| |
| |||||||
Log-Analyse und Auswertung: WIndows 8 immer wieder SPAM Mails vom Web.de AccountWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
27.09.2015, 17:52
| #1 |
| |  WIndows 8 immer wieder SPAM Mails vom Web.de Account Sehr geehrtes Team vom Trojaner Board, ich habe nun schon das dritte mal innerhalb ca. eines Monats beim Aufrufen meiner privaten Mailadresse (web.de) zahlreiche Nachrichten "Mail delivery failed" u.ä. bekommen, sowie auch Nachrichten von Bekannten, dass sie SPAM Mails von meinem Absender bekommen (meist mit dem Titel Fdw: read this oder Fdw: news). In meinem "Gesendet" Ordner finden sich diese Nachrichten nicht. Beim ersten Mal meldete ich diese Nachrichten sowohl bei web.de als auch bei google als Spam unter Angabe der vollständigen Header, beim zweiten Mal löschte ich auf Anraten eines Bekannten mein gesamtes Postfach sowie Adressbuch, und alle weiteren Ordner, damit nicht mehr auf die Kontaktdaten zugegriffen werden konnte. Beide Male änderte ich nach den unternommenen Schritten das Passwort. Heute habe ich nun schon wieder eine beträchtliche Anzahl dieser Nachrichten, die Mails scheinen auch jetzt noch an alle ehemaligen Adressen meines Postfaches zu gehen. Zusätzlich tritt das Phänomen auf, dass mich Mails mit denselben Titeln (Fdw. news o.ä.) erreichen, die laut Absendername von meinen Bekannten stammen, jedoch meine Absendeadresse aufweisen. Auch scheinen diese Spammails nicht nur an meine Bekannten zu gehen, sondern wenn diese eine Mail an mehrere Absender schickten, unter denen ich war, bekamen anscheinend alle in dieser Liste diese SPAMs. Ich weiß nun nicht mehr, was ich machen soll, und wende mich hilfesuchend an Sie. Defogger fand nichts beim Scannen, daher gab es keine Logdatei. Die Logdatei FRST. txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015
durchgeführt von Uta (Administrator) auf UTA2 (27-09-2015 17:28:04)
Gestartet von C:\Users\Uta\Downloads
Geladene Profile: Uta (Verfügbare Profile: Uta)
Platform: Windows 8.1 Connected (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
(McAfee, Inc.) C:\Program Files\mcafee\VirusScan\mcods.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
() C:\Program Files (x86)\McAfee\SiteAdvisor\Download\s4k8.m.exe
(McAfee, Inc.) C:\Windows\Temp\SiteAdvisor{9846876D-91A4-49D6-A9DD-39EAB1DE9039}\saInst.exe
(McAfee, Inc.) C:\Windows\Temp\SiteAdvisor{9846876D-91A4-49D6-A9DD-39EAB1DE9039}\mcinst.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWXDetector.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9ABADE37-EFFF-4104-9B14-FBD430AC6260}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{BCE65BE8-0AF6-4318-B481-C25748211248}: [DhcpNameServer] 40.52.1.201 40.52.1.203
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected
HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1274317435-2679677014-2603788777-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1274317435-2679677014-2603788777-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-08-04] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
BHO-x32: Kein Name -> {E6E66045-E911-4C01-961D-32387BF12768} -> C:\Users\Uta\AppData\LocalLow\Browser-Security\safe_url.dll [2015-07-22] ()
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-08-25] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\MSC\McSnIePl64.dll [2015-08-21] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-08-21] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Homepage: web.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-21] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-08-21] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-21] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-08-21] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-08-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF user.js: detected! => C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\user.js [2015-08-25]
FF SearchPlugin: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\searchplugins\McSiteAdvisor.xml [2015-09-27]
FF SearchPlugin: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\searchplugins\search-provided-by-yahoo.xml [2015-08-25]
FF Extension: Browser-Security - C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\Extensions\firefox@browser-security.de.xpi [2015-08-25]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: Kein Name - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-09-18]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-08-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-09-18]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-09-18]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 0007541442951330mcinstcleanup; C:\Windows\TEMP\000754~1.EXE [882000 2015-06-18] (McAfee, Inc.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2774104 2015-09-11] (Microsoft Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2014-10-29] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [157928 2015-09-15] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [782608 2015-08-21] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-07-17] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-06-29] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-07-15] (McAfee, Inc.)
