| |
| |||||||
Log-Analyse und Auswertung: Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
05.05.2015, 02:33
| #1 |
| |  Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. liebe Foren-Mitglieder, seitdem jemand meinen Laptop für you**rn genutzt und dabei "adblock" ausgeschaltet hat, ist mein Laptop sehr langsam. Er braucht z.B. plötzlich ewig, um den Task-Mananger oder diverse Internet-Seiten zu öffnen. Und wenn ich im Task-Manager auf "Leistung" klicke, sehe ich, dass die Festplatten-Leistung ständig bei 100% liegt und dass ein Schreibvorgang auf die Festplatte im Gange ist. Malwarebytes hat beim Scan 2 Bedrohungen entdeckt. Jetzt gerade im Moment ist die Festplatten-Leistung im Task-Manager plötzlich wieder sehr gering. Die Log-Files habe ich alle erstellt. Für Hilfe wäre ich sehr dankbar. Grüße Daniel Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 05.05.2015 Suchlauf-Zeit: 12:13:32 AM Logdatei: hjhj.txt Administrator: Ja Version: 2.01.4.1018 Malware Datenbank: v2015.05.04.06 Rootkit Datenbank: v2015.04.21.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8 CPU: x64 Dateisystem: NTFS Benutzer: dd Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 426046 Verstrichene Zeit: 26 Min, 47 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 1 PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1182488276-301210562-3317401335-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, In Quarantäne, [d3d3bad5d6b4c17582d5065cba4be11f], Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 0 (Keine schädliche Elemente gefunden) Dateien: 1 PUP.Optional.EZDownloader.A, C:\Users\dd\AppData\Local\Temp\9A60\temp\BIT3470.tmp, In Quarantäne, [5c4a8a05d9b1c37307d8170aa55b0df3], Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 02:44 on 05/05/2015 (dd)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by dd (administrator) on DOROTHEA on 05-05-2015 02:48:08
Running from C:\Users\dd\Desktop
Loaded Profiles: dd (Available profiles: Dorothea Röger & dd & Administrator)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee, Inc.) C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-10-10] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-10-23] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-28] (Atheros Communications)
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\...\Run: [Facebook Update] => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-12-20] (Facebook Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Parental Controls.lnk [2013-05-09]
ShortcutTarget: McAfee Parental Controls.lnk -> C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-04-18]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-04-10]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Audials One 12.lnk [2015-04-08]
ShortcutTarget: Audials One 12.lnk -> C:\ProgramData\{18cb70ed-fbb3-231a-18cb-b70edfbbc3b7}\Audials One 12.exe (No File)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-04-25] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-04-25] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\dd\AppData\Roaming\Mozilla\Firefox\Profiles\tg2jj20g.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-18] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-05-09] (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-04-25] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-09] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll No File
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-04-25] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-07] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1182488276-301210562-3317401335-1004: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\dd\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Extension: Adblock Plus - C:\Users\dd\AppData\Roaming\Mozilla\Firefox\Profiles\tg2jj20g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-10]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-05-09]
FF HKU\S-1-5-21-1182488276-301210562-3317401335-1004\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-05-02]
CHR Extension: (Google Slides) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-07]
CHR Extension: (Google Docs) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-07]
CHR Extension: (Google Drive) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-07]
CHR Extension: (YouTube) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-07]
CHR Extension: (Adblock Plus) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-07]
CHR Extension: (Google Search) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-07]
CHR Extension: (Grooveshark Germany unlocker) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejcnhmeicafddjdaeecddemnhnomiaai [2015-04-07]
CHR Extension: (Disable Youtube™ HTML5 Player) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\enmofgaijnbjpblfljopnpdogpldapoc [2015-04-18]
CHR Extension: (Google Sheets) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-07]
CHR Extension: (Hola Better Internet) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-04-25]
CHR Extension: (Bookmark Manager) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
CHR Extension: (New Tab Redirect) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna [2015-04-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-17]
CHR Extension: (Google Wallet) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-07]
CHR Extension: (Gmail) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-07]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-28] (Qualcomm Atheros Commnucations) [File not signed]
S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
S3 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2782392 2013-12-31] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [639576 2013-05-10] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [964608 2012-09-28] (Sony Corporation) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-28] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-28] (Qualcomm Atheros)
R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [428008 2012-12-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-23] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-05 02:48 - 2015-05-05 02:48 - 00024172 _____ () C:\Users\dd\Desktop\FRST.txt
2015-05-05 02:47 - 2015-05-05 02:48 - 00000000 ____D () C:\FRST
2015-05-05 02:46 - 2015-05-05 02:46 - 02101248 _____ (Farbar) C:\Users\dd\Desktop\FRST64.exe
2015-05-05 02:43 - 2015-05-05 02:44 - 00000466 _____ () C:\Users\dd\Desktop\defogger_disable.log
2015-05-05 02:43 - 2015-05-05 02:43 - 00000000 _____ () C:\Users\dd\defogger_reenable
2015-05-05 02:41 - 2015-05-05 02:41 - 00050477 _____ () C:\Users\dd\Desktop\Defogger.exe
2015-05-05 00:54 - 2015-05-05 00:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-05-05 00:47 - 2015-05-05 00:47 - 00001456 _____ () C:\Users\dd\Desktop\hjhj.txt
2015-05-02 14:46 - 2015-05-02 14:46 - 00037000 _____ () C:\Users\dd\Desktop\stop-looking-at-my-ass-pervert_o_243487.webp
2015-04-30 06:00 - 2015-04-30 06:00 - 00002401 _____ () C:\Users\dd\Desktop\Market Leader Upper-Intermediate 3rd Edition.lnk
2015-04-30 06:00 - 2015-04-30 06:00 - 00000000 __SHD () C:\Windows\ftpcache
2015-04-30 06:00 - 2015-04-30 06:00 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry
2015-04-30 05:58 - 2015-04-30 05:58 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pearson
2015-04-30 05:47 - 2015-04-30 05:47 - 00000000 ____D () C:\Program Files (x86)\Pearson
2015-04-27 20:30 - 2015-04-27 20:30 - 00000252 _____ () C:\Users\dd\Downloads\150424_kraftklub_kw18.mp3.pls
2015-04-24 20:20 - 2015-04-24 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-04-24 20:20 - 2015-04-24 20:20 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2015-04-24 17:09 - 2015-04-24 17:09 - 00264705 _____ () C:\Users\dd\Desktop\photo (2).htm
2015-04-24 17:08 - 2015-04-24 17:08 - 00299318 _____ () C:\Users\dd\Desktop\photo (1).htm
2015-04-24 17:07 - 2015-04-24 17:07 - 00290525 _____ () C:\Users\dd\Desktop\photo.htm
2015-04-23 20:19 - 2015-04-23 20:19 - 00000000 ____D () C:\Program Files\Sony Corporation
2015-04-23 20:15 - 2015-04-23 20:15 - 00003124 _____ () C:\Windows\System32\Tasks\USER_ESRV_SVC
2015-04-23 20:15 - 2015-04-23 20:15 - 00000000 ____D () C:\Users\dd\AppData\Roaming\iolo
2015-04-23 20:15 - 2015-04-23 20:11 - 00013792 _____ () C:\Windows\system32\Drivers\semav6thermal64ro.sys
2015-04-23 20:14 - 2015-04-23 20:14 - 00002044 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care (Desktop).lnk
2015-04-23 20:14 - 2015-04-23 20:14 - 00000000 __RHD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2015-04-23 19:54 - 2015-04-23 19:54 - 00000982 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
2015-04-21 20:05 - 2015-04-21 20:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-18 13:07 - 2015-04-18 13:07 - 00000000 ____D () C:\Users\dd\AppData\Local\Macromedia
2015-04-18 13:05 - 2015-05-05 01:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-18 13:05 - 2015-04-24 20:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-04-18 13:05 - 2015-04-18 13:05 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-16 18:51 - 2015-03-23 07:19 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 18:51 - 2015-03-23 07:17 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 18:51 - 2015-03-23 07:17 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 18:51 - 2015-03-23 07:17 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 18:51 - 2015-03-23 07:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 18:51 - 2015-03-23 07:17 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-16 18:51 - 2015-03-23 00:04 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 18:51 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 18:51 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-16 17:03 - 2015-02-24 09:58 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 17:02 - 2015-03-17 09:00 - 06971712 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 17:02 - 2015-03-17 08:52 - 01822696 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 17:02 - 2015-03-17 06:45 - 01409496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-16 17:02 - 2015-03-10 07:28 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 17:02 - 2015-03-10 07:28 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 17:02 - 2015-03-10 07:28 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 19292672 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 15409152 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 17:02 - 2015-03-10 07:27 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 14373376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 17:02 - 2015-03-10 05:49 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 17:02 - 2015-03-10 05:48 - 13767680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 17:02 - 2015-03-04 09:29 - 00361280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 17:02 - 2015-03-04 08:39 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 17:02 - 2015-03-04 06:52 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-16 12:02 - 2015-04-16 12:04 - 00000000 ____D () C:\Users\dd\Desktop\Buchführung
2015-04-14 11:14 - 2015-04-14 11:14 - 00410945 _____ () C:\Users\dd\Downloads\Tut_UMV_SS10.zip
2015-04-13 08:29 - 2015-04-13 08:29 - 00046759 _____ () C:\Users\dd\Downloads\data.xml
2015-04-13 08:29 - 2015-04-13 08:29 - 00015492 _____ () C:\Users\dd\Downloads\form
2015-04-10 09:12 - 2015-04-10 09:12 - 00561677 _____ () C:\Users\dd\Desktop\bookmark.htm
2015-04-10 09:01 - 2015-04-10 09:01 - 00000403 _____ () C:\Windows\ODBC.INI
2015-04-10 09:01 - 2015-04-10 09:01 - 00000035 _____ () C:\Windows\vbaddin.ini
2015-04-10 09:01 - 2015-04-10 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verwaltung
2015-04-10 09:00 - 2015-04-10 09:00 - 00002715 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Excel.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002703 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002687 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft FrontPage.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002675 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Word.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002635 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Access.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002619 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Office-Dokument öffnen.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00002615 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Neues Office-Dokument.lnk
2015-04-10 09:00 - 2015-04-10 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2015-04-10 08:59 - 2015-04-10 08:59 - 00000000 ____D () C:\Windows\Msagent
2015-04-10 08:59 - 2015-04-10 08:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft FrontPage
2015-04-09 23:57 - 2015-04-24 23:34 - 00000000 ____D () C:\Users\dd\Desktop\Neuer Ordner (2)
2015-04-09 23:31 - 2015-04-09 23:31 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Mozilla
2015-04-09 23:31 - 2015-04-09 23:31 - 00000000 ____D () C:\Users\dd\AppData\Local\Mozilla
2015-04-09 23:28 - 2015-04-23 19:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-09 23:28 - 2015-04-09 23:28 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-09 23:28 - 2015-04-09 23:28 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-09 21:03 - 2015-04-09 21:03 - 00000000 ____D () C:\Users\dd\Neuer Ordner
2015-04-09 21:02 - 2015-04-09 21:02 - 00000000 ____D () C:\Users\dd\Documents\Scripts
2015-04-09 21:02 - 2015-04-09 21:02 - 00000000 ____D () C:\Users\dd\Documents\images
2015-04-09 21:02 - 2015-04-09 21:02 - 00000000 ____D () C:\Users\dd\Documents\css
2015-04-09 21:02 - 2015-04-09 21:02 - 00000000 ____D () C:\Users\dd\Documents\_locales
2015-04-09 21:02 - 2015-03-16 20:30 - 00001293 _____ () C:\Users\dd\Documents\manifest.json
2015-04-09 21:01 - 2015-04-09 21:01 - 01376768 _____ () C:\Users\dd\Downloads\7z920-x64.msi
2015-04-09 21:01 - 2015-04-09 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-04-09 21:00 - 2015-04-09 21:00 - 00180982 _____ () C:\Users\dd\Downloads\GroovesharkDownloader.zip
2015-04-09 20:38 - 2015-04-09 20:38 - 01203488 _____ () C:\Users\dd\Downloads\Firefox - CHIP-Installer.exe
2015-04-09 20:19 - 2015-04-09 20:20 - 16567520 _____ (Philipp Schmieder Medien ) C:\Users\dd\Downloads\clipgrab-3.4.9.exe
2015-04-09 20:06 - 2015-04-09 20:07 - 01203488 _____ () C:\Users\dd\Downloads\Classic Shell - CHIP-Installer.exe
2015-04-09 19:53 - 2015-04-09 19:53 - 00278488 _____ () C:\Windows\Minidump\040915-32500-01.dmp
2015-04-09 19:40 - 2015-04-09 19:40 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-09 19:05 - 2015-04-09 19:46 - 00000000 _____ () C:\Windows\Model.log
2015-04-09 18:46 - 2015-04-09 18:46 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Spotify
2015-04-09 18:29 - 2015-04-09 20:11 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-04-09 18:29 - 2015-04-09 20:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-04-09 17:58 - 2015-04-09 20:51 - 00000000 ____D () C:\AudacityPortable
2015-04-09 16:04 - 2015-04-09 16:04 - 00000000 ____D () C:\Users\dd\Documents\Neuer Ordner
2015-04-09 15:53 - 2015-04-09 21:01 - 00000000 ____D () C:\Program Files\7-Zip
2015-04-09 14:58 - 2015-05-05 00:48 - 00000000 ____D () C:\Users\dd\AppData\Roaming\ClassicShell
2015-04-09 14:57 - 2015-04-09 20:08 - 00000000 ____D () C:\Program Files\Classic Shell
2015-04-09 12:53 - 2015-04-09 19:19 - 00000000 ____D () C:\Program Files (x86)\bestadblocker
2015-04-09 12:52 - 2015-04-09 19:19 - 00000000 ____D () C:\ProgramData\dpjmahebnogcclmemjfpppkoebfbnjnp
2015-04-09 12:52 - 2015-04-09 19:19 - 00000000 ____D () C:\Program Files (x86)\SaulePlus
2015-04-09 12:43 - 2015-04-09 19:19 - 00000000 ____D () C:\ProgramData\{4d1e6255-623a-349b-4d1e-e62556238955}
2015-04-09 12:40 - 2015-04-09 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClipGrab
2015-04-09 12:40 - 2015-04-09 20:21 - 00000000 ____D () C:\Program Files (x86)\ClipGrab
2015-04-09 12:36 - 2015-04-09 12:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2015-04-09 12:33 - 2015-04-09 12:33 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Microsoft Web Folders
2015-04-08 15:54 - 2015-04-24 01:18 - 00000000 ____D () C:\Users\dd\AppData\Roaming\vlc
2015-04-08 15:53 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-04-08 15:53 - 2015-04-08 15:53 - 00000000 ____D () C:\Program Files\VideoLAN
2015-04-08 14:25 - 2015-05-05 00:13 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-08 14:25 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-04-08 14:25 - 2015-04-08 14:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-08 14:25 - 2015-04-08 14:25 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-04-08 14:25 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-08 14:25 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-08 14:25 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-08 14:05 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\18061483429812477594
2015-04-08 14:05 - 2015-04-08 15:07 - 00000000 ____D () C:\Program Files (x86)\SalePelus
2015-04-08 14:04 - 2015-04-08 15:07 - 00000000 ____D () C:\ProgramData\{18cb70ed-fbb3-231a-18cb-b70edfbbc3b7}
2015-04-08 13:40 - 2015-04-08 13:40 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2015-04-08 13:40 - 2015-04-08 13:40 - 00000000 ____D () C:\Users\dd\AppData\Local\No23 Recorder
2015-04-08 02:34 - 2015-04-08 02:34 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Apowersoft
2015-04-08 02:24 - 2015-04-08 02:24 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AudioSuite
2015-04-08 02:24 - 2015-04-08 02:24 - 00000000 ____D () C:\AudioSuite
2015-04-08 02:13 - 2015-04-08 02:13 - 00000000 ____D () C:\Users\dd\Documents\Streaming Audio Recorder
2015-04-08 01:05 - 2015-04-09 20:17 - 00001489 _____ () C:\Users\dd\AppData\Local\RecConfig.xml
2015-04-08 00:11 - 2015-04-08 00:11 - 00000000 ____D () C:\Users\dd\.cache
2015-04-08 00:06 - 2015-04-08 00:06 - 00002989 _____ () C:\Users\dd\Desktop\MP3 - Verknüpfung.lnk
2015-04-07 23:43 - 2015-04-07 23:43 - 00000000 ____D () C:\Users\dd\Documents\Any Video Converter
2015-04-07 23:43 - 2015-04-07 23:43 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Anvsoft
2015-04-07 23:42 - 2015-04-07 23:42 - 00000000 ____D () C:\Program Files (x86)\Anvsoft
2015-04-07 23:02 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-07 23:02 - 2015-04-07 23:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-07 23:02 - 2015-04-07 23:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-04-07 22:44 - 2015-04-09 20:51 - 00000000 ____D () C:\Program Files\Adblock Plus for IE
2015-04-07 18:39 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-07 18:34 - 2015-05-05 02:39 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-07 18:34 - 2015-05-05 00:49 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-07 18:34 - 2015-04-07 18:39 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-07 18:34 - 2015-04-07 18:34 - 00003880 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-07 18:34 - 2015-04-07 18:34 - 00003644 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-07 17:44 - 2015-04-09 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GrabIt
2015-04-07 17:44 - 2015-04-07 17:44 - 00000979 _____ () C:\Users\dd\Desktop\GrabIt.lnk
2015-04-07 17:44 - 2015-04-07 17:44 - 00000000 ____D () C:\Program Files (x86)\GrabIt
2015-04-07 17:33 - 2015-04-07 17:43 - 01387407 _____ () C:\Users\dd\Desktop\NEUQ1-2015 MN78.nzb
2015-04-07 16:19 - 2015-04-07 19:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-04-07 16:18 - 2015-04-09 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NAVIGON
2015-04-07 16:18 - 2015-04-07 16:18 - 00001333 _____ () C:\Users\Public\Desktop\NAVIGON Fresh.lnk
2015-04-07 16:17 - 2015-04-07 16:17 - 00000000 ____D () C:\Program Files (x86)\NAVIGON
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-05 02:48 - 2013-05-09 00:38 - 00000000 ____D () C:\ProgramData\MOCP
2015-05-05 02:43 - 2014-09-05 00:47 - 00000000 ____D () C:\Users\dd
2015-05-05 02:34 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2015-05-05 02:32 - 2013-05-08 23:24 - 01811926 _____ () C:\Windows\WindowsUpdate.log
2015-05-05 01:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache
2015-05-05 01:00 - 2014-09-05 13:18 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1182488276-301210562-3317401335-1004
2015-05-05 00:49 - 2012-08-03 04:22 - 00025214 _____ () C:\Windows\PFRO.log
2015-05-05 00:49 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-05 00:04 - 2012-07-26 07:26 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-05-04 23:33 - 2013-09-16 22:59 - 00000000 ____D () C:\Update
2015-05-04 23:32 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-05-04 23:22 - 2014-12-20 00:17 - 00000934 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004UA.job
2015-05-04 23:22 - 2014-12-20 00:17 - 00000912 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004Core.job
2015-05-03 07:26 - 2015-03-22 21:38 - 00000000 ____D () C:\Users\dd\Desktop\Neuer Ordner
2015-05-01 13:14 - 2013-05-09 00:14 - 00753134 _____ () C:\Windows\system32\perfh007.dat
2015-05-01 13:14 - 2013-05-09 00:14 - 00155826 _____ () C:\Windows\system32\perfc007.dat
2015-05-01 13:14 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-01 09:32 - 2014-09-08 09:49 - 00000000 ____D () C:\Users\dd\AppData\Local\CrashDumps
2015-04-24 00:00 - 2013-05-09 01:31 - 00000000 ____D () C:\ProgramData\iolo
2015-04-23 20:24 - 2013-05-09 00:26 - 00000000 ____D () C:\Documentation
2015-04-23 20:19 - 2013-05-08 23:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-23 20:14 - 2013-05-09 00:15 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-04-23 19:54 - 2013-05-09 00:15 - 00000000 ____D () C:\Windows\System32\Tasks\Sony Corporation
2015-04-23 19:54 - 2013-05-09 00:15 - 00000000 ____D () C:\Program Files\Sony
2015-04-23 19:54 - 2013-05-09 00:12 - 00000000 ____D () C:\ProgramData\Sony Corporation
2015-04-19 14:26 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AppCompat
2015-04-18 13:06 - 2014-09-08 08:04 - 00000000 ____D () C:\Users\dd\AppData\Local\Adobe
2015-04-17 22:05 - 2015-03-18 09:29 - 00319720 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-17 12:28 - 2014-12-11 17:08 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-17 12:28 - 2014-09-09 11:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 12:28 - 2014-09-05 23:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-17 12:13 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-17 12:01 - 2014-09-05 23:05 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-14 00:07 - 2015-02-06 16:20 - 00791520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 00:07 - 2015-02-06 16:20 - 00177632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 09:01 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\Help
2015-04-10 09:00 - 2012-07-26 10:12 - 00000000 __RSD () C:\Windows\Media
2015-04-10 08:59 - 2012-07-26 09:52 - 00000000 ____D () C:\Windows\ShellNew
2015-04-10 08:57 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\System
2015-04-09 20:52 - 2014-09-05 00:47 - 00000000 ____D () C:\Users\Dorothea Röger
2015-04-09 20:52 - 2013-05-09 00:49 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-04-09 20:52 - 2013-05-09 00:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2015-04-09 20:52 - 2013-05-09 00:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Parental Controls
2015-04-09 20:52 - 2013-05-09 00:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center
2015-04-09 20:52 - 2013-05-09 00:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
2015-04-09 20:52 - 2013-05-09 00:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home
2015-04-09 20:52 - 2013-05-09 00:04 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-04-09 20:52 - 2013-05-08 23:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-04-09 20:52 - 2012-08-03 04:24 - 00000000 ____D () C:\Users\Administrator
2015-04-09 20:52 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-09 20:52 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-09 20:52 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-09 20:52 - 2012-07-26 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-04-09 20:51 - 2013-05-08 23:58 - 00000000 ___HD () C:\Program Files (x86)\Temp
2015-04-09 20:51 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\registration
2015-04-09 20:50 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-04-09 19:53 - 2015-02-23 19:30 - 00000000 ____D () C:\Windows\Minidump
2015-04-09 19:53 - 2015-02-23 19:29 - 313708124 _____ () C:\Windows\MEMORY.DMP
2015-04-08 02:13 - 2014-09-05 00:49 - 00000000 ____D () C:\Users\dd\AppData\Local\VirtualStore
2015-04-07 18:39 - 2014-12-13 09:58 - 00000000 ____D () C:\Users\dd\AppData\Local\Google
2015-04-07 18:34 - 2014-12-13 09:58 - 00000000 ____D () C:\Users\dd\AppData\Local\Deployment
2015-04-07 16:21 - 2012-07-26 09:21 - 00356228 _____ () C:\Windows\setupact.log
2015-04-07 15:51 - 2013-05-09 00:34 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-04-07 10:06 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
==================== Files in the root of some directories =======
2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\dd\AppData\Local\bass.dll
2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\dd\AppData\Local\basscd.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\dd\AppData\Local\CDRip.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0155136 _____ () C:\Users\dd\AppData\Local\lame_enc.dll
2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\dd\AppData\Local\No23 Recorder.exe
2005-08-23 22:34 - 2005-08-23 22:34 - 0029184 _____ () C:\Users\dd\AppData\Local\no23xwrapper.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0015872 _____ () C:\Users\dd\AppData\Local\ogg.dll
2015-04-08 01:05 - 2015-04-09 20:17 - 0001489 _____ () C:\Users\dd\AppData\Local\RecConfig.xml
2015-04-08 14:14 - 2015-04-08 14:14 - 0011772 _____ () C:\Users\dd\AppData\Local\Temp-log.txt
2006-10-26 01:06 - 2006-10-26 01:06 - 0143872 _____ () C:\Users\dd\AppData\Local\vorbis.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0064000 _____ () C:\Users\dd\AppData\Local\vorbisenc.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0019456 _____ () C:\Users\dd\AppData\Local\vorbisfile.dll
2015-04-09 19:40 - 2015-04-09 19:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some content of TEMP:
====================
C:\Users\dd\AppData\Local\Temp\tmpA2FB.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-28 11:27
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015
Ran by dd at 2015-05-05 02:49:07
Running from C:\Users\dd\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1182488276-301210562-3317401335-500 - Administrator - Disabled) => C:\Users\Administrator
dd (S-1-5-21-1182488276-301210562-3317401335-1004 - Administrator - Enabled) => C:\Users\dd
Dorothea Röger (S-1-5-21-1182488276-301210562-3317401335-1001 - Administrator - Enabled) => C:\Users\Dorothea Röger
Gast (S-1-5-21-1182488276-301210562-3317401335-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1182488276-301210562-3317401335-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{C27EF409-FB69-451F-B996-DC853C25FCA2}) (Version: 1.4 - Eyeo GmbH)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Any Audio Converter 5.7.9 (HKLM-x32\...\Any Audio Converter) (Version: 5.7.9 - Anvsoft)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Build-a-lot: On Vacation (x32 Version: 2.2.0.110 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
ClipGrab 3.4.9 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version: - Philipp Schmieder Medien)
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2126 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.5728.52 - CyberLink Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GrabIt 1.7.2 Beta 6 (build 1008) (HKLM-x32\...\GrabIt_is1) (Version: - Ilan Shemes)
Heroes of Hellas 3: Athens (x32 Version: 3.0.2.32 - WildTangent) Hidden
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41505) (Version: 3.8.0.41505.25 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2849 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 7 Update 9 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417009FF}) (Version: 7.0.90 - Oracle)
Java 7 Update 9 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217009FF}) (Version: 7.0.90 - Oracle)
KUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Luxor HD (x32 Version: 2.2.0.110 - WildTangent) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Market Leader Upper-Intermediate 3rd Edition (HKLM-x32\...\xxxxxxxxxxxxx-Pearson) (Version: - Pearson Education)
McAfee Internet Security (HKLM-x32\...\MSC) (Version: 12.8.988 - McAfee, Inc.)
