\PSI\SUA\running 0 bytes ---- EOF - GMER 2.1 ---- |
25.01.2015, 14:59 | #2 |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen hi,
__________________Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
25.01.2015, 15:17 | #3 |
| Verbindungsabrüche bei verschiedenen Servicen Guten Tag
__________________Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.08.3.1004 www.malwarebytes.org Database version: main: v2015.01.25.06 rootkit: v2015.01.14.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.17501 Moussaoui :: MOUSSAOUI-PC [administrator] 25.01.2015 15:05:55 mbar-log-2015-01-25 (15-05-55).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 367095 Time elapsed: 5 minute(s), 4 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) Code:
ATTFilter 15:13:36.0509 0x11f4 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 15:13:39.0140 0x11f4 ============================================================ 15:13:39.0140 0x11f4 Current date / time: 2015/01/25 15:13:39.0140 15:13:39.0140 0x11f4 SystemInfo: 15:13:39.0140 0x11f4 15:13:39.0140 0x11f4 OS Version: 6.1.7601 ServicePack: 1.0 15:13:39.0140 0x11f4 Product type: Workstation 15:13:39.0140 0x11f4 ComputerName: MOUSSAOUI-PC 15:13:39.0141 0x11f4 UserName: Moussaoui 15:13:39.0141 0x11f4 Windows directory: C:\Windows 15:13:39.0141 0x11f4 System windows directory: C:\Windows 15:13:39.0141 0x11f4 Running under WOW64 15:13:39.0141 0x11f4 Processor architecture: Intel x64 15:13:39.0141 0x11f4 Number of processors: 8 15:13:39.0141 0x11f4 Page size: 0x1000 15:13:39.0141 0x11f4 Boot type: Normal boot 15:13:39.0141 0x11f4 ============================================================ 15:13:39.0172 0x11f4 KLMD registered as C:\Windows\system32\drivers\96056931.sys 15:13:39.0192 0x11f4 System UUID: {660BBEDB-CBF0-5F0E-99A7-8BB8CB590865} 15:13:39.0420 0x11f4 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:13:39.0441 0x11f4 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:13:39.0447 0x11f4 ============================================================ 15:13:39.0447 0x11f4 \Device\Harddisk0\DR0: 15:13:39.0447 0x11f4 MBR partitions: 15:13:39.0447 0x11f4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xDF93800 15:13:39.0447 0x11f4 \Device\Harddisk1\DR1: 15:13:39.0447 0x11f4 MBR partitions: 15:13:39.0447 0x11f4 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x30D40000 15:13:39.0447 0x11f4 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x30D40800, BlocksNum 0x1E848000 15:13:39.0447 0x11f4 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x4F588800, BlocksNum 0x2517D000 15:13:39.0447 0x11f4 ============================================================ 15:13:39.0448 0x11f4 C: <-> \Device\Harddisk0\DR0\Partition1 15:13:39.0516 0x11f4 D: <-> \Device\Harddisk1\DR1\Partition1 15:13:39.0549 0x11f4 E: <-> \Device\Harddisk1\DR1\Partition2 15:13:39.0562 0x11f4 F: <-> \Device\Harddisk1\DR1\Partition3 15:13:39.0563 0x11f4 ============================================================ 15:13:39.0563 0x11f4 Initialize success 15:13:39.0563 0x11f4 ============================================================ 15:14:28.0487 0x1aa0 ============================================================ 15:14:28.0487 0x1aa0 Scan started 15:14:28.0487 0x1aa0 Mode: Manual; SigCheck; TDLFS; 15:14:28.0488 0x1aa0 ============================================================ 15:14:28.0488 0x1aa0 KSN ping started 15:14:42.0130 0x1aa0 KSN ping finished: true 15:14:42.0665 0x1aa0 ================ Scan system memory ======================== 15:14:42.0665 0x1aa0 System memory - ok 15:14:42.0665 0x1aa0 ================ Scan services ============================= 15:14:42.0700 0x1aa0 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 15:14:42.0760 0x1aa0 1394ohci - ok 15:14:42.0789 0x1aa0 [ 4365CCAB66CEB1B831ABEF450A23176B, 0DF09643D5103B9577DAE87491771C17449351F6AE27219E548BF2168EBD7B01 ] A5AGU C:\Windows\system32\DRIVERS\AGUx64.sys 15:14:42.0830 0x1aa0 A5AGU - ok 15:14:42.0843 0x1aa0 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys 15:14:42.0863 0x1aa0 ACPI - ok 15:14:42.0868 0x1aa0 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 15:14:42.0890 0x1aa0 AcpiPmi - ok 15:14:42.0895 0x1aa0 [ 4C72FDD915D62EAEF149BD9C73AB9CF4, 8EA45A1B88DFD819F0ADA3AF36D464E1BF52574269592370E0CC8D0490680E1F ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 15:14:42.0908 0x1aa0 AdobeARMservice - ok 15:14:42.0929 0x1aa0 [ A2A9C100FE1BE20A76C0B80D4CA44103, C34B4A31C8563E29EC6A3D318C40075F43C891C23D156F53EE2102C959B7887F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 15:14:42.0945 0x1aa0 AdobeFlashPlayerUpdateSvc - ok 15:14:42.0961 0x1aa0 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 15:14:42.0984 0x1aa0 adp94xx - ok 15:14:42.0997 0x1aa0 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys 15:14:43.0017 0x1aa0 adpahci - ok 15:14:43.0024 0x1aa0 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 15:14:43.0038 0x1aa0 adpu320 - ok 15:14:43.0045 0x1aa0 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 15:14:43.0103 0x1aa0 AeLookupSvc - ok 15:14:43.0117 0x1aa0 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys 15:14:43.0143 0x1aa0 AFD - ok 15:14:43.0149 0x1aa0 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys 15:14:43.0161 0x1aa0 agp440 - ok 15:14:43.0166 0x1aa0 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe 15:14:43.0184 0x1aa0 ALG - ok 15:14:43.0188 0x1aa0 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys 15:14:43.0198 0x1aa0 aliide - ok 15:14:43.0205 0x1aa0 [ 2998362D1E550F0C990D77E34415BEB6, 36BBC575DFE0CBD5BC4AF9AD8B54DCEF950E93AF48884D6523457071296514CC ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 15:14:43.0231 0x1aa0 AMD External Events Utility - ok 15:14:43.0234 0x1aa0 AMD FUEL Service - ok 15:14:43.0237 0x1aa0 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys 15:14:43.0248 0x1aa0 amdide - ok 15:14:43.0253 0x1aa0 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 15:14:43.0268 0x1aa0 AmdK8 - ok 15:14:43.0642 0x1aa0 [ A8C65E019B5BB43670BBCB3BA725813C, 0EB1F5EAB02336690F36E6431EE916778431B79540DAC3DFC0C1A5821EE2DCFC ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 15:14:44.0259 0x1aa0 amdkmdag - detected UnsignedFile.Multi.Generic ( 1 ) 15:14:46.0654 0x1aa0 amdkmdag ( UnsignedFile.Multi.Generic ) - warning 15:14:49.0055 0x1aa0 [ 971F3B12C24BB83B48F8CCA2ED019906, E4757480DFF2678E3C7897F6E720EEFF76D452707FC87401B209FE533BFC3210 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 15:14:49.0086 0x1aa0 amdkmdap - ok 15:14:49.0092 0x1aa0 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 15:14:49.0106 0x1aa0 AmdPPM - ok 15:14:49.0112 0x1aa0 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys 15:14:49.0125 0x1aa0 amdsata - ok 15:14:49.0133 0x1aa0 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 15:14:49.0148 0x1aa0 amdsbs - ok 15:14:49.0152 0x1aa0 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys 15:14:49.0162 0x1aa0 amdxata - ok 15:14:49.0168 0x1aa0 [ 033D09CD953C40B4AFBA9DCB1D1DFB8E, 629BE54E64C8B3FFE9F52820F6BF2802D50F719F63A621C998865FFD61C9F84E ] amd_sata C:\Windows\system32\DRIVERS\amd_sata.sys 15:14:49.0180 0x1aa0 amd_sata - ok 15:14:49.0184 0x1aa0 [ F32F762E54137925E185E5FDA5F73826, A9CC747C0886628F8A5145FBE09FFCA6B5E4EFC0F4457E4824E004A329DFC765 ] amd_xata C:\Windows\system32\DRIVERS\amd_xata.sys 15:14:49.0195 0x1aa0 amd_xata - ok 15:14:49.0199 0x1aa0 [ C3D487827E48CC5EC17994FEC5BDFF87, 5FCEA3EEA583755D0C9F6005ED3032E9DFECB57F504DC67701AE7D2D2631C30E ] AODDriver4.3 C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys 15:14:49.0209 0x1aa0 AODDriver4.3 - ok 15:14:49.0214 0x1aa0 [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys 15:14:49.0281 0x1aa0 AppID - ok 15:14:49.0285 0x1aa0 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll 15:14:49.0316 0x1aa0 AppIDSvc - ok 15:14:49.0321 0x1aa0 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll 15:14:49.0337 0x1aa0 Appinfo - ok 15:14:49.0342 0x1aa0 [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 15:14:49.0352 0x1aa0 Apple Mobile Device - ok 15:14:49.0357 0x1aa0 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys 15:14:49.0369 0x1aa0 arc - ok 15:14:49.0375 0x1aa0 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys 15:14:49.0388 0x1aa0 arcsas - ok 15:14:49.0399 0x1aa0 