R3 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-06-29] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-03-31] (ASUS Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [77536 2015-07-02] (McAfee, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-28] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [412440 2015-07-02] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-07-02] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496888 2015-07-02] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-07-02] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [529080 2015-06-28] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [109728 2015-06-28] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-09-15] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-07-02] (McAfee, Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3421040 2014-04-30] (Realtek Semiconductor Corporation )
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-09-27 17:29 - 2015-09-27 17:29 - 00047046 _____ C:\Users\Uta\Desktop\FRST.txt
2015-09-27 17:29 - 2015-09-27 17:29 - 00022123 _____ C:\Users\Uta\Desktop\Addition 2.txt
2015-09-27 17:28 - 2015-09-27 17:28 - 00022123 _____ C:\Users\Uta\Desktop\Addition.txt
2015-09-27 17:17 - 2015-09-27 17:27 - 00022123 _____ C:\Users\Uta\Downloads\Addition.txt
2015-09-27 17:08 - 2015-09-27 17:28 - 00019401 _____ C:\Users\Uta\Downloads\FRST.txt
2015-09-27 17:06 - 2015-09-27 17:28 - 00000000 ____D C:\FRST
2015-09-27 17:04 - 2015-09-27 17:04 - 02192384 _____ (Farbar) C:\Users\Uta\Downloads\FRST64.exe
2015-09-27 17:02 - 2015-09-27 17:02 - 00050477 _____ C:\Users\Uta\Downloads\Defogger.exe
2015-09-27 17:02 - 2015-09-27 17:02 - 00000468 _____ C:\Users\Uta\Downloads\defogger_disable.log
2015-09-27 17:02 - 2015-09-27 17:02 - 00000000 _____ C:\Users\Uta\defogger_reenable
2015-09-27 16:42 - 2015-09-27 16:42 - 00380416 _____ C:\Users\Uta\Downloads\7r03gs8p.exe
2015-09-27 16:42 - 2015-09-27 16:42 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-09-21 12:49 - 2015-09-25 14:18 - 00000000 ____D C:\Users\Uta\Desktop\Archivo di Stato Torino 21.09. - 28.09.15
2015-09-17 11:28 - 2015-09-17 11:33 - 00000000 ____D C:\Users\Uta\Documents\Uni
2015-09-17 11:27 - 2015-09-17 11:27 - 00000000 ____D C:\Users\Uta\Documents\Tutorium Bohde
2015-09-17 11:25 - 2015-09-17 11:26 - 00000000 ____D C:\Users\Uta\Documents\roter Stick
2015-09-17 10:48 - 2015-09-17 11:24 - 00000000 ____D C:\Users\Uta\Documents\M.A
2015-09-17 10:47 - 2015-09-17 10:48 - 00000000 ____D C:\Users\Uta\Documents\Hausarbeiten
2015-09-17 10:37 - 2015-09-17 10:47 - 00000000 ____D C:\Users\Uta\Documents\grüner Stick
2015-09-17 10:37 - 2015-09-17 10:37 - 00000000 ____D C:\Users\Uta\Documents\Finanzen
2015-09-17 10:37 - 2015-09-17 10:37 - 00000000 ____D C:\Users\Uta\Documents\DVD Liste
2015-09-16 08:30 - 2015-09-16 08:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-16 08:29 - 2015-09-16 09:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-09-16 08:29 - 2015-09-16 08:29 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-16 08:28 - 2015-09-16 09:41 - 00000000 ____D C:\Users\Uta\Desktop\mbar
2015-09-16 08:28 - 2015-09-16 08:28 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-16 08:26 - 2015-09-16 08:27 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Uta\Downloads\mbar-1.09.3.1001.exe
2015-09-09 22:19 - 2015-09-10 06:35 - 00000000 ____D C:\Users\Uta\Desktop\WS 15-16
2015-09-09 02:24 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 02:24 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 02:24 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 02:24 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 02:24 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 02:24 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 02:24 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 02:24 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 02:24 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-09-09 02:24 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 02:24 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 02:24 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 02:24 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 02:24 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 02:24 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 02:24 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-09-09 02:24 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 02:24 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-09-09 02:24 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 02:24 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 02:24 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 02:24 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 02:24 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 02:24 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 02:24 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 02:24 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 02:21 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-09 02:21 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-09 02:21 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-09 02:21 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-09 02:21 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 02:21 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 02:21 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 02:21 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 02:21 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 02:21 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 02:21 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-09 02:21 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-09 02:21 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-09 02:21 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-09 02:21 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-09 02:20 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 02:20 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 02:15 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-09-09 02:15 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-09-09 02:15 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-09-09 02:14 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 02:14 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 02:14 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 