McAfee Parental Controls (HKLM-x32\...\MOCP) (Version: 3.2.226.1 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
NAVIGON Fresh 3.5.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
Networkx64 (Version: 1.0.0 - Sony Corporation) Hidden
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayMemories Home (HKLM-x32\...\{10DD6128-A810-4A90-9523-475D573FBB37}) (Version: 6.3.02.07270 - Sony Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.218 - Qualcomm Atheros Communications)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.28121 - Realtek Semiconductor Corp.)
Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.16.2 - Synaptics Incorporated)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.3.2.07020 - Sony Corporation)
VAIO Care (HKLM\...\{EF649526-0134-46A8-8DF3-D7F9309E48DB}) (Version: 8.4.2.12046 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.1.0.10300 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.10.0.07270 - Sony Corporation)
VAIO Easy Connect (x32 Version: 8.2.0.14170 - Sony Corporation) Hidden
VAIO Gate (HKLM-x32\...\{14AC95A2-7675-4988-A5BD-3F5B943AED08}) (Version: 3.0.0.08140 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 3.1.0.10240 - Sony Corporation)
VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.1.0.10220 - Sony Corporation)
VAIO Gesture Control (x32 Version: 2.1.0.10220 - Sony Corporation) Hidden
VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.0.00.08170 - Sony Corporation)
VAIO Image Optimizer (x32 Version: 3.0.00.08170 - Sony Corporation) Hidden
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.1.0.10220 - Sony Corporation)
VAIO Media Server Settings (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.0.1.10170 - Sony Corporation)
VAIO Movie Creator (HKLM-x32\...\InstallShield_{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}) (Version: 4.0.00.10170 - Sony Corporation)
VAIO Movie Creator (x32 Version: 4.0.00.10170 - Sony Corporation) Hidden
VAIO Movie Creator Template Data (x32 Version: 4.0.00.08170 - Sony Corporation) Hidden
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)
VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.1.0.09200 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 3.0.0.08100 - Sony Corporation)
VAIO-Hardwarediagnose-Plugin für VAIO Care (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.7.0.11070 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.9.0.11060 - Sony Corporation)
VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32 - WildTangent) Hidden
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
VMLx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
WildTangent Games App (x32 Version: 4.0.9.7 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
16-04-2015 17:06:34 Windows Update
23-04-2015 19:52:47 Entfernt VAIO Update
30-04-2015 20:06:20 Geplanter Prüfpunkt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0BB788AC-D3A5-4E76-B412-7E0819DEE94B} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient
Task: {138F2CBB-E030-47B9-B2A0-0C891FC46792} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-12-03] (Sony Corporation)
Task: {1E985E5E-BA1B-4038-99B5-C5090F270456} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-08-14] (Sony Corporation)
Task: {321DD8C0-6BB4-48D4-8071-E99E1EBF8B33} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {4B6223EB-1433-4CB8-892B-AB2F1E1BB6BF} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-02-28] (Sony Corporation)
Task: {603AB8FB-6E1F-40E4-9F53-965CB2D58F81} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {649184AE-51A2-4DAE-93B4-73378001A66F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-17] (Microsoft Corporation)
Task: {6FB47000-90F3-417F-9F20-80D9B0C1BF9F} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)
Task: {733EE997-C7AF-4F8A-A1D0-7F982D019CB8} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2012-10-23] (Sony Corporation)
Task: {8725BC36-F4B1-41D2-8932-E4C8DAC33414} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-18] (Adobe Systems Incorporated)
Task: {8CE449DE-5EDA-462E-A028-DC9E20DA0CFE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004Core => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-20] (Facebook Inc.)
Task: {8F0DDD33-02DC-4F82-B464-04CE72B3970B} - System32\Tasks\Sony Corporation\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-11-08] (Sony Corporation)
Task: {8F125CCA-6E56-4EBC-8D00-B3988A729492} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {91818DDC-7F9E-4C23-B1A8-8FB8AA77251A} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {98D6D5C2-B393-4220-948E-BCE9E6BCC838} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {A13DA76B-B827-4E92-B9F6-39ACA7461B05} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {A54437AD-F854-4A53-B265-BA23F4DF21DF} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {AC8E4074-0F71-4988-9D99-EA229CA1DD7E} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {B0F4697F-C8D8-4EDB-8B9E-D76319B3F6A2} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-09-06] (Sony Corporation)
Task: {B40E403B-E9F9-42D6-9075-7C4D7AAB0C1D} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)
Task: {B7128737-0CA8-4385-AA28-3036080BF0D6} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2012-10-22] (Sony Corporation)
Task: {C2CE4BC8-09AF-4EA3-ABC8-2636381C371E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-07] (Google Inc.)
Task: {C595EB22-C169-4C93-817A-0D73F458D221} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004UA => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-20] (Facebook Inc.)
Task: {E21C7FCF-89BF-4753-85A2-C886DE339679} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)
Task: {E77DBC89-4C04-4DD2-BB2B-06037C4820C1} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {ED3E00F1-4CD3-470F-BCC9-355973738A94} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {EDCD271D-85D1-4DD5-8921-88872717C978} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2014-07-03] (Sony Corporation)
Task: {F85EFC36-4BEE-4C85-AB2D-1BEA0C5DF7B4} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)
Task: {F9EFF2BD-FB34-4D4E-BB11-5CDF4150AAB2} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-09-06] (Sony Corporation)
Task: {FBD7A980-182E-4A3D-9DFE-6588D31C7127} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-07] (Google Inc.)
Task: {FBD971D9-B957-4D11-884F-3E52F916528F} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {FF4CEAFF-5F7F-4041-9DDB-2718066BCD42} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004Core.job => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004UA.job => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2012-12-28 12:07 - 2012-12-28 12:07 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2012-12-28 12:04 - 2012-12-28 12:04 - 00084480 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2012-12-28 12:09 - 2012-12-28 12:09 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2012-11-13 02:55 - 2012-11-12 10:46 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-12-28 12:10 - 2012-12-28 12:10 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-12-28 12:04 - 2012-12-28 12:04 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2013-05-09 00:05 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-04-29 00:43 - 2015-04-28 04:07 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll
2015-04-29 00:43 - 2015-04-28 04:07 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\dd\Desktop\Unbenannt.png
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{A99E06ED-6765-4F4D-8992-F6139D60F771}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{4FF8D650-7C90-4C07-8908-C3DEE8432E12}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{B75614BF-E1FA-40CE-AF2C-5886AE365F57}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{1C30363B-E890-4857-9A45-DB8EC283957D}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
FirewallRules: [{217E1B42-FBED-4D5B-8D11-0B6449CE0408}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{287B3175-3665-4350-B33E-7583A1FF6511}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{558F3A75-EA16-4DD8-99F1-3D4225C8D6F4}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{5ED7891F-9069-4BCB-855E-085312C44DFD}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{7CE0F2D1-B252-49FE-A7AC-CF987B693278}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C75AC206-50FA-4B70-A5E7-264E0913BD56}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FB004A5A-DF2C-42FC-AF1D-DDFA127B4DF6}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{67D89AF0-3DBB-436C-80C8-E296EF161089}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{40152455-5C43-4941-B1B6-1BAB22C0056E}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{71ED2A8B-716A-40AB-817B-C01860646DAE}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [{46F02DE5-D069-4D78-8A75-145F0F4EA744}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/05/2015 02:44:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 02:32:35 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 01:34:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 01:19:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 01:19:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/05/2015 01:10:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147009284. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
System errors:
=============
Error: (05/05/2015 00:51:54 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Energy Server Service" wurde mit folgendem Fehler beendet:
%%268439612
Error: (05/05/2015 00:08:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Energy Server Service" wurde mit folgendem Fehler beendet:
%%268439612
Error: (05/04/2015 11:34:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Energy Server Service" wurde mit folgendem Fehler beendet:
%%268439612
Error: (04/30/2015 07:50:00 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.
Error: (04/26/2015 01:50:24 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {9F070738-F6EA-408A-A6BD-AED405E67A13}
Error: (04/24/2015 04:56:21 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40.
Error: (04/24/2015 01:29:18 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst McNaiAnn erreicht.
Error: (04/23/2015 08:15:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Energy Server Service" wurde mit folgendem Fehler beendet:
%%268439612
Error: (04/23/2015 08:11:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VCService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/23/2015 08:11:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VAIO Care Performance Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (05/05/2015 02:44:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 02:32:35 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter-2147009284
Error: (05/05/2015 02:32:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 01:34:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter-2147009284
Error: (05/05/2015 01:19:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
Error: (05/05/2015 01:19:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: BD9B8345.VAIOMessageCenter_05bme2bjq6sag!SonyCorporation.VAIOMessageCenter-2147009284
Error: (05/05/2015 01:10:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Dorothea)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147009284
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 3975.27 MB
Available physical RAM: 2248.92 MB
Total Pagefile: 8071.27 MB
Available Pagefile: 5773.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:437.41 GB) (Free:346.06 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: FB5BDC2F)
Partition: GPT Partition Type.
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-05-05 03:05:21
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000037 HGST_HTS545050A7E380 rev.GG2OAC90 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\dd\AppData\Local\Temp\fwdcapog.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1948] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007ff0071177a 4 bytes [71, 00, FF, 07]
.text C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[1948] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007ff00711782 4 bytes [71, 00, FF, 07]
.text C:\Windows\Explorer.EXE[1820] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007fefb251532 4 bytes [25, FB, FE, 07]
.text C:\Windows\Explorer.EXE[1820] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007fefb25153a 4 bytes [25, FB, FE, 07]
.text C:\Windows\Explorer.EXE[1820] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007fefb25165a 4 bytes [25, FB, FE, 07]
.text C:\Windows\Explorer.EXE[1820] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 306 000007ff0071177a 4 bytes [71, 00, FF, 07]
.text C:\Windows\Explorer.EXE[1820] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 314 000007ff00711782 4 bytes [71, 00, FF, 07]
.text C:\Program Files\Sony\VAIO Care\VCAgent.exe[1992] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 306 000007ff0071177a 4 bytes [71, 00, FF, 07]
.text C:\Program Files\Sony\VAIO Care\VCAgent.exe[1992] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 314 000007ff00711782 4 bytes [71, 00, FF, 07]
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\csrss.exe [716:740] fffff9600096f5e8
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
|
|
05.05.2015, 05:31
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. Hi,
__________________Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
|
05.05.2015, 09:33
| #3 |
| | Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. Vielen dank für die schnelle antwort.