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 15:14:49.0412 0x1aa0 aspnet_state - ok 15:14:49.0416 0x1aa0 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 15:14:49.0448 0x1aa0 AsyncMac - ok 15:14:49.0452 0x1aa0 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys 15:14:49.0463 0x1aa0 atapi - ok 15:14:49.0469 0x1aa0 [ 33497249626E7787AA5CEA99B226CCA6, EF6213B79F83334CD95E4A58A4FE64190AA3FEFF590E41C4BF302FC4A8F6D6D6 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 15:14:49.0484 0x1aa0 AtiHDAudioService - ok 15:14:49.0504 0x1aa0 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 15:14:49.0539 0x1aa0 AudioEndpointBuilder - ok 15:14:49.0560 0x1aa0 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll 15:14:49.0588 0x1aa0 AudioSrv - ok 15:14:49.0596 0x1aa0 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll 15:14:49.0621 0x1aa0 AxInstSV - ok 15:14:49.0635 0x1aa0 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 15:14:49.0660 0x1aa0 b06bdrv - ok 15:14:49.0671 0x1aa0 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 15:14:49.0692 0x1aa0 b57nd60a - ok 15:14:49.0699 0x1aa0 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll 15:14:49.0715 0x1aa0 BDESVC - ok 15:14:49.0718 0x1aa0 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys 15:14:49.0747 0x1aa0 Beep - ok 15:14:49.0766 0x1aa0 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll 15:14:49.0800 0x1aa0 BFE - ok 15:14:49.0825 0x1aa0 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll 15:14:49.0881 0x1aa0 BITS - ok 15:14:49.0887 0x1aa0 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 15:14:49.0900 0x1aa0 blbdrive - ok 15:14:49.0911 0x1aa0 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 15:14:49.0930 0x1aa0 Bonjour Service - ok 15:14:49.0936 0x1aa0 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 15:14:49.0950 0x1aa0 bowser - ok 15:14:49.0953 0x1aa0 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 15:14:49.0970 0x1aa0 BrFiltLo - ok 15:14:49.0973 0x1aa0 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 15:14:49.0988 0x1aa0 BrFiltUp - ok 15:14:49.0993 0x1aa0 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll 15:14:50.0010 0x1aa0 Browser - ok 15:14:50.0021 0x1aa0 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys 15:14:50.0048 0x1aa0 Brserid - ok 15:14:50.0053 0x1aa0 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 15:14:50.0069 0x1aa0 BrSerWdm - ok 15:14:50.0072 0x1aa0 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 15:14:50.0087 0x1aa0 BrUsbMdm - ok 15:14:50.0091 0x1aa0 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 15:14:50.0106 0x1aa0 BrUsbSer - ok 15:14:50.0111 0x1aa0 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 15:14:50.0128 0x1aa0 BTHMODEM - ok 15:14:50.0134 0x1aa0 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll 15:14:50.0167 0x1aa0 bthserv - ok 15:14:50.0172 0x1aa0 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 15:14:50.0205 0x1aa0 cdfs - ok 15:14:50.0211 0x1aa0 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 15:14:50.0226 0x1aa0 cdrom - ok 15:14:50.0232 0x1aa0 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll 15:14:50.0263 0x1aa0 CertPropSvc - ok 15:14:50.0267 0x1aa0 [ 08D4BD3F12DFF3A11E4F2C09745DA0FA, 99A19D3B43F5B21A3E23B9A91D9443ED2710C14B954C769B837626181FC4F630 ] CGVPNCliService C:\Program Files\CyberGhost 5\Service.exe 15:14:50.0279 0x1aa0 CGVPNCliService - ok 15:14:50.0283 0x1aa0 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys 15:14:50.0299 0x1aa0 circlass - ok 15:14:50.0310 0x1aa0 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys 15:14:50.0330 0x1aa0 CLFS - ok 15:14:50.0337 0x1aa0 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 15:14:50.0349 0x1aa0 clr_optimization_v2.0.50727_32 - ok 15:14:50.0355 0x1aa0 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 15:14:50.0367 0x1aa0 clr_optimization_v2.0.50727_64 - ok 15:14:50.0376 0x1aa0 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 15:14:50.0390 0x1aa0 clr_optimization_v4.0.30319_32 - ok 15:14:50.0395 0x1aa0 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 15:14:50.0409 0x1aa0 clr_optimization_v4.0.30319_64 - ok 15:14:50.0413 0x1aa0 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 15:14:50.0427 0x1aa0 CmBatt - ok 15:14:50.0431 0x1aa0 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys 15:14:50.0441 0x1aa0 cmdide - ok 15:14:50.0456 0x1aa0 [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys 15:14:50.0484 0x1aa0 CNG - ok 15:14:50.0488 0x1aa0 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 15:14:50.0499 0x1aa0 Compbatt - ok 15:14:50.0503 0x1aa0 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys 15:14:50.0518 0x1aa0 CompositeBus - ok 15:14:50.0521 0x1aa0 COMSysApp - ok 15:14:50.0527 0x1aa0 cpuz134 - ok 15:14:50.0531 0x1aa0 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 15:14:50.0542 0x1aa0 crcdisk - ok 15:14:50.0550 0x1aa0 [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc C:\Windows\system32\cryptsvc.dll 15:14:50.0568 0x1aa0 CryptSvc - ok 15:14:50.0586 0x1aa0 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll 15:14:50.0632 0x1aa0 DcomLaunch - ok 15:14:50.0643 0x1aa0 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll 15:14:50.0682 0x1aa0 defragsvc - ok 15:14:50.0688 0x1aa0 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys 15:14:50.0720 0x1aa0 DfsC - ok 15:14:50.0731 0x1aa0 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll 15:14:50.0761 0x1aa0 Dhcp - ok 15:14:50.0765 0x1aa0 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys 15:14:50.0796 0x1aa0 discache - ok 15:14:50.0802 0x1aa0 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys 15:14:50.0813 0x1aa0 Disk - ok 15:14:50.0964 0x1aa0 [ 579E6D1904188CC5EF81CF8B82E2A235, 5D1EC9D287BF3267ED0F85A01F2CB3AE514222E433B777560A06B818B1073A58 ] DisplayFusionService E:\DisplayFusion\DisplayFusionService.exe 15:14:51.0120 0x1aa0 DisplayFusionService - ok 15:14:51.0137 0x1aa0 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll 15:14:51.0156 0x1aa0 Dnscache - ok 15:14:51.0165 0x1aa0 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll 15:14:51.0202 0x1aa0 dot3svc - ok 15:14:51.0209 0x1aa0 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll 15:14:51.0244 0x1aa0 DPS - ok 15:14:51.0247 0x1aa0 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 15:14:51.0261 0x1aa0 drmkaud - ok 15:14:51.0286 0x1aa0 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 15:14:51.0321 0x1aa0 DXGKrnl - ok 15:14:51.0328 0x1aa0 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll 15:14:51.0362 0x1aa0 EapHost - ok 15:14:51.0439 0x1aa0 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys 15:14:51.0551 0x1aa0 ebdrv - ok 15:14:51.0561 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe 15:14:51.0577 0x1aa0 EFS - ok 15:14:51.0597 0x1aa0 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 15:14:51.0633 0x1aa0 ehRecvr - ok 15:14:51.0639 0x1aa0 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe 15:14:51.0657 0x1aa0 ehSched - ok 15:14:51.0662 0x1aa0 [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO C:\Windows\system32\Drivers\ElbyCDIO.sys 15:14:51.0674 0x1aa0 ElbyCDIO - ok 15:14:51.0690 0x1aa0 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys 15:14:51.0714 0x1aa0 elxstor - ok 15:14:51.0718 0x1aa0 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys 15:14:51.0731 0x1aa0 ErrDev - ok 15:14:51.0747 0x1aa0 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll 15:14:51.0790 0x1aa0 EventSystem - ok 15:14:51.0798 0x1aa0 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys 15:14:51.0833 0x1aa0 exfat - ok 15:14:51.0841 0x1aa0 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys 15:14:51.0876 0x1aa0 fastfat - ok 15:14:51.0895 0x1aa0 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe 15:14:51.0931 0x1aa0 Fax - ok 15:14:51.0935 0x1aa0 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys 15:14:51.0949 0x1aa0 fdc - ok 15:14:51.0953 0x1aa0 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll 15:14:51.0984 0x1aa0 fdPHost - ok 15:14:51.0988 0x1aa0 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll 15:14:52.0020 0x1aa0 FDResPub - ok 15:14:52.0025 0x1aa0 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 15:14:52.0038 0x1aa0 FileInfo - ok 15:14:52.0042 0x1aa0 