Bluescreen und Absturz

Michael888 · 10.08.2015, 17:05

Hallo zusammen, vom Facebookprofil eines Freundes kam die Frage "Erinnerst du dich an dieses Bild?" Dahinter stand folgender link: https://t.co/7T16ovhK7p , den ich angeklickt habe.

Seither läuft mein PC (Win 7, 64 Bit) nur noch im abgesicherten Modus. Bei Normalbetrieb wird der Bildschirm nach ein paar Minuten zwei- bis dreimal hintereinander schwarz, dann erscheint ein Bluescreen und das Ding fährt runter. Beim erneuten Anmelden wird er manchmal rosa/pink. Auch google chrome und Antivir lassen sich nicht mehr öffnen. Nach Systemwiederherstellung besteht das Programm weiterhin. Ein Hilfsprogrämmchen sagt mir: caused by driver "dxgkrnl.sys", full path "C:\Windows\Minidump\081015-22900-01.dmp".

Ich habe im abgesicherten Modus jetzt schon vollständige Systemscans mit den aktuellen Versionen von Avira Antivir, Malewarebytes und F-Prot durchgeführt. Keines der drei Programme findet einen Virus.

Hat von euch jemand eine Idee?

schrauber · 10.08.2015, 18:18

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Michael888 · 11.08.2015, 09:25

Hallo schrauber, danke für deine Antwort! Hier die FRST.txt und die Addition.txt:

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015
durchgeführt von Harry (Administrator) auf HARRY-PC (11-08-2015 08:28:35)
Gestartet von C:\Users\Harry\Desktop
Geladene Profile: Harry (Verfügbare Profile: Harry & Admin & Bianca)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Safe Mode (with Networking)
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(FRISK Software International) C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(FRISK Software International) C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPWin.exe
(Mozilla Corporation) E:\Programme\Browser\Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-29] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [F-PROT Antivirus Tray application] => C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe [1674016 2010-11-03] (FRISK Software International)
HKU\S-1-5-21-2258534620-706841585-1673714678-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
GroupPolicyScripts: Gruppenrichtline erkannt <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKU\S-1-5-21-2258534620-706841585-1673714678-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2258534620-706841585-1673714678-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKLM -> DefaultScope {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2258534620-706841585-1673714678-1000 -> DefaultScope {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2258534620-706841585-1673714678-1000 -> {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll [2014-09-11] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll [2014-09-11] (Oracle Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> E:\Programme\Office\Microsoft Office 2003\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1A3BD39A-E9C9-47F1-B6C0-EC902BCEB572}: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default
FF DefaultSearchEngine: SuchMaschine
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: SuchMaschine
FF Homepage: hxxp://www.google.de
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll [2014-09-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll [2014-09-11] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2014-05-04] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2014-05-04] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> E:\PROGRA~1\Office\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> E:\PROGRA~1\Office\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-05-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-05-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> E:\Programme\Player\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> E:\Programme\Player\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\google-images.xml [2015-08-10]
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\google-maps.xml [2015-08-10]
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\search_engine.xml [2014-04-06]
FF Extension: Cliqz Beta - C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\Extensions\cliqz@cliqz.com [2015-08-10]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-01-05]
FF HKU\S-1-5-21-2258534620-706841585-1673714678-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\extensions\cliqz@cliqz.com
StartMenuInternet: FIREFOX.EXE - E:\Programme\Browser\Firefox\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-26]
CHR Extension: (Google Docs) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-08]
CHR Extension: (Google Drive) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-08]
CHR Extension: (YouTube) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-08]
CHR Extension: (Google Search) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-08]
CHR Extension: (Google Sheets) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-26]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-22]
CHR Extension: (Kein Name) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-08]
CHR Extension: (Gmail) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG)
S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FPAVServer; C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe [84136 2011-10-06] (FRISK Software International)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2014-05-04] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-29] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-29] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-26] (Avira Operations GmbH & Co. KG)
S1 FPAV_RTP; C:\Windows\System32\DRIVERS\FPAV_RTP.sys [842144 2011-11-11] (FRISK Software International)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-10] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2014-05-04] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-11 08:28 - 2015-08-11 08:28 - 00013915 _____ C:\Users\Harry\Desktop\FRST.txt
2015-08-11 08:27 - 2015-08-11 08:28 - 00000000 ____D C:\FRST
2015-08-11 08:26 - 2015-08-11 08:25 - 02171392 _____ (Farbar) C:\Users\Harry\Desktop\FRST64.exe
2015-08-11 08:25 - 2015-08-11 08:25 - 02171392 _____ (Farbar) C:\Users\Harry\Downloads\FRST64.exe
2015-08-10 15:50 - 2015-08-10 15:50 - 00000135 _____ C:\Windows\SysWOW64\debug.log
2015-08-10 14:41 - 2015-08-10 14:41 - 00594816 _____ C:\Windows\Minidump\081015-22900-01.dmp
2015-08-10 14:33 - 2015-08-10 14:33 - 00823800 _____ C:\Windows\Minidump\081015-25849-01.dmp
2015-08-10 13:20 - 2015-08-10 13:21 - 00000000 ____D C:\Users\Harry\AppData\Roaming\FRISK Software
2015-08-10 13:03 - 2015-08-10 13:03 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-PROT Antivirus for Windows.lnk
2015-08-10 13:03 - 2015-08-10 13:03 - 00002175 _____ C:\Users\Public\Desktop\F-PROT Antivirus for Windows.lnk
2015-08-10 13:03 - 2015-08-10 13:03 - 00000000 ____D C:\ProgramData\FRISK Software
2015-08-10 13:03 - 2015-08-10 13:03 - 00000000 ____D C:\Program Files (x86)\FRISK Software
2015-08-10 13:03 - 2011-11-11 10:24 - 00842144 _____ (FRISK Software International) C:\Windows\system32\Drivers\FPAV_RTP.sys
2015-08-10 12:58 - 2015-08-10 13:06 - 00032531 _____ C:\Windows\WindowsUpdate.log
2015-08-10 12:56 - 2015-08-10 15:30 - 00000840 _____ C:\Windows\setupact.log
2015-08-10 12:56 - 2015-08-10 12:56 - 00000000 _____ C:\Windows\setuperr.log
2015-08-10 12:55 - 2015-08-10 12:55 - 00003776 _____ C:\Windows\PFRO.log
2015-08-10 12:50 - 2015-08-10 12:54 - 36979200 _____ C:\Users\Harry\Downloads\fpav-windows-x64-hc-en.msi
2015-08-10 12:37 - 2015-08-10 12:54 - 00000000 ____D C:\Users\Harry\Downloads\bluescreenview_v1.55
2015-08-10 12:33 - 2015-08-10 12:36 - 00067310 _____ C:\Users\Harry\Downloads\bluescreenview_v1.55.zip
2015-08-10 12:33 - 2015-08-10 12:34 - 00000000 ____D C:\Users\Harry\AppData\Roaming\Cliqz
2015-08-10 12:33 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-08-10 12:33 - 2011-03-25 20:42 - 00338432 _____ C:\Windows\SysWOW64\sqlite36_engine.dll
2015-08-10 12:32 - 2015-08-10 12:32 - 01199392 _____ C:\Users\Harry\Downloads\BlueScreenView - CHIP-Installer(1).exe
2015-08-10 12:30 - 2015-08-10 12:30 - 01199392 _____ C:\Users\Harry\Downloads\BlueScreenView - CHIP-Installer.exe
2015-08-10 11:13 - 2015-08-10 11:13 - 00001479 _____ C:\Users\Harry\AppData\Local\recently-used.xbel
2015-08-10 09:37 - 2015-08-10 09:37 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Thunderbird
2015-08-10 09:37 - 2015-08-10 09:37 - 00000000 ____D C:\Users\Admin\AppData\Local\Thunderbird
2015-08-10 09:26 - 2015-08-10 09:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Macromedia
2015-08-10 09:26 - 2015-08-10 09:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Macromedia
2015-08-10 09:22 - 2015-08-10 15:31 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-10 09:21 - 2015-08-10 09:21 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Admin\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-10 09:21 - 2015-08-10 09:21 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-10 09:21 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-10 09:21 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-10 09:21 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-10 08:59 - 2015-08-10 08:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mozilla
2015-08-10 08:59 - 2015-08-10 08:59 - 00000000 ____D C:\Users\Admin\AppData\Local\Mozilla
2015-08-10 08:57 - 2015-08-10 08:57 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Lexware
2015-08-10 08:57 - 2015-08-10 08:57 - 00000000 ____D C:\Users\Admin\AppData\Local\Lexware
2015-08-07 17:01 - 2015-08-07 17:11 - 00000000 ____D C:\Users\Harry\Documents\LVM
2015-08-04 17:46 - 2015-08-04 17:46 - 00000000 ____D C:\Users\Harry\AppData\Local\calibre-cache
2015-08-04 17:42 - 2015-08-10 08:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-08-04 17:42 - 2015-08-10 08:54 - 00000000 ____D C:\Program Files (x86)\Calibre2
2015-08-04 17:42 - 2015-08-04 17:54 - 00000000 ____D C:\Users\Harry\AppData\Roaming\calibre
2015-08-04 17:28 - 2015-08-04 17:29 - 64798720 _____ C:\Users\Harry\Downloads\calibre-2.33.0.msi
2015-07-28 19:44 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 19:44 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 19:44 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 19:44 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-23 12:28 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-23 12:28 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-23 12:28 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-20 13:04 - 2015-07-20 13:04 - 09398704 _____ C:\Users\Harry\Bilder 014.xcf
2015-07-20 12:43 - 2015-07-20 12:43 - 01259808 _____ C:\Users\Harry\Downloads\SmartDeblur letzte Freeware Version - CHIP-Installer.exe
2015-07-15 00:16 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 00:16 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 00:16 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 00:16 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 00:16 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 00:16 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 00:16 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 00:16 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 00:16 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 00:16 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 00:16 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 00:16 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 00:16 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 00:16 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 00:16 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 00:16 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 00:16 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 00:16 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 00:16 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 00:16 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 00:16 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 00:16 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 00:16 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 00:16 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 00:16 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 00:16 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 00:16 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 00:16 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 00:16 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 00:16 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 00:16 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 00:16 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 00:16 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 00:16 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 00:15 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 00:15 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 00:15 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 00:15 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 00:15 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 00:15 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 00:15 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 00:15 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 00:15 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 00:15 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 00:15 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 00:15 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 00:15 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 00:15 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 00:15 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 00:15 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 00:15 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 00:15 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 00:15 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 00:15 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 00:15 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 00:15 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 00:15 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 00:15 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 00:15 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 00:15 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 00:15 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 00:15 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 00:15 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 00:15 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 00:15 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 00:15 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 00:15 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 00:15 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 00:15 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 00:15 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 00:15 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 00:15 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 00:15 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 00:15 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 00:15 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 00:15 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 00:15 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 00:15 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 00:15 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 00:15 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 00:15 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 00:15 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 00:15 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 00:15 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 00:15 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 00:15 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 00:15 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 00:15 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 00:15 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 00:15 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 00:15 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 00:15 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 00:15 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 00:15 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 00:15 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 00:15 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 00:15 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 00:15 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 00:15 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 00:15 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 00:15 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 00:15 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 00:15 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 00:15 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 00:15 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 00:15 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 00:15 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 00:15 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 00:15 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 00:15 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 00:15 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 00:15 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 00:15 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 00:15 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 00:15 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 00:15 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 00:15 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-10 15:50 - 2014-04-06 12:52 - 00000000 ____D C:\Users\Harry\AppData\Roaming\Adobe
2015-08-10 15:33 - 2009-07-14 06:45 - 00038128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-10 15:33 - 2009-07-14 06:45 - 00038128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-10 15:31 - 2014-04-08 14:30 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-10 15:30 - 2014-04-04 11:07 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-10 15:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-10 15:25 - 2014-04-08 14:30 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-10 15:06 - 2014-04-20 18:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-10 14:43 - 2014-04-04 11:13 - 00021864 _____ C:\Users\Harry\Sti_Trace.log
2015-08-10 14:41 - 2015-04-23 07:36 - 00000000 ____D C:\Windows\Minidump
2015-08-10 13:34 - 2014-04-08 01:25 - 00000000 ____D C:\Users\Harry\Documents\Gesundheit
2015-08-10 13:29 - 2014-04-08 02:07 - 00000000 ____D C:\Users\Harry\Desktop\Desktop Windows XP
2015-08-10 13:03 - 2014-04-04 10:45 - 00000000 ____D C:\Users\Harry
2015-08-10 12:55 - 2014-04-05 17:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-10 11:13 - 2014-05-04 10:09 - 00000000 ____D C:\Users\Harry\.gimp-2.8
2015-08-10 11:06 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-08-10 08:57 - 2014-07-03 08:39 - 00000000 ____D C:\Users\Admin\AppData\Roaming\.oit
2015-08-10 08:56 - 2014-07-03 08:38 - 00002247 _____ C:\Users\Admin\Desktop\Google Chrome.lnk
2015-08-10 08:54 - 2015-04-13 22:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-10 08:54 - 2014-07-03 08:38 - 00000000 ____D C:\Users\Admin
2015-08-10 08:54 - 2014-06-29 20:06 - 00000000 ____D C:\Users\Bianca
2015-08-10 08:54 - 2014-04-08 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-10 08:54 - 2014-04-05 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-08-10 08:54 - 2014-04-05 18:42 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-08-10 08:53 - 2014-05-04 23:19 - 00000000 __RHD C:\MSOCache
2015-08-10 01:14 - 2014-04-06 13:02 - 00000000 ____D C:\Users\Harry\AppData\Roaming\.oit
2015-08-10 00:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2015-08-03 10:54 - 2014-04-04 20:35 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-08-03 10:54 - 2014-04-04 20:35 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-08-03 10:54 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-02 13:20 - 2015-04-21 09:40 - 00000000 ____D C:\Users\Harry\Documents\LEONIDAS
2015-07-31 12:01 - 2014-04-08 01:26 - 00000000 ____D C:\Users\Harry\Documents\Karten
2015-07-29 23:34 - 2014-04-05 18:49 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-29 23:34 - 2014-04-05 18:49 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-29 03:01 - 2014-05-09 12:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-25 03:18 - 2009-07-14 06:45 - 00408528 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 13:05 - 2014-05-04 10:20 - 00000000 ____D C:\Users\Harry\AppData\Local\gtk-2.0
2015-07-16 22:20 - 2014-04-08 14:30 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 22:20 - 2014-04-08 14:30 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 19:07 - 2014-04-05 18:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-15 19:06 - 2015-01-05 21:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-15 18:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-15 18:53 - 2014-04-08 14:37 - 00002247 _____ C:\Users\Harry\Desktop\Google chrome.lnk
2015-07-15 04:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-15 03:36 - 2015-04-13 22:29 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-15 03:36 - 2014-12-14 15:11 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 03:16 - 2014-05-04 19:54 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 03:10 - 2014-04-07 16:05 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 01:06 - 2014-04-20 18:43 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 01:06 - 2014-04-20 18:43 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-15 01:06 - 2014-04-20 18:43 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-14 22:00 - 2014-04-08 17:13 - 00000000 ____D C:\Users\Harry\AppData\Roaming\vlc