02:14 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 02:14 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 02:14 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 02:14 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 02:14 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 02:14 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2015-09-09 02:14 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2015-09-09 02:14 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 02:14 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2015-09-09 02:14 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2015-09-09 02:14 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-09 02:14 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-09-09 02:14 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-09 02:14 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 02:14 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-09-09 02:14 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-09-09 02:14 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-09-09 02:14 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-09-09 02:14 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2015-09-09 02:14 - 2015-07-13 21:10 - 00411455 _____ C:\Windows\system32\ApnDatabase.xml
2015-09-09 02:14 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-09-03 17:10 - 2015-09-14 09:21 - 00000000 ____D C:\Users\Uta\AppData\Roaming\Foxit Software
2015-09-02 06:42 - 2015-09-02 06:42 - 00000000 ____D C:\Users\Uta\AppData\Local\Macromedia
2015-09-02 06:31 - 2015-09-27 17:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-02 06:31 - 2015-09-21 22:16 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-02 06:30 - 2015-09-02 06:31 - 00000000 ____D C:\Users\Uta\AppData\Local\Adobe
2015-09-01 07:46 - 2015-09-01 07:46 - 00000000 ____D C:\Users\Uta\Documents\Benutzerdefinierte Office-Vorlagen
2015-09-01 07:43 - 2015-09-01 07:43 - 00000000 __RHD C:\MSOCache
2015-08-30 22:29 - 2015-08-30 22:29 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-08-28 19:35 - 2015-08-28 19:35 - 00000000 ____D C:\Users\Uta\AppData\Local\GWX
2015-08-28 10:45 - 2015-08-28 10:45 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001178 _____ C:\Users\Public\Desktop\VideoPad Video-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001174 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001162 _____ C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2015-08-28 10:44 - 2015-09-04 12:41 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2015-08-28 10:44 - 2015-08-28 11:36 - 00000000 ____D C:\Users\Uta\AppData\Roaming\NCH Software
2015-08-28 10:44 - 2015-08-28 10:45 - 00000000 ____D C:\ProgramData\NCH Software
2015-08-28 10:44 - 2015-08-28 10:45 - 00000000 ____D C:\Program Files (x86)\NCH Software
2015-08-28 10:44 - 2015-08-28 10:44 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Videorekorder.lnk
2015-08-28 10:44 - 2015-08-28 10:44 - 00001116 _____ C:\Users\Public\Desktop\Debut Videorekorder.lnk
2015-08-28 10:41 - 2015-08-28 10:42 - 01558752 _____ (NCH Software) C:\Users\Uta\Downloads\debutpsetup.exe
2015-08-28 10:31 - 2015-08-28 10:31 - 00000000 ____D C:\Users\Uta\Tracing
2015-08-28 10:29 - 2015-08-28 10:29 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-28 10:29 - 2015-08-28 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-28 10:13 - 2015-08-28 10:13 - 00001323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-08-28 10:13 - 2015-08-28 10:13 - 00000000 ____D C:\Windows\de
2015-08-28 10:11 - 2015-08-28 10:11 - 00001392 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-08-28 10:11 - 2015-08-28 10:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-28 10:09 - 2015-08-28 10:11 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-08-28 10:09 - 2015-08-28 10:09 - 00000000 ____D C:\Windows\PCHEALTH
2015-08-28 10:07 - 2015-08-28 10:07 - 00000194 _____ C:\Windows\DirectX.log
2015-08-28 10:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-08-28 10:07 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-08-28 10:07 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-08-28 10:07 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-08-28 10:07 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-08-28 09:56 - 2015-09-12 10:03 - 00000000 ____D C:\Users\Uta\AppData\Local\Windows Live
2015-08-28 09:56 - 2015-08-28 09:56 - 01245384 _____ (Microsoft Corporation) C:\Users\Uta\Downloads\wlsetup-web.exe
2015-08-28 05:41 - 2015-09-15 03:18 - 00812008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-28 05:41 - 2015-09-15 03:18 - 00178152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-28 05:28 - 2015-08-28 05:42 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-28 00:33 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 00:33 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-09-27 17:14 - 2015-08-25 02:14 - 00000272 _____ C:\Windows\Tasks\UpdateTask.job
2015-09-27 17:14 - 2015-08-24 22:51 - 01747174 _____ C:\Windows\WindowsUpdate.log
2015-09-27 17:05 - 2015-08-24 22:55 - 00003906 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CF450DAB-1926-45BC-8A74-71EC672ECC45}
2015-09-27 17:02 - 2015-08-24 22:51 - 00000000 ____D C:\Users\Uta
2015-09-27 17:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-09-27 16:42 - 2015-08-25 02:00 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-09-27 16:28 - 2015-08-24 22:55 - 00000126 _____ C:\Users\Uta\AppData\Roaming\sp_data.sys
2015-09-27 08:42 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-09-26 20:08 - 2015-08-24 22:57 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1274317435-2679677014-2603788777-1001
2015-09-25 10:16 - 2014-11-09 12:31 - 00765582 _____ C:\Windows\system32\perfh007.dat
2015-09-25 10:16 - 2014-11-09 12:31 - 00159366 _____ C:\Windows\system32\perfc007.dat
2015-09-25 10:16 - 2014-03-18 17:25 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-25 06:42 - 2015-08-25 01:24 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-09-24 18:45 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-09-22 21:53 - 2014-12-18 13:55 - 00000000 ____D C:\ProgramData\McAfee
2015-09-22 21:48 - 2015-08-25 01:48 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-09-22 17:21 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-09-21 14:42 - 2013-08-22 16:46 - 00026831 _____ C:\Windows\setupact.log
