| |
| |||||||
Log-Analyse und Auswertung: Windows 7 sehr langsam und stürzt ständig abWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
06.04.2015, 21:49
| #1 |
 |  Windows 7 sehr langsam und stürzt ständig ab Hallo, ich hoffe ihr könnt mir helfen. Ich hab meinen PC lange nicht mehr benutzt und jetzt ist er irgendwie sehr langsam. Eben ist er abgestürzt und dannach war mein antivirus programm(avast) deaktiviert. Ich hab mit avast meinen PC gescannt und mehrere Bedrohungen gefunden und behoben. Das Problem existiert aber leider immernoch. defogger_disable Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:07 on 06/04/2015 (Altan)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Altan (administrator) on ALTAN-PC on 06-04-2015 22:11:45
Running from C:\Users\Altan\Desktop
Loaded Profiles: Altan (Available profiles: Altan)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [UVS10 Preload] => C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2006-08-10] (Ulead Systems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5512912 2015-04-06] (Avast Software s.r.o.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\...\MountPoints2: {0f4dd270-d496-11e0-a230-40618699f324} - J:\Install.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM -> {8A96AF9E-4074-43b7-BEA3-87217BDA7406} URL = hxxp://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com/?a=drive&s={searchTerms}&f=4
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=109217&tt=090812_clr_3212_6&babsrc=SP_ss&mntrId=4a425ad70000000000001c4bd63faac8
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {6E1E4CF4-1EB3-42B9-A059-7BDE6C20EFFF} URL = hxxp://websearch.search-results.com/redirect?client=ie&tb=STC-SRS&o=41648033&src=crm&q={searchTerms}&locale=&apn_ptnrs=96&apn_dtid=YYYYYYYYDE&apn_uid=3832B3FE-B6DD-4B5A-9731-FED045544C9F&apn_sauid=CAEF644C-804C-4374-9C1E-3F75E987C5A5
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {8A96AF9E-4074-43b7-BEA3-87217BDA7406} URL = hxxp://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {D195FBBF-D679-4040-BAB0-BB5D9C60A182} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-06] (Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-04-06] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Altan\AppData\Roaming\Mozilla\Firefox\Profiles\tjj26bf8.default
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-06] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3264414195-358430586-3417125571-1001: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll [2011-07-31] (Vitzo)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-12-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-12-17] (Apple Inc.)
FF Extension: ScanQuery - C:\Program Files\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64} [2011-04-28]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-18]
FF HKLM\...\Firefox\Extensions: [ClickPotatoLite@ClickPotatoLite.com] - C:\Program Files\ClickPotatoLite\bin\10.0.668.0\firefox\extensions
FF HKLM\...\Firefox\Extensions: [support@vdownloader.com] - C:\Program Files\VDownloader\Addons\FireFox
Chrome:
=======
CHR Profile: C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-06]
CHR Extension: (uTorrentBar_DE) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc [2015-04-06]
CHR Extension: (Google Wallet) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-06]
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx [2011-06-23]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-06]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-04-06]
CHR HKLM\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Altan\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2012-06-30]
CHR HKLM\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files\1ClickDownload\oneclickdownloader11.crx [Not Found]
CHR HKU\S-1-5-21-3264414195-358430586-3417125571-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Altan\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2012-06-30]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-17] (Advanced Micro Devices)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-04-06] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-04-06] (Avast Software)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-06-16] ()
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-29] (Ulead Systems, Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdide; C:\Windows\System32\DRIVERS\amdide.sys [11832 2009-07-07] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-06] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-06] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-06] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-06] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-06] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-07-22] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-07-22] ()
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1521544 2010-04-16] (Syntek)
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-04-06] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-06 22:10 - 2015-04-06 22:11 - 00032120 _____ () C:\Users\Altan\Desktop\Addition.txt
2015-04-06 22:08 - 2015-04-06 22:12 - 00018431 _____ () C:\Users\Altan\Desktop\FRST.txt
2015-04-06 22:08 - 2015-04-06 22:11 - 00000000 ____D () C:\FRST
2015-04-06 22:08 - 2015-04-06 22:09 - 00380416 _____ () C:\Users\Altan\Desktop\Gmer-19357.exe
2015-04-06 22:07 - 2015-04-06 22:07 - 00000472 _____ () C:\Users\Altan\Desktop\defogger_disable.log
2015-04-06 22:07 - 2015-04-06 22:07 - 00000000 _____ () C:\Users\Altan\defogger_reenable
2015-04-06 22:06 - 2015-04-06 22:06 - 01135104 _____ (Farbar) C:\Users\Altan\Desktop\FRST.exe
2015-04-06 22:06 - 2015-04-06 22:06 - 00000000 ____D () C:\Users\Altan\Downloads\Neuer Ordner
2015-04-06 22:05 - 2015-04-06 22:05 - 00050477 _____ () C:\Users\Altan\Desktop\Defogger.exe
2015-04-06 21:16 - 2015-04-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-06 21:14 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2015-04-06 21:11 - 2015-04-06 21:11 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-04-06 21:10 - 2015-04-06 21:10 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2015-04-06 21:04 - 2015-04-06 21:04 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2015-04-06 21:01 - 2015-04-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-06 21:01 - 2015-04-06 21:01 - 00000000 ____D () C:\Users\Altan\AppData\Local\Microsoft Help
2015-04-06 20:59 - 2015-04-06 20:59 - 00000000 __RHD () C:\MSOCache
2015-04-06 18:49 - 2015-04-06 18:50 - 00000000 ____D () C:\Program Files\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00001819 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-04-06 18:33 - 2015-04-06 18:41 - 00000000 ___RD () C:\Users\Altan\Eigene Musik
2015-04-06 18:33 - 2015-04-06 18:33 - 00000000 ___RD () C:\Users\Altan\Eigene Dokumente
2015-04-06 18:22 - 2015-04-06 18:32 - 00000000 ___RD () C:\Users\Altan\Eigene Bilder
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung DG
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3OG.rechts
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3 OG rechts 1
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\vorbereitungen fürs abi
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Universe Sandbox
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Ulead VideoStudio SE
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\studium
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\rezepte
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\OneNote-Notizbücher
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\DVDVideoSoft
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Corel User Files
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Bewerbung Alt4n
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Altan Bewerbung
2015-04-06 18:22 - 2015-04-03 15:46 - 39981374 _____ () C:\Users\Altan\14005_lenord_bauer_imagefilm_2014_Lenord,Bauer.webm
2015-04-06 18:22 - 2014-12-31 13:49 - 00048128 _____ () C:\Users\Altan\Abfallkalender 2014-2.xls
2015-04-06 18:22 - 2014-12-10 20:50 - 00006292 _____ () C:\Users\Altan\Telefunken V 660_1, V 661_1 und V 662_1 Anleitung.htm
2015-04-06 18:22 - 2014-06-15 17:05 - 00043520 _____ () C:\Users\Altan\Abfallkalender 2014.xls
2015-04-06 18:22 - 2013-07-08 17:20 - 02092792 _____ () C:\Users\Altan\avira_free_antivirus.exe
2015-04-06 18:22 - 2013-06-26 09:24 - 00039936 _____ () C:\Users\Altan\Abfallkalender 2012-2.xls
2015-04-06 18:22 - 2013-05-18 11:26 - 00002148 _____ () C:\Users\Altan\zivtserv.rdp
2015-04-06 18:22 - 2011-12-27 15:24 - 00024576 _____ () C:\Users\Altan\Abfallkalender 2012.xls
2015-04-06 18:22 - 2011-06-19 20:58 - 00024576 _____ () C:\Users\Altan\Kalender1.2010.xls
2015-04-06 18:22 - 2010-11-24 22:32 - 00011811 _____ () C:\Users\Altan\Skoda Octavia.wpd
2015-04-06 18:22 - 2010-06-20 10:36 - 00014336 _____ () C:\Users\Altan\Mappe1.xls
2015-04-06 18:22 - 2010-01-31 20:17 - 02551089 _____ () C:\Users\Altan\LebenslaufPers.wpd
2015-04-06 18:22 - 2009-12-26 13:43 - 00023040 _____ () C:\Users\Altan\Kalender.xls
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner2
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\NeroVision
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 __RSD () C:\Users\Altan\My Stationery
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\My Digital Editions
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\kleider
2015-04-06 18:20 - 2015-04-06 17:16 - 00000000 ____D () C:\Users\Altan\My Art
2015-04-06 18:19 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\Iris Kamera
2015-04-06 18:19 - 2015-04-06 18:19 - 00000000 ____D () C:\Users\Altan\gegl-0.0
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-04-06 18:02 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Wohnung 3OG. rechts
2015-04-06 18:02 - 2015-04-06 16:56 - 00000000 ____D () C:\Users\Altan\Desktop\Neuer Ordner (2)
2015-04-06 18:01 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Neuer Ordner
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Canan´s Fotos
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Bafög
2015-04-06 17:57 - 2015-04-06 17:57 - 00000000 ____D () C:\Users\Altan\Documents\Ulead VideoStudio SE
2015-04-06 15:42 - 2015-04-06 15:45 - 00000000 ____D () C:\Windows\system32\vbox
2015-04-06 15:38 - 2015-04-06 15:38 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\AVAST Software
2015-04-06 15:33 - 2015-04-06 15:33 - 00002018 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-06 15:31 - 2015-04-06 15:25 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-06 15:31 - 2015-04-06 15:24 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-04-06 15:31 - 2015-04-06 15:24 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-04-06 15:31 - 2013-08-20 11:15 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-04-06 15:31 - 2013-08-20 11:15 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-04-06 15:30 - 2015-04-06 15:30 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-06 15:30 - 2015-04-06 15:28 - 00106912 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-06 15:30 - 2015-04-06 15:28 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-06 15:29 - 2015-04-06 15:28 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-06 15:28 - 2015-04-06 15:28 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-06 15:25 - 2015-04-06 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-06 15:24 - 2015-04-06 15:33 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-06 15:23 - 2015-04-06 15:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-06 15:22 - 2015-04-06 15:28 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-06 15:22 - 2015-04-06 15:28 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-06 14:21 - 2015-04-06 14:21 - 06103040 _____ () C:\Program Files\GUTB606.tmp
2015-04-06 14:21 - 2015-04-06 14:21 - 00000000 ____D () C:\Program Files\GUMB5F6.tmp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-06 22:07 - 2010-07-22 19:39 - 00000000 ____D () C:\Users\Altan
2015-04-06 22:06 - 2010-07-26 22:38 - 00000000 ____D () C:\Users\Altan\AppData\Local\Mozilla
2015-04-06 21:55 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-06 21:55 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-06 21:51 - 2010-11-14 19:07 - 01819257 _____ () C:\Windows\WindowsUpdate.log
2015-04-06 21:50 - 2010-07-22 19:43 - 00127048 _____ () C:\Users\Altan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-06 21:48 - 2010-08-30 16:48 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-06 21:47 - 2010-11-19 12:45 - 00000000 ____D () C:\Windows\Minidump
2015-04-06 21:47 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-06 21:46 - 2013-03-21 21:13 - 00008522 _____ () C:\Windows\setupact.log
2015-04-06 21:46 - 2009-07-14 06:33 - 00463008 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-06 21:45 - 2013-08-19 19:14 - 322491273 _____ () C:\Windows\MEMORY.DMP
2015-04-06 21:45 - 2013-03-25 11:06 - 00199066 _____ () C:\Windows\PFRO.log
2015-04-06 21:21 - 2010-08-30 16:48 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-06 21:20 - 2012-03-31 10:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-06 21:11 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2015-04-06 21:11 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-06 21:10 - 2010-05-26 10:57 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-04-06 21:10 - 2009-07-14 09:48 - 00000000 ____D () C:\Windows\ShellNew
2015-04-06 21:08 - 2010-09-14 12:54 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-04-06 21:03 - 2009-07-14 04:04 - 00000499 _____ () C:\Windows\win.ini
2015-04-06 21:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-06 20:56 - 2011-02-24 20:54 - 00267776 ___SH () C:\Users\Altan\Thumbs.db
2015-04-06 20:53 - 2010-08-30 16:48 - 00000000 ____D () C:\Users\Altan\AppData\Local\Google
2015-04-06 19:50 - 2011-03-12 11:53 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-06 18:25 - 2012-03-31 10:49 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-06 18:25 - 2011-05-20 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-06 18:18 - 2013-08-19 19:22 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-06 18:11 - 2010-07-22 20:52 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\Adobe
2015-04-06 18:11 - 2010-05-26 10:52 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-04-06 18:11 - 2010-05-26 10:51 - 00000000 ____D () C:\Program Files\Adobe
2015-04-06 18:10 - 2010-08-23 18:28 - 00000000 ____D () C:\Users\Altan\AppData\Local\Adobe
2015-04-06 15:54 - 2010-05-26 08:00 - 01614036 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-06 15:32 - 2010-07-28 18:23 - 00000000 ____D () C:\Program Files\Java
2015-04-06 15:28 - 2012-06-01 20:29 - 00081728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-06 15:27 - 2011-04-18 21:07 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-06 15:24 - 2013-08-20 11:15 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-04-06 15:22 - 2010-05-26 10:22 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-04-06 15:22 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2015-04-06 15:21 - 2010-05-26 10:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
==================== Files in the root of some directories =======
2015-04-06 14:21 - 2015-04-06 14:21 - 6103040 _____ () C:\Program Files\GUTB606.tmp
2011-06-23 18:28 - 2010-01-26 11:11 - 0444283 _____ () C:\Program Files\Common Files\WinPcapNmap.exe
2011-07-13 15:57 - 2011-07-13 15:57 - 0138056 _____ () C:\Users\Altan\AppData\Roaming\PnkBstrK.sys
2011-07-16 21:19 - 2011-07-16 21:19 - 0000022 ___SH () C:\Users\Altan\AppData\Roaming\Sys2662.Config.Repository.bin
2011-09-09 16:30 - 2012-05-26 22:02 - 0077824 _____ () C:\Users\Altan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-11-01 19:07 - 2010-11-01 19:07 - 0007597 _____ () C:\Users\Altan\AppData\Local\Resmon.ResmonCfg
2011-11-02 21:07 - 2011-11-02 21:07 - 0000000 _____ () C:\Users\Altan\AppData\Local\{A4D1F345-121F-4A33-AA27-83EC8C707EF1}
2011-06-23 18:28 - 2011-03-03 16:50 - 0009662 _____ () C:\ProgramData\BeRuby.ico
2011-06-23 18:28 - 2010-07-20 13:53 - 0071926 _____ () C:\ProgramData\MercadoLivre.ico
2011-09-09 16:28 - 2011-09-09 16:28 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Files to move or delete:
====================
C:\Users\Altan\avira_free_antivirus.exe
Some content of TEMP:
====================
C:\Users\Altan\AppData\Local\Temp\CheatEngine63Clean.exe
C:\Users\Altan\AppData\Local\Temp\DeltaTB.exe
C:\Users\Altan\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Altan\AppData\Local\Temp\pricepeep_130001_0101.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-01-18 18:07
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Altan at 2015-04-06 22:12:26
Running from C:\Users\Altan\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader 9.5.4 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.4 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO Codecs (Version: 11.6.0.51125 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{CDEE9257-8FEB-7BAF-B28F-C4737036D674}) (Version: 3.0.804.0 - ATI Technologies, Inc.)
ATI Problem Report Wizard (Version: 3.0.804.0 - ATI Technologies) Hidden
Avast Free Antivirus (HKLM\...\avast) (Version: 10.2.2215 - AVAST Software)
ccc-core-static (Version: 2010.1125.2148.39102 - Ihr Firmenname) Hidden
GIMP 2.6.10 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team)
GlassFish Server Open Source Edition 3.0.1 (HKLM\...\nbi-glassfish-mod-3.0.1.22.0) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Earth (HKLM\...\{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}) (Version: 7.1.1.1888 - Google)
Google Update Helper (Version: 1.3.21.153 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Internet-TV für Windows Media Center (HKLM\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
IsoBuster 3.0 (HKLM\...\IsoBuster_is1) (Version: 3.0 - Smart Projects)
Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
Java(TM) SE Development Kit 6 Update 20 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160200}) (Version: 1.6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
jv16 PowerTools 2011 (HKLM\...\jv16 PowerTools 2011) (Version: - Macecraft Software)
Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)
Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 23.0.1 - Mozilla)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0011 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
Tipard MKV Video Converter 6.1.12 (HKLM\...\Tipard MKV Video Converter_is1) (Version: - )
Ulead VideoStudio SE DVD (HKLM\...\{8F8D9297-FDD2-405A-97E7-E52C7B2F97B3}) (Version: 10.0 - Ulead Systems)
USB2.0 Grabber (HKLM\...\{45518B6D-9DDF-4144-83E4-A56762524F35}) (Version: 7.12.000.002 - Youyan)
VDownloader 3.9.1154 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
Video Downloader (HKLM\...\Video Downloader) (Version: 1.14 - hxxp://www.vgrabber.com)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Center Add-in for Silverlight (HKLM\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd (10/12/2007 6.85.4.0) (HKLM\...\3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F) (Version: 10/12/2007 6.85.4.0 - Nokia)
WinPcap 4.1.1 (HKLM\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WMV9/VC-1 Video Playback (Version: 1.0.51125.2159 - ATI Technologies Inc.) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3264414195-358430586-3417125571-1001_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Altan\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-3264414195-358430586-3417125571-1001_Classes\CLSID\{33370786-2876-5ab2-8da1-2c63f8dadfc1}\InprocServer32 -> C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo)
CustomCLSID: HKU\S-1-5-21-3264414195-358430586-3417125571-1001_Classes\CLSID\{597CAA70-72AA-11CF-831E-524153480000}\localserver32 -> C:\PROGRA~1\MACROM~1\FLASHM~1\Flash.exe No File
CustomCLSID: HKU\S-1-5-21-3264414195-358430586-3417125571-1001_Classes\CLSID\{5e2121ee-0300-11d4-8d3b-444553540000}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-3264414195-358430586-3417125571-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Altan\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0778F4DA-D611-4CFB-B529-B7CCC145AEAA} - System32\Tasks\{3CB15C32-AAD4-4B82-B36A-F157A4497DF1} => pcalua.exe -a C:\Users\Altan\AppData\Roaming\Mozilla\Firefox\Profiles\vie6ho8d.default\extensions\DivXWebPlayer@divx.com\DivXWebPlayerInstaller.exe -d "C:\Program Files\Mozilla Firefox"
Task: {116F0716-72C0-4EA7-8BD8-535D693AB301} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {205634E5-7EE8-4CD5-8F1D-B437187B60E1} - System32\Tasks\{B635F8A2-BA85-4027-88FD-10926D20115A} => pcalua.exe -a C:\Users\Altan\AppData\Local\Temp\Temp1_id3pic4.zip\INSTALL.exe
Task: {2BC52AF0-154C-4DFF-82C4-6477EFA9B856} - System32\Tasks\{B1A5C00A-11A2-4F06-A044-8840C61A05F1} => pcalua.exe -a "C:\Users\Altan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9G4HZ20K\TagesSetup[1].exe" -d C:\Users\Altan\Desktop
Task: {36FEFFD0-4B7B-404A-98DE-48CF29A13523} - System32\Tasks\{BE79B9B9-F177-4ED1-B461-BD65FA634FB2} => pcalua.exe -a C:\Users\Altan\Downloads\lbz3d.exe -d C:\Users\Altan\Downloads
Task: {596C44C0-9D41-4F75-BC01-AAFE872605E4} - System32\Tasks\{3142B1C9-3B5B-4971-8D6D-DD9F7D8E1210} => pcalua.exe -a C:\Users\Altan\Downloads\GTA_IV_Patch_1\Content\setup.exe -d C:\Users\Altan\Downloads\GTA_IV_Patch_1\Content
Task: {5D41AF85-30AE-40D8-A023-149FB0803A69} - System32\Tasks\{395A5A2F-893E-4FE4-AE4E-3D1D77FAEE15} => C:\Users\Altan\Desktop\Altan\San Andreas\gta_sa.exe
Task: {7A4DC5DC-2FF5-4B0A-8510-0104791730E8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-06] (Google Inc.)
Task: {7E8CF276-A9D4-4589-B970-93A2790653D5} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2015-04-06] (Avast Software s.r.o.)
