Täglich Spam versendet von meiner T-online Email Adresse

whitetrain · 18.08.2015, 17:57

Hallo,
seit 4 Tagen wird von meiner T-Online- E-Mail Adresse spam versendet an Adressen aus meinem Posteingang und Ausgang. Andere Adressen aus meinem Kontakte Ordner sind nicht betroffen sofern in letzter Zeit kein Email Verkehr bestand.

E-Mail Passwort habe ich schon einmal geändert aber der Versand ging weiter.

Auf meinem Rechner läuft Windows 7 mit 32 Bit. Ich benutze Windows Live Mail als Email-Programm, den Internet Explorer und als Virenschutz 360 Total Security und Avira.

Nach dem unten angefügten Fund des Virenscanners, verlaufen weitere Suchläufe auch von Malwarebytes ohne Befund.

FRST Logs hängen unten dran.

Hilfe wäre sehr nett, viele Grüße

-----------------------------------------------------------------------------------------
360 Total Security Scan Log

Scan Time:2015-08-17 14:20:02
Time Taken:00:41:01
Object(s) Scanned:148810
Threat(s) Found:7
Threat(s) Resolved:7

Scan Settings
----------------------
Compressed Files Scan:No
Scan Engine:Bitdefender Engine

Scan Scope
----------------------
Full Scan

Scan Result
======================
High-risk Items
----------------------
C:\ProgramData\Avira\Antivirus\INFECTED\54369cf4.qua Gen:Variant.Zusy.91155 Resolved

System Anomalies
----------------------
Search App by Ask Resolved
IE scripting components modified Resolved
Shortcut to URL:Crewportal via VPN.lnk Need to restart system
Invalid shortcut:About Java.lnk Need to restart system
Invalid shortcut:Check For Updates.lnk Need to restart system
Invalid shortcut:Configure Java.lnk Need to restart system

---------------------------------------------------------------------------------------------
360 Total Security Scan Log

Scan Time:2015-08-17 14:20:02
Time Taken:00:41:01
Object(s) Scanned:148810
Threat(s) Found:7
Threat(s) Resolved:7

Scan Settings
----------------------
Compressed Files Scan:No
Scan Engine:Bitdefender Engine

Scan Scope
----------------------
Full Scan

Scan Result
======================
High-risk Items
----------------------
C:\ProgramData\Avira\Antivirus\INFECTED\54369cf4.qua Gen:Variant.Zusy.91155 Resolved

System Anomalies
----------------------
Search App by Ask Resolved
IE scripting components modified Resolved
Shortcut to URL:Crewportal via VPN.lnk Need to restart system
Invalid shortcut:About Java.lnk Need to restart system
Invalid shortcut:Check For Updates.lnk Need to restart system
Invalid shortcut:Configure Java.lnk Need to restart system

--------------------------------------------------------------------------------------------------------------------------------------------
FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2015
durchgeführt von Felix (Administrator) auf FELIX-PC (18-08-2015 19:04:57)
Gestartet von D:\Users\Felix\Downloads
Geladene Profile: Felix & (Verfügbare Profile: Felix)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Qihu Software Co. Limited) C:\Program Files\360\Total Security\safemon\QHWatchdog.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files\avmwlanstick\FRITZWLANMini.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_18_0_0_232_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
 
 
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 
HKLM\...\Run: [AVMWlanClient] => C:\Program Files\avmwlanstick\FRITZWLANMini.exe [283136 2007-02-02] (AVM Berlin)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM\...\Run: [QHSafeTray] => C:\Program Files\360\Total Security\safemon\QHSafeTray.exe [1032824 2015-07-29] ()
Startup: C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk [2014-09-11]
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
 
==================== Internet (Nicht auf der Ausnahmeliste) ====================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-17] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-17] (Oracle Corporation)
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{AFA41DBB-E45D-4CD2-9336-71FDCE3D2D2A}: [DhcpNameServer] 192.168.178.1
 
FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-07-11] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-17] (Oracle Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
 
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [450808 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 QHActiveDefense; C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe [858744 2015-08-10] (QIHU 360 SOFTWARE CO. LIMITED)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker.sys [121936 2015-07-29] (360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [66128 2015-07-29] (360.cn)
R1 360Box; C:\Windows\System32\DRIVERS\360Box.sys [203856 2015-07-29] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera.sys [34888 2015-07-29] (360.cn)
R1 360SelfProtection; C:\Windows\System32\drivers\360SelfProtection.sys [178384 2015-07-29] (360安全中心)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-06-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [Datei ist nicht signiert]
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-03] (Avira Operations GmbH & Co. KG)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV.sys [174680 2015-07-29] (Qihu 360 Software Co., Ltd.)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R1 EfiMon; C:\Windows\System32\Drivers\Efimon.sys [24296 2015-07-29] (360.cn)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R0 HookPort; C:\Windows\System32\Drivers\Hookport.sys [65872 2015-07-29] (360安全中心)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R1 qutmdserv; C:\Windows\System32\DRIVERS\qutmdrv.sys [292560 2015-07-29] (360.cn)
R1 qutmipc; C:\Windows\system32\drivers\qutmipc.sys [53960 2015-07-29] (360.cn)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-16] (Avira Operations GmbH & Co. KG)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
 
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 
==================== Ein Monat: Erstellte Dateien und Ordner ========
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 
2015-08-18 17:49 - 2015-08-18 19:04 - 00000000 ___DC C:\FRST
2015-08-17 15:50 - 2015-08-18 18:41 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-17 15:50 - 2015-08-17 15:50 - 00001064 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-17 15:50 - 2015-08-17 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-17 15:49 - 2015-08-17 15:50 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 
2015-08-17 15:49 - 2015-08-17 15:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-17 15:49 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-17 15:49 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-17 15:49 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-17 15:08 - 2015-08-18 17:44 - 00000000 _SHDC C:\$360Section
2015-08-17 14:20 - 2015-08-18 17:45 - 00000000 ____D C:\ProgramData\360Quarant
2015-08-17 14:20 - 2015-08-17 14:20 - 00000000 ____D C:\Users\Felix\AppData\Roaming\360safe
2015-08-17 14:19 - 2015-08-17 15:43 - 00000000 ____D C:\ProgramData\360safe
2015-08-17 14:19 - 2015-08-17 15:29 - 00000000 ____D C:\ProgramData\360TotalSecurity
2015-08-17 14:19 - 2015-08-17 14:19 - 00001111 _____ C:\Users\Public\Desktop\360 Total Security.lnk
2015-08-17 14:19 - 2015-08-17 14:19 - 00000000 RSHDC C:\360SANDBOX
2015-08-17 14:19 - 2015-08-17 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
2015-08-17 14:19 - 2015-08-17 14:19 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-17 14:19 - 2015-07-29 08:07 - 00292560 _____ (360.cn) C:\Windows\system32\Drivers\qutmdrv.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00203856 _____ (360.cn) C:\Windows\system32\Drivers\360Box.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00178384 _____ (360安全中心) C:\Windows\system32\Drivers\360SelfProtection.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00174680 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV.SYS
2015-08-17 14:19 - 2015-07-29 08:07 - 00121936 _____ (360.cn) C:\Windows\system32\Drivers\360AntiHacker.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00066128 _____ (360.cn) C:\Windows\system32\Drivers\360AvFlt.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00065872 _____ (360安全中心) C:\Windows\system32\Drivers\hookport.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00053960 _____ (360.cn) C:\Windows\system32\Drivers\qutmipc.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00034888 _____ (360.cn) C:\Windows\system32\Drivers\360Camera.sys
2015-08-17 14:19 - 2015-07-29 08:07 - 00024296 _____ (360.cn) C:\Windows\system32\Drivers\efimon.sys
2015-08-17 14:18 - 2015-08-17 14:18 - 00000000 ____D C:\Program Files\360
2015-08-17 13:30 - 2015-08-17 13:30 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-17 13:05 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-17 13:05 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-17 13:05 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-17 13:05 - 2015-07-16 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-17 13:05 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-17 13:05 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-17 13:05 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-17 13:05 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-17 13:05 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-17 13:05 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-17 13:05 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-17 13:05 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-17 13:05 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-17 13:05 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-17 13:05 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-17 13:05 - 2015-07-16 21:39 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-17 13:05 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-17 13:05 - 2015-07-16 21:32 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-17 13:05 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-17 13:05 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-17 13:05 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-17 13:05 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-17 13:05 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-17 13:05 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-17 13:05 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-17 13:05 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-17 13:05 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-17 13:05 - 2015-07-16 21:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-17 13:05 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-17 13:05 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-17 13:05 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-17 13:05 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-12 11:24 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 11:21 - 2015-07-28 22:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-12 11:21 - 2015-07-28 22:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-12 11:21 - 2015-07-28 22:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-12 11:21 - 2015-07-28 22:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-12 11:21 - 2015-07-28 22:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-12 11:21 - 2015-07-28 22:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-12 11:21 - 2015-07-28 22:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-12 11:21 - 2015-07-28 21:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-12 11:18 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-12 11:18 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-12 11:18 - 2015-07-20 19:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 11:18 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-08-12 11:18 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-12 11:18 - 2015-07-15 19:59 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-12 11:18 - 2015-07-15 19:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-12 11:18 - 2015-07-15 19:59 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-12 11:18 - 2015-07-15 19:56 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-12 11:18 - 2015-07-15 19:55 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-12 11:18 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-12 11:18 - 2015-07-15 19:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-12 11:18 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-12 11:18 - 2015-07-15 19:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-12 11:18 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-12 11:18 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-12 11:18 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-12 11:18 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-12 11:18 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-12 11:18 - 2015-07-15 18:36 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-12 11:18 - 2015-07-15 18:36 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-12 11:18 - 2015-07-15 18:36 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-12 11:18 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-12 11:18 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-12 11:18 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-08-12 11:18 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-12 11:18 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-12 11:18 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-12 11:18 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-12 11:17 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-12 11:17 - 2015-07-30 18:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-12 11:17 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-12 11:17 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-12 11:16 - 2015-07-15 04:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-12 11:16 - 2015-05-09 20:09 - 00715200 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-12 11:15 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-12 11:15 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-12 11:15 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-12 11:15 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-09 12:33 - 2015-08-09 12:33 - 00001068 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2015-08-09 12:33 - 2015-08-09 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-08-09 12:32 - 2015-08-09 12:33 - 00000000 ____D C:\Users\Felix\AppData\Local\Google
2015-08-09 12:32 - 2015-08-09 12:32 - 00000000 ____D C:\Program Files\Google
2015-08-09 09:36 - 2015-08-09 09:36 - 00000000 ____D C:\Users\Felix\AppData\Local\GWX
 
==================== Ein Monat: Geänderte Dateien und Ordner ========
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 
2015-08-18 18:32 - 2014-04-27 10:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-18 17:31 - 2009-07-14 06:34 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-18 17:31 - 2009-07-14 06:34 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-18 17:21 - 2014-04-26 20:35 - 01691202 _____ C:\Windows\WindowsUpdate.log
2015-08-18 17:05 - 2015-04-11 11:06 - 00190734 _____ C:\Windows\PFRO.log
2015-08-18 17:05 - 2015-03-12 10:50 - 00008131 _____ C:\Windows\setupact.log
2015-08-18 17:05 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-17 21:34 - 2014-09-19 20:58 - 00000000 ____D C:\Users\Felix\AppData\Roaming\Skype
2015-08-17 18:59 - 2014-09-19 20:58 - 00000000 ___RD C:\Program Files\Skype
2015-08-17 18:59 - 2014-09-19 20:58 - 00000000 ____D C:\ProgramData\Skype
2015-08-17 18:15 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-08-17 16:03 - 2015-04-27 18:32 - 00000000 ____D C:\ProgramData\APN
2015-08-17 15:08 - 2014-10-31 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-17 14:20 - 2009-07-14 04:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-17 13:32 - 2014-04-27 10:19 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-17 13:32 - 2014-04-27 10:19 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-08-17 13:30 - 2014-10-31 13:22 - 00000000 ____D C:\Program Files\Java
2015-08-17 13:30 - 2014-04-26 22:10 - 00000000 ____D C:\ProgramData\Oracle
2015-08-17 13:28 - 2014-10-31 13:22 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-08-17 13:01 - 2009-07-14 06:33 - 00267856 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-17 13:00 - 2014-12-11 12:50 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-17 13:00 - 2014-05-06 21:57 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-17 13:00 - 2011-04-12 03:29 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2015-08-17 13:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2015-08-12 11:27 - 2014-05-05 09:45 - 00000000 ____D C:\Windows\system32\MRT
2015-08-12 11:25 - 2014-05-05 09:45 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-09 09:36 - 2014-04-26 21:43 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-09 00:16 - 2014-04-27 20:00 - 00000000 ____D C:\Users\Felix\Desktop\Dienstpläne
2015-08-09 00:12 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-09 00:04 - 2014-04-26 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-23 15:27 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-07-20 23:31 - 2014-04-27 19:55 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
 
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 
2014-09-11 15:28 - 2014-09-11 15:28 - 0000057 _____ () C:\ProgramData\Ament.ini
 
Einige Dateien in TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\avgnt.exe
C:\Users\Felix\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Felix\AppData\Local\Temp\SkypeSetup.exe
 
 
==================== Bamital & volsnap =================
 
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 
LastRegBack: 2015-08-09 16:43
 
==================== Ende vom raportu ============================
 
 
 
 
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:17-08-2015
durchgeführt von Felix (2015-08-18 19:05:27)
Gestartet von D:\Users\Felix\Downloads
Start-Modus: Normal
==========================================================
 
 
==================== Konten: =============================
 
Administrator (S-1-5-21-3579242696-1164911454-3869181533-500 - Administrator - Disabled)
Felix (S-1-5-21-3579242696-1164911454-3869181533-1000 - Administrator - Enabled) => C:\Users\Felix
Gast (S-1-5-21-3579242696-1164911454-3869181533-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3579242696-1164911454-3869181533-1002 - Limited - Enabled)
 
==================== Sicherheits-Center ========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: 360 Total Security (Enabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D}
AS: 360 Total Security (Enabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installierte Programme ======================
 
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 
360 Total Security (HKLM\...\360TotalSecurity) (Version: 7.2.0.1012 - 360 Security Center)
Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.11.579 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 1.6.10.1246 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photosmart 5520 series - Grundlegende Software für das Gerät (HKLM\...\{88EFC235-396D-4A12-96AE-48C3451A0F79}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5520 series Hilfe (HKLM\...\{640A03B3-4E6B-4440-A350-E6A8D6348F12}) (Version: 27.0.0 - Hewlett Packard)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3579242696-1164911454-3869181533-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3579242696-1164911454-3869181533-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
PhotoDose 5.1 (HKLM\...\Photo Dose_is1) (Version: - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.140.239 - Google, Inc.)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version: - )
Skype™ 7.7 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
 
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3579242696-1164911454-3869181533-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation)
 
==================== Wiederherstellungspunkte =========================
 
 
==================== Hosts Inhalt: ==========================
 
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
Task: {2861B939-CA44-482D-AB41-7FE6A0D55A0F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {4AAB02AF-2B26-4B95-B4E9-28573A77D5C2} - System32\Tasks\HP AR Program Upload - 0f775db1e2a849d29c99f6a807b8f07e15fc99061cfd4a56b6a762c2515cf042 => C:\Program Files\HP\HP Photosmart 5520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {72AC3730-8921-44E5-84D9-E97243C5C551} - System32\Tasks\HP AR Program Upload - 51263b1f064748a39356d760888d33003fa69ba9b5c844ec9ada424796b1b7f4 => C:\Program Files\HP\HP Photosmart 5520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {8F3B8894-9354-4701-B220-FAD8695F7B9C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-17] (Adobe Systems Incorporated)
Task: {BB2D75E1-0450-4FDE-B920-2E9F04D12129} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {BEAEA2A5-AAC0-4BD0-8B0B-4A78A5956E97} - System32\Tasks\AviraSpeedup => C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe [2015-06-17] (Avira Operations GmbH & Co. KG)
Task: {C4F14C86-AA5C-40EE-B24B-390233A8EE56} - System32\Tasks\HP AR Program Upload - 2c0db314d1a3404fb2b81b7541c473a7cb3cf1cad4ba4963934204aa5d5da0f5 => C:\Program Files\HP\HP Photosmart 5520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {E2DA320D-07F4-45CF-AE8F-F17A276255FA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 
2015-08-17 14:19 - 2015-07-29 08:07 - 00087672 _____ () C:\Program Files\360\Total Security\deepscan\qutmload.dll
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-08-17 14:19 - 2015-07-29 08:07 - 01032824 _____ () C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
2015-08-17 14:19 - 2015-07-29 08:07 - 00559224 _____ () C:\Program Files\360\Total Security\safemon\wdui2.dll
 
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 
==================== Andere Bereiche ============================
 
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3579242696-1164911454-3869181533-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
 
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
FirewallRules: [{AC8E8A81-8EAA-406E-989E-45930AE73ABC}] => (Allow) C:\Users\Felix\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{50EB6132-1524-43BB-A951-2718F9EFB06C}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{96509687-7EFF-4431-AC19-755012AF06DA}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{70A53B9B-B0AB-439B-801D-8BCAC64ED846}] => (Allow) LPort=2869
FirewallRules: [{494FF059-E8B9-4044-A1E8-65618D0F7B16}] => (Allow) LPort=1900
FirewallRules: [{71676D67-9A3E-4169-8C2C-C58FA998CB95}] => (Allow) C:\Windows\System32\taskhost.exe
FirewallRules: [{F0BEE44A-2EDA-4EAD-94B7-974F2BCC0F8E}] => (Allow) C:\Windows\System32\taskhost.exe
FirewallRules: [{FE9D26F3-990B-4516-A1EF-C13DE5D2D57B}] => (Allow) C:\Windows\explorer.exe
FirewallRules: [{115A344D-CF4F-4084-B221-B853BCD8B303}] => (Allow) C:\Windows\explorer.exe
FirewallRules: [TCP Query User{8088A4B6-A6AC-424B-8910-086C6BF7F857}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [UDP Query User{43A19217-8155-4DCA-8FE8-BECDFFBFE750}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [{2196FEA9-2F3A-47A5-A2E2-6C7F67C2A11F}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\DeviceSetup.exe
FirewallRules: [{0475090E-2C69-4AA2-8688-691416BFD0B4}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{93D229C6-F7FA-49C9-84D1-E9A4967C3300}] => (Allow) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{A52433E2-CBA7-4780-800B-BDD1E509C1CA}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AFC2630F-FA6C-4007-B3B0-9BA28A7A9A79}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A51104C0-EFE9-4F53-9BBA-6DDE1738031E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2B8A694A-5B4D-4807-9956-F4EB2483CF33}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{F6FA2FFD-A681-4597-BFEC-442386A10DB7}] => (Allow) C:\Program Files\360\Total Security\LiveUpdate360.exe
FirewallRules: [{F45E018D-2FBC-41B8-8E49-A00C37C74096}] => (Allow) C:\Program Files\360\Total Security\LiveUpdate360.exe
FirewallRules: [{75717E04-F7A1-48F6-B032-8FFDC4AF86FA}] => (Allow) C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{E167D270-6C72-457E-9FEB-5AB55FCFD5E5}] => (Allow) C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
 
==================== Fehlerhafte Geräte im Gerätemanager =============
 
 
==================== Fehlereinträge in der Ereignisanzeige: =========================
 
Applikationsfehler:
==================
Error: (08/18/2015 05:43:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CompatTelRunner.exe, Version: 10.0.10208.0, Zeitstempel: 0x55b60451
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18933, Zeitstempel: 0x55a69d9f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00032228
ID des fehlerhaften Prozesses: 0x4e4
Startzeit der fehlerhaften Anwendung: 0xCompatTelRunner.exe0
Pfad der fehlerhaften Anwendung: CompatTelRunner.exe1
Pfad des fehlerhaften Moduls: CompatTelRunner.exe2
Berichtskennung: CompatTelRunner.exe3
 
Error: (08/18/2015 05:07:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 06:59:10 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Felix-PC)
Description: Die Anwendung oder der Dienst "Windows Defender" konnte nicht heruntergefahren werden.
 