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-10 11:13 - 2015-08-10 11:13 - 0001479 _____ () C:\Users\Harry\AppData\Local\recently-used.xbel

Einige Dateien in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Bianca\AppData\Local\Temp\avgnt.exe
C:\Users\Harry\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-02 08:44

==================== Ende von log ============================

--- --- ---

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-08-2015
durchgeführt von Harry (2015-08-11 08:29:19)
Gestartet von C:\Users\Harry\Desktop
Start-Modus: Safe Mode (with Networking)
==========================================================


==================== Konten: =============================

Admin (S-1-5-21-2258534620-706841585-1673714678-1003 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-2258534620-706841585-1673714678-500 - Administrator - Disabled)
Bianca (S-1-5-21-2258534620-706841585-1673714678-1004 - Limited - Enabled) => C:\Users\Bianca
Gast (S-1-5-21-2258534620-706841585-1673714678-501 - Limited - Disabled)
Harry (S-1-5-21-2258534620-706841585-1673714678-1000 - Administrator - Enabled) => C:\Users\Harry
HomeGroupUser$ (S-1-5-21-2258534620-706841585-1673714678-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: F-PROT Antivirus for Windows (Disabled - Up to date) {31B7FFC6-2716-5A4E-528D-32786E690ED2}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AHNENWIN 5.1 (HKLM-x32\...\{C253AE75-8ACF-4BFF-B221-CE5ABD418491}) (Version: 5.1 - Heribert Reitmeier)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.1 - BlueJ Team)
Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.22 - CLIQZ.com)
Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version:  - )
Dynamic Photo Manager (HKLM-x32\...\{44E6DE02-8C0D-4A23-8675-2BB1F78B53BC}) (Version: 0.8.10 - Casio)
Dynamic Photo Manager (x32 Version: 0.8.10 - Casio) Hidden
Epson Benutzerhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Useg) (Version:  - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version:  - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{682A3328-9621-4BAD-91FA-873A076610C4}) (Version: 1.21.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Netg) (Version:  - )
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
F-PROT Antivirus for Windows x64 (HKLM-x32\...\{D0C17D81-D40D-4C23-B8FA-95E817D0B7BE}) (Version: 6.0.9.6 - FRISK Software)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)
Java SE Development Kit 8 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180000}) (Version: 8.0.0 - Oracle Corporation)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
Java-Editor 12.13, 2014.03.29 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version:  - Gerhard Röhner)
Lexware Info Service (HKLM-x32\...\{85BF9FDB-BD5B-407C-9CAE-3542E5164783}) (Version: 4.00.00.0075 - Haufe-Lexware GmbH & Co.KG)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Standard 2010 (HKLM-x32\...\Office14.STANDARD) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MindMan Personal (HKLM-x32\...\MindMan Personal) (Version:  - )
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 de)) (Version: 31.3.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
QuickSteuer 2014 (HKLM-x32\...\{52DD1288-FA17-4062-8280-532C89A7E2F2}) (Version: 20.06.00.0001 - Haufe-Lexware GmbH & Co.KG)
QuickTime Alternative 3.2.2 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 3.2.2 - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0012-0000-0000-0000000FF1CE}_Office14.STANDARD_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Urlaubsfoto Alleskönner (HKLM-x32\...\{A38A23F8-B908-4450-AEB9-E66769814FA3}) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

04-08-2015 17:41:36 Installed calibre
10-08-2015 13:02:14 Installed F-PROT Antivirus for Windows x64

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2E315E67-190E-495A-A618-B5585F2DF3A8} - System32\Tasks\{0A3D037D-BCA1-4E8A-B708-6410897D25DF} => C:\Windows\twain_32\escndv\escndv.exe [2009-01-27] (SEIKO EPSON CORP.)
Task: {4C61673A-5EA2-4CCE-A8E9-5F8D9752291F} - System32\Tasks\CCleanerSkipUAC => E:\Programme\Tools\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {52F695AE-80F8-4EC8-A362-ABD794B0FCFC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {71C734A1-E383-4E3D-853E-DA0270179172} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8149E66E-76CE-490C-A5E0-C90FA77DB71B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-08] (Google Inc.)
Task: {DD32B002-0429-43EF-BC15-7ED547DE3F23} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-08] (Google Inc.)
Task: {DF3C2CF1-D9E8-4D29-9414-ECDA39F02F50} - System32\Tasks\{48995FA7-84D4-4B08-9844-A59B81C171E7} => C:\Windows\twain_32\escndv\escndv.exe [2009-01-27] (SEIKO EPSON CORP.)
Task: {EC7A8B4A-00BF-4572-935F-85447183CF82} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-07-07 22:44 - 2015-08-10 12:34 - 03715184 _____ () E:\Programme\Browser\Firefox\mozjs.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FPAVServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\FPAVServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2258534620-706841585-1673714678-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Harry\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: LexwareInfoService => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe /autostart
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: PMSpeed => E:\Programme\Tools\Drucker_Scanner\PMSpeed.EXE
MSCONFIG\startupreg: Scan Buttons => E:\Programme\Tools\Drucker_Scanner\PMSB.EXE
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{26EA7253-674D-4ED0-9B70-C72C9041FFC5}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{1CD34B8D-D021-46B3-93BB-2582A604DC73}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{8E6DF0EA-B558-4E2B-A06B-780316A0B2C6}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{D7895FAA-6048-41A3-8D43-E5D5C42F4F0B}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{17D92158-B1C5-44C8-AB54-C98A6483DCD6}] => (Allow) E:\Programme\Tools\Drucker_Scanner\LicenseCheck.exe
FirewallRules: [{18DD0368-40A0-4208-A9A4-224974B833FD}] => (Allow) E:\Programme\Tools\Drucker_Scanner\LicenseCheck.exe
FirewallRules: [{5B2E34F2-B319-4F05-ACB9-F90315F6B921}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{04FBB843-0D74-4D5C-B21C-5BF0134878A4}] => (Allow) E:\Programme\Office\Microsoft Office 2003\Office14\ONENOTE.EXE
FirewallRules: [{B69F9D33-0D4A-4451-9F81-0505B3B8737D}] => (Allow) E:\Programme\Office\Microsoft Office 2003\Office14\ONENOTE.EXE
FirewallRules: [{21A3EA34-E890-425A-8ADE-7C0F5A0F2765}] => (Allow) E:\Programme\Office\Microsoft Office 2003\Office14\outlook.exe
FirewallRules: [{2AE0FD31-84B4-46A9-9D01-625174FEA46F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BD99B74B-711D-41B5-982D-84D98BBC8990}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F1950FF-B9CD-4444-B8F6-70DD18E824E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{6BD17A5F-B832-43C8-9086-973516F00589}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{F417A3AC-975C-498C-BC18-8703E520F78D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D5255996-512B-4E24-8E38-EDFD22B842F9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{93061A8D-800D-4904-BC7E-DC97778FC296}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/11/2015 08:29:26 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:26 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:21 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:21 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:16 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:16 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:11 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:11 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:06 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.

Error: (08/11/2015 08:29:06 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: Die Treiberanforderung start schlug fehl.


Systemfehler:
=============
Error: (08/11/2015 08:18:30 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084NVSvc{DCAB0989-1301-4319-BE5F-ADE89F88581C}

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 06:05:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 03:36:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 03:36:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/10/2015 03:36:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office:
=========================
Error: (08/11/2015 08:29:26 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:26 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:21 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:21 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:16 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:16 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:11 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:11 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:06 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start

Error: (08/11/2015 08:29:06 AM) (Source: FPAVServer.exe) (EventID: 4) (User: )
Description: start


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Prozentuale Nutzung des RAM: 24%
Installierter physikalischer RAM: 6143.05 MB
Verfügbarer physikalischer RAM: 4649.24 MB
Summe virtueller Speicher: 12284.32 MB
Verfügbarer virtueller Speicher: 11074.04 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:78.03 GB) (Free:15 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Daten) (Fixed) (Total:175.78 GB) (Free:70.59 GB) NTFS
Drive e: (Programme, Spiele) (Fixed) (Total:211.85 GB) (Free:207.91 GB) NTFS
Drive f: (kindle) (CDROM) (Total:0.12 GB) (Free:0 GB) UDF
Drive g: (Harry 3TB) (Fixed) (Total:2794.39 GB) (Free:800.39 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 23DF23DF)
Partition 1: (Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=175.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=211.9 GB) - (Type=07 NTFS)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.

==================== Ende von log ============================

schrauber · 12.08.2015, 08:41

Lade Dir bitte Bluescreenview und installiere es:
BlueScreenView - Download - Filepony

Öffnen und den aktuellsten Dump analysieren lassen (macht das Tool automatisch).
Output hier posten.

Michael888 · 12.08.2015, 23:05

Hi schrauber, hier der output des aktuellsten Dump (seitdem läuft der Rechner im abgesicherten Modus). Der vorletzte Dump war 8 Minuten vorher. Die Parameter im output sind dieselben:

==================================================
Dump File : 081015-22900-01.dmp
Crash Time : 10.08.2015 14:39:31
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`06072010
Parameter 2 : fffff880`0f183530
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`0000000d
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5d134
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+748c0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\081015-22900-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 594.816
Dump File Time : 10.08.2015 14:41:10
==================================================

schrauber · 13.08.2015, 14:47

hi,

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Michael888 · 14.08.2015, 13:43

Hi schrauber,

die mbar.exe liefert mir "Scan finished. No Maleware found". Das zugehörige logfile habe ich hier beigefügt. Auch die TDSSKiller.exe liefert "No threads found". Auch hier findest du das zugehörige logfile unten.

logfile mbar.exe:

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.08.14.03
  rootkit: v2015.08.06.01

Windows 7 Service Pack 1 x64 NTFS (Safe Mode/Networking)
Internet Explorer 11.0.9600.17914
Harry :: HARRY-PC [administrator]

14.08.2015 13:44:01
mbar-log-2015-08-14 (13-44-01).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 437063
Time elapsed: 10 minute(s), 5 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

logfile TDSSKiller.exe:

Code:

ATTFilter

14:28:29.0393 0x0bf0  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
14:28:36.0366 0x0bf0  ============================================================
14:28:36.0366 0x0bf0  Current date / time: 2015/08/14 14:28:36.0366
14:28:36.0366 0x0bf0  SystemInfo:
14:28:36.0366 0x0bf0  
14:28:36.0366 0x0bf0  OS Version: 6.1.7601 ServicePack: 1.0
14:28:36.0366 0x0bf0  Product type: Workstation
14:28:36.0366 0x0bf0  ComputerName: HARRY-PC
14:28:36.0366 0x0bf0  UserName: Harry
14:28:36.0366 0x0bf0  Windows directory: C:\Windows
14:28:36.0366 0x0bf0  System windows directory: C:\Windows
14:28:36.0366 0x0bf0  Running under WOW64
14:28:36.0366 0x0bf0  Processor architecture: Intel x64
14:28:36.0366 0x0bf0  Number of processors: 4
14:28:36.0366 0x0bf0  Page size: 0x1000
14:28:36.0366 0x0bf0  Boot type: Safe boot with network
14:28:36.0366 0x0bf0  ============================================================
14:28:37.0543 0x0bf0  KLMD registered as C:\Windows\system32\drivers\24713068.sys
14:28:37.0773 0x0bf0  System UUID: {F7691959-60B9-7165-A80E-DBEAE681D215}
14:28:38.0219 0x0bf0  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0x7E2CB, SectorsPerTrack: 0xE, TracksPerCylinder: 0x87, Type 'K0', Flags 0x00000040
14:28:38.0233 0x0bf0  Drive \Device\Harddisk2\DR2 - Size: 0x2BAA1476000 ( 2794.52 Gb ), SectorSize: 0x1000, Cylinders: 0xB220, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:28:45.0295 0x0bf0  ============================================================
14:28:45.0295 0x0bf0  \Device\Harddisk0\DR0:
14:28:45.0296 0x0bf0  MBR partitions:
14:28:45.0296 0x0bf0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x9C0E000
14:28:45.0296 0x0bf0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9C40800, BlocksNum 0x15F90000
14:28:45.0296 0x0bf0  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1FBD0800, BlocksNum 0x1A7B5000
14:28:45.0296 0x0bf0  \Device\Harddisk2\DR2:
14:28:45.0296 0x0bf0  GPT partitions:
14:28:45.0298 0x0bf0  \Device\Harddisk2\DR2\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {867266B2-2CE3-4010-A0EB-7F7D3E403096}, Name: Microsoft reserved partition, StartLBA 0x6, BlocksNum 0x8000
14:28:45.0298 0x0bf0  \Device\Harddisk2\DR2\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {9AB12B58-4503-495D-9CB8-5C8073C26C93}, Name: Basic data partition, StartLBA 0x8100, BlocksNum 0x2BA99300
14:28:45.0298 0x0bf0  MBR partitions:
14:28:45.0298 0x0bf0  ============================================================
14:28:45.0320 0x0bf0  C: <-> \Device\Harddisk0\DR0\Partition1
14:28:45.0354 0x0bf0  D: <-> \Device\Harddisk0\DR0\Partition2
14:28:45.0382 0x0bf0  E: <-> \Device\Harddisk0\DR0\Partition3
14:28:45.0419 0x0bf0  G: <-> \Device\Harddisk2\DR2\Partition2
14:28:45.0419 0x0bf0  ============================================================
14:28:45.0419 0x0bf0  Initialize success
14:28:45.0419 0x0bf0  ============================================================
14:29:58.0214 0x0b50  ============================================================
14:29:58.0214 0x0b50  Scan started
14:29:58.0214 0x0b50  Mode: Manual; SigCheck; TDLFS; 
14:29:58.0214 0x0b50  ============================================================
14:29:58.0214 0x0b50  KSN ping started
14:30:00.0854 0x0b50  KSN ping finished: true
14:30:02.0904 0x0b50  ================ Scan system memory ========================
14:30:02.0904 0x0b50  System memory - ok
14:30:02.0905 0x0b50  ================ Scan services =============================
14:30:03.0030 0x0b50  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
14:30:03.0145 0x0b50  1394ohci - ok
14:30:03.0187 0x0b50  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:30:03.0264 0x0b50  ACPI - ok
14:30:03.0281 0x0b50  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
14:30:03.0313 0x0b50  AcpiPmi - ok
14:30:03.0370 0x0b50  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:30:03.0382 0x0b50  AdobeARMservice - ok
14:30:03.0480 0x0b50  [ 9B3355B29942AF67F014EA90CE1EA960, FBB155F72984045BCD99CC2059B9EDAABD3A52104C3864A290D8A355991F94D3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:30:03.0497 0x0b50  AdobeFlashPlayerUpdateSvc - ok
14:30:03.0523 0x0b50  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
14:30:03.0552 0x0b50  adp94xx - ok
14:30:03.0574 0x0b50  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
14:30:03.0602 0x0b50  adpahci - ok
14:30:03.0617 0x0b50  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
14:30:03.0633 0x0b50  adpu320 - ok
14:30:03.0661 0x0b50  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
14:30:03.0685 0x0b50  AeLookupSvc - ok
14:30:03.0733 0x0b50  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
14:30:03.0789 0x0b50  AFD - ok
14:30:03.0813 0x0b50  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
14:30:03.0826 0x0b50  agp440 - ok
14:30:03.0844 0x0b50  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
14:30:03.0877 0x0b50  ALG - ok
14:30:03.0902 0x0b50  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:30:03.0913 0x0b50  aliide - ok
14:30:03.0929 0x0b50  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
14:30:03.0940 0x0b50  amdide - ok
14:30:03.0956 0x0b50  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
14:30:03.0984 0x0b50  AmdK8 - ok
14:30:03.0999 0x0b50  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
14:30:04.0025 0x0b50  AmdPPM - ok
14:30:04.0069 0x0b50  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
14:30:04.0083 0x0b50  amdsata - ok
14:30:04.0106 0x0b50  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
14:30:04.0123 0x0b50  amdsbs - ok
14:30:04.0138 0x0b50  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
14:30:04.0149 0x0b50  amdxata - ok
14:30:04.0238 0x0b50  [ 9FE1AC875A7AD7B7FF28FEC8B754968D, EEE04D4073E49332C85028B62E8A035EAA2284526A3F3820133492C8F8CBA3D5 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
14:30:04.0297 0x0b50  AntiVirMailService - ok
14:30:04.0319 0x0b50  [ 58FB167B287CAA05F7DD5AA1018FD52C, D9EB68E1C2B99E5F59A0DA4C9FA46E15C6E470F7445E232C03C82790F546A6AA ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
14:30:04.0354 0x0b50  AntiVirSchedulerService - ok
14:30:04.0375 0x0b50  [ 58FB167B287CAA05F7DD5AA1018FD52C, D9EB68E1C2B99E5F59A0DA4C9FA46E15C6E470F7445E232C03C82790F546A6AA ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
14:30:04.0402 0x0b50  AntiVirService - ok
14:30:04.0443 0x0b50  [ F857D22CEC14854D310C5596C8CE6006, 67448C506D3171D327A6CE3952E41BDC65587FEB45F510160A1DAFCA9491711E ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
14:30:04.0500 0x0b50  AntiVirWebService - ok
14:30:04.0540 0x0b50  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys
14:30:04.0574 0x0b50  AppID - ok
14:30:04.0587 0x0b50  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:30:04.0612 0x0b50  AppIDSvc - ok
14:30:04.0641 0x0b50  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll
14:30:04.0656 0x0b50  Appinfo - ok
14:30:04.0687 0x0b50  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
14:30:04.0705 0x0b50  AppMgmt - ok
14:30:04.0718 0x0b50  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
14:30:04.0732 0x0b50  arc - ok
14:30:04.0745 0x0b50  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
14:30:04.0759 0x0b50  arcsas - ok
14:30:04.0806 0x0b50  [ 68726474C69B738EAC3A62E06B33ADDC, C470C9DB58840149CE002F3E6003382ECF740884A683BAE8F9D10831BE218FA2 ] AsIO            C:\Windows\syswow64\drivers\AsIO.sys
14:30:04.0815 0x0b50  AsIO - ok
14:30:04.0890 0x0b50  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:30:04.0916 0x0b50  aspnet_state - ok
14:30:04.0939 0x0b50  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:30:04.0981 0x0b50  AsyncMac - ok
14:30:05.0002 0x0b50  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
14:30:05.0012 0x0b50  atapi - ok
14:30:05.0060 0x0b50  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:30:05.0108 0x0b50  AudioEndpointBuilder - ok
14:30:05.0149 0x0b50  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
14:30:05.0174 0x0b50  AudioSrv - ok
14:30:05.0220 0x0b50  [ 24843902369DC82B4691F816F08F2938, 330E22C6007B10FE9C232BBCA2F388ADA17DEDBAA11BEC2A70377A4466DFB6FA ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
14:30:05.0248 0x0b50  avgntflt - ok
14:30:05.0285 0x0b50  [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
14:30:05.0304 0x0b50  avipbb - ok
14:30:05.0365 0x0b50  [ 17348FE28C0A0AB4A6CB86D177770335, 633FEDA61F62504534B47090EA142F73C5D80C0D52A22A6C81DF64CD3EAFDAA8 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
14:30:05.0382 0x0b50  Avira.ServiceHost - ok
14:30:05.0388 0x0b50  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
14:30:05.0398 0x0b50  avkmgr - ok
14:30:05.0443 0x0b50  [ 13253E5E3B6BDF945B63B336A8C9489B, 671C716E43F89D4BDDAA2BE045CDEBBB569C85BC2BA334E1F550187B79A7740D ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
14:30:05.0454 0x0b50  avnetflt - ok
14:30:05.0478 0x0b50  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:30:05.0506 0x0b50  AxInstSV - ok
14:30:05.0541 0x0b50  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
14:30:05.0584 0x0b50  b06bdrv - ok
14:30:05.0624 0x0b50  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
14:30:05.0662 0x0b50  b57nd60a - ok
14:30:05.0679 0x0b50  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
14:30:05.0693 0x0b50  BDESVC - ok
14:30:05.0704 0x0b50  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:30:05.0745 0x0b50  Beep - ok
14:30:05.0792 0x0b50  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
14:30:05.0839 0x0b50  BFE - ok
14:30:05.0880 0x0b50  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
14:30:05.0967 0x0b50  BITS - ok
14:30:05.0990 0x0b50  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:30:06.0004 0x0b50  blbdrive - ok
14:30:06.0031 0x0b50  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:30:06.0045 0x0b50  bowser - ok
14:30:06.0057 0x0b50  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
14:30:06.0083 0x0b50  BrFiltLo - ok
14:30:06.0097 0x0b50  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
14:30:06.0112 0x0b50  BrFiltUp - ok
14:30:06.0140 0x0b50  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
14:30:06.0183 0x0b50  Browser - ok
14:30:06.0201 0x0b50  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
14:30:06.0222 0x0b50  Brserid - ok
14:30:06.0234 0x0b50  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:30:06.0249 0x0b50  BrSerWdm - ok
14:30:06.0261 0x0b50  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:30:06.0275 0x0b50  BrUsbMdm - ok
14:30:06.0288 0x0b50  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:30:06.0307 0x0b50  BrUsbSer - ok
14:30:06.0324 0x0b50  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
14:30:06.0340 0x0b50  BTHMODEM - ok
14:30:06.0358 0x0b50  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
14:30:06.0394 0x0b50  bthserv - ok
14:30:06.0405 0x0b50  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:30:06.0447 0x0b50  cdfs - ok
14:30:06.0465 0x0b50  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
14:30:06.0491 0x0b50  cdrom - ok
14:30:06.0498 0x0b50  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
14:30:06.0531 0x0b50  CertPropSvc - ok
14:30:06.0560 0x0b50  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
14:30:06.0576 0x0b50  circlass - ok
14:30:06.0606 0x0b50  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
14:30:06.0634 0x0b50  CLFS - ok
14:30:06.0685 0x0b50  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:30:06.0698 0x0b50  clr_optimization_v2.0.50727_32 - ok
14:30:06.0722 0x0b50  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:30:06.0737 0x0b50  clr_optimization_v2.0.50727_64 - ok
14:30:06.0794 0x0b50  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:30:06.0810 0x0b50  clr_optimization_v4.0.30319_32 - ok
14:30:06.0826 0x0b50  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:30:06.0867 0x0b50  clr_optimization_v4.0.30319_64 - ok
14:30:06.0875 0x0b50  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
14:30:06.0888 0x0b50  CmBatt - ok
14:30:06.0913 0x0b50  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:30:06.0924 0x0b50  cmdide - ok
14:30:06.0960 0x0b50  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
14:30:07.0000 0x0b50  CNG - ok
14:30:07.0013 0x0b50  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
14:30:07.0024 0x0b50  Compbatt - ok
14:30:07.0044 0x0b50  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
14:30:07.0060 0x0b50  CompositeBus - ok
14:30:07.0064 0x0b50  COMSysApp - ok
14:30:07.0080 0x0b50  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
14:30:07.0091 0x0b50  crcdisk - ok
14:30:07.0129 0x0b50  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:30:07.0183 0x0b50  CryptSvc - ok
14:30:07.0218 0x0b50  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
14:30:07.0265 0x0b50  CSC - ok
14:30:07.0303 0x0b50  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
14:30:07.0355 0x0b50  CscService - ok
14:30:07.0391 0x0b50  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:30:07.0449 0x0b50  DcomLaunch - ok
14:30:07.0483 0x0b50  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
14:30:07.0532 0x0b50  defragsvc - ok
14:30:07.0545 0x0b50  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:30:07.0587 0x0b50  DfsC - ok
14:30:07.0612 0x0b50  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:30:07.0655 0x0b50  Dhcp - ok
14:30:07.0735 0x0b50  [ AA5319FA8602676B5D3A2B4A1355896D, 57532E16FF0DDE3D62B6B6DC35E2598DD453140E9277247965A1E835645E588A ] DiagTrack       C:\Windows\system32\diagtrack.dll
14:30:07.0806 0x0b50  DiagTrack - ok
14:30:07.0820 0x0b50  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
14:30:07.0866 0x0b50  discache - ok
14:30:07.0884 0x0b50  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
14:30:07.0897 0x0b50  Disk - ok
14:30:07.0924 0x0b50  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
14:30:07.0938 0x0b50  dmvsc - ok
14:30:07.0959 0x0b50  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:30:07.0976 0x0b50  Dnscache - ok
14:30:07.0997 0x0b50  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
14:30:08.0040 0x0b50  dot3svc - ok
14:30:08.0059 0x0b50  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
14:30:08.0096 0x0b50  DPS - ok
14:30:08.0121 0x0b50  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
14:30:08.0134 0x0b50  drmkaud - ok
14:30:08.0187 0x0b50  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
14:30:08.0234 0x0b50  DXGKrnl - ok
14:30:08.0250 0x0b50  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
14:30:08.0298 0x0b50  EapHost - ok
14:30:08.0402 0x0b50  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