Task: {890ACCFE-6876-42ED-81B1-735DC2849DEE} - System32\Tasks\{7478D7BE-A3A5-405E-A5CE-E37A18628288} => pcalua.exe -a E:\Support\DrvSetup.exe -d E:\Support
Task: {9AB46114-39FC-466F-B2BB-C90A41C45132} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-06] (Adobe Systems Incorporated)
Task: {AB110A81-5A1A-4CAB-8575-FB4588BBFB2E} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {B2FA56F8-783B-430B-A02D-6F8E4C67470D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-06] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2011-07-13 15:56 - 2012-06-16 15:16 - 00075136 _____ () C:\Windows\system32\PnkBstrA.exe
2011-01-09 19:46 - 2010-03-15 12:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2015-04-06 15:28 - 2015-04-06 15:28 - 40540672 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2015-04-06 15:28 - 2015-04-06 15:28 - 00104400 _____ () C:\Program Files\Alwil Software\Avast5\log.dll
2015-04-06 15:27 - 2015-04-06 15:27 - 00081728 _____ () C:\Program Files\Alwil Software\Avast5\JsonRpcServer.dll
2015-04-06 18:18 - 2015-03-30 23:07 - 01174856 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.118\libglesv2.dll
2015-04-06 18:18 - 2015-03-30 23:07 - 00080200 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.118\libegl.dll
2015-04-06 18:18 - 2015-03-30 23:07 - 09279304 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.118\pdf.dll
2010-11-25 22:46 - 2010-11-25 22:46 - 00243712 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2015-04-06 15:32 - 2015-04-06 15:32 - 02923520 _____ () C:\Program Files\Alwil Software\Avast5\defs\15040600\algo.dll
2015-04-06 21:54 - 2015-04-06 21:54 - 02923520 _____ () C:\Program Files\Alwil Software\Avast5\defs\15040601\algo.dll
2015-04-06 18:18 - 2015-03-30 23:07 - 14974280 _____ () C:\Program Files\Google\Chrome\Application\41.0.2272.118\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Altan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^Altan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup
MSCONFIG\startupreg: AutoStartNPSAgent => C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: RGSC => C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
==================== Accounts: =============================
Administrator (S-1-5-21-3264414195-358430586-3417125571-500 - Administrator - Disabled)
Altan (S-1-5-21-3264414195-358430586-3417125571-1001 - Administrator - Enabled) => C:\Users\Altan
Gast (S-1-5-21-3264414195-358430586-3417125571-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3264414195-358430586-3417125571-1002 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/06/2015 09:47:20 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Windows\System32\ole32.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Windows Logon User Interface Host wurde wegen dieses Fehlers geschlossen.
Programm: Windows Logon User Interface Host
Datei: C:\Windows\System32\ole32.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000010
Datenträgertyp: 3
Error: (04/06/2015 09:47:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79505
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000006
Fehleroffset: 0x000a800c
ID des fehlerhaften Prozesses: 0x38c
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Error: (04/06/2015 09:18:32 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (04/06/2015 08:58:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {b48b6a64-79ba-416f-934d-79dcc1488941}
Error: (04/06/2015 03:47:40 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Windows\System32\dbgeng.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Windows-Problemberichterstattung wurde wegen dieses Fehlers geschlossen.
Programm: Windows-Problemberichterstattung
Datei: C:\Windows\System32\dbgeng.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000010
Datenträgertyp: 3
Error: (04/06/2015 03:47:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WerFault.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc2d9
Name des fehlerhaften Moduls: dbgeng.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b7bb
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00142b97
ID des fehlerhaften Prozesses: 0x17cc
Startzeit der fehlerhaften Anwendung: 0xWerFault.exe0
Pfad der fehlerhaften Anwendung: WerFault.exe1
Pfad des fehlerhaften Moduls: WerFault.exe2
Berichtskennung: WerFault.exe3
Error: (04/06/2015 03:47:34 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Windows\System32\sppobjs.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Softwareschutzplattform-Dienst von Microsoft wurde wegen dieses Fehlers geschlossen.
Programm: Softwareschutzplattform-Dienst von Microsoft
Datei: C:\Windows\System32\sppobjs.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000010
Datenträgertyp: 3
Error: (04/06/2015 03:47:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: sppsvc.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b048
Name des fehlerhaften Moduls: sppsvc.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b048
Ausnahmecode: 0xc0000006
Fehleroffset: 0x000dcb8e
ID des fehlerhaften Prozesses: 0xc08
Startzeit der fehlerhaften Anwendung: 0xsppsvc.exe0
Pfad der fehlerhaften Anwendung: sppsvc.exe1
Pfad des fehlerhaften Moduls: sppsvc.exe2
Berichtskennung: sppsvc.exe3
Error: (04/06/2015 03:47:34 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Windows\System32\dbgeng.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Windows-Problemberichterstattung wurde wegen dieses Fehlers geschlossen.
Programm: Windows-Problemberichterstattung
Datei: C:\Windows\System32\dbgeng.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000010
Datenträgertyp: 3
Error: (04/06/2015 03:47:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WerFault.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc2d9
Name des fehlerhaften Moduls: dbgeng.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b7bb
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00142b97
ID des fehlerhaften Prozesses: 0x1640
Startzeit der fehlerhaften Anwendung: 0xWerFault.exe0
Pfad der fehlerhaften Anwendung: WerFault.exe1
Pfad des fehlerhaften Moduls: WerFault.exe2
Berichtskennung: WerFault.exe3
System errors:
=============
Error: (04/06/2015 10:03:59 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:03:59 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:32 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:29 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:26 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:23 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:20 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:16 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:14 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Error: (04/06/2015 10:00:10 PM) (Source: amdsata) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\RaidPort0 gefunden.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 925 Processor
Percentage of memory in use: 47%
Total physical RAM: 3326.3 MB
Available physical RAM: 1746.99 MB
Total Pagefile: 6650.9 MB
Available Pagefile: 4787.09 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.54 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:1366.17 GB) (Free:1100.4 GB) NTFS
Drive d: (Recover) (Fixed) (Total:30 GB) (Free:7.04 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 1397.3 GB) (Disk ID: FF404C3B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1366.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-04-06 22:40:27
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000061 WDC_WD15 rev.80.0 1397,27GB
Running: Gmer-19357.exe; Driver: C:\Users\Altan\AppData\Local\Temp\pwdorpow.sys
---- System - GMER 2.1 ----
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAddBootEntry [0x92226ACC]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwAllocateVirtualMemory [0x922E3464]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAssignProcessToJobObject [0x922275AA]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEvent [0x922336A0]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEventPair [0x922336EC]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateIoCompletion [0x92233886]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateMutant [0x9223360E]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwCreateSection [0x922E383E]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateSemaphore [0x92233656]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwCreateThread [0x922E3ACE]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwCreateThreadEx [0x922E3BB8]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateTimer [0x92233840]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDebugActiveProcess [0x92228398]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDeleteBootEntry [0x92226B32]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwDuplicateObject [0x922E3CBC]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwFreeVirtualMemory [0x922E353C]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwLoadDriver [0x922E08D6]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwMapViewOfSection [0x922E391E]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwModifyBootEntry [0x92226B98]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeKey [0x9222BFE0]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeMultipleKeys [0x92228EDC]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEvent [0x922336CA]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEventPair [0x9223370E]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenIoCompletion [0x922338AA]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenMutant [0x92233634]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenProcess [0x9222B4E2]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSection [0x922337BE]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSemaphore [0x9223367E]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenThread [0x9222B8CE]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenTimer [0x92233864]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwProtectVirtualMemory [0x922E36BC]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueryObject [0x92228CF4]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueueApcThreadEx [0x92228A02]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootEntryOrder [0x92226BFE]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootOptions [0x92226C64]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwSetContextThread [0x922E3A1A]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemInformation [0x922267B8]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemPowerState [0x9222698A]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwShutdownSystem [0x92226918]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendProcess [0x92228562]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendThread [0x922286C4]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSystemDebugControl [0x92226A12]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwTerminateProcess [0x922E378A]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwTerminateThread [0x922281F2]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwUnloadDriver [0x922E0906]
SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwVdmControl [0x92226CCA]
SSDT \SystemRoot\system32\drivers\aswSP.sys ZwWriteVirtualMemory [0x922E35EE]
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 82E77A15 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EB1212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 10CB 82EB8460 4 Bytes [CC, 6A, 22, 92] {INT 3 ; PUSH 0x22; XCHG EDX, EAX}
.text ntkrnlpa.exe!KeRemoveQueueEx + 10F3 82EB8488 4 Bytes [64, 34, 2E, 92] {XOR AL, 0x2e; XCHG EDX, EAX}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1153 82EB84E8 4 Bytes [AA, 75, 22, 92] {STOSB ; JNZ 0x25; XCHG EDX, EAX}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11A7 82EB853C 8 Bytes [A0, 36, 23, 92, EC, 36, 23, ...]
.text ntkrnlpa.exe!KeRemoveQueueEx + 11B3 82EB8548 4 Bytes [86, 38, 23, 92]
.text ...
PAGE ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 108 830734CF 4 Bytes CALL 922295C3 \SystemRoot\system32\drivers\aswSnx.sys
PAGE ntkrnlpa.exe!ZwAlpcSendWaitReceivePort + 122 8308D323 4 Bytes CALL 922295D9 \SystemRoot\system32\drivers\aswSnx.sys
.text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x92E0E000, 0x3617E0, 0xE8000020]
.text C:\Windows\system32\DRIVERS\atksgt.sys section is writeable [0xA3A1E300, 0x3B6D8, 0xE8000020]
.text C:\Windows\system32\DRIVERS\lirsgt.sys section is writeable [0xA3A61300, 0x1BEE, 0xE8000020]
---- User code sections - GMER 2.1 ----
.text C:\Program Files\Alwil Software\Avast5\AvastUI.exe[4012] kernel32.dll!SetUnhandledExceptionFilter 75A0F4FB 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text C:\Program Files\Alwil Software\Avast5\AvastSvc.exe[4968] kernel32.dll!SetUnhandledExceptionFilter 75A0F4FB 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
 |
|
07.04.2015, 06:18
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7 sehr langsam und stürzt ständig ab hi,
__________________Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
|
07.04.2015, 13:02
| #3 |
| | Windows 7 sehr langsam und stürzt ständig ab Hi,
__________________Beim scannen mit Malwarebytes ist plötzlich der Bildschirm total verzerrt und nichts ging mehr. Deswegen hab ich das mal ausgelassen. TDSSKiller hat eine infizierte Datei gefunden. TDSSKiller Code:
ATTFilter 10:56:20.0066 0x1118 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
10:56:36.0635 0x1118 ============================================================
10:56:36.0635 0x1118 Current date / time: 2015/04/07 10:56:36.0635
10:56:36.0635 0x1118 SystemInfo:
10:56:36.0635 0x1118
10:56:36.0635 0x1118 OS Version: 6.1.7601 ServicePack: 1.0
10:56:36.0635 0x1118 Product type: Workstation
10:56:36.0635 0x1118 ComputerName: ALTAN-PC
10:56:36.0635 0x1118 UserName: Altan
10:56:36.0635 0x1118 Windows directory: C:\Windows
10:56:36.0635 0x1118 System windows directory: C:\Windows
10:56:36.0635 0x1118 Processor architecture: Intel x86
10:56:36.0635 0x1118 Number of processors: 4
10:56:36.0635 0x1118 Page size: 0x1000
10:56:36.0635 0x1118 Boot type: Normal boot
10:56:36.0635 0x1118 ============================================================
10:56:50.0518 0x1118 KLMD registered as C:\Windows\system32\drivers\95961637.sys
10:56:51.0175 0x1118 System UUID: {3B655EE8-A230-AE91-FEF8-5FE9B6C1B206}
10:56:52.0100 0x1118 Drive \Device\Harddisk0\DR0 - Size: 0x15D50F66000 ( 1397.27 Gb ), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
10:56:52.0234 0x1118 ============================================================
10:56:52.0234 0x1118 \Device\Harddisk0\DR0:
10:56:52.0238 0x1118 MBR partitions:
10:56:52.0238 0x1118 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
10:56:52.0238 0x1118 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xAAC54800
10:56:52.0238 0x1118 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xAAC87000, BlocksNum 0x3C00000
10:56:52.0238 0x1118 ============================================================
10:56:52.0281 0x1118 C: <-> \Device\Harddisk0\DR0\Partition2
10:56:52.0385 0x1118 D: <-> \Device\Harddisk0\DR0\Partition3
10:56:52.0386 0x1118 ============================================================
10:56:52.0386 0x1118 Initialize success
10:56:52.0386 0x1118 ============================================================
10:57:37.0742 0x13b0 ============================================================
10:57:37.0742 0x13b0 Scan started
10:57:37.0742 0x13b0 Mode: Manual; SigCheck; TDLFS;
10:57:37.0742 0x13b0 ============================================================
10:57:37.0742 0x13b0 KSN ping started
10:57:51.0084 0x13b0 KSN ping finished: true
10:58:03.0417 0x13b0 ================ Scan system memory ========================
10:58:03.0417 0x13b0 System memory - ok
10:58:03.0418 0x13b0 ================ Scan services =============================
10:58:06.0213 0x13b0 [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
10:58:06.0328 0x13b0 1394ohci - ok
10:58:06.0447 0x13b0 [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys
10:58:06.0484 0x13b0 ACPI - ok
10:58:06.0576 0x13b0 [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
10:58:06.0659 0x13b0 AcpiPmi - ok
10:58:06.0978 0x13b0 [ B0FE8D243A4EC6727D7EC5019C4B26B1, 6A319A77E19937208237BDBD2A545367EEC7B4B7ED732E0BAF616070C2FD88A3 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:58:07.0356 0x13b0 AdobeFlashPlayerUpdateSvc - ok
10:58:07.0916 0x13b0 [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
10:58:08.0012 0x13b0 adp94xx - ok
10:58:08.0172 0x13b0 [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
10:58:08.0228 0x13b0 adpahci - ok
10:58:08.0344 0x13b0 [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
10:58:08.0402 0x13b0 adpu320 - ok
10:58:08.0483 0x13b0 [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
10:58:08.0622 0x13b0 AeLookupSvc - ok
10:58:08.0765 0x13b0 [ 9EBBBA55060F786F0FCAA3893BFA2806, 2E5A0FA2995989E9391771024839F5AD040A041CEE56787286D8FC421E26FE90 ] AFD C:\Windows\system32\drivers\afd.sys
10:58:08.0870 0x13b0 AFD - ok
10:58:09.0020 0x13b0 [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys
10:58:09.0090 0x13b0 agp440 - ok
10:58:09.0135 0x13b0 [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
10:58:09.0146 0x13b0 aic78xx - ok
10:58:09.0172 0x13b0 [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe
10:58:09.0229 0x13b0 ALG - ok
10:58:09.0855 0x13b0 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys
10:58:09.0984 0x13b0 aliide - ok
10:58:10.0133 0x13b0 [ 0DB03D8F29420B2B6716436A28E79C68, 15F495AAC3FC5E369BA0DA9916C9A8854E42906311C077395C6306D18ADC71C4 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
10:58:10.0316 0x13b0 AMD External Events Utility - ok
10:58:10.0859 0x13b0 [ 9FE76D783A7D47965D086A220B54277B, 606D86B0F9314D2BB217F95EB883263912203171D4D460DD500317405A4B2F9C ] AMD Reservation Manager C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
10:58:10.0888 0x13b0 AMD Reservation Manager - ok
10:58:10.0952 0x13b0 [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
10:58:11.0066 0x13b0 amdagp - ok
10:58:11.0126 0x13b0 [ 211FCE336502911EC03FC15A91344C98, 65D926525E1ECDA13459F5054157A374B72A35A52F5C4980A6DEDBA67C3DA79C ] amdide C:\Windows\system32\DRIVERS\amdide.sys
10:58:11.0151 0x13b0 amdide - ok
10:58:11.0452 0x13b0 [ FF258424F0B2EF25EB98F04EE386E6E3, 09DC3854BF0D52FB80AB08DC4E0DD4A9E37ACAA500083A56F9836C837EBCFA82 ] amdiox86 C:\Windows\system32\DRIVERS\amdiox86.sys
10:58:11.0478 0x13b0 amdiox86 - ok
10:58:11.0617 0x13b0 [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
10:58:11.0834 0x13b0 AmdK8 - ok
10:58:12.0265 0x13b0 [ 8FD111119BE6924B1B8C3976FAC1B535, DC4DF8A7C4AD0C3DECF53370791C42AB0F5144039BB793BDC133F6AE32A9AAFE ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
10:58:13.0326 0x13b0 amdkmdag - ok
10:58:13.0395 0x13b0 [ C9B705FF53B15DD71F6A4D4F45396EDD, C72E0B4B4A32C9D8BF665D61EC7D1EA13CDC46262BF459EEFC653F3F56C4D954 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
10:58:13.0730 0x13b0 amdkmdap - ok
10:58:13.0934 0x13b0 [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
10:58:14.0164 0x13b0 AmdPPM - ok
10:58:14.0213 0x13b0 [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys
10:58:14.0224 0x13b0 amdsata - ok
10:58:14.0372 0x13b0 [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
10:58:14.0506 0x13b0 amdsbs - ok
10:58:14.0542 0x13b0 [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
10:58:14.0574 0x13b0 amdxata - ok
10:58:14.0695 0x13b0 [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID C:\Windows\system32\drivers\appid.sys
10:58:14.0936 0x13b0 AppID - ok
10:58:15.0087 0x13b0 [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc C:\Windows\System32\appidsvc.dll
10:58:15.0208 0x13b0 AppIDSvc - ok