Error: (08/17/2015 04:07:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 03:12:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 03:09:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: apnmcp.exe, Version: 0.0.0.0, Zeitstempel: 0x55357be9
Name des fehlerhaften Moduls: apnmcp.exe, Version: 0.0.0.0, Zeitstempel: 0x55357be9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00016fb2
ID des fehlerhaften Prozesses: 0x620
Startzeit der fehlerhaften Anwendung: 0xapnmcp.exe0
Pfad der fehlerhaften Anwendung: apnmcp.exe1
Pfad des fehlerhaften Moduls: apnmcp.exe2
Berichtskennung: apnmcp.exe3
 
Error: (08/17/2015 01:29:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SoftwareUpdate.exe, Version 2.1.3.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 
Prozess-ID: 10ac
 
Startzeit: 01d0d8dd8bd1141a
 
Endzeit: 243
 
Anwendungspfad: C:\Program Files\Apple Software Update\SoftwareUpdate.exe
 
Berichts-ID: 30d6ae6d-44d3-11e5-bc66-001f3f037b36
 
Error: (08/17/2015 01:03:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/12/2015 10:59:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/11/2015 10:08:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
Systemfehler:
=============
Error: (08/18/2015 06:41:57 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
Error: (08/18/2015 06:31:47 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 252.
 
Error: (08/18/2015 05:15:01 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 252.
 
Error: (08/18/2015 05:05:41 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (08/18/2015 05:05:41 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (08/17/2015 06:18:06 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 252.
 
Error: (08/17/2015 06:18:04 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 252.
 
Error: (08/17/2015 04:05:40 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (08/17/2015 04:05:40 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (08/17/2015 03:16:39 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 20.
 
 
Microsoft Office:
=========================
Error: (08/18/2015 05:43:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CompatTelRunner.exe10.0.10208.055b60451ntdll.dll6.1.7601.1893355a69d9fc0000005000322284e401d0d9c839fc59e5C:\Windows\system32\CompatTelRunner.exeC:\Windows\SYSTEM32\ntdll.dlle078fc89-45bf-11e5-8286-001f3f037b36
 
Error: (08/18/2015 05:07:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 06:59:10 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Felix-PC)
Description: 0svchost.exeWindows Defender03026216152560
 
Error: (08/17/2015 04:07:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 03:12:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/17/2015 03:09:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: apnmcp.exe0.0.0.055357be9apnmcp.exe0.0.0.055357be9c000000500016fb262001d0d8dc1f62c913C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exeC:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe3976b11f-44e1-11e5-bc66-001f3f037b36
 
Error: (08/17/2015 01:29:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SoftwareUpdate.exe2.1.3.12710ac01d0d8dd8bd1141a243C:\Program Files\Apple Software Update\SoftwareUpdate.exe30d6ae6d-44d3-11e5-bc66-001f3f037b36
 
Error: (08/17/2015 01:03:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/12/2015 10:59:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (08/11/2015 10:08:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
==================== Memory info =========================== 
 
Processor: AMD Athlon(tm) II X3 445 Processor
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 1790.18 MB
Verfügbarer physikalischer RAM: 815.19 MB
Summe virtueller Speicher: 3580.35 MB
Verfügbarer virtueller Speicher: 1646.48 MB
 
==================== Laufwerke ================================
 
Drive c: () (Fixed) (Total:37.26 GB) (Free:9.58 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Volume) (Fixed) (Total:894.25 GB) (Free:857.43 GB) NTFS
Drive e: (07 Ağu 2015) (CDROM) (Total:0.06 GB) (Free:0 GB) UDF
 
==================== MBR & Partitionstabelle ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 87978797)
Partition 1: (Active) - (Size=37.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=894.3 GB) - (Type=07 NTFS)
 
==================== Ende vom Log ============================

--- --- ---

schrauber · 18.08.2015, 18:09

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

whitetrain · 18.08.2015, 18:12

Hallo Schrauber,

habe die Logs eben noch angefügt, Du warst zu schnell für mich.

schrauber · 19.08.2015, 07:50

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

whitetrain · 19.08.2015, 09:55

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.2.1008
www.malwarebytes.org

Database version:
  main:    v2015.08.19.01
  rootkit: v2015.08.16.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.17959
Felix :: FELIX-PC [administrator]

19.08.2015 10:01:48
mbar-log-2015-08-19 (10-01-48).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 327134
Time elapsed: 17 minute(s), 3 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Code:

ATTFilter

10:37:57.0720 0x16c8  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
10:38:03.0561 0x16c8  ============================================================
10:38:03.0561 0x16c8  Current date / time: 2015/08/19 10:38:03.0561
10:38:03.0561 0x16c8  SystemInfo:
10:38:03.0561 0x16c8  
10:38:03.0562 0x16c8  OS Version: 6.1.7601 ServicePack: 1.0
10:38:03.0562 0x16c8  Product type: Workstation
10:38:03.0562 0x16c8  ComputerName: FELIX-PC
10:38:03.0563 0x16c8  UserName: Felix
10:38:03.0563 0x16c8  Windows directory: C:\Windows
10:38:03.0563 0x16c8  System windows directory: C:\Windows
10:38:03.0563 0x16c8  Processor architecture: Intel x86
10:38:03.0563 0x16c8  Number of processors: 3
10:38:03.0563 0x16c8  Page size: 0x1000
10:38:03.0563 0x16c8  Boot type: Normal boot
10:38:03.0563 0x16c8  ============================================================
10:38:04.0992 0x16c8  KLMD registered as C:\Windows\system32\drivers\97262323.sys
10:38:05.0683 0x16c8  System UUID: {C892631E-E9F6-F123-1FC3-3F1C6536C382}
10:38:07.0010 0x16c8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
10:38:07.0067 0x16c8  ============================================================
10:38:07.0067 0x16c8  \Device\Harddisk0\DR0:
10:38:07.0067 0x16c8  MBR partitions:
10:38:07.0067 0x16c8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4A852C1
10:38:07.0068 0x16c8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x4A85300, BlocksNum 0x6FC806C1
10:38:07.0068 0x16c8  ============================================================
10:38:07.0082 0x16c8  C: <-> \Device\Harddisk0\DR0\Partition1
10:38:07.0104 0x16c8  D: <-> \Device\Harddisk0\DR0\Partition2
10:38:07.0104 0x16c8  ============================================================
10:38:07.0105 0x16c8  Initialize success
10:38:07.0105 0x16c8  ============================================================
10:39:49.0354 0x076c  ============================================================
10:39:49.0354 0x076c  Scan started
10:39:49.0354 0x076c  Mode: Manual; SigCheck; TDLFS; 
10:39:49.0354 0x076c  ============================================================
10:39:49.0354 0x076c  KSN ping started
10:40:02.0878 0x076c  KSN ping finished: true
10:40:03.0602 0x076c  ================ Scan system memory ========================
10:40:03.0602 0x076c  System memory - ok
10:40:03.0602 0x076c  ================ Scan services =============================
10:40:03.0756 0x076c  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
10:40:03.0848 0x076c  1394ohci - ok
10:40:03.0880 0x076c  [ 148925140F53F63C8D1C991806F1E7EC, 2673E05B0D03A2159BE73BF65C19195F20B0B8B926E7AB5FF2EABFE7C456D004 ] 360AntiHacker   C:\Windows\system32\Drivers\360AntiHacker.sys
10:40:03.0900 0x076c  360AntiHacker - ok
10:40:03.0928 0x076c  [ 53C05C1714177E3D1C548753E0691531, 6F1CF9133128F46098A17F965A507F9D1DE7A00887F5FCBF409DB47EA42AE93C ] 360AvFlt        C:\Windows\system32\DRIVERS\360AvFlt.sys
10:40:03.0941 0x076c  360AvFlt - ok
10:40:03.0967 0x076c  [ 0C29455EBB4A8A8EE4E99833447570BA, A090A368ABB7121AE357A8706FC907FC8F61F789B6E0C89053DD50ACC91FF162 ] 360Box          C:\Windows\system32\DRIVERS\360Box.sys
10:40:03.0984 0x076c  360Box - ok
10:40:04.0000 0x076c  [ 2255330A69644F179D0438666EEF1861, 29D10CBD372001332B49CD6248F7DFEDB7A707C8281AFFFFEE6F971D679A4973 ] 360Camera       C:\Windows\system32\Drivers\360Camera.sys
10:40:04.0013 0x076c  360Camera - ok
10:40:04.0023 0x076c  [ 637E29711905C87A49F4F367F50770B0, 9C48355773678BCE6F61BE69BD95C09C56F955C19095329086A0D9AC66D504C1 ] 360SelfProtection C:\Windows\system32\drivers\360SelfProtection.sys
10:40:04.0040 0x076c  360SelfProtection - ok
10:40:04.0075 0x076c  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
10:40:04.0093 0x076c  ACPI - ok
10:40:04.0110 0x076c  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
10:40:04.0149 0x076c  AcpiPmi - ok
10:40:04.0222 0x076c  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
10:40:04.0262 0x076c  AdobeARMservice - ok
10:40:04.0345 0x076c  [ 368290D0A612D62DA6F3D798B1BB8FE7, D573BF8543F37BC51B88A2473EDFD28AFBCCC446E8CADD54A90FA48D8739D222 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:40:04.0371 0x076c  AdobeFlashPlayerUpdateSvc - ok
10:40:04.0419 0x076c  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
10:40:04.0442 0x076c  adp94xx - ok
10:40:04.0459 0x076c  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\drivers\adpahci.sys
10:40:04.0480 0x076c  adpahci - ok
10:40:04.0500 0x076c  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\drivers\adpu320.sys
10:40:04.0516 0x076c  adpu320 - ok
10:40:04.0542 0x076c  [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
10:40:04.0574 0x076c  AeLookupSvc - ok
10:40:04.0616 0x076c  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys
10:40:04.0656 0x076c  AFD - ok
10:40:04.0680 0x076c  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
10:40:04.0693 0x076c  agp440 - ok
10:40:04.0702 0x076c  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
10:40:04.0716 0x076c  aic78xx - ok
10:40:04.0744 0x076c  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
10:40:04.0771 0x076c  ALG - ok
10:40:04.0794 0x076c  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
10:40:04.0807 0x076c  aliide - ok
10:40:04.0838 0x076c  [ B19505648F033393E907E2E419FDE8B3, BEF76AAD61FE0CA1F2B91C491FD94DE1BE67E776BBB7972D57ADFBE0333E9615 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
10:40:04.0866 0x076c  AMD External Events Utility - ok
10:40:04.0888 0x076c  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
10:40:04.0901 0x076c  amdagp - ok
10:40:04.0908 0x076c  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
10:40:04.0922 0x076c  amdide - ok
10:40:04.0942 0x076c  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
10:40:04.0968 0x076c  AmdK8 - ok
10:40:04.0990 0x076c  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
10:40:05.0008 0x076c  AmdPPM - ok
10:40:05.0033 0x076c  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
10:40:05.0048 0x076c  amdsata - ok
10:40:05.0059 0x076c  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
10:40:05.0076 0x076c  amdsbs - ok
10:40:05.0084 0x076c  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
10:40:05.0097 0x076c  amdxata - ok
10:40:05.0175 0x076c  [ 3358CAD1887DDDDD2A36B7796B579292, 40BA1A836276C2AA78914F294661C3C918F2D6DFAA9D6EF3FEB6D1EE3B07F584 ] AntiVirMailService C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe
10:40:05.0208 0x076c  AntiVirMailService - ok
10:40:05.0234 0x076c  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
10:40:05.0256 0x076c  AntiVirSchedulerService - ok
10:40:05.0276 0x076c  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
10:40:05.0298 0x076c  AntiVirService - ok
10:40:05.0339 0x076c  [ 6FD5165364D88FDABE4FA59E1768376F, B82D11E6FCC297F822E29A49D46C9985955C9F5676D107A397B00D0468F93504 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
10:40:05.0380 0x076c  AntiVirWebService - ok
10:40:05.0414 0x076c  [ 81F97D8F8B3FB94A451CC6F7CF8B2965, 8DEBA4E47E1016D69740C0BB7CDD23852D86E0D42C1C1EA5A847ECB115C38CB1 ] AppID           C:\Windows\system32\drivers\appid.sys
10:40:05.0451 0x076c  AppID - ok
10:40:05.0471 0x076c  [ F5090F8FA6757C58E17BAEAA86093636, 5E14CF3032DF5801240F45C59AA93962EA41AA5648A0C6458D16D9B9D95A131F ] AppIDSvc        C:\Windows\System32\appidsvc.dll
10:40:05.0488 0x076c  AppIDSvc - ok
10:40:05.0515 0x076c  [ 530195DA0D84D9855020F2B80D6B267F, AB36F05991530437C7B3F25441B13BC085000F07579964A4CCA0BF029DD6DE7E ] Appinfo         C:\Windows\System32\appinfo.dll
10:40:05.0540 0x076c  Appinfo - ok
10:40:05.0601 0x076c  [ D2B87FC03BE28CD0B33C2B5C1119FD8E, 97EB74CB7F62C0D06D45CB250E3A90657A0F107C2FC20738FF6B2C87B0240080 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
10:40:05.0640 0x076c  Apple Mobile Device - ok
10:40:05.0666 0x076c  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\drivers\arc.sys
10:40:05.0688 0x076c  arc - ok
10:40:05.0703 0x076c  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
10:40:05.0718 0x076c  arcsas - ok
10:40:05.0775 0x076c  [ 537B2948976F5D9B5767B74A63EBB395, 1A14F8B582E74AD15B612EDA5B707AA3CB0B2A107ED14572B4232EAA7383B634 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:40:05.0805 0x076c  aspnet_state - ok
10:40:05.0828 0x076c  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
10:40:05.0897 0x076c  AsyncMac - ok
10:40:05.0920 0x076c  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
10:40:05.0934 0x076c  atapi - ok
10:40:06.0131 0x076c  [ 04F09923A393E4E0E8453A8F78361E73, B5C0B9D1195B87AF823887AD9355CD2B4C4F4DDF34103891EE48EA86F0F544E7 ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
10:40:06.0278 0x076c  atikmdag - ok
10:40:06.0323 0x076c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:40:06.0351 0x076c  AudioEndpointBuilder - ok
10:40:06.0365 0x076c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
10:40:06.0393 0x076c  Audiosrv - ok
10:40:06.0421 0x076c  [ 18FB1022DAFC9036ADA9ECF432FAFD06, AFA23C96BDAE15DF4AB32F4CCA04A9D5C5C242E704DC12237CBF57757EBC35AE ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
10:40:06.0436 0x076c  avgntflt - ok
10:40:06.0450 0x076c  [ 062494C204553210FFC0FC33EA58EB36, 2A02003334D3F736907E743C5AB04604228E89DD918E060CCA346F8E739BEB16 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
10:40:06.0466 0x076c  avipbb - ok
10:40:06.0544 0x076c  [ 4B3DBF1CEBE1B2346BF2F8D2251F641A, CDC5BCA35BE658007E29E94E7FBFAA499B50929E738A12904397D16268C6FBAE ] Avira.ServiceHost C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
10:40:06.0562 0x076c  Avira.ServiceHost - ok
10:40:06.0575 0x076c  [ F80F5DCA8A5D9D93CC5BE933D20CAF05, 2AFBB2D62127FACBCABBB3E78F3568A6BA016ED4A97A1490BAA29A1EFB7A4408 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
10:40:06.0589 0x076c  avkmgr - ok
10:40:06.0620 0x076c  [ 263CF9D248FD5E020A1333ED4F7EAA88, 04F944C2B284172A7917389A83C525FA9A3ACB026F370EB886B48759FE81A5E1 ] avmeject        C:\Windows\system32\drivers\avmeject.sys
10:40:06.0633 0x076c  avmeject - detected UnsignedFile.Multi.Generic ( 1 )
10:40:09.0046 0x076c  Detect skipped due to KSN trusted
10:40:09.0046 0x076c  avmeject - ok
10:40:09.0083 0x076c  [ 3303FB85532093FC6723632B5947E8C4, F8301069A8EAD7303CAE5B7CAE3F119747E7B7B4402178018EB5254087238A42 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
10:40:09.0131 0x076c  avnetflt - ok
10:40:09.0175 0x076c  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
10:40:09.0234 0x076c  AxInstSV - ok
10:40:09.0280 0x076c  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\drivers\bxvbdx.sys
10:40:09.0318 0x076c  b06bdrv - ok
10:40:09.0345 0x076c  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
10:40:09.0370 0x076c  b57nd60x - ok
10:40:09.0398 0x076c  [ 1D5B0522D4B1B0BA3E81C6D7F86C3058, 9C06365CEF8E6A14AA2C518FF46550CC626E1CE7464F80EE7A8A24C490609BC7 ] BAPIDRV         C:\Windows\system32\DRIVERS\BAPIDRV.sys
10:40:09.0414 0x076c  BAPIDRV - ok
10:40:09.0447 0x076c  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
10:40:09.0473 0x076c  BDESVC - ok
10:40:09.0494 0x076c  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
10:40:09.0521 0x076c  Beep - ok
10:40:09.0549 0x076c  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
10:40:09.0584 0x076c  BFE - ok
10:40:09.0612 0x076c  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
10:40:09.0703 0x076c  BITS - ok
10:40:09.0719 0x076c  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
10:40:09.0737 0x076c  blbdrive - ok
10:40:09.0804 0x076c  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:40:09.0824 0x076c  Bonjour Service - ok
10:40:09.0868 0x076c  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
10:40:09.0916 0x076c  bowser - ok
10:40:09.0925 0x076c  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
10:40:09.0952 0x076c  BrFiltLo - ok
10:40:09.0970 0x076c  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
10:40:09.0989 0x076c  BrFiltUp - ok
10:40:10.0018 0x076c  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
10:40:10.0050 0x076c  Browser - ok
10:40:10.0070 0x076c  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
10:40:10.0106 0x076c  Brserid - ok
10:40:10.0123 0x076c  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
10:40:10.0145 0x076c  BrSerWdm - ok
10:40:10.0165 0x076c  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
10:40:10.0182 0x076c  BrUsbMdm - ok
10:40:10.0188 0x076c  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
10:40:10.0210 0x076c  BrUsbSer - ok
10:40:10.0225 0x076c  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
10:40:10.0243 0x076c  BTHMODEM - ok
10:40:10.0267 0x076c  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
10:40:10.0296 0x076c  bthserv - ok
10:40:10.0315 0x076c  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
10:40:10.0352 0x076c  cdfs - ok
10:40:10.0383 0x076c  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
10:40:10.0408 0x076c  cdrom - ok
10:40:10.0431 0x076c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
10:40:10.0458 0x076c  CertPropSvc - ok
10:40:10.0479 0x076c  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\drivers\circlass.sys
10:40:10.0497 0x076c  circlass - ok
10:40:10.0519 0x076c  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\Windows\system32\CLFS.sys
10:40:10.0538 0x076c  CLFS - ok
10:40:10.0580 0x076c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:40:10.0594 0x076c  clr_optimization_v2.0.50727_32 - ok
10:40:10.0618 0x076c  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:40:10.0637 0x076c  clr_optimization_v4.0.30319_32 - ok
10:40:10.0650 0x076c  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
10:40:10.0679 0x076c  CmBatt - ok
10:40:10.0707 0x076c  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
10:40:10.0720 0x076c  cmdide - ok
10:40:10.0748 0x076c  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG             C:\Windows\system32\Drivers\cng.sys
10:40:10.0778 0x076c  CNG - ok
10:40:10.0795 0x076c  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
10:40:10.0808 0x076c  Compbatt - ok
10:40:10.0837 0x076c  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
10:40:10.0855 0x076c  CompositeBus - ok
10:40:10.0869 0x076c  COMSysApp - ok
10:40:10.0882 0x076c  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
10:40:10.0895 0x076c  crcdisk - ok
10:40:10.0920 0x076c  [ 33F67BBCC3C0499D3F3382473114CFA8, FDDCC41CE005B7C1BEBB6F4ACA9A3F10E5972792ADFD7D294E70A0B781460981 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
10:40:10.0945 0x076c  CryptSvc - ok
10:40:10.0965 0x076c  [ B5ECADF7708960F1818C7FA015F4C239, A58BA71B08A9D46EB79EB3DF0858F553A11DE3461E13B6D926E25D21D4CBB2D8 ] CVirtA          C:\Windows\system32\DRIVERS\CVirtA.sys
10:40:10.0989 0x076c  CVirtA - ok
10:40:11.0020 0x076c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
10:40:11.0067 0x076c  DcomLaunch - ok
10:40:11.0099 0x076c  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
10:40:11.0132 0x076c  defragsvc - ok
10:40:11.0149 0x076c  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
10:40:11.0186 0x076c  DfsC - ok
10:40:11.0213 0x076c  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
10:40:11.0245 0x076c  Dhcp - ok
10:40:11.0348 0x076c  [ 7AB2DE012C88870C9274E966EC88AB61, CE2098B152B9C039C29C0573C813BFBF13B2D2E6BEE83985374160884A817133 ] DiagTrack       C:\Windows\system32\diagtrack.dll
10:40:11.0417 0x076c  DiagTrack - ok
10:40:11.0429 0x076c  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
10:40:11.0465 0x076c  discache - ok
10:40:11.0488 0x076c  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\drivers\disk.sys
10:40:11.0502 0x076c  Disk - ok
10:40:11.0531 0x076c  [ B5AA5AA5AC327BD7C1AEC0C58F0C1144, 14C147B79786C5DCEC54AF191E8815D871906E30DE90B00C7929F0E6CC025E6A ] DNE             C:\Windows\system32\DRIVERS\dne2000.sys
10:40:11.0545 0x076c  DNE - ok
10:40:11.0573 0x076c  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
10:40:11.0605 0x076c  Dnscache - ok
10:40:11.0630 0x076c  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
10:40:11.0660 0x076c  dot3svc - ok
10:40:11.0677 0x076c  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
10:40:11.0711 0x076c  DPS - ok
10:40:11.0755 0x076c  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
10:40:11.0809 0x076c  drmkaud - ok
10:40:11.0851 0x076c  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
10:40:11.0889 0x076c  DXGKrnl - ok
10:40:11.0908 0x076c  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
10:40:11.0949 0x076c  EapHost - ok
10:40:12.0073 0x076c  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\drivers\evbdx.sys
10:40:12.0167 0x076c  ebdrv - ok
10:40:12.0193 0x076c  [ E6104BF5F23AEF2FD23E7271ED1E5D66, D9EE27C724A43D9A17C5201089902208DDB6B58C3E44C06B3ADC4ECA525C6088 ] EfiMon          C:\Windows\system32\Drivers\Efimon.sys
10:40:12.0213 0x076c  EfiMon - ok
10:40:12.0238 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] EFS             C:\Windows\System32\lsass.exe
10:40:12.0264 0x076c  EFS - ok
10:40:12.0346 0x076c  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
10:40:12.0402 0x076c  ehRecvr - ok
10:40:12.0419 0x076c  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
10:40:12.0439 0x076c  ehSched - ok
10:40:12.0475 0x076c  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
10:40:12.0514 0x076c  elxstor - ok
10:40:12.0528 0x076c  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
10:40:12.0555 0x076c  ErrDev - ok
10:40:12.0634 0x076c  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
10:40:12.0715 0x076c  EventSystem - ok
10:40:12.0733 0x076c  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
10:40:12.0772 0x076c  exfat - ok
10:40:12.0789 0x076c  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
10:40:12.0819 0x076c  fastfat - ok
10:40:12.0852 0x076c  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
10:40:12.0893 0x076c  Fax - ok
10:40:12.0913 0x076c  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\drivers\fdc.sys
10:40:12.0935 0x076c  fdc - ok
10:40:12.0949 0x076c  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
10:40:12.0982 0x076c  fdPHost - ok
10:40:12.0998 0x076c  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
10:40:13.0025 0x076c  FDResPub - ok
10:40:13.0032 0x076c  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
10:40:13.0046 0x076c  FileInfo - ok
10:40:13.0051 0x076c  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
10:40:13.0088 0x076c  Filetrace - ok
10:40:13.0103 0x076c  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
10:40:13.0127 0x076c  flpydisk - ok
10:40:13.0145 0x076c  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
10:40:13.0162 0x076c  FltMgr - ok
10:40:13.0207 0x076c  [ 37DE123FE4276D8EC7F3C5B10C236238, 93CA47B9A96D904DD177FC0E04DECDF13756C8FA3C7613913DB4BF29A70ECE96 ] FontCache       C:\Windows\system32\FntCache.dll
10:40:13.0257 0x076c  FontCache - ok
10:40:13.0302 0x076c  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
10:40:13.0315 0x076c  FontCache3.0.0.0 - ok
10:40:13.0329 0x076c  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
10:40:13.0343 0x076c  FsDepends - ok
10:40:13.0362 0x076c  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
10:40:13.0376 0x076c  Fs_Rec - ok
10:40:13.0406 0x076c  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
10:40:13.0426 0x076c  fvevol - ok
10:40:13.0450 0x076c  [ FF12FA487265DA2AC7DE4BE53F72FF1A, 9B9F29CC36D0C7681676F708270038D38CEA21AD82F4937DBDAE45F0D667786E ] FWLANUSB        C:\Windows\system32\DRIVERS\fwlanusb.sys
10:40:13.0477 0x076c  FWLANUSB - ok
10:40:13.0499 0x076c  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
10:40:13.0513 0x076c  gagp30kx - ok
10:40:13.0547 0x076c  [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
10:40:13.0558 0x076c  GEARAspiWDM - ok
10:40:13.0592 0x076c  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll
10:40:13.0634 0x076c  gpsvc - ok
10:40:13.0657 0x076c  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
10:40:13.0692 0x076c  hcw85cir - ok
10:40:13.0718 0x076c  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:40:13.0753 0x076c  HdAudAddService - ok
10:40:13.0791 0x076c  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
10:40:13.0812 0x076c  HDAudBus - ok
10:40:13.0825 0x076c  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
10:40:13.0853 0x076c  HidBatt - ok
10:40:13.0869 0x076c  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\drivers\hidbth.sys
10:40:13.0897 0x076c  HidBth - ok
10:40:13.0913 0x076c  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\drivers\hidir.sys
10:40:13.0931 0x076c  HidIr - ok
10:40:13.0956 0x076c  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
10:40:13.0984 0x076c  hidserv - ok
10:40:14.0025 0x076c  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
10:40:14.0060 0x076c  HidUsb - ok
10:40:14.0083 0x076c  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
10:40:14.0120 0x076c  hkmsvc - ok
10:40:14.0137 0x076c  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:40:14.0167 0x076c  HomeGroupListener - ok
10:40:14.0184 0x076c  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:40:14.0205 0x076c  HomeGroupProvider - ok
10:40:14.0216 0x076c  [ 2EFB89125842BBC686FCEA92B1F1C8EA, 1E622F412918917BB23602E4ABB9DE96123D038AE36546B971962D975BEA608A ] HookPort        C:\Windows\system32\Drivers\Hookport.sys
10:40:14.0229 0x076c  HookPort - ok
10:40:14.0247 0x076c  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
10:40:14.0261 0x076c  HpSAMD - ok
10:40:14.0301 0x076c  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys
10:40:14.0340 0x076c  HTTP - ok
10:40:14.0351 0x076c  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
10:40:14.0364 0x076c  hwpolicy - ok
10:40:14.0384 0x076c  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
10:40:14.0413 0x076c  i8042prt - ok
10:40:14.0439 0x076c  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
10:40:14.0460 0x076c  iaStorV - ok
10:40:14.0519 0x076c  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:40:14.0553 0x076c  idsvc - ok
10:40:14.0577 0x076c  IEEtwCollectorService - ok
10:40:14.0628 0x076c  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\drivers\iirsp.sys
10:40:14.0641 0x076c  iirsp - ok
10:40:14.0682 0x076c  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
10:40:14.0715 0x076c  IKEEXT - ok
10:40:14.0745 0x076c  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
10:40:14.0758 0x076c  intelide - ok
10:40:14.0773 0x076c  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\drivers\intelppm.sys
10:40:14.0791 0x076c  intelppm - ok
10:40:14.0816 0x076c  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
10:40:14.0856 0x076c  IPBusEnum - ok
10:40:14.0867 0x076c  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:40:14.0895 0x076c  IpFilterDriver - ok
10:40:14.0927 0x076c  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
10:40:14.0968 0x076c  iphlpsvc - ok
10:40:14.0992 0x076c  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
10:40:15.0012 0x076c  IPMIDRV - ok
10:40:15.0022 0x076c  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
10:40:15.0058 0x076c  IPNAT - ok
10:40:15.0147 0x076c  [ FB7679FD086C60597F8C6929FF66FAC2, 6333339CB052D2A64CFBE5916D6D8F2A4D6CA84A31B549F70733A91F3C4D6EB8 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
10:40:15.0176 0x076c  iPod Service - ok
10:40:15.0195 0x076c  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
10:40:15.0222 0x076c  IRENUM - ok
10:40:15.0268 0x076c  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
10:40:15.0282 0x076c  isapnp - ok
10:40:15.0307 0x076c  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
10:40:15.0326 0x076c  iScsiPrt - ok
10:40:15.0341 0x076c  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
10:40:15.0355 0x076c  kbdclass - ok
10:40:15.0369 0x076c  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
