| |
| |||||||
Log-Analyse und Auswertung: GMER Logfile - bitte um AnalyseWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
14.05.2015, 16:54
| #1 |
| |  GMER Logfile - bitte um Analyse Hallo, ich habe das Problem, dass ich seit einiger Zeit keinerlei Windows Updates mehr installieren kann. Alle Versuche, das Problem zu lösen mit diversen Ansätzen aus diversen Foren (MS FixIt, PC Welt FixIt, Kaspersky TDSS Killer uvm.) waren erfolglos. SFC /scannow ist unauffällig, Super Antispyware ist unauffällig, Kasperky Internet Security ist unauffällig etc. Deshalb habe ich jetzt mal mit GMER gescannt und das hat folgendes Logfile ergeben, wäre klasse, wenn da mal jemand einen Blick drauf werfen könnte! Vielen Dank! GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2015-05-14 17:38:14 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Samsung_SSD_840_PRO_Series rev.DXM06B0Q 476,94GB Running: Gmer-19357.exe; Driver: C:\Users\Agando\AppData\Local\Temp\fwddipoc.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076551401 2 bytes JMP 758fb21b C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076551419 2 bytes JMP 758fb346 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076551431 2 bytes JMP 75978ea9 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007655144a 2 bytes CALL 758d48ad C:\Windows\syswow64\KERNEL32.dll .text ... * 9 .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000765514dd 2 bytes JMP 759787a2 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000765514f5 2 bytes JMP 75978978 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007655150d 2 bytes JMP 75978698 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076551525 2 bytes JMP 75978a62 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007655153d 2 bytes JMP 758efca8 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076551555 2 bytes JMP 758f68ef C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007655156d 2 bytes JMP 75978f61 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076551585 2 bytes JMP 75978ac2 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007655159d 2 bytes JMP 7597865c C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000765515b5 2 bytes JMP 758efd41 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000765515cd 2 bytes JMP 758fb2dc C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000765516b2 2 bytes JMP 75978e24 C:\Windows\syswow64\KERNEL32.dll .text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000765516bd 2 bytes JMP 759785f1 C:\Windows\syswow64\KERNEL32.dll ---- Kernel IAT/EAT - GMER 2.1 ---- IAT C:\Windows\System32\win32k.sys[ntoskrnl.exe!KeUserModeCallback] [fffff88003761edc] \SystemRoot\system32\DRIVERS\klif.sys [unknown section] ---- Processes - GMER 2.1 ---- Process C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe (*** suspicious ***) @ C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe [3168](2012-01-12 10:23:20) 00000000000c0000 ---- EOF - GMER 2.1 ---- |
|
14.05.2015, 17:18
| #2 |
| /// the machine /// TB-Ausbilder    | GMER Logfile - bitte um Analyse hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
14.05.2015, 18:07
| #3 | |
| | GMER Logfile - bitte um Analyse Hallo Schrauber,
__________________vielen Dank schonmal für Deine Bereitschaft, mir zu helfen! Hier sind Scan-Logis und Addition.txt, der Übersicht wg. setze ich es in Zitat-Tags, um es abzuheben. 1. Scan-Log: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2015 01
Ran by Agando (administrator) on TORSTEN on 14-05-2015 18:47:15
Running from C:\Users\Agando\Downloads
Loaded Profiles: Agando (Available profiles: Agando)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
() C:\Users\Agando\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
() C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Foxmail\Foxmail.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\wmi64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7543000 2014-03-04] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-02-21] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519408 2013-07-18] (Acronis)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-07-04] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7843744 2014-02-04] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1104616 2013-10-10] (Acronis International GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\...\Run: [SSync] => C:\Users\Agando\AppData\Roaming\SSync\SSync.exe [37376 2013-12-09] ()
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\...\Run: [Amazon Music] => C:\Users\Agando\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-04-21] ()
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7799576 2015-05-08] (SUPERAntiSpyware)
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\...\MountPoints2: {3961611a-8aa7-11e4-bdb0-448a5b995f16} - D:\HTC_Sync_Manager_PC.exe
Startup: C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-08-07]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-07-01]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.ps-wein.de/
HKU\S-1-5-21-4180660468-2940396578-728123060-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-03-10] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2014-07-05] (Sun Microsystems, Inc.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-03-10] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-07-05] (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2014-07-05] (Sun Microsystems, Inc.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-03-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-07-05] (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll [2014-07-04] (Kaspersky Lab ZAO)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default
FF NewTab:
FF Homepage: hxxp://www.ps-wein.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\system32\npdeployJava1.dll [2014-07-05] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2014-07-05] (Sun Microsystems, Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\SysWOW64\npdeployJava1.dll [2014-07-05] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2014-07-05] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-07-03] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-06-26] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-4180660468-2940396578-728123060-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF user.js: detected! => C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\user.js [2014-02-23]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2014-06-19] (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\searchplugins\conduit.xml [2011-05-25]
FF SearchPlugin: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\searchplugins\google-images.xml [2014-10-01]
FF SearchPlugin: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\searchplugins\google-maps.xml [2014-10-01]
FF SearchPlugin: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\searchplugins\Mysearchdial.xml [2014-03-29]
FF SearchPlugin: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\searchplugins\Web Search.xml [2013-10-24]
FF Extension: Google+Tweet - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\crossriderapp529@crossrider.com [2014-07-11]
FF Extension: CodeBurner for Firebug - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\firebug@tools.sitepoint.com [2014-07-03]
FF Extension: DOM Inspector - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\inspector@mozilla.org [2014-12-17]
FF Extension: WOT - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\wotstats@mywot.com [2015-01-26]
FF Extension: Page Speed - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} [2014-07-03]
FF Extension: Classic Theme Restorer (Customize UI) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-07-03]
FF Extension: Firebug - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\firebug@software.joehewitt.com.xpi [2014-07-03]
FF Extension: Hide Favicons - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\hidefavicons@maarten.xpi [2014-07-03]
FF Extension: ProxTube - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\ich@maltegoetz.de.xpi [2014-09-12]
FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2014-07-03]
FF Extension: SEO Status PageRank/Alexa Toolbar - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\seostatus@rubyweb.xpi [2014-07-03]
FF Extension: Status-4-Evar - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\status4evar@caligonstudios.com.xpi [2014-07-03]
FF Extension: TinEye Reverse Image Search - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\tineye@ideeinc.com.xpi [2014-07-03]
FF Extension: YSlow - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\yslow@yahoo-inc.com.xpi [2014-07-03]
FF Extension: MeasureIt - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-03]
FF Extension: ReloadEvery - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-10-18]
FF Extension: Video DownloadHelper - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\76feful1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-15]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2015-04-24]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-24]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2014-07-04]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2014-07-04]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2014-07-04]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2014-07-04]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2014-07-04]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.ps-wein.de/"
CHR Profile: C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-04]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-04]
CHR Extension: (Google Search) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-04]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-04]
CHR Extension: (Bookmark Manager) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-26]
CHR Extension: (Safe Money) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-04]
CHR Extension: (Content Blocker) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-04]
CHR Extension: (Virtual Keyboard) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-04]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-16]
CHR Extension: (Skype Click to Call) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-04-15]
CHR Extension: (Google Wallet) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-04]
CHR Extension: (WOT) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphjeokkkbngjpiofnfpnafjeofjomfb [2015-02-02]
CHR Extension: (Gmail) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-04]
CHR Extension: (Anti-Banner) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-04]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh
CHR HKLM-x32\...\Chrome\Extension: [nphjeokkkbngjpiofnfpnafjeofjomfb] - C:\Users\Agando\AppData\LocalLow\WOT\CHROME\WOT.crx [2012-01-12]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-10-25]
Opera:
=======
OPR StartupUrls: "hxxp://www.ps-wein.de/"
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
S2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-07-04] (Kaspersky Lab ZAO)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2719928 2015-04-22] (Microsoft Corporation)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [528096 2014-06-08] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-02-21] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-19] (Intel Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WOTUpdater; C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe [18432 2012-01-12] () [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 asstor64; C:\Windows\System32\DRIVERS\asstor64.sys [84816 2014-01-27] (Asmedia Technology)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [23936 2014-02-03] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-02-03] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-07-04] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [91008 2014-07-04] (Kaspersky Lab ZAO) [File not signed]