__________________Ich habe die Anweisungne befolgt. Hier das TDSSKiller-Log: Code:
ATTFilter 10:24:03.0496 0x0ce8 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
10:24:03.0496 0x0ce8 UEFI system
10:24:13.0497 0x0ce8 ============================================================
10:24:13.0497 0x0ce8 Current date / time: 2015/05/05 10:24:13.0497
10:24:13.0497 0x0ce8 SystemInfo:
10:24:13.0497 0x0ce8
10:24:13.0497 0x0ce8 OS Version: 6.2.9200 ServicePack: 0.0
10:24:13.0497 0x0ce8 Product type: Workstation
10:24:13.0497 0x0ce8 ComputerName: DOROTHEA
10:24:13.0497 0x0ce8 UserName: dd
10:24:13.0497 0x0ce8 Windows directory: C:\Windows
10:24:13.0497 0x0ce8 System windows directory: C:\Windows
10:24:13.0497 0x0ce8 Running under WOW64
10:24:13.0497 0x0ce8 Processor architecture: Intel x64
10:24:13.0497 0x0ce8 Number of processors: 2
10:24:13.0497 0x0ce8 Page size: 0x1000
10:24:13.0497 0x0ce8 Boot type: Normal boot
10:24:13.0497 0x0ce8 ============================================================
10:24:14.0513 0x0ce8 KLMD registered as C:\Windows\system32\drivers\26213852.sys
10:24:14.0747 0x0ce8 System UUID: {025A08F5-5C34-E915-8EC3-5BBCF96B7794}
10:24:15.0247 0x0ce8 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:24:15.0263 0x0ce8 ============================================================
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0:
10:24:15.0263 0x0ce8 GPT partitions:
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {F4019732-066E-4E12-8273-346C5641494F}, UniqueGUID: {7C1A5D72-E62F-4155-ADEB-025BE469675B}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x82000
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {4D5801C3-F354-4AE2-B358-77768CDA1930}, Name: Basic data partition, StartLBA 0x82800, BlocksNum 0x2E1000
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {6B2EB595-5195-4605-95A8-4B988F3FDA3B}, Name: EFI system partition, StartLBA 0x363800, BlocksNum 0x82000
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {97904FF7-B084-4BC0-A6D6-365CDD5D4A56}, Name: Microsoft reserved partition, StartLBA 0x3E5800, BlocksNum 0x40000
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {547EBBBD-51B3-4B18-B3FE-09544382DD57}, Name: Basic data partition, StartLBA 0x425800, BlocksNum 0x36AD3000
10:24:15.0263 0x0ce8 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {965AAFE3-2C36-4EFE-813E-77725CDBF496}, Name: Basic data partition, StartLBA 0x36EF8800, BlocksNum 0x348D800
10:24:15.0263 0x0ce8 MBR partitions:
10:24:15.0263 0x0ce8 ============================================================
10:24:15.0279 0x0ce8 C: <-> \Device\Harddisk0\DR0\Partition5
10:24:15.0279 0x0ce8 ============================================================
10:24:15.0279 0x0ce8 Initialize success
10:24:15.0279 0x0ce8 ============================================================
10:26:22.0281 0x08d8 ============================================================
10:26:22.0281 0x08d8 Scan started
10:26:22.0281 0x08d8 Mode: Manual; SigCheck; TDLFS;
10:26:22.0281 0x08d8 ============================================================
10:26:22.0281 0x08d8 KSN ping started
10:26:24.0703 0x08d8 KSN ping finished: true
10:26:25.0469 0x08d8 ================ Scan system memory ========================
10:26:25.0469 0x08d8 System memory - ok
10:26:25.0469 0x08d8 ================ Scan services =============================
10:26:25.0641 0x08d8 [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
10:26:25.0734 0x08d8 1394ohci - ok
10:26:25.0797 0x08d8 [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware C:\Windows\system32\drivers\3ware.sys
10:26:25.0812 0x08d8 3ware - ok
10:26:25.0844 0x08d8 [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI C:\Windows\system32\drivers\ACPI.sys
10:26:25.0875 0x08d8 ACPI - ok
10:26:25.0906 0x08d8 [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex C:\Windows\system32\Drivers\acpiex.sys
10:26:25.0922 0x08d8 acpiex - ok
10:26:25.0938 0x08d8 [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
10:26:25.0969 0x08d8 acpipagr - ok
10:26:26.0000 0x08d8 [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
10:26:26.0031 0x08d8 AcpiPmi - ok
10:26:26.0047 0x08d8 [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime C:\Windows\System32\drivers\acpitime.sys
10:26:26.0094 0x08d8 acpitime - ok
10:26:26.0172 0x08d8 [ 4C72FDD915D62EAEF149BD9C73AB9CF4, 8EA45A1B88DFD819F0ADA3AF36D464E1BF52574269592370E0CC8D0490680E1F ] AdobeARMservice c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
10:26:26.0188 0x08d8 AdobeARMservice - ok
10:26:26.0328 0x08d8 [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
10:26:26.0344 0x08d8 AdobeFlashPlayerUpdateSvc - ok
10:26:26.0391 0x08d8 [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
10:26:26.0422 0x08d8 adp94xx - ok
10:26:26.0453 0x08d8 [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci C:\Windows\system32\drivers\adpahci.sys
10:26:26.0484 0x08d8 adpahci - ok
10:26:26.0500 0x08d8 [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
10:26:26.0516 0x08d8 adpu320 - ok
10:26:26.0578 0x08d8 [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
10:26:26.0625 0x08d8 AeLookupSvc - ok
10:26:26.0672 0x08d8 [ FE7FB9612D354EB41DF4F0FF5D6FB259, 98D5BD9C1300195C49CB0717A831A06D99F7AE631D5EA065E10BFE7C2FA57A18 ] AFD C:\Windows\system32\drivers\afd.sys
10:26:26.0703 0x08d8 AFD - ok
10:26:26.0734 0x08d8 [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440 C:\Windows\system32\drivers\agp440.sys
10:26:26.0750 0x08d8 agp440 - ok
10:26:26.0781 0x08d8 [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG C:\Windows\System32\alg.exe
10:26:26.0844 0x08d8 ALG - ok
10:26:26.0875 0x08d8 [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\Windows\system32\AUInstallAgent.dll
10:26:26.0906 0x08d8 AllUserInstallAgent - ok
10:26:26.0922 0x08d8 [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
10:26:26.0953 0x08d8 AmdK8 - ok
10:26:26.0984 0x08d8 [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
10:26:27.0031 0x08d8 AmdPPM - ok
10:26:27.0063 0x08d8 [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata C:\Windows\system32\drivers\amdsata.sys
10:26:27.0063 0x08d8 amdsata - ok
10:26:27.0094 0x08d8 [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
10:26:27.0109 0x08d8 amdsbs - ok
10:26:27.0125 0x08d8 [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata C:\Windows\system32\drivers\amdxata.sys
10:26:27.0125 0x08d8 amdxata - ok
10:26:27.0156 0x08d8 [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID C:\Windows\system32\drivers\appid.sys
10:26:27.0172 0x08d8 AppID - ok
10:26:27.0219 0x08d8 [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc C:\Windows\System32\appidsvc.dll
10:26:27.0266 0x08d8 AppIDSvc - ok
10:26:27.0297 0x08d8 [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo C:\Windows\System32\appinfo.dll
10:26:27.0313 0x08d8 Appinfo - ok
10:26:27.0344 0x08d8 [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc C:\Windows\system32\drivers\arc.sys
10:26:27.0359 0x08d8 arc - ok
10:26:27.0386 0x08d8 [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas C:\Windows\system32\drivers\arcsas.sys
10:26:27.0401 0x08d8 arcsas - ok
10:26:27.0417 0x08d8 [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
10:26:27.0433 0x08d8 AsyncMac - ok
10:26:27.0464 0x08d8 [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi C:\Windows\system32\drivers\atapi.sys
10:26:27.0464 0x08d8 atapi - ok
10:26:27.0511 0x08d8 [ CE2BCBDC20734F372B70B94704D3092D, 33C586C1A9C9D357A589F102341EFCFFE465553B54E7C875867F0E15587F53B7 ] AthBTPort C:\Windows\system32\DRIVERS\btath_flt.sys
10:26:27.0526 0x08d8 AthBTPort - ok
10:26:27.0573 0x08d8 [ D36B40AA8583089FE7A23693158CECF2, 795C90C11603CBED0C615811AD465FD23FC351251CFE49D137AB855D298611B7 ] AtherosSvc C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
10:26:27.0604 0x08d8 AtherosSvc - detected UnsignedFile.Multi.Generic ( 1 )
10:26:29.0980 0x08d8 Detect skipped due to KSN trusted
10:26:29.0980 0x08d8 AtherosSvc - ok
10:26:30.0120 0x08d8 [ 221F28472FB210E2D4A7B4488BC798F9, 1AB0224EBA40E3CA1347AAB571FE40D744F1F67851C660F9F25C5FEA1EF155C1 ] athr C:\Windows\system32\DRIVERS\athw8x.sys
10:26:30.0261 0x08d8 athr - ok
10:26:30.0323 0x08d8 [ 8FB10919E1283FD108334FDBFB173574, EAD11C6FA884AAC9E8534C267E9B1D2EAB1F2A396EACC900525465A2AEAB84D3 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
10:26:30.0370 0x08d8 AudioEndpointBuilder - ok
10:26:30.0417 0x08d8 [ 463E7457227E970CB249031AEAE7902C, 2F627BC558E5764592B08269F3EE4C6ECD544904963312A60F5B0C0B9C8C5D32 ] Audiosrv C:\Windows\System32\Audiosrv.dll
10:26:30.0448 0x08d8 Audiosrv - ok
10:26:30.0480 0x08d8 [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV C:\Windows\System32\AxInstSV.dll
10:26:30.0511 0x08d8 AxInstSV - ok
10:26:30.0558 0x08d8 [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
10:26:30.0589 0x08d8 b06bdrv - ok
10:26:30.0620 0x08d8 [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
10:26:30.0652 0x08d8 BasicDisplay - ok
10:26:30.0652 0x08d8 [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
10:26:30.0667 0x08d8 BasicRender - ok
10:26:30.0698 0x08d8 [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC C:\Windows\System32\bdesvc.dll
10:26:30.0714 0x08d8 BDESVC - ok
10:26:30.0745 0x08d8 [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep C:\Windows\system32\drivers\Beep.sys
10:26:30.0777 0x08d8 Beep - ok
10:26:30.0823 0x08d8 [ C72AB32F7EFCA677AF079F4336BC1609, 90FF653027709ADB674B2D4240E398E7A64D2079CBF56E3983008D92FA12EA0D ] BFE C:\Windows\System32\bfe.dll
10:26:30.0870 0x08d8 BFE - ok
10:26:30.0964 0x08d8 [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS C:\Windows\System32\qmgr.dll
10:26:31.0011 0x08d8 BITS - ok
10:26:31.0042 0x08d8 [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
10:26:31.0089 0x08d8 bowser - ok
10:26:31.0105 0x08d8 [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
10:26:31.0136 0x08d8 BrokerInfrastructure - ok
10:26:31.0167 0x08d8 [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser C:\Windows\System32\browser.dll
10:26:31.0198 0x08d8 Browser - ok
10:26:31.0245 0x08d8 [ 6A4643DCE663775C70CFCA8DB454E2A7, 07393385C2EA0519E342C52AC304A4D2D4A142A4E3D11F3BB2DEE4A2F1FD47C9 ] BTATH_A2DP C:\Windows\system32\drivers\btath_a2dp.sys
10:26:31.0261 0x08d8 BTATH_A2DP - ok
10:26:31.0261 0x08d8 [ 38383A47A110BDA90839BFA7A5918189, 876647EC7D5B5C02B8BD75A89BCC6174A05C9F26912ABA5116330CB367E7D3E5 ] btath_avdt C:\Windows\system32\drivers\btath_avdt.sys
10:26:31.0277 0x08d8 btath_avdt - ok
10:26:31.0292 0x08d8 [ D5418AF1B9AC86D89C045026EFBD5FB7, A23B6EEB5779DEE146E12207E6ED68EA514673436A9FC1ECBAE46D586F02D468 ] BTATH_BUS C:\Windows\System32\drivers\btath_bus.sys
10:26:31.0292 0x08d8 BTATH_BUS - ok
10:26:31.0308 0x08d8 [ 4AF7C20F94DAC343C01ED671C82DCB99, 2AABD85D9D76461DE883E0F13F61C391BA81E6198FF88268B319474E25A196C8 ] BTATH_HCRP C:\Windows\System32\drivers\btath_hcrp.sys
10:26:31.0308 0x08d8 BTATH_HCRP - ok
10:26:31.0323 0x08d8 [ 785C38070043BEEE9E9D591DE4067244, 1C8D15B8A9E80A2799E7094C4AE111FEA9FBC6EAA4A61B13EFE59314C9794949 ] BTATH_LWFLT C:\Windows\system32\DRIVERS\btath_lwflt.sys
10:26:31.0323 0x08d8 BTATH_LWFLT - ok
10:26:31.0339 0x08d8 [ A6019537D6125099363F90D0C6D181F9, CA0C46AABBF71E2A29C93A477A06D33E3CACC84978DD9D729BEFB339E50D7055 ] BTATH_RCP C:\Windows\System32\drivers\btath_rcp.sys
10:26:31.0339 0x08d8 BTATH_RCP - ok
10:26:31.0355 0x08d8 [ 9F1F7BD1BC1131820D1BC8EB842E6209, 9F677C125B4C6BE2ED7B20B394448202CECB2428432E3E51C7725F07596DEFDA ] BTATH_VDP C:\Windows\system32\drivers\btath_vdp.sys
10:26:31.0370 0x08d8 BTATH_VDP - ok
10:26:31.0386 0x08d8 [ 32DDD9C91224BE4BB4AB9DC96E4A9FBB, 15DB31B375A758C321D89B4609EC1ACA5DAD9F748B45D43231C118C246ADA9A6 ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys
10:26:31.0417 0x08d8 BtFilter - ok
10:26:31.0433 0x08d8 [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
10:26:31.0464 0x08d8 BthAvrcpTg - ok
10:26:31.0495 0x08d8 [ A8B20D852B07AE19A13B5D47EC4E4C3B, 86571C9E2BA15BB169CAB2D24C4D0598154C02FD173638CAFC685A7F6B09472D ] BthEnum C:\Windows\System32\drivers\BthEnum.sys
10:26:31.0527 0x08d8 BthEnum - ok
10:26:31.0558 0x08d8 [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
10:26:31.0573 0x08d8 BthHFEnum - ok
10:26:31.0605 0x08d8 [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
10:26:31.0636 0x08d8 bthhfhid - ok
10:26:31.0652 0x08d8 [ 42201C346F0B8C458E1E9CDE04D68A2C, 6168FD0D10CD06B00B5C79D5D2B5C353AAC22FD99CE8D417DDBA33ED63CFB8BF ] BthLEEnum C:\Windows\system32\DRIVERS\BthLEEnum.sys
10:26:31.0698 0x08d8 BthLEEnum - ok
10:26:31.0714 0x08d8 [ 033916CE8784A848B9A3D686B7F66D97, B4D0514D59646CF6B70D4FA488CF95C38EA38CC5C509329CC8753E897C640AFA ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
10:26:31.0761 0x08d8 BTHMODEM - ok
10:26:31.0761 0x08d8 [ 091BB978E9504D0AD14586929431A957, ACED02B879026A228E35F40847C210BC30A5AFC948FFE922DB21663E4A8DFF1D ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
10:26:31.0777 0x08d8 BthPan - ok
10:26:31.0855 0x08d8 [ 13795CAA34239D97A7211E7F9D96E012, C4F3402B063A7CFCE386D1AE9255975A199164BA9E7DCDB6129725213A0642B1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
10:26:31.0902 0x08d8 BTHPORT - ok
10:26:31.0948 0x08d8 [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv C:\Windows\system32\bthserv.dll
10:26:31.0995 0x08d8 bthserv - ok
10:26:32.0027 0x08d8 [ 1F715957F5236D30B6020A19A4271F6A, C06B637C2C6919E2DE1055AE249AE3EAF7B4890799F22BF5757CC10CEF145043 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
10:26:32.0042 0x08d8 BTHUSB - ok
10:26:32.0058 0x08d8 [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
10:26:32.0089 0x08d8 cdfs - ok
10:26:32.0105 0x08d8 [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom C:\Windows\System32\drivers\cdrom.sys
10:26:32.0152 0x08d8 cdrom - ok
10:26:32.0199 0x08d8 [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc C:\Windows\System32\certprop.dll
10:26:32.0245 0x08d8 CertPropSvc - ok
10:26:32.0277 0x08d8 [ 27468DB367ABCFE855796775DB949AC1, F2DFC8CFBFCDC94798A5ADAAC96001927F9CE316751D42651C3AF1E52F1DC7EF ] cfwids C:\Windows\system32\drivers\cfwids.sys
10:26:32.0292 0x08d8 cfwids - ok
10:26:32.0308 0x08d8 [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass C:\Windows\System32\drivers\circlass.sys
10:26:32.0339 0x08d8 circlass - ok
10:26:32.0386 0x08d8 [ 94250D5AE3E7269DB29BCF96E07F21A6, 538C6CDCD193AABDE40CC25220528F8F80AEF828C46D8660234CB0E592B607CB ] CLFS C:\Windows\system32\drivers\CLFS.sys
10:26:32.0402 0x08d8 CLFS - ok
10:26:32.0449 0x08d8 [ 075CCE75090786F124573A788C8656E6, AA188CFF2F8EE2D9F50701AB2315D24E15D7715FD84F5054D3FC175D4BD35734 ] CLVirtualDrive C:\Windows\system32\DRIVERS\CLVirtualDrive.sys
10:26:32.0464 0x08d8 CLVirtualDrive - ok
10:26:32.0495 0x08d8 [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
10:26:32.0527 0x08d8 CmBatt - ok
10:26:32.0574 0x08d8 [ 711E2E14AF1FC883AA6251FCE196DC1E, AF1EF693C5C2F08C40CCC3C56F72F6840559CCFBC26F2235C20A3478A8CE95E6 ] CNG C:\Windows\system32\Drivers\cng.sys
10:26:32.0589 0x08d8 CNG - ok
10:26:32.0605 0x08d8 [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
10:26:32.0636 0x08d8 CompositeBus - ok
10:26:32.0636 0x08d8 COMSysApp - ok
10:26:32.0667 0x08d8 [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv C:\Windows\system32\drivers\condrv.sys
10:26:32.0699 0x08d8 condrv - ok
10:26:32.0808 0x08d8 [ 49938E888C0840E02409F6A85525CB73, 976CB8E986F5726F625D597A99FDC86F27C1F564AE288608494C0BF79ABDBD28 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
10:26:32.0855 0x08d8 cphs - ok
10:26:32.0886 0x08d8 [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc C:\Windows\system32\cryptsvc.dll
10:26:32.0902 0x08d8 CryptSvc - ok
10:26:32.0917 0x08d8 [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam C:\Windows\system32\drivers\dam.sys
10:26:32.0933 0x08d8 dam - ok
10:26:32.0964 0x08d8 [ D06E443457FADC6B1AFAF3AA4B6936F6, 109B4D05E156604AFB3D63B380CC063B900AEB12F57A1D235B9F9399EE0909C7 ] dc3d C:\Windows\system32\DRIVERS\dc3d.sys
10:26:32.0980 0x08d8 dc3d - ok
10:26:33.0058 0x08d8 [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch C:\Windows\system32\rpcss.dll
10:26:33.0089 0x08d8 DcomLaunch - ok
10:26:33.0120 0x08d8 [ FC1569B5705887D74FE7C8A39BE1C71C, 7DEB8FE472C72C439A2F54B6277C0A87AC2083869BD9AF8226071B7AA33B09FF ] defragsvc C:\Windows\System32\defragsvc.dll
10:26:33.0167 0x08d8 defragsvc - ok
10:26:33.0214 0x08d8 [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\Windows\system32\das.dll
10:26:33.0261 0x08d8 DeviceAssociationService - ok
10:26:33.0292 0x08d8 [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
10:26:33.0308 0x08d8 DeviceInstall - ok
10:26:33.0355 0x08d8 [ 431141C6859990824D17F71C30A78728, 448B3DC20C8FDD5B66217E0E01DBCC4904F94BDA0826F109D139DDD2C2D7FBF2 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
10:26:33.0386 0x08d8 Dfsc - ok
10:26:33.0417 0x08d8 [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp C:\Windows\system32\dhcpcore.dll
10:26:33.0449 0x08d8 Dhcp - ok
10:26:33.0480 0x08d8 [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache C:\Windows\system32\drivers\discache.sys
10:26:33.0495 0x08d8 discache - ok
10:26:33.0527 0x08d8 [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk C:\Windows\system32\drivers\disk.sys
10:26:33.0542 0x08d8 disk - ok
10:26:33.0558 0x08d8 [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
10:26:33.0574 0x08d8 dmvsc - ok
10:26:33.0605 0x08d8 [ B9450BC3F1820A99D010D7426BCA60E9, FC7C35A0C522E5DA52B0616CF99F4903EAC14946180A18A8D8A0FF555BAA87C5 ] Dnscache C:\Windows\System32\dnsrslvr.dll
10:26:33.0636 0x08d8 Dnscache - ok
10:26:33.0683 0x08d8 [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc C:\Windows\System32\dot3svc.dll
10:26:33.0730 0x08d8 dot3svc - ok
10:26:33.0777 0x08d8 [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS C:\Windows\system32\dps.dll
10:26:33.0792 0x08d8 DPS - ok
10:26:33.0824 0x08d8 [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
10:26:33.0855 0x08d8 drmkaud - ok
10:26:33.0886 0x08d8 [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
10:26:33.0902 0x08d8 DsmSvc - ok