10:40:15.0387 0x076c  kbdhid - ok
10:40:15.0405 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] KeyIso          C:\Windows\system32\lsass.exe
10:40:15.0422 0x076c  KeyIso - ok
10:40:15.0446 0x076c  [ 48732BFA0C692BEC15DBBFE754E594C6, A39DD1181CF51534C18C2ECFE02E961363769482BAF9F206E57B014C5B246921 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
10:40:15.0468 0x076c  KSecDD - ok
10:40:15.0498 0x076c  [ 46B1F590C06AF25BCADCCAE0148C2074, 62447A906E5D7D20B3955A1EF99C971F1E0522A7D68C3D2C88EF174A5A5ECD29 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
10:40:15.0514 0x076c  KSecPkg - ok
10:40:15.0535 0x076c  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
10:40:15.0570 0x076c  KtmRm - ok
10:40:15.0610 0x076c  [ 6C32BFEAB708915D6BBF4B20D4F3EF7B, 140516B5D8600DF4C2653E37D672E40D93E021D0883161EB6E4EB5C09E68FB91 ] L1C             C:\Windows\system32\DRIVERS\L1C62x86.sys
10:40:15.0629 0x076c  L1C - ok
10:40:15.0658 0x076c  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
10:40:15.0697 0x076c  LanmanServer - ok
10:40:15.0717 0x076c  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:40:15.0746 0x076c  LanmanWorkstation - ok
10:40:15.0763 0x076c  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
10:40:15.0790 0x076c  lltdio - ok
10:40:15.0815 0x076c  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
10:40:15.0847 0x076c  lltdsvc - ok
10:40:15.0856 0x076c  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
10:40:15.0883 0x076c  lmhosts - ok
10:40:15.0905 0x076c  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
10:40:15.0920 0x076c  LSI_FC - ok
10:40:15.0931 0x076c  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
10:40:15.0946 0x076c  LSI_SAS - ok
10:40:15.0959 0x076c  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
10:40:15.0973 0x076c  LSI_SAS2 - ok
10:40:15.0987 0x076c  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
10:40:16.0002 0x076c  LSI_SCSI - ok
10:40:16.0011 0x076c  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
10:40:16.0049 0x076c  luafv - ok
10:40:16.0089 0x076c  [ FDBDEDB746A33BAFC17394D1960ADEAF, 6280BD2559A3A0D058BAAF0BB3719F4BEE5841EC9901452CB6D8319666901876 ] mbamchameleon   C:\Windows\system32\drivers\mbamchameleon.sys
10:40:16.0104 0x076c  mbamchameleon - ok
10:40:16.0155 0x076c  [ B4CD87E78A01562E3DA67FE1C2779204, 536AC01C53A18E7B43F02F345FC3088C189A2D01F5E060714C0534FE7ECA2356 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
10:40:16.0181 0x076c  MBAMProtector - ok
10:40:16.0274 0x076c  [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService     C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
10:40:16.0316 0x076c  MBAMService - ok
10:40:16.0333 0x076c  [ 490F0F3ED8A970E2BAA38F719242B8F7, 03F902365372639424AB654AEBF6EB2B6B73363275435ADC2D086EAA7112AC3D ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
10:40:16.0346 0x076c  MBAMWebAccessControl - ok
10:40:16.0363 0x076c  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
10:40:16.0391 0x076c  Mcx2Svc - ok
10:40:16.0431 0x076c  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\drivers\megasas.sys
10:40:16.0445 0x076c  megasas - ok
10:40:16.0462 0x076c  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
10:40:16.0481 0x076c  MegaSR - ok
10:40:16.0490 0x076c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
10:40:16.0525 0x076c  MMCSS - ok
10:40:16.0537 0x076c  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
10:40:16.0565 0x076c  Modem - ok
10:40:16.0584 0x076c  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
10:40:16.0602 0x076c  monitor - ok
10:40:16.0630 0x076c  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
10:40:16.0643 0x076c  mouclass - ok
10:40:16.0659 0x076c  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
10:40:16.0676 0x076c  mouhid - ok
10:40:16.0700 0x076c  [ BAD9C0366134BA181514E9263C8CE606, 7976B2D3DC283ACDBC21C7D197C0E2A650E6555F6569283302766B17D736BDB8 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
10:40:16.0715 0x076c  mountmgr - ok
10:40:16.0729 0x076c  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
10:40:16.0744 0x076c  mpio - ok
10:40:16.0754 0x076c  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
10:40:16.0787 0x076c  mpsdrv - ok
10:40:16.0821 0x076c  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
10:40:16.0862 0x076c  MpsSvc - ok
10:40:16.0882 0x076c  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
10:40:16.0911 0x076c  MRxDAV - ok
10:40:16.0939 0x076c  [ FEDAAB6716B44DE8B9EFC14DD9A26215, 765890CDEADF6851C5C9014D12422733D7E7833690F560B94AE2BE9E7E08F130 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
10:40:16.0966 0x076c  mrxsmb - ok
10:40:16.0989 0x076c  [ 77DD652AB8708CDB55FDB7073B868784, AC88E2BFFE3EC62269216FD1B52DA8D85AFD0AF3E69B7B876F531258977BA372 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:40:17.0011 0x076c  mrxsmb10 - ok
10:40:17.0027 0x076c  [ 4ACDB6414918D8920875B00B286E1FBC, 404F5AC75DFD7C5CEF08A8D2FC24CD806941BF2B16FF7BC3BECBEABCBFA1B64A ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:40:17.0046 0x076c  mrxsmb20 - ok
10:40:17.0073 0x076c  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
10:40:17.0086 0x076c  msahci - ok
10:40:17.0112 0x076c  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
10:40:17.0127 0x076c  msdsm - ok
10:40:17.0143 0x076c  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
10:40:17.0164 0x076c  MSDTC - ok
10:40:17.0185 0x076c  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
10:40:17.0219 0x076c  Msfs - ok
10:40:17.0234 0x076c  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
10:40:17.0268 0x076c  mshidkmdf - ok
10:40:17.0284 0x076c  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
10:40:17.0296 0x076c  msisadrv - ok
10:40:17.0323 0x076c  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
10:40:17.0352 0x076c  MSiSCSI - ok
10:40:17.0356 0x076c  msiserver - ok
10:40:17.0382 0x076c  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
10:40:17.0409 0x076c  MSKSSRV - ok
10:40:17.0417 0x076c  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
10:40:17.0451 0x076c  MSPCLOCK - ok
10:40:17.0461 0x076c  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
10:40:17.0490 0x076c  MSPQM - ok
10:40:17.0504 0x076c  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
10:40:17.0521 0x076c  MsRPC - ok
10:40:17.0537 0x076c  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
10:40:17.0550 0x076c  mssmbios - ok
10:40:17.0562 0x076c  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
10:40:17.0597 0x076c  MSTEE - ok
10:40:17.0608 0x076c  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
10:40:17.0626 0x076c  MTConfig - ok
10:40:17.0648 0x076c  [ D48659BB24C48345D926ECB45C1EBDF5, EDEDE58316827530C25F8085F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
10:40:17.0669 0x076c  MTsensor - ok
10:40:17.0680 0x076c  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
10:40:17.0694 0x076c  Mup - ok
10:40:17.0726 0x076c  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
10:40:17.0766 0x076c  napagent - ok
10:40:17.0795 0x076c  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
10:40:17.0820 0x076c  NativeWifiP - ok
10:40:17.0860 0x076c  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
10:40:17.0890 0x076c  NDIS - ok
10:40:17.0907 0x076c  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
10:40:17.0934 0x076c  NdisCap - ok
10:40:17.0957 0x076c  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
10:40:17.0983 0x076c  NdisTapi - ok
10:40:17.0998 0x076c  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
10:40:18.0025 0x076c  Ndisuio - ok
10:40:18.0037 0x076c  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
10:40:18.0065 0x076c  NdisWan - ok
10:40:18.0076 0x076c  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
10:40:18.0102 0x076c  NDProxy - ok
10:40:18.0114 0x076c  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
10:40:18.0142 0x076c  NetBIOS - ok
10:40:18.0156 0x076c  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
10:40:18.0193 0x076c  NetBT - ok
10:40:18.0205 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] Netlogon        C:\Windows\system32\lsass.exe
10:40:18.0222 0x076c  Netlogon - ok
10:40:18.0257 0x076c  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
10:40:18.0291 0x076c  Netman - ok
10:40:18.0319 0x076c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:40:18.0336 0x076c  NetMsmqActivator - ok
10:40:18.0343 0x076c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:40:18.0361 0x076c  NetPipeActivator - ok
10:40:18.0383 0x076c  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
10:40:18.0429 0x076c  netprofm - ok
10:40:18.0436 0x076c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:40:18.0454 0x076c  NetTcpActivator - ok
10:40:18.0460 0x076c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:40:18.0479 0x076c  NetTcpPortSharing - ok
10:40:18.0516 0x076c  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
10:40:18.0530 0x076c  nfrd960 - ok
10:40:18.0555 0x076c  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
10:40:18.0592 0x076c  NlaSvc - ok
10:40:18.0622 0x076c  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
10:40:18.0650 0x076c  Npfs - ok
10:40:18.0667 0x076c  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
10:40:18.0696 0x076c  nsi - ok
10:40:18.0705 0x076c  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
10:40:18.0743 0x076c  nsiproxy - ok
10:40:18.0791 0x076c  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
10:40:18.0851 0x076c  Ntfs - ok
10:40:18.0897 0x076c  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
10:40:18.0995 0x076c  Null - ok
10:40:19.0014 0x076c  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
10:40:19.0033 0x076c  nvraid - ok
10:40:19.0058 0x076c  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
10:40:19.0074 0x076c  nvstor - ok
10:40:19.0095 0x076c  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
10:40:19.0111 0x076c  nv_agp - ok
10:40:19.0122 0x076c  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
10:40:19.0140 0x076c  ohci1394 - ok
10:40:19.0203 0x076c  [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:40:19.0247 0x076c  ose - ok
10:40:19.0279 0x076c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
10:40:19.0330 0x076c  p2pimsvc - ok
10:40:19.0351 0x076c  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
10:40:19.0380 0x076c  p2psvc - ok
10:40:19.0400 0x076c  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
10:40:19.0419 0x076c  Parport - ok
10:40:19.0443 0x076c  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
10:40:19.0457 0x076c  partmgr - ok
10:40:19.0471 0x076c  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
10:40:19.0494 0x076c  Parvdm - ok
10:40:19.0515 0x076c  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\Windows\System32\pcasvc.dll
10:40:19.0555 0x076c  PcaSvc - ok
10:40:19.0577 0x076c  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
10:40:19.0594 0x076c  pci - ok
10:40:19.0620 0x076c  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
10:40:19.0634 0x076c  pciide - ok
10:40:19.0654 0x076c  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
10:40:19.0672 0x076c  pcmcia - ok
10:40:19.0687 0x076c  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
10:40:19.0701 0x076c  pcw - ok
10:40:19.0731 0x076c  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
10:40:19.0774 0x076c  PEAUTH - ok
10:40:19.0848 0x076c  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll
10:40:19.0922 0x076c  pla - ok
10:40:19.0964 0x076c  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
10:40:20.0002 0x076c  PlugPlay - ok
10:40:20.0014 0x076c  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
10:40:20.0032 0x076c  PNRPAutoReg - ok
10:40:20.0051 0x076c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
10:40:20.0074 0x076c  PNRPsvc - ok
10:40:20.0106 0x076c  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
10:40:20.0151 0x076c  PolicyAgent - ok
10:40:20.0172 0x076c  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
10:40:20.0203 0x076c  Power - ok
10:40:20.0222 0x076c  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
10:40:20.0256 0x076c  PptpMiniport - ok
10:40:20.0269 0x076c  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\drivers\processr.sys
10:40:20.0287 0x076c  Processor - ok
10:40:20.0319 0x076c  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll
10:40:20.0355 0x076c  ProfSvc - ok
10:40:20.0371 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] ProtectedStorage C:\Windows\system32\lsass.exe
10:40:20.0389 0x076c  ProtectedStorage - ok
10:40:20.0408 0x076c  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
10:40:20.0438 0x076c  Psched - ok
10:40:20.0648 0x076c  [ A0CFBEE7AA6A546CF2A1102D4499D934, 5C949B05BFDC0EF9F34C22656D0C80CD6D53AC5825D5E50891D5B4D18A8C2353 ] QHActiveDefense C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe
10:40:20.0686 0x076c  QHActiveDefense - ok
10:40:20.0741 0x076c  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\drivers\ql2300.sys
10:40:20.0788 0x076c  ql2300 - ok
10:40:20.0805 0x076c  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
10:40:20.0820 0x076c  ql40xx - ok
10:40:20.0838 0x076c  [ 86AE3C2C621018B70155AFFC1DD763A6, 4B913F0F10B2BD8EB760C7E0764E690DB26E614ADE3FAD09B19CAEFD7553EF1E ] qutmdserv       C:\Windows\system32\DRIVERS\qutmdrv.sys
10:40:20.0857 0x076c  qutmdserv - ok
10:40:20.0876 0x076c  [ C94FD2E64D92D1CEC22604D6802CF86C, 75323FDABB997AB079182EE0FF0E1AA0F7D949416B26E24629703E0844E93789 ] qutmipc         C:\Windows\system32\drivers\qutmipc.sys
10:40:20.0890 0x076c  qutmipc - ok
10:40:20.0910 0x076c  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
10:40:20.0941 0x076c  QWAVE - ok
10:40:20.0959 0x076c  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
10:40:20.0980 0x076c  QWAVEdrv - ok
10:40:20.0991 0x076c  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
10:40:21.0018 0x076c  RasAcd - ok
10:40:21.0040 0x076c  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
10:40:21.0069 0x076c  RasAgileVpn - ok
10:40:21.0084 0x076c  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
10:40:21.0113 0x076c  RasAuto - ok
10:40:21.0123 0x076c  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
10:40:21.0151 0x076c  Rasl2tp - ok
10:40:21.0180 0x076c  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
10:40:21.0219 0x076c  RasMan - ok
10:40:21.0233 0x076c  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
10:40:21.0261 0x076c  RasPppoe - ok
10:40:21.0288 0x076c  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
10:40:21.0325 0x076c  RasSstp - ok
10:40:21.0345 0x076c  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
10:40:21.0382 0x076c  rdbss - ok
10:40:21.0394 0x076c  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
10:40:21.0413 0x076c  rdpbus - ok
10:40:21.0424 0x076c  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
10:40:21.0450 0x076c  RDPCDD - ok
10:40:21.0469 0x076c  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
10:40:21.0503 0x076c  RDPENCDD - ok
10:40:21.0517 0x076c  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
10:40:21.0543 0x076c  RDPREFMP - ok
10:40:21.0565 0x076c  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
10:40:21.0600 0x076c  RDPWD - ok
10:40:21.0628 0x076c  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
10:40:21.0645 0x076c  rdyboost - ok
10:40:21.0665 0x076c  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
10:40:21.0702 0x076c  RemoteAccess - ok
10:40:21.0723 0x076c  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
10:40:21.0760 0x076c  RemoteRegistry - ok
10:40:21.0778 0x076c  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
10:40:21.0808 0x076c  RpcEptMapper - ok
10:40:21.0828 0x076c  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
10:40:21.0847 0x076c  RpcLocator - ok
10:40:21.0870 0x076c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll
10:40:21.0905 0x076c  RpcSs - ok
10:40:21.0937 0x076c  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
10:40:21.0975 0x076c  rspndr - ok
10:40:21.0988 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] SamSs           C:\Windows\system32\lsass.exe
10:40:22.0005 0x076c  SamSs - ok
10:40:22.0020 0x076c  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
10:40:22.0035 0x076c  sbp2port - ok
10:40:22.0055 0x076c  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
10:40:22.0087 0x076c  SCardSvr - ok
10:40:22.0099 0x076c  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
10:40:22.0126 0x076c  scfilter - ok
10:40:22.0156 0x076c  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll
10:40:22.0201 0x076c  Schedule - ok
10:40:22.0214 0x076c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
10:40:22.0242 0x076c  SCPolicySvc - ok
10:40:22.0258 0x076c  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
10:40:22.0290 0x076c  SDRSVC - ok
10:40:22.0311 0x076c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
10:40:22.0344 0x076c  secdrv - ok
10:40:22.0358 0x076c  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
10:40:22.0388 0x076c  seclogon - ok
10:40:22.0393 0x076c  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
10:40:22.0423 0x076c  SENS - ok
10:40:22.0435 0x076c  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
10:40:22.0462 0x076c  SensrSvc - ok
10:40:22.0484 0x076c  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
10:40:22.0501 0x076c  Serenum - ok
10:40:22.0528 0x076c  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
10:40:22.0551 0x076c  Serial - ok
10:40:22.0566 0x076c  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\drivers\sermouse.sys
10:40:22.0583 0x076c  sermouse - ok
10:40:22.0602 0x076c  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
10:40:22.0632 0x076c  SessionEnv - ok
10:40:22.0648 0x076c  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
10:40:22.0672 0x076c  sffdisk - ok
10:40:22.0685 0x076c  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
10:40:22.0708 0x076c  sffp_mmc - ok
10:40:22.0720 0x076c  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
10:40:22.0746 0x076c  sffp_sd - ok
10:40:22.0758 0x076c  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
10:40:22.0775 0x076c  sfloppy - ok
10:40:22.0802 0x076c  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
10:40:22.0836 0x076c  SharedAccess - ok
10:40:22.0860 0x076c  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:40:22.0897 0x076c  ShellHWDetection - ok
10:40:22.0922 0x076c  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
10:40:22.0937 0x076c  sisagp - ok
10:40:22.0957 0x076c  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
10:40:22.0971 0x076c  SiSRaid2 - ok
10:40:22.0987 0x076c  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
10:40:23.0003 0x076c  SiSRaid4 - ok
10:40:23.0071 0x076c  [ E6035ADBA3F13ACF1BEDA7B5D50FDBBB, A840D072395F2394E3B55A080F8F17CC3A02E8BCAFE8B8EC0374ECA1EFF05C23 ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
10:40:23.0097 0x076c  SkypeUpdate - ok
10:40:23.0114 0x076c  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
10:40:23.0150 0x076c  Smb - ok
10:40:23.0177 0x076c  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
10:40:23.0196 0x076c  SNMPTRAP - ok
10:40:23.0216 0x076c  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
10:40:23.0229 0x076c  spldr - ok
10:40:23.0260 0x076c  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe
10:40:23.0303 0x076c  Spooler - ok
10:40:23.0400 0x076c  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
10:40:23.0511 0x076c  sppsvc - ok
10:40:23.0530 0x076c  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
10:40:23.0567 0x076c  sppuinotify - ok
10:40:23.0604 0x076c  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
10:40:23.0647 0x076c  srv - ok
10:40:23.0669 0x076c  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
10:40:23.0704 0x076c  srv2 - ok
10:40:23.0719 0x076c  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
10:40:23.0738 0x076c  srvnet - ok
10:40:23.0764 0x076c  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
10:40:23.0797 0x076c  SSDPSRV - ok
10:40:23.0815 0x076c  [ 424566865D82AA4BD8D6546C1F2065FA, 37B4C04C7C0EE0F3347A9E9F35B095478299F7324CA87AAE487BF989B0E6AE03 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys
10:40:23.0829 0x076c  ssmdrv - ok
10:40:23.0839 0x076c  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
10:40:23.0877 0x076c  SstpSvc - ok
10:40:23.0894 0x076c  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\drivers\stexstor.sys
10:40:23.0907 0x076c  stexstor - ok
10:40:23.0941 0x076c  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
10:40:23.0974 0x076c  StiSvc - ok
10:40:23.0984 0x076c  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
10:40:23.0997 0x076c  swenum - ok
10:40:24.0027 0x076c  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
10:40:24.0071 0x076c  swprv - ok
10:40:24.0123 0x076c  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain         C:\Windows\system32\sysmain.dll
10:40:24.0176 0x076c  SysMain - ok
10:40:24.0195 0x076c  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
10:40:24.0227 0x076c  TabletInputService - ok
10:40:24.0255 0x076c  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
10:40:24.0289 0x076c  TapiSrv - ok
10:40:24.0301 0x076c  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
10:40:24.0332 0x076c  TBS - ok
10:40:24.0383 0x076c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
10:40:24.0430 0x076c  Tcpip - ok
10:40:24.0479 0x076c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
10:40:24.0520 0x076c  TCPIP6 - ok
10:40:24.0554 0x076c  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
10:40:24.0582 0x076c  tcpipreg - ok
10:40:24.0611 0x076c  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
10:40:24.0642 0x076c  TDPIPE - ok
10:40:24.0652 0x076c  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
10:40:24.0671 0x076c  TDTCP - ok
10:40:24.0702 0x076c  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
10:40:24.0727 0x076c  tdx - ok
10:40:24.0743 0x076c  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
10:40:24.0757 0x076c  TermDD - ok
10:40:24.0793 0x076c  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
10:40:24.0834 0x076c  TermService - ok
10:40:24.0856 0x076c  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
10:40:24.0879 0x076c  Themes - ok
10:40:24.0889 0x076c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
10:40:24.0918 0x076c  THREADORDER - ok
10:40:24.0934 0x076c  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
10:40:24.0984 0x076c  TrkWks - ok
10:40:25.0027 0x076c  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:40:25.0059 0x076c  TrustedInstaller - ok
10:40:25.0090 0x076c  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
10:40:25.0108 0x076c  tssecsrv - ok
10:40:25.0119 0x076c  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
10:40:25.0148 0x076c  TsUsbFlt - ok
10:40:25.0169 0x076c  [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
10:40:25.0186 0x076c  TsUsbGD - ok
10:40:25.0207 0x076c  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
10:40:25.0247 0x076c  tunnel - ok
10:40:25.0258 0x076c  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
10:40:25.0272 0x076c  uagp35 - ok
10:40:25.0287 0x076c  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
10:40:25.0331 0x076c  udfs - ok
10:40:25.0358 0x076c  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
10:40:25.0379 0x076c  UI0Detect - ok
10:40:25.0401 0x076c  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
10:40:25.0417 0x076c  uliagpkx - ok
10:40:25.0435 0x076c  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
10:40:25.0463 0x076c  umbus - ok