2015-09-20 20:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-09-18 22:21 - 2014-03-18 10:13 - 00012190 _____ C:\Windows\PFRO.log
2015-09-18 22:21 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-18 22:21 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-09-18 07:35 - 2015-08-24 22:51 - 00000000 ____D C:\Users\Uta\AppData\Local\Packages
2015-09-17 08:14 - 2015-08-25 20:14 - 00000184 _____ C:\Users\Uta\AppData\Roaming\WB.CFG
2015-09-16 11:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-09-12 20:34 - 2013-08-22 16:44 - 00371968 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-12 11:37 - 2014-03-18 17:03 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-12 11:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-11 06:02 - 2015-08-25 01:32 - 00000000 ___RD C:\Users\Uta\OneDrive
2015-09-11 06:01 - 2015-08-25 01:32 - 00003084 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1274317435-2679677014-2603788777-1001
2015-09-11 05:44 - 2015-08-27 19:49 - 00000000 ____D C:\Windows\system32\MRT
2015-09-04 06:44 - 2015-08-25 19:59 - 00000000 ____D C:\Users\Uta\AppData\Roaming\Skype
2015-09-04 01:17 - 2014-11-09 06:59 - 00000000 ____D C:\ProgramData\Skype
2015-08-31 07:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-31 07:37 - 2014-11-09 12:31 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\winrm
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\WCN
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\winrm
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\WCN
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\slmgr
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\MUI
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\MUI
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Com
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\IME
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Help
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-31 07:36 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-08-31 07:36 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing
2015-08-31 07:35 - 2013-08-22 17:36 - 00000000 ___SD C:\Windows\system32\dsc
2015-08-31 07:35 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-08-30 00:45 - 2014-11-09 13:35 - 00000000 ____D C:\Windows\Panther
2015-08-30 00:18 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT
2015-08-29 22:15 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-29 06:52 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppCompat
2015-08-28 05:41 - 2013-08-22 17:37 - 00004167 _____ C:\Windows\DtcInstall.log
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sr-Latn-RS
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sppui
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sppui
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-08-28 05:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-28 05:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-08-24 22:55 - 2015-09-27 16:28 - 0000126 _____ () C:\Users\Uta\AppData\Roaming\sp_data.sys
2015-08-25 20:14 - 2015-09-17 08:14 - 0000184 _____ () C:\Users\Uta\AppData\Roaming\WB.CFG
2014-12-18 13:36 - 2014-12-18 13:36 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-09 06:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-11-09 06:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-11-09 06:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS
Einige Dateien in TEMP:
====================
C:\Users\Uta\AppData\Local\Temp\ExPromo.exe
C:\Users\Uta\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\Uta\AppData\Local\Temp\McCSPInstall.dll
C:\Users\Uta\AppData\Local\Temp\setup.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-09-24 17:20
==================== Ende von FRST.txt ============================
Die Logdatei FRST Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-09-2015
durchgeführt von Uta (2015-09-27 17:39:32)
Gestartet von C:\Users\Uta\Downloads
Windows 8.1 Connected (X64) (2015-08-24 20:51:06)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1274317435-2679677014-2603788777-500 - Administrator - Disabled)
Gast (S-1-5-21-1274317435-2679677014-2603788777-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1274317435-2679677014-2603788777-1003 - Limited - Enabled)
Uta (S-1-5-21-1274317435-2679677014-2603788777-1001 - Administrator - Enabled) => C:\Users\Uta
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.03.0006 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Browser-Security (HKLM-x32\...\Browser-Security) (Version: 1.0.7.0 - Vondos Media GmbH)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debut Videorekorder (HKLM-x32\...\Debut) (Version: 2.17 - NCH Software)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{FC76E6BB-7CBB-4CD6-8178-3BCADC0526C3}) (Version: 6.0.62.801 - Foxit Corporation)
Free YouTube Download version 3.2.61.805 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.61.805 - DVDVideoSoft Ltd.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5228 - Gretech Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3925 - Intel Corporation)
Intel(R) Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.0.0.1002 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 14.0.4121 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.167 - McAfee, Inc.)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4753.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.2 (x86 de)) (Version: 40.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.2 - Mozilla)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7224 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Provided by Yahoo (HKLM-x32\...\Wincy) (Version: - Wincy)
Skype™ 7.9 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.9.103 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 4.02 - NCH Software)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.12 - NCH Software)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.11.399 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (03/18/2014 6.0.0.35) (HKLM\...\DAA6E0EEB715139C1CEA332C78AB4609FB3C211B) (Version: 03/18/2014 6.0.0.35 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
04-09-2015 01:07:04 McAfee Vulnerability Scanner
11-09-2015 05:10:42 Windows Update
22-09-2015 17:18:46 Windows Update
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0742A6A7-97B7-4490-B189-48CE4F285BCA} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-09-02] (ASUSTek Computer Inc.)