10:26:33.0964 0x08d8 [ 2BB5627EB587FA995086C3D8C21B6D3F, 871E35BBE66180781324D38823B74263B660CF9254EE348A15421FAC5667F294 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
10:26:34.0011 0x08d8 DXGKrnl - ok
10:26:34.0058 0x08d8 [ CFE0E3D5EFBF0649E5900CBFCC2B95F7, 8C6C4579048D0D9C43742DBD55CB2E704914D46016BBBF68FCD860320605C6F1 ] e1yexpress C:\Windows\system32\DRIVERS\e1y60x64.sys
10:26:34.0089 0x08d8 e1yexpress - ok
10:26:34.0120 0x08d8 [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost C:\Windows\System32\eapsvc.dll
10:26:34.0152 0x08d8 Eaphost - ok
10:26:34.0292 0x08d8 [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv C:\Windows\system32\drivers\evbda.sys
10:26:34.0417 0x08d8 ebdrv - ok
10:26:34.0449 0x08d8 [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] EFS C:\Windows\System32\lsass.exe
10:26:34.0480 0x08d8 EFS - ok
10:26:34.0511 0x08d8 [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
10:26:34.0527 0x08d8 EhStorClass - ok
10:26:34.0542 0x08d8 [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
10:26:34.0542 0x08d8 EhStorTcgDrv - ok
10:26:34.0558 0x08d8 [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev C:\Windows\System32\drivers\errdev.sys
10:26:34.0574 0x08d8 ErrDev - ok
10:26:34.0636 0x08d8 [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem C:\Windows\system32\es.dll
10:26:34.0667 0x08d8 EventSystem - ok
10:26:34.0699 0x08d8 [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat C:\Windows\system32\drivers\exfat.sys
10:26:34.0714 0x08d8 exfat - ok
10:26:34.0730 0x08d8 [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat C:\Windows\system32\drivers\fastfat.sys
10:26:34.0746 0x08d8 fastfat - ok
10:26:34.0792 0x08d8 [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax C:\Windows\system32\fxssvc.exe
10:26:34.0824 0x08d8 Fax - ok
10:26:34.0855 0x08d8 [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc C:\Windows\System32\drivers\fdc.sys
10:26:34.0871 0x08d8 fdc - ok
10:26:34.0902 0x08d8 [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost C:\Windows\system32\fdPHost.dll
10:26:34.0933 0x08d8 fdPHost - ok
10:26:34.0949 0x08d8 [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub C:\Windows\system32\fdrespub.dll
10:26:34.0980 0x08d8 FDResPub - ok
10:26:35.0011 0x08d8 [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc C:\Windows\system32\fhsvc.dll
10:26:35.0027 0x08d8 fhsvc - ok
10:26:35.0058 0x08d8 [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
10:26:35.0074 0x08d8 FileInfo - ok
10:26:35.0074 0x08d8 [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
10:26:35.0105 0x08d8 Filetrace - ok
10:26:35.0121 0x08d8 [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
10:26:35.0136 0x08d8 flpydisk - ok
10:26:35.0152 0x08d8 [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
10:26:35.0167 0x08d8 FltMgr - ok
10:26:35.0230 0x08d8 [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache C:\Windows\system32\FntCache.dll
10:26:35.0292 0x08d8 FontCache - ok
10:26:35.0386 0x08d8 [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
10:26:35.0402 0x08d8 FontCache3.0.0.0 - ok
10:26:35.0433 0x08d8 [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
10:26:35.0449 0x08d8 FsDepends - ok
10:26:35.0449 0x08d8 [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
10:26:35.0464 0x08d8 Fs_Rec - ok
10:26:35.0511 0x08d8 [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
10:26:35.0527 0x08d8 fvevol - ok
10:26:35.0558 0x08d8 [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
10:26:35.0589 0x08d8 FxPPM - ok
10:26:35.0621 0x08d8 [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
10:26:35.0636 0x08d8 gagp30kx - ok
10:26:35.0730 0x08d8 [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
10:26:35.0761 0x08d8 GamesAppService - ok
10:26:35.0777 0x08d8 [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
10:26:35.0808 0x08d8 gencounter - ok
10:26:35.0855 0x08d8 [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
10:26:35.0871 0x08d8 GPIOClx0101 - ok
10:26:35.0996 0x08d8 [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc C:\Windows\System32\gpsvc.dll
10:26:36.0058 0x08d8 gpsvc - ok
10:26:36.0089 0x08d8 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:26:36.0105 0x08d8 gupdate - ok
10:26:36.0105 0x08d8 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
10:26:36.0121 0x08d8 gupdatem - ok
10:26:36.0152 0x08d8 [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:26:36.0199 0x08d8 HdAudAddService - ok
10:26:36.0214 0x08d8 [ 58CC013EFA9893057160EDA018D8ADCE, BE8AA220CFBD90202C1B130DF349C3198E3447F3C2DC7BC5FC8816F57F78BA00 ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
10:26:36.0246 0x08d8 HDAudBus - ok
10:26:36.0261 0x08d8 [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
10:26:36.0292 0x08d8 HidBatt - ok
10:26:36.0324 0x08d8 [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth C:\Windows\System32\drivers\hidbth.sys
10:26:36.0355 0x08d8 HidBth - ok
10:26:36.0371 0x08d8 [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
10:26:36.0402 0x08d8 hidi2c - ok
10:26:36.0433 0x08d8 [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr C:\Windows\System32\drivers\hidir.sys
10:26:36.0449 0x08d8 HidIr - ok
10:26:36.0496 0x08d8 [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv C:\Windows\system32\hidserv.dll
10:26:36.0511 0x08d8 hidserv - ok
10:26:36.0543 0x08d8 [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb C:\Windows\System32\drivers\hidusb.sys
10:26:36.0574 0x08d8 HidUsb - ok
10:26:36.0605 0x08d8 [ 29F981739E50305128022CBE10B3659C, 25060937145B0DCA8CD088E78993BFEF1430CDDFF433E606AFC93993CBBF4B3E ] HipShieldK C:\Windows\system32\drivers\HipShieldK.sys
10:26:36.0621 0x08d8 HipShieldK - ok
10:26:36.0667 0x08d8 [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc C:\Windows\system32\kmsvc.dll
10:26:36.0699 0x08d8 hkmsvc - ok
10:26:36.0730 0x08d8 [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:26:36.0746 0x08d8 HomeGroupListener - ok
10:26:36.0792 0x08d8 [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:26:36.0824 0x08d8 HomeGroupProvider - ok
10:26:36.0949 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] HomeNetSvc C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
10:26:36.0964 0x08d8 HomeNetSvc - ok
10:26:37.0011 0x08d8 [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
10:26:37.0027 0x08d8 HpSAMD - ok
10:26:37.0074 0x08d8 [ 258A9103842E36CD27D07D5A1F6D2A23, 883E797263DB0A971C5FDDB588AAE041DD1021F079A891E8AA4525799C795B04 ] HTTP C:\Windows\system32\drivers\HTTP.sys
10:26:37.0121 0x08d8 HTTP - ok
10:26:37.0152 0x08d8 [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
10:26:37.0214 0x08d8 hwpolicy - ok
10:26:37.0230 0x08d8 [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
10:26:37.0261 0x08d8 hyperkbd - ok
10:26:37.0277 0x08d8 [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
10:26:37.0308 0x08d8 HyperVideo - ok
10:26:37.0324 0x08d8 [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
10:26:37.0355 0x08d8 i8042prt - ok
10:26:37.0433 0x08d8 [ 6C91E425ACE29594BD574DE38AC9B76D, 697784E4C7AF08B1F35662D8AD871E6890CECE22B6E64985B7C1A66C10DA390D ] iaStorA C:\Windows\system32\drivers\iaStorA.sys
10:26:37.0449 0x08d8 iaStorA - ok
10:26:37.0511 0x08d8 [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
10:26:37.0527 0x08d8 iaStorV - ok
10:26:37.0668 0x08d8 [ 15C9BF6968A0990D8F4161A6ABEB7229, BBF73B50938DB9EA50EE0CFF37277E44FE50EA666FA6E5AF542C8C40DBAD84CA ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
10:26:37.0730 0x08d8 IconMan_R - ok
10:26:38.0011 0x08d8 [ 87B67C33144BE5A68D20D9BE4D528E43, 7F8F0CF99541DD721ACAB8A709B6BA2418B2F79532BF252859012E43D83A3F5B ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
10:26:38.0308 0x08d8 igfx - ok
10:26:38.0339 0x08d8 [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
10:26:38.0355 0x08d8 iirsp - ok
10:26:38.0433 0x08d8 [ 644D7E4EAC8D5CE757435FA98A7BDA50, 7C91F6E75B148E69BF701F0152CDBF8FB94009935EE97F5208560E1E8FEDA4DB ] IKEEXT C:\Windows\System32\ikeext.dll
10:26:38.0480 0x08d8 IKEEXT - ok
10:26:38.0636 0x08d8 [ DDC860724AEF8F8E42AC61E6585769C6, 62AD5772E8097B03E161E6F14582E2A4BBA0DFA1A1E7F664D881D464E136DBD2 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
10:26:38.0793 0x08d8 IntcAzAudAddService - ok
10:26:38.0839 0x08d8 [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
10:26:38.0871 0x08d8 IntcDAud - ok
10:26:38.0949 0x08d8 [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
10:26:38.0964 0x08d8 Intel(R) Capability Licensing Service Interface - ok
10:26:39.0043 0x08d8 [ 9656F8E29F6C3161A3E99BCD3A472FF9, 30AD00B53CCB2E4121508729F3471D3C0568F1C32324C398382C97E8BC43ECF0 ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
10:26:39.0058 0x08d8 Intel(R) ME Service - ok
10:26:39.0090 0x08d8 [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide C:\Windows\system32\drivers\intelide.sys
10:26:39.0105 0x08d8 intelide - ok
10:26:39.0136 0x08d8 [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm C:\Windows\System32\drivers\intelppm.sys
10:26:39.0152 0x08d8 intelppm - ok
10:26:39.0168 0x08d8 [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:26:39.0199 0x08d8 IpFilterDriver - ok
10:26:39.0261 0x08d8 [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
10:26:39.0308 0x08d8 iphlpsvc - ok
10:26:39.0339 0x08d8 [ A4071DA3AE419F9694BFCB267C7DB8D7, 392DEE1DA51606C29418A98D2861F115E9F67C688B4281C53E87BA73A98809FB ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
10:26:39.0371 0x08d8 IPMIDRV - ok
10:26:39.0402 0x08d8 [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
10:26:39.0433 0x08d8 IPNAT - ok
10:26:39.0449 0x08d8 [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM C:\Windows\system32\drivers\irenum.sys
10:26:39.0465 0x08d8 IRENUM - ok
10:26:39.0480 0x08d8 [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp C:\Windows\system32\drivers\isapnp.sys
10:26:39.0480 0x08d8 isapnp - ok
10:26:39.0511 0x08d8 [ E6530FD4F61B40F338BF4355A21B9A09, FE9BF039B9901BEC260A69F7C49ACFA9881AD470DCCBA70C7EC36F518DA71702 ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
10:26:39.0543 0x08d8 iScsiPrt - ok
10:26:39.0590 0x08d8 [ 78ABBE558F57144047F10A0F50FE4B2F, 6BE608F7697D83FD6C7E6EA422AC5637933BDC96B1044C12DE9A419CE7D6F6CE ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
10:26:39.0590 0x08d8 jhi_service - ok
10:26:39.0636 0x08d8 [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
10:26:39.0636 0x08d8 kbdclass - ok
10:26:39.0652 0x08d8 [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
10:26:39.0668 0x08d8 kbdhid - ok
10:26:39.0668 0x08d8 [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
10:26:39.0683 0x08d8 kdnic - ok
10:26:39.0699 0x08d8 [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] KeyIso C:\Windows\system32\lsass.exe
10:26:39.0730 0x08d8 KeyIso - ok
10:26:39.0761 0x08d8 [ 8B3EB6372436195B8EA8AE09A184BCE2, 9AFB7A9D6AEEBF5994C85B355155024768116E2D537C9FA169BC3F4594ECD35C ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
10:26:39.0761 0x08d8 KSecDD - ok
10:26:39.0808 0x08d8 [ 0EB535ADDC065F2D0CBFC089630A6065, F6DD544227A5B7A0C80E401EB5461963567A24834C60AF520FBABC1A9FB4E631 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
10:26:39.0808 0x08d8 KSecPkg - ok
10:26:39.0824 0x08d8 [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
10:26:39.0855 0x08d8 ksthunk - ok
10:26:39.0886 0x08d8 [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm C:\Windows\system32\msdtckrm.dll
10:26:39.0933 0x08d8 KtmRm - ok
10:26:39.0965 0x08d8 [ 05A5B36592BB5F371B6AB020A2691E42, 384230A10EA0394E260282509B7D8EFCBFF8814611F6EFAB2DD346B97963EC55 ] LanmanServer C:\Windows\system32\srvsvc.dll
10:26:39.0996 0x08d8 LanmanServer - ok
10:26:40.0043 0x08d8 [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:26:40.0058 0x08d8 LanmanWorkstation - ok
10:26:40.0105 0x08d8 [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
10:26:40.0152 0x08d8 lltdio - ok
10:26:40.0199 0x08d8 [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc C:\Windows\System32\lltdsvc.dll
10:26:40.0230 0x08d8 lltdsvc - ok
10:26:40.0261 0x08d8 [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts C:\Windows\System32\lmhsvc.dll
10:26:40.0293 0x08d8 lmhosts - ok
10:26:40.0308 0x08d8 [ 2C24DC448DBE8DB9BE1441B824C57E79, DA2257EEC964A47D03C2BB13317FD788E51D4685E2395B303ED7B2575FEF3B19 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
10:26:40.0324 0x08d8 LMS - ok
10:26:40.0355 0x08d8 [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
10:26:40.0371 0x08d8 LSI_SAS - ok
10:26:40.0402 0x08d8 [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
10:26:40.0402 0x08d8 LSI_SAS2 - ok
10:26:40.0418 0x08d8 [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
10:26:40.0433 0x08d8 LSI_SCSI - ok
10:26:40.0449 0x08d8 [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
10:26:40.0465 0x08d8 LSI_SSS - ok
10:26:40.0543 0x08d8 [ 1DC9B701F8EB7D67774035AC9C3104F6, 77371267CDA605F78674BF8FA14B134B22299CD96EADA60A68762207595F0B46 ] LSM C:\Windows\System32\lsm.dll
10:26:40.0599 0x08d8 LSM - ok
10:26:40.0630 0x08d8 [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv C:\Windows\system32\drivers\luafv.sys
10:26:40.0666 0x08d8 luafv - ok
10:26:40.0689 0x08d8 [ CF12E148C6FC151335B7D7FE03F1C7A2, 7087DF6D884AF0A57AC22D7AE9C2903913AAB4CE52D19666B6513C3D5706E43C ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
10:26:40.0701 0x08d8 MBAMProtector - ok
10:26:40.0760 0x08d8 [ E27891A49DF92004041FEC5C3A2D4230, A4679A1F10F84935875E35A83FC7075499B8F4CBB543209A38C0D946347CD264 ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
10:26:40.0792 0x08d8 MBAMService - ok
10:26:40.0823 0x08d8 [ 7FD0FDFB97D80B21195273C4C3810FE1, E1072821AB338F45740DE6CF7BDB7C676CC67AB4BFC2ACF78773ABB424152D2C ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
10:26:40.0823 0x08d8 MBAMWebAccessControl - ok
10:26:40.0901 0x08d8 [ 96E7AA538AB0EDECCAB3862BA4B66232, 8AF460093B4DC1FD81C4508A57B6A80A7FB2E1818A3405506B8DB5B521615FB6 ] McAPExe C:\Program Files\McAfee\MSC\McAPExe.exe
10:26:40.0917 0x08d8 McAPExe - ok
10:26:40.0963 0x08d8 [ 1E3AF124A3405EEE594BB9FFD4640F48, 7916D86433A6A305CC9699A8901795E74A22C99A2C6B091BAC951E30F7510FF7 ] McAWFwk c:\PROGRA~1\mcafee\msc\mcawfwk.exe
10:26:40.0979 0x08d8 McAWFwk - ok
10:26:41.0042 0x08d8 [ 1704A8189EE5580AB147CFD25C5C8770, DFA076FD36B5CC844D4BE3B865E9A1F809E14CCB1D78D82A2D8D8EE38210E6EB ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
10:26:41.0073 0x08d8 McComponentHostService - ok
10:26:41.0151 0x08d8 [ 77AB66599EAFF797744D17C502FECDB9, E3A356AC3D6958B08C126D2C4231F2F7A655348606AE53FB95C6DA17908B32D1 ] McComponentHostServiceSony C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe
10:26:41.0182 0x08d8 McComponentHostServiceSony - ok
10:26:41.0198 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] McMPFSvc C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
10:26:41.0213 0x08d8 McMPFSvc - ok
10:26:41.0229 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] McNaiAnn C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
10:26:41.0245 0x08d8 McNaiAnn - ok
10:26:41.0354 0x08d8 [ 7F8446D8AD9161B34DC7C209FB148A5A, 26B07EB138992586FC410849172A63ACC26D99ED59B568EFF9C93ED2EB129453 ] McODS C:\Program Files\mcafee\VirusScan\mcods.exe
10:26:41.0370 0x08d8 McODS - ok
10:26:41.0417 0x08d8 [ C121367D21599367F2ADB9C11B7BABAA, 752993437AB2C797B5C0FFD397BC8FAC575886857C61BCCCCF169DA54BEE911C ] McOobeSv C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
10:26:41.0417 0x08d8 McOobeSv - ok
10:26:41.0448 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] McOobeSv2 C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
10:26:41.0448 0x08d8 McOobeSv2 - ok
10:26:41.0464 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] mcpltsvc C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
10:26:41.0479 0x08d8 mcpltsvc - ok
10:26:41.0495 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] McProxy C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
10:26:41.0495 0x08d8 McProxy - ok
10:26:41.0510 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] McSchedulerSvc C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
10:26:41.0526 0x08d8 McSchedulerSvc - ok
10:26:41.0542 0x08d8 [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas C:\Windows\system32\drivers\megasas.sys
10:26:41.0557 0x08d8 megasas - ok
10:26:41.0589 0x08d8 [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
10:26:41.0620 0x08d8 MegaSR - ok
10:26:41.0635 0x08d8 [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] MEIx64 C:\Windows\System32\drivers\HECIx64.sys
10:26:41.0651 0x08d8 MEIx64 - ok
10:26:41.0698 0x08d8 [ D0574EF9490EBD32DFA14D3C16195DE2, 7F5623562E74BD09717103247CE9155F07092BC633B5647ED3C99A95283413B4 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
10:26:41.0698 0x08d8 mfeapfk - ok
10:26:41.0745 0x08d8 [ 7B6A4509A2444F5F0689B2579E245177, 95A3A3560E253B7459F1B7C9E4E21008C725BA1A2C5F4E5FBAD1AB383058E2F6 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
10:26:41.0760 0x08d8 mfeavfk - ok
10:26:41.0854 0x08d8 [ 28E4FB2E9918C2E680BE9FD8E130471C, DFD1738F2CC0743F2CD9754CAFFFFC4D38590AF8AD2E1159F8FEAC9E9922E4B8 ] mfecore C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
10:26:41.0885 0x08d8 mfecore - ok
10:26:41.0901 0x08d8 [ DD19F44DE0F742B2E89FB6489A2F7197, B6BF5236181492B9996471469E18C3A11ECD6224BE740BA312771E1A7D4AD6BD ] mfeelamk C:\Windows\system32\drivers\mfeelamk.sys
10:26:41.0917 0x08d8 mfeelamk - ok
10:26:41.0964 0x08d8 [ E7C6587AC8FB0BABEF6AB1733AFA8FEC, 1624B8D9C9431A2030B8C8CFAA90F56A9EE4039D2426A521C4102A68D2F8E3CD ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
10:26:41.0979 0x08d8 mfefire - ok
10:26:42.0042 0x08d8 [ 92AD9892D534CA58E020375C94E0307E, 3062625853C759852C5172040C69840315676A01A62EECFC53F55E6379DB190C ] mfefirek C:\Windows\system32\drivers\mfefirek.sys
10:26:42.0057 0x08d8 mfefirek - ok
10:26:42.0135 0x08d8 [ B6622A5B197D021647AE20E0D4C229B9, 15D64928FDB207C183A69E7CFB90BFFBF25F1AB14059EDEFDF021F323025F4E8 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
10:26:42.0151 0x08d8 mfehidk - ok