10:40:25.0478 0x076c  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\drivers\umpass.sys
10:40:25.0496 0x076c  UmPass - ok
10:40:25.0513 0x076c  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
10:40:25.0559 0x076c  upnphost - ok
10:40:25.0598 0x076c  [ EC1C23779BB41A8B2AB2AA6FCE308BDE, D027A2B472CAE97AECB16F69BE52E06CB61E1C61AE196C22662050B711C1C72D ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys
10:40:25.0628 0x076c  USBAAPL - ok
10:40:25.0653 0x076c  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
10:40:25.0681 0x076c  usbccgp - ok
10:40:25.0692 0x076c  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
10:40:25.0712 0x076c  usbcir - ok
10:40:25.0748 0x076c  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
10:40:25.0766 0x076c  usbehci - ok
10:40:25.0786 0x076c  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
10:40:25.0810 0x076c  usbhub - ok
10:40:25.0824 0x076c  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
10:40:25.0842 0x076c  usbohci - ok
10:40:25.0863 0x076c  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
10:40:25.0888 0x076c  usbprint - ok
10:40:25.0909 0x076c  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
10:40:25.0932 0x076c  usbscan - ok
10:40:25.0945 0x076c  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:40:25.0969 0x076c  USBSTOR - ok
10:40:25.0979 0x076c  [ 78780C3EBCE17405B1CCD07A3A8A7D72, FBFF3111E22EE0B4BCAFA81F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
10:40:25.0997 0x076c  usbuhci - ok
10:40:26.0016 0x076c  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
10:40:26.0045 0x076c  UxSms - ok
10:40:26.0054 0x076c  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] VaultSvc        C:\Windows\system32\lsass.exe
10:40:26.0072 0x076c  VaultSvc - ok
10:40:26.0096 0x076c  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
10:40:26.0111 0x076c  vdrvroot - ok
10:40:26.0136 0x076c  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
10:40:26.0175 0x076c  vds - ok
10:40:26.0182 0x076c  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
10:40:26.0209 0x076c  vga - ok
10:40:26.0214 0x076c  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
10:40:26.0242 0x076c  VgaSave - ok
10:40:26.0250 0x076c  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
10:40:26.0268 0x076c  vhdmp - ok
10:40:26.0279 0x076c  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
10:40:26.0295 0x076c  viaagp - ok
10:40:26.0303 0x076c  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\drivers\viac7.sys
10:40:26.0331 0x076c  ViaC7 - ok
10:40:26.0353 0x076c  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
10:40:26.0366 0x076c  viaide - ok
10:40:26.0381 0x076c  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
10:40:26.0399 0x076c  volmgr - ok
10:40:26.0425 0x076c  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
10:40:26.0446 0x076c  volmgrx - ok
10:40:26.0468 0x076c  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
10:40:26.0488 0x076c  volsnap - ok
10:40:26.0502 0x076c  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
10:40:26.0521 0x076c  vsmraid - ok
10:40:26.0557 0x076c  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
10:40:26.0630 0x076c  VSS - ok
10:40:26.0642 0x076c  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
10:40:26.0668 0x076c  vwifibus - ok
10:40:26.0700 0x076c  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
10:40:26.0744 0x076c  W32Time - ok
10:40:26.0764 0x076c  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
10:40:26.0782 0x076c  WacomPen - ok
10:40:26.0798 0x076c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
10:40:26.0838 0x076c  WANARP - ok
10:40:26.0844 0x076c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
10:40:26.0873 0x076c  Wanarpv6 - ok
10:40:26.0920 0x076c  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
10:40:26.0974 0x076c  wbengine - ok
10:40:26.0998 0x076c  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
10:40:27.0023 0x076c  WbioSrvc - ok
10:40:27.0053 0x076c  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
10:40:27.0096 0x076c  wcncsvc - ok
10:40:27.0114 0x076c  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:40:27.0152 0x076c  WcsPlugInService - ok
10:40:27.0174 0x076c  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\drivers\wd.sys
10:40:27.0190 0x076c  Wd - ok
10:40:27.0219 0x076c  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
10:40:27.0249 0x076c  Wdf01000 - ok
10:40:27.0274 0x076c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
10:40:27.0325 0x076c  WdiServiceHost - ok
10:40:27.0341 0x076c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll
10:40:27.0368 0x076c  WdiSystemHost - ok
10:40:27.0396 0x076c  [ 55C70654420DBF429604FD567E6F3CD3, 22191B049BCA76EF13AEDF8078E452E6B35E998A75AD63F14C542B541EA9F67D ] WebClient       C:\Windows\System32\webclnt.dll
10:40:27.0434 0x076c  WebClient - ok
10:40:27.0459 0x076c  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
10:40:27.0499 0x076c  Wecsvc - ok
10:40:27.0511 0x076c  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
10:40:27.0549 0x076c  wercplsupport - ok
10:40:27.0566 0x076c  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
10:40:27.0605 0x076c  WerSvc - ok
10:40:27.0624 0x076c  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
10:40:27.0664 0x076c  WfpLwf - ok
10:40:27.0672 0x076c  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
10:40:27.0687 0x076c  WIMMount - ok
10:40:27.0734 0x076c  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
10:40:27.0774 0x076c  WinDefend - ok
10:40:27.0789 0x076c  WinHttpAutoProxySvc - ok
10:40:27.0841 0x076c  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
10:40:27.0880 0x076c  Winmgmt - ok
10:40:27.0931 0x076c  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM           C:\Windows\system32\WsmSvc.dll
10:40:27.0991 0x076c  WinRM - ok
10:40:28.0038 0x076c  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
10:40:28.0057 0x076c  WinUsb - ok
10:40:28.0096 0x076c  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
10:40:28.0140 0x076c  Wlansvc - ok
10:40:28.0208 0x076c  [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
10:40:28.0264 0x076c  wlidsvc - ok
10:40:28.0275 0x076c  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
10:40:28.0298 0x076c  WmiAcpi - ok
10:40:28.0326 0x076c  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
10:40:28.0346 0x076c  wmiApSrv - ok
10:40:28.0425 0x076c  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
10:40:28.0477 0x076c  WMPNetworkSvc - ok
10:40:28.0495 0x076c  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
10:40:28.0527 0x076c  WPCSvc - ok
10:40:28.0538 0x076c  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
10:40:28.0571 0x076c  WPDBusEnum - ok
10:40:28.0584 0x076c  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
10:40:28.0622 0x076c  ws2ifsl - ok
10:40:28.0629 0x076c  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
10:40:28.0654 0x076c  wscsvc - ok
10:40:28.0658 0x076c  WSearch - ok
10:40:28.0731 0x076c  [ A7A67674E51F2B050AAC4C477297EEE2, FA6DA2AA7869A99AB3D19509D7F2411E5E2C9ADB6D8DB97D7B8FAF1F6E160687 ] wuauserv        C:\Windows\system32\wuaueng.dll
10:40:28.0815 0x076c  wuauserv - ok
10:40:28.0837 0x076c  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
10:40:28.0864 0x076c  WudfPf - ok
10:40:28.0893 0x076c  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
10:40:28.0916 0x076c  WUDFRd - ok
10:40:28.0922 0x076c  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
10:40:28.0941 0x076c  wudfsvc - ok
10:40:28.0969 0x076c  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
10:40:29.0000 0x076c  WwanSvc - ok
10:40:29.0008 0x076c  ================ Scan global ===============================
10:40:29.0026 0x076c  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll
10:40:29.0046 0x076c  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
10:40:29.0058 0x076c  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
10:40:29.0080 0x076c  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
10:40:29.0123 0x076c  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
10:40:29.0137 0x076c  [ Global ] - ok
10:40:29.0137 0x076c  ================ Scan MBR ==================================
10:40:29.0145 0x076c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:40:29.0501 0x076c  \Device\Harddisk0\DR0 - ok
10:40:29.0502 0x076c  ================ Scan VBR ==================================
10:40:29.0505 0x076c  [ CE6596FE492C5889253B158405322443 ] \Device\Harddisk0\DR0\Partition1
10:40:29.0539 0x076c  \Device\Harddisk0\DR0\Partition1 - ok
10:40:29.0543 0x076c  [ 290DA252E120F817016B43C31439D186 ] \Device\Harddisk0\DR0\Partition2
10:40:29.0575 0x076c  \Device\Harddisk0\DR0\Partition2 - ok
10:40:29.0575 0x076c  ================ Scan generic autorun ======================
10:40:29.0617 0x076c  [ DCD896D043D9F19664029AA35118497F, AEE3F281AE1EE791CE4DE91467CBCCB7EDDA790776CE1F80595803C36FA8CE87 ] C:\Program Files\avmwlanstick\FRITZWLANMini.exe
10:40:29.0648 0x076c  AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 )
10:40:32.0048 0x076c  Detect skipped due to KSN trusted
10:40:32.0048 0x076c  AVMWlanClient - ok
10:40:32.0133 0x076c  [ A6ABD4AF02AB03676DEA55F383ABC7C2, 62F838618C78A297D970EC58F97F2D843EBFEF2D81754D658664BEEED79BFB50 ] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
10:40:32.0169 0x076c  avgnt - ok
10:40:32.0205 0x076c  [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
10:40:32.0218 0x076c  HP Software Update - ok
10:40:32.0277 0x076c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:40:32.0328 0x076c  Sidebar - ok
10:40:32.0349 0x076c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:40:32.0372 0x076c  mctadmin - ok
10:40:32.0403 0x076c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:40:32.0442 0x076c  Sidebar - ok
10:40:32.0450 0x076c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:40:32.0471 0x076c  mctadmin - ok
10:40:32.0472 0x076c  Waiting for KSN requests completion. In queue: 82
10:40:33.0473 0x076c  Waiting for KSN requests completion. In queue: 82
10:40:34.0473 0x076c  Waiting for KSN requests completion. In queue: 6
10:40:35.0531 0x076c  AV detected via SS2: Avira Antivirus, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 15.0.11.550 ), 0x41000 ( enabled : updated )
10:40:35.0533 0x076c  AV detected via SS2: 360 Total Security, C:\Program Files\360\Total Security\safemon\QHSafeTray.exe ( 7.2.0.1001 ), 0x50000 ( disabled : updated )
10:40:35.0573 0x076c  Win FW state via NFP2: enabled ( trusted )
10:40:38.0020 0x076c  ============================================================
10:40:38.0020 0x076c  Scan finished
10:40:38.0020 0x076c  ============================================================
10:40:38.0040 0x04e0  Detected object count: 0
10:40:38.0041 0x04e0  Actual detected object count: 0
10:42:10.0277 0x0bfc  ============================================================
10:42:10.0277 0x0bfc  Scan started
10:42:10.0277 0x0bfc  Mode: Manual; SigCheck; TDLFS; 
10:42:10.0277 0x0bfc  ============================================================
10:42:10.0277 0x0bfc  KSN ping started
10:42:23.0663 0x0bfc  KSN ping finished: true
10:42:23.0992 0x0bfc  ================ Scan system memory ========================
10:42:23.0992 0x0bfc  System memory - ok
10:42:23.0993 0x0bfc  ================ Scan services =============================
10:42:24.0124 0x0bfc  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
10:42:24.0155 0x0bfc  1394ohci - ok
10:42:24.0181 0x0bfc  [ 148925140F53F63C8D1C991806F1E7EC, 2673E05B0D03A2159BE73BF65C19195F20B0B8B926E7AB5FF2EABFE7C456D004 ] 360AntiHacker   C:\Windows\system32\Drivers\360AntiHacker.sys
10:42:24.0199 0x0bfc  360AntiHacker - ok
10:42:24.0213 0x0bfc  [ 53C05C1714177E3D1C548753E0691531, 6F1CF9133128F46098A17F965A507F9D1DE7A00887F5FCBF409DB47EA42AE93C ] 360AvFlt        C:\Windows\system32\DRIVERS\360AvFlt.sys
10:42:24.0227 0x0bfc  360AvFlt - ok
10:42:24.0243 0x0bfc  [ 0C29455EBB4A8A8EE4E99833447570BA, A090A368ABB7121AE357A8706FC907FC8F61F789B6E0C89053DD50ACC91FF162 ] 360Box          C:\Windows\system32\DRIVERS\360Box.sys
10:42:24.0260 0x0bfc  360Box - ok
10:42:24.0276 0x0bfc  [ 2255330A69644F179D0438666EEF1861, 29D10CBD372001332B49CD6248F7DFEDB7A707C8281AFFFFEE6F971D679A4973 ] 360Camera       C:\Windows\system32\Drivers\360Camera.sys
10:42:24.0290 0x0bfc  360Camera - ok
10:42:24.0300 0x0bfc  [ 637E29711905C87A49F4F367F50770B0, 9C48355773678BCE6F61BE69BD95C09C56F955C19095329086A0D9AC66D504C1 ] 360SelfProtection C:\Windows\system32\drivers\360SelfProtection.sys
10:42:24.0316 0x0bfc  360SelfProtection - ok
10:42:24.0334 0x0bfc  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
10:42:24.0353 0x0bfc  ACPI - ok
10:42:24.0362 0x0bfc  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
10:42:24.0383 0x0bfc  AcpiPmi - ok
10:42:24.0461 0x0bfc  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
10:42:24.0476 0x0bfc  AdobeARMservice - ok
10:42:24.0518 0x0bfc  [ 368290D0A612D62DA6F3D798B1BB8FE7, D573BF8543F37BC51B88A2473EDFD28AFBCCC446E8CADD54A90FA48D8739D222 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:42:24.0537 0x0bfc  AdobeFlashPlayerUpdateSvc - ok
10:42:24.0570 0x0bfc  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
10:42:24.0593 0x0bfc  adp94xx - ok
10:42:24.0619 0x0bfc  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\drivers\adpahci.sys
10:42:24.0638 0x0bfc  adpahci - ok
10:42:24.0651 0x0bfc  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\drivers\adpu320.sys
10:42:24.0667 0x0bfc  adpu320 - ok
10:42:24.0693 0x0bfc  [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
10:42:24.0711 0x0bfc  AeLookupSvc - ok
10:42:24.0742 0x0bfc  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys
10:42:24.0766 0x0bfc  AFD - ok
10:42:24.0790 0x0bfc  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
10:42:24.0804 0x0bfc  agp440 - ok
10:42:24.0820 0x0bfc  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
10:42:24.0834 0x0bfc  aic78xx - ok
10:42:24.0854 0x0bfc  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
10:42:24.0873 0x0bfc  ALG - ok
10:42:24.0895 0x0bfc  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
10:42:24.0909 0x0bfc  aliide - ok
10:42:24.0930 0x0bfc  [ B19505648F033393E907E2E419FDE8B3, BEF76AAD61FE0CA1F2B91C491FD94DE1BE67E776BBB7972D57ADFBE0333E9615 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
10:42:24.0952 0x0bfc  AMD External Events Utility - ok
10:42:24.0964 0x0bfc  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
10:42:24.0977 0x0bfc  amdagp - ok
10:42:24.0984 0x0bfc  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
10:42:24.0997 0x0bfc  amdide - ok
10:42:25.0010 0x0bfc  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
10:42:25.0027 0x0bfc  AmdK8 - ok
10:42:25.0041 0x0bfc  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
10:42:25.0060 0x0bfc  AmdPPM - ok
10:42:25.0076 0x0bfc  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
10:42:25.0091 0x0bfc  amdsata - ok
10:42:25.0110 0x0bfc  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
10:42:25.0127 0x0bfc  amdsbs - ok
10:42:25.0135 0x0bfc  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
10:42:25.0148 0x0bfc  amdxata - ok
10:42:25.0218 0x0bfc  [ 3358CAD1887DDDDD2A36B7796B579292, 40BA1A836276C2AA78914F294661C3C918F2D6DFAA9D6EF3FEB6D1EE3B07F584 ] AntiVirMailService C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe
10:42:25.0248 0x0bfc  AntiVirMailService - ok
10:42:25.0277 0x0bfc  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
10:42:25.0299 0x0bfc  AntiVirSchedulerService - ok
10:42:25.0327 0x0bfc  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
10:42:25.0348 0x0bfc  AntiVirService - ok
10:42:25.0390 0x0bfc  [ 6FD5165364D88FDABE4FA59E1768376F, B82D11E6FCC297F822E29A49D46C9985955C9F5676D107A397B00D0468F93504 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
10:42:25.0427 0x0bfc  AntiVirWebService - ok
10:42:25.0457 0x0bfc  [ 81F97D8F8B3FB94A451CC6F7CF8B2965, 8DEBA4E47E1016D69740C0BB7CDD23852D86E0D42C1C1EA5A847ECB115C38CB1 ] AppID           C:\Windows\system32\drivers\appid.sys
10:42:25.0476 0x0bfc  AppID - ok
10:42:25.0489 0x0bfc  [ F5090F8FA6757C58E17BAEAA86093636, 5E14CF3032DF5801240F45C59AA93962EA41AA5648A0C6458D16D9B9D95A131F ] AppIDSvc        C:\Windows\System32\appidsvc.dll
10:42:25.0507 0x0bfc  AppIDSvc - ok
10:42:25.0533 0x0bfc  [ 530195DA0D84D9855020F2B80D6B267F, AB36F05991530437C7B3F25441B13BC085000F07579964A4CCA0BF029DD6DE7E ] Appinfo         C:\Windows\System32\appinfo.dll
10:42:25.0553 0x0bfc  Appinfo - ok
10:42:25.0599 0x0bfc  [ D2B87FC03BE28CD0B33C2B5C1119FD8E, 97EB74CB7F62C0D06D45CB250E3A90657A0F107C2FC20738FF6B2C87B0240080 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
10:42:25.0612 0x0bfc  Apple Mobile Device - ok
10:42:25.0633 0x0bfc  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\drivers\arc.sys
10:42:25.0647 0x0bfc  arc - ok
10:42:25.0663 0x0bfc  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
10:42:25.0677 0x0bfc  arcsas - ok
10:42:25.0725 0x0bfc  [ 537B2948976F5D9B5767B74A63EBB395, 1A14F8B582E74AD15B612EDA5B707AA3CB0B2A107ED14572B4232EAA7383B634 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:42:25.0741 0x0bfc  aspnet_state - ok
10:42:25.0754 0x0bfc  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
10:42:25.0783 0x0bfc  AsyncMac - ok
10:42:25.0804 0x0bfc  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
10:42:25.0818 0x0bfc  atapi - ok
10:42:25.0963 0x0bfc  [ 04F09923A393E4E0E8453A8F78361E73, B5C0B9D1195B87AF823887AD9355CD2B4C4F4DDF34103891EE48EA86F0F544E7 ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
10:42:26.0087 0x0bfc  atikmdag - ok
10:42:26.0132 0x0bfc  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:42:26.0160 0x0bfc  AudioEndpointBuilder - ok
10:42:26.0175 0x0bfc  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
10:42:26.0203 0x0bfc  Audiosrv - ok
10:42:26.0230 0x0bfc  [ 18FB1022DAFC9036ADA9ECF432FAFD06, AFA23C96BDAE15DF4AB32F4CCA04A9D5C5C242E704DC12237CBF57757EBC35AE ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
10:42:26.0246 0x0bfc  avgntflt - ok
10:42:26.0260 0x0bfc  [ 062494C204553210FFC0FC33EA58EB36, 2A02003334D3F736907E743C5AB04604228E89DD918E060CCA346F8E739BEB16 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
10:42:26.0277 0x0bfc  avipbb - ok
10:42:26.0321 0x0bfc  [ 4B3DBF1CEBE1B2346BF2F8D2251F641A, CDC5BCA35BE658007E29E94E7FBFAA499B50929E738A12904397D16268C6FBAE ] Avira.ServiceHost C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
10:42:26.0339 0x0bfc  Avira.ServiceHost - ok
10:42:26.0360 0x0bfc  [ F80F5DCA8A5D9D93CC5BE933D20CAF05, 2AFBB2D62127FACBCABBB3E78F3568A6BA016ED4A97A1490BAA29A1EFB7A4408 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
10:42:26.0375 0x0bfc  avkmgr - ok
10:42:26.0404 0x0bfc  [ 263CF9D248FD5E020A1333ED4F7EAA88, 04F944C2B284172A7917389A83C525FA9A3ACB026F370EB886B48759FE81A5E1 ] avmeject        C:\Windows\system32\drivers\avmeject.sys
10:42:26.0413 0x0bfc  avmeject - detected UnsignedFile.Multi.Generic ( 1 )
10:42:26.0413 0x0bfc  Detect skipped due to KSN trusted
10:42:26.0413 0x0bfc  avmeject - ok
10:42:26.0432 0x0bfc  [ 3303FB85532093FC6723632B5947E8C4, F8301069A8EAD7303CAE5B7CAE3F119747E7B7B4402178018EB5254087238A42 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
10:42:26.0446 0x0bfc  avnetflt - ok
10:42:26.0467 0x0bfc  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
10:42:26.0489 0x0bfc  AxInstSV - ok
10:42:26.0519 0x0bfc  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\drivers\bxvbdx.sys
10:42:26.0546 0x0bfc  b06bdrv - ok
10:42:26.0563 0x0bfc  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
10:42:26.0585 0x0bfc  b57nd60x - ok
10:42:26.0608 0x0bfc  [ 1D5B0522D4B1B0BA3E81C6D7F86C3058, 9C06365CEF8E6A14AA2C518FF46550CC626E1CE7464F80EE7A8A24C490609BC7 ] BAPIDRV         C:\Windows\system32\DRIVERS\BAPIDRV.sys
10:42:26.0625 0x0bfc  BAPIDRV - ok
10:42:26.0640 0x0bfc  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
10:42:26.0660 0x0bfc  BDESVC - ok
10:42:26.0671 0x0bfc  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
10:42:26.0699 0x0bfc  Beep - ok
10:42:26.0734 0x0bfc  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
10:42:26.0771 0x0bfc  BFE - ok
10:42:26.0806 0x0bfc  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
10:42:26.0846 0x0bfc  BITS - ok
10:42:26.0863 0x0bfc  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
10:42:26.0880 0x0bfc  blbdrive - ok
10:42:26.0922 0x0bfc  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
10:42:26.0942 0x0bfc  Bonjour Service - ok
10:42:26.0968 0x0bfc  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
10:42:26.0987 0x0bfc  bowser - ok
10:42:27.0002 0x0bfc  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
10:42:27.0021 0x0bfc  BrFiltLo - ok
10:42:27.0030 0x0bfc  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
10:42:27.0049 0x0bfc  BrFiltUp - ok
10:42:27.0078 0x0bfc  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
10:42:27.0099 0x0bfc  Browser - ok
10:42:27.0122 0x0bfc  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
10:42:27.0145 0x0bfc  Brserid - ok
10:42:27.0158 0x0bfc  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
10:42:27.0178 0x0bfc  BrSerWdm - ok
10:42:27.0191 0x0bfc  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
10:42:27.0210 0x0bfc  BrUsbMdm - ok
10:42:27.0215 0x0bfc  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
10:42:27.0232 0x0bfc  BrUsbSer - ok
10:42:27.0243 0x0bfc  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
10:42:27.0263 0x0bfc  BTHMODEM - ok
10:42:27.0294 0x0bfc  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
10:42:27.0323 0x0bfc  bthserv - ok
10:42:27.0333 0x0bfc  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
10:42:27.0364 0x0bfc  cdfs - ok
10:42:27.0376 0x0bfc  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
10:42:27.0396 0x0bfc  cdrom - ok
10:42:27.0407 0x0bfc  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
10:42:27.0437 0x0bfc  CertPropSvc - ok
10:42:27.0455 0x0bfc  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\drivers\circlass.sys
10:42:27.0477 0x0bfc  circlass - ok
10:42:27.0504 0x0bfc  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\Windows\system32\CLFS.sys
10:42:27.0522 0x0bfc  CLFS - ok
10:42:27.0557 0x0bfc  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:42:27.0571 0x0bfc  clr_optimization_v2.0.50727_32 - ok
10:42:27.0595 0x0bfc  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:42:27.0613 0x0bfc  clr_optimization_v4.0.30319_32 - ok
10:42:27.0627 0x0bfc  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
10:42:27.0645 0x0bfc  CmBatt - ok
10:42:27.0667 0x0bfc  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
10:42:27.0680 0x0bfc  cmdide - ok
10:42:27.0708 0x0bfc  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG             C:\Windows\system32\Drivers\cng.sys
10:42:27.0733 0x0bfc  CNG - ok
10:42:27.0755 0x0bfc  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
10:42:27.0768 0x0bfc  Compbatt - ok
10:42:27.0780 0x0bfc  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
10:42:27.0800 0x0bfc  CompositeBus - ok
10:42:27.0805 0x0bfc  COMSysApp - ok
10:42:27.0817 0x0bfc  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
10:42:27.0831 0x0bfc  crcdisk - ok
10:42:27.0855 0x0bfc  [ 33F67BBCC3C0499D3F3382473114CFA8, FDDCC41CE005B7C1BEBB6F4ACA9A3F10E5972792ADFD7D294E70A0B781460981 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
10:42:27.0875 0x0bfc  CryptSvc - ok
10:42:27.0892 0x0bfc  [ B5ECADF7708960F1818C7FA015F4C239, A58BA71B08A9D46EB79EB3DF0858F553A11DE3461E13B6D926E25D21D4CBB2D8 ] CVirtA          C:\Windows\system32\DRIVERS\CVirtA.sys
10:42:27.0908 0x0bfc  CVirtA - ok
10:42:27.0938 0x0bfc  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
10:42:27.0975 0x0bfc  DcomLaunch - ok