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628320 2014-07-04] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-07-04] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-07-04] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-07-04] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2014-07-04] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177864 2015-02-17] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-07-04] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2014-07-04] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2014-07-04] (Acronis International GmbH)
S3 ALSysIO; \??\C:\Users\Agando\AppData\Local\Temp\ALSysIO64.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-14 18:47 - 2015-05-14 18:47 - 00034829 _____ () C:\Users\Agando\Downloads\FRST.txt.txt
2015-05-14 18:47 - 2015-05-14 18:47 - 00000000 ____D () C:\FRST
2015-05-14 18:46 - 2015-05-14 18:46 - 02105856 _____ (Farbar) C:\Users\Agando\Downloads\FRST64.exe
2015-05-14 17:56 - 2015-05-14 18:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task ac022640-301f-43ef-9d67-75ace0cb2031.job
2015-05-14 17:56 - 2015-05-14 18:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 000c8c2c-f40b-47e3-90ed-ec6f4640dcb7.job
2015-05-14 17:56 - 2015-05-14 17:56 - 00003590 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task ac022640-301f-43ef-9d67-75ace0cb2031
2015-05-14 17:56 - 2015-05-14 17:56 - 00003516 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 000c8c2c-f40b-47e3-90ed-ec6f4640dcb7
2015-05-14 17:56 - 2015-05-14 17:56 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2015-05-14 17:55 - 2015-05-14 18:46 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-05-14 17:55 - 2015-05-14 17:55 - 21901888 _____ (SUPERAntiSpyware) C:\Users\Agando\Downloads\SUPERAntiSpyware.exe
2015-05-14 17:55 - 2015-05-14 17:55 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-05-14 17:55 - 2015-05-14 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-05-14 17:31 - 2015-05-14 17:31 - 01203488 _____ () C:\Users\Agando\Downloads\Gmer-19357 - CHIP-Installer.exe
2015-05-14 17:05 - 2015-05-14 17:05 - 00863476 _____ (IDG Magazine Media GmbH ) C:\Users\Agando\Downloads\pcwFixWindowsUpdate.exe
2015-05-14 17:02 - 2015-05-14 17:02 - 00985600 _____ () C:\Users\Agando\Downloads\MicrosoftFixit50123(1).msi
2015-05-14 00:30 - 2015-05-14 00:30 - 00011626 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
2015-05-13 17:15 - 2015-05-13 17:15 - 00008452 _____ () C:\Users\Agando\Downloads\PATCH_SUPEE-5388_CE_1.4.0.0-1.5.0.1_v1-2015-03-03-09-43-19.sh
2015-05-12 16:43 - 2015-05-12 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape 0.91
2015-05-12 16:43 - 2015-05-12 16:43 - 00000000 ____D () C:\Program Files\Inkscape
2015-05-12 16:42 - 2015-05-12 16:42 - 97868152 _____ () C:\Users\Agando\Downloads\inkscape-0.91-x64.msi
2015-05-12 16:37 - 2015-05-12 16:37 - 00000043 _____ () C:\Windows\gswin64.ini
2015-05-12 15:47 - 2015-05-12 15:48 - 08381369 _____ () C:\Users\Agando\Downloads\ghostpcl-9.16-linux-x86_64.tgz
2015-05-12 15:46 - 2015-05-12 15:46 - 14441561 _____ () C:\Users\Agando\Downloads\gs916w64.exe
2015-05-05 17:26 - 2015-05-14 18:46 - 00005136 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for TORSTEN-Agando Torsten
2015-04-30 16:54 - 2015-02-05 19:57 - 00621384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-04-30 12:59 - 2015-05-14 17:06 - 00005210 _____ () C:\Windows\PFRO.log
2015-04-27 17:53 - 2015-04-27 17:53 - 00024815 _____ () C:\Users\Agando\Downloads\SteuerFuchsESt(4).xml
2015-04-27 17:45 - 2015-04-27 17:45 - 00004097 _____ () C:\Users\Agando\Downloads\SteuerFuchsESt(3).xml
2015-04-27 17:43 - 2015-04-27 17:43 - 00004063 _____ () C:\Users\Agando\Downloads\SteuerFuchsESt(2).xml
2015-04-27 17:38 - 2015-04-27 17:38 - 00003653 _____ () C:\Users\Agando\Downloads\SteuerFuchsESt(1).xml
2015-04-27 17:33 - 2015-04-27 17:34 - 00003061 _____ () C:\Users\Agando\Downloads\SteuerFuchsESt.xml
2015-04-27 11:47 - 2015-05-14 18:45 - 00012920 _____ () C:\Windows\setupact.log
2015-04-27 11:47 - 2015-04-27 11:47 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-26 19:46 - 2015-05-14 18:22 - 01136420 _____ () C:\Windows\WindowsUpdate.log
2015-04-24 14:03 - 2015-04-24 14:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-14 18:46 - 2014-07-03 22:06 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\Skype
2015-05-14 18:45 - 2014-07-04 01:33 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-14 18:45 - 2014-07-04 01:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-05-14 18:45 - 2014-07-01 20:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-14 18:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-14 18:22 - 2014-07-01 20:18 - 00009728 _____ () C:\Windows\SysWOW64\Gms.log
2015-05-14 18:20 - 2014-07-03 17:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-14 17:49 - 2009-07-14 06:45 - 00031872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-14 17:49 - 2009-07-14 06:45 - 00031872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-14 17:47 - 2011-04-12 09:43 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-05-14 17:47 - 2011-04-12 09:43 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-05-14 17:47 - 2009-07-14 07:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-14 17:32 - 2015-03-28 16:49 - 00000000 ____D () C:\Users\Agando\AppData\Local\CrashDumps
2015-05-14 17:30 - 2014-07-04 01:33 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-14 00:49 - 2014-07-05 18:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 00:46 - 2014-07-05 18:28 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 21:48 - 2014-07-05 17:06 - 00000030 _____ () C:\Windows\iedit_.INI
2015-05-13 21:20 - 2014-07-04 00:12 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\vlc
2015-05-13 20:55 - 2014-07-04 16:30 - 00004686 _____ () C:\Windows\ULEAD32.INI
2015-05-12 16:37 - 2014-11-26 16:02 - 00000000 ____D () C:\Users\Agando\AppData\Local\gtk-2.0
2015-05-12 15:54 - 2014-07-03 19:31 - 00000000 ____D () C:\Program Files\gs
2015-05-12 15:46 - 2014-07-03 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ghostscript
2015-05-12 15:19 - 2014-07-03 22:06 - 00000000 ____D () C:\ProgramData\Skype
2015-05-11 15:58 - 2014-07-03 16:46 - 00000000 ____D () C:\Users\Agando\Documents\hm_rechnungen
2015-05-11 15:50 - 2014-07-03 16:47 - 00000000 ____D () C:\Users\Agando\Documents\ust-voranmeldung
2015-05-06 14:11 - 2014-07-03 16:58 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-05-05 22:43 - 2014-07-04 17:21 - 00000000 ____D () C:\Users\Agando\AppData\Roaming\inkscape
2015-05-05 18:35 - 2014-07-04 15:28 - 00387072 _____ () C:\Users\Agando\Documents\Monatseinnahmen.xls
2015-05-03 20:16 - 2014-07-03 16:47 - 00000000 ____D () C:\Users\Agando\Documents\hm_steuer
2015-05-02 00:28 - 2015-04-03 00:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-30 16:54 - 2014-07-01 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-30 16:54 - 2014-07-01 20:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-04-28 14:15 - 2014-07-04 01:39 - 00003850 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1404430747
2015-04-28 14:15 - 2014-07-04 01:39 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-04-27 17:16 - 2014-07-04 17:29 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2015-04-27 17:13 - 2014-07-04 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-04-27 17:13 - 2014-07-01 19:55 - 00000000 ____D () C:\Users\Agando
2015-04-26 19:46 - 2014-08-13 13:05 - 00000000 ____D () C:\Windows\Minidump
2015-04-26 19:46 - 2014-07-17 13:07 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2015-04-26 19:45 - 2014-07-03 21:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-24 12:31 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-21 12:52 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-04-16 18:20 - 2014-07-03 17:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-16 18:20 - 2014-07-03 17:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-16 18:20 - 2014-07-03 17:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-16 18:04 - 2014-07-07 13:47 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-04-16 18:04 - 2014-07-05 18:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 18:04 - 2014-07-03 17:24 - 00000000 ____D () C:\Windows\system32\Macromed
2015-04-16 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-04-16 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 17:16 - 2014-07-01 20:01 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
==================== Files in the root of some directories =======
2014-07-01 20:25 - 2014-07-01 20:25 - 1065984 _____ () C:\Users\Agando\AppData\Local\file__0.localstorage
2014-11-04 23:45 - 2014-11-07 18:25 - 0000600 _____ () C:\Users\Agando\AppData\Local\PUTTY.RND
2015-05-14 00:30 - 2015-05-14 00:30 - 0011626 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
Files to move or delete:
====================
C:\Users\Agando\stlport_vc7145.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-14 14:58
==================== End Of Log ============================
--- --- --- --- --- --- Addition.txt Zitat:
|
|
15.05.2015, 18:27
| #4 |
| /// the machine /// TB-Ausbilder | GMER Logfile - bitte um Analyse Codetags ist ja auch gewollt  Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.05.2015, 18:58
| #5 |
| | GMER Logfile - bitte um Analyse Hallo Schrauber, vielen Dank! Habe beides durchgeführt. Malwarebytes Anti-Rootkit meldet keine Bedrohung sowie, dass kein Cleanup notwendig sei und hat entsprechend keinen Neustart verlangt. TDSSKiller meldet zwei Bedrohungen, Qualcomm Atheros Killer Service V2 und Sound Blaster Cinema 2, beide gemäß Anleitung geskipped. Hier beide Logs, nun ordnungsgemäß beide in CODE-Tags  Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org
Database version:
main: v2015.05.15.04
rootkit: v2015.05.14.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17691
Agando :: TORSTEN [administrator]
15.05.2015 19:46:18
mbar-log-2015-05-15 (19-46-18).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 396413
Time elapsed: 4 minute(s), 7 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter 19:51:36.0992 0x0218 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
19:51:36.0992 0x0218 UEFI system
19:51:39.0493 0x0218 ============================================================
19:51:39.0493 0x0218 Current date / time: 2015/05/15 19:51:39.0493
19:51:39.0493 0x0218 SystemInfo:
19:51:39.0493 0x0218
19:51:39.0493 0x0218 OS Version: 6.1.7601 ServicePack: 1.0
19:51:39.0493 0x0218 Product type: Workstation
19:51:39.0493 0x0218 ComputerName: TORSTEN
19:51:39.0493 0x0218 UserName: Agando
19:51:39.0493 0x0218 Windows directory: C:\Windows
19:51:39.0493 0x0218 System windows directory: C:\Windows
19:51:39.0493 0x0218 Running under WOW64
19:51:39.0493 0x0218 Processor architecture: Intel x64
19:51:39.0493 0x0218 Number of processors: 8
19:51:39.0493 0x0218 Page size: 0x1000
19:51:39.0493 0x0218 Boot type: Normal boot
19:51:39.0493 0x0218 ============================================================
19:51:39.0835 0x0218 KLMD registered as C:\Windows\system32\drivers\69705314.sys
19:51:39.0899 0x0218 System UUID: {E8ABA75E-046C-FAB5-06C2-5C1460E714DA}
19:51:40.0127 0x0218 Drive \Device\Harddisk0\DR0 - Size: 0x773C256000 ( 476.94 Gb ), SectorSize: 0x200, Cylinders: 0xF334, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:51:40.0347 0x0218 Drive \Device\Harddisk1\DR1 - Size: 0x2BAA1476000 ( 2794.52 Gb ), SectorSize: 0x200, Cylinders: 0x59101, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:51:40.0368 0x0218 Drive \Device\Harddisk3\DR3 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:51:40.0859 0x0218 Drive \Device\Harddisk4\DR4 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:51:40.0860 0x0218 ============================================================
19:51:40.0860 0x0218 \Device\Harddisk0\DR0:
19:51:40.0860 0x0218 GPT partitions:
19:51:40.0860 0x0218 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {D8E846C0-0B35-4ECB-A980-CF0E30A5E8BC}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
19:51:40.0860 0x0218 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {145971E8-24DA-40A1-85AF-8669E965A0DF}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000