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 15:14:52.0073 0x1aa0 Filetrace - ok 15:14:52.0077 0x1aa0 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 15:14:52.0090 0x1aa0 flpydisk - ok 15:14:52.0101 0x1aa0 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 15:14:52.0119 0x1aa0 FltMgr - ok 15:14:52.0150 0x1aa0 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll 15:14:52.0198 0x1aa0 FontCache - ok 15:14:52.0203 0x1aa0 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 15:14:52.0214 0x1aa0 FontCache3.0.0.0 - ok 15:14:52.0218 0x1aa0 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 15:14:52.0229 0x1aa0 FsDepends - ok 15:14:52.0233 0x1aa0 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 15:14:52.0243 0x1aa0 Fs_Rec - ok 15:14:52.0251 0x1aa0 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 15:14:52.0270 0x1aa0 fvevol - ok 15:14:52.0275 0x1aa0 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 15:14:52.0286 0x1aa0 gagp30kx - ok 15:14:52.0323 0x1aa0 [ 3E6633BC8C43E9878FBD772394A222B2, 31180DC8968FAFFD0BB773881445455F5F3B5F99E8D9053B2A1CC6780537A3CD ] GaUpdateService C:\ProgramData\gaupdt\service\0\gaupsvc.exe 15:14:52.0372 0x1aa0 GaUpdateService - ok 15:14:52.0379 0x1aa0 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 15:14:52.0388 0x1aa0 GEARAspiWDM - ok 15:14:52.0410 0x1aa0 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll 15:14:52.0462 0x1aa0 gpsvc - ok 15:14:52.0466 0x1aa0 GPU-Z - ok 15:14:52.0474 0x1aa0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:14:52.0486 0x1aa0 gupdate - ok 15:14:52.0491 0x1aa0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:14:52.0501 0x1aa0 gupdatem - ok 15:14:52.0505 0x1aa0 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 15:14:52.0515 0x1aa0 hamachi - ok 15:14:52.0520 0x1aa0 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 15:14:52.0535 0x1aa0 hcw85cir - ok 15:14:52.0547 0x1aa0 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 15:14:52.0573 0x1aa0 HdAudAddService - ok 15:14:52.0579 0x1aa0 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 15:14:52.0599 0x1aa0 HDAudBus - ok 15:14:52.0603 0x1aa0 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 15:14:52.0618 0x1aa0 HidBatt - ok 15:14:52.0624 0x1aa0 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys 15:14:52.0642 0x1aa0 HidBth - ok 15:14:52.0647 0x1aa0 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys 15:14:52.0663 0x1aa0 HidIr - ok 15:14:52.0666 0x1aa0 [ 3C278BE81CF405B7E635D0563EAB8F30, 8ACECF6D337F711E647ACCFDCA2CC2726793F1828F30517E41D20F50F99DAA79 ] hidkmdf C:\Windows\system32\DRIVERS\hidkmdf.sys 15:14:52.0679 0x1aa0 hidkmdf - ok 15:14:52.0683 0x1aa0 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll 15:14:52.0715 0x1aa0 hidserv - ok 15:14:52.0719 0x1aa0 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 15:14:52.0732 0x1aa0 HidUsb - ok 15:14:52.0738 0x1aa0 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll 15:14:52.0774 0x1aa0 hkmsvc - ok 15:14:52.0783 0x1aa0 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 15:14:52.0802 0x1aa0 HomeGroupListener - ok 15:14:52.0810 0x1aa0 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 15:14:52.0829 0x1aa0 HomeGroupProvider - ok 15:14:52.0835 0x1aa0 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 15:14:52.0849 0x1aa0 HpSAMD - ok 15:14:52.0869 0x1aa0 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys 15:14:52.0922 0x1aa0 HTTP - ok 15:14:52.0928 0x1aa0 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 15:14:52.0938 0x1aa0 hwpolicy - ok 15:14:52.0944 0x1aa0 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 15:14:52.0959 0x1aa0 i8042prt - ok 15:14:52.0971 0x1aa0 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 15:14:52.0993 0x1aa0 iaStorV - ok 15:14:53.0016 0x1aa0 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 15:14:53.0051 0x1aa0 idsvc - ok 15:14:53.0055 0x1aa0 IEEtwCollectorService - ok 15:14:53.0060 0x1aa0 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys 15:14:53.0073 0x1aa0 iirsp - ok 15:14:53.0094 0x1aa0 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll 15:14:53.0131 0x1aa0 IKEEXT - ok 15:14:53.0218 0x1aa0 [ FA2B7507CD49908B2260949E52F8B9FE, 0EA0B3B25A3B668CA18313E34138DADA5C9835E476A1BFC56588B946DF0A92E0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 15:14:53.0321 0x1aa0 IntcAzAudAddService - ok 15:14:53.0331 0x1aa0 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys 15:14:53.0341 0x1aa0 intelide - ok 15:14:53.0347 0x1aa0 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\drivers\intelppm.sys 15:14:53.0361 0x1aa0 intelppm - ok 15:14:53.0366 0x1aa0 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll 15:14:53.0399 0x1aa0 IPBusEnum - ok 15:14:53.0405 0x1aa0 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 15:14:53.0437 0x1aa0 IpFilterDriver - ok 15:14:53.0453 0x1aa0 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 15:14:53.0485 0x1aa0 iphlpsvc - ok 15:14:53.0491 0x1aa0 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 15:14:53.0507 0x1aa0 IPMIDRV - ok 15:14:53.0513 0x1aa0 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys 15:14:53.0547 0x1aa0 IPNAT - ok 15:14:53.0565 0x1aa0 [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 15:14:53.0590 0x1aa0 iPod Service - ok 15:14:53.0596 0x1aa0 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys 15:14:53.0613 0x1aa0 IRENUM - ok 15:14:53.0617 0x1aa0 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys 15:14:53.0628 0x1aa0 isapnp - ok 15:14:53.0637 0x1aa0 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 15:14:53.0655 0x1aa0 iScsiPrt - ok 15:14:53.0661 0x1aa0 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 15:14:53.0673 0x1aa0 kbdclass - ok 15:14:53.0677 0x1aa0 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 15:14:53.0690 0x1aa0 kbdhid - ok 15:14:53.0695 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe 15:14:53.0709 0x1aa0 KeyIso - ok 15:14:53.0715 0x1aa0 [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 15:14:53.0729 0x1aa0 KSecDD - ok 15:14:53.0736 0x1aa0 [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 15:14:53.0751 0x1aa0 KSecPkg - ok 15:14:53.0755 0x1aa0 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 15:14:53.0788 0x1aa0 ksthunk - ok 15:14:53.0801 0x1aa0 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll 15:14:53.0846 0x1aa0 KtmRm - ok 15:14:53.0855 0x1aa0 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll 15:14:53.0893 0x1aa0 LanmanServer - ok 15:14:53.0900 0x1aa0 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 15:14:53.0935 0x1aa0 LanmanWorkstation - ok 15:14:53.0942 0x1aa0 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 15:14:53.0973 0x1aa0 lltdio - ok 15:14:53.0985 0x1aa0 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll 15:14:54.0025 0x1aa0 lltdsvc - ok 15:14:54.0029 0x1aa0 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll 15:14:54.0061 0x1aa0 lmhosts - ok 15:14:54.0068 0x1aa0 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 15:14:54.0082 0x1aa0 LSI_FC - ok 15:14:54.0087 0x1aa0 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 15:14:54.0100 0x1aa0 LSI_SAS - ok 15:14:54.0105 0x1aa0 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 15:14:54.0117 0x1aa0 LSI_SAS2 - ok 15:14:54.0123 0x1aa0 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 15:14:54.0136 0x1aa0 LSI_SCSI - ok 15:14:54.0142 0x1aa0 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys 15:14:54.0175 0x1aa0 luafv - ok 15:14:54.0181 0x1aa0 [ 092D1A5D2C763F9820AC5FD4C9F23662, 3AFFACDD0D3F838F7E29F6BDA253B6A730D43C3BCAB1228A78CD90877FEECFAC ] mbamchameleon C:\Windows\system32\drivers\mbamchameleon.sys 15:14:54.0193 0x1aa0 mbamchameleon - ok 15:14:54.0198 0x1aa0 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 15:14:54.0214 0x1aa0 Mcx2Svc - ok 15:14:54.0218 0x1aa0 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys 15:14:54.0229 0x1aa0 megasas - ok 15:14:54.0239 0x1aa0 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 15:14:54.0257 0x1aa0 MegaSR - ok 15:14:54.0263 0x1aa0 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll 15:14:54.0296 0x1aa0 MMCSS - ok 15:14:54.0300 0x1aa0 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys 15:14:54.0331 0x1aa0 Modem - ok 15:14:54.0335 0x1aa0 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 