14:30:08.0520 0x0b50  ebdrv - ok
14:30:08.0557 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] EFS             C:\Windows\System32\lsass.exe
14:30:08.0569 0x0b50  EFS - ok
14:30:08.0623 0x0b50  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
14:30:08.0669 0x0b50  ehRecvr - ok
14:30:08.0686 0x0b50  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
14:30:08.0715 0x0b50  ehSched - ok
14:30:08.0748 0x0b50  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
14:30:08.0784 0x0b50  elxstor - ok
14:30:08.0846 0x0b50  [ 20ECD0A490A121CB34F553FAD1DBBD39, 17C9DA33E78FBC7582B0AA53C611929B80FBBE1343B84A179D515B51C964D218 ] EpsonScanSvc    C:\Windows\system32\EscSvc64.exe
14:30:08.0859 0x0b50  EpsonScanSvc - ok
14:30:08.0927 0x0b50  [ A7E8186E04F38E836C19AC147F8B2ED0, 329639595F02060C215A6334FCE1651FB9B9B5679BA9052A487B57265608D162 ] EPSON_PM_RPCV4_05 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
14:30:08.0941 0x0b50  EPSON_PM_RPCV4_05 - ok
14:30:08.0952 0x0b50  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:30:08.0965 0x0b50  ErrDev - ok
14:30:08.0995 0x0b50  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
14:30:09.0045 0x0b50  EventSystem - ok
14:30:09.0061 0x0b50  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
14:30:09.0097 0x0b50  exfat - ok
14:30:09.0120 0x0b50  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
14:30:09.0157 0x0b50  fastfat - ok
14:30:09.0193 0x0b50  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
14:30:09.0250 0x0b50  Fax - ok
14:30:09.0266 0x0b50  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
14:30:09.0290 0x0b50  fdc - ok
14:30:09.0302 0x0b50  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
14:30:09.0335 0x0b50  fdPHost - ok
14:30:09.0347 0x0b50  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
14:30:09.0387 0x0b50  FDResPub - ok
14:30:09.0406 0x0b50  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:30:09.0419 0x0b50  FileInfo - ok
14:30:09.0431 0x0b50  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
14:30:09.0465 0x0b50  Filetrace - ok
14:30:09.0472 0x0b50  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
14:30:09.0485 0x0b50  flpydisk - ok
14:30:09.0513 0x0b50  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:30:09.0533 0x0b50  FltMgr - ok
14:30:09.0584 0x0b50  [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache       C:\Windows\system32\FntCache.dll
14:30:09.0641 0x0b50  FontCache - ok
14:30:09.0688 0x0b50  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:30:09.0700 0x0b50  FontCache3.0.0.0 - ok
14:30:09.0767 0x0b50  [ 6F0D5420DF53205C2960E6C1C7FD6BA6, DBDEB25719010D02A1C8F82D69D19FBC5812E83F212B48D0A0750A4306700C1C ] FPAVServer      C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe
14:30:09.0776 0x0b50  FPAVServer - ok
14:30:09.0826 0x0b50  [ BC5C7C3D4834554491A941781E28495C, E85A5A3E651470B320BA50B04471B63B9F715180D270EA7FAB9D95FD9B07C2BF ] FPAV_RTP        C:\Windows\system32\DRIVERS\FPAV_RTP.sys
14:30:09.0870 0x0b50  FPAV_RTP - ok
14:30:09.0887 0x0b50  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
14:30:09.0899 0x0b50  FsDepends - ok
14:30:09.0917 0x0b50  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:30:09.0927 0x0b50  Fs_Rec - ok
14:30:09.0967 0x0b50  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:30:09.0988 0x0b50  fvevol - ok
14:30:10.0001 0x0b50  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
14:30:10.0013 0x0b50  gagp30kx - ok
14:30:10.0046 0x0b50  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
14:30:10.0105 0x0b50  gpsvc - ok
14:30:10.0140 0x0b50  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:30:10.0151 0x0b50  gupdate - ok
14:30:10.0157 0x0b50  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:30:10.0166 0x0b50  gupdatem - ok
14:30:10.0175 0x0b50  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:30:10.0187 0x0b50  hcw85cir - ok
14:30:10.0229 0x0b50  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:30:10.0259 0x0b50  HdAudAddService - ok
14:30:10.0285 0x0b50  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
14:30:10.0302 0x0b50  HDAudBus - ok
14:30:10.0314 0x0b50  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
14:30:10.0327 0x0b50  HidBatt - ok
14:30:10.0335 0x0b50  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
14:30:10.0350 0x0b50  HidBth - ok
14:30:10.0359 0x0b50  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
14:30:10.0387 0x0b50  HidIr - ok
14:30:10.0406 0x0b50  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
14:30:10.0450 0x0b50  hidserv - ok
14:30:10.0481 0x0b50  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
14:30:10.0492 0x0b50  HidUsb - ok
14:30:10.0505 0x0b50  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:30:10.0549 0x0b50  hkmsvc - ok
14:30:10.0572 0x0b50  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:30:10.0602 0x0b50  HomeGroupListener - ok
14:30:10.0630 0x0b50  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:30:10.0648 0x0b50  HomeGroupProvider - ok
14:30:10.0655 0x0b50  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:30:10.0667 0x0b50  HpSAMD - ok
14:30:10.0720 0x0b50  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:30:10.0768 0x0b50  HTTP - ok
14:30:10.0785 0x0b50  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:30:10.0797 0x0b50  hwpolicy - ok
14:30:10.0810 0x0b50  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
14:30:10.0825 0x0b50  i8042prt - ok
14:30:10.0853 0x0b50  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
14:30:10.0881 0x0b50  iaStorV - ok
14:30:10.0948 0x0b50  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:30:10.0995 0x0b50  idsvc - ok
14:30:11.0024 0x0b50  IEEtwCollectorService - ok
14:30:11.0038 0x0b50  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
14:30:11.0051 0x0b50  iirsp - ok
14:30:11.0087 0x0b50  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
14:30:11.0145 0x0b50  IKEEXT - ok
14:30:11.0166 0x0b50  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
14:30:11.0183 0x0b50  intelide - ok
14:30:11.0204 0x0b50  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:30:11.0231 0x0b50  intelppm - ok
14:30:11.0247 0x0b50  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
14:30:11.0282 0x0b50  IPBusEnum - ok
14:30:11.0294 0x0b50  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:30:11.0327 0x0b50  IpFilterDriver - ok
14:30:11.0364 0x0b50  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:30:11.0409 0x0b50  iphlpsvc - ok
14:30:11.0436 0x0b50  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
14:30:11.0456 0x0b50  IPMIDRV - ok
14:30:11.0474 0x0b50  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
14:30:11.0521 0x0b50  IPNAT - ok
14:30:11.0538 0x0b50  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:30:11.0568 0x0b50  IRENUM - ok
14:30:11.0585 0x0b50  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:30:11.0596 0x0b50  isapnp - ok
14:30:11.0622 0x0b50  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:30:11.0642 0x0b50  iScsiPrt - ok
14:30:11.0667 0x0b50  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
14:30:11.0680 0x0b50  kbdclass - ok
14:30:11.0695 0x0b50  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
14:30:11.0709 0x0b50  kbdhid - ok
14:30:11.0722 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] KeyIso          C:\Windows\system32\lsass.exe
14:30:11.0733 0x0b50  KeyIso - ok
14:30:11.0757 0x0b50  [ C0A6C3D6E02B61B5D100FE17306C276F, F57C7BCC39B30F1DF739D07B76BA18EB68D12D8D1BD13B6AC8DC712C29119495 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:30:11.0771 0x0b50  KSecDD - ok
14:30:11.0785 0x0b50  [ 7A7328E427694CC7244235C3BC299F80, 7FC2E1F3F93B3334C3A8961CA58B4F38524650F6D8DA9FFA1FB43E1A2B86B710 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
14:30:11.0802 0x0b50  KSecPkg - ok
14:30:11.0807 0x0b50  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
14:30:11.0839 0x0b50  ksthunk - ok
14:30:11.0871 0x0b50  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
14:30:11.0922 0x0b50  KtmRm - ok
14:30:11.0942 0x0b50  [ 2AC603C3188C704CFCE353659AA7AD71, 0DAC2E8858221145FA35883BAE0D6484E60EB624158DE9F063FF209951CD1CDF ] L1E             C:\Windows\system32\DRIVERS\L1E62x64.sys
14:30:11.0966 0x0b50  L1E - ok
14:30:11.0988 0x0b50  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
14:30:12.0048 0x0b50  LanmanServer - ok
14:30:12.0076 0x0b50  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:30:12.0113 0x0b50  LanmanWorkstation - ok
14:30:12.0140 0x0b50  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:30:12.0174 0x0b50  lltdio - ok
14:30:12.0191 0x0b50  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
14:30:12.0249 0x0b50  lltdsvc - ok
14:30:12.0266 0x0b50  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
14:30:12.0301 0x0b50  lmhosts - ok
14:30:12.0312 0x0b50  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
14:30:12.0326 0x0b50  LSI_FC - ok
14:30:12.0336 0x0b50  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
14:30:12.0350 0x0b50  LSI_SAS - ok
14:30:12.0375 0x0b50  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
14:30:12.0387 0x0b50  LSI_SAS2 - ok
14:30:12.0404 0x0b50  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
14:30:12.0418 0x0b50  LSI_SCSI - ok
14:30:12.0439 0x0b50  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
14:30:12.0485 0x0b50  luafv - ok
14:30:12.0525 0x0b50  [ A8D28D5B3E2A528D1EF0E338E44F2820, 40D1EFDD253BC0A0D984A5AD8A2721C3E83B15F14D538204714E6D5B00D92CEB ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
14:30:12.0535 0x0b50  MBAMProtector - ok
14:30:12.0630 0x0b50  [ 301E3FDFCF33640BB8763BA444BC5093, 362B069BB9A313A06B376CE27E6F7F8D569F6CA39A8ABC96D9DF231EE462C604 ] MBAMScheduler   C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
14:30:12.0706 0x0b50  MBAMScheduler - ok
14:30:12.0754 0x0b50  [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
14:30:12.0800 0x0b50  MBAMService - ok
14:30:12.0814 0x0b50  [ AE757332EA130E94E646621CC695B52A, E688CF34A4206F32B5C7301119D8459C3456FC178FA1DAA6215CE15F2C824C43 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
14:30:12.0825 0x0b50  MBAMWebAccessControl - ok
14:30:12.0851 0x0b50  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
14:30:12.0866 0x0b50  Mcx2Svc - ok
14:30:12.0874 0x0b50  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
14:30:12.0886 0x0b50  megasas - ok
14:30:12.0910 0x0b50  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
14:30:12.0929 0x0b50  MegaSR - ok
14:30:12.0943 0x0b50  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
14:30:12.0996 0x0b50  MMCSS - ok
14:30:13.0010 0x0b50  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
14:30:13.0042 0x0b50  Modem - ok
14:30:13.0052 0x0b50  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
14:30:13.0068 0x0b50  monitor - ok
14:30:13.0080 0x0b50  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
14:30:13.0093 0x0b50  mouclass - ok
14:30:13.0113 0x0b50  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:30:13.0126 0x0b50  mouhid - ok
14:30:13.0141 0x0b50  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:30:13.0154 0x0b50  mountmgr - ok
14:30:13.0197 0x0b50  [ 2E1F005987F6C31ADE25B67C2D172DF6, 7DDEA05F80158FECCF37A31F056D04E8E76115B178557450056DEC516D3027C8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:30:13.0212 0x0b50  MozillaMaintenance - ok
14:30:13.0231 0x0b50  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:30:13.0247 0x0b50  mpio - ok
14:30:13.0262 0x0b50  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:30:13.0297 0x0b50  mpsdrv - ok
14:30:13.0334 0x0b50  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:30:13.0403 0x0b50  MpsSvc - ok
14:30:13.0427 0x0b50  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:30:13.0456 0x0b50  MRxDAV - ok
14:30:13.0483 0x0b50  [ 1877EB1495CFBDAB27D6A32F6DDF3818, 3818055C66AB12A335A905CFFE5D05347F15AE488861C5C183E62E8E0881DA86 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:30:13.0506 0x0b50  mrxsmb - ok
14:30:13.0530 0x0b50  [ 21AF322605D8C7F2A627C22634D1C9C9, 6B783F95D093FEFB260EA9568926BBB3CB8ED0783184DB3A18733E211933BADD ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:30:13.0557 0x0b50  mrxsmb10 - ok
14:30:13.0573 0x0b50  [ 45A03A0B6461EFBEE77E0A6AC2816EDA, CFB0C11387F2EC49FD6B69EF747962114EBA6F8B4B4DEC3627E9E969775C4D7E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:30:13.0590 0x0b50  mrxsmb20 - ok
14:30:13.0609 0x0b50  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
14:30:13.0621 0x0b50  msahci - ok
14:30:13.0629 0x0b50  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
14:30:13.0644 0x0b50  msdsm - ok
14:30:13.0661 0x0b50  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
14:30:13.0687 0x0b50  MSDTC - ok
14:30:13.0712 0x0b50  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:30:13.0745 0x0b50  Msfs - ok
14:30:13.0750 0x0b50  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
14:30:13.0795 0x0b50  mshidkmdf - ok
14:30:13.0806 0x0b50  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:30:13.0817 0x0b50  msisadrv - ok
14:30:13.0842 0x0b50  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
14:30:13.0880 0x0b50  MSiSCSI - ok
14:30:13.0886 0x0b50  msiserver - ok
14:30:13.0900 0x0b50  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
14:30:13.0934 0x0b50  MSKSSRV - ok
14:30:13.0947 0x0b50  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:30:13.0980 0x0b50  MSPCLOCK - ok
14:30:14.0004 0x0b50  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
14:30:14.0043 0x0b50  MSPQM - ok
14:30:14.0072 0x0b50  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
14:30:14.0089 0x0b50  MsRPC - ok
14:30:14.0101 0x0b50  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
14:30:14.0113 0x0b50  mssmbios - ok
14:30:14.0124 0x0b50  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
14:30:14.0158 0x0b50  MSTEE - ok
14:30:14.0170 0x0b50  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
14:30:14.0183 0x0b50  MTConfig - ok
14:30:14.0210 0x0b50  [ 2219A3D695405E7BA2186BA6B9EDE14A, 8B99BD22DACB56FF544ED922962FE4EC1172BF90987A46E3A5F62A3B4E720B0C ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
14:30:14.0218 0x0b50  MTsensor - ok
14:30:14.0226 0x0b50  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
14:30:14.0239 0x0b50  Mup - ok
14:30:14.0268 0x0b50  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
14:30:14.0335 0x0b50  napagent - ok
14:30:14.0360 0x0b50  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
14:30:14.0404 0x0b50  NativeWifiP - ok
14:30:14.0453 0x0b50  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:30:14.0500 0x0b50  NDIS - ok
14:30:14.0519 0x0b50  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