19:51:40.0860 0x0218 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {AC8EEE44-E6EA-46A5-B5C0-D3F348DFBD27}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x3B96E800
19:51:40.0860 0x0218 MBR partitions:
19:51:40.0860 0x0218 \Device\Harddisk1\DR1:
19:51:40.0860 0x0218 GPT partitions:
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {0B194D2B-990E-4AEA-B500-E3B14FC9AC79}, Name: Micr, StartLBA 0x800, BlocksNum 0x40000
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {78BA58A1-E868-47B8-A17F-26DAC72B8ED3}, Name: , StartLBA 0x40800, BlocksNum 0x3D090000
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {8C83FADA-2710-0000-3875-806E6F6E6963}, Name: , StartLBA 0x3D0D0800, BlocksNum 0x61A80000
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {8E626F71-2710-0000-3875-806E6F6E6963}, Name: , StartLBA 0x9EB50800, BlocksNum 0x249F0000
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {90291645-2710-0000-3875-806E6F6E6963}, Name: , StartLBA 0xC3540800, BlocksNum 0xC350000
19:51:40.0861 0x0218 \Device\Harddisk1\DR1\Partition6: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {91E63798-2710-0000-3875-806E6F6E6963}, Name: , StartLBA 0xCF890800, BlocksNum 0x8DC79B8E
19:51:40.0861 0x0218 MBR partitions:
19:51:40.0861 0x0218 \Device\Harddisk3\DR3:
19:51:40.0861 0x0218 MBR partitions:
19:51:40.0861 0x0218 \Device\Harddisk3\DR3\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982
19:51:40.0861 0x0218 \Device\Harddisk4\DR4:
19:51:40.0861 0x0218 MBR partitions:
19:51:40.0861 0x0218 \Device\Harddisk4\DR4\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x1D1C4542
19:51:40.0861 0x0218 ============================================================
19:51:40.0862 0x0218 C: <-> \Device\Harddisk0\DR0\Partition3
19:51:40.0888 0x0218 K: <-> \Device\Harddisk1\DR1\Partition3
19:51:40.0915 0x0218 L: <-> \Device\Harddisk1\DR1\Partition4
19:51:40.0936 0x0218 M: <-> \Device\Harddisk1\DR1\Partition5
19:51:40.0958 0x0218 N: <-> \Device\Harddisk1\DR1\Partition6
19:51:40.0992 0x0218 G: <-> \Device\Harddisk1\DR1\Partition2
19:51:40.0993 0x0218 Q: <-> \Device\Harddisk3\DR3\Partition1
19:51:40.0993 0x0218 R: <-> \Device\Harddisk4\DR4\Partition1
19:51:40.0993 0x0218 ============================================================
19:51:40.0993 0x0218 Initialize success
19:51:40.0993 0x0218 ============================================================
19:52:03.0454 0x08f8 ============================================================
19:52:03.0454 0x08f8 Scan started
19:52:03.0454 0x08f8 Mode: Manual; SigCheck; TDLFS;
19:52:03.0454 0x08f8 ============================================================
19:52:03.0454 0x08f8 KSN ping started
19:52:05.0728 0x08f8 KSN ping finished: true
19:52:06.0278 0x08f8 ================ Scan system memory ========================
19:52:06.0278 0x08f8 System memory - ok
19:52:06.0278 0x08f8 ================ Scan services =============================
19:52:06.0282 0x08f8 [ 970C70F6B2953ED43822D3797855D84C, CB22723678B514277BC6E6DDDD206F3B2377CD889C9D473A47A7056BE597BC6B ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
19:52:06.0302 0x08f8 !SASCORE - ok
19:52:06.0331 0x08f8 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:52:06.0340 0x08f8 1394ohci - ok
19:52:06.0345 0x08f8 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:52:06.0354 0x08f8 ACPI - ok
19:52:06.0355 0x08f8 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:52:06.0361 0x08f8 AcpiPmi - ok
19:52:06.0378 0x08f8 [ CD41DFA7A778555B2055E2D388F5CB33, AE149AB7823AE3A97E2826C06968F32A7E50331484203E4581C83E441A1680F9 ] AcrSch2Svc C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
19:52:06.0395 0x08f8 AcrSch2Svc - ok
19:52:06.0400 0x08f8 [ 835CE0647E4E9F01BEB26201DA6705B4, C90CBED7E066ECE2F380CE84B95EAD0E120C02720DB31483BDF0E7EDF7FB4EE1 ] AdobeActiveFileMonitor11.0 C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
19:52:06.0407 0x08f8 AdobeActiveFileMonitor11.0 - ok
19:52:06.0428 0x08f8 [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:52:06.0435 0x08f8 AdobeFlashPlayerUpdateSvc - ok
19:52:06.0443 0x08f8 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:52:06.0453 0x08f8 adp94xx - ok
19:52:06.0459 0x08f8 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:52:06.0467 0x08f8 adpahci - ok
19:52:06.0471 0x08f8 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:52:06.0477 0x08f8 adpu320 - ok
19:52:06.0480 0x08f8 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:52:06.0496 0x08f8 AeLookupSvc - ok
19:52:06.0502 0x08f8 [ ABCF9C80EAACE03021BB7F450EB8993F, 8E38726C423E82954CA85266D6F38B605D010A659420A4EF99D29035A9474BFB ] afcdp C:\Windows\system32\DRIVERS\afcdp.sys
19:52:06.0511 0x08f8 afcdp - ok
19:52:06.0559 0x08f8 [ 3B1C11CB7006495F799F8A2AB8B2D530, B7B0C4922A1843BBF8104CDC705C4FEA1F1A760C1CC2BD6BC5E4213A0E4ED9FD ] afcdpsrv C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
19:52:06.0609 0x08f8 afcdpsrv - ok
19:52:06.0619 0x08f8 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
19:52:06.0629 0x08f8 AFD - ok
19:52:06.0632 0x08f8 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
19:52:06.0637 0x08f8 agp440 - ok
19:52:06.0639 0x08f8 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
19:52:06.0645 0x08f8 ALG - ok
19:52:06.0646 0x08f8 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
19:52:06.0651 0x08f8 aliide - ok
19:52:06.0673 0x08f8 ALSysIO - ok
19:52:06.0675 0x08f8 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
19:52:06.0680 0x08f8 amdide - ok
19:52:06.0682 0x08f8 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:52:06.0687 0x08f8 AmdK8 - ok
19:52:06.0690 0x08f8 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
19:52:06.0695 0x08f8 AmdPPM - ok
19:52:06.0698 0x08f8 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:52:06.0703 0x08f8 amdsata - ok
19:52:06.0707 0x08f8 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
19:52:06.0713 0x08f8 amdsbs - ok
19:52:06.0715 0x08f8 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:52:06.0720 0x08f8 amdxata - ok
19:52:06.0722 0x08f8 [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID C:\Windows\system32\drivers\appid.sys
19:52:06.0728 0x08f8 AppID - ok
19:52:06.0729 0x08f8 [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:52:06.0734 0x08f8 AppIDSvc - ok
19:52:06.0737 0x08f8 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
19:52:06.0742 0x08f8 Appinfo - ok
19:52:06.0747 0x08f8 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
19:52:06.0753 0x08f8 AppMgmt - ok
19:52:06.0756 0x08f8 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
19:52:06.0761 0x08f8 arc - ok
19:52:06.0764 0x08f8 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:52:06.0769 0x08f8 arcsas - ok
19:52:06.0772 0x08f8 [ 10920CCB66203D7EF48F024B1B35AE6F, 3C97FE6C91076C059E54234F54021F5D74FB42638BE14E2C1E4CF2EFC342C274 ] asmthub3 C:\Windows\system32\DRIVERS\asmthub3.sys
19:52:06.0778 0x08f8 asmthub3 - ok
19:52:06.0784 0x08f8 [ C479BFAF73CF726E01AA0A487B268A5E, D49F7779CD25E098EC9DAF1886C3B3DB8EB22CEC0FEA6FDF4522A2B2D282AE37 ] asmtxhci C:\Windows\system32\DRIVERS\asmtxhci.sys
19:52:06.0793 0x08f8 asmtxhci - ok
19:52:06.0802 0x08f8 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:52:06.0808 0x08f8 aspnet_state - ok
19:52:06.0810 0x08f8 [ 7F31020C06C8EC1B7013F8A8EF6B0C7E, BE94C92127FE88D5512D8C128CC7FFB2DF62285FE315319FF45E132FD3B6D47D ] asstor64 C:\Windows\system32\DRIVERS\asstor64.sys
19:52:06.0815 0x08f8 asstor64 - ok
19:52:06.0817 0x08f8 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:52:06.0832 0x08f8 AsyncMac - ok
19:52:06.0834 0x08f8 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
19:52:06.0838 0x08f8 atapi - ok
19:52:06.0848 0x08f8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:52:06.0860 0x08f8 AudioEndpointBuilder - ok
19:52:06.0870 0x08f8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:52:06.0883 0x08f8 AudioSrv - ok
19:52:06.0893 0x08f8 [ 15D2DB9BFA8E833ED31FAB2BB088FDDA, 6198C0A5DA01DA146A9A054C3C882A1DBF9BA84466EBFDDA1C1062EF36F9B34B ] AVP C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
19:52:06.0902 0x08f8 AVP - ok
19:52:06.0905 0x08f8 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:52:06.0913 0x08f8 AxInstSV - ok
19:52:06.0921 0x08f8 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
19:52:06.0931 0x08f8 b06bdrv - ok
19:52:06.0936 0x08f8 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:52:06.0943 0x08f8 b57nd60a - ok
19:52:06.0947 0x08f8 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
19:52:06.0952 0x08f8 BDESVC - ok
19:52:06.0954 0x08f8 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
19:52:06.0969 0x08f8 Beep - ok
19:52:06.0980 0x08f8 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
19:52:06.0993 0x08f8 BFE - ok
19:52:06.0995 0x08f8 [ 15370F00194819D8194E655B77E24054, D6133DD3A7B08E9E1FDA1A75DB4CEC708DCA760010DE69E1B4F6CF29D2651A96 ] BfLwf C:\Windows\system32\DRIVERS\bflwfx64.sys
19:52:07.0000 0x08f8 BfLwf - ok
19:52:07.0012 0x08f8 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
19:52:07.0037 0x08f8 BITS - ok
19:52:07.0039 0x08f8 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:52:07.0045 0x08f8 blbdrive - ok
19:52:07.0047 0x08f8 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:52:07.0053 0x08f8 bowser - ok
19:52:07.0054 0x08f8 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
19:52:07.0060 0x08f8 BrFiltLo - ok
19:52:07.0062 0x08f8 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
19:52:07.0068 0x08f8 BrFiltUp - ok
19:52:07.0071 0x08f8 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
19:52:07.0077 0x08f8 Browser - ok
19:52:07.0082 0x08f8 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:52:07.0090 0x08f8 Brserid - ok
19:52:07.0092 0x08f8 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:52:07.0099 0x08f8 BrSerWdm - ok
19:52:07.0100 0x08f8 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:52:07.0106 0x08f8 BrUsbMdm - ok
19:52:07.0108 0x08f8 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:52:07.0113 0x08f8 BrUsbSer - ok
19:52:07.0118 0x08f8 [ DB109DA005B6FE2A350C5DD7CA768DFD, 241A0BFAEFB1B165C00EE75E8CA382B5935F5DF447DAD5AE9022B2B78317668E ] BrYNSvc C:\Program Files (x86)\Browny02\BrYNSvc.exe
19:52:07.0123 0x08f8 BrYNSvc - detected UnsignedFile.Multi.Generic ( 1 )
19:52:09.0417 0x08f8 Detect skipped due to KSN trusted
19:52:09.0417 0x08f8 BrYNSvc - ok
19:52:09.0420 0x08f8 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:52:09.0427 0x08f8 BTHMODEM - ok
19:52:09.0430 0x08f8 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
19:52:09.0446 0x08f8 bthserv - ok
19:52:09.0465 0x08f8 [ 1F79342D9EB530A48742F651E570983A, 99E0B613C23FA8591E248DFA6FF2D3EE19E262BE6E070A0E43E256B69687017F ] c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
19:52:09.0486 0x08f8 c2cautoupdatesvc - ok
19:52:09.0510 0x08f8 [ E4938E0A376CF0B9D989EE5C0A146891, 9DF6AB5781CD60862D9664CA9A8AF0696A1FB6D09D804CD8DE9630F40DE59E90 ] c2cpnrsvc C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
19:52:09.0536 0x08f8 c2cpnrsvc - ok
19:52:09.0540 0x08f8 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:52:09.0556 0x08f8 cdfs - ok
19:52:09.0559 0x08f8 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:52:09.0565 0x08f8 cdrom - ok
19:52:09.0568 0x08f8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
19:52:09.0584 0x08f8 CertPropSvc - ok
19:52:09.0586 0x08f8 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
19:52:09.0593 0x08f8 circlass - ok
19:52:09.0599 0x08f8 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
19:52:09.0607 0x08f8 CLFS - ok
19:52:09.0646 0x08f8 [ 1352A95AD8150440E0A5DD9745154D74, CF78A6267A246F747844FFA255783B5867B0A7232C65AF6224B25B2FBB893313 ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
19:52:09.0683 0x08f8 ClickToRunSvc - ok
19:52:09.0689 0x08f8 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:52:09.0694 0x08f8 clr_optimization_v2.0.50727_32 - ok
19:52:09.0698 0x08f8 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:52:09.0704 0x08f8 clr_optimization_v2.0.50727_64 - ok
19:52:09.0711 0x08f8 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:52:09.0717 0x08f8 clr_optimization_v4.0.30319_32 - ok
19:52:09.0720 0x08f8 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:52:09.0728 0x08f8 clr_optimization_v4.0.30319_64 - ok