10:58:15.0269 0x13b0 [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo C:\Windows\System32\appinfo.dll
10:58:15.0353 0x13b0 Appinfo - ok
10:58:15.0409 0x13b0 [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\DRIVERS\arc.sys
10:58:15.0436 0x13b0 arc - ok
10:58:15.0466 0x13b0 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
10:58:15.0496 0x13b0 arcsas - ok
10:58:15.0976 0x13b0 [ 776ACEFA0CA9DF0FAA51A5FB2F435705, 72DF7ED6B085BC468994F5B3189506FD726A9A17A9C42ACA1E420D787691361D ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:58:15.0996 0x13b0 aspnet_state - ok
10:58:16.0267 0x13b0 [ FE99FCB91E93BC4A7E222928A06411DE, C0F9A2A6324B17D435A7C62EB133E3E529D5622ED83C65E48F092CAB79D9A787 ] aswHwid C:\Windows\system32\drivers\aswHwid.sys
10:58:16.0318 0x13b0 aswHwid - ok
10:58:16.0403 0x13b0 [ 5D70C1C6C61C5A034BD086AD219A0237, 318C3CC5AF2A4B99C6C3938B36C95ECA63EABC5E93A2A3D7C729BA0BF191CDF1 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
10:58:16.0420 0x13b0 aswMonFlt - ok
10:58:16.0616 0x13b0 [ 456106F51D03D99A8C65BFC0E37E3D0B, AC616957C299DF452E37ACB1C77F20A50AD4B23AD07BF09951817EF8B460A6D6 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys
10:58:16.0653 0x13b0 aswRdr - ok
10:58:16.0852 0x13b0 [ 74E84C8CEB52042E8A1EA3104D151843, B9D1ADC6A0FF31EE18E2EECCCC3D98C41FAE9E37295A0F555DAB59D0B6028A6E ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
10:58:16.0924 0x13b0 aswRvrt - ok
10:58:17.0495 0x13b0 [ 48FA0C8E04A37A619C894A1C02D5AB96, F79C7252D0C578F827EED28630D97F2B5E3B361F920AF626343D8A71CDD86288 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
10:58:17.0614 0x13b0 aswSnx - ok
10:58:17.0960 0x13b0 [ 2AB454C9C10C427738426C06D3749361, BC604BC9006CF52520FA962055F391A806B7452639640F13516B151E34517643 ] aswSP C:\Windows\system32\drivers\aswSP.sys
10:58:18.0015 0x13b0 aswSP - ok
10:58:18.0100 0x13b0 [ F7D2CE852966935E2F85C3DB4D50D3A5, BE41E9849380BC047B145B8AC7A402C223A901D39CA349F5D2A070C890B7DCE6 ] aswStm C:\Windows\system32\drivers\aswStm.sys
10:58:18.0119 0x13b0 aswStm - ok
10:58:18.0208 0x13b0 [ 0AE22EAD6B30E448160338E708BCB71D, 4657A7C60635B916FFBC0A731D52E944FDDE6B052AD0DBD0848C3C7A5C15DD0D ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
10:58:18.0267 0x13b0 aswVmm - ok
10:58:18.0357 0x13b0 [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
10:58:18.0392 0x13b0 AsyncMac - ok
10:58:18.0486 0x13b0 [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys
10:58:18.0495 0x13b0 atapi - ok
10:58:18.0686 0x13b0 [ C822C615B2F693EF4E5B355432976A81, 49C9B69F1EF5F022259C02EAE67B5C144E6C66A53DA3506CBD5025129F7BAA6F ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys
10:58:18.0721 0x13b0 AtiHdmiService - ok
10:58:18.0852 0x13b0 [ B73C832088DD54B55E04FF6F9646AD8C, 52A9F9240FAFB2F50E48579F02221CC0D6872F834104F91EF63ADC6AA82A2CD0 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
10:58:18.0883 0x13b0 AtiPcie - ok
10:58:19.0084 0x13b0 [ F0D933B42CD0594048E4D5200AE9E417, FF53E843A99948568515964C3C97107FA875BBC3F2906BADEE0B29ACE5532F0D ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
10:58:19.0135 0x13b0 atksgt - ok
10:58:19.0308 0x13b0 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:58:19.0424 0x13b0 AudioEndpointBuilder - ok
10:58:19.0438 0x13b0 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv C:\Windows\System32\Audiosrv.dll
10:58:19.0470 0x13b0 Audiosrv - ok
10:58:19.0986 0x13b0 [ 210A326658D72D7F2EE2267F3D9C44D4, 25BC620209B5F4BCF5C3F323290E41255F68660F3DFF901FA5A78423A7293D73 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
10:58:20.0044 0x13b0 avast! Antivirus - ok
10:58:20.0274 0x13b0 [ 5019A83BE87FD8B60F7333901BFD35E5, 674DF51CAA1B6C0BC9CA9755B3BC5A9A71C583BD7C7A2826BD280E107B855092 ] AvastVBoxSvc C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
10:58:20.0445 0x13b0 AvastVBoxSvc - ok
10:58:20.0498 0x13b0 [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll
10:58:20.0544 0x13b0 AxInstSV - ok
10:58:20.0604 0x13b0 [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
10:58:20.0671 0x13b0 b06bdrv - ok
10:58:20.0895 0x13b0 [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
10:58:22.0985 0x13b0 b57nd60x - ok
10:58:23.0389 0x13b0 [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll
10:58:23.0901 0x13b0 BDESVC - ok
10:58:24.0211 0x13b0 [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys
10:58:24.0994 0x13b0 Beep - ok
10:58:25.0647 0x13b0 [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll
10:58:25.0996 0x13b0 BFE - ok
10:58:26.0896 0x13b0 [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\System32\qmgr.dll
10:58:28.0201 0x13b0 BITS - ok
10:58:28.0464 0x13b0 [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
10:58:28.0624 0x13b0 blbdrive - ok
10:58:28.0716 0x13b0 [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
10:58:28.0859 0x13b0 bowser - ok
10:58:28.0938 0x13b0 [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
10:58:29.0402 0x13b0 BrFiltLo - ok
10:58:29.0503 0x13b0 [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
10:58:29.0563 0x13b0 BrFiltUp - ok
10:58:29.0738 0x13b0 [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser C:\Windows\System32\browser.dll
10:58:29.0852 0x13b0 Browser - ok
10:58:29.0964 0x13b0 [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys
10:58:30.0132 0x13b0 Brserid - ok
10:58:30.0262 0x13b0 [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
10:58:30.0430 0x13b0 BrSerWdm - ok
10:58:30.0517 0x13b0 [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
10:58:30.0578 0x13b0 BrUsbMdm - ok
10:58:30.0625 0x13b0 [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
10:58:30.0778 0x13b0 BrUsbSer - ok
10:58:31.0362 0x13b0 [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
10:58:32.0094 0x13b0 BTHMODEM - ok
10:58:32.0268 0x13b0 [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll
10:58:32.0400 0x13b0 bthserv - ok
10:58:32.0502 0x13b0 [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
10:58:32.0590 0x13b0 cdfs - ok
10:58:32.0941 0x13b0 [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
10:58:33.0175 0x13b0 cdrom - ok
10:58:33.0848 0x13b0 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll
10:58:34.0209 0x13b0 CertPropSvc - ok
10:58:34.0375 0x13b0 [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
10:58:34.0451 0x13b0 circlass - ok
10:58:34.0562 0x13b0 [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS C:\Windows\system32\CLFS.sys
10:58:34.0600 0x13b0 CLFS - ok
10:58:35.0996 0x13b0 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:58:36.0489 0x13b0 clr_optimization_v2.0.50727_32 - ok
10:58:38.0263 0x13b0 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:58:38.0287 0x13b0 clr_optimization_v4.0.30319_32 - ok
10:58:38.0517 0x13b0 [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
10:58:38.0965 0x13b0 CmBatt - ok
10:58:39.0182 0x13b0 [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys
10:58:39.0721 0x13b0 cmdide - ok
10:58:40.0179 0x13b0 [ 247B4CE2DAB1160CD422D532D5241E1F, CFE04DBE48B23B084C3F4C3D0F483B26F322E4693176D8739A412BE5D8BE597E ] CNG C:\Windows\system32\Drivers\cng.sys
10:58:40.0276 0x13b0 CNG - ok
10:58:40.0358 0x13b0 [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
10:58:40.0589 0x13b0 Compbatt - ok
10:58:40.0695 0x13b0 [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
10:58:40.0763 0x13b0 CompositeBus - ok
10:58:40.0809 0x13b0 COMSysApp - ok
10:58:40.0871 0x13b0 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
10:58:40.0914 0x13b0 crcdisk - ok
10:58:41.0066 0x13b0 [ 7CA1BECEA5DE2643ADDAD32670E7A4C9, E3AB4CC52A97E3855D7EAB87363F807FDD2162ED8C76A036CD71549ED64E7797 ] CryptSvc C:\Windows\system32\cryptsvc.dll
10:58:41.0159 0x13b0 CryptSvc - ok
10:58:41.0648 0x13b0 [ 72794D112CBAFF3BC0C29BF7350D4741, 060C207F27306A3464FBCD8B08BDC97E34923ECA349933ECB059848BD08F41ED ] cvhsvc C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
10:58:41.0810 0x13b0 cvhsvc - ok
10:58:42.0176 0x13b0 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll
10:58:42.0544 0x13b0 DcomLaunch - ok
10:58:42.0586 0x13b0 [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll
10:58:42.0733 0x13b0 defragsvc - ok
10:58:42.0828 0x13b0 [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
10:58:43.0059 0x13b0 DfsC - ok
10:58:43.0228 0x13b0 [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll
10:58:43.0719 0x13b0 Dhcp - ok
10:58:44.0215 0x13b0 [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys
10:58:44.0532 0x13b0 discache - ok
10:58:44.0635 0x13b0 [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\DRIVERS\disk.sys
10:58:44.0649 0x13b0 Disk - ok
10:58:44.0688 0x13b0 [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll
10:58:44.0733 0x13b0 Dnscache - ok
10:58:45.0125 0x13b0 [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll
10:58:45.0329 0x13b0 dot3svc - ok
10:58:45.0663 0x13b0 [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll
10:58:45.0842 0x13b0 DPS - ok
10:58:46.0376 0x13b0 [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
10:58:47.0017 0x13b0 drmkaud - ok
10:58:47.0796 0x13b0 [ 16498EBC04AE9DD07049A8884B205C05, 134EA1C7A2DB984B8EBADF6C25B28DBADF02215AA2ED298FA124556FC4992084 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
10:58:47.0829 0x13b0 DXGKrnl - ok
10:58:48.0070 0x13b0 [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll
10:58:48.0538 0x13b0 EapHost - ok
10:58:52.0697 0x13b0 [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
10:58:53.0216 0x13b0 ebdrv - ok
10:58:53.0460 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] EFS C:\Windows\System32\lsass.exe
10:58:53.0599 0x13b0 EFS - ok
10:58:55.0498 0x13b0 [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
10:58:56.0345 0x13b0 ehRecvr - ok
10:58:56.0571 0x13b0 [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe
10:58:56.0841 0x13b0 ehSched - ok
10:58:59.0217 0x13b0 [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
10:58:59.0787 0x13b0 elxstor - ok
10:58:59.0821 0x13b0 [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys
10:59:00.0081 0x13b0 ErrDev - ok
10:59:00.0521 0x13b0 [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll
10:59:00.0718 0x13b0 EventSystem - ok
10:59:00.0858 0x13b0 [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys
10:59:01.0143 0x13b0 exfat - ok
10:59:01.0242 0x13b0 [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys
10:59:01.0453 0x13b0 fastfat - ok
10:59:01.0649 0x13b0 [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe
10:59:01.0783 0x13b0 Fax - ok
10:59:01.0883 0x13b0 [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
10:59:02.0059 0x13b0 fdc - ok
10:59:02.0127 0x13b0 [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll
10:59:02.0293 0x13b0 fdPHost - ok
10:59:03.0586 0x13b0 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll
10:59:03.0763 0x13b0 FDResPub - ok
10:59:03.0876 0x13b0 [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
10:59:03.0903 0x13b0 FileInfo - ok
10:59:04.0049 0x13b0 [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
10:59:04.0230 0x13b0 Filetrace - ok
10:59:04.0444 0x13b0 [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
10:59:04.0558 0x13b0 flpydisk - ok
10:59:04.0766 0x13b0 [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
10:59:04.0860 0x13b0 FltMgr - ok
10:59:05.0049 0x13b0 [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache C:\Windows\system32\FntCache.dll
10:59:05.0154 0x13b0 FontCache - ok
10:59:05.0310 0x13b0 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
10:59:05.0374 0x13b0 FontCache3.0.0.0 - ok
10:59:05.0415 0x13b0 [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
10:59:05.0542 0x13b0 FsDepends - ok
10:59:05.0893 0x13b0 [ 790A4CA68F44BE35967B3DF61F3E4675, 7CBC77C620ABA75FEF4BA8AD9C38766D50CD18106EBA4693F162F2C5A7D46AA8 ] FsUsbExDisk C:\Windows\system32\FsUsbExDisk.SYS
10:59:06.0137 0x13b0 FsUsbExDisk - detected UnsignedFile.Multi.Generic ( 1 )
10:59:08.0473 0x13b0 Detect skipped due to KSN trusted
10:59:08.0473 0x13b0 FsUsbExDisk - ok
10:59:08.0521 0x13b0 [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
10:59:08.0531 0x13b0 Fs_Rec - ok
10:59:08.0670 0x13b0 [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
10:59:08.0757 0x13b0 fvevol - ok
10:59:08.0943 0x13b0 [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
10:59:09.0045 0x13b0 gagp30kx - ok
10:59:09.0702 0x13b0 [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll
10:59:09.0935 0x13b0 gpsvc - ok
10:59:10.0270 0x13b0 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
10:59:10.0294 0x13b0 gupdate - ok
10:59:10.0540 0x13b0 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
10:59:10.0564 0x13b0 gupdatem - ok
10:59:10.0624 0x13b0 [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
10:59:10.0880 0x13b0 hcw85cir - ok
10:59:11.0495 0x13b0 [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:59:11.0725 0x13b0 HdAudAddService - ok
10:59:11.0805 0x13b0 [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
10:59:11.0904 0x13b0 HDAudBus - ok
10:59:12.0009 0x13b0 [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
10:59:12.0144 0x13b0 HidBatt - ok
10:59:12.0259 0x13b0 [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
10:59:12.0656 0x13b0 HidBth - ok
10:59:12.0732 0x13b0 [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
10:59:13.0026 0x13b0 HidIr - ok
10:59:13.0323 0x13b0 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\system32\hidserv.dll
10:59:13.0470 0x13b0 hidserv - ok
10:59:13.0610 0x13b0 [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
10:59:13.0807 0x13b0 HidUsb - ok
10:59:13.0890 0x13b0 [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll
10:59:14.0066 0x13b0 hkmsvc - ok
10:59:14.0157 0x13b0 [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:59:14.0242 0x13b0 HomeGroupListener - ok
10:59:14.0274 0x13b0 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:59:14.0342 0x13b0 HomeGroupProvider - ok
10:59:14.0400 0x13b0 [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
10:59:14.0458 0x13b0 HpSAMD - ok
10:59:14.0579 0x13b0 [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP C:\Windows\system32\drivers\HTTP.sys
10:59:14.0627 0x13b0 HTTP - ok
10:59:14.0704 0x13b0 [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
10:59:14.0730 0x13b0 hwpolicy - ok
10:59:14.0916 0x13b0 [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
10:59:15.0154 0x13b0 i8042prt - ok
10:59:15.0292 0x13b0 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
10:59:15.0417 0x13b0 iaStorV - ok
10:59:15.0718 0x13b0 [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:59:15.0756 0x13b0 idsvc - ok
10:59:15.0848 0x13b0 [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
10:59:15.0927 0x13b0 iirsp - ok
10:59:16.0221 0x13b0 [ F95622F161474511B8D80D6B093AA610, F2320E25EB9B4AA9A8366BD3AA23EABEBE111A5610D3A62EBA47D90427D5BC26 ] IKEEXT C:\Windows\System32\ikeext.dll
10:59:16.0409 0x13b0 IKEEXT - ok
10:59:17.0964 0x13b0 [ F4427E5DF32CDE359B2E2E5512D18001, 37660CB81A656F793224381E145CFE6D173EFBA3C58E17669E34D5BA239FF776 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
10:59:18.0039 0x13b0 IntcAzAudAddService - ok
10:59:18.0110 0x13b0 [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys
10:59:18.0202 0x13b0 intelide - ok
10:59:18.0240 0x13b0 [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
10:59:18.0294 0x13b0 intelppm - ok
10:59:18.0398 0x13b0 [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
10:59:18.0544 0x13b0 IPBusEnum - ok
10:59:18.0555 0x13b0 [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:59:18.0604 0x13b0 IpFilterDriver - ok
10:59:19.0360 0x13b0 [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
10:59:19.0564 0x13b0 iphlpsvc - ok
10:59:19.0792 0x13b0 [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
10:59:19.0969 0x13b0 IPMIDRV - ok
10:59:20.0139 0x13b0 [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
10:59:20.0377 0x13b0 IPNAT - ok
10:59:20.0609 0x13b0 [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys
10:59:20.0700 0x13b0 IRENUM - ok
10:59:20.0802 0x13b0 [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys
10:59:20.0891 0x13b0 isapnp - ok
10:59:20.0938 0x13b0 [ CB7A9ABB12B8415BCE5D74994C7BA3AE, 464BFF3F5EEE985BE075E23E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
10:59:20.0974 0x13b0 iScsiPrt - ok
10:59:21.0246 0x13b0 [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
10:59:21.0272 0x13b0 kbdclass - ok
10:59:21.0320 0x13b0 [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
10:59:21.0474 0x13b0 kbdhid - ok
10:59:21.0528 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] KeyIso C:\Windows\system32\lsass.exe
10:59:21.0566 0x13b0 KeyIso - ok
10:59:21.0610 0x13b0 [ B7895B4182C0D16F6EFADEB8081E8D36, BAC3BAD22207C8826125FD7721C96F2C7A238960FD9398A3D4573E14648E9DB9 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
10:59:21.0677 0x13b0 KSecDD - ok
10:59:21.0870 0x13b0 [ D30159AC9237519FBC62C6EC247D2D46, 10BDE041C95D0CCD3591ED497002043FEC3A5F732D7AE311FBA457E0FE16CE4B ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
10:59:21.0943 0x13b0 KSecPkg - ok
10:59:22.0115 0x13b0 [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll
10:59:22.0209 0x13b0 KtmRm - ok
10:59:22.0453 0x13b0 [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\system32\srvsvc.dll
10:59:22.0677 0x13b0 LanmanServer - ok
10:59:22.0806 0x13b0 [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:59:22.0949 0x13b0 LanmanWorkstation - ok
10:59:23.0013 0x13b0 [ F8A7212D0864EF5E9185FB95E6623F4D, 277EAA06BD3D1CB31E6CD7B9ECD3A4B7D4AB7A369DB5FFF04EC7D749DF26E3D2 ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
10:59:23.0039 0x13b0 lirsgt - ok
10:59:23.0298 0x13b0 [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
10:59:23.0429 0x13b0 lltdio - ok
10:59:23.0529 0x13b0 [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll
10:59:23.0715 0x13b0 lltdsvc - ok
10:59:23.0763 0x13b0 [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll
10:59:24.0009 0x13b0 lmhosts - ok
10:59:24.0244 0x13b0 [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
10:59:24.0307 0x13b0 LSI_FC - ok
10:59:24.0455 0x13b0 [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
10:59:24.0636 0x13b0 LSI_SAS - ok
10:59:24.0666 0x13b0 [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
10:59:24.0677 0x13b0 LSI_SAS2 - ok
10:59:24.0703 0x13b0 [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
10:59:24.0891 0x13b0 LSI_SCSI - ok
10:59:25.0073 0x13b0 [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys
10:59:25.0263 0x13b0 luafv - ok
10:59:25.0584 0x13b0 [ F88B3A1CA0CE7DA9879F633D3EC10B9B, 6D3849A34BB043BAC72E36B120B14827B577C6B462794C7A0E4BAD668FB4F3FC ] mbamchameleon C:\Windows\system32\drivers\mbamchameleon.sys
10:59:25.0649 0x13b0 mbamchameleon - ok
10:59:25.0760 0x13b0 [ 04B309A1A653177994630C2773E659F1, 1D9F81D2DF513FE177E5308E3DE0CE416109F87FDBD00FE7453FEB6074216C3C ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
10:59:25.0853 0x13b0 MBAMSwissArmy - ok
10:59:25.0929 0x13b0 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
10:59:26.0000 0x13b0 Mcx2Svc - ok
10:59:26.0096 0x13b0 [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
10:59:26.0134 0x13b0 megasas - ok
10:59:26.0279 0x13b0 [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
10:59:26.0315 0x13b0 MegaSR - ok
10:59:27.0303 0x13b0 [ FAFE367D032ED82E9332B4C741A20216, 7B123766E360570E0FCB211835B7910D6A1806C25A06BCA9227AB9E993376CA8 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
10:59:27.0398 0x13b0 Microsoft Office Groove Audit Service - ok
10:59:27.0510 0x13b0 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll
10:59:27.0590 0x13b0 MMCSS - ok
10:59:27.0666 0x13b0 [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys
10:59:27.0778 0x13b0 Modem - ok
10:59:27.0825 0x13b0 [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
10:59:27.0984 0x13b0 monitor - ok
10:59:28.0036 0x13b0 [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