14:30:14.0553 0x0b50  NdisCap - ok
14:30:14.0570 0x0b50  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:30:14.0605 0x0b50  NdisTapi - ok
14:30:14.0616 0x0b50  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
14:30:14.0661 0x0b50  Ndisuio - ok
14:30:14.0684 0x0b50  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
14:30:14.0721 0x0b50  NdisWan - ok
14:30:14.0735 0x0b50  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
14:30:14.0768 0x0b50  NDProxy - ok
14:30:14.0792 0x0b50  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
14:30:14.0827 0x0b50  NetBIOS - ok
14:30:14.0842 0x0b50  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
14:30:14.0895 0x0b50  NetBT - ok
14:30:14.0913 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] Netlogon        C:\Windows\system32\lsass.exe
14:30:14.0924 0x0b50  Netlogon - ok
14:30:14.0955 0x0b50  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
14:30:15.0006 0x0b50  Netman - ok
14:30:15.0042 0x0b50  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:30:15.0066 0x0b50  NetMsmqActivator - ok
14:30:15.0076 0x0b50  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:30:15.0090 0x0b50  NetPipeActivator - ok
14:30:15.0112 0x0b50  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
14:30:15.0170 0x0b50  netprofm - ok
14:30:15.0178 0x0b50  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:30:15.0193 0x0b50  NetTcpActivator - ok
14:30:15.0201 0x0b50  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:30:15.0215 0x0b50  NetTcpPortSharing - ok
14:30:15.0236 0x0b50  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
14:30:15.0249 0x0b50  nfrd960 - ok
14:30:15.0273 0x0b50  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:30:15.0314 0x0b50  NlaSvc - ok
14:30:15.0332 0x0b50  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:30:15.0364 0x0b50  Npfs - ok
14:30:15.0378 0x0b50  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
14:30:15.0412 0x0b50  nsi - ok
14:30:15.0426 0x0b50  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:30:15.0459 0x0b50  nsiproxy - ok
14:30:15.0520 0x0b50  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:30:15.0568 0x0b50  Ntfs - ok
14:30:15.0584 0x0b50  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
14:30:15.0615 0x0b50  Null - ok
14:30:15.0641 0x0b50  [ 786DB821BFD57C0551DBBE4F75384A7D, F956D636F834F2BA5F019E187FDB9CC33940363C75A60E53CD81310A4DB6A6AB ] nusb3hub        C:\Windows\system32\drivers\nusb3hub.sys
14:30:15.0652 0x0b50  nusb3hub - ok
14:30:15.0672 0x0b50  [ DAA8005CAF745042BB427A1ED7433354, 3019002F174783B76D5D8AA47F7A465B7FEC7C14235B70E5C9277FE534839226 ] nusb3xhc        C:\Windows\system32\drivers\nusb3xhc.sys
14:30:15.0687 0x0b50  nusb3xhc - ok
14:30:16.0066 0x0b50  [ 0AC797F70F2F3E5B69A34FF2F63496F3, 80A811F8234BA00779BA76AAF41E830FB6CED03667E6E8F430C14DEBF2E45DD9 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:30:16.0492 0x0b50  nvlddmkm - ok
14:30:16.0619 0x0b50  [ 048C6FACA905A7DF0A86D3CC31D7E6AE, 7222B301DBBDFF15B038E13FEA076759D8AC392F5145ECD60A640BDA6CFABE8C ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
14:30:16.0685 0x0b50  NvNetworkService - ok
14:30:16.0702 0x0b50  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:30:16.0718 0x0b50  nvraid - ok
14:30:16.0740 0x0b50  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:30:16.0758 0x0b50  nvstor - ok
14:30:16.0807 0x0b50  [ 3ABCD8F8853FEB12B961E9A48FC12133, 58255D53E810EE0D89FA2F1DC9D6208BF44F3C0FDE74A9264FB740024F1EDD44 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
14:30:16.0817 0x0b50  NvStreamKms - ok
14:30:16.0837 0x0b50  NvStreamSvc - ok
14:30:16.0877 0x0b50  [ C135A25E8CF21EB631AB041ABB1F73EA, D0A3DC0411E888D0934B7579EEB980FA7824E3F22F70819A33411D8B8BC9EE42 ] nvsvc           C:\Windows\system32\nvvsvc.exe
14:30:16.0923 0x0b50  nvsvc - ok
14:30:16.0938 0x0b50  [ 75034A4D7C02327D150B617571D4196A, 8E7DAFEC4307E883D52BD0B5F0732E26E019C953770B52ACBBAD3074A66393CB ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
14:30:16.0949 0x0b50  nvvad_WaveExtensible - ok
14:30:16.0970 0x0b50  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:30:16.0985 0x0b50  nv_agp - ok
14:30:16.0991 0x0b50  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:30:17.0018 0x0b50  ohci1394 - ok
14:30:17.0067 0x0b50  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:30:17.0080 0x0b50  ose - ok
14:30:17.0259 0x0b50  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:30:17.0445 0x0b50  osppsvc - ok
14:30:17.0481 0x0b50  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:30:17.0523 0x0b50  p2pimsvc - ok
14:30:17.0549 0x0b50  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
14:30:17.0587 0x0b50  p2psvc - ok
14:30:17.0605 0x0b50  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys
14:30:17.0631 0x0b50  Parport - ok
14:30:17.0662 0x0b50  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
14:30:17.0676 0x0b50  partmgr - ok
14:30:17.0700 0x0b50  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:30:17.0728 0x0b50  PcaSvc - ok
14:30:17.0747 0x0b50  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
14:30:17.0764 0x0b50  pci - ok
14:30:17.0783 0x0b50  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
14:30:17.0794 0x0b50  pciide - ok
14:30:17.0812 0x0b50  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
14:30:17.0829 0x0b50  pcmcia - ok
14:30:17.0847 0x0b50  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
14:30:17.0860 0x0b50  pcw - ok
14:30:17.0888 0x0b50  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:30:17.0927 0x0b50  PEAUTH - ok
14:30:17.0989 0x0b50  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
14:30:18.0048 0x0b50  PeerDistSvc - ok
14:30:18.0102 0x0b50  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
14:30:18.0116 0x0b50  PerfHost - ok
14:30:18.0170 0x0b50  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
14:30:18.0249 0x0b50  pla - ok
14:30:18.0307 0x0b50  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:30:18.0335 0x0b50  PlugPlay - ok
14:30:18.0347 0x0b50  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
14:30:18.0360 0x0b50  PNRPAutoReg - ok
14:30:18.0381 0x0b50  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
14:30:18.0399 0x0b50  PNRPsvc - ok
14:30:18.0436 0x0b50  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
14:30:18.0502 0x0b50  PolicyAgent - ok
14:30:18.0531 0x0b50  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
14:30:18.0570 0x0b50  Power - ok
14:30:18.0588 0x0b50  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:30:18.0622 0x0b50  PptpMiniport - ok
14:30:18.0635 0x0b50  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
14:30:18.0656 0x0b50  Processor - ok
14:30:18.0685 0x0b50  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
14:30:18.0704 0x0b50  ProfSvc - ok
14:30:18.0720 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] ProtectedStorage C:\Windows\system32\lsass.exe
14:30:18.0730 0x0b50  ProtectedStorage - ok
14:30:18.0745 0x0b50  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:30:18.0790 0x0b50  Psched - ok
14:30:18.0850 0x0b50  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
14:30:18.0917 0x0b50  ql2300 - ok
14:30:18.0939 0x0b50  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
14:30:18.0954 0x0b50  ql40xx - ok
14:30:18.0971 0x0b50  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
14:30:18.0995 0x0b50  QWAVE - ok
14:30:19.0010 0x0b50  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:30:19.0028 0x0b50  QWAVEdrv - ok
14:30:19.0045 0x0b50  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:30:19.0078 0x0b50  RasAcd - ok
14:30:19.0090 0x0b50  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
14:30:19.0133 0x0b50  RasAgileVpn - ok
14:30:19.0158 0x0b50  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
14:30:19.0194 0x0b50  RasAuto - ok
14:30:19.0201 0x0b50  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
14:30:19.0242 0x0b50  Rasl2tp - ok
14:30:19.0262 0x0b50  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
14:30:19.0311 0x0b50  RasMan - ok
14:30:19.0328 0x0b50  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:30:19.0364 0x0b50  RasPppoe - ok
14:30:19.0375 0x0b50  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
14:30:19.0411 0x0b50  RasSstp - ok
14:30:19.0428 0x0b50  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
14:30:19.0477 0x0b50  rdbss - ok
14:30:19.0487 0x0b50  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:30:19.0511 0x0b50  rdpbus - ok
14:30:19.0524 0x0b50  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:30:19.0571 0x0b50  RDPCDD - ok
14:30:19.0602 0x0b50  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
14:30:19.0627 0x0b50  RDPDR - ok
14:30:19.0649 0x0b50  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:30:19.0682 0x0b50  RDPENCDD - ok
14:30:19.0697 0x0b50  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:30:19.0740 0x0b50  RDPREFMP - ok
14:30:19.0766 0x0b50  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
14:30:19.0780 0x0b50  RDPWD - ok
14:30:19.0799 0x0b50  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:30:19.0817 0x0b50  rdyboost - ok
14:30:19.0825 0x0b50  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:30:19.0860 0x0b50  RemoteAccess - ok
14:30:19.0876 0x0b50  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
14:30:19.0915 0x0b50  RemoteRegistry - ok
14:30:19.0939 0x0b50  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:30:19.0984 0x0b50  RpcEptMapper - ok
14:30:19.0999 0x0b50  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
14:30:20.0011 0x0b50  RpcLocator - ok
14:30:20.0035 0x0b50  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
14:30:20.0078 0x0b50  RpcSs - ok
14:30:20.0090 0x0b50  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:30:20.0125 0x0b50  rspndr - ok
14:30:20.0135 0x0b50  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
14:30:20.0160 0x0b50  s3cap - ok
14:30:20.0177 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] SamSs           C:\Windows\system32\lsass.exe
14:30:20.0189 0x0b50  SamSs - ok
14:30:20.0205 0x0b50  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:30:20.0219 0x0b50  sbp2port - ok
14:30:20.0240 0x0b50  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:30:20.0279 0x0b50  SCardSvr - ok
14:30:20.0289 0x0b50  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:30:20.0323 0x0b50  scfilter - ok
14:30:20.0368 0x0b50  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
14:30:20.0453 0x0b50  Schedule - ok
14:30:20.0477 0x0b50  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
14:30:20.0509 0x0b50  SCPolicySvc - ok
14:30:20.0518 0x0b50  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:30:20.0545 0x0b50  SDRSVC - ok
14:30:20.0558 0x0b50  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:30:20.0590 0x0b50  secdrv - ok
14:30:20.0604 0x0b50  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
14:30:20.0637 0x0b50  seclogon - ok
14:30:20.0650 0x0b50  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
14:30:20.0692 0x0b50  SENS - ok
14:30:20.0711 0x0b50  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:30:20.0724 0x0b50  SensrSvc - ok
14:30:20.0730 0x0b50  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
14:30:20.0743 0x0b50  Serenum - ok
14:30:20.0758 0x0b50  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:30:20.0773 0x0b50  Serial - ok
14:30:20.0783 0x0b50  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
14:30:20.0795 0x0b50  sermouse - ok
14:30:20.0819 0x0b50  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
14:30:20.0854 0x0b50  SessionEnv - ok
14:30:20.0865 0x0b50  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
14:30:20.0888 0x0b50  sffdisk - ok
14:30:20.0893 0x0b50  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:30:20.0906 0x0b50  sffp_mmc - ok
14:30:20.0911 0x0b50  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
14:30:20.0925 0x0b50  sffp_sd - ok
14:30:20.0929 0x0b50  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
14:30:20.0940 0x0b50  sfloppy - ok
14:30:20.0964 0x0b50  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:30:21.0014 0x0b50  SharedAccess - ok
14:30:21.0035 0x0b50  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:30:21.0084 0x0b50  ShellHWDetection - ok
14:30:21.0102 0x0b50  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
14:30:21.0114 0x0b50  SiSRaid2 - ok
14:30:21.0120 0x0b50  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
14:30:21.0133 0x0b50  SiSRaid4 - ok
14:30:21.0154 0x0b50  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
14:30:21.0189 0x0b50  Smb - ok
14:30:21.0199 0x0b50  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:30:21.0225 0x0b50  SNMPTRAP - ok
14:30:21.0238 0x0b50  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
14:30:21.0248 0x0b50  spldr - ok
14:30:21.0295 0x0b50  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
14:30:21.0340 0x0b50  Spooler - ok
14:30:21.0456 0x0b50  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
14:30:21.0605 0x0b50  sppsvc - ok
14:30:21.0630 0x0b50  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
14:30:21.0674 0x0b50  sppuinotify - ok
14:30:21.0708 0x0b50  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
14:30:21.0736 0x0b50  srv - ok
14:30:21.0761 0x0b50  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:30:21.0789 0x0b50  srv2 - ok
14:30:21.0814 0x0b50  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:30:21.0843 0x0b50  srvnet - ok
14:30:21.0864 0x0b50  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
14:30:21.0905 0x0b50  SSDPSRV - ok
14:30:21.0920 0x0b50  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
14:30:21.0956 0x0b50  SstpSvc - ok
14:30:21.0994 0x0b50  [ 718D79F2E7EC3AFFD3661DA81F93BBEA, BA2A4E58E5EE06392EE6F4C2E738DC807EC5A8B9F6DD4B7935FE27CBC648E390 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
14:30:22.0020 0x0b50  Stereo Service - ok
14:30:22.0033 0x0b50  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
14:30:22.0045 0x0b50  stexstor - ok
14:30:22.0087 0x0b50  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
14:30:22.0131 0x0b50  stisvc - ok
14:30:22.0150 0x0b50  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
14:30:22.0162 0x0b50  storflt - ok
14:30:22.0187 0x0b50  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
14:30:22.0208 0x0b50  StorSvc - ok
14:30:22.0223 0x0b50  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
14:30:22.0235 0x0b50  storvsc - ok
14:30:22.0252 0x0b50  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
14:30:22.0263 0x0b50  swenum - ok
14:30:22.0289 0x0b50  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