10:26:42.0307 0x08d8 [ 72825BFA5F403E055B37F9D6E512EB93, 148D12AB19CD0E8D3800967582D0A1AB868EB9024A43F8E56C8E979C659BF88B ] mfeicfcoreocp C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe
10:26:42.0432 0x08d8 mfeicfcoreocp - ok
10:26:42.0495 0x08d8 [ 6CD9133BC4B5DF25FB8BCBC382C8466F, F3C938D1EDD61EE1B227112CB027804E0AAD16CBCDD67EEE1D8EAABDFC996BA1 ] mfencbdc C:\Windows\system32\DRIVERS\mfencbdc.sys
10:26:42.0510 0x08d8 mfencbdc - ok
10:26:42.0542 0x08d8 [ 408DC249009CDB3C9B299716C861C64B, 3EFBFA8EE857CBF4C6A29E0D1DA38EB21B57D5BA1F6CC544503CA8253E9BFF12 ] mfencrk C:\Windows\system32\DRIVERS\mfencrk.sys
10:26:42.0557 0x08d8 mfencrk - ok
10:26:42.0589 0x08d8 [ 64BAFB4E5377056CDD71531097D69F6E, 28B434C1DB9AD930C5A32584C51FE1B3A4526952EBC953DAE775701E270C76C5 ] mfevtp C:\Windows\system32\mfevtps.exe
10:26:42.0604 0x08d8 mfevtp - ok
10:26:42.0620 0x08d8 [ A58F979117A424CDB33C21396887800F, E857E74BB08E49AEDC7EE21C9FDA36053113E04F8D29B9DBC3A2A3F0667915C6 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
10:26:42.0635 0x08d8 mfewfpk - ok
10:26:42.0667 0x08d8 [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS C:\Windows\system32\mmcss.dll
10:26:42.0698 0x08d8 MMCSS - ok
10:26:42.0745 0x08d8 [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem C:\Windows\system32\drivers\modem.sys
10:26:42.0792 0x08d8 Modem - ok
10:26:42.0807 0x08d8 [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor C:\Windows\System32\drivers\monitor.sys
10:26:42.0839 0x08d8 monitor - ok
10:26:42.0870 0x08d8 [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass C:\Windows\System32\drivers\mouclass.sys
10:26:42.0885 0x08d8 mouclass - ok
10:26:42.0917 0x08d8 [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid C:\Windows\System32\drivers\mouhid.sys
10:26:42.0948 0x08d8 mouhid - ok
10:26:42.0964 0x08d8 [ E7E9DBFDD3F25ED0C05B99AE9FA18BDE, 6D0204BA271FD3262DAE6E6BF9C12C0D49E3C9AF40EB1E072BD5CA5E2B8598D5 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
10:26:42.0979 0x08d8 mountmgr - ok
10:26:43.0051 0x08d8 [ 03D14BF1DC59130002F6B8BA3AD89DB9, 1729CCD8AAF51CDB86ED67569974D0B6B1CFFA5F90EF6E6004B0D8A305D88C27 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
10:26:43.0065 0x08d8 MozillaMaintenance - ok
10:26:43.0095 0x08d8 [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
10:26:43.0126 0x08d8 mpsdrv - ok
10:26:43.0175 0x08d8 [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc C:\Windows\system32\mpssvc.dll
10:26:43.0211 0x08d8 MpsSvc - ok
10:26:43.0268 0x08d8 [ 25560C1656DC7F0723A0CC0B0E1C6BED, 17E8565B833ED58CCB6F85B90A42553464C4408C54006E019AA5641EDB682E31 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
10:26:43.0284 0x08d8 MRxDAV - ok
10:26:43.0315 0x08d8 [ 14EE56050E1637926F5CFA65B1F4209B, C654280B4BB461898B43DF350B5BB76C2FDEBD6B49A19D08B2F28D92E2FA3D0D ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
10:26:43.0346 0x08d8 mrxsmb - ok
10:26:43.0377 0x08d8 [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:26:43.0409 0x08d8 mrxsmb10 - ok
10:26:43.0441 0x08d8 [ 0AA400AB21745F1153ECE75E0186509A, E26696A00008BB8D88ABED6F379FFFAE21ACE9AA7108D9E89A7D99CAF2F23FEF ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:26:43.0509 0x08d8 mrxsmb20 - ok
10:26:43.0548 0x08d8 [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
10:26:43.0565 0x08d8 MsBridge - ok
10:26:43.0601 0x08d8 [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC C:\Windows\System32\msdtc.exe
10:26:43.0632 0x08d8 MSDTC - ok
10:26:43.0663 0x08d8 [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs C:\Windows\system32\drivers\Msfs.sys
10:26:43.0695 0x08d8 Msfs - ok
10:26:43.0726 0x08d8 [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
10:26:43.0744 0x08d8 msgpiowin32 - ok
10:26:43.0755 0x08d8 [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
10:26:43.0782 0x08d8 mshidkmdf - ok
10:26:43.0797 0x08d8 [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
10:26:43.0813 0x08d8 mshidumdf - ok
10:26:43.0828 0x08d8 [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
10:26:43.0844 0x08d8 msisadrv - ok
10:26:43.0891 0x08d8 [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI C:\Windows\system32\iscsiexe.dll
10:26:43.0922 0x08d8 MSiSCSI - ok
10:26:43.0922 0x08d8 msiserver - ok
10:26:43.0938 0x08d8 [ FB11715EEB23D0999C2295177EBBA5C0, 533754A3591B5852253C793CE08ADA6CAD0545E3A11F42430EFA9D959B6BF4F7 ] MSK80Service C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
10:26:43.0953 0x08d8 MSK80Service - ok
10:26:44.0000 0x08d8 [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
10:26:44.0018 0x08d8 MSKSSRV - ok
10:26:44.0044 0x08d8 [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
10:26:44.0063 0x08d8 MsLldp - ok
10:26:44.0079 0x08d8 [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
10:26:44.0091 0x08d8 MSPCLOCK - ok
10:26:44.0104 0x08d8 [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
10:26:44.0130 0x08d8 MSPQM - ok
10:26:44.0142 0x08d8 [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
10:26:44.0165 0x08d8 MsRPC - ok
10:26:44.0171 0x08d8 [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
10:26:44.0182 0x08d8 mssmbios - ok
10:26:44.0209 0x08d8 [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
10:26:44.0240 0x08d8 MSTEE - ok
10:26:44.0254 0x08d8 [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
10:26:44.0280 0x08d8 MTConfig - ok
10:26:44.0312 0x08d8 [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup C:\Windows\system32\Drivers\mup.sys
10:26:44.0325 0x08d8 Mup - ok
10:26:44.0336 0x08d8 [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis C:\Windows\system32\drivers\mvumis.sys
10:26:44.0351 0x08d8 mvumis - ok
10:26:44.0398 0x08d8 [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent C:\Windows\system32\qagentRT.dll
10:26:44.0445 0x08d8 napagent - ok
10:26:44.0493 0x08d8 [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
10:26:44.0532 0x08d8 NativeWifiP - ok
10:26:44.0572 0x08d8 [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc C:\Windows\System32\ncasvc.dll
10:26:44.0603 0x08d8 NcaSvc - ok
10:26:44.0603 0x08d8 [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
10:26:44.0635 0x08d8 NcdAutoSetup - ok
10:26:44.0697 0x08d8 [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS C:\Windows\system32\drivers\ndis.sys
10:26:44.0728 0x08d8 NDIS - ok
10:26:44.0744 0x08d8 [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
10:26:44.0775 0x08d8 NdisCap - ok
10:26:44.0792 0x08d8 [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
10:26:44.0823 0x08d8 NdisImPlatform - ok
10:26:44.0839 0x08d8 [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
10:26:44.0870 0x08d8 NdisTapi - ok
10:26:44.0886 0x08d8 [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
10:26:44.0917 0x08d8 Ndisuio - ok
10:26:44.0933 0x08d8 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
10:26:44.0948 0x08d8 NdisWan - ok
10:26:44.0948 0x08d8 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY C:\Windows\system32\DRIVERS\ndiswan.sys
10:26:44.0964 0x08d8 NDISWANLEGACY - ok
10:26:44.0995 0x08d8 [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
10:26:44.0995 0x08d8 NDProxy - ok
10:26:45.0011 0x08d8 [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu C:\Windows\system32\drivers\Ndu.sys
10:26:45.0046 0x08d8 Ndu - ok
10:26:45.0050 0x08d8 [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
10:26:45.0068 0x08d8 NetBIOS - ok
10:26:45.0105 0x08d8 [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
10:26:45.0140 0x08d8 NetBT - ok
10:26:45.0157 0x08d8 [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] Netlogon C:\Windows\system32\lsass.exe
10:26:45.0169 0x08d8 Netlogon - ok
10:26:45.0209 0x08d8 [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman C:\Windows\System32\netman.dll
10:26:45.0241 0x08d8 Netman - ok
10:26:45.0279 0x08d8 [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm C:\Windows\System32\netprofmsvc.dll
10:26:45.0316 0x08d8 netprofm - ok
10:26:45.0377 0x08d8 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
10:26:45.0456 0x08d8 NetTcpPortSharing - ok
10:26:45.0534 0x08d8 [ 109413059775750CE8248A491834514E, F8665953F9E5EA3FA1B1020C0DA7DF1F82D97D204D6D9A32B81F48534903B098 ] NetworkSupport C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe
10:26:45.0549 0x08d8 NetworkSupport - ok
10:26:45.0581 0x08d8 [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
10:26:45.0581 0x08d8 nfrd960 - ok
10:26:45.0612 0x08d8 [ 5177E35B186D2DED6F1EFF57BA61B975, B48C2E0FE2E95C37697107BDB8E0843D3E56200D2E242BF02E205C53978655D9 ] NlaSvc C:\Windows\System32\nlasvc.dll
10:26:45.0643 0x08d8 NlaSvc - ok
10:26:45.0674 0x08d8 [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs C:\Windows\system32\drivers\Npfs.sys
10:26:45.0690 0x08d8 Npfs - ok
10:26:45.0690 0x08d8 [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
10:26:45.0721 0x08d8 npsvctrig - ok
10:26:45.0752 0x08d8 [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi C:\Windows\system32\nsisvc.dll
10:26:45.0768 0x08d8 nsi - ok
10:26:45.0799 0x08d8 [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
10:26:45.0831 0x08d8 nsiproxy - ok
10:26:45.0940 0x08d8 [ 7BE3EDFFA3216F989A6BDCB14795DD08, 19A2D0120C46CA9BCFBC16DC3E65687ACDDCBA33B79128188652BA2AFAA2EE2F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
10:26:46.0018 0x08d8 Ntfs - ok
10:26:46.0049 0x08d8 [ 96ACBF3DDC38A52FEE115F577F36568F, DB8CB01971208C8D7A306A5FEDA39A3802195123E6B801DFB905B0E1934D3C96 ] NuidFltr C:\Windows\System32\drivers\NuidFltr.sys
10:26:46.0049 0x08d8 NuidFltr - ok
10:26:46.0081 0x08d8 [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null C:\Windows\system32\drivers\Null.sys
10:26:46.0096 0x08d8 Null - ok
10:26:46.0529 0x08d8 [ F648FE6BCE0AAD9E5EA63C8BE9AD90E3, F4885B42FCE7D838B7640EB9CF81135F9D637E7CD7A016894AD2F24450FA91BD ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
10:26:47.0017 0x08d8 nvlddmkm - ok
10:26:47.0104 0x08d8 [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid C:\Windows\system32\drivers\nvraid.sys
10:26:47.0135 0x08d8 nvraid - ok
10:26:47.0151 0x08d8 [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor C:\Windows\system32\drivers\nvstor.sys
10:26:47.0166 0x08d8 nvstor - ok
10:26:47.0197 0x08d8 [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
10:26:47.0213 0x08d8 nv_agp - ok
10:26:47.0276 0x08d8 [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
10:26:47.0291 0x08d8 p2pimsvc - ok
10:26:47.0323 0x08d8 [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc C:\Windows\system32\p2psvc.dll
10:26:47.0355 0x08d8 p2psvc - ok
10:26:47.0370 0x08d8 [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport C:\Windows\System32\drivers\parport.sys
10:26:47.0386 0x08d8 Parport - ok
10:26:47.0433 0x08d8 [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr C:\Windows\system32\drivers\partmgr.sys
10:26:47.0448 0x08d8 partmgr - ok
10:26:47.0511 0x08d8 [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc C:\Windows\System32\pcasvc.dll
10:26:47.0527 0x08d8 PcaSvc - ok
10:26:47.0584 0x08d8 [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci C:\Windows\system32\drivers\pci.sys
10:26:47.0611 0x08d8 pci - ok
10:26:47.0630 0x08d8 [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide C:\Windows\system32\drivers\pciide.sys
10:26:47.0640 0x08d8 pciide - ok
10:26:47.0670 0x08d8 [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
10:26:47.0687 0x08d8 pcmcia - ok
10:26:47.0698 0x08d8 [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw C:\Windows\system32\drivers\pcw.sys
10:26:47.0711 0x08d8 pcw - ok
10:26:47.0748 0x08d8 [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc C:\Windows\system32\drivers\pdc.sys
10:26:47.0761 0x08d8 pdc - ok
10:26:47.0813 0x08d8 [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
10:26:47.0858 0x08d8 PEAUTH - ok
10:26:47.0936 0x08d8 [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost C:\Windows\SysWow64\perfhost.exe
10:26:47.0983 0x08d8 PerfHost - ok
10:26:48.0062 0x08d8 [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla C:\Windows\system32\pla.dll
10:26:48.0138 0x08d8 pla - ok
10:26:48.0166 0x08d8 [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
10:26:48.0183 0x08d8 PlugPlay - ok
10:26:48.0261 0x08d8 [ 0554C64486399581EC5686CCBB975DFE, 5527ED1456A41B5A1502575DF5400DD88449AF3400BD20E2709C3C20B7198B87 ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
10:26:48.0323 0x08d8 PMBDeviceInfoProvider - ok
10:26:48.0339 0x08d8 [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
10:26:48.0370 0x08d8 PNRPAutoReg - ok
10:26:48.0401 0x08d8 [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
10:26:48.0417 0x08d8 PNRPsvc - ok
10:26:48.0465 0x08d8 [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
10:26:48.0512 0x08d8 PolicyAgent - ok
10:26:48.0543 0x08d8 [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power C:\Windows\system32\umpo.dll
10:26:48.0559 0x08d8 Power - ok
10:26:48.0590 0x08d8 [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
10:26:48.0621 0x08d8 PptpMiniport - ok
10:26:48.0796 0x08d8 [ 3D312AC13CB8D05822E9EFD234766BA7, 5914CAA563FAE4E21AD58A262369657135D320788A56ABF15C9D77E9ADC4CA36 ] PrintNotify C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
10:26:48.0906 0x08d8 PrintNotify - ok
10:26:48.0939 0x08d8 [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor C:\Windows\System32\drivers\processr.sys
10:26:48.0969 0x08d8 Processor - ok
10:26:49.0010 0x08d8 [ 1D7127048413309629233B50BF2DD9A6, 918322AFDD576D9966961B111F5E38BDDB4278F9456E7AA1A3453EC8CAF4B8A8 ] ProfSvc C:\Windows\system32\profsvc.dll
10:26:49.0034 0x08d8 ProfSvc - ok
10:26:49.0066 0x08d8 [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
10:26:49.0081 0x08d8 Psched - ok
10:26:49.0113 0x08d8 [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE C:\Windows\system32\qwave.dll
10:26:49.0144 0x08d8 QWAVE - ok
10:26:49.0175 0x08d8 [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
10:26:49.0206 0x08d8 QWAVEdrv - ok
10:26:49.0222 0x08d8 [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
10:26:49.0253 0x08d8 RasAcd - ok
10:26:49.0284 0x08d8 [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
10:26:49.0316 0x08d8 RasAgileVpn - ok
10:26:49.0347 0x08d8 [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto C:\Windows\System32\rasauto.dll
10:26:49.0394 0x08d8 RasAuto - ok
10:26:49.0425 0x08d8 [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
10:26:49.0456 0x08d8 Rasl2tp - ok
10:26:49.0488 0x08d8 [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan C:\Windows\System32\rasmans.dll
10:26:49.0519 0x08d8 RasMan - ok
10:26:49.0519 0x08d8 [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
10:26:49.0534 0x08d8 RasPppoe - ok
10:26:49.0550 0x08d8 [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
10:26:49.0566 0x08d8 RasSstp - ok
10:26:49.0628 0x08d8 [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
10:26:49.0659 0x08d8 rdbss - ok
10:26:49.0691 0x08d8 [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
10:26:49.0718 0x08d8 rdpbus - ok
10:26:49.0724 0x08d8 [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
10:26:49.0739 0x08d8 RDPDR - ok
10:26:49.0771 0x08d8 [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
10:26:49.0771 0x08d8 RdpVideoMiniport - ok
10:26:49.0802 0x08d8 [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
10:26:49.0833 0x08d8 RDPWD - ok
10:26:49.0864 0x08d8 [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
10:26:49.0880 0x08d8 rdyboost - ok
10:26:49.0927 0x08d8 [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess C:\Windows\System32\mprdim.dll
10:26:49.0958 0x08d8 RemoteAccess - ok
10:26:50.0006 0x08d8 [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry C:\Windows\system32\regsvc.dll
10:26:50.0053 0x08d8 RemoteRegistry - ok
10:26:50.0100 0x08d8 [ CCBFCABDFE2BC22F0645CEAADDB36004, 279EA9075079F91165027CEFD4FBC61A213CA602EE7DE106F7D2D243468706AA ] RFCOMM C:\Windows\System32\drivers\rfcomm.sys
10:26:50.0131 0x08d8 RFCOMM - ok
10:26:50.0162 0x08d8 [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
10:26:50.0193 0x08d8 RpcEptMapper - ok
10:26:50.0222 0x08d8 [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator C:\Windows\system32\locator.exe
10:26:50.0234 0x08d8 RpcLocator - ok
10:26:50.0304 0x08d8 [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs C:\Windows\system32\rpcss.dll
10:26:50.0333 0x08d8 RpcSs - ok
10:26:50.0374 0x08d8 [ FD2F7ABB0B3C777CDC9D342CADBF0131, 8C7D8C753E100B8B005FF089299062448E5FEE88E84E4CE9E050CE3F2AAC5BCB ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys
10:26:50.0389 0x08d8 RSPCIESTOR - ok
10:26:50.0431 0x08d8 [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
10:26:50.0458 0x08d8 rspndr - ok
10:26:50.0514 0x08d8 [ 7D9DA8EC6784A9EE213C676709D46BE6, 9861D1EF107F7D1590B89098EAEA7F509C1EF46999C37703F3766BAD733D8AD2 ] RTL8168 C:\Windows\system32\DRIVERS\Rt630x64.sys
10:26:50.0538 0x08d8 RTL8168 - ok
10:26:50.0576 0x08d8 [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap C:\Windows\System32\drivers\vms3cap.sys
10:26:50.0607 0x08d8 s3cap - ok
10:26:50.0669 0x08d8 [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] SamSs C:\Windows\system32\lsass.exe
10:26:50.0701 0x08d8 SamSs - ok
10:26:50.0732 0x08d8 [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
10:26:50.0732 0x08d8 sbp2port - ok
10:26:50.0779 0x08d8 [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr C:\Windows\System32\SCardSvr.dll
10:26:50.0841 0x08d8 SCardSvr - ok
10:26:50.0857 0x08d8 [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
10:26:50.0888 0x08d8 scfilter - ok
10:26:50.0935 0x08d8 [ 201C397A73DFEE109490F4BA1168CFC2, 74FC2A30CBF2E2197E75860A3B308CDCBEB3C28794ABED388B493505A2D84BAA ] Schedule C:\Windows\system32\schedsvc.dll
10:26:50.0997 0x08d8 Schedule - ok
10:26:51.0044 0x08d8 [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc C:\Windows\System32\certprop.dll
10:26:51.0060 0x08d8 SCPolicySvc - ok
10:26:51.0091 0x08d8 [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus C:\Windows\System32\drivers\sdbus.sys
10:26:51.0107 0x08d8 sdbus - ok
10:26:51.0138 0x08d8 [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC C:\Windows\System32\SDRSVC.dll