19:52:09.0730 0x08f8 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
19:52:09.0734 0x08f8 CmBatt - ok
19:52:09.0736 0x08f8 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:52:09.0741 0x08f8 cmdide - ok
19:52:09.0748 0x08f8 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG C:\Windows\system32\Drivers\cng.sys
19:52:09.0760 0x08f8 CNG - ok
19:52:09.0762 0x08f8 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
19:52:09.0766 0x08f8 Compbatt - ok
19:52:09.0768 0x08f8 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
19:52:09.0774 0x08f8 CompositeBus - ok
19:52:09.0775 0x08f8 COMSysApp - ok
19:52:09.0793 0x08f8 cpuz137 - ok
19:52:09.0794 0x08f8 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:52:09.0799 0x08f8 crcdisk - ok
19:52:09.0803 0x08f8 [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:52:09.0810 0x08f8 CryptSvc - ok
19:52:09.0818 0x08f8 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC C:\Windows\system32\drivers\csc.sys
19:52:09.0828 0x08f8 CSC - ok
19:52:09.0838 0x08f8 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService C:\Windows\System32\cscsvc.dll
19:52:09.0851 0x08f8 CscService - ok
19:52:09.0859 0x08f8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:52:09.0880 0x08f8 DcomLaunch - ok
19:52:09.0886 0x08f8 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
19:52:09.0905 0x08f8 defragsvc - ok
19:52:09.0907 0x08f8 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:52:09.0923 0x08f8 DfsC - ok
19:52:09.0929 0x08f8 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
19:52:09.0937 0x08f8 Dhcp - ok
19:52:09.0939 0x08f8 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
19:52:09.0956 0x08f8 discache - ok
19:52:09.0958 0x08f8 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys
19:52:09.0963 0x08f8 Disk - ok
19:52:09.0966 0x08f8 [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
19:52:09.0974 0x08f8 dmvsc - ok
19:52:09.0977 0x08f8 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:52:09.0984 0x08f8 Dnscache - ok
19:52:09.0989 0x08f8 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
19:52:10.0007 0x08f8 dot3svc - ok
19:52:10.0010 0x08f8 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
19:52:10.0027 0x08f8 DPS - ok
19:52:10.0029 0x08f8 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:52:10.0033 0x08f8 drmkaud - ok
19:52:10.0047 0x08f8 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:52:10.0062 0x08f8 DXGKrnl - ok
19:52:10.0066 0x08f8 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
19:52:10.0082 0x08f8 EapHost - ok
19:52:10.0135 0x08f8 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
19:52:10.0179 0x08f8 ebdrv - ok
19:52:10.0183 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] EFS C:\Windows\System32\lsass.exe
19:52:10.0188 0x08f8 EFS - ok
19:52:10.0199 0x08f8 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:52:10.0212 0x08f8 ehRecvr - ok
19:52:10.0215 0x08f8 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
19:52:10.0221 0x08f8 ehSched - ok
19:52:10.0229 0x08f8 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:52:10.0239 0x08f8 elxstor - ok
19:52:10.0242 0x08f8 [ 6106653B08F4F72EEAA7F099E7C408A4, 96B77284744F8761C4F2558388E0AEE2140618B484FF53FA8B222B340D2A9C84 ] epmntdrv C:\Windows\system32\epmntdrv.sys
19:52:10.0244 0x08f8 epmntdrv - detected UnsignedFile.Multi.Generic ( 1 )
19:52:12.0537 0x08f8 Detect skipped due to KSN trusted
19:52:12.0537 0x08f8 epmntdrv - ok
19:52:12.0539 0x08f8 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:52:12.0544 0x08f8 ErrDev - ok
19:52:12.0546 0x08f8 [ 991C04A31777ED77CB92A4F96F14C2E2, 6CC2A311D8E67032D0847D70B20DCA87B52B2B7FB3C380B3A5AB6C233E955DD2 ] EuGdiDrv C:\Windows\system32\EuGdiDrv.sys
19:52:12.0549 0x08f8 EuGdiDrv - detected UnsignedFile.Multi.Generic ( 1 )
19:52:14.0850 0x08f8 Detect skipped due to KSN trusted
19:52:14.0850 0x08f8 EuGdiDrv - ok
19:52:14.0857 0x08f8 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
19:52:14.0878 0x08f8 EventSystem - ok
19:52:14.0882 0x08f8 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
19:52:14.0899 0x08f8 exfat - ok
19:52:14.0903 0x08f8 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:52:14.0921 0x08f8 fastfat - ok
19:52:14.0931 0x08f8 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
19:52:14.0943 0x08f8 Fax - ok
19:52:14.0946 0x08f8 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
19:52:14.0951 0x08f8 fdc - ok
19:52:14.0952 0x08f8 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
19:52:14.0968 0x08f8 fdPHost - ok
19:52:14.0970 0x08f8 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
19:52:14.0986 0x08f8 FDResPub - ok
19:52:14.0988 0x08f8 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:52:14.0993 0x08f8 FileInfo - ok
19:52:14.0995 0x08f8 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:52:15.0010 0x08f8 Filetrace - ok
19:52:15.0012 0x08f8 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
19:52:15.0017 0x08f8 flpydisk - ok
19:52:15.0022 0x08f8 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:52:15.0030 0x08f8 FltMgr - ok
19:52:15.0033 0x08f8 [ FDD776FAC4159A2983940D1E411FE9F3, 3B147B4D3C5CC67117D65152FA8BD3A603728C92B023AE45CD166E6FF3F474C5 ] fltsrv C:\Windows\system32\DRIVERS\fltsrv.sys
19:52:15.0038 0x08f8 fltsrv - ok
19:52:15.0053 0x08f8 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
19:52:15.0072 0x08f8 FontCache - ok
19:52:15.0075 0x08f8 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:52:15.0079 0x08f8 FontCache3.0.0.0 - ok
19:52:15.0081 0x08f8 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:52:15.0086 0x08f8 FsDepends - ok
19:52:15.0088 0x08f8 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:52:15.0092 0x08f8 Fs_Rec - ok
19:52:15.0101 0x08f8 [ 6A420537442958B8F470CE60C55EDF2B, 4C41D157E5B1C8F4B1B00C454AD8AAEBB672898837B6C6E403398E5B878D18F2 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
19:52:15.0111 0x08f8 Futuremark SystemInfo Service - ok
19:52:15.0115 0x08f8 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:52:15.0123 0x08f8 fvevol - ok
19:52:15.0126 0x08f8 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:52:15.0131 0x08f8 gagp30kx - ok
19:52:15.0141 0x08f8 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
19:52:15.0165 0x08f8 gpsvc - ok
19:52:15.0167 0x08f8 GPUZ - ok
19:52:15.0170 0x08f8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:52:15.0175 0x08f8 gupdate - ok
19:52:15.0177 0x08f8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:52:15.0181 0x08f8 gupdatem - ok
19:52:15.0183 0x08f8 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:52:15.0188 0x08f8 hcw85cir - ok
19:52:15.0194 0x08f8 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:52:15.0204 0x08f8 HdAudAddService - ok
19:52:15.0207 0x08f8 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:52:15.0214 0x08f8 HDAudBus - ok
19:52:15.0216 0x08f8 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
19:52:15.0220 0x08f8 HidBatt - ok
19:52:15.0223 0x08f8 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:52:15.0230 0x08f8 HidBth - ok
19:52:15.0232 0x08f8 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
19:52:15.0239 0x08f8 HidIr - ok
19:52:15.0241 0x08f8 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
19:52:15.0257 0x08f8 hidserv - ok
19:52:15.0259 0x08f8 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\drivers\hidusb.sys
19:52:15.0263 0x08f8 HidUsb - ok
19:52:15.0266 0x08f8 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:52:15.0282 0x08f8 hkmsvc - ok
19:52:15.0286 0x08f8 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:52:15.0293 0x08f8 HomeGroupListener - ok
19:52:15.0297 0x08f8 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:52:15.0304 0x08f8 HomeGroupProvider - ok
19:52:15.0307 0x08f8 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:52:15.0312 0x08f8 HpSAMD - ok
19:52:15.0322 0x08f8 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:52:15.0346 0x08f8 HTTP - ok
19:52:15.0348 0x08f8 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:52:15.0353 0x08f8 hwpolicy - ok
19:52:15.0355 0x08f8 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:52:15.0361 0x08f8 i8042prt - ok
19:52:15.0368 0x08f8 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:52:15.0377 0x08f8 iaStorV - ok
19:52:15.0389 0x08f8 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:52:15.0403 0x08f8 idsvc - ok
19:52:15.0405 0x08f8 IEEtwCollectorService - ok
19:52:15.0407 0x08f8 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:52:15.0412 0x08f8 iirsp - ok
19:52:15.0424 0x08f8 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
19:52:15.0439 0x08f8 IKEEXT - ok
19:52:15.0441 0x08f8 [ 4709FA618952E381ED9BF40B524E8EAC, FA6B7EEA1F122BE8731C4B26F5BA21F5B73F19BBD85F938AFF66E8558C793682 ] INETMON C:\Windows\System32\Drivers\INETMON.sys
19:52:15.0446 0x08f8 INETMON - ok
19:52:15.0493 0x08f8 [ 70DD225646BF84233E18890583E57EFB, 657CFBEBE5C131873BB0B28F6C719772E19D51B48A795E459C388C8EC5EE655B ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:52:15.0543 0x08f8 IntcAzAudAddService - ok
19:52:15.0558 0x08f8 [ 4C17F57E43645E75800E9E84787E34E5, 6A1531D97462BA3B3DBDAD472AF15B717C958AA8C5CE2373DE0B2A41C35BE33E ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
19:52:15.0572 0x08f8 Intel(R) Capability Licensing Service TCP IP Interface - ok
19:52:15.0575 0x08f8 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
19:52:15.0579 0x08f8 intelide - ok
19:52:15.0581 0x08f8 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:52:15.0586 0x08f8 intelppm - ok
19:52:15.0589 0x08f8 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:52:15.0606 0x08f8 IPBusEnum - ok
19:52:15.0608 0x08f8 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:52:15.0624 0x08f8 IpFilterDriver - ok
19:52:15.0632 0x08f8 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:52:15.0644 0x08f8 iphlpsvc - ok
19:52:15.0646 0x08f8 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:52:15.0652 0x08f8 IPMIDRV - ok
19:52:15.0655 0x08f8 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:52:15.0671 0x08f8 IPNAT - ok
19:52:15.0673 0x08f8 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:52:15.0680 0x08f8 IRENUM - ok
19:52:15.0681 0x08f8 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:52:15.0686 0x08f8 isapnp - ok
19:52:15.0691 0x08f8 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:52:15.0698 0x08f8 iScsiPrt - ok
19:52:15.0700 0x08f8 [ 35C0995BCDB0E45D1EEBE4FB582D1563, 67B44EE25B8FF5778AC58255265536EC4CC444A5A8368D6311DEDAF58357E5ED ] ISCT C:\Windows\system32\DRIVERS\ISCTD.sys
19:52:15.0705 0x08f8 ISCT - ok
19:52:15.0710 0x08f8 [ B6064D8C7500E416BC0B7CB2A8474D3A, 824CD7539398119DEF147EEDDBF010EA9B6184B8FA4B17BDDC0D9948F0F66991 ] ISCTAgent C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
19:52:15.0716 0x08f8 ISCTAgent - ok
19:52:15.0718 0x08f8 [ 45392E76EE30DC9C8F0181C785F0BA48, 7FB522E1AA9B877B9FB1A29C2ADC42EA794E8864AD2411AD275F00F00547F8F3 ] iusb3hcs C:\Windows\system32\DRIVERS\iusb3hcs.sys
19:52:15.0722 0x08f8 iusb3hcs - ok
19:52:15.0728 0x08f8 [ C6E8FB7FF41877378CCB30DE6E9941DF, CA808A00C0CC21C1C7BE54F0D1E5D3F24C0032BE821C064E0A63901F20F3C6BC ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys
19:52:15.0736 0x08f8 iusb3hub - ok
19:52:15.0747 0x08f8 [ 6FBA980433B2B21604CE990FBF542D3F, ACB35A5558DD9EF9A339C9D061207AF5527D3AEFC9AC99AB6CFBA1CE92F8B62D ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys
19:52:15.0760 0x08f8 iusb3xhc - ok
19:52:15.0764 0x08f8 [ BDC9C7931DB723CB1AF9F7075EA06645, EEBD5DC9C4656F14F8F0A0A5E84657B6B2BA35283E0E571119DA82F131D5C21B ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
19:52:15.0770 0x08f8 jhi_service - ok
19:52:15.0772 0x08f8 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:52:15.0777 0x08f8 kbdclass - ok
19:52:15.0778 0x08f8 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:52:15.0783 0x08f8 kbdhid - ok
19:52:15.0787 0x08f8 [ 819433A6CFC8771F0A2B0BB8EF6125B1, 37BE3545E3782CFA56F1A890B389CDF37C48F177CEE3EF23F4FDDF3D2A094DD3 ] Ke2200 C:\Windows\system32\DRIVERS\e22w7x64.sys
19:52:15.0792 0x08f8 Ke2200 - ok