14:30:22.0349 0x0b50  swprv - ok
14:30:22.0413 0x0b50  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
14:30:22.0517 0x0b50  SysMain - ok
14:30:22.0542 0x0b50  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:30:22.0561 0x0b50  TabletInputService - ok
14:30:22.0578 0x0b50  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
14:30:22.0633 0x0b50  TapiSrv - ok
14:30:22.0651 0x0b50  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
14:30:22.0699 0x0b50  TBS - ok
14:30:22.0776 0x0b50  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
14:30:22.0854 0x0b50  Tcpip - ok
14:30:22.0925 0x0b50  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:30:22.0979 0x0b50  TCPIP6 - ok
14:30:23.0000 0x0b50  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:30:23.0012 0x0b50  tcpipreg - ok
14:30:23.0025 0x0b50  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:30:23.0036 0x0b50  TDPIPE - ok
14:30:23.0053 0x0b50  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
14:30:23.0064 0x0b50  TDTCP - ok
14:30:23.0094 0x0b50  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
14:30:23.0109 0x0b50  tdx - ok
14:30:23.0119 0x0b50  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
14:30:23.0132 0x0b50  TermDD - ok
14:30:23.0175 0x0b50  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
14:30:23.0201 0x0b50  TermService - ok
14:30:23.0231 0x0b50  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
14:30:23.0250 0x0b50  Themes - ok
14:30:23.0272 0x0b50  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
14:30:23.0305 0x0b50  THREADORDER - ok
14:30:23.0319 0x0b50  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
14:30:23.0357 0x0b50  TrkWks - ok
14:30:23.0397 0x0b50  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:30:23.0441 0x0b50  TrustedInstaller - ok
14:30:23.0461 0x0b50  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:30:23.0473 0x0b50  tssecsrv - ok
14:30:23.0486 0x0b50  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:30:23.0499 0x0b50  TsUsbFlt - ok
14:30:23.0514 0x0b50  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
14:30:23.0526 0x0b50  TsUsbGD - ok
14:30:23.0558 0x0b50  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:30:23.0594 0x0b50  tunnel - ok
14:30:23.0606 0x0b50  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
14:30:23.0619 0x0b50  uagp35 - ok
14:30:23.0639 0x0b50  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:30:23.0700 0x0b50  udfs - ok
14:30:23.0723 0x0b50  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
14:30:23.0748 0x0b50  UI0Detect - ok
14:30:23.0772 0x0b50  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:30:23.0785 0x0b50  uliagpkx - ok
14:30:23.0795 0x0b50  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
14:30:23.0809 0x0b50  umbus - ok
14:30:23.0816 0x0b50  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
14:30:23.0837 0x0b50  UmPass - ok
14:30:23.0863 0x0b50  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
14:30:23.0883 0x0b50  UmRdpService - ok
14:30:23.0901 0x0b50  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
14:30:23.0960 0x0b50  upnphost - ok
14:30:23.0983 0x0b50  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
14:30:23.0997 0x0b50  usbccgp - ok
14:30:24.0020 0x0b50  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:30:24.0033 0x0b50  usbcir - ok
14:30:24.0059 0x0b50  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
14:30:24.0081 0x0b50  usbehci - ok
14:30:24.0105 0x0b50  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:30:24.0134 0x0b50  usbhub - ok
14:30:24.0151 0x0b50  [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
14:30:24.0164 0x0b50  usbohci - ok
14:30:24.0184 0x0b50  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:30:24.0212 0x0b50  usbprint - ok
14:30:24.0244 0x0b50  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
14:30:24.0266 0x0b50  usbscan - ok
14:30:24.0286 0x0b50  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:30:24.0300 0x0b50  USBSTOR - ok
14:30:24.0313 0x0b50  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
14:30:24.0325 0x0b50  usbuhci - ok
14:30:24.0333 0x0b50  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
14:30:24.0378 0x0b50  UxSms - ok
14:30:24.0392 0x0b50  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] VaultSvc        C:\Windows\system32\lsass.exe
14:30:24.0402 0x0b50  VaultSvc - ok
14:30:24.0415 0x0b50  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:30:24.0427 0x0b50  vdrvroot - ok
14:30:24.0457 0x0b50  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
14:30:24.0514 0x0b50  vds - ok
14:30:24.0532 0x0b50  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
14:30:24.0547 0x0b50  vga - ok
14:30:24.0561 0x0b50  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
14:30:24.0594 0x0b50  VgaSave - ok
14:30:24.0609 0x0b50  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
14:30:24.0627 0x0b50  vhdmp - ok
14:30:24.0640 0x0b50  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
14:30:24.0651 0x0b50  viaide - ok
14:30:24.0679 0x0b50  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
14:30:24.0696 0x0b50  vmbus - ok
14:30:24.0705 0x0b50  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
14:30:24.0717 0x0b50  VMBusHID - ok
14:30:24.0737 0x0b50  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:30:24.0750 0x0b50  volmgr - ok
14:30:24.0774 0x0b50  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
14:30:24.0802 0x0b50  volmgrx - ok
14:30:24.0825 0x0b50  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
14:30:24.0852 0x0b50  volsnap - ok
14:30:24.0868 0x0b50  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
14:30:24.0884 0x0b50  vsmraid - ok
14:30:24.0943 0x0b50  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
14:30:25.0032 0x0b50  VSS - ok
14:30:25.0047 0x0b50  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
14:30:25.0062 0x0b50  vwifibus - ok
14:30:25.0084 0x0b50  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
14:30:25.0135 0x0b50  W32Time - ok
14:30:25.0150 0x0b50  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
14:30:25.0189 0x0b50  WacomPen - ok
14:30:25.0216 0x0b50  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:30:25.0271 0x0b50  WANARP - ok
14:30:25.0287 0x0b50  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:30:25.0319 0x0b50  Wanarpv6 - ok
14:30:25.0396 0x0b50  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
14:30:25.0454 0x0b50  WatAdminSvc - ok
14:30:25.0511 0x0b50  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
14:30:25.0593 0x0b50  wbengine - ok
14:30:25.0618 0x0b50  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:30:25.0656 0x0b50  WbioSrvc - ok
14:30:25.0683 0x0b50  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
14:30:25.0724 0x0b50  wcncsvc - ok
14:30:25.0740 0x0b50  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:30:25.0754 0x0b50  WcsPlugInService - ok
14:30:25.0769 0x0b50  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
14:30:25.0780 0x0b50  Wd - ok
14:30:25.0823 0x0b50  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:30:25.0863 0x0b50  Wdf01000 - ok
14:30:25.0897 0x0b50  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
14:30:25.0924 0x0b50  WdiServiceHost - ok
14:30:25.0932 0x0b50  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
14:30:25.0945 0x0b50  WdiSystemHost - ok
14:30:25.0974 0x0b50  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
14:30:26.0011 0x0b50  WebClient - ok
14:30:26.0031 0x0b50  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:30:26.0072 0x0b50  Wecsvc - ok
14:30:26.0088 0x0b50  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
14:30:26.0135 0x0b50  wercplsupport - ok
14:30:26.0157 0x0b50  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
14:30:26.0205 0x0b50  WerSvc - ok
14:30:26.0224 0x0b50  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:30:26.0257 0x0b50  WfpLwf - ok
14:30:26.0272 0x0b50  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:30:26.0284 0x0b50  WIMMount - ok
14:30:26.0294 0x0b50  WinDefend - ok
14:30:26.0310 0x0b50  WinHttpAutoProxySvc - ok
14:30:26.0355 0x0b50  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
14:30:26.0410 0x0b50  Winmgmt - ok
14:30:26.0491 0x0b50  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
14:30:26.0589 0x0b50  WinRM - ok
14:30:26.0654 0x0b50  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
14:30:26.0681 0x0b50  WinUsb - ok
14:30:26.0721 0x0b50  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
14:30:26.0782 0x0b50  Wlansvc - ok
14:30:26.0807 0x0b50  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
14:30:26.0833 0x0b50  WmiAcpi - ok
14:30:26.0855 0x0b50  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:30:26.0874 0x0b50  wmiApSrv - ok
14:30:26.0885 0x0b50  WMPNetworkSvc - ok
14:30:26.0895 0x0b50  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:30:26.0907 0x0b50  WPCSvc - ok
14:30:26.0922 0x0b50  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:30:26.0939 0x0b50  WPDBusEnum - ok
14:30:26.0947 0x0b50  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
14:30:26.0980 0x0b50  ws2ifsl - ok
14:30:26.0989 0x0b50  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
14:30:27.0010 0x0b50  wscsvc - ok
14:30:27.0013 0x0b50  WSearch - ok
14:30:27.0114 0x0b50  [ AA3E844A2595B1AA5825C70CA50D963E, F9C7D64D9563CA5167EC9B0D957473B55C02E9456E041AE2CDA6ABFA9641D176 ] wuauserv        C:\Windows\system32\wuaueng.dll
14:30:27.0213 0x0b50  wuauserv - ok
14:30:27.0245 0x0b50  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:30:27.0271 0x0b50  WudfPf - ok
14:30:27.0298 0x0b50  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
14:30:27.0328 0x0b50  WUDFRd - ok
14:30:27.0344 0x0b50  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
14:30:27.0360 0x0b50  wudfsvc - ok
14:30:27.0388 0x0b50  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
14:30:27.0407 0x0b50  WwanSvc - ok
14:30:27.0412 0x0b50  ================ Scan global ===============================
14:30:27.0436 0x0b50  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
14:30:27.0470 0x0b50  [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll
14:30:27.0486 0x0b50  [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll
14:30:27.0513 0x0b50  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
14:30:27.0552 0x0b50  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
14:30:27.0569 0x0b50  [ Global ] - ok
14:30:27.0569 0x0b50  ================ Scan MBR ==================================
14:30:27.0575 0x0b50  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:30:27.0881 0x0b50  \Device\Harddisk0\DR0 - ok
14:30:27.0909 0x0b50  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
14:30:28.0036 0x0b50  \Device\Harddisk2\DR2 - ok
14:30:28.0036 0x0b50  ================ Scan VBR ==================================
14:30:28.0039 0x0b50  [ C9D5DF25D24D5B578B7A05F00D54A450 ] \Device\Harddisk0\DR0\Partition1
14:30:28.0041 0x0b50  \Device\Harddisk0\DR0\Partition1 - ok
14:30:28.0044 0x0b50  [ B238BE47A68878BF92BE66E3A2F1BA8F ] \Device\Harddisk0\DR0\Partition2
14:30:28.0045 0x0b50  \Device\Harddisk0\DR0\Partition2 - ok
14:30:28.0065 0x0b50  [ A1C59BFD968D7B52C2BCE0C1A845A8DE ] \Device\Harddisk0\DR0\Partition3
14:30:28.0068 0x0b50  \Device\Harddisk0\DR0\Partition3 - ok
14:30:28.0071 0x0b50  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk2\DR2\Partition1
14:30:28.0072 0x0b50  \Device\Harddisk2\DR2\Partition1 - ok
14:30:28.0075 0x0b50  [ B55CDF6296FF45BFFBCF6E21C8CFDD9F ] \Device\Harddisk2\DR2\Partition2
14:30:28.0078 0x0b50  \Device\Harddisk2\DR2\Partition2 - ok
14:30:28.0078 0x0b50  ================ Scan generic autorun ======================
14:30:28.0120 0x0b50  [ B8B1A3F5EFA0DBE88EAB41A7110B9A31, 2A786D77485CE494222131DA3DD2ACA6E1A8AE812B3312DB90EB80BC324BD79A ] C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe
14:30:28.0132 0x0b50  WrtMon.exe - ok
14:30:28.0184 0x0b50  [ FBDC0E172AA0D341FF0084A3DBFD00F5, 5B452DFD516CE88EBCBE5AC6CB7649767FBD68FFF85D62783278FD5670C1D550 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
14:30:28.0210 0x0b50  FUFAXRCV - ok
14:30:28.0241 0x0b50  [ 635DFB2E71D6359E07977E74703ED47E, C45F9208304421A5992C2A16B2B29D12C20C9E314850E1A23264B9162E671C02 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
14:30:28.0284 0x0b50  FUFAXSTM - ok
14:30:28.0342 0x0b50  [ 46D3D19A4745B67DCA6692AFAB0E136D, 4CC62A94C62B7D1DBE592AF29D4251F3A8A13FE3F55A3A8A7DC6495D990093E4 ] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
14:30:28.0386 0x0b50  EEventManager - ok
14:30:28.0442 0x0b50  [ 28DEF0EFB36D172EAA5A08EB09CF75DF, 62D07A28167AEBFB9511830BFBBEAAB17CC24D57FF8D07F1414D921135BC9024 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
14:30:28.0479 0x0b50  avgnt - ok
14:30:28.0518 0x0b50  [ 5120CD65A74A5E054FB2B0577688024C, 2C771743C797ED2F94E4C0CD7472D20532DB6C3E95DEB0DA4D14D6B5469EE273 ] C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
14:30:28.0531 0x0b50  Avira Systray - ok
14:30:28.0638 0x0b50  [ C26C2750274E1C59041919AA3BEE4B04, A3DAD93869674E6751B6E4C18B8F7F06A2FC9D0B80593379467C58F313613CE7 ] C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe
14:30:28.0703 0x0b50  F-PROT Antivirus Tray application - ok
14:30:28.0756 0x0b50  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
14:30:28.0813 0x0b50  Sidebar - ok
14:30:28.0840 0x0b50  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
14:30:28.0859 0x0b50  mctadmin - ok
14:30:28.0905 0x0b50  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
14:30:28.0941 0x0b50  Sidebar - ok
14:30:28.0950 0x0b50  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
14:30:28.0966 0x0b50  mctadmin - ok
14:30:29.0001 0x0b50  [ 6ECE746BB283927604DA192CA0D1403D, 327E1E908B6DB1C8414B31DB277EF5EABA340B2EE7FEE19349860B3C8F7778FE ] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE
14:30:29.0025 0x0b50  EPLTarget\P0000000000000000 - ok
14:30:29.0026 0x0b50  Waiting for KSN requests completion. In queue: 63
14:30:30.0026 0x0b50  Waiting for KSN requests completion. In queue: 63
14:30:31.0026 0x0b50  Waiting for KSN requests completion. In queue: 63
14:30:32.0101 0x0b50  AV detected via SS2: F-PROT Antivirus for Windows, C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe ( 6.0.9.0 ), 0x70000 ( disabled : updated )
14:30:32.0105 0x0b50  Win FW state via NFP2: enabled ( trusted )
14:30:34.0484 0x0b50  ============================================================
14:30:34.0484 0x0b50  Scan finished
14:30:34.0484 0x0b50  ============================================================
14:30:34.0491 0x0a10  Detected object count: 0
14:30:34.0491 0x0a10  Actual detected object count: 0