15:14:54.0350 0x1aa0 monitor - ok 15:14:54.0354 0x1aa0 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 15:14:54.0365 0x1aa0 mouclass - ok 15:14:54.0369 0x1aa0 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 15:14:54.0383 0x1aa0 mouhid - ok 15:14:54.0389 0x1aa0 [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 15:14:54.0402 0x1aa0 mountmgr - ok 15:14:54.0407 0x1aa0 [ 8446B9C86C11F94502BC55321637FDE9, D04BAF2FB69526BB6B4182FB7284F61E311CEB313142C3A46BD2741D515457CF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 15:14:54.0419 0x1aa0 MozillaMaintenance - ok 15:14:54.0428 0x1aa0 [ 6439D1E559D08BD8A1465A8943357053, 0E300508C22D12FBA3BE566B722F574CBE1B4A1A305356B92B8EA8B86267071B ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys 15:14:54.0446 0x1aa0 MpFilter - ok 15:14:54.0454 0x1aa0 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys 15:14:54.0468 0x1aa0 mpio - ok 15:14:54.0473 0x1aa0 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 15:14:54.0506 0x1aa0 mpsdrv - ok 15:14:54.0527 0x1aa0 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll 15:14:54.0581 0x1aa0 MpsSvc - ok 15:14:54.0588 0x1aa0 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 15:14:54.0604 0x1aa0 MRxDAV - ok 15:14:54.0611 0x1aa0 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 15:14:54.0628 0x1aa0 mrxsmb - ok 15:14:54.0638 0x1aa0 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 15:14:54.0658 0x1aa0 mrxsmb10 - ok 15:14:54.0665 0x1aa0 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 15:14:54.0680 0x1aa0 mrxsmb20 - ok 15:14:54.0685 0x1aa0 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys 15:14:54.0696 0x1aa0 msahci - ok 15:14:54.0703 0x1aa0 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys 15:14:54.0718 0x1aa0 msdsm - ok 15:14:54.0725 0x1aa0 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe 15:14:54.0745 0x1aa0 MSDTC - ok 15:14:54.0751 0x1aa0 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys 15:14:54.0782 0x1aa0 Msfs - ok 15:14:54.0785 0x1aa0 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 15:14:54.0816 0x1aa0 mshidkmdf - ok 15:14:54.0819 0x1aa0 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 15:14:54.0829 0x1aa0 msisadrv - ok 15:14:54.0837 0x1aa0 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 15:14:54.0873 0x1aa0 MSiSCSI - ok 15:14:54.0877 0x1aa0 msiserver - ok 15:14:54.0880 0x1aa0 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 15:14:54.0910 0x1aa0 MSKSSRV - ok 15:14:54.0914 0x1aa0 [ F0D5494D8B177C37E16966262F5D0F68, DD63427DFFD9DD2BEC8336F6AD1BEFE347012331631DC5FEC65E83B1EACDBC67 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe 15:14:54.0926 0x1aa0 MsMpSvc - ok 15:14:54.0930 0x1aa0 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 15:14:54.0959 0x1aa0 MSPCLOCK - ok 15:14:54.0963 0x1aa0 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 15:14:54.0993 0x1aa0 MSPQM - ok 15:14:55.0005 0x1aa0 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 15:14:55.0023 0x1aa0 MsRPC - ok 15:14:55.0028 0x1aa0 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 15:14:55.0039 0x1aa0 mssmbios - ok 15:14:55.0042 0x1aa0 MSSQL$SQLEXPRESS - ok 15:14:55.0047 0x1aa0 [ 7A2A8C975356858EB38466A6B1592E8D, 97C3DFCCBE1BA92EE7E4848993D6F369D543A53344A6512C84EF03E7D737A482 ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE 15:14:55.0058 0x1aa0 MSSQLServerADHelper100 - ok 15:14:55.0062 0x1aa0 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 15:14:55.0092 0x1aa0 MSTEE - ok 15:14:55.0096 0x1aa0 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 15:14:55.0109 0x1aa0 MTConfig - ok 15:14:55.0113 0x1aa0 [ 19B006B181E3875FD254F7B67ACF1E7C, 1D68D19522E71F16B8B50F8CCFBC9D884CF2DAC40CC409BD5A40A4D4223ABC61 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys 15:14:55.0123 0x1aa0 MTsensor - ok 15:14:55.0127 0x1aa0 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys 15:14:55.0138 0x1aa0 Mup - ok 15:14:55.0152 0x1aa0 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll 15:14:55.0197 0x1aa0 napagent - ok 15:14:55.0209 0x1aa0 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 15:14:55.0235 0x1aa0 NativeWifiP - ok 15:14:55.0259 0x1aa0 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys 15:14:55.0294 0x1aa0 NDIS - ok 15:14:55.0300 0x1aa0 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 15:14:55.0332 0x1aa0 NdisCap - ok 15:14:55.0336 0x1aa0 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 15:14:55.0366 0x1aa0 NdisTapi - ok 15:14:55.0371 0x1aa0 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 15:14:55.0402 0x1aa0 Ndisuio - ok 15:14:55.0409 0x1aa0 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 15:14:55.0444 0x1aa0 NdisWan - ok 15:14:55.0451 0x1aa0 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 15:14:55.0481 0x1aa0 NDProxy - ok 15:14:55.0486 0x1aa0 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 15:14:55.0518 0x1aa0 NetBIOS - ok 15:14:55.0528 0x1aa0 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 15:14:55.0566 0x1aa0 NetBT - ok 15:14:55.0570 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe 15:14:55.0583 0x1aa0 Netlogon - ok 15:14:55.0595 0x1aa0 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll 15:14:55.0637 0x1aa0 Netman - ok 15:14:55.0643 0x1aa0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:14:55.0658 0x1aa0 NetMsmqActivator - ok 15:14:55.0663 0x1aa0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:14:55.0677 0x1aa0 NetPipeActivator - ok 15:14:55.0691 0x1aa0 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll 15:14:55.0736 0x1aa0 netprofm - ok 15:14:55.0742 0x1aa0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:14:55.0756 0x1aa0 NetTcpActivator - ok 15:14:55.0761 0x1aa0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:14:55.0776 0x1aa0 NetTcpPortSharing - ok 15:14:55.0782 0x1aa0 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 15:14:55.0794 0x1aa0 nfrd960 - ok 15:14:55.0800 0x1aa0 [ F9EEFFC65C68A45001D1349E652B8B6F, E5F223129416083A12A85D48C65B2C8D1BF1124110399938E144308C89F9241D ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys 15:14:55.0815 0x1aa0 NisDrv - ok 15:14:55.0825 0x1aa0 [ 9690F420A99364C1E5C439914B0DE25C, 6C6E0B27C4255001FE5F1EAD911DE1A8BF922C405B0C8031A6BD253CEB1D02A6 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe 15:14:55.0846 0x1aa0 NisSrv - ok 15:14:55.0855 0x1aa0 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll 15:14:55.0877 0x1aa0 NlaSvc - ok 15:14:55.0883 0x1aa0 [ F554C5FD7BD1EFA4DA5CFE2EED86391F, 808D16D4547FA332F52523BD40D55606E722BC441786040B6C26B28B323D249C ] nm3 C:\Windows\system32\DRIVERS\nm3.sys 15:14:55.0895 0x1aa0 nm3 - ok 15:14:55.0902 0x1aa0 [ DE7FCC77F4A503AF4CA6A47D49B3713D, 4BFAA99393F635CD05D91A64DE73EDB5639412C129E049F0FE34F88517A10FC6 ] npf C:\Windows\system32\drivers\npf.sys 15:14:55.0913 0x1aa0 npf - ok 15:14:55.0917 0x1aa0 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys 15:14:55.0948 0x1aa0 Npfs - ok 15:14:55.0952 0x1aa0 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll 15:14:55.0984 0x1aa0 nsi - ok 15:14:55.0987 0x1aa0 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 15:14:56.0018 0x1aa0 nsiproxy - ok 15:14:56.0060 0x1aa0 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 15:14:56.0106 0x1aa0 Ntfs - ok 15:14:56.0113 0x1aa0 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys 15:14:56.0143 0x1aa0 Null - ok 15:14:56.0149 0x1aa0 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys 15:14:56.0163 0x1aa0 nvraid - ok 15:14:56.0170 0x1aa0 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys 15:14:56.0186 0x1aa0 nvstor - ok 15:14:56.0192 0x1aa0 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 15:14:56.0206 0x1aa0 nv_agp - ok 15:14:56.0211 0x1aa0 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 15:14:56.0225 0x1aa0 ohci1394 - ok 15:14:56.0310 0x1aa0 [ EF8DA126239D08B7B4734256417AE702, 4BBA0577C20E851F5B30D0D0F19382AB32AF57EFF7AA5B394E0FF6358A7AB287 ] Origin Client Service D:\Origin\OriginClientService.exe 15:14:56.0385 0x1aa0 Origin Client Service - ok 15:14:56.0395 0x1aa0 [ B9C125314A025127FE562C116D614AA3, 79C46C0BACEBBB5B8E1C162766B21587365A100BBAD01171C77B995C514BC7D6 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 15:14:56.0410 0x1aa0 ose64 - ok 15:14:56.0528 0x1aa0 [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 