Task: {109617BA-DEE5-4C22-A69A-AE90438D02BF} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {12FA83FA-37CA-42D6-A32A-F7E76E18F6CC} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {14B4FFD7-5987-47CF-A347-EA37CDACEA69} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {20714524-5825-4737-BFAF-7741DD226C2A} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {43D1FBA3-13E2-439B-9770-F372B07260EC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {4CA3C184-1486-4E7D-8764-3403B500FAD2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21] (Adobe Systems Incorporated)
Task: {5F85B721-3033-472B-9143-7190FCD0014A} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-09-11] (ASUS)
Task: {91F057D6-6115-416B-85D4-55F5DE262109} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1274317435-2679677014-2603788777-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {9F582B9A-8B44-4F0D-BA31-43456031653B} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {A16FFF53-CF67-4941-A4EF-A88E9B3D8433} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {A2EB4732-1CB5-4B88-8028-ABAC7CA9FEFE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-04-15] (Realtek Semiconductor)
Task: {A325748F-7D0D-46DC-9EF8-A1FA7BABC7C8} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10] (Realtek Semiconductor)
Task: {ACD97FF8-D038-4CA4-BD38-D6E0C99BA7AB} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {B6F470B8-20D3-461E-8977-98FAC6B399E5} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {CF6552D4-A947-4B7B-81B1-DCBEF68CE80E} - System32\Tasks\UpdateTask => C:\Users\Uta\AppData\Local\{E666D~1\UNINST~1.EXE [2015-08-25] ()
Task: {D364E31D-42BC-4E9D-BD2C-3ED35F4736EC} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E32BC5A4-BDD0-4ABB-BB12-0B1740CDB0A6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\UpdateTask.job => C:\Users\Uta\AppData\Local\{E666D~1\UNINST~1.EXE
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-08-25 01:24 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-02-12 14:08 - 2015-02-12 14:08 - 00012288 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
2015-09-27 17:19 - 2015-09-27 17:20 - 07590976 _____ () C:\Program Files (x86)\McAfee\SiteAdvisor\Download\s4k8.m.exe
2014-09-11 20:31 - 2014-09-11 20:31 - 00037424 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2013-04-27 10:24 - 2013-04-27 10:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Control Panel\Desktop\\Wallpaper -> E:\PC Sicherung 03.07.2015\Bilder\599.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{37991CF5-AF94-406C-A6E5-AB5D38AAD189}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCED65CF-F5AC-4496-878B-9CCEDCEE01CA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BD21B961-C15C-4B29-A2CC-DFE0799CD460}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E67653E3-8B8B-4227-AAF1-E1C998905FCD}] => (Allow) C:\Users\Uta\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{C142F4D4-E98B-4AD3-AADE-B9D13DA3468D}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{20C7C20B-C88B-4D8B-AAEA-5CDFFFDAF954}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5CD1DF00-5D5B-4FC7-BF6B-E5B37EECB75D}] => (Allow) LPort=2869
FirewallRules: [{2A742CE3-F64B-4BA9-8492-D71F9837831A}] => (Allow) LPort=1900
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/26/2015 07:50:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: OLEAUT32.dll, Version: 6.3.9600.17560, Zeitstempel: 0x5493ae73
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005410
ID des fehlerhaften Prozesses: 0x1b9c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5
Error: (09/25/2015 01:49:38 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (09/25/2015 10:50:29 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4
Error: (09/25/2015 10:50:28 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4
Error: (09/25/2015 10:50:04 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description:
Error: (09/25/2015 10:50:04 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL4
Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4
Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\Windows\system32\esentprf.dll4
Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4
Error: (09/24/2015 10:31:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4
Systemfehler:
=============
Error: (09/27/2015 04:21:58 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst McODS erreicht.
Error: (09/25/2015 12:58:28 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.
Error: (09/25/2015 12:58:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.
Error: (09/25/2015 12:58:23 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.
Error: (09/24/2015 05:21:25 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (09/24/2015 05:20:33 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (09/24/2015 05:20:32 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
Error: (09/24/2015 02:30:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (09/23/2015 05:05:04 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (09/23/2015 05:04:33 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Celeron(R) CPU N2830 @ 2.16GHz
Prozentuale Nutzung des RAM: 88%
Installierter physikalischer RAM: 1934.69 MB
Verfügbarer physikalischer RAM: 222.52 MB
Summe virtueller Speicher: 7102.96 MB
Verfügbarer virtueller Speicher: 1517.53 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:42.58 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:258.34 GB) (Free:211.26 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 543DAE44)
Partition: GPT.