10:59:28.0046 0x13b0 mouclass - ok
10:59:28.0114 0x13b0 [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
10:59:28.0158 0x13b0 mouhid - ok
10:59:28.0209 0x13b0 [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
10:59:28.0227 0x13b0 mountmgr - ok
10:59:28.0409 0x13b0 [ A35576A433F4AEB0D48976A004657CB6, F820A759119785C3FB10B0EDCF8EF9985886A9B0767ABD45B2ACAC03498B321E ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
10:59:28.0522 0x13b0 MozillaMaintenance - ok
10:59:28.0667 0x13b0 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys
10:59:28.0856 0x13b0 mpio - ok
10:59:29.0012 0x13b0 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
10:59:29.0188 0x13b0 mpsdrv - ok
10:59:29.0347 0x13b0 [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll
10:59:29.0589 0x13b0 MpsSvc - ok
10:59:29.0730 0x13b0 [ CEB46AB7C01C9F825F8CC6BABC18166A, AA98898204FC58878502C170FE6ED8BA681396DDD8BF3689D0C3642DEA87BEF8 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
10:59:29.0907 0x13b0 MRxDAV - ok
10:59:29.0996 0x13b0 [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
10:59:30.0161 0x13b0 mrxsmb - ok
10:59:30.0249 0x13b0 [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:59:30.0291 0x13b0 mrxsmb10 - ok
10:59:30.0309 0x13b0 [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:59:30.0323 0x13b0 mrxsmb20 - ok
10:59:30.0341 0x13b0 [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys
10:59:30.0378 0x13b0 msahci - ok
10:59:30.0471 0x13b0 [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys
10:59:30.0518 0x13b0 msdsm - ok
10:59:30.0529 0x13b0 [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe
10:59:30.0580 0x13b0 MSDTC - ok
10:59:30.0610 0x13b0 [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys
10:59:30.0727 0x13b0 Msfs - ok
10:59:30.0802 0x13b0 [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
10:59:30.0886 0x13b0 mshidkmdf - ok
10:59:30.0936 0x13b0 [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
10:59:30.0961 0x13b0 msisadrv - ok
10:59:31.0117 0x13b0 [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
10:59:31.0291 0x13b0 MSiSCSI - ok
10:59:31.0294 0x13b0 msiserver - ok
10:59:31.0337 0x13b0 [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
10:59:31.0542 0x13b0 MSKSSRV - ok
10:59:31.0598 0x13b0 [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
10:59:31.0781 0x13b0 MSPCLOCK - ok
10:59:31.0832 0x13b0 [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
10:59:31.0953 0x13b0 MSPQM - ok
10:59:32.0051 0x13b0 [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
10:59:32.0085 0x13b0 MsRPC - ok
10:59:32.0146 0x13b0 [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
10:59:32.0287 0x13b0 mssmbios - ok
10:59:32.0410 0x13b0 [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
10:59:32.0633 0x13b0 MSTEE - ok
10:59:32.0721 0x13b0 [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
10:59:32.0910 0x13b0 MTConfig - ok
10:59:32.0963 0x13b0 [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys
10:59:33.0061 0x13b0 Mup - ok
10:59:33.0203 0x13b0 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll
10:59:33.0297 0x13b0 napagent - ok
10:59:33.0523 0x13b0 [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
10:59:33.0569 0x13b0 NativeWifiP - ok
10:59:33.0815 0x13b0 [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS C:\Windows\system32\drivers\ndis.sys
10:59:33.0854 0x13b0 NDIS - ok
10:59:33.0987 0x13b0 [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
10:59:34.0098 0x13b0 NdisCap - ok
10:59:34.0192 0x13b0 [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
10:59:34.0301 0x13b0 NdisTapi - ok
10:59:34.0494 0x13b0 [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
10:59:34.0566 0x13b0 Ndisuio - ok
10:59:34.0716 0x13b0 [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
10:59:35.0535 0x13b0 NdisWan - ok
10:59:35.0710 0x13b0 [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
10:59:36.0002 0x13b0 NDProxy - ok
10:59:36.0352 0x13b0 [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
10:59:36.0486 0x13b0 NetBIOS - ok
10:59:36.0640 0x13b0 [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
10:59:36.0910 0x13b0 NetBT - ok
10:59:36.0934 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] Netlogon C:\Windows\system32\lsass.exe
10:59:36.0946 0x13b0 Netlogon - ok
10:59:37.0482 0x13b0 [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll
10:59:37.0785 0x13b0 Netman - ok
10:59:38.0146 0x13b0 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:59:38.0343 0x13b0 NetMsmqActivator - ok
10:59:38.0615 0x13b0 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:59:38.0640 0x13b0 NetPipeActivator - ok
10:59:38.0794 0x13b0 [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll
10:59:38.0975 0x13b0 netprofm - ok
10:59:39.0153 0x13b0 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:59:39.0179 0x13b0 NetTcpActivator - ok
10:59:39.0208 0x13b0 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:59:39.0221 0x13b0 NetTcpPortSharing - ok
10:59:39.0461 0x13b0 [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
10:59:39.0587 0x13b0 nfrd960 - ok
10:59:39.0761 0x13b0 [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc C:\Windows\System32\nlasvc.dll
10:59:39.0800 0x13b0 NlaSvc - ok
10:59:40.0071 0x13b0 [ B9730495E0CF674680121E34BD95A73B, 1A3DD943B0EEA19A676175825CB135825ECF41404B59349AC9B1E6D137FA9B46 ] npf C:\Windows\system32\drivers\npf.sys
10:59:40.0099 0x13b0 npf - ok
10:59:40.0141 0x13b0 [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys
10:59:40.0353 0x13b0 Npfs - ok
10:59:40.0449 0x13b0 [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll
10:59:40.0565 0x13b0 nsi - ok
10:59:40.0672 0x13b0 [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
10:59:40.0806 0x13b0 nsiproxy - ok
10:59:41.0120 0x13b0 [ 5E43D2B0EE64123D4880DFA6626DEFDE, 164413A22DE58B19EA2B4120034B46D6BE1F424B80C3421E10BE5C81153D049F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
10:59:41.0248 0x13b0 Ntfs - ok
10:59:41.0282 0x13b0 [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys
10:59:41.0352 0x13b0 Null - ok
10:59:41.0531 0x13b0 [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys
10:59:41.0718 0x13b0 nvraid - ok
10:59:41.0873 0x13b0 [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
10:59:41.0909 0x13b0 nvstor - ok
10:59:42.0126 0x13b0 [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
10:59:42.0265 0x13b0 nv_agp - ok
10:59:42.0686 0x13b0 [ 84DE1DD996B48B05ACE31AD015FA108A, 4B9D1E4EF83ECED6C77F23D9879C124534F7053D7423E3A2D0F67A4A720CEA94 ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
10:59:42.0932 0x13b0 odserv - ok
10:59:43.0892 0x13b0 [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
10:59:44.0005 0x13b0 ohci1394 - ok
10:59:44.0249 0x13b0 [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:59:44.0336 0x13b0 ose - ok
10:59:45.0430 0x13b0 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:59:45.0702 0x13b0 osppsvc - ok
10:59:45.0883 0x13b0 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
10:59:46.0093 0x13b0 p2pimsvc - ok
10:59:46.0347 0x13b0 [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll
10:59:46.0582 0x13b0 p2psvc - ok
10:59:46.0660 0x13b0 [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\DRIVERS\parport.sys
10:59:46.0885 0x13b0 Parport - ok
10:59:47.0013 0x13b0 [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr C:\Windows\system32\drivers\partmgr.sys
10:59:47.0041 0x13b0 partmgr - ok
10:59:47.0189 0x13b0 [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
10:59:47.0353 0x13b0 Parvdm - ok
10:59:47.0709 0x13b0 [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc C:\Windows\System32\pcasvc.dll
10:59:47.0845 0x13b0 PcaSvc - ok
10:59:48.0297 0x13b0 [ 175CC28DCF819F78CAA3FBD44AD9E52A, C00F17040440E5C10439FF8110368A7813BD197E96338FD3703C86E399E27128 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
10:59:48.0616 0x13b0 pccsmcfd - ok
10:59:48.0735 0x13b0 [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys
10:59:48.0897 0x13b0 pci - ok
10:59:48.0934 0x13b0 [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys
10:59:49.0099 0x13b0 pciide - ok
10:59:49.0229 0x13b0 [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
10:59:49.0316 0x13b0 pcmcia - ok
10:59:49.0432 0x13b0 [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys
10:59:49.0465 0x13b0 pcw - ok
10:59:49.0706 0x13b0 [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
10:59:49.0826 0x13b0 PEAUTH - ok
10:59:50.0351 0x13b0 [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll
10:59:50.0427 0x13b0 pla - ok
10:59:50.0842 0x13b0 [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
10:59:51.0048 0x13b0 PlugPlay - ok
10:59:51.0266 0x13b0 [ 1713D9DE407313138118D501B0E3C05B, 75D89D507BFEBC8F9FBEB988C721BFB721FD0535BE915F370F3966967BA0B419 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
10:59:51.0298 0x13b0 PnkBstrA - ok
10:59:51.0437 0x13b0 [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
10:59:51.0523 0x13b0 PNRPAutoReg - ok
10:59:51.0638 0x13b0 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
10:59:51.0673 0x13b0 PNRPsvc - ok
10:59:51.0941 0x13b0 [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
10:59:52.0017 0x13b0 PolicyAgent - ok
10:59:52.0154 0x13b0 [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll
10:59:52.0221 0x13b0 Power - ok
10:59:52.0292 0x13b0 [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
10:59:52.0627 0x13b0 PptpMiniport - ok
10:59:52.0662 0x13b0 [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\DRIVERS\processr.sys
10:59:52.0827 0x13b0 Processor - ok
10:59:52.0972 0x13b0 [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc C:\Windows\system32\profsvc.dll
10:59:53.0138 0x13b0 ProfSvc - ok
10:59:53.0243 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] ProtectedStorage C:\Windows\system32\lsass.exe
10:59:53.0339 0x13b0 ProtectedStorage - ok
10:59:53.0441 0x13b0 [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
10:59:53.0554 0x13b0 Psched - ok
10:59:54.0057 0x13b0 [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
10:59:54.0212 0x13b0 ql2300 - ok
10:59:54.0348 0x13b0 [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
10:59:54.0418 0x13b0 ql40xx - ok
10:59:54.0507 0x13b0 [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll
10:59:54.0628 0x13b0 QWAVE - ok
10:59:54.0748 0x13b0 [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
10:59:54.0831 0x13b0 QWAVEdrv - ok
10:59:54.0857 0x13b0 [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
10:59:54.0996 0x13b0 RasAcd - ok
10:59:55.0094 0x13b0 [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
10:59:55.0262 0x13b0 RasAgileVpn - ok
10:59:55.0297 0x13b0 [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll
10:59:55.0345 0x13b0 RasAuto - ok
10:59:55.0440 0x13b0 [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
10:59:55.0511 0x13b0 Rasl2tp - ok
10:59:55.0927 0x13b0 [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll
10:59:56.0097 0x13b0 RasMan - ok
10:59:56.0328 0x13b0 [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
10:59:56.0413 0x13b0 RasPppoe - ok
10:59:56.0469 0x13b0 [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
10:59:56.0562 0x13b0 RasSstp - ok
10:59:56.0718 0x13b0 [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
10:59:56.0906 0x13b0 rdbss - ok
10:59:57.0079 0x13b0 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
10:59:57.0504 0x13b0 rdpbus - ok
10:59:57.0740 0x13b0 [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
10:59:57.0941 0x13b0 RDPCDD - ok
10:59:58.0298 0x13b0 [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
10:59:58.0559 0x13b0 RDPENCDD - ok
10:59:58.0708 0x13b0 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
10:59:58.0860 0x13b0 RDPREFMP - ok
10:59:58.0999 0x13b0 [ F031683E6D1FEA157ABB2FF260B51E61, 83B552819A5964152882C527E1421DBCEAACC74DEB897E3C4B53F52F1467FED3 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
10:59:59.0084 0x13b0 RDPWD - ok
10:59:59.0414 0x13b0 [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
10:59:59.0548 0x13b0 rdyboost - ok
10:59:59.0653 0x13b0 [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll
10:59:59.0816 0x13b0 RemoteAccess - ok
10:59:59.0827 0x13b0 [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll
10:59:59.0893 0x13b0 RemoteRegistry - ok
10:59:59.0918 0x13b0 [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
11:00:00.0125 0x13b0 RpcEptMapper - ok
11:00:00.0182 0x13b0 [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe
11:00:00.0252 0x13b0 RpcLocator - ok
11:00:00.0292 0x13b0 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll
11:00:00.0332 0x13b0 RpcSs - ok
11:00:00.0508 0x13b0 [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
11:00:00.0640 0x13b0 rspndr - ok
11:00:01.0072 0x13b0 [ BCEBD5D1AABCE4EFB7597635E347C44B, AB26EA1A028D30C4D1763EAB1991E2BABD44A78BDD4E06B6A1F101756860B1D4 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
11:00:01.0299 0x13b0 RTL8167 - ok
11:00:01.0441 0x13b0 [ 51ADEF77E4C929535FD50DA153774E79, A02C501D6582DE2E450840E187285678A42087519C232AA20A7ECA1E218ED179 ] RTL8192su C:\Windows\system32\DRIVERS\RTL8192su.sys
11:00:01.0600 0x13b0 RTL8192su - ok
11:00:01.0798 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] SamSs C:\Windows\system32\lsass.exe
11:00:01.0829 0x13b0 SamSs - ok
11:00:01.0906 0x13b0 [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
11:00:02.0010 0x13b0 sbp2port - ok
11:00:02.0032 0x13b0 [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll
11:00:02.0194 0x13b0 SCardSvr - ok
11:00:02.0281 0x13b0 [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
11:00:02.0384 0x13b0 scfilter - ok
11:00:02.0498 0x13b0 [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll
11:00:02.0615 0x13b0 Schedule - ok
11:00:02.0740 0x13b0 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll
11:00:02.0784 0x13b0 SCPolicySvc - ok
11:00:02.0898 0x13b0 [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll
11:00:02.0999 0x13b0 SDRSVC - ok
11:00:03.0215 0x13b0 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
11:00:03.0365 0x13b0 secdrv - ok
11:00:03.0472 0x13b0 [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll
11:00:03.0722 0x13b0 seclogon - ok
11:00:03.0807 0x13b0 [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\System32\sens.dll
11:00:03.0875 0x13b0 SENS - ok
11:00:04.0017 0x13b0 [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll
11:00:04.0375 0x13b0 SensrSvc - ok
11:00:04.0582 0x13b0 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
11:00:04.0685 0x13b0 Serenum - ok
11:00:04.0890 0x13b0 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\DRIVERS\serial.sys
11:00:05.0450 0x13b0 Serial - ok
11:00:05.0784 0x13b0 [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
11:00:05.0945 0x13b0 sermouse - ok
11:00:06.0537 0x13b0 [ 9D38320BB32230349379DF5DDBBF7FCE, 8AAA8B0B60E65F596C3276DCCD0D8146B40172B6D509B597EDFDA46AC8A72A4C ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
11:00:07.0271 0x13b0 ServiceLayer - detected UnsignedFile.Multi.Generic ( 1 )
11:00:17.0352 0x13b0 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
11:00:17.0352 0x13b0 Force sending object to P2P due to detect: ServiceLayer
11:00:20.0703 0x13b0 Object send P2P result: true
11:00:23.0280 0x13b0 [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll
11:00:23.0434 0x13b0 SessionEnv - ok
11:00:23.0592 0x13b0 [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
11:00:23.0735 0x13b0 sffdisk - ok
11:00:23.0779 0x13b0 [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
11:00:23.0830 0x13b0 sffp_mmc - ok
11:00:23.0858 0x13b0 [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
11:00:23.0939 0x13b0 sffp_sd - ok
11:00:24.0071 0x13b0 [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
11:00:24.0201 0x13b0 sfloppy - ok
11:00:24.0326 0x13b0 [ D9B734638DD8DBA9D59AAD3189CD0FAD, 694488C94F168AFC53B03BB5824DB60D2DABD8B0A4E2869D0C5A5455E1CA04EA ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys
11:00:24.0410 0x13b0 Sftfs - ok
11:00:24.0680 0x13b0 [ CB73BC422C07FB611F194DA18D1E7F36, F30C4D887D18FC32151C8A30FAFD17E36BF8EC542D81CB94C286F448A640CAC9 ] sftlist C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
11:00:25.0195 0x13b0 sftlist - ok
11:00:25.0493 0x13b0 [ 2F61BD46C0BFF4EB36E1E359CA17BFC5, 39602AAB1619C8C9DED9EC826CB90B1243AC35A928B1977942C420912849558B ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys
11:00:25.0528 0x13b0 Sftplay - ok
11:00:25.0537 0x13b0 [ 518BAC0179F94304F422696B47C0EC12, 7DD53B062B93848B4B80ADD1BFF4F6AEAACA17EC45F08F46F21C158CF08812C1 ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys
11:00:25.0677 0x13b0 Sftredir - ok
11:00:25.0739 0x13b0 [ 747325236D88B3F05FFD27FF9EC711C5, DD3BD4286888A9B9F58C2723B5E15191872E84F0739C278C40F9784DD5462591 ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys
11:00:25.0886 0x13b0 Sftvol - ok
11:00:26.0079 0x13b0 [ A5812F0281CA5081BF696626F9BF324D, 36AEDE39B425E1BE769C6DCECDFD09F365851992B70E21B462A459E5211451CD ] sftvsa C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
11:00:26.0105 0x13b0 sftvsa - ok
11:00:29.0531 0x13b0 [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll
11:00:30.0005 0x13b0 SharedAccess - ok
11:00:30.0211 0x13b0 [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:00:30.0316 0x13b0 ShellHWDetection - ok
11:00:30.0347 0x13b0 [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys
11:00:30.0496 0x13b0 sisagp - ok
11:00:30.0627 0x13b0 [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:00:30.0693 0x13b0 SiSRaid2 - ok
11:00:30.0818 0x13b0 [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
11:00:30.0847 0x13b0 SiSRaid4 - ok
11:00:30.0997 0x13b0 [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys
11:00:31.0141 0x13b0 Smb - ok
11:00:31.0292 0x13b0 [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
11:00:31.0337 0x13b0 SNMPTRAP - ok
11:00:31.0366 0x13b0 [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys
11:00:31.0382 0x13b0 spldr - ok
11:00:31.0512 0x13b0 [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler C:\Windows\System32\spoolsv.exe
11:00:31.0579 0x13b0 Spooler - ok
11:00:32.0360 0x13b0 [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe
11:00:32.0561 0x13b0 sppsvc - ok
11:00:32.0634 0x13b0 [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll
11:00:32.0709 0x13b0 sppuinotify - ok
11:00:32.0752 0x13b0 [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys
11:00:32.0887 0x13b0 srv - ok
11:00:33.0009 0x13b0 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
11:00:33.0058 0x13b0 srv2 - ok
11:00:33.0120 0x13b0 [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
11:00:33.0183 0x13b0 srvnet - ok
11:00:33.0229 0x13b0 [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
11:00:33.0296 0x13b0 SSDPSRV - ok
11:00:33.0337 0x13b0 [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll
11:00:33.0431 0x13b0 SstpSvc - ok
11:00:33.0451 0x13b0 [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
11:00:33.0461 0x13b0 stexstor - ok
11:00:33.0491 0x13b0 [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll
11:00:33.0557 0x13b0 StiSvc - ok
11:00:33.0876 0x13b0 [ 36565318396A9D0A880687D1BB9C7F79, 3B226119A428D4A18B58C60169C9896A6AB1B920F97115CDCD170BA0D9520BDB ] StkCMini C:\Windows\system32\Drivers\StkCMini.sys
11:00:34.0001 0x13b0 StkCMini - ok
11:00:34.0024 0x13b0 [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\drivers\swenum.sys
11:00:34.0033 0x13b0 swenum - ok
11:00:34.0121 0x13b0 [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll
11:00:34.0174 0x13b0 swprv - ok
11:00:34.0277 0x13b0 [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll
11:00:34.0346 0x13b0 SysMain - ok
11:00:34.0384 0x13b0 [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
11:00:34.0411 0x13b0 TabletInputService - ok
11:00:34.0555 0x13b0 [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll
11:00:34.0834 0x13b0 TapiSrv - ok
11:00:34.0943 0x13b0 [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll
11:00:35.0132 0x13b0 TBS - ok
11:00:35.0871 0x13b0 [ 4E8B9BE71B807B3BAEDB7F4243F85E3C, 0FA6A6F065A99B0F40A3D50A20DF69D692824EE5776AC3904F9ED1F6F8832BD3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
11:00:35.0917 0x13b0 Tcpip - ok
11:00:35.0952 0x13b0 [ 4E8B9BE71B807B3BAEDB7F4243F85E3C, 0FA6A6F065A99B0F40A3D50A20DF69D692824EE5776AC3904F9ED1F6F8832BD3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
11:00:35.0989 0x13b0 TCPIP6 - ok
11:00:36.0125 0x13b0 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
11:00:36.0279 0x13b0 tcpipreg - ok
11:00:36.0375 0x13b0 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
11:00:36.0464 0x13b0 TDPIPE - ok
11:00:36.0533 0x13b0 [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
11:00:36.0599 0x13b0 TDTCP - ok
11:00:36.0621 0x13b0 [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
11:00:36.0762 0x13b0 tdx - ok
11:00:36.0838 0x13b0 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\drivers\termdd.sys
11:00:36.0867 0x13b0 TermDD - ok
11:00:37.0050 0x13b0 [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService C:\Windows\System32\termsrv.dll
11:00:37.0210 0x13b0 TermService - ok
11:00:37.0345 0x13b0 [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll
11:00:37.0419 0x13b0 Themes - ok
11:00:37.0492 0x13b0 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll
11:00:37.0549 0x13b0 THREADORDER - ok
11:00:37.0566 0x13b0 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll
11:00:37.0680 0x13b0 TrkWks - ok
11:00:37.0767 0x13b0 [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:00:37.0815 0x13b0 TrustedInstaller - ok
11:00:37.0906 0x13b0 [ B37B08F2E5EEB1A37E448E09BACE1101, 32CC9E06B88BAB6FAB4696B744548DFCE9199A7FD2BA8B019F269CA75895852C ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
11:00:37.0975 0x13b0 tssecsrv - ok
11:00:37.0992 0x13b0 [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
11:00:38.0007 0x13b0 TsUsbFlt - ok
11:00:38.0021 0x13b0 [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
11:00:38.0047 0x13b0 tunnel - ok
11:00:38.0081 0x13b0 [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
11:00:38.0138 0x13b0 uagp35 - ok
11:00:38.0223 0x13b0 [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
11:00:38.0318 0x13b0 udfs - ok
11:00:38.0350 0x13b0 [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe
11:00:38.0435 0x13b0 UI0Detect - ok
11:00:38.0697 0x13b0 [ F13DA74969897359A88F2A739F54A250, 647CDD8D5150A92EB2F250C1A1C5ED75C3B097369D879477FAD54DBA20A8843E ] UleadBurningHelper C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
11:00:38.0738 0x13b0 UleadBurningHelper - detected UnsignedFile.Multi.Generic ( 1 )
11:00:41.0065 0x13b0 Detect skipped due to KSN trusted
11:00:41.0066 0x13b0 UleadBurningHelper - ok
11:00:41.0105 0x13b0 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
11:00:41.0133 0x13b0 uliagpkx - ok
11:00:41.0165 0x13b0 [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\drivers\umbus.sys
11:00:41.0242 0x13b0 umbus - ok
11:00:41.0299 0x13b0 [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
11:00:41.0463 0x13b0 UmPass - ok
11:00:41.0584 0x13b0 [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll
11:00:41.0643 0x13b0 upnphost - ok
11:00:41.0678 0x13b0 [ 1D9F2BD026E8E2D45033A4DF3F16B78C, 72603E0A614F382AF69972F0930FD168B805922599DB9A7410B20CB391A9B933 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
11:00:41.0759 0x13b0 usbaudio - ok
11:00:41.0787 0x13b0 [ BD9C55D7023C5DE374507ACC7A14E2AC, 1DBAFF733DE5C1A6A2374B15BD94512A22D9C0F4DF91F997801340828333AF3C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
11:00:41.0803 0x13b0 usbccgp - ok
11:00:41.0853 0x13b0 [ 04EC7CEC62EC3B6D9354EEE93327FC82, 6CB41D8644618A5F701F6CA91FB65BB94AA83EA48992133B5262DC539B334B2E ] usbcir C:\Windows\system32\drivers\usbcir.sys
11:00:41.0989 0x13b0 usbcir - ok
11:00:42.0023 0x13b0 [ F92DE757E4B7CE9C07C5E65423F3AE3B, B3FDEE4A8F1C7EC12405D99ACABC3E633FA4ED08D2A2AA871526ED7927A35A91 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
11:00:42.0042 0x13b0 usbehci - ok
11:00:42.0066 0x13b0 [ 19999CA8E83F16D271AFC467B84718D7, ADB15873F524B7698B4160C9D86B7ACCF2FC53B441FD7D8B510C3CD72B46B6A2 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
11:00:42.0080 0x13b0 usbfilter - ok
11:00:42.0107 0x13b0 [ 8DC94AEC6A7E644A06135AE7506DC2E9, 3ACB621D57BC8691DBBCDEF27563AA6390370362F21AFA6E7BA35BC429E14590 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
11:00:42.0183 0x13b0 usbhub - ok
11:00:42.0227 0x13b0 [ E185D44FAC515A18D9DEDDC23C2CDF44, EF69D0253CC8F1D29929FD5E74F18737ECF5D238874B6E1505E2EAEE66D9D987 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
11:00:42.0286 0x13b0 usbohci - ok
11:00:42.0333 0x13b0 [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
11:00:42.0428 0x13b0 usbprint - ok
11:00:42.0490 0x13b0 [ 576096CCBC07E7C4EA4F5E6686D6888F, 8C643F43BD0017979548389C4DB36A1EE872CCF19C86FAE3752A4989173E28ED ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
11:00:42.0540 0x13b0 usbscan - ok
11:00:42.0564 0x13b0 [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:00:42.0589 0x13b0 USBSTOR - ok
11:00:42.0648 0x13b0 [ 68DF884CF41CDADA664BEB01DAF67E3D, 142781FE2FF93B269D8FA11D4C3F60967552A867E94533D94EF1C2D777A67872 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
11:00:42.0705 0x13b0 usbuhci - ok
11:00:42.0755 0x13b0 [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll
11:00:42.0845 0x13b0 UxSms - ok
11:00:42.0884 0x13b0 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] VaultSvc C:\Windows\system32\lsass.exe
11:00:42.0900 0x13b0 VaultSvc - ok
11:00:43.0278 0x13b0 [ EA9ADB96A31020D4D3E5167FE31427DE, 5635513F58CF89AF87B7A5CE570B348A932C5C74D3FBAF575D708198B174D641 ] VBoxAswDrv C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys
11:00:43.0307 0x13b0 VBoxAswDrv - ok
11:00:43.0376 0x13b0 [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
11:00:43.0426 0x13b0 vdrvroot - ok
11:00:43.0495 0x13b0 [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe
11:00:43.0561 0x13b0 vds - ok
11:00:43.0639 0x13b0 [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
11:00:43.0678 0x13b0 vga - ok
11:00:43.0719 0x13b0 [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys
11:00:43.0760 0x13b0 VgaSave - ok
11:00:43.0792 0x13b0 [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
11:00:43.0919 0x13b0 vhdmp - ok
11:00:43.0938 0x13b0 [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys
11:00:43.0968 0x13b0 viaagp - ok
11:00:43.0989 0x13b0 [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
11:00:44.0067 0x13b0 ViaC7 - ok
11:00:44.0098 0x13b0 [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys
11:00:44.0154 0x13b0 viaide - ok
11:00:44.0173 0x13b0 [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys
11:00:44.0186 0x13b0 volmgr - ok
11:00:44.0204 0x13b0 [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
11:00:44.0230 0x13b0 volmgrx - ok
11:00:44.0290 0x13b0 [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys
11:00:44.0321 0x13b0 volsnap - ok
11:00:44.0415 0x13b0 [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
11:00:44.0428 0x13b0 vsmraid - ok
11:00:44.0648 0x13b0 [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe
11:00:44.0703 0x13b0 VSS - ok
11:00:44.0865 0x13b0 [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
11:00:45.0026 0x13b0 vwifibus - ok
11:00:45.0067 0x13b0 [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
11:00:45.0206 0x13b0 vwififlt - ok
11:00:45.0556 0x13b0 [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll
11:00:45.0843 0x13b0 W32Time - ok
11:00:45.0908 0x13b0 [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
11:00:46.0246 0x13b0 WacomPen - ok
11:00:46.0345 0x13b0 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
11:00:46.0531 0x13b0 WANARP - ok
11:00:46.0543 0x13b0 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
11:00:46.0742 0x13b0 Wanarpv6 - ok
11:00:47.0066 0x13b0 [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe
11:00:47.0343 0x13b0 wbengine - ok
11:00:47.0406 0x13b0 [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
11:00:47.0547 0x13b0 WbioSrvc - ok
11:00:47.0573 0x13b0 [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll
11:00:47.0634 0x13b0 wcncsvc - ok
11:00:47.0798 0x13b0 [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:00:47.0911 0x13b0 WcsPlugInService - ok
11:00:47.0930 0x13b0 [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\DRIVERS\wd.sys
11:00:48.0138 0x13b0 Wd - ok
11:00:48.0405 0x13b0 [ A840213F1ACDCC175B4D1D5AAEAC0D7A, B20F7CAEEA790290072BC170EBEEADB4C19E1C40DB0B3FE0D4A640D0D82300D6 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
11:00:48.0532 0x13b0 Wdf01000 - ok
11:00:48.0636 0x13b0 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\Windows\system32\wdi.dll
11:00:48.0713 0x13b0 WdiServiceHost - ok
11:00:48.0813 0x13b0 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\Windows\system32\wdi.dll
11:00:48.0848 0x13b0 WdiSystemHost - ok
11:00:49.0134 0x13b0 [ A9D880F97530D5B8FEE278923349929D, 6A293E2DB9B7C434EA8B4CD4861E11905D46BD60E014AE27B74DC8C4B2DDF834 ] WebClient C:\Windows\System32\webclnt.dll
11:00:49.0426 0x13b0 WebClient - ok
11:00:49.0659 0x13b0 [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll
11:00:49.0874 0x13b0 Wecsvc - ok
11:00:49.0936 0x13b0 [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll
11:00:50.0101 0x13b0 wercplsupport - ok
11:00:50.0169 0x13b0 [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll
11:00:50.0257 0x13b0 WerSvc - ok
11:00:50.0289 0x13b0 [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
11:00:50.0331 0x13b0 WfpLwf - ok
11:00:50.0473 0x13b0 [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys
11:00:50.0567 0x13b0 WIMMount - ok
11:00:51.0115 0x13b0 [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
11:00:51.0253 0x13b0 WinDefend - ok
11:00:51.0267 0x13b0 WinHttpAutoProxySvc - ok
11:00:52.0010 0x13b0 [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
11:00:52.0233 0x13b0 Winmgmt - ok
11:00:52.0558 0x13b0 [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM C:\Windows\system32\WsmSvc.dll
11:00:52.0745 0x13b0 WinRM - ok
11:00:52.0888 0x13b0 [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
11:00:53.0107 0x13b0 WinUsb - ok
11:00:53.0276 0x13b0 [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll
11:00:53.0421 0x13b0 Wlansvc - ok
11:00:53.0816 0x13b0 [ 5144AE67D60EC653F97DDF3FEED29E77, F6238767284B2356A9F502E2ACCFAAC283FA13CBF238E98B5115A55179526B10 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
11:00:53.0862 0x13b0 wlidsvc - ok
11:00:53.0947 0x13b0 [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
11:00:54.0053 0x13b0 WmiAcpi - ok
11:00:54.0236 0x13b0 [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
11:00:54.0429 0x13b0 wmiApSrv - ok
11:00:54.0798 0x13b0 [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
11:00:54.0893 0x13b0 WMPNetworkSvc - ok
11:00:55.0111 0x13b0 [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll
11:00:55.0147 0x13b0 WPCSvc - ok
11:00:55.0182 0x13b0 [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
11:00:55.0349 0x13b0 WPDBusEnum - ok
11:00:55.0391 0x13b0 [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
11:00:55.0470 0x13b0 ws2ifsl - ok
11:00:55.0536 0x13b0 [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\System32\wscsvc.dll
11:00:55.0583 0x13b0 wscsvc - ok
11:00:55.0586 0x13b0 WSearch - ok
11:00:55.0641 0x13b0 wuauserv - ok
11:00:55.0689 0x13b0 [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
11:00:55.0815 0x13b0 WudfPf - ok
11:00:55.0850 0x13b0 [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
11:00:55.0869 0x13b0 WUDFRd - ok
11:00:55.0887 0x13b0 [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
11:00:55.0981 0x13b0 wudfsvc - ok
11:00:56.0104 0x13b0 [ 3C5E51C05BE9B56EAFF4E388C3AB25E4, 10D9FDEDAB1FB2E76D54661AFA5C1A6B1B0980525F38F5D061537077841C6AEE ] WwanSvc C:\Windows\System32\wwansvc.dll
11:00:56.0169 0x13b0 WwanSvc - ok
11:00:56.0176 0x13b0 ================ Scan global ===============================
11:00:56.0261 0x13b0 [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
11:00:56.0335 0x13b0 [ 1F5F07091D50244F17DD8D5147A628CC, 2F2B84BD1C052F44662960953C0EC91F9233D4D8DD06512E3E3BE43CE216BCB6 ] C:\Windows\system32\winsrv.dll
11:00:56.0395 0x13b0 [ 1F5F07091D50244F17DD8D5147A628CC, 2F2B84BD1C052F44662960953C0EC91F9233D4D8DD06512E3E3BE43CE216BCB6 ] C:\Windows\system32\winsrv.dll
11:00:56.0463 0x13b0 [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
11:00:56.0603 0x13b0 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
11:00:56.0622 0x13b0 [ Global ] - ok
11:00:56.0622 0x13b0 ================ Scan MBR ==================================
11:00:56.0639 0x13b0 [ 6F053CE44510D4BA204AFC85893BC5C5 ] \Device\Harddisk0\DR0
11:01:01.0878 0x13b0 \Device\Harddisk0\DR0 - ok
11:01:01.0879 0x13b0 ================ Scan VBR ==================================
11:01:01.0893 0x13b0 [ 57A3841479A30A2B6DAFCA94B771DEC3 ] \Device\Harddisk0\DR0\Partition1
11:01:02.0081 0x13b0 \Device\Harddisk0\DR0\Partition1 - ok
11:01:02.0094 0x13b0 [ 35BAC632911CFFB60EE1B892205580FE ] \Device\Harddisk0\DR0\Partition2
11:01:02.0250 0x13b0 \Device\Harddisk0\DR0\Partition2 - ok
11:01:02.0301 0x13b0 [ 8C154C2B032D7E324C5B9A36EB06E528 ] \Device\Harddisk0\DR0\Partition3
11:01:02.0308 0x13b0 \Device\Harddisk0\DR0\Partition3 - ok
11:01:02.0309 0x13b0 ================ Scan generic autorun ======================
11:01:04.0253 0x13b0 [ 59D29EF36C6712AAA8607E3484E75259, 48FFDE24C55FF45F8DA47A5D9D0E6ED8F375D683753A0CF0CCC9602D7332A55A ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
11:01:05.0969 0x13b0 RtHDVCpl - ok
11:01:06.0512 0x13b0 [ 3CB07566302BCEEB898DE270A0BEC175, B234D1044D8702A0929BB48F729EB5078B44AA7CD574B6482633B51289E70200 ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
11:01:06.0546 0x13b0 Adobe ARM - ok
11:01:06.0716 0x13b0 [ E66532FD491AD5604C36916715FBA092, 43FA8EF2025E7F1281CA024CB2EB2A433310E1515DCA9359035B3FB4BAE1FA8C ] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
11:01:06.0751 0x13b0 Adobe Reader Speed Launcher - ok
11:01:06.0945 0x13b0 [ 055C387F82389A13B64F5E9BD79B3BD6, 98DB8ECD0E41D1B2F92DFD0EB22D32642A048977AF9C9E0BF8D208EBDB956AE6 ] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
11:01:07.0038 0x13b0 StartCCC - detected UnsignedFile.Multi.Generic ( 1 )
11:01:09.0342 0x13b0 Detect skipped due to KSN trusted
11:01:09.0342 0x13b0 StartCCC - ok
11:01:09.0406 0x13b0 [ D2DAD71C96C113ED07F7BB79AD831C28, 8EACE797C16663D58B8BA67C9BF135780D1676E16797A1E81706263238C7BC0B ] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
11:01:09.0415 0x13b0 APSDaemon - ok
11:01:10.0007 0x13b0 [ 951024D91F4C3B95ED8D521F06FBFB00, DF4C62CFE1D81CA503FEAA223FB5759990BF34AB36BDADF28D4C309ADB8C3F48 ] C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe
11:01:10.0130 0x13b0 UVS10 Preload - detected UnsignedFile.Multi.Generic ( 1 )
11:01:12.0464 0x13b0 Detect skipped due to KSN trusted
11:01:12.0464 0x13b0 UVS10 Preload - ok
11:01:13.0166 0x13b0 [ 06964B7DE858BB6317164BF184E9C766, ADE3D2A7256A8F3F11B6E35979413850EB22B9BBADCE3EC73BE04A1622512126 ] C:\Program Files\Alwil Software\Avast5\AvastUI.exe
11:01:13.0344 0x13b0 AvastUI.exe - ok
11:01:13.0632 0x13b0 [ 271B0D188430670509CB9943D5229205, 74CB5A9D8B5988AE08C0F65C601FC54F8745BAB6825B6FEEFBA8F068D656D8D7 ] C:\Program Files\QuickTime\QTTask.exe
11:01:13.0696 0x13b0 QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
11:01:16.0006 0x13b0 Detect skipped due to KSN trusted
11:01:16.0006 0x13b0 QuickTime Task - ok
11:01:16.0365 0x13b0 [ 38D198A2DD54A67120040566A38103BA, 01604BD91A5B2C0DDC7B52036511F8219952626716E75979D8464F2C56BA0114 ] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
11:01:16.0396 0x13b0 GrooveMonitor - ok
11:01:16.0697 0x13b0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
11:01:16.0895 0x13b0 Sidebar - ok
11:01:17.0099 0x13b0 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
11:01:17.0162 0x13b0 mctadmin - ok
11:01:17.0269 0x13b0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
11:01:17.0310 0x13b0 Sidebar - ok
11:01:17.0318 0x13b0 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
11:01:17.0334 0x13b0 mctadmin - ok
11:01:17.0335 0x13b0 Waiting for KSN requests completion. In queue: 6
11:01:18.0335 0x13b0 Waiting for KSN requests completion. In queue: 5
11:01:19.0335 0x13b0 Waiting for KSN requests completion. In queue: 5
11:01:20.0412 0x13b0 AV detected via SS2: avast! Antivirus, C:\Program Files\Alwil Software\Avast5\VisthAux.exe ( 10.2.2215.880 ), 0x41000 ( enabled : updated )
11:01:20.0415 0x13b0 Win FW state via NFP2: enabled
11:01:34.0772 0x13b0 ============================================================
11:01:34.0772 0x13b0 Scan finished
11:01:34.0772 0x13b0 ============================================================
11:01:34.0792 0x13b4 Detected object count: 1
11:01:34.0792 0x13b4 Actual detected object count: 1
11:01:53.0006 0x13b4 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
11:01:53.0006 0x13b4 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:03:07.0112 0x0e04 Deinitialize success
Jetzt bleibt der PC ständig hängen und das Bild verzerrt sich total. Beim hochladen bleibt er jetzt auch ständich beim Windows lädt Bildschirm hängen, auch nach ner halben stunde tut sich nix. Auch die Windows Starthilfe bleibt immer hängen. Nach ein paarmal an und ausschalten lädt er erst wieder normal. Ist das vielleicht doch eher ein technisches Problem als ein Virus? |
|
07.04.2015, 17:49
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7 sehr langsam und stürzt ständig ab Poste mal bitte ein frisches FRST log, dann wechseln wir auch gleich parallel zu den Hardware-Checks.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.04.2015, 19:37
| #5 |
| | Windows 7 sehr langsam und stürzt ständig ab FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Altan (administrator) on ALTAN-PC on 07-04-2015 20:35:55
Running from C:\Users\Altan\Desktop
Loaded Profiles: Altan (Available profiles: Altan)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [UVS10 Preload] => C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2006-08-10] (Ulead Systems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5512912 2015-04-06] (Avast Software s.r.o.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\...\MountPoints2: {0f4dd270-d496-11e0-a230-40618699f324} - J:\Install.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM -> {8A96AF9E-4074-43b7-BEA3-87217BDA7406} URL = hxxp://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com/?a=drive&s={searchTerms}&f=4
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=109217&tt=090812_clr_3212_6&babsrc=SP_ss&mntrId=4a425ad70000000000001c4bd63faac8
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {6E1E4CF4-1EB3-42B9-A059-7BDE6C20EFFF} URL = hxxp://websearch.search-results.com/redirect?client=ie&tb=STC-SRS&o=41648033&src=crm&q={searchTerms}&locale=&apn_ptnrs=96&apn_dtid=YYYYYYYYDE&apn_uid=3832B3FE-B6DD-4B5A-9731-FED045544C9F&apn_sauid=CAEF644C-804C-4374-9C1E-3F75E987C5A5
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {8A96AF9E-4074-43b7-BEA3-87217BDA7406} URL = hxxp://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {D195FBBF-D679-4040-BAB0-BB5D9C60A182} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-06] (Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-04-06] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Altan\AppData\Roaming\Mozilla\Firefox\Profiles\tjj26bf8.default
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-06] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3264414195-358430586-3417125571-1001: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-12-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-12-17] (Apple Inc.)