15:14:56.0670 0x1aa0 osppsvc - ok 15:14:56.0692 0x1aa0 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 15:14:56.0717 0x1aa0 p2pimsvc - ok 15:14:56.0731 0x1aa0 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll 15:14:56.0758 0x1aa0 p2psvc - ok 15:14:56.0764 0x1aa0 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys 15:14:56.0779 0x1aa0 Parport - ok 15:14:56.0785 0x1aa0 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys 15:14:56.0797 0x1aa0 partmgr - ok 15:14:56.0806 0x1aa0 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll 15:14:56.0829 0x1aa0 PcaSvc - ok 15:14:56.0838 0x1aa0 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys 15:14:56.0854 0x1aa0 pci - ok 15:14:56.0857 0x1aa0 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys 15:14:56.0868 0x1aa0 pciide - ok 15:14:56.0876 0x1aa0 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 15:14:56.0892 0x1aa0 pcmcia - ok 15:14:56.0897 0x1aa0 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys 15:14:56.0909 0x1aa0 pcw - ok 15:14:56.0931 0x1aa0 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys 15:14:56.0985 0x1aa0 PEAUTH - ok 15:14:57.0005 0x1aa0 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe 15:14:57.0020 0x1aa0 PerfHost - ok 15:14:57.0060 0x1aa0 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll 15:14:57.0133 0x1aa0 pla - ok 15:14:57.0168 0x1aa0 [ 542D7B8CD0487DB1C5EEA7E46BB9F1C1, E7B778D1B5083B716B2AF37858728FB9D91F816094F5F33B8BC2E922A0D3D6C3 ] PlantronicsGC C:\Windows\system32\drivers\PLTGC.sys 15:14:57.0218 0x1aa0 PlantronicsGC - ok 15:14:57.0233 0x1aa0 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 15:14:57.0258 0x1aa0 PlugPlay - ok 15:14:57.0264 0x1aa0 [ CD421DDB5C6E5458CE52EDC36DE7DC5B, 7B9C0A8B2B86BBF5D7E02F2620B0015A2530CBBC99724BE20313DE53EB31D62E ] PnkBstrA C:\Windows\system32\PnkBstrA.exe 15:14:57.0276 0x1aa0 PnkBstrA - ok 15:14:57.0281 0x1aa0 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 15:14:57.0295 0x1aa0 PNRPAutoReg - ok 15:14:57.0305 0x1aa0 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 15:14:57.0325 0x1aa0 PNRPsvc - ok 15:14:57.0341 0x1aa0 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 15:14:57.0386 0x1aa0 PolicyAgent - ok 15:14:57.0396 0x1aa0 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll 15:14:57.0433 0x1aa0 Power - ok 15:14:57.0439 0x1aa0 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 15:14:57.0473 0x1aa0 PptpMiniport - ok 15:14:57.0478 0x1aa0 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys 15:14:57.0492 0x1aa0 Processor - ok 15:14:57.0500 0x1aa0 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll 15:14:57.0519 0x1aa0 ProfSvc - ok 15:14:57.0523 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe 15:14:57.0537 0x1aa0 ProtectedStorage - ok 15:14:57.0544 0x1aa0 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 15:14:57.0577 0x1aa0 Psched - ok 15:14:57.0581 0x1aa0 [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI C:\Windows\system32\DRIVERS\psi_mf_amd64.sys 15:14:57.0591 0x1aa0 PSI - ok 15:14:57.0632 0x1aa0 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 15:14:57.0686 0x1aa0 ql2300 - ok 15:14:57.0696 0x1aa0 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 15:14:57.0710 0x1aa0 ql40xx - ok 15:14:57.0719 0x1aa0 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll 15:14:57.0744 0x1aa0 QWAVE - ok 15:14:57.0748 0x1aa0 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 15:14:57.0767 0x1aa0 QWAVEdrv - ok 15:14:57.0774 0x1aa0 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 15:14:57.0805 0x1aa0 RasAcd - ok 15:14:57.0810 0x1aa0 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 15:14:57.0843 0x1aa0 RasAgileVpn - ok 15:14:57.0849 0x1aa0 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll 15:14:57.0884 0x1aa0 RasAuto - ok 15:14:57.0890 0x1aa0 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 15:14:57.0924 0x1aa0 Rasl2tp - ok 15:14:57.0937 0x1aa0 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll 15:14:57.0977 0x1aa0 RasMan - ok 15:14:57.0983 0x1aa0 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 15:14:58.0017 0x1aa0 RasPppoe - ok 15:14:58.0023 0x1aa0 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 15:14:58.0056 0x1aa0 RasSstp - ok 15:14:58.0068 0x1aa0 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 15:14:58.0106 0x1aa0 rdbss - ok 15:14:58.0110 0x1aa0 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 15:14:58.0126 0x1aa0 rdpbus - ok 15:14:58.0130 0x1aa0 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 15:14:58.0160 0x1aa0 RDPCDD - ok 15:14:58.0165 0x1aa0 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 15:14:58.0209 0x1aa0 RDPENCDD - ok 15:14:58.0214 0x1aa0 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 15:14:58.0244 0x1aa0 RDPREFMP - ok 15:14:58.0250 0x1aa0 [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 15:14:58.0264 0x1aa0 RdpVideoMiniport - ok 15:14:58.0272 0x1aa0 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 15:14:58.0289 0x1aa0 RDPWD - ok 15:14:58.0299 0x1aa0 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 15:14:58.0314 0x1aa0 rdyboost - ok 15:14:58.0321 0x1aa0 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll 15:14:58.0354 0x1aa0 RemoteAccess - ok 15:14:58.0361 0x1aa0 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll 15:14:58.0397 0x1aa0 RemoteRegistry - ok 15:14:58.0402 0x1aa0 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 15:14:58.0435 0x1aa0 RpcEptMapper - ok 15:14:58.0438 0x1aa0 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe 15:14:58.0452 0x1aa0 RpcLocator - ok 15:14:58.0468 0x1aa0 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll 15:14:58.0510 0x1aa0 RpcSs - ok 15:14:58.0521 0x1aa0 [ C9FE05A63C500ABE3AFA5786504C4D36, F076B57B9EF6A179A37D5E00E1891236025D451CF067D2F1A1CBA2113218FEB6 ] RsFx0105 C:\Windows\system32\DRIVERS\RsFx0105.sys 15:14:58.0537 0x1aa0 RsFx0105 - ok 15:14:58.0544 0x1aa0 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 15:14:58.0576 0x1aa0 rspndr - ok 15:14:58.0591 0x1aa0 [ EE082E06A82FF630351D1E0EBBD3D8D0, 537F1A4108BDA72E8DD271466E7B7FCF39D4D55E4129AB35A409AB7AF2E7D219 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 15:14:58.0613 0x1aa0 RTL8167 - ok 15:14:58.0648 0x1aa0 [ 7135C3E86471731D4977396AF692CDB6, 74E5F7C9CE02602FC9D5475EE5CF9D145AFCCEEDE603EF4710B0DB3A164DAB2D ] RtlWlanu C:\Windows\system32\DRIVERS\rtwlanu.sys 15:14:58.0695 0x1aa0 RtlWlanu - ok 15:14:58.0702 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe 15:14:58.0716 0x1aa0 SamSs - ok 15:14:58.0722 0x1aa0 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 15:14:58.0735 0x1aa0 sbp2port - ok 15:14:58.0743 0x1aa0 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll 15:14:58.0781 0x1aa0 SCardSvr - ok 15:14:58.0786 0x1aa0 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 15:14:58.0817 0x1aa0 scfilter - ok 15:14:58.0847 0x1aa0 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll 15:14:58.0910 0x1aa0 Schedule - ok 15:14:58.0917 0x1aa0 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll 15:14:58.0948 0x1aa0 SCPolicySvc - ok 15:14:58.0955 0x1aa0 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 15:14:58.0974 0x1aa0 SDRSVC - ok 15:14:58.0979 0x1aa0 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 15:14:59.0009 0x1aa0 secdrv - ok 15:14:59.0014 0x1aa0 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll 15:14:59.0045 0x1aa0 seclogon - ok 15:14:59.0076 0x1aa0 [ 5E0E975998BF1612E18B898E5D17838B, 76C11C62DB8055F03F868685E8E2016D99D3FC48313CB51C69E7CEA589D80890 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe 15:14:59.0119 0x1aa0 Secunia PSI Agent - ok 15:14:59.0140 0x1aa0 [ 508DD2E1D5F272B2D3196335DEA2BC26, 2BDC828DB9D9766445C345E82751FA7EF94A089EC84565675EDADE3EC7EB5748 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe 15:14:59.0168 0x1aa0 Secunia Update Agent - ok 15:14:59.0174 0x1aa0 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll 15:14:59.0207 0x1aa0 SENS - ok 15:14:59.0212 0x1aa0 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll 15:14:59.0226 0x1aa0 SensrSvc - ok 15:14:59.0230 0x1aa0 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 15:14:59.0244 0x1aa0 Serenum - ok 15:14:59.0250 0x1aa0 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys 15:14:59.0266 0x1aa0 Serial - ok 