==================== Ende von Addition.txt ============================
Die Logdatei von Gmer: Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-09-27 18:19:36
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000021 HGST_HTS545050A7E680 rev.GG2OAF10 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\Uta\AppData\Local\Temp\fxldapob.sys
---- Kernel code sections - GMER 2.1 ----
.text C:\Windows\System32\win32k.sys!W32pServiceTable fffff96000190300 15 bytes [00, 0B, F2, 01, 00, 06, 6C, ...]
.text C:\Windows\System32\win32k.sys!W32pServiceTable + 16 fffff96000190310 8 bytes [00, D7, FB, FF, 00, D3, CD, ...]
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\csrss.exe [888:6048] fffff960009132d0
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Mit freundlichen Grüßen Uta |
|
27.09.2015, 17:59
| #2 |
| /// the machine /// TB-Ausbilder    | WIndows 8 immer wieder SPAM Mails vom Web.de Account hi,
__________________Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
|
27.09.2015, 21:21
| #3 |
| | LOG Dateien Malwarebytes und TDSSKiller Sehr geehrter Team von Trojaner Board,
__________________vielen Dank für Ihre schnelle Hilfe, ich habe beide Programme nun ausgeführt, laut den Scans wurde dabei kein Virus etc. gefunden. Hier die LOG Dateien: Malewarebytes: Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2015.09.27.04
rootkit: v2015.09.22.01
Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.18036
Uta :: UTA2 [administrator]
27.09.2015 20:36:14
mbar-log-2015-09-27 (20-36-14).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 346728
Time elapsed: 1 hour(s), 17 minute(s), 28 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter 21:58:37.0306 0x1228 TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
21:58:37.0306 0x1228 UEFI system
21:58:47.0472 0x1228 ============================================================
21:58:47.0472 0x1228 Current date / time: 2015/09/27 21:58:47.0472
21:58:47.0472 0x1228 SystemInfo:
21:58:47.0472 0x1228
21:58:47.0472 0x1228 OS Version: 6.3.9600 ServicePack: 0.0
21:58:47.0472 0x1228 Product type: Workstation
21:58:47.0472 0x1228 ComputerName: UTA2
21:58:47.0472 0x1228 UserName: Uta
21:58:47.0472 0x1228 Windows directory: C:\Windows
21:58:47.0472 0x1228 System windows directory: C:\Windows
21:58:47.0473 0x1228 Running under WOW64
21:58:47.0473 0x1228 Processor architecture: Intel x64
21:58:47.0473 0x1228 Number of processors: 2
21:58:47.0473 0x1228 Page size: 0x1000
21:58:47.0473 0x1228 Boot type: Normal boot
21:58:47.0473 0x1228 ============================================================
21:58:47.0805 0x1228 System UUID: {02958EBA-DAEF-D7C0-CB98-BD5F29A38E1E}
21:58:48.0597 0x1228 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:58:48.0608 0x1228 ============================================================
21:58:48.0609 0x1228 \Device\Harddisk0\DR0:
21:58:48.0613 0x1228 GPT partitions:
21:58:48.0614 0x1228 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {19DFF712-B913-46B9-88CC-904CECB26CE4}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
21:58:48.0614 0x1228 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {FFA03883-1690-42BC-9110-BDA16591ED76}, Name: Basic data partition, StartLBA 0x32800, BlocksNum 0x1C2000
21:58:48.0614 0x1228 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {B6578E5B-B75C-44ED-9325-A83770E2136F}, Name: Microsoft reserved partition, StartLBA 0x1F4800, BlocksNum 0x40000
21:58:48.0614 0x1228 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {2EFDA897-C5AA-4A7A-9205-56192A107ABE}, Name: Basic data partition, StartLBA 0x234800, BlocksNum 0x1749C000
21:58:48.0615 0x1228 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {1B8282CF-1735-49AF-9504-AA8FD32A2BEF}, Name: Basic data partition, StartLBA 0x176D0800, BlocksNum 0x204B0800
21:58:48.0615 0x1228 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {81EDF113-8C44-4696-9CEA-94AD7138C166}, Name: Basic data partition, StartLBA 0x37B81000, BlocksNum 0x2805000
21:58:48.0615 0x1228 MBR partitions:
21:58:48.0615 0x1228 ============================================================
21:58:48.0656 0x1228 C: <-> \Device\Harddisk0\DR0\Partition4
21:58:48.0727 0x1228 D: <-> \Device\Harddisk0\DR0\Partition5
21:58:48.0727 0x1228 ============================================================
21:58:48.0727 0x1228 Initialize success
21:58:48.0727 0x1228 ============================================================
21:58:55.0300 0x1988 ============================================================
21:58:55.0300 0x1988 Scan started
21:58:55.0300 0x1988 Mode: Manual;
21:58:55.0300 0x1988 ============================================================
21:58:55.0300 0x1988 KSN ping started
21:58:57.0924 0x1988 KSN ping finished: true
21:59:00.0041 0x1988 ================ Scan system memory ========================
21:59:00.0041 0x1988 System memory - ok
21:59:00.0045 0x1988 ================ Scan services =============================
21:59:00.0759 0x1988 0007541442951330mcinstcleanup - ok
21:59:01.0994 0x1988 [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
21:59:02.0010 0x1988 1394ohci - ok
21:59:02.0213 0x1988 [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware C:\Windows\system32\drivers\3ware.sys
21:59:02.0213 0x1988 3ware - ok
21:59:02.0338 0x1988 [ E796AE43DDD1844281DB4D57294D17C0, 21AE69615044A96041E46476BE814B52C22624B6C7EA6BFC77BB64F69C3C21F5 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:59:02.0400 0x1988 ACPI - ok
21:59:02.0447 0x1988 [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex C:\Windows\system32\Drivers\acpiex.sys
21:59:02.0463 0x1988 acpiex - ok
21:59:02.0478 0x1988 [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
21:59:02.0494 0x1988 acpipagr - ok
21:59:02.0510 0x1988 [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
21:59:02.0525 0x1988 AcpiPmi - ok
21:59:02.0541 0x1988 [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime C:\Windows\System32\drivers\acpitime.sys
21:59:02.0541 0x1988 acpitime - ok
21:59:02.0681 0x1988 [ C6D147C12C424373B016C0AB0A6C61EB, 043D44F3C942CFC3558E782938C26849BF648A58A7AA62C4A526E37DE4136C27 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:59:02.0697 0x1988 AdobeFlashPlayerUpdateSvc - ok
21:59:02.0791 0x1988 [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX C:\Windows\system32\drivers\ADP80XX.SYS
21:59:02.0853 0x1988 ADP80XX - ok
21:59:02.0916 0x1988 [ BCD58DACAA1EAAADC115EDD940478F6D, F31613F583C302F62A00E6766B031531C9E193CAED563689B178BA257715B992 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:59:02.0947 0x1988 AeLookupSvc - ok
21:59:03.0010 0x1988 [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD C:\Windows\system32\drivers\afd.sys
21:59:03.0056 0x1988 AFD - ok
21:59:03.0181 0x1988 [ 98022774D9930ECBB292E70DB7601DF6, BE64A40B9BE997D73C0FC14D97E204C9D886EDA07EC4C9391A70CE477084E5F1 ] AgereSoftModem C:\Windows\system32\DRIVERS\agrsm64.sys
21:59:03.0275 0x1988 AgereSoftModem - ok
21:59:03.0307 0x1988 [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:59:03.0307 0x1988 agp440 - ok
21:59:03.0338 0x1988 [ FE14D249D39368CA62D8DA6BC94AC694, E1036E22BFBD3750FD2D3DA6AB939B2DD54E824F4BD3E6539EF0E45AB5453DD1 ] ahcache C:\Windows\system32\DRIVERS\ahcache.sys
21:59:03.0354 0x1988 ahcache - ok
21:59:03.0385 0x1988 [ 16F6F6B7903B913AB41AB848C8BB5658, 7304257048CB42E5274B3F6400F4A053A38E3B70A157662FE9D2B7C5979DE851 ] AiCharger C:\Windows\system32\DRIVERS\AiCharger.sys
21:59:03.0400 0x1988 AiCharger - ok
21:59:03.0447 0x1988 [ 14A45BE6F5678339F0EC5752D9849410, DD0F60E96FAC68FBD5B86382E541408C613BD0F871D0E0A1EF9AB6E7B26E545C ] ALG C:\Windows\System32\alg.exe
21:59:03.0463 0x1988 ALG - ok
21:59:03.0494 0x1988 [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
21:59:03.0510 0x1988 AmdK8 - ok
21:59:03.0525 0x1988 [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
21:59:03.0541 0x1988 AmdPPM - ok
21:59:03.0572 0x1988 [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:59:03.0572 0x1988 amdsata - ok
21:59:03.0603 0x1988 [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
21:59:03.0650 0x1988 amdsbs - ok