10:26:51.0169 0x08d8 SDRSVC - ok
10:26:51.0201 0x08d8 [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor C:\Windows\System32\drivers\sdstor.sys
10:26:51.0216 0x08d8 sdstor - ok
10:26:51.0248 0x08d8 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
10:26:51.0263 0x08d8 secdrv - ok
10:26:51.0294 0x08d8 [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon C:\Windows\system32\seclogon.dll
10:26:51.0310 0x08d8 seclogon - ok
10:26:51.0326 0x08d8 [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS C:\Windows\System32\sens.dll
10:26:51.0372 0x08d8 SENS - ok
10:26:51.0404 0x08d8 [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc C:\Windows\system32\sensrsvc.dll
10:26:51.0419 0x08d8 SensrSvc - ok
10:26:51.0451 0x08d8 [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx C:\Windows\system32\drivers\SerCx.sys
10:26:51.0482 0x08d8 SerCx - ok
10:26:51.0497 0x08d8 [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum C:\Windows\System32\drivers\serenum.sys
10:26:51.0529 0x08d8 Serenum - ok
10:26:51.0560 0x08d8 [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial C:\Windows\System32\drivers\serial.sys
10:26:51.0576 0x08d8 Serial - ok
10:26:51.0591 0x08d8 [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse C:\Windows\System32\drivers\sermouse.sys
10:26:51.0591 0x08d8 sermouse - ok
10:26:51.0654 0x08d8 [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv C:\Windows\system32\sessenv.dll
10:26:51.0669 0x08d8 SessionEnv - ok
10:26:51.0701 0x08d8 [ 415B1326C40A2E1F251A3845B9C7DF31, D7BD668962B71DC3877366EB0C0BD5CDB1FF564A5866EE58DB90838D78227AD6 ] SFEP C:\Windows\System32\drivers\SFEP.sys
10:26:51.0716 0x08d8 SFEP - ok
10:26:51.0763 0x08d8 [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
10:26:51.0779 0x08d8 sfloppy - ok
10:26:51.0810 0x08d8 [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess C:\Windows\System32\ipnathlp.dll
10:26:51.0857 0x08d8 SharedAccess - ok
10:26:51.0904 0x08d8 [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:26:51.0951 0x08d8 ShellHWDetection - ok
10:26:51.0982 0x08d8 [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
10:26:51.0998 0x08d8 SiSRaid2 - ok
10:26:52.0044 0x08d8 [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
10:26:52.0060 0x08d8 SiSRaid4 - ok
10:26:52.0091 0x08d8 [ 31EB63D59A3B097E12D07FAFD2D7A959, 8C0FC4123CB818C6C22C25C8A305B6ABC299E063C68ECA537F7D152AB932C97C ] SmbDrvI C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys
10:26:52.0107 0x08d8 SmbDrvI - ok
10:26:52.0154 0x08d8 [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
10:26:52.0279 0x08d8 SNMPTRAP - ok
10:26:52.0388 0x08d8 [ 3CBFEE060A4FD306F783E1A14926C9AF, 67DF4B3E23DB18E8BC15301F83B1844EFF6BD8E885CA1590EBAAFBAA441968CB ] SOHCImp C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
10:26:52.0404 0x08d8 SOHCImp - ok
10:26:52.0420 0x08d8 [ 06B3BFC6AB8E4731AEF2C85383486524, B03E69C0E883B863DACF251A8287D0A6043EFB4CA5CA5576EAEFA3E4486ECBEC ] SOHDms C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
10:26:52.0435 0x08d8 SOHDms - ok
10:26:52.0451 0x08d8 [ 3F3E0E389C03AAC4705BC03BFB2A8582, 0D5BF14F12BE6167ECE974BF114336576C38DF5B83D2889316A91381B26948EC ] SOHDs C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
10:26:52.0466 0x08d8 SOHDs - ok
10:26:52.0498 0x08d8 [ AA0F913B69BCEC9655ECAAA2312B29D9, 655D6E5B36ABC1C632096243F7FF55C4168A2009A5A43C8FDA5EFA67F972ADF3 ] SOWS C:\Windows\System32\drivers\sows.sys
10:26:52.0529 0x08d8 SOWS - ok
10:26:52.0560 0x08d8 [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport C:\Windows\system32\drivers\spaceport.sys
10:26:52.0576 0x08d8 spaceport - ok
10:26:52.0591 0x08d8 [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
10:26:52.0623 0x08d8 SpbCx - ok
10:26:52.0716 0x08d8 [ C03E480E63A80D73FABE28D24D3B6B47, F8C68DC63A5492587F9343158348ADD99A99AF34DC7ED29E5562EE90C0AB8F25 ] SpfService C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
10:26:52.0748 0x08d8 SpfService - ok
10:26:52.0795 0x08d8 [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler C:\Windows\System32\spoolsv.exe
10:26:52.0841 0x08d8 Spooler - ok
10:26:53.0013 0x08d8 [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc C:\Windows\system32\sppsvc.exe
10:26:53.0216 0x08d8 sppsvc - ok
10:26:53.0326 0x08d8 [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] srv C:\Windows\system32\DRIVERS\srv.sys
10:26:53.0373 0x08d8 srv - ok
10:26:53.0420 0x08d8 [ B56A855B23676CCE05B626C6037FD02F, 3C0DCB16A96BD6A002A4FAF1AF939AF470D95137CB745F5DAD039B5D8C956E30 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
10:26:53.0467 0x08d8 srv2 - ok
10:26:53.0498 0x08d8 [ 78E9665C8DC59106D133CBEF0F0C3DE3, 380FD51EE00CEF3FFEF9BFB5E14538E084F1DDF8D8F8BCDF4EC23CB8C3A40D2F ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
10:26:53.0513 0x08d8 srvnet - ok
10:26:53.0560 0x08d8 [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
10:26:53.0592 0x08d8 SSDPSRV - ok
10:26:53.0654 0x08d8 [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] SstpSvc C:\Windows\system32\sstpsvc.dll
10:26:53.0670 0x08d8 SstpSvc - ok
10:26:53.0701 0x08d8 [ 4E85355B94CFCB67C135F6521A4895A7, AC4FC65C1E62A54B3834E7FE0A2B1ECC48A2AA563AE5BD508326EE68FFFBBEEE ] stexstor C:\Windows\system32\drivers\stexstor.sys
10:26:53.0717 0x08d8 stexstor - ok
10:26:53.0779 0x08d8 [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] stisvc C:\Windows\System32\wiaservc.dll
10:26:53.0826 0x08d8 stisvc - ok
10:26:53.0873 0x08d8 [ B240874B2CA0CD02E8CD11E140B14C57, 0FDBEE3DB644175A30065CAF020F375703ADC45A33221788C010F3111707FC25 ] storahci C:\Windows\system32\drivers\storahci.sys
10:26:53.0888 0x08d8 storahci - ok
10:26:53.0935 0x08d8 [ F74DBC95A57B1EE866D3732EB5F79BE2, E4FE9D5CD0A385ACB60D5D5E8D969F26C3A6BC0C08FF0838DBE9CA106229C8DE ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
10:26:53.0951 0x08d8 storflt - ok
10:26:53.0998 0x08d8 [ 5337E138B49ED1F44CCBA4073BC35C20, 2B296973215E3865A56C46DC3D27F1460D96BC321558CE7A911B05B0E7BF397F ] StorSvc C:\Windows\system32\storsvc.dll
10:26:54.0013 0x08d8 StorSvc - ok
10:26:54.0060 0x08d8 [ 543CD3CC0E05B8D8815E0D4F040B6F59, 4B57C9534E94A0A67FC82DBD4FAECACA180BEC281FB477550A37C0A04777E09E ] storvsc C:\Windows\system32\drivers\storvsc.sys
10:26:54.0107 0x08d8 storvsc - ok
10:26:54.0123 0x08d8 [ 8BC1C1ED6EF9C985A3FAA6A72F41679A, 82CC77030D23013572B4A64A64B6156789F253BF56268B790093CE3D345410A0 ] svsvc C:\Windows\system32\svsvc.dll
10:26:54.0159 0x08d8 svsvc - ok
10:26:54.0175 0x08d8 [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] swenum C:\Windows\System32\drivers\swenum.sys
10:26:54.0175 0x08d8 swenum - ok
10:26:54.0206 0x08d8 [ 502F9488540051F3E6C39889ECFA76BB, 22ABD681BE4CF8A1F484C6363C1334B1EF7A6C074D837B0121DE1896887B84C6 ] swprv C:\Windows\System32\swprv.dll
10:26:54.0253 0x08d8 swprv - ok
10:26:54.0300 0x08d8 [ 059AA9D476A71CCE202B023226B40C4A, 080F413ECB7AE1638EC99B0C5574285AC64621126C6BF1F71450A344C5BAC2C5 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
10:26:54.0331 0x08d8 SynTP - ok
10:26:54.0409 0x08d8 [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] SysMain C:\Windows\system32\sysmain.dll
10:26:54.0472 0x08d8 SysMain - ok
10:26:54.0487 0x08d8 [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
10:26:54.0518 0x08d8 SystemEventsBroker - ok
10:26:54.0581 0x08d8 [ A6C06C45C44AD06C70AF8899AEC15BDC, AC2CCCDBA6B94BA85A6D41B47343193D175786D4ECF71AE9C7766ADD63A1273F ] TabletInputService C:\Windows\System32\TabSvc.dll
10:26:54.0612 0x08d8 TabletInputService - ok
10:26:54.0643 0x08d8 [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] TapiSrv C:\Windows\System32\tapisrv.dll
10:26:54.0675 0x08d8 TapiSrv - ok
10:26:54.0768 0x08d8 [ 2AE9136724568DB4F08BC04F131CFC54, 11AA017AE39D0A63233D01A8AE33FD53D5302683E037D29B73366D6233764080 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
10:26:54.0847 0x08d8 Tcpip - ok
10:26:54.0893 0x08d8 [ 2AE9136724568DB4F08BC04F131CFC54, 11AA017AE39D0A63233D01A8AE33FD53D5302683E037D29B73366D6233764080 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
10:26:54.0972 0x08d8 TCPIP6 - ok
10:26:55.0003 0x08d8 [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
10:26:55.0034 0x08d8 tcpipreg - ok
10:26:55.0034 0x08d8 [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
10:26:55.0050 0x08d8 tdx - ok
10:26:55.0065 0x08d8 [ F7C8AB5D8AFFAA318D6A21093D139BF4, 0A35052EF7DC8615783A23897358D8C579BE694363615C9563FF629E7B719991 ] terminpt C:\Windows\System32\drivers\terminpt.sys
10:26:55.0081 0x08d8 terminpt - ok
10:26:55.0143 0x08d8 [ 2B3D2FDF50EDABEBE0A9E6F741C81858, F0C3A1DC968C5D28EF68BE4352577B4F8D4B4FB6274268DCCCD8A5C132DEC2F9 ] TermService C:\Windows\System32\termsrv.dll
10:26:55.0175 0x08d8 TermService - ok
10:26:55.0237 0x08d8 [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] Themes C:\Windows\system32\themeservice.dll
10:26:55.0269 0x08d8 Themes - ok
10:26:55.0316 0x08d8 [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] THREADORDER C:\Windows\system32\mmcss.dll
10:26:55.0327 0x08d8 THREADORDER - ok
10:26:55.0374 0x08d8 [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
10:26:55.0405 0x08d8 TimeBroker - ok
10:26:55.0421 0x08d8 [ E94F7A7B48C7638D1F3F8089344C97B7, 276CDE59614D563A52529BCC4BFC726E5F5BE131C9C4142558A644D79328C810 ] TPM C:\Windows\system32\drivers\tpm.sys
10:26:55.0436 0x08d8 TPM - ok
10:26:55.0468 0x08d8 [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] TrkWks C:\Windows\System32\trkwks.dll
10:26:55.0483 0x08d8 TrkWks - ok
10:26:55.0561 0x08d8 [ 8ABBB5CE0C62E0A6D28F32F44B7F865C, 4C78FE2A4A25A758D5191C4EDB2A6FE691FF82E7C16C0F146DC96DAD87D4F64E ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:26:55.0608 0x08d8 TrustedInstaller - ok
10:26:55.0640 0x08d8 [ 4E7C5FB10A50435523DE0CAA37DE2BD3, D6206DF61950F2541FB754E57C4D9EF9FA0CC1EDD6F6FA4E45F02B47958493F7 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
10:26:55.0671 0x08d8 TsUsbFlt - ok
10:26:55.0686 0x08d8 [ 16D684A820872EE54F6370703AC0B513, 795E20484358424CE9FA766937DD99413025A8AF967D03490392E8E02A382D0B ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
10:26:55.0702 0x08d8 TsUsbGD - ok
10:26:55.0718 0x08d8 [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
10:26:55.0733 0x08d8 tunnel - ok
10:26:55.0765 0x08d8 [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A, AA7DA2207C0236F47859A4791F9D7301E7ADB50A59D831DC859ECC7CA70D3E1D ] uagp35 C:\Windows\system32\drivers\uagp35.sys
10:26:55.0765 0x08d8 uagp35 - ok
10:26:55.0796 0x08d8 [ 6FD6D03B7752C78712E5CFF29A305026, F09C5188AAFCF4C77B05BA1E604F9912782A9F1371F72F959288EBC2725407ED ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
10:26:55.0811 0x08d8 UASPStor - ok
10:26:55.0843 0x08d8 [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] UCX01000 C:\Windows\System32\drivers\ucx01000.sys
10:26:55.0858 0x08d8 UCX01000 - ok
10:26:55.0890 0x08d8 [ 25C50F4EDF70D0A831E0566BD181CCF2, F2F9E86FB5617C16077D2073EC0AA747F76F1EB5148BA110347A84F3C3569F83 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
10:26:55.0905 0x08d8 udfs - ok
10:26:55.0936 0x08d8 [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D, 16DE6E0894C356A58AF12BEC2FE9B188F147DD4B16CB2414DE600CE4127F929D ] UI0Detect C:\Windows\system32\UI0Detect.exe
10:26:55.0952 0x08d8 UI0Detect - ok
10:26:55.0983 0x08d8 [ 07FEBCDF24FABA0D47B635D85A0FFB7A, 452C04B14681EBCE8B1B25B75A1B7CC978722B7DDE54D624E17841B14ACCF65D ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
10:26:55.0999 0x08d8 uliagpkx - ok
10:26:56.0015 0x08d8 [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] umbus C:\Windows\System32\drivers\umbus.sys
10:26:56.0046 0x08d8 umbus - ok
10:26:56.0046 0x08d8 [ 991EE6B5FC41EAEF99C8AF5B92F2CA09, 30AAD7D18FF5962CEC7180359D148EED5A1BF193DDB2B34508897FC3EBA692C3 ] UmPass C:\Windows\System32\drivers\umpass.sys
10:26:56.0061 0x08d8 UmPass - ok
10:26:56.0108 0x08d8 [ 43FEFB040A0CC30F795FBF544169594D, F2A730C0F7C883321C378D4564120A40428D7F8E393F02C8D6A08934795A35C7 ] UmRdpService C:\Windows\System32\umrdp.dll
10:26:56.0140 0x08d8 UmRdpService - ok
10:26:56.0249 0x08d8 [ E1A119AD21F5AFE22EB516C549306D3D, 48769D5E7A78B7A2C00F1F6798AC133CF3E0B2C76F71D3719BD741DDD8F2D229 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
10:26:56.0265 0x08d8 UNS - ok
10:26:56.0343 0x08d8 [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] upnphost C:\Windows\System32\upnphost.dll
10:26:56.0358 0x08d8 upnphost - ok
10:26:56.0390 0x08d8 [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
10:26:56.0421 0x08d8 usbccgp - ok
10:26:56.0452 0x08d8 [ 427B6DB8C05A5A977E8C3525370A2595, C67222CA9123AE12D953995326B3B582C146CEA89594B7209DB0B1F628A0118D ] usbcir C:\Windows\System32\drivers\usbcir.sys
10:26:56.0452 0x08d8 usbcir - ok
10:26:56.0483 0x08d8 [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] usbehci C:\Windows\System32\drivers\usbehci.sys
10:26:56.0483 0x08d8 usbehci - ok
10:26:56.0515 0x08d8 [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] usbhub C:\Windows\System32\drivers\usbhub.sys
10:26:56.0546 0x08d8 usbhub - ok
10:26:56.0577 0x08d8 [ FAAB461D5AEB21EE5FC5C0DBD6648223, 187EB7AC6CDE39621C587EB1551DBC358DE2BC7C8A4265DB817C9D6F5ADE54A3 ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
10:26:56.0608 0x08d8 USBHUB3 - ok
10:26:56.0624 0x08d8 [ 325F6179009B5A7F6118951A5BA422AB, 756CB2893530485E8C3ACFF5A40F4C6EB446E72B2296E8772058E407A5E066DE ] usbohci C:\Windows\System32\drivers\usbohci.sys
10:26:56.0655 0x08d8 usbohci - ok
10:26:56.0686 0x08d8 [ 9FDBA6982582A6F2354144980F641E7B, 054A65412CB22C5BE970FD3A266E140110D869B614B9F9894628D553CE82C991 ] usbprint C:\Windows\System32\drivers\usbprint.sys
10:26:56.0718 0x08d8 usbprint - ok
10:26:56.0749 0x08d8 [ AD91D1BBE5D3CF4501887DC1C09384FD, ED9E27CD1D52401087427EC20E389FBE2497193483C2E53E8DE5D70DACF5D928 ] usbscan C:\Windows\System32\drivers\usbscan.sys
10:26:56.0765 0x08d8 usbscan - ok
10:26:56.0780 0x08d8 [ BFC7FE4AAEB61317A921871B4085EF4B, CBC3FBAEAD6C82A437CC87A97007EF807C64053AB8FA5C3233C2A0CF6FC8D019 ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS
10:26:56.0796 0x08d8 USBSTOR - ok
10:26:56.0827 0x08d8 [ 1ABF657259DB57F7E5558E4DF1357C0C, 34EAF5DEA3293CFA96BA81B036305FD90ABAE05B9CB73D4F54FB236448C1978C ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
10:26:56.0858 0x08d8 usbuhci - ok
10:26:56.0874 0x08d8 [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
10:26:56.0890 0x08d8 usbvideo - ok
10:26:56.0921 0x08d8 [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
10:26:56.0936 0x08d8 USBXHCI - ok
10:26:57.0030 0x08d8 [ 34349E7B488FA61B639117F6BF1EBF99, A7A7E60511F7D6370473D41867F5323695308CC27D3EEB0286687D3A9E0084E9 ] USER_ESRV_SVC C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
10:26:57.0046 0x08d8 USER_ESRV_SVC - ok
10:26:57.0124 0x08d8 [ 1CA1DC88D9484BCFD6C26560F397539A, 95C2AB45D4682BB4F75F1D03D57CCA944BA570EFEA06E0AB71062C6E6E7C7F4A ] VAIO Event Service C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
10:26:57.0140 0x08d8 VAIO Event Service - ok
10:26:57.0218 0x08d8 [ 8EF62038EBD54C240486A36F9259C64A, D2EA5718C13D5E62DCA06013E67E651847172950ED7ED7CA7C25CC8422D54260 ] VAIO Power Management C:\Program Files\Sony\VAIO Power Management\SPMService.exe
10:26:57.0233 0x08d8 VAIO Power Management - ok
10:26:57.0249 0x08d8 [ F1DA34D64F2BA200D28A7451804E2FEE, 8BDF328F18F1EB58AC0E383ABA7985BA69EA9622B262CD524E3390FDE824DEEB ] VaultSvc C:\Windows\system32\lsass.exe
10:26:57.0265 0x08d8 VaultSvc - ok
10:26:57.0374 0x08d8 [ 3B00B812D4E88FEA3F557DFC07BE415C, CC30E0696584FCB6AE2579F20458D8BC5747D5E16860D62D444BCA45DE2491AB ] VCFw C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
10:26:57.0405 0x08d8 VCFw - detected UnsignedFile.Multi.Generic ( 1 )
10:26:59.0882 0x08d8 VCFw ( UnsignedFile.Multi.Generic ) - warning
10:26:59.0882 0x08d8 Force sending object to P2P due to detect: VCFw
10:27:02.0633 0x08d8 Object send P2P result: true
10:27:05.0133 0x08d8 [ 0D53D30C8473EEDC1757FDA3C511103B, 54E1AE2CCD71AD446F373DD8E19382D81CA2BC9AEEE326CF5BF020AD3C5F58AB ] VCService C:\Program Files\Sony\VAIO Care\VCService.exe
10:27:05.0148 0x08d8 VCService - ok
10:27:05.0195 0x08d8 [ BACECBFF9C97F7627A60B0E0F1FE7EE8, DC82F767D066B93A48A090DC7146EBCCDC54B43C6CD9DF29A160E09E3A531DC8 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
10:27:05.0195 0x08d8 vdrvroot - ok
10:27:05.0242 0x08d8 [ 1B4488988E5E7512E6C5CD1255E9E973, B82C26E767A8895CFFD76C11D07D5C945C38E1BD32CC27D20A6C0FA7F6064FC5 ] vds C:\Windows\System32\vds.exe
10:27:05.0289 0x08d8 vds - ok
10:27:05.0320 0x08d8 [ 74FA2D4368DE6F6CE14393EDF1F342BE, C5CE4164B2C3D583A7FB8687ADEADCDB08D36A5AB1965E5FC6949AEED15881C8 ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
10:27:05.0320 0x08d8 VerifierExt - ok
10:27:05.0351 0x08d8 [ D4051AA2ACD38AABF9DEC24B8A331EB1, 377D5DD98E4E09F3CCC330852F9FD9E4CC2069AE1A1C1AFBC90002FE3101708B ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
10:27:05.0383 0x08d8 vhdmp - ok
10:27:05.0430 0x08d8 [ F5B4A14B00E89250C50982AC762DDD1D, 581CD97DD42E74A82F06BFB827DFC82618B4A8667ACA7E93C628BB0D056CE8F0 ] viaide C:\Windows\system32\drivers\viaide.sys
10:27:05.0445 0x08d8 viaide - ok
10:27:05.0461 0x08d8 [ 78DB50F7329F6D1311658DABFFFC8BE0, 8CB0C831608033C4BC1D2DA7FAA7D429333A3654E76A989F7AF85BFC5F086BE9 ] vmbus C:\Windows\system32\drivers\vmbus.sys
10:27:05.0476 0x08d8 vmbus - ok
10:27:05.0492 0x08d8 [ ECFEE2F2BA3932C7880D1A8F67D68F91, 57DCD55A518A9FBDEF72B511C643B1062C3F7BD339F4B0FC19E9D84C615B968D ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
10:27:05.0508 0x08d8 VMBusHID - ok
10:27:05.0539 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicheartbeat C:\Windows\System32\ICSvc.dll
10:27:05.0570 0x08d8 vmicheartbeat - ok
10:27:05.0570 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmickvpexchange C:\Windows\System32\ICSvc.dll
10:27:05.0586 0x08d8 vmickvpexchange - ok
10:27:05.0617 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicrdv C:\Windows\System32\ICSvc.dll
10:27:05.0633 0x08d8 vmicrdv - ok
10:27:05.0648 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicshutdown C:\Windows\System32\ICSvc.dll
10:27:05.0664 0x08d8 vmicshutdown - ok