whitetrain · 19.08.2015, 10:02

Code:

ATTFilter

10:42:28.0009 0x0bfc  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
10:42:28.0042 0x0bfc  defragsvc - ok
10:42:28.0059 0x0bfc  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
10:42:28.0088 0x0bfc  DfsC - ok
10:42:28.0106 0x0bfc  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
10:42:28.0129 0x0bfc  Dhcp - ok
10:42:28.0177 0x0bfc  [ 7AB2DE012C88870C9274E966EC88AB61, CE2098B152B9C039C29C0573C813BFBF13B2D2E6BEE83985374160884A817133 ] DiagTrack       C:\Windows\system32\diagtrack.dll
10:42:28.0213 0x0bfc  DiagTrack - ok
10:42:28.0231 0x0bfc  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
10:42:28.0259 0x0bfc  discache - ok
10:42:28.0273 0x0bfc  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\drivers\disk.sys
10:42:28.0288 0x0bfc  Disk - ok
10:42:28.0299 0x0bfc  [ B5AA5AA5AC327BD7C1AEC0C58F0C1144, 14C147B79786C5DCEC54AF191E8815D871906E30DE90B00C7929F0E6CC025E6A ] DNE             C:\Windows\system32\DRIVERS\dne2000.sys
10:42:28.0313 0x0bfc  DNE - ok
10:42:28.0341 0x0bfc  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
10:42:28.0362 0x0bfc  Dnscache - ok
10:42:28.0391 0x0bfc  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
10:42:28.0422 0x0bfc  dot3svc - ok
10:42:28.0437 0x0bfc  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
10:42:28.0467 0x0bfc  DPS - ok
10:42:28.0490 0x0bfc  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
10:42:28.0507 0x0bfc  drmkaud - ok
10:42:28.0543 0x0bfc  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
10:42:28.0574 0x0bfc  DXGKrnl - ok
10:42:28.0593 0x0bfc  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
10:42:28.0622 0x0bfc  EapHost - ok
10:42:28.0714 0x0bfc  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\drivers\evbdx.sys
10:42:28.0796 0x0bfc  ebdrv - ok
10:42:28.0820 0x0bfc  [ E6104BF5F23AEF2FD23E7271ED1E5D66, D9EE27C724A43D9A17C5201089902208DDB6B58C3E44C06B3ADC4ECA525C6088 ] EfiMon          C:\Windows\system32\Drivers\Efimon.sys
10:42:28.0832 0x0bfc  EfiMon - ok
10:42:28.0856 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] EFS             C:\Windows\System32\lsass.exe
10:42:28.0874 0x0bfc  EFS - ok
10:42:28.0941 0x0bfc  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
10:42:28.0978 0x0bfc  ehRecvr - ok
10:42:28.0988 0x0bfc  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
10:42:29.0007 0x0bfc  ehSched - ok
10:42:29.0036 0x0bfc  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
10:42:29.0058 0x0bfc  elxstor - ok
10:42:29.0071 0x0bfc  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
10:42:29.0088 0x0bfc  ErrDev - ok
10:42:29.0113 0x0bfc  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
10:42:29.0145 0x0bfc  EventSystem - ok
10:42:29.0160 0x0bfc  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
10:42:29.0189 0x0bfc  exfat - ok
10:42:29.0207 0x0bfc  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
10:42:29.0238 0x0bfc  fastfat - ok
10:42:29.0262 0x0bfc  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
10:42:29.0290 0x0bfc  Fax - ok
10:42:29.0307 0x0bfc  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\drivers\fdc.sys
10:42:29.0324 0x0bfc  fdc - ok
10:42:29.0342 0x0bfc  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
10:42:29.0370 0x0bfc  fdPHost - ok
10:42:29.0383 0x0bfc  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
10:42:29.0411 0x0bfc  FDResPub - ok
10:42:29.0426 0x0bfc  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
10:42:29.0440 0x0bfc  FileInfo - ok
10:42:29.0445 0x0bfc  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
10:42:29.0473 0x0bfc  Filetrace - ok
10:42:29.0479 0x0bfc  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
10:42:29.0497 0x0bfc  flpydisk - ok
10:42:29.0513 0x0bfc  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
10:42:29.0530 0x0bfc  FltMgr - ok
10:42:29.0575 0x0bfc  [ 37DE123FE4276D8EC7F3C5B10C236238, 93CA47B9A96D904DD177FC0E04DECDF13756C8FA3C7613913DB4BF29A70ECE96 ] FontCache       C:\Windows\system32\FntCache.dll
10:42:29.0611 0x0bfc  FontCache - ok
10:42:29.0644 0x0bfc  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
10:42:29.0656 0x0bfc  FontCache3.0.0.0 - ok
10:42:29.0673 0x0bfc  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
10:42:29.0686 0x0bfc  FsDepends - ok
10:42:29.0706 0x0bfc  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
10:42:29.0719 0x0bfc  Fs_Rec - ok
10:42:29.0741 0x0bfc  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
10:42:29.0760 0x0bfc  fvevol - ok
10:42:29.0785 0x0bfc  [ FF12FA487265DA2AC7DE4BE53F72FF1A, 9B9F29CC36D0C7681676F708270038D38CEA21AD82F4937DBDAE45F0D667786E ] FWLANUSB        C:\Windows\system32\DRIVERS\fwlanusb.sys
10:42:29.0806 0x0bfc  FWLANUSB - ok
10:42:29.0817 0x0bfc  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
10:42:29.0831 0x0bfc  gagp30kx - ok
10:42:29.0857 0x0bfc  [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
10:42:29.0868 0x0bfc  GEARAspiWDM - ok
10:42:29.0902 0x0bfc  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll
10:42:29.0940 0x0bfc  gpsvc - ok
10:42:29.0959 0x0bfc  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
10:42:29.0975 0x0bfc  hcw85cir - ok
10:42:29.0995 0x0bfc  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:42:30.0020 0x0bfc  HdAudAddService - ok
10:42:30.0034 0x0bfc  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
10:42:30.0055 0x0bfc  HDAudBus - ok
10:42:30.0068 0x0bfc  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
10:42:30.0085 0x0bfc  HidBatt - ok
10:42:30.0095 0x0bfc  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\drivers\hidbth.sys
10:42:30.0115 0x0bfc  HidBth - ok
10:42:30.0123 0x0bfc  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\drivers\hidir.sys
10:42:30.0142 0x0bfc  HidIr - ok
10:42:30.0166 0x0bfc  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
10:42:30.0194 0x0bfc  hidserv - ok
10:42:30.0219 0x0bfc  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
10:42:30.0235 0x0bfc  HidUsb - ok
10:42:30.0260 0x0bfc  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
10:42:30.0288 0x0bfc  hkmsvc - ok
10:42:30.0305 0x0bfc  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:42:30.0326 0x0bfc  HomeGroupListener - ok
10:42:30.0344 0x0bfc  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:42:30.0365 0x0bfc  HomeGroupProvider - ok
10:42:30.0376 0x0bfc  [ 2EFB89125842BBC686FCEA92B1F1C8EA, 1E622F412918917BB23602E4ABB9DE96123D038AE36546B971962D975BEA608A ] HookPort        C:\Windows\system32\Drivers\Hookport.sys
10:42:30.0389 0x0bfc  HookPort - ok
10:42:30.0407 0x0bfc  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
10:42:30.0421 0x0bfc  HpSAMD - ok
10:42:30.0453 0x0bfc  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys
10:42:30.0480 0x0bfc  HTTP - ok
10:42:30.0494 0x0bfc  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
10:42:30.0507 0x0bfc  hwpolicy - ok
10:42:30.0519 0x0bfc  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
10:42:30.0538 0x0bfc  i8042prt - ok
10:42:30.0566 0x0bfc  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
10:42:30.0586 0x0bfc  iaStorV - ok
10:42:30.0668 0x0bfc  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:42:30.0706 0x0bfc  idsvc - ok
10:42:30.0713 0x0bfc  IEEtwCollectorService - ok
10:42:30.0729 0x0bfc  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\drivers\iirsp.sys
10:42:30.0743 0x0bfc  iirsp - ok
10:42:30.0783 0x0bfc  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
10:42:30.0815 0x0bfc  IKEEXT - ok
10:42:30.0839 0x0bfc  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
10:42:30.0851 0x0bfc  intelide - ok
10:42:30.0860 0x0bfc  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\drivers\intelppm.sys
10:42:30.0878 0x0bfc  intelppm - ok
10:42:30.0901 0x0bfc  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
10:42:30.0931 0x0bfc  IPBusEnum - ok
10:42:30.0943 0x0bfc  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:42:30.0971 0x0bfc  IpFilterDriver - ok
10:42:31.0003 0x0bfc  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
10:42:31.0031 0x0bfc  iphlpsvc - ok
10:42:31.0044 0x0bfc  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
10:42:31.0062 0x0bfc  IPMIDRV - ok
10:42:31.0073 0x0bfc  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
10:42:31.0102 0x0bfc  IPNAT - ok
10:42:31.0150 0x0bfc  [ FB7679FD086C60597F8C6929FF66FAC2, 6333339CB052D2A64CFBE5916D6D8F2A4D6CA84A31B549F70733A91F3C4D6EB8 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
10:42:31.0188 0x0bfc  iPod Service - ok
10:42:31.0204 0x0bfc  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
10:42:31.0222 0x0bfc  IRENUM - ok
10:42:31.0244 0x0bfc  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
10:42:31.0257 0x0bfc  isapnp - ok
10:42:31.0283 0x0bfc  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
10:42:31.0301 0x0bfc  iScsiPrt - ok
10:42:31.0317 0x0bfc  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
10:42:31.0330 0x0bfc  kbdclass - ok
10:42:31.0345 0x0bfc  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
10:42:31.0362 0x0bfc  kbdhid - ok
10:42:31.0373 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] KeyIso          C:\Windows\system32\lsass.exe
10:42:31.0392 0x0bfc  KeyIso - ok
10:42:31.0413 0x0bfc  [ 48732BFA0C692BEC15DBBFE754E594C6, A39DD1181CF51534C18C2ECFE02E961363769482BAF9F206E57B014C5B246921 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
10:42:31.0427 0x0bfc  KSecDD - ok
10:42:31.0440 0x0bfc  [ 46B1F590C06AF25BCADCCAE0148C2074, 62447A906E5D7D20B3955A1EF99C971F1E0522A7D68C3D2C88EF174A5A5ECD29 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
10:42:31.0455 0x0bfc  KSecPkg - ok
10:42:31.0477 0x0bfc  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
10:42:31.0511 0x0bfc  KtmRm - ok
10:42:31.0533 0x0bfc  [ 6C32BFEAB708915D6BBF4B20D4F3EF7B, 140516B5D8600DF4C2653E37D672E40D93E021D0883161EB6E4EB5C09E68FB91 ] L1C             C:\Windows\system32\DRIVERS\L1C62x86.sys
10:42:31.0551 0x0bfc  L1C - ok
10:42:31.0576 0x0bfc  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
10:42:31.0607 0x0bfc  LanmanServer - ok
10:42:31.0626 0x0bfc  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:42:31.0654 0x0bfc  LanmanWorkstation - ok
10:42:31.0671 0x0bfc  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
10:42:31.0699 0x0bfc  lltdio - ok
10:42:31.0715 0x0bfc  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
10:42:31.0746 0x0bfc  lltdsvc - ok
10:42:31.0757 0x0bfc  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
10:42:31.0784 0x0bfc  lmhosts - ok
10:42:31.0797 0x0bfc  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
10:42:31.0812 0x0bfc  LSI_FC - ok
10:42:31.0819 0x0bfc  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
10:42:31.0833 0x0bfc  LSI_SAS - ok
10:42:31.0843 0x0bfc  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
10:42:31.0856 0x0bfc  LSI_SAS2 - ok
10:42:31.0871 0x0bfc  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
10:42:31.0886 0x0bfc  LSI_SCSI - ok
10:42:31.0895 0x0bfc  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
10:42:31.0924 0x0bfc  luafv - ok
10:42:31.0948 0x0bfc  [ FDBDEDB746A33BAFC17394D1960ADEAF, 6280BD2559A3A0D058BAAF0BB3719F4BEE5841EC9901452CB6D8319666901876 ] mbamchameleon   C:\Windows\system32\drivers\mbamchameleon.sys
10:42:31.0962 0x0bfc  mbamchameleon - ok
10:42:31.0979 0x0bfc  [ B4CD87E78A01562E3DA67FE1C2779204, 536AC01C53A18E7B43F02F345FC3088C189A2D01F5E060714C0534FE7ECA2356 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
10:42:31.0992 0x0bfc  MBAMProtector - ok
10:42:32.0083 0x0bfc  [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService     C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
10:42:32.0122 0x0bfc  MBAMService - ok
10:42:32.0142 0x0bfc  [ 490F0F3ED8A970E2BAA38F719242B8F7, 03F902365372639424AB654AEBF6EB2B6B73363275435ADC2D086EAA7112AC3D ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
10:42:32.0155 0x0bfc  MBAMWebAccessControl - ok
10:42:32.0172 0x0bfc  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
10:42:32.0192 0x0bfc  Mcx2Svc - ok
10:42:32.0207 0x0bfc  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\drivers\megasas.sys
10:42:32.0220 0x0bfc  megasas - ok
10:42:32.0238 0x0bfc  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
10:42:32.0255 0x0bfc  MegaSR - ok
10:42:32.0267 0x0bfc  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
10:42:32.0296 0x0bfc  MMCSS - ok
10:42:32.0304 0x0bfc  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
10:42:32.0332 0x0bfc  Modem - ok
10:42:32.0343 0x0bfc  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
10:42:32.0361 0x0bfc  monitor - ok
10:42:32.0372 0x0bfc  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
10:42:32.0387 0x0bfc  mouclass - ok
10:42:32.0392 0x0bfc  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
10:42:32.0410 0x0bfc  mouhid - ok
10:42:32.0434 0x0bfc  [ BAD9C0366134BA181514E9263C8CE606, 7976B2D3DC283ACDBC21C7D197C0E2A650E6555F6569283302766B17D736BDB8 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
10:42:32.0449 0x0bfc  mountmgr - ok
10:42:32.0463 0x0bfc  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
10:42:32.0478 0x0bfc  mpio - ok
10:42:32.0488 0x0bfc  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
10:42:32.0517 0x0bfc  mpsdrv - ok
10:42:32.0539 0x0bfc  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
10:42:32.0578 0x0bfc  MpsSvc - ok
10:42:32.0600 0x0bfc  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
10:42:32.0619 0x0bfc  MRxDAV - ok
10:42:32.0631 0x0bfc  [ FEDAAB6716B44DE8B9EFC14DD9A26215, 765890CDEADF6851C5C9014D12422733D7E7833690F560B94AE2BE9E7E08F130 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
10:42:32.0650 0x0bfc  mrxsmb - ok
10:42:32.0673 0x0bfc  [ 77DD652AB8708CDB55FDB7073B868784, AC88E2BFFE3EC62269216FD1B52DA8D85AFD0AF3E69B7B876F531258977BA372 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:42:32.0695 0x0bfc  mrxsmb10 - ok
10:42:32.0712 0x0bfc  [ 4ACDB6414918D8920875B00B286E1FBC, 404F5AC75DFD7C5CEF08A8D2FC24CD806941BF2B16FF7BC3BECBEABCBFA1B64A ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:42:32.0730 0x0bfc  mrxsmb20 - ok
10:42:32.0757 0x0bfc  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
10:42:32.0770 0x0bfc  msahci - ok
10:42:32.0796 0x0bfc  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
10:42:32.0810 0x0bfc  msdsm - ok
10:42:32.0827 0x0bfc  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
10:42:32.0848 0x0bfc  MSDTC - ok
10:42:32.0861 0x0bfc  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
10:42:32.0889 0x0bfc  Msfs - ok
10:42:32.0901 0x0bfc  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
10:42:32.0928 0x0bfc  mshidkmdf - ok
10:42:32.0943 0x0bfc  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
10:42:32.0955 0x0bfc  msisadrv - ok
10:42:32.0974 0x0bfc  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
10:42:33.0005 0x0bfc  MSiSCSI - ok
10:42:33.0010 0x0bfc  msiserver - ok
10:42:33.0024 0x0bfc  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
10:42:33.0053 0x0bfc  MSKSSRV - ok
10:42:33.0067 0x0bfc  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
10:42:33.0096 0x0bfc  MSPCLOCK - ok
10:42:33.0104 0x0bfc  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
10:42:33.0133 0x0bfc  MSPQM - ok
10:42:33.0147 0x0bfc  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
10:42:33.0163 0x0bfc  MsRPC - ok
10:42:33.0179 0x0bfc  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
10:42:33.0194 0x0bfc  mssmbios - ok
10:42:33.0205 0x0bfc  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
10:42:33.0234 0x0bfc  MSTEE - ok
10:42:33.0240 0x0bfc  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
10:42:33.0259 0x0bfc  MTConfig - ok
10:42:33.0274 0x0bfc  [ D48659BB24C48345D926ECB45C1EBDF5, EDEDE58316827530C25F8085F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
10:42:33.0291 0x0bfc  MTsensor - ok
10:42:33.0296 0x0bfc  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
10:42:33.0311 0x0bfc  Mup - ok
10:42:33.0335 0x0bfc  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
10:42:33.0369 0x0bfc  napagent - ok
10:42:33.0389 0x0bfc  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
10:42:33.0414 0x0bfc  NativeWifiP - ok
10:42:33.0452 0x0bfc  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
10:42:33.0479 0x0bfc  NDIS - ok
10:42:33.0499 0x0bfc  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
10:42:33.0527 0x0bfc  NdisCap - ok
10:42:33.0541 0x0bfc  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
10:42:33.0567 0x0bfc  NdisTapi - ok
10:42:33.0582 0x0bfc  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
10:42:33.0610 0x0bfc  Ndisuio - ok
10:42:33.0621 0x0bfc  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
10:42:33.0649 0x0bfc  NdisWan - ok
10:42:33.0658 0x0bfc  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
10:42:33.0685 0x0bfc  NDProxy - ok
10:42:33.0698 0x0bfc  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
10:42:33.0726 0x0bfc  NetBIOS - ok
10:42:33.0740 0x0bfc  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
10:42:33.0770 0x0bfc  NetBT - ok
10:42:33.0781 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] Netlogon        C:\Windows\system32\lsass.exe
10:42:33.0799 0x0bfc  Netlogon - ok
10:42:33.0824 0x0bfc  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
10:42:33.0858 0x0bfc  Netman - ok
10:42:33.0886 0x0bfc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:42:33.0903 0x0bfc  NetMsmqActivator - ok
10:42:33.0910 0x0bfc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:42:33.0927 0x0bfc  NetPipeActivator - ok
10:42:33.0950 0x0bfc  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
10:42:33.0987 0x0bfc  netprofm - ok
10:42:33.0995 0x0bfc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:42:34.0013 0x0bfc  NetTcpActivator - ok
10:42:34.0020 0x0bfc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:42:34.0038 0x0bfc  NetTcpPortSharing - ok
10:42:34.0050 0x0bfc  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
10:42:34.0064 0x0bfc  nfrd960 - ok
10:42:34.0089 0x0bfc  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
10:42:34.0112 0x0bfc  NlaSvc - ok
10:42:34.0123 0x0bfc  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
10:42:34.0151 0x0bfc  Npfs - ok
10:42:34.0160 0x0bfc  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
10:42:34.0190 0x0bfc  nsi - ok
10:42:34.0206 0x0bfc  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
10:42:34.0233 0x0bfc  nsiproxy - ok
10:42:34.0284 0x0bfc  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
10:42:34.0322 0x0bfc  Ntfs - ok
10:42:34.0339 0x0bfc  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
10:42:34.0366 0x0bfc  Null - ok
10:42:34.0381 0x0bfc  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
10:42:34.0398 0x0bfc  nvraid - ok
10:42:34.0449 0x0bfc  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
10:42:34.0481 0x0bfc  nvstor - ok
10:42:34.0497 0x0bfc  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
10:42:34.0511 0x0bfc  nv_agp - ok
10:42:34.0522 0x0bfc  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
10:42:34.0541 0x0bfc  ohci1394 - ok
10:42:34.0566 0x0bfc  [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:42:34.0579 0x0bfc  ose - ok
10:42:34.0610 0x0bfc  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
10:42:34.0634 0x0bfc  p2pimsvc - ok
10:42:34.0651 0x0bfc  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
10:42:34.0676 0x0bfc  p2psvc - ok
10:42:34.0692 0x0bfc  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
10:42:34.0711 0x0bfc  Parport - ok
10:42:34.0735 0x0bfc  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
10:42:34.0749 0x0bfc  partmgr - ok
10:42:34.0763 0x0bfc  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
10:42:34.0780 0x0bfc  Parvdm - ok
10:42:34.0807 0x0bfc  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\Windows\System32\pcasvc.dll
10:42:34.0829 0x0bfc  PcaSvc - ok
10:42:34.0844 0x0bfc  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
10:42:34.0860 0x0bfc  pci - ok
10:42:34.0871 0x0bfc  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
10:42:34.0883 0x0bfc  pciide - ok
10:42:34.0893 0x0bfc  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
10:42:34.0909 0x0bfc  pcmcia - ok
10:42:34.0922 0x0bfc  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
10:42:34.0935 0x0bfc  pcw - ok
10:42:34.0958 0x0bfc  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
10:42:34.0987 0x0bfc  PEAUTH - ok
10:42:35.0050 0x0bfc  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll
10:42:35.0109 0x0bfc  pla - ok
10:42:35.0141 0x0bfc  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
10:42:35.0165 0x0bfc  PlugPlay - ok
10:42:35.0170 0x0bfc  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
10:42:35.0189 0x0bfc  PNRPAutoReg - ok
10:42:35.0203 0x0bfc  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
10:42:35.0226 0x0bfc  PNRPsvc - ok
10:42:35.0258 0x0bfc  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
10:42:35.0292 0x0bfc  PolicyAgent - ok
10:42:35.0315 0x0bfc  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
10:42:35.0345 0x0bfc  Power - ok
10:42:35.0358 0x0bfc  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
10:42:35.0389 0x0bfc  PptpMiniport - ok
10:42:35.0412 0x0bfc  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\drivers\processr.sys
10:42:35.0430 0x0bfc  Processor - ok
10:42:35.0454 0x0bfc  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll
10:42:35.0475 0x0bfc  ProfSvc - ok
10:42:35.0490 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] ProtectedStorage C:\Windows\system32\lsass.exe
10:42:35.0507 0x0bfc  ProtectedStorage - ok
10:42:35.0518 0x0bfc  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