schrauber · 15.08.2015, 06:11

Grafikkartentreiber und Software neu installieren, dann bitte ein frisches FRST log.

Michael888 · 15.08.2015, 14:50

Hallo schrauber, was meinst du mit "software"? Hoffentlich nicht jegliche software, die auf meinem Rechner installiert ist. Da ich beruflich sehr viel mit software zu tun habe, wäre das eine Heidenarbeit und würde mehrere Tage in Anspruch nehmen. Wo fängt man da an und wo hört man auf... Meinst du die Software der Grafikkarte? Meines Wissens habe ich keine grafikkartenspezifische software auf meinem Rechner installiert.

Hi schrauber, sorry, ich stand bei meiner Antwort vor einer Stunde wohl etwas auf dem Schlauch. Klar musst du die Grafikkartensoftware gemeint haben.
Ich habe eine NVIDIA-Grafikkarte. Nach Deinstallation derselben habe ich alle Treiber deinstalliert. Es findet sich nun noch die "NVIDIA PhysX-Systemsoftware 9.13.1220". Beim versuch der Deinstallation dieser Systemsoftware bekomme ich die Meldung, dass diese im abgesicherten Modus NICHT deinstalliert werden kann. Normal hochfahren kann ich den Rechner nicht mehr, es erscheint sofort der Bluescreen. Hast du eine Idee wie ich die SW deinstallieren kann?

Hi schrauber, hier ein Nachtrag:
ich habe die verbliebene NVIDIA-Software händisch komplett entfernt. Treiber waren ja inzwischen alle deinstalliert. Nach einem Neustart im abgesicherten Modus habt sich der Treiber der Grafikkarte wieder neu installiert. Beim erneuten Hochfahren im "normalen" Modus habe ich sofort wieder das gleiche Problem, den bluescreen. Ich bin kurz vorm Verzweifeln :-(

schrauber · 16.08.2015, 06:33

Lade beim Hersteller den korrekten, aktuellsten Treiber und installiere diesen.