10:27:05.0680 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmictimesync C:\Windows\System32\ICSvc.dll
10:27:05.0695 0x08d8 vmictimesync - ok
10:27:05.0695 0x08d8 [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicvss C:\Windows\System32\ICSvc.dll
10:27:05.0726 0x08d8 vmicvss - ok
10:27:05.0742 0x08d8 [ CB60FAAED8B49B812EBBF77EB87D9B18, ADA7C68D4C4981555ED48981E8B7ACBEEF5C39F902EB98782FC3DFF495FE0C33 ] volmgr C:\Windows\system32\drivers\volmgr.sys
10:27:05.0742 0x08d8 volmgr - ok
10:27:05.0773 0x08d8 [ A74101DA9809251BCD0E5A26BAE0F824, 15A3A7CC31A13C5882812C344D0937A8A4503D12DB07B9F7F2A8191B739CDBF7 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
10:27:05.0789 0x08d8 volmgrx - ok
10:27:05.0836 0x08d8 [ AA37946941ED3805AB3A924965907147, 11BD8FA585F193EED050458E93679D730FC2C09D19237DA40B0190132D328CB2 ] volsnap C:\Windows\system32\drivers\volsnap.sys
10:27:05.0851 0x08d8 volsnap - ok
10:27:05.0867 0x08d8 [ A8DA1C1B52ECEA3726DEBED4FF1B700D, 75C024EC3858DF24FB82FE105BDD1E37900D53EFE9D72F42CDDFFD0742525586 ] vpci C:\Windows\System32\drivers\vpci.sys
10:27:05.0867 0x08d8 vpci - ok
10:27:05.0898 0x08d8 [ 38A60CD9C009C55C6D3B5586F8E6A353, 7F7E2AE39F1A0A5245650911E310E0948BC22A18262A16FA76B44A042D66312D ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
10:27:05.0898 0x08d8 vsmraid - ok
10:27:05.0976 0x08d8 [ FE37051171F3B90B18037FDBAC5B9D76, F220D71512E059F298F3CD958D69BE7225A8E8D492387347E75A0E615159782A ] VSS C:\Windows\system32\vssvc.exe
10:27:06.0023 0x08d8 VSS - ok
10:27:06.0070 0x08d8 [ A0F6FE0FC2F647C22BBFD6BD4249DBCC, AC2F3C70EDCA0AFBB2606267DFE6D3E8E7B0772140153BAD6B0A9EDE6A1D2F29 ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
10:27:06.0086 0x08d8 VSTXRAID - ok
10:27:06.0211 0x08d8 [ C1FAE2E81955DCCD79034A23EC4F3F37, 61B6477C6068B5542D3EE9C6336FBD7589F1CFFD3E850473A539619033533286 ] VUAgent C:\Program Files\Sony\VAIO Update\vuagent.exe
10:27:06.0258 0x08d8 VUAgent - ok
10:27:06.0289 0x08d8 [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
10:27:06.0289 0x08d8 vwifibus - ok
10:27:06.0305 0x08d8 [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
10:27:06.0320 0x08d8 vwififlt - ok
10:27:06.0320 0x08d8 [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
10:27:06.0351 0x08d8 vwifimp - ok
10:27:06.0383 0x08d8 [ F690B6EEAA94576727B24376D7ED3601, A61EE96024C8FC4058481DFB1E7F0AD746565368672FA3B6BA8F9E23D0F47E4C ] W32Time C:\Windows\system32\w32time.dll
10:27:06.0414 0x08d8 W32Time - ok
10:27:06.0445 0x08d8 [ 6B806E893714019969E2B50D7EF6A4D9, 38FE2B01082DC4C2A0C11A292016A727F48C3DF1293DC3A0216B2254A452263F ] WacomPen C:\Windows\System32\drivers\wacompen.sys
10:27:06.0476 0x08d8 WacomPen - ok
10:27:06.0508 0x08d8 [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
10:27:06.0539 0x08d8 Wanarp - ok
10:27:06.0539 0x08d8 [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
10:27:06.0555 0x08d8 Wanarpv6 - ok
10:27:06.0617 0x08d8 [ 42DF22F8C448E7CD219F6D63743505E2, 063F4280C7BD20CE1360436B76A17DFE17FF611F75337A47373D098CC6C263BF ] wbengine C:\Windows\system32\wbengine.exe
10:27:06.0680 0x08d8 wbengine - ok
10:27:06.0711 0x08d8 [ 31D37B2F6069C631EF0557D322924812, 6E18A1060F3C8F4BF220E286C44327866A8F9109E74928AA2D8C2DA9C452038B ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
10:27:06.0742 0x08d8 WbioSrvc - ok
10:27:06.0805 0x08d8 [ F43314B83101DEBF7D7CCD42493CFC60, F4B70372559F2FD9A74FB87422EC6EF024F925AE4D838473E04E6B48AB7255AF ] Wcmsvc C:\Windows\System32\wcmsvc.dll
10:27:06.0852 0x08d8 Wcmsvc - ok
10:27:06.0930 0x08d8 [ 5B5FEAB51172F5513C2CF7B39CFA6A01, 4FDAC5168E00D44781C6F5D98ECD4977A12663C5CE6FFDFF9DBC89A28D6212D8 ] wcncsvc C:\Windows\System32\wcncsvc.dll
10:27:06.0961 0x08d8 wcncsvc - ok
10:27:07.0008 0x08d8 [ E19556D414332E2BEBA1F368229006B4, AB3454EC85D7B6E62D44C4510C1547AE7F736558588E54B0E265F7B3A5810E15 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:27:07.0023 0x08d8 WcsPlugInService - ok
10:27:07.0055 0x08d8 [ B3A4D918DAB90505B6BC7B70632913CB, ECC19DCD7902C29D0682C70B9546CF8B82477A32147EE30EB6750D8499605B46 ] Wd C:\Windows\system32\drivers\wd.sys
10:27:07.0055 0x08d8 Wd - ok
10:27:07.0102 0x08d8 [ 5A416C253D2C50327928ABC4A1D8A0F2, A3A41F3E6229D86F85F68062BBEA38290FB78B3D3F0D8DF3B6C01FF5B93A9F16 ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
10:27:07.0102 0x08d8 WdBoot - ok
10:27:07.0148 0x08d8 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
10:27:07.0180 0x08d8 Wdf01000 - ok
10:27:07.0211 0x08d8 [ 6FBA6CD2348DEC440D0C6D511C55F3FE, 0CB50B57D9C6E56B20FA8777540E2C8C5702753758075DA4C310A7B2B2F8A352 ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
10:27:07.0227 0x08d8 WdFilter - ok
10:27:07.0258 0x08d8 [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiServiceHost C:\Windows\system32\wdi.dll
10:27:07.0273 0x08d8 WdiServiceHost - ok
10:27:07.0289 0x08d8 [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiSystemHost C:\Windows\system32\wdi.dll
10:27:07.0305 0x08d8 WdiSystemHost - ok
10:27:07.0336 0x08d8 [ 9B1384CE8E681D2D77BB3524B8E86311, BDEF9D0A79A7C26A88088A306F91632F300E587736CDD2C64717EC54DD6E89FF ] WebClient C:\Windows\System32\webclnt.dll
10:27:07.0367 0x08d8 WebClient - ok
10:27:07.0398 0x08d8 [ 35FD720943D4FCD75C3275BF062FF140, 9D8345E6DE1AE23F93AD0B52D27D1CCFD69EF7EE50654F92CA999BEC4570A773 ] Wecsvc C:\Windows\system32\wecsvc.dll
10:27:07.0430 0x08d8 Wecsvc - ok
10:27:07.0445 0x08d8 [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] wercplsupport C:\Windows\System32\wercplsupport.dll
10:27:07.0477 0x08d8 wercplsupport - ok
10:27:07.0492 0x08d8 [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] WerSvc C:\Windows\System32\WerSvc.dll
10:27:07.0508 0x08d8 WerSvc - ok
10:27:07.0555 0x08d8 [ 8FDA12E934C7BB7CC317F90FC70DC4FC, AA0DA063BCE5692DFD46F0AAE07727B38D4AA87A9BAEBAFF137F9CAAF2808EC0 ] WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs.sys
10:27:07.0555 0x08d8 WFPLWFS - ok
10:27:07.0602 0x08d8 [ 60E0C220593DA4F7C289CB909D2DBAE0, 057CA7727F748600CC155043081AB9E3244763CF4913F317D13226A515F6FDB6 ] WiaRpc C:\Windows\System32\wiarpc.dll
10:27:07.0617 0x08d8 WiaRpc - ok
10:27:07.0648 0x08d8 [ A3C7624A42A3447EF5EDD1ED37FE4E60, BD8BDF0A571873FA8277878AF7AED11196CFF1B4DF1EA6BA13BD4887D7B63B94 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
10:27:07.0664 0x08d8 WIMMount - ok
10:27:07.0695 0x08d8 WinDefend - ok
10:27:07.0758 0x08d8 [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
10:27:07.0789 0x08d8 WinHttpAutoProxySvc - ok
10:27:07.0867 0x08d8 [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
10:27:07.0899 0x08d8 Winmgmt - ok
10:27:07.0992 0x08d8 [ 89DA335401D956F2696E35A38817BE19, D5A8D5C0BE285564AB0DF1B4594FE612359C72BE3B64063C3460BB73AA34F413 ] WinRM C:\Windows\system32\WsmSvc.dll
10:27:08.0102 0x08d8 WinRM - ok
10:27:08.0180 0x08d8 [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] WlanSvc C:\Windows\System32\wlansvc.dll
10:27:08.0227 0x08d8 WlanSvc - ok
10:27:08.0305 0x08d8 [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] wlidsvc C:\Windows\system32\wlidsvc.dll
10:27:08.0367 0x08d8 wlidsvc - ok
10:27:08.0399 0x08d8 [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
10:27:08.0399 0x08d8 WmiAcpi - ok
10:27:08.0445 0x08d8 [ D113499052C5E541906B727779F0F959, 05FB51086C0A0CE3812A7E6098C5A454ECCFE8553669CFA715153564F2226DB0 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
10:27:08.0461 0x08d8 wmiApSrv - ok
10:27:08.0492 0x08d8 WMPNetworkSvc - ok
10:27:08.0539 0x08d8 [ C6FF953D5D6F2EAE3B8883474D5076B3, 001CBB7FBC30209C892869258E5ABD3F0932886E156ECB10DCA599F6D32648BE ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
10:27:08.0555 0x08d8 wpcfltr - ok
10:27:08.0570 0x08d8 [ A6ED163169876BFD2437E872FE2F1509, C13E8676800EEEF690F51C4DEA660B36C8734AE2CCAAC48054E10D74B98949B8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
10:27:08.0586 0x08d8 WPCSvc - ok
10:27:08.0633 0x08d8 [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
10:27:08.0664 0x08d8 WPDBusEnum - ok
10:27:08.0680 0x08d8 [ 0346CAFC181C91C6E2330332EB332ED6, D46F44C339399CAAE13CD71C53A169E95065208E07E5420DE00A4509D6CB056F ] WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr.sys
10:27:08.0711 0x08d8 WpdUpFltr - ok
10:27:08.0742 0x08d8 [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
10:27:08.0774 0x08d8 ws2ifsl - ok
10:27:08.0805 0x08d8 [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] wscsvc C:\Windows\System32\wscsvc.dll
10:27:08.0820 0x08d8 wscsvc - ok
10:27:08.0820 0x08d8 WSearch - ok
10:27:08.0930 0x08d8 [ D4D04839F3DFAF09D94BAB1016F7A297, 944A41D251F522EE87189C1D01CF7EEE2C70BF4353BA4005C44F03DB485F843F ] WSService C:\Windows\System32\WSService.dll
10:27:09.0008 0x08d8 WSService - ok
10:27:09.0149 0x08d8 [ C5B45464B98F211FE58AEE62CFF21F05, A0AB6142F35707102B75C9C29A749C7EB12CB6F5E85E6BA67C5B961AF7EB3BE8 ] wuauserv C:\Windows\system32\wuaueng.dll
10:27:09.0242 0x08d8 wuauserv - ok
10:27:09.0274 0x08d8 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
10:27:09.0305 0x08d8 WudfPf - ok
10:27:09.0305 0x08d8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\System32\drivers\WUDFRd.sys
10:27:09.0336 0x08d8 WUDFRd - ok
10:27:09.0352 0x08d8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFSensorLP C:\Windows\system32\DRIVERS\WUDFRd.sys
10:27:09.0367 0x08d8 WUDFSensorLP - ok
10:27:09.0399 0x08d8 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
10:27:09.0430 0x08d8 wudfsvc - ok
10:27:09.0446 0x08d8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdFs C:\Windows\system32\DRIVERS\WUDFRd.sys
10:27:09.0461 0x08d8 WUDFWpdFs - ok
10:27:09.0492 0x08d8 [ 6D9E07436B6646EC8F7EFFD39B6BA288, 82C1CEA93ECEF17D221AD0F87C5BD96F3FD8143841C16BD9608BD4D58D90B8E0 ] WwanSvc C:\Windows\System32\wwansvc.dll
10:27:09.0524 0x08d8 WwanSvc - ok
10:27:09.0602 0x08d8 [ 86B8B1F5C1189D68B07666784BE882FE, 0DD8C627F3DDBDB61B1910540C465C0D62C9F8D84C7CBB6C80782DB02D535AF0 ] ZAtheros Bt and Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
10:27:09.0633 0x08d8 ZAtheros Bt and Wlan Coex Agent - detected UnsignedFile.Multi.Generic ( 1 )
10:27:11.0988 0x08d8 Detect skipped due to KSN trusted
10:27:11.0988 0x08d8 ZAtheros Bt and Wlan Coex Agent - ok
10:27:12.0004 0x08d8 ================ Scan global ===============================
10:27:12.0113 0x08d8 [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\Windows\system32\basesrv.dll
10:27:12.0160 0x08d8 [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\Windows\system32\winsrv.dll
10:27:12.0208 0x08d8 [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\Windows\system32\sxssrv.dll
10:27:12.0255 0x08d8 [ B6AEF1771CCA54B67DA4932753F74124, 83A353CAC6111C16EB880345E7D89DC9D56F0A3C79F854A4BB7DBABF7270C29F ] C:\Windows\system32\services.exe
10:27:12.0270 0x08d8 [ Global ] - ok
10:27:12.0270 0x08d8 ================ Scan MBR ==================================
10:27:12.0286 0x08d8 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
10:27:12.0374 0x08d8 \Device\Harddisk0\DR0 - ok
10:27:12.0374 0x08d8 ================ Scan VBR ==================================
10:27:12.0378 0x08d8 [ F38E0FB475392BAF5B4250A17C7EDA02 ] \Device\Harddisk0\DR0\Partition1
10:27:12.0413 0x08d8 \Device\Harddisk0\DR0\Partition1 - ok
10:27:12.0427 0x08d8 [ 7A43A54DC5D63A9DD5B82E29FA1DEA31 ] \Device\Harddisk0\DR0\Partition2
10:27:12.0440 0x08d8 \Device\Harddisk0\DR0\Partition2 - ok
10:27:12.0458 0x08d8 [ C9991433A38E8A394D93D720CAB68013 ] \Device\Harddisk0\DR0\Partition3
10:27:12.0474 0x08d8 \Device\Harddisk0\DR0\Partition3 - ok
10:27:12.0490 0x08d8 [ CA139E4C6472338501A1B6ACD959D7E8 ] \Device\Harddisk0\DR0\Partition4
10:27:12.0490 0x08d8 \Device\Harddisk0\DR0\Partition4 - ok
10:27:12.0505 0x08d8 [ 99E53F60A582226485F9EF26C74FD1B4 ] \Device\Harddisk0\DR0\Partition5
10:27:12.0521 0x08d8 \Device\Harddisk0\DR0\Partition5 - ok
10:27:12.0552 0x08d8 [ 9FBEBEFE7AB1E417574FB7BEC629F1C3 ] \Device\Harddisk0\DR0\Partition6
10:27:12.0568 0x08d8 \Device\Harddisk0\DR0\Partition6 - ok
10:27:12.0568 0x08d8 ================ Scan generic autorun ======================
10:27:12.0694 0x08d8 [ 5E53A66C680A06E26B1234CB0C3CD99B, D782E724FF487459704BFA2BC5BA5E6E7E85BC9D71ECF68BE78F9C74449EB207 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
10:27:12.0725 0x08d8 RtHDVBg - ok
10:27:12.0757 0x08d8 [ ED47206E302E15253484AA9224362BFF, 33BF57956E50E72B547867EF462AF760F7E75675F6E5824204E21D8A748CE913 ] C:\Windows\system32\igfxtray.exe
10:27:12.0772 0x08d8 IgfxTray - ok
10:27:12.0803 0x08d8 [ F8F3CA80B4166EFF94A0882796789C64, 5EA9E83DCF10ABCBA8047B34846B470010DDDABC2B2DCBA1CA8098E1BC3A835F ] C:\Windows\system32\hkcmd.exe
10:27:12.0819 0x08d8 HotKeysCmds - ok
10:27:12.0850 0x08d8 [ 4918B31964E8FCFAE47E6786A75D21A1, E22F35E8E1223516D93AC8E8BB4C356BB3B36641E9EE800D5C88463BF27C17D7 ] C:\Windows\system32\igfxpers.exe
10:27:12.0866 0x08d8 Persistence - ok
10:27:12.0866 0x08d8 SynTPEnh - ok
10:27:12.0929 0x08d8 [ 690EB331346D7ADFDA18E50042DEA4B4, 0C219D7A5FCD4E0252C815373E67F843DBD7356FAE7AB836C451068B51438FE7 ] C:\Program Files\Classic Shell\ClassicStartMenu.exe
10:27:12.0941 0x08d8 Classic Start Menu - ok
10:27:13.0027 0x08d8 [ 04679E0DC30077EC1164BE82F2A2ADC9, E0193F0AE484DED0DD7F81407F0D98AC071F34358B9EA554DE3ADFC3BA1CBD60 ] C:\Program Files\McAfee.com\Agent\mcagent.exe
10:27:13.0062 0x08d8 mcui_exe - ok
10:27:13.0097 0x08d8 [ 2E2F360FF158A67F8128EFAAF974189C, 5EDAAF7CCF381B5E767030F2DC52C37F972C4EA36F33BD7D9C422F74AF232DDD ] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
10:27:13.0113 0x08d8 ISBMgr.exe - ok
10:27:13.0175 0x08d8 [ 717CECF8A6F55295A2A8B9ED4C64D800, DFB90D541F7EC5E23159B31E1E103DA4418B121E8C384CE054111A5FAFFE3CD5 ] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
10:27:13.0206 0x08d8 PMBVolumeWatcher - ok
10:27:13.0300 0x08d8 [ 3E04F1E482357B1FC8B088197C3D9FF8, 85524ADDC27ADC831EBBD24E079B412CFDC69E5F594BD153319087665A28D546 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
10:27:13.0333 0x08d8 Adobe ARM - ok
10:27:13.0414 0x08d8 [ 49CD8D25D932C5BF867EBFF00D432B75, D107F7736AC8D43CE93ABDE1A8038D8FE87779F25F41B3FD1E942DF439581236 ] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
10:27:13.0428 0x08d8 Intel AppUp(R) center - ok
10:27:13.0462 0x08d8 [ 04679E0DC30077EC1164BE82F2A2ADC9, E0193F0AE484DED0DD7F81407F0D98AC071F34358B9EA554DE3ADFC3BA1CBD60 ] C:\Program Files\McAfee.com\Agent\mcagent.exe
10:27:13.0482 0x08d8 mcpltui_exe - ok
10:27:13.0579 0x08d8 [ 2A3FB4C98F139038E23330D2439DB8A4, DE9253AD362B03FA5D3D4912662398E5C4AC76F7274B83E51C251A6921A5B838 ] C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe
10:27:13.0594 0x08d8 Facebook Update - ok
10:27:13.0594 0x08d8 Waiting for KSN requests completion. In queue: 80
10:27:14.0615 0x08d8 Waiting for KSN requests completion. In queue: 80
10:27:15.0624 0x08d8 Waiting for KSN requests completion. In queue: 80
10:27:16.0685 0x08d8 AV detected via SS2: McAfee Anti-Virus und Anti-Spyware, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 12.8.0.0 ), 0x54000 ( disabled : updated )
10:27:16.0685 0x08d8 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.7.205.0 ), 0x60100 ( disabled : updated )
10:27:16.0685 0x08d8 FW detected via SS2: McAfee Firewall, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 12.8.0.0 ), 0x52010 ( disabled )
10:27:16.0747 0x08d8 Win FW state via NFP2: enabled
10:27:19.0122 0x08d8 ============================================================
10:27:19.0122 0x08d8 Scan finished
10:27:19.0122 0x08d8 ============================================================
10:27:19.0122 0x14dc Detected object count: 1
10:27:19.0122 0x14dc Actual detected object count: 1
10:29:08.0043 0x14dc VCFw ( UnsignedFile.Multi.Generic ) - skipped by user
10:29:08.0043 0x14dc VCFw ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
|
05.05.2015, 10:47
| #4 |
| /// the machine /// TB-Ausbilder | Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
29.05.2015, 20:40
| #5 |
| | Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. hallo schrauber, zunächst einmal möchte ich mich herzlich für deine letzte antwort bedanken und mich für meine späte antwort entschuldigen. hier die 3 logs, die ich machen sollte : grüße daniel Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by dd (administrator) on DOROTHEA on 29-05-2015 21:25:38
Running from C:\Users\dd\Desktop
Loaded Profiles: dd (Available Profiles: Dorothea Röger & dd & Administrator)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-10-10] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-28] (Atheros Communications)
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\...\Run: [Facebook Update] => C:\Users\dd\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-12-20] (Facebook Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-04-10]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Audials One 12.lnk [2015-04-08]
ShortcutTarget: Audials One 12.lnk -> C:\ProgramData\{18cb70ed-fbb3-231a-18cb-b70edfbbc3b7}\Audials One 12.exe (No File)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-21-1182488276-301210562-3317401335-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\dd\AppData\Roaming\Mozilla\Firefox\Profiles\tg2jj20g.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-18] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-05-09] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-09] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll [2014-01-16] (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1182488276-301210562-3317401335-1004: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\dd\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Extension: Adblock Plus - C:\Users\dd\AppData\Roaming\Mozilla\Firefox\Profiles\tg2jj20g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-10]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-05-02]
CHR Extension: (YouTube) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-07]
CHR Extension: (Google Search) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-07]
CHR Extension: (Disable Youtube™ HTML5 Player) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\enmofgaijnbjpblfljopnpdogpldapoc [2015-04-18]