19:52:15.0794 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] KeyIso C:\Windows\system32\lsass.exe
19:52:15.0798 0x08f8 KeyIso - ok
19:52:15.0805 0x08f8 [ 795EC29BA21F1D948FD6FD740C00B599, 780900717A812C5DB78C67057010BD62DF2C756C087599A6F8C67CB4EFA7518C ] kl1 C:\Windows\system32\DRIVERS\kl1.sys
19:52:15.0815 0x08f8 kl1 - ok
19:52:15.0825 0x08f8 [ FEA38D7024CD9C27D58A862A19DCFA14, 522A15963A105AD551ED45E7BA2AFA7A90408FE7D349307A17F12FE761AFB903 ] KLIF C:\Windows\system32\DRIVERS\klif.sys
19:52:15.0836 0x08f8 KLIF - ok
19:52:15.0838 0x08f8 [ 31B69BFF28348503E4BD10C2A4F66D05, 891318C2DDF85E43DFCEE73717AEFCE79BC3DCD83FCD58E6F794AB6BF1739688 ] KLIM6 C:\Windows\system32\DRIVERS\klim6.sys
19:52:15.0842 0x08f8 KLIM6 - ok
19:52:15.0844 0x08f8 [ AEB50941C6D67128B14F88DB9917C4E0, 2ACE46665DE298CC197660A442A3172B1FB460A40BD18AECEA786ACB011FDA43 ] klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys
19:52:15.0848 0x08f8 klkbdflt - ok
19:52:15.0849 0x08f8 [ 72CF64FBF38CD681FA7F37176047E967, BE5683C119DCEF7E678EE477D6CADF873E32D42372A253B7E86B8C335DF28E1C ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys
19:52:15.0853 0x08f8 klmouflt - ok
19:52:15.0855 0x08f8 [ 45ECF097BC6330C2054D7D43B7AD822B, 41684ED54E75FE6BEEA322E7CE888DFDD53EE1F45016E01CE10B84ABB02CBDA8 ] kltdi C:\Windows\system32\DRIVERS\kltdi.sys
19:52:15.0859 0x08f8 kltdi - ok
19:52:15.0863 0x08f8 [ 0E71FAED99892750DFE1C5237A6F8FE6, 786FEEEF637BC89FDED3DDEA2563144C7128E7C9582261B23F16B98D69149088 ] kneps C:\Windows\system32\DRIVERS\kneps.sys
19:52:15.0869 0x08f8 kneps - ok
19:52:15.0872 0x08f8 [ 56ED3EE5FED6BF2FC1305CF872042868, 44F77AE3CD83284800FF106156ABCB63047327855E2535EE278289AF6F05579C ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:52:15.0877 0x08f8 KSecDD - ok
19:52:15.0880 0x08f8 [ 8BA90F480705D7153AD0060CCA62222A, B3E610DFAB382368114D026947084A72AFC4F5BF9C28317F411D4ED91E0B3192 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:52:15.0886 0x08f8 KSecPkg - ok
19:52:15.0888 0x08f8 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:52:15.0903 0x08f8 ksthunk - ok
19:52:15.0909 0x08f8 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
19:52:15.0929 0x08f8 KtmRm - ok
19:52:15.0934 0x08f8 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:52:15.0952 0x08f8 LanmanServer - ok
19:52:15.0955 0x08f8 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:52:15.0972 0x08f8 LanmanWorkstation - ok
19:52:15.0974 0x08f8 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:52:15.0990 0x08f8 lltdio - ok
19:52:15.0995 0x08f8 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:52:16.0014 0x08f8 lltdsvc - ok
19:52:16.0016 0x08f8 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:52:16.0032 0x08f8 lmhosts - ok
19:52:16.0039 0x08f8 [ A7D2A96187E5C5F4F7650900A15788AA, F131C3E8206A89A9244ECF2507F4FC1A8550E594A58F75338939A54C973078AF ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19:52:16.0048 0x08f8 LMS - ok
19:52:16.0051 0x08f8 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:52:16.0057 0x08f8 LSI_FC - ok
19:52:16.0060 0x08f8 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:52:16.0065 0x08f8 LSI_SAS - ok
19:52:16.0067 0x08f8 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
19:52:16.0072 0x08f8 LSI_SAS2 - ok
19:52:16.0075 0x08f8 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:52:16.0080 0x08f8 LSI_SCSI - ok
19:52:16.0083 0x08f8 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
19:52:16.0099 0x08f8 luafv - ok
19:52:16.0101 0x08f8 [ 8FF2D95CBA49B405C5DE27039FF0BF35, 03BF7FC7F1C2C76EDB583BA342EA1C325DB8058517744EF2A78529D3938F4DC1 ] MBfilt C:\Windows\system32\drivers\MBfilt64.sys
19:52:16.0105 0x08f8 MBfilt - ok
19:52:16.0107 0x08f8 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:52:16.0114 0x08f8 Mcx2Svc - ok
19:52:16.0116 0x08f8 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
19:52:16.0120 0x08f8 megasas - ok
19:52:16.0125 0x08f8 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
19:52:16.0133 0x08f8 MegaSR - ok
19:52:16.0136 0x08f8 [ 1BC9159CF58BABD89419072EA180A8F6, 6C9AB779C2355A341800A8F93AAAF9B19FAFF444CD6A7BD27C63D53F379A75EF ] MEIx64 C:\Windows\system32\DRIVERS\TeeDriverx64.sys
19:52:16.0142 0x08f8 MEIx64 - ok
19:52:16.0144 0x08f8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
19:52:16.0161 0x08f8 MMCSS - ok
19:52:16.0162 0x08f8 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
19:52:16.0178 0x08f8 Modem - ok
19:52:16.0180 0x08f8 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:52:16.0186 0x08f8 monitor - ok
19:52:16.0188 0x08f8 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:52:16.0193 0x08f8 mouclass - ok
19:52:16.0195 0x08f8 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:52:16.0200 0x08f8 mouhid - ok
19:52:16.0202 0x08f8 [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:52:16.0208 0x08f8 mountmgr - ok
19:52:16.0211 0x08f8 [ 03D14BF1DC59130002F6B8BA3AD89DB9, 1729CCD8AAF51CDB86ED67569974D0B6B1CFFA5F90EF6E6004B0D8A305D88C27 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:52:16.0217 0x08f8 MozillaMaintenance - ok
19:52:16.0220 0x08f8 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
19:52:16.0226 0x08f8 mpio - ok
19:52:16.0229 0x08f8 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:52:16.0245 0x08f8 mpsdrv - ok
19:52:16.0256 0x08f8 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:52:16.0281 0x08f8 MpsSvc - ok
19:52:16.0285 0x08f8 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:52:16.0291 0x08f8 MRxDAV - ok
19:52:16.0294 0x08f8 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:52:16.0300 0x08f8 mrxsmb - ok
19:52:16.0305 0x08f8 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:52:16.0313 0x08f8 mrxsmb10 - ok
19:52:16.0316 0x08f8 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:52:16.0322 0x08f8 mrxsmb20 - ok
19:52:16.0324 0x08f8 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
19:52:16.0328 0x08f8 msahci - ok
19:52:16.0332 0x08f8 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:52:16.0337 0x08f8 msdsm - ok
19:52:16.0341 0x08f8 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
19:52:16.0348 0x08f8 MSDTC - ok
19:52:16.0351 0x08f8 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:52:16.0366 0x08f8 Msfs - ok
19:52:16.0368 0x08f8 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:52:16.0383 0x08f8 mshidkmdf - ok
19:52:16.0384 0x08f8 MSICDSetup - ok
19:52:16.0386 0x08f8 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:52:16.0390 0x08f8 msisadrv - ok
19:52:16.0393 0x08f8 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:52:16.0411 0x08f8 MSiSCSI - ok
19:52:16.0412 0x08f8 msiserver - ok
19:52:16.0414 0x08f8 [ A7EDADFB0AE38AE6F0488F0F2448D8B5, 7DC08FF24CC4E2071BF8E876976B22E810A8A407FADE403D119F75AD50088105 ] MSI_Trigger_Service C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
19:52:16.0418 0x08f8 MSI_Trigger_Service - ok
19:52:16.0419 0x08f8 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:52:16.0435 0x08f8 MSKSSRV - ok
19:52:16.0436 0x08f8 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:52:16.0452 0x08f8 MSPCLOCK - ok
19:52:16.0453 0x08f8 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:52:16.0468 0x08f8 MSPQM - ok
19:52:16.0474 0x08f8 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:52:16.0483 0x08f8 MsRPC - ok
19:52:16.0486 0x08f8 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:52:16.0503 0x08f8 mssmbios - ok
19:52:16.0504 0x08f8 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:52:16.0520 0x08f8 MSTEE - ok
19:52:16.0521 0x08f8 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
19:52:16.0526 0x08f8 MTConfig - ok
19:52:16.0528 0x08f8 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
19:52:16.0533 0x08f8 Mup - ok
19:52:16.0540 0x08f8 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
19:52:16.0561 0x08f8 napagent - ok
19:52:16.0567 0x08f8 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:52:16.0577 0x08f8 NativeWifiP - ok
19:52:16.0590 0x08f8 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
19:52:16.0605 0x08f8 NDIS - ok
19:52:16.0608 0x08f8 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:52:16.0623 0x08f8 NdisCap - ok
19:52:16.0625 0x08f8 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:52:16.0640 0x08f8 NdisTapi - ok
19:52:16.0642 0x08f8 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:52:16.0658 0x08f8 Ndisuio - ok
19:52:16.0661 0x08f8 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:52:16.0678 0x08f8 NdisWan - ok
19:52:16.0680 0x08f8 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:52:16.0696 0x08f8 NDProxy - ok
19:52:16.0698 0x08f8 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:52:16.0713 0x08f8 NetBIOS - ok
19:52:16.0718 0x08f8 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:52:16.0736 0x08f8 NetBT - ok
19:52:16.0738 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] Netlogon C:\Windows\system32\lsass.exe
19:52:16.0742 0x08f8 Netlogon - ok
19:52:16.0748 0x08f8 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
19:52:16.0768 0x08f8 Netman - ok
19:52:16.0776 0x08f8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:52:16.0782 0x08f8 NetMsmqActivator - ok
19:52:16.0785 0x08f8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:52:16.0792 0x08f8 NetPipeActivator - ok
19:52:16.0799 0x08f8 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
19:52:16.0820 0x08f8 netprofm - ok
19:52:16.0823 0x08f8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:52:16.0830 0x08f8 NetTcpActivator - ok
19:52:16.0833 0x08f8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:52:16.0839 0x08f8 NetTcpPortSharing - ok
19:52:16.0841 0x08f8 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:52:16.0846 0x08f8 nfrd960 - ok
19:52:16.0851 0x08f8 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
19:52:16.0859 0x08f8 NlaSvc - ok
19:52:16.0861 0x08f8 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:52:16.0877 0x08f8 Npfs - ok
19:52:16.0879 0x08f8 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
19:52:16.0895 0x08f8 nsi - ok
19:52:16.0897 0x08f8 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:52:16.0912 0x08f8 nsiproxy - ok
19:52:16.0934 0x08f8 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:52:16.0958 0x08f8 Ntfs - ok
19:52:16.0960 0x08f8 NTIOLib_1_0_C - ok
19:52:16.0962 0x08f8 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
19:52:16.0977 0x08f8 Null - ok
19:52:16.0980 0x08f8 [ 7E4355930B28C2798D9F09AB9F81151F, 941C730F3B75BDF99639E76350031EDD15F18D8D860F3B1282C28B62096E7717 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
19:52:16.0986 0x08f8 NVHDA - ok
19:52:17.0108 0x08f8 [ 3B99271224C43ADAB5A7F8D4B574AE3F, 931B011EA7796C61922D892C11D880BCC0383FCECABC4F4855AF89BA20B9B01B ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:52:17.0234 0x08f8 nvlddmkm - ok
19:52:17.0262 0x08f8 [ 45D6780D0525D7BC29E2E3605CA73C18, C8BBE8BE9824CD1D3C4314FE370FA03BD6000187B4FC4FC935F8342E1A02FA7E ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
19:52:17.0287 0x08f8 NvNetworkService - ok
19:52:17.0291 0x08f8 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:52:17.0297 0x08f8 nvraid - ok
19:52:17.0300 0x08f8 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:52:17.0307 0x08f8 nvstor - ok
19:52:17.0309 0x08f8 [ A0D870DCE152EE5B92A41AD927201D19, 67FB025CB380D933BF0FDD4AFE9BE4E3C1D69A59865E02A96533BBE9EC260D71 ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
19:52:17.0313 0x08f8 NvStreamKms - ok
19:52:17.0534 0x08f8 [ E5597D09E5239C0F908948DB7057AC26, A6045D4D9D2F8007B0F75DAAABB2AD9FEB4A898E33A51ECE9A9D788D8E8F84A4 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
19:52:17.0768 0x08f8 NvStreamSvc - ok
19:52:17.0793 0x08f8 [ 97ADEBE576474D4CEC53F8E06590FFC8, 2CC8587AAB595D7621AA57A33D94789BD9DC6DBFB4FA9BDEFBB425B7ACCB65AB ] nvsvc C:\Windows\system32\nvvsvc.exe
19:52:17.0808 0x08f8 nvsvc - ok
19:52:17.0811 0x08f8 [ 75034A4D7C02327D150B617571D4196A, 8E7DAFEC4307E883D52BD0B5F0732E26E019C953770B52ACBBAD3074A66393CB ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
19:52:17.0815 0x08f8 nvvad_WaveExtensible - ok
19:52:17.0818 0x08f8 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:52:17.0824 0x08f8 nv_agp - ok