15:14:59.0270 0x1aa0 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys 15:14:59.0283 0x1aa0 sermouse - ok 15:14:59.0295 0x1aa0 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll 15:14:59.0328 0x1aa0 SessionEnv - ok 15:14:59.0332 0x1aa0 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 15:14:59.0347 0x1aa0 sffdisk - ok 15:14:59.0351 0x1aa0 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 15:14:59.0366 0x1aa0 sffp_mmc - ok 15:14:59.0370 0x1aa0 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 15:14:59.0385 0x1aa0 sffp_sd - ok 15:14:59.0390 0x1aa0 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 15:14:59.0402 0x1aa0 sfloppy - ok 15:14:59.0415 0x1aa0 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll 15:14:59.0456 0x1aa0 SharedAccess - ok 15:14:59.0469 0x1aa0 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 15:14:59.0510 0x1aa0 ShellHWDetection - ok 15:14:59.0515 0x1aa0 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 15:14:59.0527 0x1aa0 SiSRaid2 - ok 15:14:59.0532 0x1aa0 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 15:14:59.0544 0x1aa0 SiSRaid4 - ok 15:14:59.0553 0x1aa0 [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 15:14:59.0572 0x1aa0 SkypeUpdate - ok 15:14:59.0579 0x1aa0 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys 15:14:59.0612 0x1aa0 Smb - ok 15:14:59.0619 0x1aa0 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 15:14:59.0633 0x1aa0 SNMPTRAP - ok 15:14:59.0638 0x1aa0 [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan C:\Windows\syswow64\speedfan.sys 15:14:59.0650 0x1aa0 speedfan - ok 15:14:59.0654 0x1aa0 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys 15:14:59.0664 0x1aa0 spldr - ok 15:14:59.0680 0x1aa0 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe 15:14:59.0709 0x1aa0 Spooler - ok 15:14:59.0803 0x1aa0 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe 15:14:59.0941 0x1aa0 sppsvc - ok 15:14:59.0953 0x1aa0 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll 15:14:59.0987 0x1aa0 sppuinotify - ok 15:14:59.0999 0x1aa0 [ 2E21D0699F3DFFFFD141763E3AA99D9A, 60063207F002B67B3E2BC78BBD15A2725AE8CFBC3289D21BE598F13F53C929B1 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE 15:15:00.0021 0x1aa0 SQLAgent$SQLEXPRESS - ok 15:15:00.0030 0x1aa0 [ 10D936DCED9EACD1A1B3FCDDA6D7A4EB, EE66162AEAF6A583A04BB5AF1220318C9ADD3A62987CDCEE0505C6FF37AB30FF ] SQLBrowser C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe 15:15:00.0044 0x1aa0 SQLBrowser - ok 15:15:00.0051 0x1aa0 [ F92E5F93BE572B512DA3C016B675EDE0, 3BBE8B952A329E4BCD6F0C8D6225F809B99217A196301B6FE543B26C3689A37B ] SQLWriter C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 15:15:00.0063 0x1aa0 SQLWriter - ok 15:15:00.0076 0x1aa0 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys 15:15:00.0101 0x1aa0 srv - ok 15:15:00.0115 0x1aa0 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 15:15:00.0139 0x1aa0 srv2 - ok 15:15:00.0148 0x1aa0 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 15:15:00.0165 0x1aa0 srvnet - ok 15:15:00.0173 0x1aa0 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 15:15:00.0210 0x1aa0 SSDPSRV - ok 15:15:00.0215 0x1aa0 [ E18127FA95EADD3BD31F37690894D2F7, E3C7FCB9EFD7616B51624B7A7343DA8AA812A8E3AB19375D1BC31D09147AE443 ] sshid C:\Windows\system32\DRIVERS\sshid.sys 15:15:00.0228 0x1aa0 sshid - ok 15:15:00.0233 0x1aa0 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll 15:15:00.0267 0x1aa0 SstpSvc - ok 15:15:00.0287 0x1aa0 [ AC8B882D658AF3070167F59AE92E5CA3, 7781475B6A49DCE239FEE2B32767A7E58188EF04BC4BB29E04B40DAFD8214E85 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe 15:15:00.0315 0x1aa0 Steam Client Service - ok 15:15:00.0320 0x1aa0 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys 15:15:00.0331 0x1aa0 stexstor - ok 15:15:00.0349 0x1aa0 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll 15:15:00.0384 0x1aa0 stisvc - ok 15:15:00.0389 0x1aa0 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys 15:15:00.0399 0x1aa0 swenum - ok 15:15:00.0414 0x1aa0 [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 15:15:00.0438 0x1aa0 SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 ) 15:15:02.0765 0x1aa0 Detect skipped due to KSN trusted 15:15:02.0766 0x1aa0 SwitchBoard - ok 15:15:02.0781 0x1aa0 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll 15:15:02.0830 0x1aa0 swprv - ok 15:15:02.0873 0x1aa0 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll 15:15:02.0942 0x1aa0 SysMain - ok 15:15:02.0951 0x1aa0 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll 15:15:02.0972 0x1aa0 TabletInputService - ok 15:15:02.0977 0x1aa0 [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901 C:\Windows\system32\DRIVERS\tap0901.sys 15:15:02.0989 0x1aa0 tap0901 - ok 15:15:03.0001 0x1aa0 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll 15:15:03.0041 0x1aa0 TapiSrv - ok 15:15:03.0046 0x1aa0 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll 15:15:03.0079 0x1aa0 TBS - ok 15:15:03.0124 0x1aa0 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 15:15:03.0182 0x1aa0 Tcpip - ok 15:15:03.0230 0x1aa0 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 15:15:03.0280 0x1aa0 TCPIP6 - ok 15:15:03.0289 0x1aa0 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 15:15:03.0302 0x1aa0 tcpipreg - ok 15:15:03.0308 0x1aa0 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 15:15:03.0321 0x1aa0 TDPIPE - ok 15:15:03.0325 0x1aa0 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 15:15:03.0338 0x1aa0 TDTCP - ok 15:15:03.0345 0x1aa0 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys 15:15:03.0360 0x1aa0 tdx - ok 15:15:03.0537 0x1aa0 [ C0C121B537DA3AD87481C0502CACE462, E0FC2AC71B60C796DCD03217A510C47425FB7783713FCCC477130E69715D2B8D ] TeamViewer E:\Teamviewer\TeamViewer_Service.exe 15:15:03.0694 0x1aa0 TeamViewer - ok 15:15:03.0707 0x1aa0 [ F5520DBB47C60EE83024B38720ABDA24, B8E555D92440BF93E3B55A66E27CEF936477EF7528F870D3B78BD3B294A05CC0 ] teamviewervpn C:\Windows\system32\DRIVERS\teamviewervpn.sys 15:15:03.0716 0x1aa0 teamviewervpn - ok 15:15:03.0723 0x1aa0 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 15:15:03.0735 0x1aa0 TermDD - ok 15:15:03.0754 0x1aa0 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll 15:15:03.0785 0x1aa0 TermService - ok 15:15:03.0790 0x1aa0 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll 15:15:03.0808 0x1aa0 Themes - ok 15:15:03.0814 0x1aa0 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll 15:15:03.0846 0x1aa0 THREADORDER - ok 15:15:03.0853 0x1aa0 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll 15:15:03.0889 0x1aa0 TrkWks - ok 15:15:03.0898 0x1aa0 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 15:15:03.0933 0x1aa0 TrustedInstaller - ok 15:15:03.0940 0x1aa0 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 15:15:03.0953 0x1aa0 tssecsrv - ok 15:15:03.0958 0x1aa0 [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 15:15:03.0973 0x1aa0 TsUsbFlt - ok 15:15:03.0978 0x1aa0 [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 15:15:03.0992 0x1aa0 TsUsbGD - ok 15:15:04.0000 0x1aa0 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 15:15:04.0034 0x1aa0 tunnel - ok 15:15:04.0039 0x1aa0 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 15:15:04.0051 0x1aa0 uagp35 - ok 15:15:04.0063 0x1aa0 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 15:15:04.0103 0x1aa0 udfs - ok 15:15:04.0111 0x1aa0 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe 15:15:04.0126 0x1aa0 UI0Detect - ok 15:15:04.0131 0x1aa0 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 15:15:04.0142 0x1aa0 uliagpkx - ok 15:15:04.0147 0x1aa0 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys 15:15:04.0162 0x1aa0 umbus - ok 15:15:04.0166 0x1aa0 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 15:15:04.0179 0x1aa0 UmPass - ok 15:15:04.0193 0x1aa0 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll 15:15:04.0237 0x1aa0 upnphost - ok 15:15:04.0243 0x1aa0 [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 15:15:04.0257 0x1aa0 USBAAPL64 - ok 15:15:04.0263 0x1aa0 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 15:15:04.0279 0x1aa0 usbaudio - ok 15:15:04.0285 0x1aa0 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 15:15:04.0301 0x1aa0 usbccgp - ok 15:15:04.0307 0x1aa0 