10:42:35.0548 0x0bfc  Psched - ok
10:42:35.0734 0x0bfc  [ A0CFBEE7AA6A546CF2A1102D4499D934, 5C949B05BFDC0EF9F34C22656D0C80CD6D53AC5825D5E50891D5B4D18A8C2353 ] QHActiveDefense C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe
10:42:35.0767 0x0bfc  QHActiveDefense - ok
10:42:35.0826 0x0bfc  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\drivers\ql2300.sys
10:42:35.0868 0x0bfc  ql2300 - ok
10:42:35.0882 0x0bfc  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
10:42:35.0897 0x0bfc  ql40xx - ok
10:42:35.0915 0x0bfc  [ 86AE3C2C621018B70155AFFC1DD763A6, 4B913F0F10B2BD8EB760C7E0764E690DB26E614ADE3FAD09B19CAEFD7553EF1E ] qutmdserv       C:\Windows\system32\DRIVERS\qutmdrv.sys
10:42:35.0933 0x0bfc  qutmdserv - ok
10:42:35.0953 0x0bfc  [ C94FD2E64D92D1CEC22604D6802CF86C, 75323FDABB997AB079182EE0FF0E1AA0F7D949416B26E24629703E0844E93789 ] qutmipc         C:\Windows\system32\drivers\qutmipc.sys
10:42:35.0966 0x0bfc  qutmipc - ok
10:42:35.0987 0x0bfc  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
10:42:36.0012 0x0bfc  QWAVE - ok
10:42:36.0020 0x0bfc  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
10:42:36.0040 0x0bfc  QWAVEdrv - ok
10:42:36.0051 0x0bfc  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
10:42:36.0079 0x0bfc  RasAcd - ok
10:42:36.0100 0x0bfc  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
10:42:36.0127 0x0bfc  RasAgileVpn - ok
10:42:36.0144 0x0bfc  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
10:42:36.0174 0x0bfc  RasAuto - ok
10:42:36.0183 0x0bfc  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
10:42:36.0212 0x0bfc  Rasl2tp - ok
10:42:36.0232 0x0bfc  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
10:42:36.0265 0x0bfc  RasMan - ok
10:42:36.0276 0x0bfc  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
10:42:36.0307 0x0bfc  RasPppoe - ok
10:42:36.0315 0x0bfc  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
10:42:36.0342 0x0bfc  RasSstp - ok
10:42:36.0355 0x0bfc  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
10:42:36.0387 0x0bfc  rdbss - ok
10:42:36.0396 0x0bfc  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
10:42:36.0415 0x0bfc  rdpbus - ok
10:42:36.0426 0x0bfc  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
10:42:36.0451 0x0bfc  RDPCDD - ok
10:42:36.0462 0x0bfc  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
10:42:36.0488 0x0bfc  RDPENCDD - ok
10:42:36.0502 0x0bfc  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
10:42:36.0528 0x0bfc  RDPREFMP - ok
10:42:36.0550 0x0bfc  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
10:42:36.0570 0x0bfc  RDPWD - ok
10:42:36.0588 0x0bfc  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
10:42:36.0604 0x0bfc  rdyboost - ok
10:42:36.0625 0x0bfc  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
10:42:36.0654 0x0bfc  RemoteAccess - ok
10:42:36.0675 0x0bfc  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
10:42:36.0705 0x0bfc  RemoteRegistry - ok
10:42:36.0711 0x0bfc  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
10:42:36.0741 0x0bfc  RpcEptMapper - ok
10:42:36.0755 0x0bfc  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
10:42:36.0773 0x0bfc  RpcLocator - ok
10:42:36.0797 0x0bfc  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll
10:42:36.0832 0x0bfc  RpcSs - ok
10:42:36.0847 0x0bfc  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
10:42:36.0875 0x0bfc  rspndr - ok
10:42:36.0890 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] SamSs           C:\Windows\system32\lsass.exe
10:42:36.0907 0x0bfc  SamSs - ok
10:42:36.0922 0x0bfc  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
10:42:36.0936 0x0bfc  sbp2port - ok
10:42:36.0957 0x0bfc  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
10:42:36.0987 0x0bfc  SCardSvr - ok
10:42:37.0001 0x0bfc  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
10:42:37.0028 0x0bfc  scfilter - ok
10:42:37.0058 0x0bfc  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll
10:42:37.0101 0x0bfc  Schedule - ok
10:42:37.0116 0x0bfc  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
10:42:37.0145 0x0bfc  SCPolicySvc - ok
10:42:37.0160 0x0bfc  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
10:42:37.0182 0x0bfc  SDRSVC - ok
10:42:37.0194 0x0bfc  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
10:42:37.0223 0x0bfc  secdrv - ok
10:42:37.0235 0x0bfc  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
10:42:37.0265 0x0bfc  seclogon - ok
10:42:37.0271 0x0bfc  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
10:42:37.0300 0x0bfc  SENS - ok
10:42:37.0312 0x0bfc  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
10:42:37.0330 0x0bfc  SensrSvc - ok
10:42:37.0345 0x0bfc  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
10:42:37.0362 0x0bfc  Serenum - ok
10:42:37.0372 0x0bfc  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
10:42:37.0391 0x0bfc  Serial - ok
10:42:37.0401 0x0bfc  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\drivers\sermouse.sys
10:42:37.0419 0x0bfc  sermouse - ok
10:42:37.0445 0x0bfc  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
10:42:37.0475 0x0bfc  SessionEnv - ok
10:42:37.0484 0x0bfc  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
10:42:37.0502 0x0bfc  sffdisk - ok
10:42:37.0512 0x0bfc  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
10:42:37.0530 0x0bfc  sffp_mmc - ok
10:42:37.0539 0x0bfc  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
10:42:37.0558 0x0bfc  sffp_sd - ok
10:42:37.0568 0x0bfc  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
10:42:37.0585 0x0bfc  sfloppy - ok
10:42:37.0612 0x0bfc  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
10:42:37.0646 0x0bfc  SharedAccess - ok
10:42:37.0670 0x0bfc  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:42:37.0704 0x0bfc  ShellHWDetection - ok
10:42:37.0716 0x0bfc  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
10:42:37.0729 0x0bfc  sisagp - ok
10:42:37.0742 0x0bfc  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
10:42:37.0755 0x0bfc  SiSRaid2 - ok
10:42:37.0764 0x0bfc  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
10:42:37.0778 0x0bfc  SiSRaid4 - ok
10:42:37.0814 0x0bfc  [ E6035ADBA3F13ACF1BEDA7B5D50FDBBB, A840D072395F2394E3B55A080F8F17CC3A02E8BCAFE8B8EC0374ECA1EFF05C23 ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
10:42:37.0835 0x0bfc  SkypeUpdate - ok
10:42:37.0849 0x0bfc  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
10:42:37.0878 0x0bfc  Smb - ok
10:42:37.0895 0x0bfc  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
10:42:37.0913 0x0bfc  SNMPTRAP - ok
10:42:37.0934 0x0bfc  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
10:42:37.0947 0x0bfc  spldr - ok
10:42:37.0970 0x0bfc  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe
10:42:37.0994 0x0bfc  Spooler - ok
10:42:38.0083 0x0bfc  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
10:42:38.0179 0x0bfc  sppsvc - ok
10:42:38.0207 0x0bfc  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
10:42:38.0235 0x0bfc  sppuinotify - ok
10:42:38.0264 0x0bfc  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
10:42:38.0287 0x0bfc  srv - ok
10:42:38.0304 0x0bfc  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
10:42:38.0327 0x0bfc  srv2 - ok
10:42:38.0337 0x0bfc  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
10:42:38.0356 0x0bfc  srvnet - ok
10:42:38.0375 0x0bfc  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
10:42:38.0407 0x0bfc  SSDPSRV - ok
10:42:38.0425 0x0bfc  [ 424566865D82AA4BD8D6546C1F2065FA, 37B4C04C7C0EE0F3347A9E9F35B095478299F7324CA87AAE487BF989B0E6AE03 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys
10:42:38.0438 0x0bfc  ssmdrv - ok
10:42:38.0449 0x0bfc  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
10:42:38.0479 0x0bfc  SstpSvc - ok
10:42:38.0504 0x0bfc  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\drivers\stexstor.sys
10:42:38.0517 0x0bfc  stexstor - ok
10:42:38.0543 0x0bfc  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
10:42:38.0573 0x0bfc  StiSvc - ok
10:42:38.0586 0x0bfc  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
10:42:38.0599 0x0bfc  swenum - ok
10:42:38.0620 0x0bfc  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
10:42:38.0657 0x0bfc  swprv - ok
10:42:38.0708 0x0bfc  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain         C:\Windows\system32\sysmain.dll
10:42:38.0750 0x0bfc  SysMain - ok
10:42:38.0772 0x0bfc  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
10:42:38.0795 0x0bfc  TabletInputService - ok
10:42:38.0815 0x0bfc  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
10:42:38.0847 0x0bfc  TapiSrv - ok
10:42:38.0862 0x0bfc  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
10:42:38.0891 0x0bfc  TBS - ok
10:42:38.0942 0x0bfc  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
10:42:38.0982 0x0bfc  Tcpip - ok
10:42:39.0019 0x0bfc  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
10:42:39.0059 0x0bfc  TCPIP6 - ok
10:42:39.0089 0x0bfc  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
10:42:39.0106 0x0bfc  tcpipreg - ok
10:42:39.0129 0x0bfc  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
10:42:39.0146 0x0bfc  TDPIPE - ok
10:42:39.0161 0x0bfc  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
10:42:39.0178 0x0bfc  TDTCP - ok
10:42:39.0204 0x0bfc  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
10:42:39.0221 0x0bfc  tdx - ok
10:42:39.0236 0x0bfc  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
10:42:39.0250 0x0bfc  TermDD - ok
10:42:39.0287 0x0bfc  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
10:42:39.0316 0x0bfc  TermService - ok
10:42:39.0341 0x0bfc  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
10:42:39.0362 0x0bfc  Themes - ok
10:42:39.0374 0x0bfc  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
10:42:39.0404 0x0bfc  THREADORDER - ok
10:42:39.0419 0x0bfc  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
10:42:39.0450 0x0bfc  TrkWks - ok
10:42:39.0487 0x0bfc  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:42:39.0517 0x0bfc  TrustedInstaller - ok
10:42:39.0542 0x0bfc  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
10:42:39.0559 0x0bfc  tssecsrv - ok
10:42:39.0570 0x0bfc  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
10:42:39.0588 0x0bfc  TsUsbFlt - ok
10:42:39.0621 0x0bfc  [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
10:42:39.0661 0x0bfc  TsUsbGD - ok
10:42:39.0676 0x0bfc  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
10:42:39.0708 0x0bfc  tunnel - ok
10:42:39.0718 0x0bfc  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
10:42:39.0731 0x0bfc  uagp35 - ok
10:42:39.0748 0x0bfc  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
10:42:39.0779 0x0bfc  udfs - ok
10:42:39.0810 0x0bfc  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
10:42:39.0828 0x0bfc  UI0Detect - ok
10:42:39.0834 0x0bfc  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
10:42:39.0848 0x0bfc  uliagpkx - ok
10:42:39.0862 0x0bfc  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
10:42:39.0880 0x0bfc  umbus - ok
10:42:39.0889 0x0bfc  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\drivers\umpass.sys
10:42:39.0906 0x0bfc  UmPass - ok
10:42:39.0923 0x0bfc  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
10:42:39.0958 0x0bfc  upnphost - ok
10:42:39.0975 0x0bfc  [ EC1C23779BB41A8B2AB2AA6FCE308BDE, D027A2B472CAE97AECB16F69BE52E06CB61E1C61AE196C22662050B711C1C72D ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys
10:42:39.0992 0x0bfc  USBAAPL - ok
10:42:40.0013 0x0bfc  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
10:42:40.0031 0x0bfc  usbccgp - ok
10:42:40.0044 0x0bfc  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
10:42:40.0063 0x0bfc  usbcir - ok
10:42:40.0083 0x0bfc  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
10:42:40.0100 0x0bfc  usbehci - ok
10:42:40.0113 0x0bfc  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
10:42:40.0135 0x0bfc  usbhub - ok
10:42:40.0151 0x0bfc  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
10:42:40.0168 0x0bfc  usbohci - ok
10:42:40.0181 0x0bfc  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
10:42:40.0200 0x0bfc  usbprint - ok
10:42:40.0209 0x0bfc  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
10:42:40.0226 0x0bfc  usbscan - ok
10:42:40.0239 0x0bfc  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:42:40.0257 0x0bfc  USBSTOR - ok
10:42:40.0264 0x0bfc  [ 78780C3EBCE17405B1CCD07A3A8A7D72, FBFF3111E22EE0B4BCAFA81F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
10:42:40.0281 0x0bfc  usbuhci - ok
10:42:40.0293 0x0bfc  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
10:42:40.0321 0x0bfc  UxSms - ok
10:42:40.0331 0x0bfc  [ 3AD57B7A84035A05079226D1DE47E771, 4DABE420AB2CDAA1D7214B2569DA4AF335E49D31731CBE91DC18B450874F494B ] VaultSvc        C:\Windows\system32\lsass.exe
10:42:40.0349 0x0bfc  VaultSvc - ok
10:42:40.0365 0x0bfc  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
10:42:40.0380 0x0bfc  vdrvroot - ok
10:42:40.0412 0x0bfc  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
10:42:40.0449 0x0bfc  vds - ok
10:42:40.0456 0x0bfc  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
10:42:40.0475 0x0bfc  vga - ok
10:42:40.0480 0x0bfc  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
10:42:40.0509 0x0bfc  VgaSave - ok
10:42:40.0517 0x0bfc  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
10:42:40.0532 0x0bfc  vhdmp - ok
10:42:40.0538 0x0bfc  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
10:42:40.0553 0x0bfc  viaagp - ok
10:42:40.0564 0x0bfc  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\drivers\viac7.sys
10:42:40.0582 0x0bfc  ViaC7 - ok
10:42:40.0597 0x0bfc  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
10:42:40.0609 0x0bfc  viaide - ok
10:42:40.0624 0x0bfc  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
10:42:40.0638 0x0bfc  volmgr - ok
10:42:40.0652 0x0bfc  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
10:42:40.0671 0x0bfc  volmgrx - ok
10:42:40.0686 0x0bfc  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
10:42:40.0704 0x0bfc  volsnap - ok
10:42:40.0721 0x0bfc  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
10:42:40.0736 0x0bfc  vsmraid - ok
10:42:40.0775 0x0bfc  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
10:42:40.0823 0x0bfc  VSS - ok
10:42:40.0836 0x0bfc  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
10:42:40.0855 0x0bfc  vwifibus - ok
10:42:40.0877 0x0bfc  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
10:42:40.0912 0x0bfc  W32Time - ok
10:42:40.0932 0x0bfc  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
10:42:40.0949 0x0bfc  WacomPen - ok
10:42:40.0966 0x0bfc  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
10:42:40.0993 0x0bfc  WANARP - ok
10:42:40.0998 0x0bfc  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
10:42:41.0026 0x0bfc  Wanarpv6 - ok
10:42:41.0071 0x0bfc  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
10:42:41.0114 0x0bfc  wbengine - ok
10:42:41.0133 0x0bfc  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
10:42:41.0157 0x0bfc  WbioSrvc - ok
10:42:41.0180 0x0bfc  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
10:42:41.0206 0x0bfc  wcncsvc - ok
10:42:41.0216 0x0bfc  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:42:41.0235 0x0bfc  WcsPlugInService - ok
10:42:41.0243 0x0bfc  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\drivers\wd.sys
10:42:41.0256 0x0bfc  Wd - ok
10:42:41.0289 0x0bfc  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
10:42:41.0316 0x0bfc  Wdf01000 - ok
10:42:41.0343 0x0bfc  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
10:42:41.0363 0x0bfc  WdiServiceHost - ok
10:42:41.0369 0x0bfc  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll
10:42:41.0392 0x0bfc  WdiSystemHost - ok
10:42:41.0422 0x0bfc  [ 55C70654420DBF429604FD567E6F3CD3, 22191B049BCA76EF13AEDF8078E452E6B35E998A75AD63F14C542B541EA9F67D ] WebClient       C:\Windows\System32\webclnt.dll
10:42:41.0445 0x0bfc  WebClient - ok
10:42:41.0469 0x0bfc  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
10:42:41.0502 0x0bfc  Wecsvc - ok
10:42:41.0513 0x0bfc  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
10:42:41.0543 0x0bfc  wercplsupport - ok
10:42:41.0559 0x0bfc  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
10:42:41.0589 0x0bfc  WerSvc - ok
10:42:41.0610 0x0bfc  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
10:42:41.0637 0x0bfc  WfpLwf - ok
10:42:41.0649 0x0bfc  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
10:42:41.0663 0x0bfc  WIMMount - ok
10:42:41.0733 0x0bfc  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
10:42:41.0772 0x0bfc  WinDefend - ok
10:42:41.0782 0x0bfc  WinHttpAutoProxySvc - ok
10:42:41.0842 0x0bfc  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
10:42:41.0906 0x0bfc  Winmgmt - ok
10:42:41.0958 0x0bfc  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM           C:\Windows\system32\WsmSvc.dll
10:42:42.0001 0x0bfc  WinRM - ok
10:42:42.0023 0x0bfc  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
10:42:42.0042 0x0bfc  WinUsb - ok
10:42:42.0081 0x0bfc  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
10:42:42.0119 0x0bfc  Wlansvc - ok
10:42:42.0185 0x0bfc  [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
10:42:42.0234 0x0bfc  wlidsvc - ok
10:42:42.0252 0x0bfc  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
10:42:42.0268 0x0bfc  WmiAcpi - ok
10:42:42.0294 0x0bfc  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
10:42:42.0315 0x0bfc  wmiApSrv - ok
10:42:42.0404 0x0bfc  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
10:42:42.0448 0x0bfc  WMPNetworkSvc - ok
10:42:42.0463 0x0bfc  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
10:42:42.0481 0x0bfc  WPCSvc - ok
10:42:42.0490 0x0bfc  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
10:42:42.0511 0x0bfc  WPDBusEnum - ok
10:42:42.0528 0x0bfc  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
10:42:42.0557 0x0bfc  ws2ifsl - ok
10:42:42.0573 0x0bfc  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
10:42:42.0596 0x0bfc  wscsvc - ok
10:42:42.0601 0x0bfc  WSearch - ok
10:42:42.0675 0x0bfc  [ A7A67674E51F2B050AAC4C477297EEE2, FA6DA2AA7869A99AB3D19509D7F2411E5E2C9ADB6D8DB97D7B8FAF1F6E160687 ] wuauserv        C:\Windows\system32\wuaueng.dll
10:42:42.0737 0x0bfc  wuauserv - ok
10:42:42.0764 0x0bfc  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
10:42:42.0782 0x0bfc  WudfPf - ok
10:42:42.0795 0x0bfc  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
10:42:42.0815 0x0bfc  WUDFRd - ok
10:42:42.0821 0x0bfc  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
10:42:42.0840 0x0bfc  wudfsvc - ok
10:42:42.0862 0x0bfc  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
10:42:42.0884 0x0bfc  WwanSvc - ok
10:42:42.0892 0x0bfc  ================ Scan global ===============================
10:42:42.0911 0x0bfc  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll
10:42:42.0932 0x0bfc  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
10:42:42.0942 0x0bfc  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
10:42:42.0966 0x0bfc  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
10:42:42.0997 0x0bfc  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
10:42:43.0003 0x0bfc  [ Global ] - ok
10:42:43.0004 0x0bfc  ================ Scan MBR ==================================
10:42:43.0013 0x0bfc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:42:43.0403 0x0bfc  \Device\Harddisk0\DR0 - ok
10:42:43.0404 0x0bfc  ================ Scan VBR ==================================
10:42:43.0407 0x0bfc  [ CE6596FE492C5889253B158405322443 ] \Device\Harddisk0\DR0\Partition1
10:42:43.0491 0x0bfc  \Device\Harddisk0\DR0\Partition1 - ok
10:42:43.0498 0x0bfc  [ 290DA252E120F817016B43C31439D186 ] \Device\Harddisk0\DR0\Partition2
10:42:43.0544 0x0bfc  \Device\Harddisk0\DR0\Partition2 - ok
10:42:43.0548 0x0bfc  ================ Scan generic autorun ======================
10:42:43.0594 0x0bfc  [ DCD896D043D9F19664029AA35118497F, AEE3F281AE1EE791CE4DE91467CBCCB7EDDA790776CE1F80595803C36FA8CE87 ] C:\Program Files\avmwlanstick\FRITZWLANMini.exe
10:42:43.0628 0x0bfc  AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 )
10:42:43.0628 0x0bfc  Detect skipped due to KSN trusted
10:42:43.0628 0x0bfc  AVMWlanClient - ok
10:42:43.0704 0x0bfc  [ A6ABD4AF02AB03676DEA55F383ABC7C2, 62F838618C78A297D970EC58F97F2D843EBFEF2D81754D658664BEEED79BFB50 ] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
10:42:43.0729 0x0bfc  avgnt - ok
10:42:43.0766 0x0bfc  [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
10:42:43.0778 0x0bfc  HP Software Update - ok
10:42:43.0838 0x0bfc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:42:43.0878 0x0bfc  Sidebar - ok
10:42:43.0901 0x0bfc  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:42:43.0922 0x0bfc  mctadmin - ok
10:42:43.0952 0x0bfc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:42:43.0992 0x0bfc  Sidebar - ok
10:42:43.0999 0x0bfc  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:42:44.0020 0x0bfc  mctadmin - ok
10:42:44.0029 0x0bfc  AV detected via SS2: Avira Antivirus, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 15.0.11.550 ), 0x41000 ( enabled : updated )
10:42:44.0030 0x0bfc  AV detected via SS2: 360 Total Security, C:\Program Files\360\Total Security\safemon\QHSafeTray.exe ( 7.2.0.1001 ), 0x50000 ( disabled : updated )
10:42:44.0040 0x0bfc  Win FW state via NFP2: enabled ( trusted )
10:42:46.0422 0x0bfc  ============================================================
10:42:46.0422 0x0bfc  Scan finished
10:42:46.0422 0x0bfc  ============================================================
10:42:46.0439 0x0418  Detected object count: 0
10:42:46.0439 0x0418  Actual detected object count: 0