19:52:17.0826 0x08f8 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:52:17.0831 0x08f8 ohci1394 - ok
19:52:17.0835 0x08f8 [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:52:17.0841 0x08f8 ose - ok
19:52:17.0903 0x08f8 [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:52:17.0968 0x08f8 osppsvc - ok
19:52:17.0977 0x08f8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:52:17.0986 0x08f8 p2pimsvc - ok
19:52:17.0993 0x08f8 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
19:52:18.0003 0x08f8 p2psvc - ok
19:52:18.0006 0x08f8 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys
19:52:18.0012 0x08f8 Parport - ok
19:52:18.0014 0x08f8 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:52:18.0019 0x08f8 partmgr - ok
19:52:18.0023 0x08f8 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:52:18.0030 0x08f8 PcaSvc - ok
19:52:18.0033 0x08f8 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
19:52:18.0040 0x08f8 pci - ok
19:52:18.0041 0x08f8 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
19:52:18.0046 0x08f8 pciide - ok
19:52:18.0050 0x08f8 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:52:18.0057 0x08f8 pcmcia - ok
19:52:18.0059 0x08f8 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
19:52:18.0063 0x08f8 pcw - ok
19:52:18.0086 0x08f8 [ F97DC1A5244469D367B1334D47118E34, A36B6C402F92BEBE14082296CBF5F69656ED87AB700789028799768FA1FE2A72 ] PDF Architect 2 C:\Program Files (x86)\PDF Architect 2\ws.exe
19:52:18.0111 0x08f8 PDF Architect 2 - ok
19:52:18.0124 0x08f8 [ E81F7D5371C95904D4105B06405D5EDA, A6A41793AC241801D37A95C25B2DA0C3CDDC804B4F2BD087ECBD30C562F3517B ] pdfforge CrashHandler C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
19:52:18.0137 0x08f8 pdfforge CrashHandler - ok
19:52:18.0147 0x08f8 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:52:18.0160 0x08f8 PEAUTH - ok
19:52:18.0178 0x08f8 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
19:52:18.0199 0x08f8 PeerDistSvc - ok
19:52:18.0218 0x08f8 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:52:18.0223 0x08f8 PerfHost - ok
19:52:18.0244 0x08f8 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
19:52:18.0276 0x08f8 pla - ok
19:52:18.0283 0x08f8 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:52:18.0293 0x08f8 PlugPlay - ok
19:52:18.0295 0x08f8 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:52:18.0300 0x08f8 PNRPAutoReg - ok
19:52:18.0305 0x08f8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:52:18.0314 0x08f8 PNRPsvc - ok
19:52:18.0321 0x08f8 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:52:18.0342 0x08f8 PolicyAgent - ok
19:52:18.0346 0x08f8 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
19:52:18.0364 0x08f8 Power - ok
19:52:18.0367 0x08f8 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:52:18.0383 0x08f8 PptpMiniport - ok
19:52:18.0385 0x08f8 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
19:52:18.0391 0x08f8 Processor - ok
19:52:18.0395 0x08f8 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
19:52:18.0402 0x08f8 ProfSvc - ok
19:52:18.0404 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:52:18.0409 0x08f8 ProtectedStorage - ok
19:52:18.0412 0x08f8 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:52:18.0428 0x08f8 Psched - ok
19:52:18.0430 0x08f8 [ 07D57B890DD5693A6AB660CBAE8F91B4, 934895A41C116056E22FE3298418332A9F4280F96E96EEE06C977A4925395674 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
19:52:18.0434 0x08f8 PxHlpa64 - ok
19:52:18.0453 0x08f8 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:52:18.0476 0x08f8 ql2300 - ok
19:52:18.0480 0x08f8 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:52:18.0485 0x08f8 ql40xx - ok
19:52:18.0491 0x08f8 [ 488936C5C09AC64F35DC817BFE34F3D9, 43DE318D50F30B54EF2BC635AA6FD2179073444F8E78F978D9F87A1F31A6EA26 ] Qualcomm Atheros Killer Service V2 C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
19:52:18.0497 0x08f8 Qualcomm Atheros Killer Service V2 - detected UnsignedFile.Multi.Generic ( 1 )
19:52:20.0814 0x08f8 Qualcomm Atheros Killer Service V2 ( UnsignedFile.Multi.Generic ) - warning
19:52:23.0174 0x08f8 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
19:52:23.0184 0x08f8 QWAVE - ok
19:52:23.0184 0x08f8 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:52:23.0194 0x08f8 QWAVEdrv - ok
19:52:23.0194 0x08f8 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:52:23.0214 0x08f8 RasAcd - ok
19:52:23.0214 0x08f8 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:52:23.0224 0x08f8 RasAgileVpn - ok
19:52:23.0234 0x08f8 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
19:52:23.0244 0x08f8 RasAuto - ok
19:52:23.0254 0x08f8 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:52:23.0264 0x08f8 Rasl2tp - ok
19:52:23.0274 0x08f8 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
19:52:23.0294 0x08f8 RasMan - ok
19:52:23.0294 0x08f8 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:52:23.0314 0x08f8 RasPppoe - ok
19:52:23.0314 0x08f8 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:52:23.0334 0x08f8 RasSstp - ok
19:52:23.0334 0x08f8 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:52:23.0354 0x08f8 rdbss - ok
19:52:23.0354 0x08f8 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
19:52:23.0364 0x08f8 rdpbus - ok
19:52:23.0364 0x08f8 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:52:23.0374 0x08f8 RDPCDD - ok
19:52:23.0384 0x08f8 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
19:52:23.0384 0x08f8 RDPDR - ok
19:52:23.0394 0x08f8 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:52:23.0404 0x08f8 RDPENCDD - ok
19:52:23.0404 0x08f8 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:52:23.0424 0x08f8 RDPREFMP - ok
19:52:23.0424 0x08f8 [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:52:23.0434 0x08f8 RdpVideoMiniport - ok
19:52:23.0434 0x08f8 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:52:23.0444 0x08f8 RDPWD - ok
19:52:23.0444 0x08f8 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:52:23.0454 0x08f8 rdyboost - ok
19:52:23.0454 0x08f8 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:52:23.0474 0x08f8 RemoteAccess - ok
19:52:23.0474 0x08f8 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:52:23.0494 0x08f8 RemoteRegistry - ok
19:52:23.0494 0x08f8 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:52:23.0514 0x08f8 RpcEptMapper - ok
19:52:23.0514 0x08f8 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
19:52:23.0514 0x08f8 RpcLocator - ok
19:52:23.0524 0x08f8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
19:52:23.0544 0x08f8 RpcSs - ok
19:52:23.0544 0x08f8 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:52:23.0564 0x08f8 rspndr - ok
19:52:23.0564 0x08f8 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap C:\Windows\system32\drivers\vms3cap.sys
19:52:23.0574 0x08f8 s3cap - ok
19:52:23.0574 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] SamSs C:\Windows\system32\lsass.exe
19:52:23.0574 0x08f8 SamSs - ok
19:52:23.0574 0x08f8 [ 3289766038DB2CB14D07DC84392138D5, A7790B787690CC1A8B97E4532090C5295350A836A9474DEA74CEB3E81CF26124 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
19:52:23.0584 0x08f8 SASDIFSV - ok
19:52:23.0584 0x08f8 [ 58A38E75F3316A83C23DF6173D41F2B5, B0A8CDA1D164B7534FB41AB80792861384709BF0F914F44553275CF20194F1A1 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
19:52:23.0584 0x08f8 SASKUTIL - ok
19:52:23.0594 0x08f8 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:52:23.0594 0x08f8 sbp2port - ok
19:52:23.0594 0x08f8 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:52:23.0614 0x08f8 SCardSvr - ok
19:52:23.0614 0x08f8 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:52:23.0634 0x08f8 scfilter - ok
19:52:23.0644 0x08f8 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
19:52:23.0674 0x08f8 Schedule - ok
19:52:23.0684 0x08f8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
19:52:23.0694 0x08f8 SCPolicySvc - ok
19:52:23.0694 0x08f8 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:52:23.0704 0x08f8 SDRSVC - ok
19:52:23.0704 0x08f8 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:52:23.0724 0x08f8 secdrv - ok
19:52:23.0724 0x08f8 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
19:52:23.0744 0x08f8 seclogon - ok
19:52:23.0744 0x08f8 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
19:52:23.0754 0x08f8 SENS - ok
19:52:23.0764 0x08f8 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:52:23.0764 0x08f8 SensrSvc - ok
19:52:23.0764 0x08f8 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
19:52:23.0774 0x08f8 Serenum - ok
19:52:23.0774 0x08f8 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
19:52:23.0784 0x08f8 Serial - ok
19:52:23.0784 0x08f8 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:52:23.0784 0x08f8 sermouse - ok
19:52:23.0794 0x08f8 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
19:52:23.0814 0x08f8 SessionEnv - ok
19:52:23.0814 0x08f8 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:52:23.0814 0x08f8 sffdisk - ok
19:52:23.0814 0x08f8 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:52:23.0824 0x08f8 sffp_mmc - ok
19:52:23.0824 0x08f8 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:52:23.0834 0x08f8 sffp_sd - ok
19:52:23.0834 0x08f8 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
19:52:23.0834 0x08f8 sfloppy - ok
19:52:23.0844 0x08f8 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:52:23.0864 0x08f8 SharedAccess - ok
19:52:23.0874 0x08f8 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:52:23.0884 0x08f8 ShellHWDetection - ok
19:52:23.0894 0x08f8 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
19:52:23.0894 0x08f8 SiSRaid2 - ok
19:52:23.0894 0x08f8 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:52:23.0904 0x08f8 SiSRaid4 - ok
19:52:23.0914 0x08f8 [ 704B4F81729F676BBF034529FC334D82, 1E50DAF97836807A500284385D99272780A8B69CA88761250451060B207824F8 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
19:52:23.0914 0x08f8 SkypeUpdate - ok
19:52:23.0924 0x08f8 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:52:23.0934 0x08f8 Smb - ok
19:52:23.0944 0x08f8 [ FBE0201AB61E18934C812C34D31A4403, 549E51FC11CCA30B21970C90F4799D6CB94481CDC623B8C319F16DAEFC8A190B ] snapman C:\Windows\system32\DRIVERS\snapman.sys
19:52:23.0954 0x08f8 snapman - ok
19:52:23.0954 0x08f8 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:52:23.0954 0x08f8 SNMPTRAP - ok
19:52:23.0954 0x08f8 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
19:52:23.0964 0x08f8 spldr - ok
19:52:23.0974 0x08f8 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
19:52:23.0984 0x08f8 Spooler - ok
19:52:24.0024 0x08f8 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
19:52:24.0084 0x08f8 sppsvc - ok
19:52:24.0084 0x08f8 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:52:24.0104 0x08f8 sppuinotify - ok
19:52:24.0114 0x08f8 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
19:52:24.0124 0x08f8 srv - ok
19:52:24.0124 0x08f8 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:52:24.0134 0x08f8 srv2 - ok
19:52:24.0144 0x08f8 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:52:24.0144 0x08f8 srvnet - ok
19:52:24.0154 0x08f8 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:52:24.0164 0x08f8 SSDPSRV - ok
19:52:24.0174 0x08f8 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:52:24.0184 0x08f8 SstpSvc - ok
19:52:24.0194 0x08f8 [ 15E9700890AE50AA6A8B68EBB8F82EAD, 99D909B8A20E47BBDB5902806C700EAF914192561D69182D93357C6C6F30EC0D ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
19:52:24.0204 0x08f8 Steam Client Service - ok
19:52:24.0214 0x08f8 [ 49B1E5AF3AA400752A20BE169CB73DFA, D990BC79B289912EB07F3FD50F1236C593A45C5E9B7BD8162269687258E07CE2 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:52:24.0224 0x08f8 Stereo Service - ok
19:52:24.0224 0x08f8 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
19:52:24.0224 0x08f8 stexstor - ok
19:52:24.0234 0x08f8 [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
19:52:24.0234 0x08f8 StillCam - ok
19:52:24.0244 0x08f8 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
19:52:24.0254 0x08f8 stisvc - ok
19:52:24.0264 0x08f8 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt C:\Windows\system32\drivers\vmstorfl.sys