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys 15:15:04.0322 0x1aa0 usbcir - ok 15:15:04.0327 0x1aa0 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 15:15:04.0340 0x1aa0 usbehci - ok 15:15:04.0346 0x1aa0 [ 5A4AC5D05A7C97C68596416C05D6F2B4, 1CDE5172B763D2D65379B9F3ABACC080AF676DB9354EC98A455E620C4CE3E18A ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 15:15:04.0356 0x1aa0 usbfilter - ok 15:15:04.0368 0x1aa0 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 15:15:04.0391 0x1aa0 usbhub - ok 15:15:04.0396 0x1aa0 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 15:15:04.0409 0x1aa0 usbohci - ok 15:15:04.0414 0x1aa0 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 15:15:04.0430 0x1aa0 usbprint - ok 15:15:04.0435 0x1aa0 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 15:15:04.0448 0x1aa0 usbscan - ok 15:15:04.0455 0x1aa0 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 15:15:04.0470 0x1aa0 USBSTOR - ok 15:15:04.0476 0x1aa0 [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 15:15:04.0490 0x1aa0 usbuhci - ok 15:15:04.0496 0x1aa0 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll 15:15:04.0529 0x1aa0 UxSms - ok 15:15:04.0534 0x1aa0 [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe 15:15:04.0547 0x1aa0 VaultSvc - ok 15:15:04.0554 0x1aa0 [ 95717FCA60876284568B5CD476A59C41, 9A360985F072448A89890ACC5DD2155DDA0FD1EC2FFAC4697F0CFE60548CC980 ] VBoxNetAdp C:\Windows\system32\DRIVERS\VBoxNetAdp.sys 15:15:04.0569 0x1aa0 VBoxNetAdp - ok 15:15:04.0573 0x1aa0 VBoxNetFlt - ok 15:15:04.0578 0x1aa0 [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone C:\Windows\system32\DRIVERS\VClone.sys 15:15:04.0590 0x1aa0 VClone - ok 15:15:04.0596 0x1aa0 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 15:15:04.0607 0x1aa0 vdrvroot - ok 15:15:04.0624 0x1aa0 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe 15:15:04.0672 0x1aa0 vds - ok 15:15:04.0677 0x1aa0 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 15:15:04.0693 0x1aa0 vga - ok 15:15:04.0697 0x1aa0 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys 15:15:04.0729 0x1aa0 VgaSave - ok 15:15:04.0738 0x1aa0 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 15:15:04.0754 0x1aa0 vhdmp - ok 15:15:04.0758 0x1aa0 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys 15:15:04.0768 0x1aa0 viaide - ok 15:15:04.0795 0x1aa0 [ 4E11F13C400F4721E38CFC12976057DE, A80196CB79856AB549BF2C055FFA494744C7AA0F35E5D8DD43B62F2F9070BC35 ] Virtual Router E:\VirtualRouter\VirtualRouterService.exe 15:15:04.0799 0x1aa0 Virtual Router - detected UnsignedFile.Multi.Generic ( 1 ) 15:15:07.0127 0x1aa0 Detect skipped due to KSN trusted 15:15:07.0128 0x1aa0 Virtual Router - ok 15:15:07.0133 0x1aa0 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys 15:15:07.0145 0x1aa0 volmgr - ok 15:15:07.0158 0x1aa0 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 15:15:07.0178 0x1aa0 volmgrx - ok 15:15:07.0189 0x1aa0 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys 15:15:07.0207 0x1aa0 volsnap - ok 15:15:07.0215 0x1aa0 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 15:15:07.0230 0x1aa0 vsmraid - ok 15:15:07.0271 0x1aa0 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe 15:15:07.0347 0x1aa0 VSS - ok 15:15:07.0353 0x1aa0 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 15:15:07.0366 0x1aa0 vwifibus - ok 15:15:07.0371 0x1aa0 [ 13A0DECD1794DE60A8427862C8669D27, 4024AF9F2F052BC80C85F5B9A671499C20AF38838206CC649E6EFE37C380D3BF ] VWiFiFlt C:\Windows\system32\DRIVERS\vwififlt.sys 15:15:07.0385 0x1aa0 VWiFiFlt - ok 15:15:07.0389 0x1aa0 [ 49003B357D101CDC474937437ECF5ABC, D3EC570D616DC39FE6BF02DA1CD6C30CD07C27CC5B4B6FD6DACB5D8A4F1596A6 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 15:15:07.0401 0x1aa0 vwifimp - ok 15:15:07.0413 0x1aa0 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll 15:15:07.0456 0x1aa0 W32Time - ok 15:15:07.0464 0x1aa0 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 15:15:07.0477 0x1aa0 WacomPen - ok 15:15:07.0483 0x1aa0 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 15:15:07.0515 0x1aa0 WANARP - ok 15:15:07.0520 0x1aa0 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 15:15:07.0551 0x1aa0 Wanarpv6 - ok 15:15:07.0588 0x1aa0 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe 15:15:07.0646 0x1aa0 wbengine - ok 15:15:07.0657 0x1aa0 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 15:15:07.0680 0x1aa0 WbioSrvc - ok 15:15:07.0693 0x1aa0 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll 15:15:07.0721 0x1aa0 wcncsvc - ok 15:15:07.0726 0x1aa0 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 15:15:07.0742 0x1aa0 WcsPlugInService - ok 15:15:07.0746 0x1aa0 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys 15:15:07.0757 0x1aa0 Wd - ok 15:15:07.0780 0x1aa0 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 15:15:07.0813 0x1aa0 Wdf01000 - ok 15:15:07.0821 0x1aa0 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll 15:15:07.0856 0x1aa0 WdiServiceHost - ok 15:15:07.0861 0x1aa0 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll 15:15:07.0880 0x1aa0 WdiSystemHost - ok 15:15:07.0890 0x1aa0 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll 15:15:07.0912 0x1aa0 WebClient - ok 15:15:07.0921 0x1aa0 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll 15:15:07.0959 0x1aa0 Wecsvc - ok 15:15:07.0965 0x1aa0 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll 15:15:08.0000 0x1aa0 wercplsupport - ok 15:15:08.0006 0x1aa0 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll 15:15:08.0040 0x1aa0 WerSvc - ok 15:15:08.0045 0x1aa0 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 15:15:08.0075 0x1aa0 WfpLwf - ok 15:15:08.0079 0x1aa0 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys 15:15:08.0090 0x1aa0 WIMMount - ok 15:15:08.0094 0x1aa0 WinDefend - ok 15:15:08.0105 0x1aa0 WinHttpAutoProxySvc - ok 15:15:08.0119 0x1aa0 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 15:15:08.0161 0x1aa0 Winmgmt - ok 15:15:08.0207 0x1aa0 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll 15:15:08.0281 0x1aa0 WinRM - ok 15:15:08.0295 0x1aa0 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 15:15:08.0312 0x1aa0 WinUsb - ok 15:15:08.0338 0x1aa0 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll 15:15:08.0385 0x1aa0 Wlansvc - ok 15:15:08.0392 0x1aa0 [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 15:15:08.0403 0x1aa0 wlcrasvc - ok 15:15:08.0462 0x1aa0 [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 15:15:08.0532 0x1aa0 wlidsvc - ok 15:15:08.0542 0x1aa0 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys 15:15:08.0555 0x1aa0 WmiAcpi - ok 15:15:08.0566 0x1aa0 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 15:15:08.0586 0x1aa0 wmiApSrv - ok 15:15:08.0590 0x1aa0 WMPNetworkSvc - ok 15:15:08.0595 0x1aa0 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll 15:15:08.0609 0x1aa0 WPCSvc - ok 15:15:08.0617 0x1aa0 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 15:15:08.0640 0x1aa0 WPDBusEnum - ok 15:15:08.0645 0x1aa0 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 15:15:08.0677 0x1aa0 ws2ifsl - ok 15:15:08.0684 0x1aa0 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll 15:15:08.0705 0x1aa0 wscsvc - ok 15:15:08.0708 0x1aa0 WSearch - ok 15:15:08.0715 0x1aa0 wStLibG64 - ok 15:15:08.0776 0x1aa0 [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll 15:15:08.0851 0x1aa0 wuauserv - ok 15:15:08.0861 0x1aa0 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 15:15:08.0876 0x1aa0 WudfPf - ok 15:15:08.0885 0x1aa0 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 15:15:08.0902 0x1aa0 WUDFRd - ok 15:15:08.0907 0x1aa0 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 15:15:08.0923 0x1aa0 wudfsvc - ok 15:15:08.0933 0x1aa0 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll 15:15:08.0953 0x1aa0 WwanSvc - ok 15:15:08.0975 0x1aa0 [ 4A5CE13408945E525503B5F73D29B9C5, D58BB31AF17752508EA67931BF170CE46877DC204FC5DA7EED5A078AEB0CA0FD ] xnacc C:\Windows\system32\DRIVERS\xnacc.sys 15:15:09.0009 0x1aa0 xnacc - ok 15:15:09.0016 0x1aa0 [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys 15:15:09.0029 0x1aa0 xusb21 - ok 15:15:09.0043 0x1aa0 ================ Scan global =============================== 15:15:09.0047 0x1aa0 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll 15:15:09.0055 