schrauber · 19.08.2015, 17:11

sieht alles gut aus.

Lade Dir bitte von hier

Emsisoft Emergency Kit herunter.

Bitte installiere das Programm in den vorgegebenen Pfad.
Starte das Programm durch Doppelklick der Desktopverknüpfung.
Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.

whitetrain · 19.08.2015, 17:36

Hallo, danke schon mal für die schnelle Hilfe

Code:

ATTFilter

Emsisoft Emergency Kit - Version 10.0
Letztes Update: 19.08.2015 18:26:52
Benutzerkonto: Felix-PC\Felix

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	19.08.2015 18:27:42
C:\ProgramData\apn 	Gefunden: Application.AppInstall (A)
C:\Users\Felix\AppData\Local\Temp\apn 	Gefunden: Application.Win32.WebToolbar (A)

Gescannt:	85391
Gefunden	2

Scan-Ende:	19.08.2015 18:33:37
Scan-Zeit:	0:05:55

C:\Users\Felix\AppData\Local\Temp\apn	Quarantäne Application.Win32.WebToolbar (A)
C:\ProgramData\apn	Quarantäne Application.AppInstall (A)

Quarantäne	2

schrauber · 20.08.2015, 08:10

Immer noch gut. Passwort nochmal ändern. Wenn es dann immer noch passiert bleibt nur Email wechseln.

cosinus · 20.08.2015, 10:10

*Kurz reinhüpf*

FYI => Deutsche Telekom warnt vor Spam-Welle | heise online

schrauber · 21.08.2015, 06:52

Joah, da kann man eigentlich nix machen.

20.08.2015, 08:10	#9
schrauber /// the machine /// TB-Ausbilder	Täglich Spam versendet von meiner T-online Email Adresse Immer noch gut. Passwort nochmal ändern. Wenn es dann immer noch passiert bleibt nur Email wechseln. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

20.08.2015, 10:10	#10
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Täglich Spam versendet von meiner T-online Email Adresse Kurz reinhüpf FYI => Deutsche Telekom warnt vor Spam-Welle \| heise online __________________ Logfiles bitte immer in CODE-Tags posten

21.08.2015, 06:52	#11
schrauber /// the machine /// TB-Ausbilder	Täglich Spam versendet von meiner T-online Email Adresse Joah, da kann man eigentlich nix machen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Täglich Spam versendet von meiner T-online Email Adresse

Log-Analyse und Auswertung: Täglich Spam versendet von meiner T-online Email Adresse