FF Extension: ScanQuery - C:\Program Files\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64} [2011-04-28]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-18]
FF HKLM\...\Firefox\Extensions: [ClickPotatoLite@ClickPotatoLite.com] - C:\Program Files\ClickPotatoLite\bin\10.0.668.0\firefox\extensions
FF HKLM\...\Firefox\Extensions: [support@vdownloader.com] - C:\Program Files\VDownloader\Addons\FireFox
Chrome:
=======
CHR Profile: C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-06]
CHR Extension: (uTorrentBar_DE) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc [2015-04-07]
CHR Extension: (Google Wallet) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-06]
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-06]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-04-06]
CHR HKLM\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Altan\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2012-06-30]
CHR HKLM\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files\1ClickDownload\oneclickdownloader11.crx [Not Found]
CHR HKU\S-1-5-21-3264414195-358430586-3417125571-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [leocdeigfnkaojcapikdjcdbedcjmffc] - C:\Users\Altan\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx [2012-06-30]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-17] (Advanced Micro Devices)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-04-06] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-04-06] (Avast Software)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-06-16] ()
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-29] (Ulead Systems, Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdide; C:\Windows\System32\DRIVERS\amdide.sys [11832 2009-07-07] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-06] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-06] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-06] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-06] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-06] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-07-22] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-07-22] ()
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-04-07] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-07] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1521544 2010-04-16] (Syntek)
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-04-06] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-07 18:53 - 2015-04-07 19:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 18:41 - 2015-04-07 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-04-07 18:05 - 2015-04-07 18:05 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-04-07 18:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-04-07 17:42 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-04-07 17:42 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-04-07 16:55 - 2015-04-07 16:55 - 00000134 _____ () C:\Users\Altan\Desktop\Internet Explorer Troubleshooting.url
2015-04-07 16:52 - 2015-04-07 16:55 - 00005959 _____ () C:\Windows\IE11_main.log
2015-04-07 16:27 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-07 16:27 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-07 16:27 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-07 16:27 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-07 16:26 - 2015-02-21 07:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-07 16:26 - 2015-02-21 07:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-07 16:26 - 2015-02-21 07:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-07 16:26 - 2015-02-21 07:31 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-07 16:26 - 2015-02-21 07:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-07 16:26 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-07 16:26 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-07 16:26 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-07 16:26 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-07 16:26 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-07 16:26 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-07 16:26 - 2015-02-21 06:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-04-07 16:26 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-04-07 16:26 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-04-07 16:26 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-04-07 16:25 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-04-07 16:25 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-04-07 16:20 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-07 16:19 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-07 16:19 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-04-07 16:19 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-04-07 16:19 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-04-07 16:19 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-04-07 16:19 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-07 16:18 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-04-07 16:17 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-07 16:17 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-07 16:16 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-04-07 16:16 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-07 16:16 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-07 16:16 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-07 16:15 - 2014-11-11 03:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-04-07 16:15 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-07 16:15 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-04-07 16:15 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-07 16:15 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-07 16:14 - 2014-01-01 01:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2015-04-07 16:14 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-04-07 16:14 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-04-07 16:13 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-07 16:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-04-07 16:13 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-04-07 16:13 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-04-07 16:12 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-04-07 16:12 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-04-07 16:11 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-07 16:11 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-07 16:11 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-07 16:11 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-07 16:11 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-04-07 16:11 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-04-07 16:11 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-07 16:11 - 2013-08-29 03:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-07 16:11 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-07 16:11 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-04-07 16:10 - 2014-10-14 03:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-07 16:09 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-07 16:09 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-07 16:09 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-04-07 16:09 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-04-07 16:08 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-07 16:08 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-04-07 16:08 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-04-07 16:08 - 2013-07-03 06:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-04-07 16:06 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-04-07 16:06 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-04-07 15:46 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-07 15:46 - 2014-12-11 19:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-07 15:46 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-07 15:45 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-07 15:45 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-04-07 15:44 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-07 15:43 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-07 15:43 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-07 15:43 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-07 15:43 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-07 15:43 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-07 15:43 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-07 15:43 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-07 15:43 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-07 15:43 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-07 15:43 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-04-07 15:42 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-04-07 15:42 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-04-07 15:42 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-04-07 15:42 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-04-07 15:42 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-04-07 15:41 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-04-07 15:41 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-04-07 15:41 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-04-07 15:41 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-04-07 15:40 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-07 15:40 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-07 15:40 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-07 15:39 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-04-07 15:39 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-07 15:39 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-04-07 15:39 - 2013-07-12 12:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2015-04-07 15:38 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-07 15:38 - 2014-12-19 03:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-07 15:38 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-07 15:38 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-07 15:38 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-04-07 15:38 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-04-07 15:37 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-04-07 15:37 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-07 15:37 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-04-07 15:37 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-04-07 15:37 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-04-07 15:37 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-04-07 15:37 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-04-07 15:37 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-07 15:37 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-04-07 15:37 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-04-07 15:37 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-07 15:37 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-07 15:37 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-07 15:25 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-04-07 15:25 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-04-07 15:25 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-04-07 14:27 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-07 14:27 - 2014-10-14 03:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-07 10:58 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-07 10:58 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-07 10:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-07 10:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-07 10:33 - 2015-04-07 14:39 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-07 10:33 - 2015-04-07 14:33 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-07 10:33 - 2015-04-07 10:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-07 10:31 - 2015-04-07 10:31 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-07 10:31 - 2015-04-07 10:31 - 00000000 ____D () C:\Users\Altan\Desktop\mbar
2015-04-07 10:26 - 2015-04-07 10:26 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Altan\Desktop\mbar-1.09.1.1004.exe
2015-04-07 10:26 - 2015-04-07 10:26 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Altan\Desktop\tdsskiller.exe
2015-04-06 22:40 - 2015-04-06 22:40 - 00009670 _____ () C:\Users\Altan\Desktop\Gmer.txt
2015-04-06 22:08 - 2015-04-07 20:36 - 00018560 _____ () C:\Users\Altan\Desktop\FRST.txt
2015-04-06 22:08 - 2015-04-07 20:35 - 00000000 ____D () C:\FRST
2015-04-06 22:08 - 2015-04-06 22:09 - 00380416 _____ () C:\Users\Altan\Desktop\Gmer-19357.exe
2015-04-06 22:07 - 2015-04-06 22:07 - 00000472 _____ () C:\Users\Altan\Desktop\defogger_disable.log
2015-04-06 22:07 - 2015-04-06 22:07 - 00000000 _____ () C:\Users\Altan\defogger_reenable
2015-04-06 22:06 - 2015-04-06 22:06 - 01135104 _____ (Farbar) C:\Users\Altan\Desktop\FRST.exe
2015-04-06 22:06 - 2015-04-06 22:06 - 00000000 ____D () C:\Users\Altan\Downloads\Neuer Ordner
2015-04-06 22:05 - 2015-04-06 22:05 - 00050477 _____ () C:\Users\Altan\Desktop\Defogger.exe
2015-04-06 21:16 - 2015-04-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-06 21:14 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2015-04-06 21:11 - 2015-04-07 17:34 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-04-06 21:10 - 2015-04-06 21:10 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2015-04-06 21:04 - 2015-04-06 21:04 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2015-04-06 21:01 - 2015-04-07 18:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-06 21:01 - 2015-04-06 21:01 - 00000000 ____D () C:\Users\Altan\AppData\Local\Microsoft Help
2015-04-06 20:59 - 2015-04-06 20:59 - 00000000 __RHD () C:\MSOCache
2015-04-06 18:49 - 2015-04-06 18:50 - 00000000 ____D () C:\Program Files\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00001819 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-04-06 18:33 - 2015-04-06 18:41 - 00000000 ___RD () C:\Users\Altan\Eigene Musik
2015-04-06 18:33 - 2015-04-06 18:33 - 00000000 ___RD () C:\Users\Altan\Eigene Dokumente
2015-04-06 18:22 - 2015-04-06 18:32 - 00000000 ___RD () C:\Users\Altan\Eigene Bilder
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung DG
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3OG.rechts
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3 OG rechts 1
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\vorbereitungen fürs abi
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Universe Sandbox
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Ulead VideoStudio SE
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\studium
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\rezepte
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\OneNote-Notizbücher
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\DVDVideoSoft
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Corel User Files
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Bewerbung Alt4n
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Altan Bewerbung
2015-04-06 18:22 - 2015-04-03 15:46 - 39981374 _____ () C:\Users\Altan\14005_lenord_bauer_imagefilm_2014_Lenord,Bauer.webm
2015-04-06 18:22 - 2014-12-31 13:49 - 00048128 _____ () C:\Users\Altan\Abfallkalender 2014-2.xls
2015-04-06 18:22 - 2014-12-10 20:50 - 00006292 _____ () C:\Users\Altan\Telefunken V 660_1, V 661_1 und V 662_1 Anleitung.htm
2015-04-06 18:22 - 2014-06-15 17:05 - 00043520 _____ () C:\Users\Altan\Abfallkalender 2014.xls
2015-04-06 18:22 - 2013-07-08 17:20 - 02092792 _____ () C:\Users\Altan\avira_free_antivirus.exe
2015-04-06 18:22 - 2013-06-26 09:24 - 00039936 _____ () C:\Users\Altan\Abfallkalender 2012-2.xls
2015-04-06 18:22 - 2013-05-18 11:26 - 00002148 _____ () C:\Users\Altan\zivtserv.rdp
2015-04-06 18:22 - 2011-12-27 15:24 - 00024576 _____ () C:\Users\Altan\Abfallkalender 2012.xls
2015-04-06 18:22 - 2011-06-19 20:58 - 00024576 _____ () C:\Users\Altan\Kalender1.2010.xls
2015-04-06 18:22 - 2010-11-24 22:32 - 00011811 _____ () C:\Users\Altan\Skoda Octavia.wpd
2015-04-06 18:22 - 2010-06-20 10:36 - 00014336 _____ () C:\Users\Altan\Mappe1.xls
2015-04-06 18:22 - 2010-01-31 20:17 - 02551089 _____ () C:\Users\Altan\LebenslaufPers.wpd
2015-04-06 18:22 - 2009-12-26 13:43 - 00023040 _____ () C:\Users\Altan\Kalender.xls
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner2
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\NeroVision
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 __RSD () C:\Users\Altan\My Stationery
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\My Digital Editions
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\kleider
2015-04-06 18:20 - 2015-04-06 17:16 - 00000000 ____D () C:\Users\Altan\My Art
2015-04-06 18:19 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\Iris Kamera
2015-04-06 18:19 - 2015-04-06 18:19 - 00000000 ____D () C:\Users\Altan\gegl-0.0
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-04-06 18:02 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Wohnung 3OG. rechts
2015-04-06 18:01 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Neuer Ordner
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Canan´s Fotos
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Bafög
2015-04-06 17:57 - 2015-04-06 17:57 - 00000000 ____D () C:\Users\Altan\Documents\Ulead VideoStudio SE
2015-04-06 15:42 - 2015-04-06 15:45 - 00000000 ____D () C:\Windows\system32\vbox
2015-04-06 15:38 - 2015-04-06 15:38 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\AVAST Software
2015-04-06 15:33 - 2015-04-06 15:33 - 00002018 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-06 15:31 - 2015-04-06 15:25 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-06 15:31 - 2015-04-06 15:24 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-04-06 15:31 - 2015-04-06 15:24 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-04-06 15:31 - 2013-08-20 11:15 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-04-06 15:31 - 2013-08-20 11:15 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-04-06 15:30 - 2015-04-06 15:30 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-06 15:30 - 2015-04-06 15:28 - 00106912 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-06 15:30 - 2015-04-06 15:28 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-06 15:29 - 2015-04-06 15:28 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-06 15:28 - 2015-04-06 15:28 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-06 15:25 - 2015-04-06 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-06 15:24 - 2015-04-06 15:33 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-06 15:23 - 2015-04-06 15:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-06 15:22 - 2015-04-06 15:28 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-06 15:22 - 2015-04-06 15:28 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-06 14:21 - 2015-04-06 14:21 - 06103040 _____ () C:\Program Files\GUTB606.tmp
2015-04-06 14:21 - 2015-04-06 14:21 - 00000000 ____D () C:\Program Files\GUMB5F6.tmp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-07 20:31 - 2010-11-14 19:07 - 02052784 _____ () C:\Windows\WindowsUpdate.log
2015-04-07 20:27 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-07 20:27 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-07 20:21 - 2010-08-30 16:48 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-07 20:21 - 2010-07-22 19:43 - 00008224 _____ () C:\Users\Altan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-07 20:20 - 2012-03-31 10:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-07 20:19 - 2010-08-30 16:48 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-07 20:16 - 2013-03-21 21:13 - 00009138 _____ () C:\Windows\setupact.log
2015-04-07 20:16 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-07 20:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-04-07 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-07 19:12 - 2010-05-26 08:00 - 01614036 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-07 19:04 - 2009-07-14 06:33 - 00454160 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-07 19:03 - 2013-03-25 11:06 - 00199506 _____ () C:\Windows\PFRO.log
2015-04-07 19:03 - 2010-05-26 10:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-07 18:54 - 2009-07-14 09:49 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-07 18:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-07 18:41 - 2011-05-26 17:27 - 00000000 ____D () C:\Program Files\Microsoft Application Virtualization Client
2015-04-07 18:30 - 2013-08-17 16:41 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-07 17:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-07 17:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-07 17:32 - 2009-07-14 04:04 - 00000499 _____ () C:\Windows\win.ini
2015-04-07 17:28 - 2010-05-26 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-07 14:27 - 2012-06-13 18:13 - 00000000 ____D () C:\Users\Altan\.nbi
2015-04-07 14:23 - 2010-07-28 18:36 - 00000000 ____D () C:\ProgramData\Sun
2015-04-07 14:20 - 2010-07-28 18:23 - 00000000 ____D () C:\Program Files\Java
2015-04-07 09:18 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-06 22:07 - 2010-07-22 19:39 - 00000000 ____D () C:\Users\Altan
2015-04-06 22:06 - 2010-07-26 22:38 - 00000000 ____D () C:\Users\Altan\AppData\Local\Mozilla
2015-04-06 21:47 - 2010-11-19 12:45 - 00000000 ____D () C:\Windows\Minidump
2015-04-06 21:45 - 2013-08-19 19:14 - 322491273 _____ () C:\Windows\MEMORY.DMP
2015-04-06 21:11 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2015-04-06 21:10 - 2010-05-26 10:57 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-04-06 21:10 - 2009-07-14 09:48 - 00000000 ____D () C:\Windows\ShellNew
2015-04-06 21:08 - 2010-09-14 12:54 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-04-06 20:56 - 2011-02-24 20:54 - 00267776 ___SH () C:\Users\Altan\Thumbs.db
2015-04-06 20:53 - 2010-08-30 16:48 - 00000000 ____D () C:\Users\Altan\AppData\Local\Google
2015-04-06 19:50 - 2011-03-12 11:53 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-06 18:25 - 2012-03-31 10:49 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-06 18:25 - 2011-05-20 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-06 18:18 - 2013-08-19 19:22 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-06 18:11 - 2010-07-22 20:52 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\Adobe
2015-04-06 18:11 - 2010-05-26 10:52 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-04-06 18:11 - 2010-05-26 10:51 - 00000000 ____D () C:\Program Files\Adobe
2015-04-06 18:10 - 2010-08-23 18:28 - 00000000 ____D () C:\Users\Altan\AppData\Local\Adobe
2015-04-06 15:28 - 2012-06-01 20:29 - 00081728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-06 15:27 - 2011-04-18 21:07 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-06 15:24 - 2013-08-20 11:15 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-04-06 15:22 - 2010-05-26 10:22 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-04-06 15:22 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2015-04-06 15:21 - 2010-05-26 10:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
==================== Files in the root of some directories =======
2015-04-06 14:21 - 2015-04-06 14:21 - 6103040 _____ () C:\Program Files\GUTB606.tmp
2011-07-13 15:57 - 2011-07-13 15:57 - 0138056 _____ () C:\Users\Altan\AppData\Roaming\PnkBstrK.sys
2011-07-16 21:19 - 2011-07-16 21:19 - 0000022 ___SH () C:\Users\Altan\AppData\Roaming\Sys2662.Config.Repository.bin
2011-09-09 16:30 - 2012-05-26 22:02 - 0077824 _____ () C:\Users\Altan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-11-01 19:07 - 2010-11-01 19:07 - 0007597 _____ () C:\Users\Altan\AppData\Local\Resmon.ResmonCfg
2011-11-02 21:07 - 2011-11-02 21:07 - 0000000 _____ () C:\Users\Altan\AppData\Local\{A4D1F345-121F-4A33-AA27-83EC8C707EF1}
2011-09-09 16:28 - 2011-09-09 16:28 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Files to move or delete:
====================
C:\Users\Altan\avira_free_antivirus.exe
Some content of TEMP:
====================
C:\Users\Altan\AppData\Local\Temp\CheatEngine63Clean.exe
C:\Users\Altan\AppData\Local\Temp\DeltaTB.exe
C:\Users\Altan\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Altan\AppData\Local\Temp\pricepeep_130001_0101.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
|
|
08.04.2015, 11:01
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7 sehr langsam und stürzt ständig ab Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7 sehr langsam und stürzt ständig ab |
|
08.04.2015, 12:41
| #7 |
| | Windows 7 sehr langsam und stürzt ständig ab Ich hab jetzt schon 3 mal versucht mit mbam zu scannen. Ständig werden mir Fehlermeldungen angezeigt, avast deaktiviert sich von selbst, der explorer stürzt ab oder der pc lädt einfach runter. Soll ich das erstmal auslassen? Ah hat doch noch geklappt, hab die Fehlermeldungen einfach ignoriert. Malwarebytes hat 511 bedrohungen gefunden. mbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Update, 08.04.2015 12:33:20, SYSTEM, ALTAN-PC, Manual, Remediation Database, 2015.3.9.1, 2015.4.6.2, Update, 08.04.2015 12:33:20, SYSTEM, ALTAN-PC, Manual, Rootkit Database, 2015.2.25.1, 2015.3.31.1, Update, 08.04.2015 12:33:26, SYSTEM, ALTAN-PC, Manual, Malware Database, 2015.3.9.5, 2015.4.8.2, Error, 08.04.2015 12:53:22, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 12:53:22, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 12:53:22, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Error, 08.04.2015 13:02:18, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:02:18, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:02:18, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Error, 08.04.2015 13:09:57, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:09:57, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:09:57, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Error, 08.04.2015 13:18:02, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:18:02, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:18:02, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Update, 08.04.2015 13:24:04, SYSTEM, ALTAN-PC, Manual, Malware Database, 2015.4.8.2, 2015.4.8.3, Error, 08.04.2015 13:29:56, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:29:56, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:29:56, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Update, 08.04.2015 13:32:06, SYSTEM, ALTAN-PC, Manual, Failed, Unable to access update server, Error, 08.04.2015 13:40:04, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:40:04, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:40:04, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, Update, 08.04.2015 13:42:59, SYSTEM, ALTAN-PC, Manual, Failed, Unable to access update server, Scan, 08.04.2015 13:57:36, SYSTEM, ALTAN-PC, Manual, Start: 08.04.2015 13:43:04, Dauer: 13 Minuten 12 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 45 Malwareerkennung, "466" nicht-Malwareerkennung, Error, 08.04.2015 13:59:52, SYSTEM, ALTAN-PC, Protection, IsLicensed, 13, Protection, 08.04.2015 13:59:52, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopping, Protection, 08.04.2015 13:59:52, SYSTEM, ALTAN-PC, Protection, Malware Protection, Stopped, (end) AdwCleaner Code:
ATTFilter # AdwCleaner v4.201 - Bericht erstellt 08/04/2015 um 14:05:16
# Aktualisiert 08/04/2015 von Xplode
# Datenbank : 2015-04-08.1 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x86)
# Benutzername : Altan - ALTAN-PC
# Gestarted von : C:\Users\Altan\Desktop\AdwCleaner_4.201.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files\1ClickDownload
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Program Files\Iminent
Ordner Gelöscht : C:\Users\Altan\AppData\Local\apn
Ordner Gelöscht : C:\Users\Altan\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Altan\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\Altan\AppData\Local\OpenCandy
Ordner Gelöscht : C:\Users\Altan\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Altan\AppData\LocalLow\Conduit
Datei Gelöscht : C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2851647
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6E1E4CF4-1EB3-42B9-A059-7BDE6C20EFFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\AutocompleteProBHO
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Cheat Engine\OpenCandy
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17689
-\\ Mozilla Firefox v37.0.1 (x86 de)
-\\ Google Chrome v41.0.2272.118
[C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://start.facemoods.com/?a=drive&s={searchTerms}&f=4
[C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&appid=161&systemid=406&sr=0&q={searchTerms}
[C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.claro-search.com/?q={searchTerms}&affID=109217&tt=090812_clr_3212_6&babsrc=SP_ss&mntrId=4a425ad70000000000001c4bd63faac8
[C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
[C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : leocdeigfnkaojcapikdjcdbedcjmffc
*************************
AdwCleaner[R0].txt - [6008 Bytes] - [08/04/2015 14:03:47]
AdwCleaner[S0].txt - [5928 Bytes] - [08/04/2015 14:05:16]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5987 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.3 (04.07.2015:1)
OS: Windows 7 Home Premium x86
Ran by Altan on 08.04.2015 at 14:10:23,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
~~~ Files
Successfully deleted: [File] "C:\Users\Altan\appdata\local\google\chrome\user data\default\local storage\http_sb.scorecardresearch.com_0.localstorage-journal"