CHR Extension: (Bookmark Manager DEV) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-17]
CHR Extension: (Gmail) - C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-07]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-28] (Qualcomm Atheros Commnucations) [File not signed]
S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [639576 2013-05-10] (Sony Corporation)
S2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [964608 2012-09-28] (Sony Corporation) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-28] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-28] (Qualcomm Atheros)
R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [428008 2012-12-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-29 21:25 - 2015-05-29 21:25 - 00000000 ____D () C:\Users\dd\Desktop\FRST-OlderVersion
2015-05-29 21:19 - 2015-05-29 21:19 - 00001888 _____ () C:\Users\dd\Desktop\JRT.txt
2015-05-29 21:17 - 2015-05-29 21:17 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-DOROTHEA-Windows-8-(64-bit).dat
2015-05-29 21:16 - 2015-05-29 21:16 - 00000000 ____D () C:\RegBackup
2015-05-29 21:13 - 2015-05-29 21:13 - 02948651 _____ (Thisisu) C:\Users\dd\Desktop\JRT.exe
2015-05-29 20:58 - 2015-05-29 21:01 - 00000000 ____D () C:\AdwCleaner
2015-05-29 20:54 - 2015-05-29 20:54 - 00000000 ____D () C:\Users\dd\Desktop\httpwww.trojaner-board.de166672-windows-8-datentraeger-0-c-staendig-100-leistung-laptop-sehr-langsam.html#post1462739
2015-05-29 20:49 - 2015-05-29 20:49 - 02222592 _____ () C:\Users\dd\Desktop\AdwCleaner_4.205.exe
2015-05-28 15:51 - 2015-05-28 15:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-05-28 15:51 - 2015-05-28 15:51 - 00000000 ____D () C:\Windows\LastGood
2015-05-28 13:11 - 2015-05-28 15:44 - 00000000 ____D () C:\ProgramData\Synaptics
2015-05-28 13:11 - 2015-05-28 13:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-05-28 13:10 - 2015-05-28 13:11 - 00000000 ____D () C:\Windows\LastGood.Tmp
2015-05-27 11:13 - 2015-05-27 11:13 - 01804696 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2015-05-27 11:13 - 2015-05-27 11:13 - 00626888 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2015-05-27 11:13 - 2015-05-27 11:13 - 00419528 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll
2015-05-27 11:13 - 2015-05-27 11:13 - 00267976 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2015-05-27 11:13 - 2015-05-27 11:13 - 00249032 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo27.dll
2015-05-27 11:13 - 2015-05-27 11:13 - 00042696 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2015-05-26 14:49 - 2015-05-26 14:49 - 00000000 ____D () C:\Users\dd\Desktop\1und1 kundenrückgewinnung 08003332232
2015-05-17 00:00 - 2015-05-17 00:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-15 13:59 - 2015-05-15 13:59 - 00000000 ____D () C:\ProgramData\Sony
2015-05-13 12:34 - 2015-04-30 15:07 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 12:34 - 2015-04-30 15:07 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 12:29 - 2015-04-13 07:32 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 12:29 - 2015-04-13 07:30 - 01839616 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 12:29 - 2015-04-13 07:30 - 01280512 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 12:29 - 2015-04-13 06:05 - 01416192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 12:29 - 2015-04-13 05:25 - 04063744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 12:29 - 2015-03-12 07:31 - 01688576 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 14374400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 13771776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00690176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 12:28 - 2015-04-21 16:33 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 12:28 - 2015-04-21 16:32 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 12:28 - 2015-04-21 15:53 - 02237440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 12:28 - 2015-04-21 15:53 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 12:28 - 2015-04-21 15:53 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 19291136 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 15414784 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 02656768 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 12:28 - 2015-04-21 15:52 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 12:28 - 2015-04-21 15:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 12:28 - 2015-04-18 04:37 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 12:28 - 2015-04-18 04:34 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 12:27 - 2015-05-02 08:28 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 12:27 - 2015-05-02 05:59 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 12:27 - 2015-05-02 05:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 12:27 - 2015-04-14 00:09 - 00570248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-05-13 12:27 - 2015-04-06 07:36 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-05-13 12:27 - 2015-04-06 06:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-05-13 12:27 - 2015-03-14 02:55 - 00410017 _____ () C:\Windows\system32\ApnDatabase.xml
2015-05-13 12:27 - 2015-03-12 07:31 - 02048000 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 12:27 - 2015-03-12 07:31 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2015-05-13 12:27 - 2015-03-12 05:52 - 01933312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-13 12:27 - 2015-03-04 08:41 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 12:27 - 2015-03-04 08:39 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 12:27 - 2015-03-04 08:39 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 12:27 - 2015-03-04 06:53 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-13 12:27 - 2015-03-04 06:52 - 00676864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-13 12:27 - 2015-02-18 09:39 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 12:27 - 2015-02-18 09:38 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2015-05-12 16:07 - 2015-05-12 16:07 - 00000000 ____D () C:\Users\dd\Desktop\auf www.tedi.com bewerben unter karriere
2015-05-12 15:59 - 2015-05-12 15:59 - 00000000 ____D () C:\Users\dd\Desktop\joeys langenhahn ab 17uhr 0911 92383150
2015-05-12 15:34 - 2015-05-12 15:34 - 00000000 ____D () C:\Users\dd\Desktop\admiral kino für gleich für gastro bewerben ab september für alles angeben dass ich mit sarah telefoniert hab bewerbung per email an frau mattern
2015-05-12 12:48 - 2015-05-12 12:48 - 00000000 ____D () C:\Users\dd\Desktop\meine sachbearbeiterin bei der metzinger bkk 07141 299597303 leistungsfragen 07141 299597312
2015-05-12 03:13 - 2015-05-29 20:11 - 00000000 ____D () C:\Users\HomeGroupUser$
2015-05-12 03:13 - 2015-05-29 20:11 - 00000000 ____D () C:\Users\Gast
2015-05-12 03:13 - 2015-05-12 03:13 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Packages
2015-05-12 03:13 - 2015-05-12 03:13 - 00000000 ____D () C:\Users\Gast\AppData\Local\Packages
2015-05-11 11:35 - 2015-05-11 11:35 - 00000000 ____D () C:\Users\dd\Desktop\andrea.kirstgen@querzola.demichael797mui208
2015-05-05 09:59 - 2015-05-05 09:59 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\dd\Desktop\tdsskiller.exe
2015-05-05 03:05 - 2015-05-05 03:05 - 00002292 _____ () C:\Users\dd\Desktop\gmer.log
2015-05-05 02:50 - 2015-05-05 02:50 - 00380416 _____ () C:\Users\dd\Desktop\Gmer-19357.exe
2015-05-05 02:49 - 2015-05-05 02:49 - 00033273 _____ () C:\Users\dd\Desktop\Addition.txt
2015-05-05 02:48 - 2015-05-29 21:25 - 00015540 _____ () C:\Users\dd\Desktop\FRST.txt
2015-05-05 02:47 - 2015-05-29 21:25 - 00000000 ____D () C:\FRST
2015-05-05 02:46 - 2015-05-29 21:25 - 02108928 _____ (Farbar) C:\Users\dd\Desktop\FRST64.exe
2015-05-05 02:43 - 2015-05-05 02:44 - 00000466 _____ () C:\Users\dd\Desktop\defogger_disable.log
2015-05-05 02:43 - 2015-05-05 02:43 - 00000000 _____ () C:\Users\dd\defogger_reenable
2015-05-05 02:41 - 2015-05-05 02:41 - 00050477 _____ () C:\Users\dd\Desktop\Defogger.exe
2015-05-05 00:47 - 2015-05-05 00:47 - 00001456 _____ () C:\Users\dd\Desktop\mbam.txt
2015-04-30 06:00 - 2015-04-30 06:00 - 00002401 _____ () C:\Users\dd\Desktop\Market Leader Upper-Intermediate 3rd Edition.lnk
2015-04-30 06:00 - 2015-04-30 06:00 - 00000000 __SHD () C:\Windows\ftpcache
2015-04-30 06:00 - 2015-04-30 06:00 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry
2015-04-30 05:58 - 2015-04-30 05:58 - 00000000 ____D () C:\Users\dd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pearson
2015-04-30 05:47 - 2015-04-30 05:47 - 00000000 ____D () C:\Program Files (x86)\Pearson
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-29 21:11 - 2013-05-08 23:24 - 01512703 _____ () C:\Windows\WindowsUpdate.log
2015-05-29 21:08 - 2014-09-05 13:18 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1182488276-301210562-3317401335-1004
2015-05-29 21:04 - 2015-04-09 14:58 - 00000000 ____D () C:\Users\dd\AppData\Roaming\ClassicShell
2015-05-29 21:03 - 2015-04-07 18:34 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-29 21:03 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-29 21:02 - 2015-04-18 13:05 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-29 21:02 - 2013-05-09 00:12 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-05-29 21:02 - 2012-08-03 04:22 - 00027882 _____ () C:\Windows\PFRO.log
2015-05-29 21:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2015-05-29 20:44 - 2015-04-07 18:34 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-29 20:22 - 2014-12-20 00:17 - 00000934 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004UA.job
2015-05-29 20:17 - 2013-05-09 00:38 - 00000000 ____D () C:\Program Files\McAfeeEx
2015-05-29 20:13 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-05-29 20:04 - 2012-07-26 07:26 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-05-29 16:40 - 2015-03-22 21:38 - 00000000 ____D () C:\Users\dd\Desktop\Neuer Ordner
2015-05-28 23:22 - 2014-12-20 00:17 - 00000912 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1182488276-301210562-3317401335-1004Core.job
2015-05-28 15:51 - 2013-05-08 23:57 - 00030452 _____ () C:\Windows\DPINST.LOG
2015-05-28 15:51 - 2012-07-26 09:21 - 00356822 _____ () C:\Windows\setupact.log
2015-05-28 15:51 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-05-28 15:50 - 2015-04-09 23:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-27 21:16 - 2014-09-08 09:49 - 00000000 ____D () C:\Users\dd\AppData\Local\CrashDumps
2015-05-27 11:13 - 2012-10-23 22:06 - 00764104 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2015-05-17 16:39 - 2015-04-07 18:34 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-17 16:39 - 2015-04-07 18:34 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-17 14:01 - 2013-05-09 00:34 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-16 15:33 - 2015-03-18 09:29 - 00319720 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-16 15:32 - 2015-04-07 23:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-16 15:32 - 2015-04-07 23:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-16 15:28 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2015-05-16 15:28 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-16 15:28 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-15 14:06 - 2015-04-23 20:15 - 00000000 ____D () C:\Users\dd\AppData\Roaming\iolo
2015-05-15 13:59 - 2013-05-09 00:15 - 00000000 ____D () C:\Program Files\Sony
2015-05-15 13:59 - 2013-05-09 00:15 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-05-13 12:48 - 2014-09-05 23:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 12:34 - 2014-09-05 23:05 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 12:31 - 2015-04-07 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-12 03:13 - 2013-09-16 22:59 - 00000000 ____D () C:\Update
2015-05-12 03:13 - 2012-08-03 04:25 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2015-05-05 19:49 - 2015-02-06 16:20 - 00792032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-05 19:49 - 2015-02-06 16:20 - 00177632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-05 02:43 - 2014-09-05 00:47 - 00000000 ____D () C:\Users\dd
2015-05-05 01:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache
2015-05-05 00:13 - 2015-04-08 14:25 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-01 13:14 - 2013-05-09 00:14 - 00753134 _____ () C:\Windows\system32\perfh007.dat
2015-05-01 13:14 - 2013-05-09 00:14 - 00155826 _____ () C:\Windows\system32\perfc007.dat
2015-05-01 13:14 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
==================== Files in the root of some directories =======
2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\dd\AppData\Local\bass.dll
2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\dd\AppData\Local\basscd.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\dd\AppData\Local\CDRip.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0155136 _____ () C:\Users\dd\AppData\Local\lame_enc.dll
2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\dd\AppData\Local\No23 Recorder.exe
2005-08-23 22:34 - 2005-08-23 22:34 - 0029184 _____ () C:\Users\dd\AppData\Local\no23xwrapper.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0015872 _____ () C:\Users\dd\AppData\Local\ogg.dll
2015-04-08 01:05 - 2015-04-09 20:17 - 0001489 _____ () C:\Users\dd\AppData\Local\RecConfig.xml
2015-04-08 14:14 - 2015-04-08 14:14 - 0011772 _____ () C:\Users\dd\AppData\Local\Temp-log.txt
2006-10-26 01:06 - 2006-10-26 01:06 - 0143872 _____ () C:\Users\dd\AppData\Local\vorbis.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0064000 _____ () C:\Users\dd\AppData\Local\vorbisenc.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0019456 _____ () C:\Users\dd\AppData\Local\vorbisfile.dll
2015-04-09 19:40 - 2015-04-09 19:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\dd\AppData\Local\Temp\0206831432923072mcinst.exe
C:\Users\dd\AppData\Local\Temp\Quarantine.exe
C:\Users\dd\AppData\Local\Temp\sqlite3.dll
C:\Users\dd\AppData\Local\Temp\tmpA2FB.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-27 10:24
==================== End of log ============================
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.8.4 (05.29.2015:1)
OS: Windows 8 x64
Ran by dd on 29.05.2015 at 21:16:47,19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\Users\dd\appdata\local\google\chrome\user data\default\local storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage
Successfully deleted: [File] C:\Users\dd\appdata\local\google\chrome\user data\default\local storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage-journal
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\18061483429812477594
~~~ Chrome
Failed to delete: [Folder] C:\Users\dd\appdata\local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
[C:\Users\dd\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\dd\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
gkojfkhlekighikafcpjkiklfbnlmeio
icpgjfneehieebagbmdbhnlpiopdcmna
[C:\Users\dd\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\dd\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
bopakagnckmlgajfccecajhnimjiiedh,
gkojfkhlekighikafcpjkiklfbnlmeio,
icpgjfneehieebagbmdbhnlpiopdcmna
]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.05.2015 at 21:19:28,64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter # AdwCleaner v4.205 - Bericht erstellt 29/05/2015 um 21:01:43
# Aktualisiert 21/05/2015 von Xplode
# Datenbank : 2015-05-25.3 [Server]
# Betriebssystem : Windows 8 (x64)
# Benutzername : dd - DOROTHEA
# Gestarted von : C:\Users\dd\Desktop\AdwCleaner_4.205.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : 0206831432923072mcinstcleanup
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\{18cb70ed-fbb3-231a-18cb-b70edfbbc3b7}
Ordner Gelöscht : C:\ProgramData\{4d1e6255-623a-349b-4d1e-e62556238955}
Ordner Gelöscht : C:\Program Files (x86)\bestadblocker
Ordner Gelöscht : C:\Program Files (x86)\SalePelus
Ordner Gelöscht : C:\Program Files (x86)\SaulePlus
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejcnhmeicafddjdaeecddemnhnomiaai
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap
[/!\] Nicht Gelöscht ( Junction ) : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna
Ordner Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Ordner Gelöscht : C:\ProgramData\dpjmahebnogcclmemjfpppkoebfbnjnp
Datei Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\icpgjfneehieebagbmdbhnlpiopdcmna
Datei Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfhdojbkjhnklbpkdaibdccddilifddb_0.localstorage
Datei Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfhdojbkjhnklbpkdaibdccddilifddb_0.localstorage-journal
Datei Gelöscht : C:\Users\dd\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\icpgjfneehieebagbmdbhnlpiopdcmna
Datei Gelöscht : C:\Users\Administrator\Favorites\eBay.lnk
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E7E31D58-524A-497F-BDA0-7C1B4D0E7D8D}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\Linkey
Schlüssel Gelöscht : HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBit
Schlüssel Gelöscht : HKLM\SOFTWARE\AIM Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
***** [ Internetbrowser ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Mozilla Firefox v38.0.1 (x86 de)
-\\ Google Chrome v43.0.2357.81
*************************
AdwCleaner[R0].txt - [4097 Bytes] - [29/05/2015 20:59:38]
AdwCleaner[S0].txt - [3785 Bytes] - [29/05/2015 21:01:43]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3844 Bytes] ##########
|
|
30.05.2015, 14:13
| #6 |
| /// the machine /// TB-Ausbilder | Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam.ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. |
|
| Themen zu Windows 8: Datenträger 0 (C:) ständig auf 100% Leistung und Laptop sehr langsam. |
| 100%, adware, audials one, browser, defender, device driver, fehler, festplatte, flash player, google, home, homepage, installation, langsam, mozilla, performance, realtek, registry, scan, schutz, security, services.exe, software, svchost.exe, warnung, windows, wlan, xperia |
Linear-Darstellung