19:52:24.0264 0x08f8 storflt - ok
19:52:24.0264 0x08f8 [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc C:\Windows\system32\storsvc.dll
19:52:24.0274 0x08f8 StorSvc - ok
19:52:24.0274 0x08f8 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc C:\Windows\system32\drivers\storvsc.sys
19:52:24.0274 0x08f8 storvsc - ok
19:52:24.0284 0x08f8 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:52:24.0284 0x08f8 swenum - ok
19:52:24.0294 0x08f8 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
19:52:24.0314 0x08f8 swprv - ok
19:52:24.0394 0x08f8 [ 0FE29D81F372CA2DCE9E49736A3BD3E6, 10ED93BEE7ECBD2AF5E7AB0197CC82A5424FD63A2ED90F0417B266AD06E5F32C ] syncagentsrv C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
19:52:24.0484 0x08f8 syncagentsrv - ok
19:52:24.0514 0x08f8 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
19:52:24.0544 0x08f8 SysMain - ok
19:52:24.0544 0x08f8 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:52:24.0554 0x08f8 TabletInputService - ok
19:52:24.0554 0x08f8 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
19:52:24.0574 0x08f8 TapiSrv - ok
19:52:24.0584 0x08f8 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
19:52:24.0594 0x08f8 TBS - ok
19:52:24.0624 0x08f8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:52:24.0644 0x08f8 Tcpip - ok
19:52:24.0674 0x08f8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:52:24.0704 0x08f8 TCPIP6 - ok
19:52:24.0704 0x08f8 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:52:24.0714 0x08f8 tcpipreg - ok
19:52:24.0714 0x08f8 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:52:24.0714 0x08f8 TDPIPE - ok
19:52:24.0734 0x08f8 [ 07330E30921C70E9D9B416EE43A06349, 398500C12E685BCF732C7F80A2C0E95181E5377A0E6C14CF9A3EE8580083A556 ] tdrpman C:\Windows\system32\DRIVERS\tdrpman.sys
19:52:24.0754 0x08f8 tdrpman - ok
19:52:24.0764 0x08f8 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:52:24.0764 0x08f8 TDTCP - ok
19:52:24.0764 0x08f8 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:52:24.0774 0x08f8 tdx - ok
19:52:24.0774 0x08f8 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:52:24.0784 0x08f8 TermDD - ok
19:52:24.0794 0x08f8 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
19:52:24.0804 0x08f8 TermService - ok
19:52:24.0804 0x08f8 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
19:52:24.0814 0x08f8 Themes - ok
19:52:24.0814 0x08f8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
19:52:24.0834 0x08f8 THREADORDER - ok
19:52:24.0844 0x08f8 [ DE604462206F7D8C203F767F425FCA8D, 149FBF6367C45415B939A9B1A7A10DA7A5E19F28CE533BCBE2B20DA4B78F8645 ] tib C:\Windows\system32\DRIVERS\tib.sys
19:52:24.0864 0x08f8 tib - ok
19:52:24.0874 0x08f8 [ 3C29FB9FC9B4C511AD69DC50257FEC75, 4906DADE076FD363C53044C805602EEA4D0EF6E92041C693E1BED2286614B36E ] tib_mounter C:\Windows\system32\DRIVERS\tib_mounter.sys
19:52:24.0874 0x08f8 tib_mounter - ok
19:52:24.0874 0x08f8 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
19:52:24.0894 0x08f8 TrkWks - ok
19:52:24.0904 0x08f8 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:52:24.0914 0x08f8 TrustedInstaller - ok
19:52:24.0914 0x08f8 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:52:24.0924 0x08f8 tssecsrv - ok
19:52:24.0924 0x08f8 [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:52:24.0934 0x08f8 TsUsbFlt - ok
19:52:24.0934 0x08f8 [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
19:52:24.0934 0x08f8 TsUsbGD - ok
19:52:24.0944 0x08f8 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:52:24.0954 0x08f8 tunnel - ok
19:52:24.0954 0x08f8 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:52:24.0964 0x08f8 uagp35 - ok
19:52:24.0964 0x08f8 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:52:24.0984 0x08f8 udfs - ok
19:52:24.0994 0x08f8 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:52:24.0994 0x08f8 UI0Detect - ok
19:52:24.0994 0x08f8 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:52:25.0004 0x08f8 uliagpkx - ok
19:52:25.0004 0x08f8 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:52:25.0014 0x08f8 umbus - ok
19:52:25.0014 0x08f8 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
19:52:25.0014 0x08f8 UmPass - ok
19:52:25.0024 0x08f8 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService C:\Windows\System32\umrdp.dll
19:52:25.0024 0x08f8 UmRdpService - ok
19:52:25.0034 0x08f8 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
19:52:25.0054 0x08f8 upnphost - ok
19:52:25.0054 0x08f8 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
19:52:25.0064 0x08f8 usbaudio - ok
19:52:25.0064 0x08f8 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:52:25.0074 0x08f8 usbccgp - ok
19:52:25.0074 0x08f8 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:52:25.0084 0x08f8 usbcir - ok
19:52:25.0084 0x08f8 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:52:25.0084 0x08f8 usbehci - ok
19:52:25.0094 0x08f8 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:52:25.0104 0x08f8 usbhub - ok
19:52:25.0104 0x08f8 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:52:25.0104 0x08f8 usbohci - ok
19:52:25.0114 0x08f8 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\drivers\usbprint.sys
19:52:25.0114 0x08f8 usbprint - ok
19:52:25.0114 0x08f8 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:52:25.0124 0x08f8 USBSTOR - ok
19:52:25.0124 0x08f8 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:52:25.0134 0x08f8 usbuhci - ok
19:52:25.0134 0x08f8 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
19:52:25.0144 0x08f8 UxSms - ok
19:52:25.0154 0x08f8 [ B6C7729936AAF8E0697F0A7DCA82CED8, 9706E5234364488DD18527AAC82760E5ECB6EC9EBFDD4D04D2708D3C9C576FE6 ] VaultSvc C:\Windows\system32\lsass.exe
19:52:25.0154 0x08f8 VaultSvc - ok
19:52:25.0154 0x08f8 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:52:25.0164 0x08f8 vdrvroot - ok
19:52:25.0174 0x08f8 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
19:52:25.0194 0x08f8 vds - ok
19:52:25.0194 0x08f8 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:52:25.0204 0x08f8 vga - ok
19:52:25.0204 0x08f8 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
19:52:25.0214 0x08f8 VgaSave - ok
19:52:25.0224 0x08f8 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:52:25.0224 0x08f8 vhdmp - ok
19:52:25.0234 0x08f8 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
19:52:25.0234 0x08f8 viaide - ok
19:52:25.0234 0x08f8 [ 35E8A18D1C558D5C2FF2FFED2FD396F6, 5516AC03964DD33CF239AB3FB1D41BAB7454DB35FB38C45907614C3DB8F23391 ] vididr C:\Windows\system32\DRIVERS\vididr.sys
19:52:25.0244 0x08f8 vididr - ok
19:52:25.0244 0x08f8 [ 0DCD5C8F2E0B3650C4A29F6569C074FD, 8FB24D79ADE1541C5DD6241A3395EF2E6575A8376111294CD5C87ECA798EDCFD ] vidsflt C:\Windows\system32\DRIVERS\vidsflt.sys
19:52:25.0254 0x08f8 vidsflt - ok
19:52:25.0254 0x08f8 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus C:\Windows\system32\drivers\vmbus.sys
19:52:25.0264 0x08f8 vmbus - ok
19:52:25.0264 0x08f8 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
19:52:25.0264 0x08f8 VMBusHID - ok
19:52:25.0274 0x08f8 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:52:25.0274 0x08f8 volmgr - ok
19:52:25.0284 0x08f8 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:52:25.0294 0x08f8 volmgrx - ok
19:52:25.0294 0x08f8 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:52:25.0304 0x08f8 volsnap - ok
19:52:25.0304 0x08f8 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:52:25.0314 0x08f8 vsmraid - ok
19:52:25.0334 0x08f8 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
19:52:25.0364 0x08f8 VSS - ok
19:52:25.0374 0x08f8 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
19:52:25.0374 0x08f8 vwifibus - ok
19:52:25.0384 0x08f8 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
19:52:25.0404 0x08f8 W32Time - ok
19:52:25.0404 0x08f8 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:52:25.0414 0x08f8 WacomPen - ok
19:52:25.0414 0x08f8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:52:25.0424 0x08f8 WANARP - ok
19:52:25.0434 0x08f8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:52:25.0444 0x08f8 Wanarpv6 - ok
19:52:25.0464 0x08f8 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
19:52:25.0484 0x08f8 wbengine - ok
19:52:25.0494 0x08f8 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:52:25.0504 0x08f8 WbioSrvc - ok
19:52:25.0514 0x08f8 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:52:25.0524 0x08f8 wcncsvc - ok
19:52:25.0524 0x08f8 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:52:25.0524 0x08f8 WcsPlugInService - ok
19:52:25.0534 0x08f8 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
19:52:25.0534 0x08f8 Wd - ok
19:52:25.0544 0x08f8 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:52:25.0564 0x08f8 Wdf01000 - ok
19:52:25.0564 0x08f8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:52:25.0574 0x08f8 WdiServiceHost - ok
19:52:25.0574 0x08f8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:52:25.0574 0x08f8 WdiSystemHost - ok
19:52:25.0584 0x08f8 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll
19:52:25.0594 0x08f8 WebClient - ok
19:52:25.0594 0x08f8 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:52:25.0614 0x08f8 Wecsvc - ok
19:52:25.0614 0x08f8 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:52:25.0634 0x08f8 wercplsupport - ok
19:52:25.0634 0x08f8 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
19:52:25.0654 0x08f8 WerSvc - ok
19:52:25.0654 0x08f8 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:52:25.0674 0x08f8 WfpLwf - ok
19:52:25.0674 0x08f8 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:52:25.0674 0x08f8 WIMMount - ok
19:52:25.0674 0x08f8 WinDefend - ok
19:52:25.0684 0x08f8 WinHttpAutoProxySvc - ok
19:52:25.0684 0x08f8 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:52:25.0704 0x08f8 Winmgmt - ok
19:52:25.0734 0x08f8 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
19:52:25.0764 0x08f8 WinRM - ok
19:52:25.0764 0x08f8 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:52:25.0774 0x08f8 WinUsb - ok
19:52:25.0784 0x08f8 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
19:52:25.0804 0x08f8 Wlansvc - ok
19:52:25.0804 0x08f8 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
19:52:25.0804 0x08f8 WmiAcpi - ok
19:52:25.0814 0x08f8 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:52:25.0824 0x08f8 wmiApSrv - ok
19:52:25.0824 0x08f8 WMPNetworkSvc - ok
19:52:25.0824 0x08f8 [ 495284CF894336E9512ED7C9ACB3548E, 55D05E94B96F67C50662C4695267CB18994112D086CAED2E493469C7F133F2BE ] WOTUpdater C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe
19:52:25.0824 0x08f8 WOTUpdater - detected UnsignedFile.Multi.Generic ( 1 )
19:52:28.0114 0x08f8 Detect skipped due to KSN trusted
19:52:28.0114 0x08f8 WOTUpdater - ok
19:52:28.0114 0x08f8 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:52:28.0124 0x08f8 WPCSvc - ok
19:52:28.0124 0x08f8 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:52:28.0134 0x08f8 WPDBusEnum - ok
19:52:28.0134 0x08f8 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:52:28.0144 0x08f8 ws2ifsl - ok
19:52:28.0154 0x08f8 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
19:52:28.0164 0x08f8 wscsvc - ok
19:52:28.0164 0x08f8 WSearch - ok
19:52:28.0194 0x08f8 [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll
19:52:28.0224 0x08f8 wuauserv - ok
19:52:28.0234 0x08f8 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:52:28.0234 0x08f8 WudfPf - ok
19:52:28.0244 0x08f8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:52:28.0244 0x08f8 WUDFRd - ok
19:52:28.0254 0x08f8 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:52:28.0254 0x08f8 wudfsvc - ok
19:52:28.0264 0x08f8 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
19:52:28.0264 0x08f8 WwanSvc - ok
19:52:28.0274 0x08f8 ================ Scan global ===============================
19:52:28.0274 0x08f8 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
19:52:28.0274 0x08f8 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
19:52:28.0284 0x08f8 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
19:52:28.0284 0x08f8 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