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\AlawarWrapper
Successfully deleted: [Folder] "C:\Users\Altan\AppData\Roaming\getrighttogo"
~~~ FireFox
Successfully deleted: [File] C:\user.js
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2015 at 14:12:57,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Altan (administrator) on ALTAN-PC on 08-04-2015 14:13:43
Running from C:\Users\Altan\Desktop
Loaded Profiles: Altan (Available profiles: Altan)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [UVS10 Preload] => C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2006-08-10] (Ulead Systems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5512912 2015-04-06] (Avast Software s.r.o.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\...\MountPoints2: {0f4dd270-d496-11e0-a230-40618699f324} - J:\Install.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {D195FBBF-D679-4040-BAB0-BB5D9C60A182} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-06] (Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-04-06] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Altan\AppData\Roaming\Mozilla\Firefox\Profiles\tjj26bf8.default
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-06] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3264414195-358430586-3417125571-1001: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-12-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-12-17] (Apple Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-18]
FF HKLM\...\Firefox\Extensions: [support@vdownloader.com] - C:\Program Files\VDownloader\Addons\FireFox
Chrome:
=======
CHR Profile: C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-06]
CHR Extension: (Google Wallet) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-06]
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-04-06]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-17] (Advanced Micro Devices)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-04-06] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-04-06] (Avast Software)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-06-16] ()
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-29] (Ulead Systems, Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdide; C:\Windows\System32\DRIVERS\amdide.sys [11832 2009-07-07] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-06] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-06] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-06] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-06] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-06] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-07-22] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-07-22] ()
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-03-17] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1521544 2010-04-16] (Syntek)
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-04-06] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-08 14:13 - 2015-04-08 14:14 - 00014966 _____ () C:\Users\Altan\Desktop\FRST.txt
2015-04-08 14:12 - 2015-04-08 14:12 - 00001283 _____ () C:\Users\Altan\Desktop\JRT.txt
2015-04-08 14:10 - 2015-04-08 14:10 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ALTAN-PC-Windows-7-Home-Premium-(32-bit).dat
2015-04-08 14:10 - 2015-04-08 14:10 - 00000000 ____D () C:\RegBackup
2015-04-08 14:08 - 2015-04-08 14:08 - 00006067 _____ () C:\Users\Altan\Desktop\AdwCleaner[S0].txt
2015-04-08 14:03 - 2015-04-08 14:05 - 00000000 ____D () C:\AdwCleaner
2015-04-08 14:03 - 2015-04-08 14:03 - 00002712 _____ () C:\Users\Altan\Desktop\mbam.txt
2015-04-08 13:07 - 2015-04-08 13:08 - 00155270 _____ () C:\unp304378681092812524.mdmp
2015-04-08 12:39 - 2015-04-08 12:39 - 00198682 _____ () C:\unp304378641420754480.mdmp
2015-04-08 12:36 - 2015-04-08 12:36 - 00200854 _____ () C:\unp304378633467259550.mdmp
2015-04-08 12:32 - 2015-04-08 12:32 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-08 12:32 - 2015-04-08 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-04-08 12:32 - 2015-04-08 12:32 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-04-08 12:32 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-08 12:32 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-08 12:31 - 2015-04-08 12:31 - 02686959 _____ (Thisisu) C:\Users\Altan\Desktop\JRT.exe
2015-04-08 12:31 - 2015-04-08 12:31 - 02217984 _____ () C:\Users\Altan\Desktop\AdwCleaner_4.201.exe
2015-04-08 12:29 - 2015-04-08 12:30 - 00198848 _____ () C:\unp304378623601758035.mdmp
2015-04-08 12:27 - 2015-04-08 12:27 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Altan\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-07 21:10 - 2015-01-09 01:44 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-04-07 21:04 - 2015-04-07 21:04 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-07 21:04 - 2015-04-07 21:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-07 21:04 - 2015-04-07 21:04 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-04-07 21:04 - 2015-04-07 21:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-07 21:04 - 2015-04-07 21:04 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-04-07 21:04 - 2015-04-07 21:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-07 18:53 - 2015-04-07 19:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 18:41 - 2015-04-07 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-04-07 18:05 - 2015-04-07 18:05 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-04-07 18:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-04-07 17:42 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-04-07 17:42 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-04-07 16:55 - 2015-04-07 16:55 - 00000134 _____ () C:\Users\Altan\Desktop\Internet Explorer Troubleshooting.url
2015-04-07 16:52 - 2015-04-07 21:09 - 00016381 _____ () C:\Windows\IE11_main.log
2015-04-07 16:27 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-07 16:27 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-07 16:27 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-07 16:27 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-07 16:26 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-04-07 16:26 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-04-07 16:26 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-04-07 16:25 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-04-07 16:25 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-04-07 16:20 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-07 16:19 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-07 16:19 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-04-07 16:19 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-04-07 16:19 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-04-07 16:19 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-04-07 16:19 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-07 16:18 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-04-07 16:17 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-07 16:17 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-07 16:16 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-04-07 16:16 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-07 16:16 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-07 16:16 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-07 16:15 - 2014-11-11 03:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-04-07 16:15 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-07 16:15 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-04-07 16:15 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-07 16:15 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-07 16:14 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-04-07 16:14 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-04-07 16:13 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-07 16:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-04-07 16:13 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-04-07 16:13 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-04-07 16:12 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-04-07 16:12 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-04-07 16:11 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-07 16:11 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-07 16:11 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-07 16:11 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-07 16:11 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-04-07 16:11 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-04-07 16:11 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-07 16:11 - 2013-08-29 03:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-07 16:11 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-07 16:11 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-04-07 16:10 - 2014-10-14 03:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-07 16:09 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-07 16:09 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-07 16:09 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-04-07 16:09 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-04-07 16:08 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-07 16:08 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-04-07 16:08 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-04-07 16:08 - 2013-07-03 06:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-04-07 16:06 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-04-07 16:06 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-04-07 15:46 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-07 15:46 - 2014-12-11 19:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-07 15:46 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-07 15:45 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-07 15:45 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-04-07 15:44 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-07 15:43 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-07 15:43 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-07 15:43 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-07 15:43 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-07 15:43 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-07 15:43 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-07 15:43 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-07 15:43 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-07 15:43 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-07 15:43 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-04-07 15:42 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-04-07 15:42 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-04-07 15:42 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-04-07 15:42 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-04-07 15:42 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-04-07 15:41 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-04-07 15:41 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-04-07 15:41 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-04-07 15:41 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-04-07 15:40 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-07 15:40 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-07 15:40 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-07 15:39 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-04-07 15:39 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-07 15:39 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-04-07 15:39 - 2013-07-12 12:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2015-04-07 15:38 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-07 15:38 - 2014-12-19 03:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-07 15:38 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-07 15:38 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-07 15:38 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-04-07 15:38 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-04-07 15:37 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-04-07 15:37 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-07 15:37 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-04-07 15:37 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-04-07 15:37 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-04-07 15:37 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-04-07 15:37 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-04-07 15:37 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-07 15:37 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-04-07 15:37 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-04-07 15:37 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-07 15:37 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-07 15:37 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-07 15:25 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-04-07 15:25 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-04-07 15:25 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-04-07 14:27 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-07 14:27 - 2014-10-14 03:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-07 10:58 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-07 10:58 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-07 10:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-07 10:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-07 10:33 - 2015-04-08 14:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-07 10:33 - 2015-04-08 14:01 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-07 10:33 - 2015-04-08 12:32 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-07 10:31 - 2015-04-07 10:31 - 00000000 ____D () C:\Users\Altan\Desktop\mbar
2015-04-07 10:31 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-07 10:26 - 2015-04-07 10:26 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Altan\Desktop\mbar-1.09.1.1004.exe
2015-04-07 10:26 - 2015-04-07 10:26 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Altan\Desktop\tdsskiller.exe
2015-04-06 22:40 - 2015-04-06 22:40 - 00009670 _____ () C:\Users\Altan\Desktop\Gmer.txt
2015-04-06 22:08 - 2015-04-08 14:13 - 00000000 ____D () C:\FRST
2015-04-06 22:08 - 2015-04-06 22:09 - 00380416 _____ () C:\Users\Altan\Desktop\Gmer-19357.exe
2015-04-06 22:07 - 2015-04-06 22:07 - 00000472 _____ () C:\Users\Altan\Desktop\defogger_disable.log
2015-04-06 22:07 - 2015-04-06 22:07 - 00000000 _____ () C:\Users\Altan\defogger_reenable
2015-04-06 22:06 - 2015-04-06 22:06 - 01135104 _____ (Farbar) C:\Users\Altan\Desktop\FRST.exe
2015-04-06 22:06 - 2015-04-06 22:06 - 00000000 ____D () C:\Users\Altan\Downloads\Neuer Ordner
2015-04-06 22:05 - 2015-04-06 22:05 - 00050477 _____ () C:\Users\Altan\Desktop\Defogger.exe
2015-04-06 21:16 - 2015-04-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-06 21:14 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2015-04-06 21:11 - 2015-04-07 17:34 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-04-06 21:10 - 2015-04-06 21:10 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2015-04-06 21:04 - 2015-04-06 21:04 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2015-04-06 21:01 - 2015-04-07 18:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-06 21:01 - 2015-04-06 21:01 - 00000000 ____D () C:\Users\Altan\AppData\Local\Microsoft Help
2015-04-06 20:59 - 2015-04-06 20:59 - 00000000 __RHD () C:\MSOCache
2015-04-06 18:49 - 2015-04-06 18:50 - 00000000 ____D () C:\Program Files\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00001819 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-04-06 18:33 - 2015-04-06 18:41 - 00000000 ___RD () C:\Users\Altan\Eigene Musik
2015-04-06 18:33 - 2015-04-06 18:33 - 00000000 ___RD () C:\Users\Altan\Eigene Dokumente
2015-04-06 18:22 - 2015-04-06 18:32 - 00000000 ___RD () C:\Users\Altan\Eigene Bilder
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung DG
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3OG.rechts
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3 OG rechts 1
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\vorbereitungen fürs abi
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Universe Sandbox
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Ulead VideoStudio SE
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\studium
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\rezepte
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\OneNote-Notizbücher
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\DVDVideoSoft
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Corel User Files
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Bewerbung Alt4n
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Altan Bewerbung
2015-04-06 18:22 - 2015-04-03 15:46 - 39981374 _____ () C:\Users\Altan\14005_lenord_bauer_imagefilm_2014_Lenord,Bauer.webm
2015-04-06 18:22 - 2014-12-31 13:49 - 00048128 _____ () C:\Users\Altan\Abfallkalender 2014-2.xls
2015-04-06 18:22 - 2014-12-10 20:50 - 00006292 _____ () C:\Users\Altan\Telefunken V 660_1, V 661_1 und V 662_1 Anleitung.htm
2015-04-06 18:22 - 2014-06-15 17:05 - 00043520 _____ () C:\Users\Altan\Abfallkalender 2014.xls
2015-04-06 18:22 - 2013-07-08 17:20 - 02092792 _____ () C:\Users\Altan\avira_free_antivirus.exe
2015-04-06 18:22 - 2013-06-26 09:24 - 00039936 _____ () C:\Users\Altan\Abfallkalender 2012-2.xls
2015-04-06 18:22 - 2013-05-18 11:26 - 00002148 _____ () C:\Users\Altan\zivtserv.rdp
2015-04-06 18:22 - 2011-12-27 15:24 - 00024576 _____ () C:\Users\Altan\Abfallkalender 2012.xls
2015-04-06 18:22 - 2011-06-19 20:58 - 00024576 _____ () C:\Users\Altan\Kalender1.2010.xls
2015-04-06 18:22 - 2010-11-24 22:32 - 00011811 _____ () C:\Users\Altan\Skoda Octavia.wpd
2015-04-06 18:22 - 2010-06-20 10:36 - 00014336 _____ () C:\Users\Altan\Mappe1.xls
2015-04-06 18:22 - 2010-01-31 20:17 - 02551089 _____ () C:\Users\Altan\LebenslaufPers.wpd
2015-04-06 18:22 - 2009-12-26 13:43 - 00023040 _____ () C:\Users\Altan\Kalender.xls
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner2
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\NeroVision
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 __RSD () C:\Users\Altan\My Stationery
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\My Digital Editions
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\kleider
2015-04-06 18:20 - 2015-04-06 17:16 - 00000000 ____D () C:\Users\Altan\My Art
2015-04-06 18:19 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\Iris Kamera
2015-04-06 18:19 - 2015-04-06 18:19 - 00000000 ____D () C:\Users\Altan\gegl-0.0
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-04-06 18:02 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Wohnung 3OG. rechts
2015-04-06 18:01 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Neuer Ordner
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Canan´s Fotos
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Bafög
2015-04-06 17:57 - 2015-04-06 17:57 - 00000000 ____D () C:\Users\Altan\Documents\Ulead VideoStudio SE
2015-04-06 15:42 - 2015-04-06 15:45 - 00000000 ____D () C:\Windows\system32\vbox
2015-04-06 15:38 - 2015-04-06 15:38 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\AVAST Software
2015-04-06 15:33 - 2015-04-06 15:33 - 00002018 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-06 15:31 - 2015-04-06 15:25 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-06 15:31 - 2015-04-06 15:24 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-04-06 15:31 - 2015-04-06 15:24 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-04-06 15:31 - 2013-08-20 11:15 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-04-06 15:31 - 2013-08-20 11:15 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-04-06 15:30 - 2015-04-06 15:30 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-06 15:30 - 2015-04-06 15:28 - 00106912 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-06 15:30 - 2015-04-06 15:28 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-06 15:29 - 2015-04-06 15:28 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-06 15:28 - 2015-04-06 15:28 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-06 15:25 - 2015-04-06 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-06 15:24 - 2015-04-06 15:33 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-06 15:23 - 2015-04-06 15:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-06 15:22 - 2015-04-06 15:28 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-06 15:22 - 2015-04-06 15:28 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-06 14:21 - 2015-04-06 14:21 - 06103040 _____ () C:\Program Files\GUTB606.tmp
2015-04-06 14:21 - 2015-04-06 14:21 - 00000000 ____D () C:\Program Files\GUMB5F6.tmp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-08 14:12 - 2010-11-14 19:07 - 01670708 _____ () C:\Windows\WindowsUpdate.log
2015-04-08 14:08 - 2010-08-30 16:48 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-08 14:07 - 2013-03-25 11:06 - 00386750 _____ () C:\Windows\PFRO.log
2015-04-08 14:07 - 2013-03-21 21:13 - 00009810 _____ () C:\Windows\setupact.log
2015-04-08 14:07 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-08 14:05 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-08 14:05 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-08 13:21 - 2010-08-30 16:48 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-08 13:20 - 2012-03-31 10:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-08 13:07 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-08 13:01 - 2010-11-19 12:45 - 00000000 ____D () C:\Windows\Minidump
2015-04-08 13:00 - 2013-08-19 19:14 - 422924681 _____ () C:\Windows\MEMORY.DMP
2015-04-08 12:56 - 2010-07-22 19:43 - 00127048 _____ () C:\Users\Altan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-07 21:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-07 20:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-04-07 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-07 19:12 - 2010-05-26 08:00 - 01614036 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-07 19:04 - 2009-07-14 06:33 - 00454160 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-07 19:03 - 2010-05-26 10:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-07 18:54 - 2009-07-14 09:49 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-07 18:41 - 2011-05-26 17:27 - 00000000 ____D () C:\Program Files\Microsoft Application Virtualization Client
2015-04-07 18:30 - 2013-08-17 16:41 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-07 17:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-07 17:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-07 17:32 - 2009-07-14 04:04 - 00000499 _____ () C:\Windows\win.ini
2015-04-07 17:28 - 2010-05-26 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-07 14:27 - 2012-06-13 18:13 - 00000000 ____D () C:\Users\Altan\.nbi
2015-04-07 14:23 - 2010-07-28 18:36 - 00000000 ____D () C:\ProgramData\Sun
2015-04-07 14:20 - 2010-07-28 18:23 - 00000000 ____D () C:\Program Files\Java
2015-04-06 22:07 - 2010-07-22 19:39 - 00000000 ____D () C:\Users\Altan
2015-04-06 22:06 - 2010-07-26 22:38 - 00000000 ____D () C:\Users\Altan\AppData\Local\Mozilla
2015-04-06 21:11 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2015-04-06 21:10 - 2010-05-26 10:57 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-04-06 21:10 - 2009-07-14 09:48 - 00000000 ____D () C:\Windows\ShellNew
2015-04-06 21:08 - 2010-09-14 12:54 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-04-06 20:56 - 2011-02-24 20:54 - 00267776 ___SH () C:\Users\Altan\Thumbs.db
2015-04-06 20:53 - 2010-08-30 16:48 - 00000000 ____D () C:\Users\Altan\AppData\Local\Google
2015-04-06 19:50 - 2011-03-12 11:53 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-06 18:25 - 2012-03-31 10:49 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-06 18:25 - 2011-05-20 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-06 18:18 - 2013-08-19 19:22 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-06 18:11 - 2010-07-22 20:52 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\Adobe
2015-04-06 18:11 - 2010-05-26 10:52 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-04-06 18:11 - 2010-05-26 10:51 - 00000000 ____D () C:\Program Files\Adobe
2015-04-06 18:10 - 2010-08-23 18:28 - 00000000 ____D () C:\Users\Altan\AppData\Local\Adobe
2015-04-06 15:28 - 2012-06-01 20:29 - 00081728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-06 15:27 - 2011-04-18 21:07 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-06 15:24 - 2013-08-20 11:15 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-04-06 15:22 - 2010-05-26 10:22 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-04-06 15:22 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2015-04-06 15:21 - 2010-05-26 10:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
==================== Files in the root of some directories =======
2015-04-06 14:21 - 2015-04-06 14:21 - 6103040 _____ () C:\Program Files\GUTB606.tmp
2011-07-13 15:57 - 2011-07-13 15:57 - 0138056 _____ () C:\Users\Altan\AppData\Roaming\PnkBstrK.sys
2011-07-16 21:19 - 2011-07-16 21:19 - 0000022 ___SH () C:\Users\Altan\AppData\Roaming\Sys2662.Config.Repository.bin
2011-09-09 16:30 - 2012-05-26 22:02 - 0077824 _____ () C:\Users\Altan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-11-01 19:07 - 2010-11-01 19:07 - 0007597 _____ () C:\Users\Altan\AppData\Local\Resmon.ResmonCfg
2011-11-02 21:07 - 2011-11-02 21:07 - 0000000 _____ () C:\Users\Altan\AppData\Local\{A4D1F345-121F-4A33-AA27-83EC8C707EF1}
2011-09-09 16:28 - 2011-09-09 16:28 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Files to move or delete:
====================
C:\Users\Altan\avira_free_antivirus.exe
Some content of TEMP:
====================
C:\Users\Altan\AppData\Local\Temp\CheatEngine63Clean.exe
C:\Users\Altan\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Altan\AppData\Local\Temp\Quarantine.exe
C:\Users\Altan\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-01-18 18:07
==================== End Of Log ============================
--- --- --- Geändert von Jabba131 (08.04.2015 um 13:19 Uhr) |
|
08.04.2015, 18:42
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7 sehr langsam und stürzt ständig abESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.04.2015, 23:29
| #9 |
| | Windows 7 sehr langsam und stürzt ständig ab Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=74a36839112ea9449cb36a52c9d97fb9
# engine=23289
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-04-08 09:08:25
# local_time=2015-04-08 11:08:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 33398 180158496 0 0
# scanned=258076
# found=11
# cleaned=0
# scan_time=9055
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"
sh=DD3E89FA9DA2FC16CC562A20469CE8D19E590F46 ft=1 fh=16fc1eedb3addde1 vn="Variante von Win32/Toolbar.Iminent.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Iminent\IMBooster\inst\Bootstrapper\Bootstrapper.exe.vir"
sh=4D1C2C7492C0440E48AE0FDBB063D3B8EF56833B ft=0 fh=0000000000000000 vn="Variante von Win32/SlowPCfighter evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\ReviverSoft\RegistryReviver\InstallCache\{E31E4E05-4B6B-42A5-8623-EB530F8147F5}\RegistryReviver.msi"
sh=4D1C2C7492C0440E48AE0FDBB063D3B8EF56833B ft=0 fh=0000000000000000 vn="Variante von Win32/SlowPCfighter evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\ReviverSoft\RegistryReviver\InstallCache\{E31E4E05-4B6B-42A5-8623-EB530F8147F5}\RegistryReviver.msi"
sh=8B5E571DB7D7BAC4CB681C5F85CB81510F95FDD5 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.OneStep.Z Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7VW6J7UR\upgrade[1].cab"
sh=CFA2C2DECC440D8F27DAA2FA0E3C1CC09EECD6B3 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.OneStep.Z Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J1KQIRYY\upgrade[1].cab"
sh=ED260E3CDC8FA15BB49AB029FE4B40A6AC4200B7 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.OneStep.Z Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q17W8WRZ\upgrade[1].cab"
sh=EA860A4CA8B9E75B66DD5F6618082CB10B429EF7 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.OneStep.AA Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q17W8WRZ\upgrade[2].cab"
sh=8D84BE6BCEAE306EBC2F252998A362AA5E55A38A ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.OneStep.Z Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S4U8ODCS\upgrade[1].cab"
sh=259B1375ED8E84943CA1D42646BB416325C89E12 ft=0 fh=0000000000000000 vn="Win32/Adware.Virtumonde Anwendung" ac=I fn="D:\Esref\Lokale Einstellungen\Temp\removalfile.bat"
sh=259B1375ED8E84943CA1D42646BB416325C89E12 ft=0 fh=0000000000000000 vn="Win32/Adware.Virtumonde Anwendung" ac=I fn="K:\Computer\Datenträger D\Esref\Lokale Einstellungen\Temp\removalfile.bat"
Code:
ATTFilter Results of screen317's Security Check version 0.99.99
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java(TM) 6 Update 31
Java 8 Update 40
Adobe Flash Player 17.0.0.134
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (37.0.1)
Google Chrome (41.0.2272.118)
````````Process Check: objlist.exe by Laurent````````
Alwil Software Avast5 AvastSvc.exe
Alwil Software Avast5 ng vbox\AvastVBoxSVC.exe
Alwil Software Avast5 AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Altan (administrator) on ALTAN-PC on 09-04-2015 00:21:47
Running from C:\Users\Altan\Desktop