Michael888 · 16.08.2015, 22:53

Hallo schrauber, ich habe den korrekten, aktuellsten Grafikkartentreiber von der Herstellerseite heruntergeladen und installiert. Der Rechner lief nach dessen Installation etwas länger als bisher, es kam aber wieder zum gewohnten bluescreen. Die aktuelle FRST.log habe ich dir angehängt:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:16-08-2015
durchgeführt von Harry (Administrator) auf HARRY-PC (16-08-2015 23:46:02)
Gestartet von C:\Users\Harry\Desktop
Geladene Profile: Harry (Verfügbare Profile: Harry & Admin & Bianca)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Safe Mode (with Networking)
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(FRISK Software International) C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) E:\Programme\Browser\Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-29] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [F-PROT Antivirus Tray application] => C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe [1674016 2010-11-03] (FRISK Software International)
HKU\S-1-5-21-2258534620-706841585-1673714678-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
GroupPolicyScripts: Gruppenrichtline erkannt <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKU\S-1-5-21-2258534620-706841585-1673714678-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2258534620-706841585-1673714678-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKLM -> DefaultScope {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2258534620-706841585-1673714678-1000 -> DefaultScope {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2258534620-706841585-1673714678-1000 -> {A4EF375A-B917-4B84-80C8-5DD8ADF12589} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll [2014-09-11] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll [2014-09-11] (Oracle Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> E:\Programme\Office\Microsoft Office 2003\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1A3BD39A-E9C9-47F1-B6C0-EC902BCEB572}: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: SuchMaschine
FF Homepage: hxxp://www.google.de
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll [2014-09-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll [2014-09-11] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2014-05-04] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2014-05-04] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> E:\PROGRA~1\Office\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> E:\PROGRA~1\Office\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-04] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> E:\Programme\Player\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> E:\Programme\Player\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\google-images.xml [2015-08-10]
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\google-maps.xml [2015-08-10]
FF SearchPlugin: C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\searchplugins\search_engine.xml [2014-04-06]
FF Extension: Cliqz - C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\Extensions\cliqz@cliqz.com.xpi [2015-08-11]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-01-05]
FF HKU\S-1-5-21-2258534620-706841585-1673714678-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Harry\AppData\Roaming\Mozilla\Firefox\Profiles\9jd42i7r.default\extensions\cliqz@cliqz.com
StartMenuInternet: FIREFOX.EXE - E:\Programme\Browser\Firefox\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-26]
CHR Extension: (Google Docs) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-08]
CHR Extension: (Google Drive) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-08]
CHR Extension: (YouTube) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-08]
CHR Extension: (Google Search) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-08]
CHR Extension: (Google Sheets) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-26]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-22]
CHR Extension: (Kein Name) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-08]
CHR Extension: (Gmail) - C:\Users\Harry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-29] (Avira Operations GmbH & Co. KG)
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG)
S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FPAVServer; C:\Program Files (x86)\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe [84136 2011-10-06] (FRISK Software International)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2014-05-04] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-29] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-29] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-26] (Avira Operations GmbH & Co. KG)
S1 FPAV_RTP; C:\Windows\System32\DRIVERS\FPAV_RTP.sys [842144 2011-11-11] (FRISK Software International)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-16] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2014-05-04] ()
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-16 23:45 - 2015-08-16 23:45 - 00000000 ____D C:\Users\Harry\Desktop\FRST-OlderVersion
2015-08-16 23:43 - 2015-08-16 23:43 - 00624304 _____ C:\Windows\Minidump\081615-29967-01.dmp
2015-08-16 12:27 - 2015-08-16 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-16 11:19 - 2015-08-16 11:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-16 11:19 - 2015-02-04 02:00 - 00608072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-08-16 11:19 - 2015-02-03 18:18 - 04229086 _____ C:\Windows\system32\nvcoproc.bin
2015-08-16 11:18 - 2015-02-04 05:56 - 00072904 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-16 11:18 - 2015-02-04 05:56 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 31515280 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 24198856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 22993224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 18634072 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 17559432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 16128576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 15294280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 14497568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 13916280 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 13828032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 12894024 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-16 11:17 - 2015-02-04 05:56 - 11272240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 11209192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 04244680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 03987600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 03209736 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 02823992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 01907400 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434144.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 01555656 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434144.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 00944328 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 00907464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 00902344 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-16 11:17 - 2015-02-04 05:56 - 00870032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-16 11:16 - 2015-08-16 11:19 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-16 11:11 - 2015-08-16 11:11 - 00000000 ____D C:\NVIDIA
2015-08-15 15:43 - 2015-08-15 15:43 - 00600136 _____ C:\Windows\Minidump\081515-26644-01.dmp
2015-08-15 15:35 - 2015-08-16 11:19 - 00049937 _____ C:\Windows\WindowsUpdate.log
2015-08-15 15:32 - 2015-08-16 12:25 - 00000112 _____ C:\Windows\setupact.log
2015-08-15 15:32 - 2015-08-15 15:32 - 00000000 _____ C:\Windows\setuperr.log
2015-08-15 14:20 - 2015-02-04 04:21 - 06782152 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-15 14:20 - 2015-02-04 04:21 - 03522376 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-08-15 14:20 - 2015-02-04 04:21 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-08-15 14:20 - 2015-02-04 04:21 - 00932040 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-15 14:20 - 2015-02-04 04:21 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-15 14:20 - 2015-02-04 04:21 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-15 13:04 - 2015-08-15 13:06 - 283376896 _____ (NVIDIA Corporation) C:\Users\Harry\Downloads\341.44-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-08-14 14:26 - 2015-08-14 14:26 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Harry\Downloads\tdsskiller.exe
2015-08-14 14:26 - 2015-08-14 14:26 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Harry\Desktop\tdsskiller.exe
2015-08-14 13:43 - 2015-08-14 14:22 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-08-14 13:42 - 2015-08-14 14:22 - 00000000 ____D C:\Users\Harry\Desktop\mbar
2015-08-14 13:41 - 2015-08-14 13:40 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Harry\Desktop\mbar-1.09.1.1004.exe
2015-08-14 13:39 - 2015-08-14 13:40 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Harry\Downloads\mbar-1.09.1.1004.exe
2015-08-14 13:39 - 2015-08-14 13:39 - 00018232 _____ C:\Users\Harry\Desktop\get-mirror-server.html
2015-08-14 13:30 - 2015-08-14 13:30 - 00002120 _____ C:\Users\Harry\AppData\Local\recently-used.xbel
2015-08-13 10:55 - 2015-08-13 10:55 - 00003579 _____ C:\Users\Harry\Desktop\Rene Graeber  Vitalitaet-durch-Heilfasten - Verknüpfung.lnk
2015-08-13 10:24 - 2015-08-13 10:24 - 00002074 _____ C:\Users\Harry\Desktop\BlueScreenView - CHIP Downloader.lnk
2015-08-11 22:45 - 2015-08-11 22:45 - 00001832 _____ C:\Users\Harry\Desktop\gcc.txt
2015-08-11 08:29 - 2015-08-11 08:29 - 00025251 _____ C:\Users\Harry\Desktop\Addition.txt
2015-08-11 08:28 - 2015-08-16 23:46 - 00004752 _____ C:\Users\Harry\Desktop\FRST.txt
2015-08-11 08:27 - 2015-08-16 23:46 - 00000000 ____D C:\FRST
2015-08-11 08:26 - 2015-08-16 23:45 - 02173440 _____ (Farbar) C:\Users\Harry\Desktop\FRST64.exe
2015-08-11 08:25 - 2015-08-11 08:25 - 02171392 _____ (Farbar) C:\Users\Harry\Downloads\FRST64.exe
2015-08-10 15:50 - 2015-08-10 15:50 - 00000135 _____ C:\Windows\SysWOW64\debug.log
2015-08-10 13:20 - 2015-08-10 13:21 - 00000000 ____D C:\Users\Harry\AppData\Roaming\FRISK Software
2015-08-10 13:03 - 2015-08-10 13:03 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-PROT Antivirus for Windows.lnk
2015-08-10 13:03 - 2015-08-10 13:03 - 00002175 _____ C:\Users\Public\Desktop\F-PROT Antivirus for Windows.lnk
2015-08-10 13:03 - 2015-08-10 13:03 - 00000000 ____D C:\ProgramData\FRISK Software
2015-08-10 13:03 - 2015-08-10 13:03 - 00000000 ____D C:\Program Files (x86)\FRISK Software
2015-08-10 13:03 - 2011-11-11 10:24 - 00842144 _____ (FRISK Software International) C:\Windows\system32\Drivers\FPAV_RTP.sys
2015-08-10 12:50 - 2015-08-10 12:54 - 36979200 _____ C:\Users\Harry\Downloads\fpav-windows-x64-hc-en.msi
2015-08-10 12:37 - 2015-08-10 12:54 - 00000000 ____D C:\Users\Harry\Downloads\bluescreenview_v1.55
2015-08-10 12:33 - 2015-08-10 12:36 - 00067310 _____ C:\Users\Harry\Downloads\bluescreenview_v1.55.zip
2015-08-10 12:33 - 2015-08-10 12:34 - 00000000 ____D C:\Users\Harry\AppData\Roaming\Cliqz
2015-08-10 12:33 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-08-10 12:33 - 2011-03-25 20:42 - 00338432 _____ C:\Windows\SysWOW64\sqlite36_engine.dll
2015-08-10 12:32 - 2015-08-10 12:32 - 01199392 _____ C:\Users\Harry\Downloads\BlueScreenView - CHIP-Installer(1).exe
2015-08-10 12:30 - 2015-08-10 12:30 - 01199392 _____ C:\Users\Harry\Downloads\BlueScreenView - CHIP-Installer.exe
2015-08-10 09:37 - 2015-08-10 09:37 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Thunderbird
2015-08-10 09:37 - 2015-08-10 09:37 - 00000000 ____D C:\Users\Admin\AppData\Local\Thunderbird
2015-08-10 09:26 - 2015-08-10 09:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Macromedia
2015-08-10 09:26 - 2015-08-10 09:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Macromedia
2015-08-10 09:22 - 2015-08-16 12:26 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-10 09:21 - 2015-08-14 13:42 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-10 09:21 - 2015-08-10 09:21 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Admin\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-10 09:21 - 2015-08-10 09:21 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-10 09:21 - 2015-08-10 09:21 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-10 09:21 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-10 09:21 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-10 08:59 - 2015-08-10 08:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mozilla
2015-08-10 08:59 - 2015-08-10 08:59 - 00000000 ____D C:\Users\Admin\AppData\Local\Mozilla
2015-08-10 08:57 - 2015-08-10 08:57 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Lexware
2015-08-10 08:57 - 2015-08-10 08:57 - 00000000 ____D C:\Users\Admin\AppData\Local\Lexware
2015-08-07 17:01 - 2015-08-07 17:11 - 00000000 ____D C:\Users\Harry\Documents\LVM
2015-08-04 17:46 - 2015-08-04 17:46 - 00000000 ____D C:\Users\Harry\AppData\Local\calibre-cache
2015-08-04 17:42 - 2015-08-10 08:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-08-04 17:42 - 2015-08-10 08:54 - 00000000 ____D C:\Program Files (x86)\Calibre2
2015-08-04 17:42 - 2015-08-04 17:54 - 00000000 ____D C:\Users\Harry\AppData\Roaming\calibre
2015-08-04 17:28 - 2015-08-04 17:29 - 64798720 _____ C:\Users\Harry\Downloads\calibre-2.33.0.msi
2015-07-28 19:44 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 19:44 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 19:44 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 19:44 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 19:44 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-23 12:28 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-23 12:28 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-23 12:28 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-23 12:28 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-23 12:28 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-20 13:04 - 2015-07-20 13:04 - 09398704 _____ C:\Users\Harry\Bilder 014.xcf
2015-07-20 12:43 - 2015-07-20 12:43 - 01259808 _____ C:\Users\Harry\Downloads\SmartDeblur letzte Freeware Version - CHIP-Installer.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-16 23:43 - 2015-04-23 07:36 - 00000000 ____D C:\Windows\Minidump
2015-08-16 23:40 - 2014-04-08 14:30 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-16 23:35 - 2014-04-20 18:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-16 23:35 - 2014-04-08 14:30 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-16 19:51 - 2009-07-14 06:45 - 00038128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-16 19:51 - 2009-07-14 06:45 - 00038128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-16 12:29 - 2014-04-04 20:35 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-08-16 12:29 - 2014-04-04 20:35 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-08-16 12:29 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-16 12:25 - 2014-04-04 11:07 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-16 12:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-15 15:41 - 2014-07-03 08:38 - 00002247 _____ C:\Users\Admin\Desktop\Google Chrome.lnk
2015-08-15 14:19 - 2014-04-04 11:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-15 14:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2015-08-15 13:19 - 2014-07-23 09:15 - 00000000 ____D C:\Users\Harry\AppData\Local\NVIDIA Corporation
2015-08-15 12:53 - 2014-04-05 17:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-14 13:32 - 2014-05-04 10:09 - 00000000 ____D C:\Users\Harry\.gimp-2.8
2015-08-14 12:57 - 2014-04-04 11:13 - 00022231 _____ C:\Users\Harry\Sti_Trace.log
2015-08-10 15:50 - 2014-04-06 12:52 - 00000000 ____D C:\Users\Harry\AppData\Roaming\Adobe
2015-08-10 13:34 - 2014-04-08 01:25 - 00000000 ____D C:\Users\Harry\Documents\Gesundheit
2015-08-10 13:29 - 2014-04-08 02:07 - 00000000 ____D C:\Users\Harry\Desktop\Desktop Windows XP
2015-08-10 13:03 - 2014-04-04 10:45 - 00000000 ____D C:\Users\Harry
2015-08-10 11:06 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-08-10 08:57 - 2014-07-03 08:39 - 00000000 ____D C:\Users\Admin\AppData\Roaming\.oit
2015-08-10 08:54 - 2015-04-13 22:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-10 08:54 - 2014-07-03 08:38 - 00000000 ____D C:\Users\Admin
2015-08-10 08:54 - 2014-06-29 20:06 - 00000000 ____D C:\Users\Bianca
2015-08-10 08:54 - 2014-04-08 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-10 08:54 - 2014-04-05 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-08-10 08:54 - 2014-04-05 18:42 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-10 08:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-08-10 08:53 - 2014-05-04 23:19 - 00000000 __RHD C:\MSOCache
2015-08-10 01:14 - 2014-04-06 13:02 - 00000000 ____D C:\Users\Harry\AppData\Roaming\.oit
2015-08-10 00:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2015-08-02 13:20 - 2015-04-21 09:40 - 00000000 ____D C:\Users\Harry\Documents\LEONIDAS
2015-07-31 12:01 - 2014-04-08 01:26 - 00000000 ____D C:\Users\Harry\Documents\Karten
2015-07-29 23:34 - 2014-04-05 18:49 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-29 23:34 - 2014-04-05 18:49 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-29 03:01 - 2014-05-09 12:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-25 03:18 - 2009-07-14 06:45 - 00408528 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 13:05 - 2014-05-04 10:20 - 00000000 ____D C:\Users\Harry\AppData\Local\gtk-2.0

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-14 13:30 - 2015-08-14 13:30 - 0002120 _____ () C:\Users\Harry\AppData\Local\recently-used.xbel

Einige Dateien in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Bianca\AppData\Local\Temp\avgnt.exe
C:\Users\Harry\AppData\Local\Temp\avgnt.exe
C:\Users\Harry\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-16 19:41

==================== Ende von Ergebnis ============================

schrauber · 17.08.2015, 14:54

Joah, boote in den Safe Mode, arbeite dort. Kommt dann auch ein Bluescreen?

Michael888 · 17.08.2015, 17:09

Hi schrauber, im abgesicherten Modus (denke das meist du mit Safe Mode) kommt der bluescreen nie, egal wie lange die Kiste läuft.

schrauber · 18.08.2015, 09:59

Dann ist es definitiv Graka oder Treiber. Deinstalliere den Treiber nochmal und installiere mal einen älteren Treiber.

Michael888 · 25.08.2015, 18:33

Hi schrauber, danke für deine Hilfe. Ich habe jetzt mal mit verschiedenen älteren Treibern experimentiert und einen gefunden, bei dem der bluescreen nur ab und an erscheint, wenn die Kiste über Nacht gelaufen ist. Damit kann ich leben. Graka wird überall als einwandfrei gelistet, seltsam...
Gruß

15.08.2015, 06:11	#8
schrauber /// the machine /// TB-Ausbilder	Bluescreen und Absturz Grafikkartentreiber und Software neu installieren, dann bitte ein frisches FRST log. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

16.08.2015, 06:33	#10
schrauber /// the machine /// TB-Ausbilder	Bluescreen und Absturz Lade beim Hersteller den korrekten, aktuellsten Treiber und installiere diesen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

17.08.2015, 14:54	#12
schrauber /// the machine /// TB-Ausbilder	Bluescreen und Absturz Joah, boote in den Safe Mode, arbeite dort. Kommt dann auch ein Bluescreen? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

18.08.2015, 09:59	#14
schrauber /// the machine /// TB-Ausbilder	Bluescreen und Absturz Dann ist es definitiv Graka oder Treiber. Deinstalliere den Treiber nochmal und installiere mal einen älteren Treiber. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Bluescreen und Absturz

Plagegeister aller Art und deren Bekämpfung: Bluescreen und Absturz