19:52:28.0294 0x08f8 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
19:52:28.0294 0x08f8 [ Global ] - ok
19:52:28.0294 0x08f8 ================ Scan MBR ==================================
19:52:28.0294 0x08f8 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:52:28.0314 0x08f8 \Device\Harddisk0\DR0 - ok
19:52:28.0314 0x08f8 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
19:52:28.0414 0x08f8 \Device\Harddisk1\DR1 - ok
19:52:28.0904 0x08f8 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk3\DR3
19:52:28.0974 0x08f8 \Device\Harddisk3\DR3 - ok
19:52:28.0974 0x08f8 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk4\DR4
19:52:29.0024 0x08f8 \Device\Harddisk4\DR4 - ok
19:52:29.0024 0x08f8 ================ Scan VBR ==================================
19:52:29.0024 0x08f8 [ 7509BD5C665D7981167815A342391EDF ] \Device\Harddisk0\DR0\Partition1
19:52:29.0024 0x08f8 \Device\Harddisk0\DR0\Partition1 - ok
19:52:29.0034 0x08f8 [ 964019B7D3108E25BD902BE1B6BBD6D8 ] \Device\Harddisk0\DR0\Partition2
19:52:29.0034 0x08f8 \Device\Harddisk0\DR0\Partition2 - ok
19:52:29.0034 0x08f8 [ 81E5354F649DC70BE9DB35A9C5EC164C ] \Device\Harddisk0\DR0\Partition3
19:52:29.0034 0x08f8 \Device\Harddisk0\DR0\Partition3 - ok
19:52:29.0034 0x08f8 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1
19:52:29.0034 0x08f8 \Device\Harddisk1\DR1\Partition1 - ok
19:52:29.0034 0x08f8 [ EBEB15DA00B7FD4E600AA844D4B7E2C4 ] \Device\Harddisk1\DR1\Partition2
19:52:29.0084 0x08f8 \Device\Harddisk1\DR1\Partition2 - ok
19:52:29.0084 0x08f8 [ 289D7F698F56A83313166ECECDA68F4E ] \Device\Harddisk1\DR1\Partition3
19:52:29.0144 0x08f8 \Device\Harddisk1\DR1\Partition3 - ok
19:52:29.0144 0x08f8 [ 23A587C2FE43CCFB0DD168586402CD8D ] \Device\Harddisk1\DR1\Partition4
19:52:29.0214 0x08f8 \Device\Harddisk1\DR1\Partition4 - ok
19:52:29.0214 0x08f8 [ 5E37E7B23B37B8F3E93486ABCCAB13A2 ] \Device\Harddisk1\DR1\Partition5
19:52:29.0254 0x08f8 \Device\Harddisk1\DR1\Partition5 - ok
19:52:29.0254 0x08f8 [ DF17208EB86D24E1F9C7DE26D28A5992 ] \Device\Harddisk1\DR1\Partition6
19:52:29.0294 0x08f8 \Device\Harddisk1\DR1\Partition6 - ok
19:52:29.0294 0x08f8 [ 885ACCA4165577131975A3050F91B3F8 ] \Device\Harddisk3\DR3\Partition1
19:52:29.0364 0x08f8 \Device\Harddisk3\DR3\Partition1 - ok
19:52:29.0364 0x08f8 [ D2384F754EA6FC338EF9075C3BA23026 ] \Device\Harddisk4\DR4\Partition1
19:52:29.0384 0x08f8 \Device\Harddisk4\DR4\Partition1 - ok
19:52:29.0384 0x08f8 ================ Scan generic autorun ======================
19:52:29.0474 0x08f8 [ A433600D55D6C7E165954009FA0149E0, DCEE341BF3AC501E150D64C9BF7FA697939D03480DF7A14BA28ACCB17F638D1C ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
19:52:29.0564 0x08f8 RTHDVCPL - ok
19:52:29.0574 0x08f8 [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\RunDLL32.exe
19:52:29.0584 0x08f8 MBCfg64 - ok
19:52:29.0614 0x08f8 [ 05470C684B62C2F86325D8685E4513CB, EDE70A162AFA104D774AE1D8D3A077F2C12940851EC5BA785242F4032EEA902E ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
19:52:29.0644 0x08f8 NvBackend - ok
19:52:29.0644 0x08f8 [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe
19:52:29.0654 0x08f8 ShadowPlay - ok
19:52:29.0724 0x08f8 [ 920D0E9C8DD3879B45A547C9081E425B, FD7C4443B8D085526221F93581F0CDFCB0A9D886EB7A0FF01054DD4EC9E4EEA5 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
19:52:29.0794 0x08f8 ISCT Tray - ok
19:52:29.0804 0x08f8 [ F9C48B76DA59CF5FF2ED937B62F5ED39, BABC2638F6C92947C79C918DFD3E605B196672B23745226DFA64F68867B7C257 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
19:52:29.0814 0x08f8 AdobeAAMUpdater-1.0 - ok
19:52:29.0824 0x08f8 [ A0B996A6D4F7502EC6A9AADFB87FDA25, 2A79F03DECCC5C11E5B14109F5FBD790A4E005A45C71766E3C85BF14699F034C ] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
19:52:29.0834 0x08f8 Acronis Scheduler2 Service - ok
19:52:29.0834 0x08f8 [ 690EB331346D7ADFDA18E50042DEA4B4, 0C219D7A5FCD4E0252C815373E67F843DBD7356FAE7AB836C451068B51438FE7 ] C:\Program Files\Classic Shell\ClassicStartMenu.exe
19:52:29.0834 0x08f8 Classic Start Menu - detected UnsignedFile.Multi.Generic ( 1 )
19:52:32.0134 0x08f8 Detect skipped due to KSN trusted
19:52:32.0134 0x08f8 Classic Start Menu - ok
19:52:32.0154 0x08f8 [ CF7604160B828C019C287B61CA6FA4BB, 8BA5AF5D47567539A00CF1D38131D31DFD045EC2ACD50B771BFB82D09ACF2D8C ] C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe
19:52:32.0174 0x08f8 Sound Blaster Cinema 2 - detected UnsignedFile.Multi.Generic ( 1 )
19:52:42.0174 0x08f8 Sound Blaster Cinema 2 ( UnsignedFile.Multi.Generic ) - warning
19:52:42.0174 0x08f8 Force sending object to P2P due to detect: C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe
19:52:47.0234 0x08f8 Object send P2P result: true
19:52:49.0564 0x08f8 [ C419DF63E0121D72411285780C2FC6CC, F47F854D327C589D174D3BB5B55D5C05F5ACA73DF52A6BEF47596B9010190291 ] C:\Windows\UpdReg.EXE
19:52:49.0564 0x08f8 UpdReg - detected UnsignedFile.Multi.Generic ( 1 )
19:52:51.0854 0x08f8 Detect skipped due to KSN trusted
19:52:51.0854 0x08f8 UpdReg - ok
19:52:51.0854 0x08f8 [ E4E7B29D050F5480071984FE6543C311, 9A4D8D1702AE74AB4FE4367EAF4AD6500F59D4F25B3CCACE3EF07613B7B5853C ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
19:52:51.0864 0x08f8 USB3MON - ok
19:52:51.0864 0x08f8 [ 5D666FC778E7754CC7103402D814809B, 7E9B205B74440D455155014EE8D6FD0D1C647B016D72A28F16709F50BC005D3F ] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe
19:52:51.0874 0x08f8 ControlCenter4 - detected UnsignedFile.Multi.Generic ( 1 )
19:52:54.0174 0x08f8 Detect skipped due to KSN trusted
19:52:54.0174 0x08f8 ControlCenter4 - ok
19:52:54.0214 0x08f8 [ 63E9C23A386FFFA84B5E03BFF9B628F0, A370962791EFC4B10548AAD31F89A2B288FBD5BDBF5749323C2D98C14DFB8B49 ] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
19:52:54.0254 0x08f8 BrStsMon00 - detected UnsignedFile.Multi.Generic ( 1 )
19:52:56.0544 0x08f8 Detect skipped due to KSN trusted
19:52:56.0544 0x08f8 BrStsMon00 - ok
19:52:56.0554 0x08f8 [ 15D2DB9BFA8E833ED31FAB2BB088FDDA, 6198C0A5DA01DA146A9A054C3C882A1DBF9BA84466EBFDDA1C1062EF36F9B34B ] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
19:52:56.0564 0x08f8 AVP - ok
19:52:56.0654 0x08f8 [ B8434467D90B65E5A2D697C7FF511802, A0F5D234A1CA1384160FB63AF40B169B4649DF7D77534DE1B16E1063EC922A87 ] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
19:52:56.0754 0x08f8 TrueImageMonitor.exe - ok
19:52:56.0764 0x08f8 [ 5FF9A79628D4A0BA3DCD6CF5EC8FD3BF, 9818AAF8F1F1C0CBD8B89352DBAF1ADBEA1F19928543517EB6473C112E95A38D ] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
19:52:56.0784 0x08f8 AcronisTibMounterMonitor - ok
19:52:56.0794 0x08f8 [ B77081F8221968C7DAB794B0BA55C43E, 75C2B7FB65958BC1A02F959ED91AC0A7168DAC4FDC365293BA98C55FC2572735 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
19:52:56.0794 0x08f8 SunJavaUpdateSched - ok
19:52:56.0814 0x08f8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
19:52:56.0834 0x08f8 Sidebar - ok
19:52:56.0834 0x08f8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
19:52:56.0844 0x08f8 mctadmin - ok
19:52:56.0854 0x08f8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
19:52:56.0874 0x08f8 Sidebar - ok
19:52:56.0874 0x08f8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
19:52:56.0884 0x08f8 mctadmin - ok
19:52:56.0884 0x08f8 [ FDB4F88B9B1CD409E1DC06AD68BEA2B8, B031473D2B11C00FB9464D0A518DF30BB01EF7A157AE7994C2FDEF1DF6F0C097 ] C:\Users\Agando\AppData\Roaming\SSync\SSync.exe
19:52:56.0884 0x08f8 SSync - detected UnsignedFile.Multi.Generic ( 1 )
19:52:59.0174 0x08f8 Detect skipped due to KSN trusted
19:52:59.0174 0x08f8 SSync - ok
19:52:59.0254 0x08f8 [ 2E8EAB89DB3F6C0A15C07627B6ED9BCC, D146DC20A37AC34A957B000B106164278C67BCCA2B717A5E317670556FCCE9C0 ] C:\Users\Agando\AppData\Local\Amazon Music\Amazon Music Helper.exe
19:52:59.0324 0x08f8 Amazon Music - ok
19:52:59.0334 0x08f8 Skype - ok
19:52:59.0424 0x08f8 [ 882ED2B0D5E9587A3752DA68BEB86FB9, 79AAA39FBD944BCA9439A6FDC157561194C21DA85DBEF55268D0516BDA066BB3 ] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
19:52:59.0514 0x08f8 SUPERAntiSpyware - ok
19:52:59.0554 0x08f8 [ 7E6B4AD487ED241D8224108E8E86A351, 8246F75DF64BBCC35CDC8DFF2F5157AD9523179344AC0517D42BAC99F2E87E8D ] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe
19:52:59.0564 0x08f8 FlashPlayerUpdate - ok
19:52:59.0564 0x08f8 Waiting for KSN requests completion. In queue: 10
19:53:00.0564 0x08f8 Waiting for KSN requests completion. In queue: 10
19:53:01.0564 0x08f8 Waiting for KSN requests completion. In queue: 10
19:53:02.0564 0x08f8 AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\wmiav.exe ( 13.0.1.4190 ), 0x41000 ( enabled : updated )
19:53:02.0564 0x08f8 FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\wmifw.exe ( 13.0.1.4190 ), 0x41010 ( enabled )
19:53:04.0884 0x08f8 ============================================================
19:53:04.0884 0x08f8 Scan finished
19:53:04.0884 0x08f8 ============================================================
19:53:04.0884 0x04dc Detected object count: 2
19:53:04.0884 0x04dc Actual detected object count: 2
19:53:15.0654 0x04dc Qualcomm Atheros Killer Service V2 ( UnsignedFile.Multi.Generic ) - skipped by user
19:53:15.0654 0x04dc Qualcomm Atheros Killer Service V2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:53:15.0654 0x04dc Sound Blaster Cinema 2 ( UnsignedFile.Multi.Generic ) - skipped by user
19:53:15.0654 0x04dc Sound Blaster Cinema 2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
|
16.05.2015, 13:24
| #6 |
| /// the machine /// TB-Ausbilder | GMER Logfile - bitte um Analyse sieht doch alles gut aus
__________________ --> GMER Logfile - bitte um Analyse |
|
16.05.2015, 13:33
| #7 | |
| | GMER Logfile - bitte um AnalyseZitat:
Freut mich! Zumindest weiß ich jetzt, dass mein Rechner wirklich sauber ist! Ist auch schon mal sehr erfreulich! Vielen Dank! Aber hat dann noch irgendwer eine Idee, woran es liegen könnte, dass ich seit ca. 4 Wochen keinerlei Windows Updates mehr machen kann? Alle Schritte, die ich irgendwo außerhalb von Rootkit-Scans gefunden habe, waren erfolglos  |
|
17.05.2015, 07:35
| #8 |
| /// the machine /// TB-Ausbilder | GMER Logfile - bitte um Analyse Was kommt denn genau an Fehlercode?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.05.2015, 13:25
| #9 | |
| | GMER Logfile - bitte um Analyse Hi! Der Fehler-Code ist 80070308. Alle Schritte, die ich im Web zur Behebung dazu gefunden habe, wie z.B. auch Zitat:
Nur ein Inplace Upgrade steht noch aus, weil ich nur eine Recovery-DVD habe und die dazu wohl nicht geeignet ist, wenn ich es richtig verstanden habe. |
|
18.05.2015, 08:27
| #10 |
| /// the machine /// TB-Ausbilder | GMER Logfile - bitte um Analyse Mit der Recovery geht das nicht, korrekt. Aber ein Windows ISO könntest Du laden, Key hast Du ja von deinem Windows. Hast Du auch schon den Lösungsvorschlag mit dem Löschen des Distribution Ordners gemacht??
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.05.2015, 12:32
| #11 |
| | GMER Logfile - bitte um Analyse Hi Schrauber, ja, C:\Windows\SoftwareDistribution habe ich schon gelöscht und auch einen, dessen Name mir gerade nicht mehr einfällt (Txa oder Txr oder so?), leider auch ohne Erfolg - wie so viele andere Versuche. Aber auf die Idee, mir ein Image zu ziehen und damit ein InPlace Upgrade zu machen, bin ich noch nicht gekommen - vohrer muß ich, glaube ich, SP1 deinstallieren, aber das sollte ja kein Problem sein. Danke für den Tipp! Ich denke, wohl oder übel werde ich es damit mal machen müssen - denn ich will hier ja auch nicht zu viel Eurer bzw. vor allem Deiner Zeit und Nerven beanspruchen um einen "leichteren" Lösungsweg zu finden. Herzlichen Dank nochmals und viele Grüße, Torsten |
|
19.05.2015, 07:10
| #12 |
| /// the machine /// TB-Ausbilder | GMER Logfile - bitte um Analyse Brauchste nit, Image enthält SP1
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu GMER Logfile - bitte um Analyse |
| antispyware, appdata, blaster, code, diverse, driver, folge, foren, gmer, harddisk, ide, internet, kaspersky, logfile, ntoskrnl.exe, problem, security, sound, super, system, system32, tdss, temp, updates, windows, windows updates |
Linear-Darstellung