Loaded Profiles: Altan (Available profiles: Altan)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [UVS10 Preload] => C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2006-08-10] (Ulead Systems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5512912 2015-04-06] (Avast Software s.r.o.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\...\MountPoints2: {0f4dd270-d496-11e0-a230-40618699f324} - J:\Install.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-3264414195-358430586-3417125571-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {D195FBBF-D679-4040-BAB0-BB5D9C60A182} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-06] (Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-04-06] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3264414195-358430586-3417125571-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Altan\AppData\Roaming\Mozilla\Firefox\Profiles\tjj26bf8.default
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-06] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-06] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3264414195-358430586-3417125571-1001: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-04-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-12-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-12-17] (Apple Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-18]
FF HKLM\...\Firefox\Extensions: [support@vdownloader.com] - C:\Program Files\VDownloader\Addons\FireFox
Chrome:
=======
CHR Profile: C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-06]
CHR Extension: (Google Wallet) - C:\Users\Altan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-06]
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-04-06]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-17] (Advanced Micro Devices)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-04-06] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-04-06] (Avast Software)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-06-16] ()
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-29] (Ulead Systems, Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdide; C:\Windows\System32\DRIVERS\amdide.sys [11832 2009-07-07] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-06] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-06] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-06] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-06] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-06] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-07-22] ()
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-07-22] ()
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-03-17] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1521544 2010-04-16] (Syntek)
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-04-06] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-09 00:21 - 2015-04-09 00:21 - 00000906 _____ () C:\Users\Altan\Desktop\checkup.txt
2015-04-08 20:37 - 2015-04-08 20:38 - 00852607 _____ () C:\Users\Altan\Desktop\SecurityCheck.exe
2015-04-08 20:34 - 2015-04-08 20:34 - 00000000 ____D () C:\Program Files\ESET
2015-04-08 20:33 - 2015-04-08 20:34 - 02347384 _____ (ESET) C:\Users\Altan\Desktop\esetsmartinstaller_deu.exe
2015-04-08 14:14 - 2015-04-08 14:14 - 00019895 _____ () C:\Users\Altan\Desktop\Addition.txt
2015-04-08 14:13 - 2015-04-09 00:21 - 00015855 _____ () C:\Users\Altan\Desktop\FRST.txt
2015-04-08 14:12 - 2015-04-08 14:12 - 00001283 _____ () C:\Users\Altan\Desktop\JRT.txt
2015-04-08 14:10 - 2015-04-08 14:10 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ALTAN-PC-Windows-7-Home-Premium-(32-bit).dat
2015-04-08 14:10 - 2015-04-08 14:10 - 00000000 ____D () C:\RegBackup
2015-04-08 14:08 - 2015-04-08 14:08 - 00006067 _____ () C:\Users\Altan\Desktop\AdwCleaner[S0].txt
2015-04-08 14:03 - 2015-04-08 14:05 - 00000000 ____D () C:\AdwCleaner
2015-04-08 14:03 - 2015-04-08 14:03 - 00002712 _____ () C:\Users\Altan\Desktop\mbam.txt
2015-04-08 13:07 - 2015-04-08 13:08 - 00155270 _____ () C:\unp304378681092812524.mdmp
2015-04-08 12:39 - 2015-04-08 12:39 - 00198682 _____ () C:\unp304378641420754480.mdmp
2015-04-08 12:36 - 2015-04-08 12:36 - 00200854 _____ () C:\unp304378633467259550.mdmp
2015-04-08 12:32 - 2015-04-08 12:32 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-08 12:32 - 2015-04-08 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-04-08 12:32 - 2015-04-08 12:32 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-04-08 12:32 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-08 12:32 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-08 12:31 - 2015-04-08 12:31 - 02686959 _____ (Thisisu) C:\Users\Altan\Desktop\JRT.exe
2015-04-08 12:31 - 2015-04-08 12:31 - 02217984 _____ () C:\Users\Altan\Desktop\AdwCleaner_4.201.exe
2015-04-08 12:29 - 2015-04-08 12:30 - 00198848 _____ () C:\unp304378623601758035.mdmp
2015-04-08 12:27 - 2015-04-08 12:27 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Altan\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-07 21:10 - 2015-01-09 01:44 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-04-07 21:04 - 2015-04-07 21:04 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-07 21:04 - 2015-04-07 21:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-07 21:04 - 2015-04-07 21:04 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-04-07 21:04 - 2015-04-07 21:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-07 21:04 - 2015-04-07 21:04 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-04-07 21:04 - 2015-04-07 21:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-04-07 21:04 - 2015-04-07 21:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-04-07 21:04 - 2015-04-07 21:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-07 18:53 - 2015-04-07 19:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 18:41 - 2015-04-07 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-04-07 18:05 - 2015-04-07 18:05 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-04-07 18:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-04-07 17:42 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-04-07 17:42 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-04-07 17:42 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-04-07 16:55 - 2015-04-07 16:55 - 00000134 _____ () C:\Users\Altan\Desktop\Internet Explorer Troubleshooting.url
2015-04-07 16:52 - 2015-04-07 21:09 - 00016381 _____ () C:\Windows\IE11_main.log
2015-04-07 16:27 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-07 16:27 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-07 16:27 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-07 16:27 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-07 16:26 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-04-07 16:26 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-04-07 16:26 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-04-07 16:25 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-04-07 16:25 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-04-07 16:25 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-04-07 16:23 - 2015-01-09 04:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-04-07 16:20 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-07 16:19 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-07 16:19 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-04-07 16:19 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-04-07 16:19 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-04-07 16:19 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-04-07 16:19 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-07 16:18 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-04-07 16:17 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-07 16:17 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-07 16:16 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-04-07 16:16 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-07 16:16 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-07 16:16 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-07 16:15 - 2014-11-11 03:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-04-07 16:15 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-07 16:15 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-04-07 16:15 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-07 16:15 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-07 16:14 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-04-07 16:14 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-04-07 16:13 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-07 16:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-04-07 16:13 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-04-07 16:13 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-04-07 16:13 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-04-07 16:12 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-04-07 16:12 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-04-07 16:11 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-07 16:11 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-07 16:11 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-07 16:11 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-07 16:11 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-04-07 16:11 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-04-07 16:11 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-07 16:11 - 2013-08-29 03:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-07 16:11 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-07 16:11 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-04-07 16:10 - 2014-10-14 03:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-07 16:09 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-07 16:09 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-07 16:09 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-04-07 16:09 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-04-07 16:09 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-04-07 16:08 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-07 16:08 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-04-07 16:08 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-04-07 16:08 - 2013-07-03 06:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-04-07 16:08 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-04-07 16:06 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-04-07 16:06 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-04-07 16:06 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-04-07 15:46 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-07 15:46 - 2014-12-11 19:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-07 15:46 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-07 15:45 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-07 15:45 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-04-07 15:44 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-07 15:43 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-07 15:43 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-07 15:43 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-07 15:43 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-07 15:43 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-07 15:43 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-07 15:43 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-07 15:43 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-07 15:43 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-07 15:43 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-07 15:43 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-07 15:43 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-04-07 15:42 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-04-07 15:42 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-04-07 15:42 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-04-07 15:42 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-04-07 15:42 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-04-07 15:41 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-04-07 15:41 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-04-07 15:41 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-04-07 15:41 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-04-07 15:41 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-04-07 15:40 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-07 15:40 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-07 15:40 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-07 15:40 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-07 15:39 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-04-07 15:39 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-07 15:39 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-04-07 15:39 - 2013-07-12 12:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2015-04-07 15:38 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-07 15:38 - 2014-12-19 03:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-07 15:38 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-07 15:38 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-07 15:38 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-07 15:38 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-04-07 15:38 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-04-07 15:37 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-07 15:37 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-04-07 15:37 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-07 15:37 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-04-07 15:37 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-04-07 15:37 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-04-07 15:37 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-04-07 15:37 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-04-07 15:37 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-04-07 15:37 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-04-07 15:37 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-07 15:37 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-04-07 15:37 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-04-07 15:37 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-07 15:37 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-07 15:37 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-07 15:37 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-04-07 15:37 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-07 15:25 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-04-07 15:25 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-04-07 15:25 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-04-07 15:25 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-04-07 15:25 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-04-07 14:27 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-07 14:27 - 2014-10-14 03:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-07 10:58 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-07 10:58 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-07 10:58 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-07 10:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-07 10:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-07 10:33 - 2015-04-08 14:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-07 10:33 - 2015-04-08 14:01 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-07 10:33 - 2015-04-08 12:32 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-07 10:31 - 2015-04-07 10:31 - 00000000 ____D () C:\Users\Altan\Desktop\mbar
2015-04-07 10:31 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-07 10:26 - 2015-04-07 10:26 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Altan\Desktop\mbar-1.09.1.1004.exe
2015-04-07 10:26 - 2015-04-07 10:26 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Altan\Desktop\tdsskiller.exe
2015-04-06 22:40 - 2015-04-06 22:40 - 00009670 _____ () C:\Users\Altan\Desktop\Gmer.txt
2015-04-06 22:08 - 2015-04-09 00:21 - 00000000 ____D () C:\FRST
2015-04-06 22:08 - 2015-04-06 22:09 - 00380416 _____ () C:\Users\Altan\Desktop\Gmer-19357.exe
2015-04-06 22:07 - 2015-04-06 22:07 - 00000472 _____ () C:\Users\Altan\Desktop\defogger_disable.log
2015-04-06 22:07 - 2015-04-06 22:07 - 00000000 _____ () C:\Users\Altan\defogger_reenable
2015-04-06 22:06 - 2015-04-06 22:06 - 01135104 _____ (Farbar) C:\Users\Altan\Desktop\FRST.exe
2015-04-06 22:06 - 2015-04-06 22:06 - 00000000 ____D () C:\Users\Altan\Downloads\Neuer Ordner
2015-04-06 22:05 - 2015-04-06 22:05 - 00050477 _____ () C:\Users\Altan\Desktop\Defogger.exe
2015-04-06 21:16 - 2015-04-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-04-06 21:14 - 2009-02-27 03:42 - 00031640 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2015-04-06 21:11 - 2015-04-07 17:34 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-04-06 21:10 - 2015-04-06 21:10 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio
2015-04-06 21:04 - 2015-04-06 21:04 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2015-04-06 21:01 - 2015-04-07 18:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-06 21:01 - 2015-04-06 21:01 - 00000000 ____D () C:\Users\Altan\AppData\Local\Microsoft Help
2015-04-06 20:59 - 2015-04-06 20:59 - 00000000 __RHD () C:\MSOCache
2015-04-06 18:49 - 2015-04-06 18:50 - 00000000 ____D () C:\Program Files\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00001819 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-04-06 18:49 - 2015-04-06 18:49 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-04-06 18:33 - 2015-04-06 18:41 - 00000000 ___RD () C:\Users\Altan\Eigene Musik
2015-04-06 18:33 - 2015-04-06 18:33 - 00000000 ___RD () C:\Users\Altan\Eigene Dokumente
2015-04-06 18:22 - 2015-04-06 18:32 - 00000000 ___RD () C:\Users\Altan\Eigene Bilder
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung DG
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3OG.rechts
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Wohnung 3 OG rechts 1
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\vorbereitungen fürs abi
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Universe Sandbox
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Ulead VideoStudio SE
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\studium
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\rezepte
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\OneNote-Notizbücher
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\DVDVideoSoft
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Corel User Files
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Bewerbung Alt4n
2015-04-06 18:22 - 2015-04-06 18:22 - 00000000 ____D () C:\Users\Altan\Altan Bewerbung
2015-04-06 18:22 - 2015-04-03 15:46 - 39981374 _____ () C:\Users\Altan\14005_lenord_bauer_imagefilm_2014_Lenord,Bauer.webm
2015-04-06 18:22 - 2014-12-31 13:49 - 00048128 _____ () C:\Users\Altan\Abfallkalender 2014-2.xls
2015-04-06 18:22 - 2014-12-10 20:50 - 00006292 _____ () C:\Users\Altan\Telefunken V 660_1, V 661_1 und V 662_1 Anleitung.htm
2015-04-06 18:22 - 2014-06-15 17:05 - 00043520 _____ () C:\Users\Altan\Abfallkalender 2014.xls
2015-04-06 18:22 - 2013-07-08 17:20 - 02092792 _____ () C:\Users\Altan\avira_free_antivirus.exe
2015-04-06 18:22 - 2013-06-26 09:24 - 00039936 _____ () C:\Users\Altan\Abfallkalender 2012-2.xls
2015-04-06 18:22 - 2013-05-18 11:26 - 00002148 _____ () C:\Users\Altan\zivtserv.rdp
2015-04-06 18:22 - 2011-12-27 15:24 - 00024576 _____ () C:\Users\Altan\Abfallkalender 2012.xls
2015-04-06 18:22 - 2011-06-19 20:58 - 00024576 _____ () C:\Users\Altan\Kalender1.2010.xls
2015-04-06 18:22 - 2010-11-24 22:32 - 00011811 _____ () C:\Users\Altan\Skoda Octavia.wpd
2015-04-06 18:22 - 2010-06-20 10:36 - 00014336 _____ () C:\Users\Altan\Mappe1.xls
2015-04-06 18:22 - 2010-01-31 20:17 - 02551089 _____ () C:\Users\Altan\LebenslaufPers.wpd
2015-04-06 18:22 - 2009-12-26 13:43 - 00023040 _____ () C:\Users\Altan\Kalender.xls
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner2
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\Neuer Ordner
2015-04-06 18:21 - 2015-04-06 18:21 - 00000000 ____D () C:\Users\Altan\NeroVision
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 __RSD () C:\Users\Altan\My Stationery
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\My Digital Editions
2015-04-06 18:20 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\kleider
2015-04-06 18:20 - 2015-04-06 17:16 - 00000000 ____D () C:\Users\Altan\My Art
2015-04-06 18:19 - 2015-04-06 18:20 - 00000000 ____D () C:\Users\Altan\Iris Kamera
2015-04-06 18:19 - 2015-04-06 18:19 - 00000000 ____D () C:\Users\Altan\gegl-0.0
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-04-06 18:11 - 2015-04-06 18:11 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-04-06 18:02 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Wohnung 3OG. rechts
2015-04-06 18:01 - 2015-04-06 18:02 - 00000000 ____D () C:\Users\Altan\Desktop\Neuer Ordner
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Canan´s Fotos
2015-04-06 18:01 - 2015-04-06 18:01 - 00000000 ____D () C:\Users\Altan\Desktop\Bafög
2015-04-06 17:57 - 2015-04-06 17:57 - 00000000 ____D () C:\Users\Altan\Documents\Ulead VideoStudio SE
2015-04-06 15:42 - 2015-04-06 15:45 - 00000000 ____D () C:\Windows\system32\vbox
2015-04-06 15:38 - 2015-04-06 15:38 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\AVAST Software
2015-04-06 15:33 - 2015-04-06 15:33 - 00002018 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-06 15:31 - 2015-04-06 15:25 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-04-06 15:31 - 2015-04-06 15:24 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-04-06 15:31 - 2015-04-06 15:24 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-04-06 15:31 - 2013-08-20 11:15 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-04-06 15:31 - 2013-08-20 11:15 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-04-06 15:30 - 2015-04-06 15:30 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-04-06 15:30 - 2015-04-06 15:28 - 00106912 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-06 15:30 - 2015-04-06 15:28 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-06 15:29 - 2015-04-06 15:28 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-06 15:28 - 2015-04-06 15:28 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-06 15:25 - 2015-04-06 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-06 15:24 - 2015-04-06 15:33 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-06 15:23 - 2015-04-06 15:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-06 15:22 - 2015-04-06 15:28 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-06 15:22 - 2015-04-06 15:28 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-06 14:21 - 2015-04-06 14:21 - 06103040 _____ () C:\Program Files\GUTB606.tmp
2015-04-06 14:21 - 2015-04-06 14:21 - 00000000 ____D () C:\Program Files\GUMB5F6.tmp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-09 00:21 - 2010-08-30 16:48 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-09 00:20 - 2012-03-31 10:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-08 21:32 - 2010-08-30 16:48 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-08 20:35 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-08 20:34 - 2010-05-26 08:00 - 01614036 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-08 20:34 - 2009-07-14 06:34 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-08 20:30 - 2013-03-21 21:13 - 00010661 _____ () C:\Windows\setupact.log
2015-04-08 20:30 - 2010-11-14 19:07 - 01675232 _____ () C:\Windows\WindowsUpdate.log
2015-04-08 20:26 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-08 14:07 - 2013-03-25 11:06 - 00386750 _____ () C:\Windows\PFRO.log
2015-04-08 13:07 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-08 13:01 - 2010-11-19 12:45 - 00000000 ____D () C:\Windows\Minidump
2015-04-08 13:00 - 2013-08-19 19:14 - 422924681 _____ () C:\Windows\MEMORY.DMP
2015-04-08 12:56 - 2010-07-22 19:43 - 00127048 _____ () C:\Users\Altan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-07 21:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-07 20:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-04-07 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-07 19:04 - 2009-07-14 06:33 - 00454160 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-07 19:03 - 2010-05-26 10:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-07 18:54 - 2009-07-14 09:49 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-07 18:41 - 2011-05-26 17:27 - 00000000 ____D () C:\Program Files\Microsoft Application Virtualization Client
2015-04-07 18:30 - 2013-08-17 16:41 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-07 17:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-07 17:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-07 17:32 - 2009-07-14 04:04 - 00000499 _____ () C:\Windows\win.ini
2015-04-07 17:28 - 2010-05-26 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-07 14:27 - 2012-06-13 18:13 - 00000000 ____D () C:\Users\Altan\.nbi
2015-04-07 14:23 - 2010-07-28 18:36 - 00000000 ____D () C:\ProgramData\Sun
2015-04-07 14:20 - 2010-07-28 18:23 - 00000000 ____D () C:\Program Files\Java
2015-04-06 22:07 - 2010-07-22 19:39 - 00000000 ____D () C:\Users\Altan
2015-04-06 22:06 - 2010-07-26 22:38 - 00000000 ____D () C:\Users\Altan\AppData\Local\Mozilla
2015-04-06 21:11 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild
2015-04-06 21:10 - 2010-05-26 10:57 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-04-06 21:10 - 2009-07-14 09:48 - 00000000 ____D () C:\Windows\ShellNew
2015-04-06 21:08 - 2010-09-14 12:54 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-04-06 20:56 - 2011-02-24 20:54 - 00267776 ___SH () C:\Users\Altan\Thumbs.db
2015-04-06 20:53 - 2010-08-30 16:48 - 00000000 ____D () C:\Users\Altan\AppData\Local\Google
2015-04-06 19:50 - 2011-03-12 11:53 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-06 18:25 - 2012-03-31 10:49 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-06 18:25 - 2011-05-20 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-06 18:18 - 2013-08-19 19:22 - 00002197 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-06 18:11 - 2010-07-22 20:52 - 00000000 ____D () C:\Users\Altan\AppData\Roaming\Adobe
2015-04-06 18:11 - 2010-05-26 10:52 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-04-06 18:11 - 2010-05-26 10:51 - 00000000 ____D () C:\Program Files\Adobe
2015-04-06 18:10 - 2010-08-23 18:28 - 00000000 ____D () C:\Users\Altan\AppData\Local\Adobe
2015-04-06 15:28 - 2012-06-01 20:29 - 00081728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-06 15:28 - 2011-01-08 13:07 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-06 15:27 - 2011-04-18 21:07 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-06 15:24 - 2013-08-20 11:15 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-04-06 15:22 - 2010-05-26 10:22 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2015-04-06 15:22 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2015-04-06 15:21 - 2010-05-26 10:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
==================== Files in the root of some directories =======
2015-04-06 14:21 - 2015-04-06 14:21 - 6103040 _____ () C:\Program Files\GUTB606.tmp
2011-07-13 15:57 - 2011-07-13 15:57 - 0138056 _____ () C:\Users\Altan\AppData\Roaming\PnkBstrK.sys
2011-07-16 21:19 - 2011-07-16 21:19 - 0000022 ___SH () C:\Users\Altan\AppData\Roaming\Sys2662.Config.Repository.bin
2011-09-09 16:30 - 2012-05-26 22:02 - 0077824 _____ () C:\Users\Altan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-11-01 19:07 - 2010-11-01 19:07 - 0007597 _____ () C:\Users\Altan\AppData\Local\Resmon.ResmonCfg
2011-11-02 21:07 - 2011-11-02 21:07 - 0000000 _____ () C:\Users\Altan\AppData\Local\{A4D1F345-121F-4A33-AA27-83EC8C707EF1}
2011-09-09 16:28 - 2011-09-09 16:28 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Files to move or delete:
====================
C:\Users\Altan\avira_free_antivirus.exe
Some content of TEMP:
====================
C:\Users\Altan\AppData\Local\Temp\CheatEngine63Clean.exe
C:\Users\Altan\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Altan\AppData\Local\Temp\Quarantine.exe
C:\Users\Altan\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-01-18 18:07
==================== End Of Log ============================
Keine Probleme mehr soweit ich das erkenne  Vielen Dank dacht schon die Graphikkarte wär kaputt oder so Geändert von Jabba131 (08.04.2015 um 23:37 Uhr) |
|
09.04.2015, 15:54
| #10 |
| /// the machine /// TB-Ausbilder | Windows 7 sehr langsam und stürzt ständig ab Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\ProgramData\ReviverSoft\RegistryReviver
C:\Users\All Users\ReviverSoft\RegistryReviver\InstallCache\{E31E4E05-4B6B-42A5-8623-EB530F8147F5}\RegistryReviver.msi
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7VW6J7UR\upgrade[1].cab
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J1KQIRYY\upgrade[1].cab
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q17W8WRZ\upgrade[1].cab
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q17W8WRZ\upgrade[2].cab
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S4U8ODCS\upgrade[1].cab
D:\Esref\Lokale Einstellungen\Temp\removalfile.bat
K:\Computer\Datenträger D\Esref\Lokale Einstellungen\Temp\removalfile.bat
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
 Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7 sehr langsam und stürzt ständig ab |
| adware, antivirus, avira, browser, converter, festplatte, flash player, google, helper, home, homepage, installation, langsam, mozilla, problem, programm, realtek, registry, security, software, starten, svchost.exe, system, vista, windows |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