0x1aa0 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 15:15:09.0066 0x1aa0 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 15:15:09.0075 0x1aa0 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll 15:15:09.0086 0x1aa0 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe 15:15:09.0095 0x1aa0 [ Global ] - ok 15:15:09.0095 0x1aa0 ================ Scan MBR ================================== 15:15:09.0097 0x1aa0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 15:15:09.0157 0x1aa0 \Device\Harddisk0\DR0 - ok 15:15:09.0190 0x1aa0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1 15:15:09.0278 0x1aa0 \Device\Harddisk1\DR1 - ok 15:15:09.0278 0x1aa0 ================ Scan VBR ================================== 15:15:09.0280 0x1aa0 [ 2F69EA16BAF93CA38C8FED97ABC89A44 ] \Device\Harddisk0\DR0\Partition1 15:15:09.0281 0x1aa0 \Device\Harddisk0\DR0\Partition1 - ok 15:15:09.0283 0x1aa0 [ 628D2D0317520AFD82F325C5081B175E ] \Device\Harddisk1\DR1\Partition1 15:15:09.0330 0x1aa0 \Device\Harddisk1\DR1\Partition1 - ok 15:15:09.0332 0x1aa0 [ FD8C37EA334248D71DFBB0BED6D4F5FF ] \Device\Harddisk1\DR1\Partition2 15:15:09.0333 0x1aa0 \Device\Harddisk1\DR1\Partition2 - ok 15:15:09.0335 0x1aa0 [ B27AF384E9E6C6FC8CBDABF4A43157CC ] \Device\Harddisk1\DR1\Partition3 15:15:09.0336 0x1aa0 \Device\Harddisk1\DR1\Partition3 - ok 15:15:09.0336 0x1aa0 ================ Scan generic autorun ====================== 15:15:09.0489 0x1aa0 [ CF161C7C6B23A8827C41292F60E6B078, 5A5BCA8AD6D5CE7CB92C2A65173A2DE0D17C1404747C2BF751687DDA0C728FEA ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe 15:15:09.0674 0x1aa0 RTHDVCPL - ok 15:15:09.0706 0x1aa0 [ E5A22701F5AA0FEA791E19007F93E9BD, DD65B9F420F38A19D0661B859D45CC957E4DC12248A7868F3DE8ED6B13C059A2 ] C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe 15:15:09.0736 0x1aa0 GamecomSound - ok 15:15:09.0762 0x1aa0 [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe 15:15:09.0809 0x1aa0 XboxStat - ok 15:15:09.0867 0x1aa0 [ A6AAD37CDCAE75CB62D039E3A4D8F5E3, 4FF763B0D129175BA1B1E794BA313E6C63F7A89D377C786BF5E730AF2A1D95D1 ] C:\Program Files\Microsoft Security Client\msseces.exe 15:15:09.0931 0x1aa0 MSC - ok 15:15:09.0946 0x1aa0 [ 158208ED871F0F6C5C748B9E4DDA72B9, 13EA02EF9B2E4C8C90E60A0EDB38A651FE86979D15B5F5040FF18CD267DCAAAF ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe 15:15:09.0967 0x1aa0 AdobeAAMUpdater-1.0 - ok 15:15:09.0990 0x1aa0 [ 07A37CB5C5A01E73FB69F138FAE2DB0E, 9E8B5D78D7EAB8FA35133763EDA91AFE5CDEE275D604F02CDB56FB00A0D5AA0F ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 15:15:10.0023 0x1aa0 Adobe ARM - ok 15:15:10.0044 0x1aa0 [ 5FC6AD6AE07F8827F954C4C6B73568E2, 6A2C1328BFBFB8D41CE268C2D1C26B1E2FCF2E426A98A740536689FB568ACFE9 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe 15:15:10.0071 0x1aa0 StartCCC - ok 15:15:10.0102 0x1aa0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:15:10.0152 0x1aa0 Sidebar - ok 15:15:10.0158 0x1aa0 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:15:10.0177 0x1aa0 mctadmin - ok 15:15:10.0209 0x1aa0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:15:10.0251 0x1aa0 Sidebar - ok 15:15:10.0262 0x1aa0 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:15:10.0281 0x1aa0 mctadmin - ok 15:15:10.0494 0x1aa0 [ B2BAE2D76FBE9FDC3F6E0D1F886DF367, 964EBF736891BE252C68FCE1F9EAD5E60E6E0C2119D21C6DF49FBD30FBB678EF ] E:\CCleaner\CCleaner64.exe 15:15:10.0704 0x1aa0 CCleaner Monitoring - ok 15:15:10.0718 0x1aa0 Adobe Speed Launcher - ok 15:15:10.0718 0x1aa0 Waiting for KSN requests completion. In queue: 108 15:15:11.0718 0x1aa0 Waiting for KSN requests completion. In queue: 108 15:15:12.0718 0x1aa0 Waiting for KSN requests completion. In queue: 108 15:15:13.0729 0x1aa0 AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.6.305.0 ), 0x60000 ( disabled : updated ) 15:15:13.0733 0x1aa0 Win FW state via NFP2: disabled 15:15:16.0072 0x1aa0 ============================================================ 15:15:16.0072 0x1aa0 Scan finished 15:15:16.0072 0x1aa0 ============================================================ 15:15:16.0079 0x19f8 Detected object count: 1 15:15:16.0079 0x19f8 Actual detected object count: 1 15:16:08.0666 0x19f8 amdkmdag ( UnsignedFile.Multi.Generic ) - skipped by user 15:16:08.0666 0x19f8 amdkmdag ( UnsignedFile.Multi.Generic ) - User select action: Skip |
25.01.2015, 18:46 | #4 |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen Router auf Werkseinstellungen zurücksetzen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.01.2015, 18:57 | #5 |
| Verbindungsabrüche bei verschiedenen Servicen Gerade den Router auf Werkeinstellungen zurückgesetzt und das Problem besteht immer noch. |
26.01.2015, 09:19 | #6 |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen Und immer noch an mehreren Geräten?
__________________ --> Verbindungsabrüche bei verschiedenen Servicen |
26.01.2015, 17:03 | #7 |
| Verbindungsabrüche bei verschiedenen Servicen Hey Schrauber, mit dem Laptop geht das jetzt ohne Disconnects habe zunächst einen anderen Lan Kabel benutzt am Laptop und dann auch den an meinem Rechner und es geht mit beiden einwandfrei. Versuche ich das ganze mit dem Rechner bekomme ich die Verbindungsabbrüche. |
26.01.2015, 18:31 | #8 | ||
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen What? Zitat:
Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.01.2015, 18:59 | #9 |
| Verbindungsabrüche bei verschiedenen Servicen Sorry wurde mit Smartphone geschrieben.. Ich sagte, dass ich mit meinem Laptop eine reibungslose Verbindung zu den Servicen habe. Mit zwei Lankabeln habe ich das ganze getestet, einmal ein unbenutztes Lankabel und mein Lankabel am Rechner habe ich auch an meinem Laptop getestet und mit beiden hatte ich eine reibungslose Verbindung. Allerdings konnte man das nicht von meinem Rechner behauptet, der hat immernoch die selben Probleme. |
26.01.2015, 22:41 | #10 |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen Und als Du das LAN Kabel amLaptop getestet hast, hast Du da auch den gleichen LAN Port am Router benutzt wie mit dem Rechner? Gewusst wie: Durchführen eines sauberen Neustarts in Windows Bitte einen Clean Boot machen. Wenn das Problem dann weg ist, einzeln wieder Dienste aktivieren, dazwischen immer einen Reboot machen. Solange bis Du weißt welcher Dienst die Probleme macht. Diesen dann hier benennen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.01.2015, 23:23 | #11 |
| Verbindungsabrüche bei verschiedenen Servicen Ich bin nicht sofort an dem Router verbunden sondern über einen Netgear Splitter falls das seine Wichtigkeit hat und ja ich habe den selben Port benutzt. Clean Boot wurde durchgeführt, dass Problem besteht noch. |
27.01.2015, 11:38 | #12 |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen Servicen Das Problem besteht, obwohl alle Dienste deaktiviert sind?? Dann ist das ein Windows-internes Problem.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.01.2015, 18:20 | #13 |
| Verbindungsabrüche bei verschiedenen Servicen Sorry habe mich zu früh gefreut beide Geräte haben immernoch regelmäßige Verbindungsabbrüche zu den genannten Servicen. Getestet habe ich es mit verschiedenen Lan-Kabel an verschiedenen Ports, Problem besteht immernoch. Oh, und ja das Problem besteht mit allen Diensten deaktiviert. |
27.01.2015, 20:24 | #14 | |
/// the machine /// TB-Ausbilder | Verbindungsabrüche bei verschiedenen ServicenZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.01.2015, 21:56 | #15 |
| Verbindungsabrüche bei verschiedenen ServicenCode:
ATTFilter was für beide Geräte? Ich denke du hast nen Laptop wo alles geht und nen Rechner wo es nicht geht??? Also nochmal zu der aktuellen Situation: Laptop hat Verbindungsabbrüche zu den Servicen. (Getestet mit dem Lan-Kabel vom Rechner und ein anderen ungebrauchten Lan-Kabel, jeweils am selben Port und einmal an einem anderen Port) Rechner hat Verbindungsabbrüche zu den Servicen. Sorry falls ich unverständlich war. |
Themen zu Verbindungsabrüche bei verschiedenen Servicen |
adware, bonjour, browser, cyberghost, failed, fehler, firefox, flash player, helper, home, homepage, installation, league of legends, mozilla, newtab, realtek, registry, scan, security, sekunden, server, software, spamhaus, svchost.exe, system, teredo, trackid, updates, usb, windows |