21:59:03.0682 0x1988 [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:59:03.0697 0x1988 amdxata - ok
21:59:03.0760 0x1988 [ 415DD71628795197F7AFC176CBADC74E, 5F0359053A6CD6EE239139E0E6F46E1FA9A73F017C0CE9B7BC052216B2C846EC ] AppID C:\Windows\system32\drivers\appid.sys
21:59:03.0760 0x1988 AppID - ok
21:59:03.0807 0x1988 [ 88358135810B9DFD830A9D3A8C3D149A, DF914DA3828EE2310895D156342E3B3DF5E8C6F6F9B851C359E82A1F48180D4B ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:59:03.0807 0x1988 AppIDSvc - ok
21:59:03.0854 0x1988 [ 680BFB820C5A943AB709BAA2B1EF27F2, A51D2A7976A762FE470C13C6D1BA0319A0FB19C9E66BF02AA44F83EAEC7130F8 ] Appinfo C:\Windows\System32\appinfo.dll
21:59:03.0854 0x1988 Appinfo - ok
21:59:03.0916 0x1988 [ 35E28923A23ADABAA5A1B43256D0AB58, A5F3AF8BBEE58B2165BAFACC5FF8B167B55B020998D3D1565C2229ED8753B269 ] AppReadiness C:\Windows\system32\AppReadiness.dll
21:59:03.0947 0x1988 AppReadiness - ok
21:59:04.0072 0x1988 [ 573542B5E97772021B73E854DA861DAA, C3FD00FA28060F8D7CDFD455BBB5FF8239CB76DDFFF2BDAE6AA944674DD993D3 ] AppXSvc C:\Windows\system32\appxdeploymentserver.dll
21:59:04.0150 0x1988 AppXSvc - ok
21:59:04.0182 0x1988 [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:59:04.0197 0x1988 arcsas - ok
21:59:04.0275 0x1988 [ 564CB886D1A968B9798C1AB03F4EB54F, F7F73E5C17C0848462860E367215F5D9D4C52E1AA26B3154EC60BA14CBD56556 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
21:59:04.0291 0x1988 ASLDRService - ok
21:59:04.0306 0x1988 [ 4C016FD76ED5C05E84CA8CAB77993961, 025E7BE9FCEFD6A83F4471BBA0C11F1C11BD5047047D26626DA24EE9A419CDC4 ] ASMMAP64 C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
21:59:04.0322 0x1988 ASMMAP64 - ok
21:59:04.0369 0x1988 [ DB5610839DBEBE48AA963DFA96FD7103, AADB0D5BFE8C28E31266FA48FEE41B82DC8B5D6F3E12238AD3E06C800F2D72A8 ] Asus WebStorage Windows Service C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
21:59:04.0400 0x1988 Asus WebStorage Windows Service - ok
21:59:04.0447 0x1988 [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi C:\Windows\system32\drivers\atapi.sys
21:59:04.0463 0x1988 atapi - ok
21:59:04.0494 0x1988 [ DBC598E47E7A382E60E2A4745D41FEF9, A810AC197CA456B0285E2CAE6986D38B31F4ADA32BEB47EC7A48A2B2196BA639 ] ATKGFNEXSrv C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
21:59:04.0494 0x1988 ATKGFNEXSrv - ok
21:59:04.0541 0x1988 [ C435191FAD19B43E5C3082E4275DCE75, 12D8AF471CA89FE59790092EF3274D638B4B978F1F061423F8D70F270121CF7A ] ATKWMIACPIIO C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
21:59:04.0557 0x1988 ATKWMIACPIIO - ok
21:59:04.0588 0x1988 [ 01D911D09BD63E6CA76137F9655B18C5, 4339DADE6DE8700D33742D87D0C9C5BE4C5EBE37CFC8D558D2192A23CF3B80FF ] ATP C:\Windows\System32\drivers\AsusTP.sys
21:59:04.0604 0x1988 ATP - ok
21:59:04.0650 0x1988 [ 431FE56F5A2F5937994CB2DA330B47DB, E5AED551529A21494114959251FDF566802DD6D9B9D86A937A0EECE53338CAC7 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
21:59:04.0666 0x1988 AudioEndpointBuilder - ok
21:59:04.0729 0x1988 [ 0F03CC00645D7F841879A048787D6AC7, 3ECD2486157469F2EDB63D4868338D1445F2909153DF0AFFE432083730EEE3F5 ] Audiosrv C:\Windows\System32\Audiosrv.dll
21:59:04.0807 0x1988 Audiosrv - ok
21:59:04.0838 0x1988 [ 3C6ED74AF41DD1A5585CE5EF3D00915F, A742F576407776634E5A8E49C60023FFDF395DE0B2DE36662A23F85B79405ED2 ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:59:04.0854 0x1988 AxInstSV - ok
21:59:04.0916 0x1988 [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
21:59:04.0947 0x1988 b06bdrv - ok
21:59:04.0979 0x1988 [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
21:59:04.0979 0x1988 BasicDisplay - ok
21:59:04.0994 0x1988 [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
21:59:05.0010 0x1988 BasicRender - ok
21:59:05.0057 0x1988 [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2 C:\Windows\System32\drivers\bcmfn2.sys
21:59:05.0057 0x1988 bcmfn2 - ok
21:59:05.0119 0x1988 [ 77D760E9B477C21487C171F561497F98, 2393D466CEC863C771C5BB4CD81B251635DC084386134B8E13F74F3E1C6D68DF ] BDESVC C:\Windows\System32\bdesvc.dll
21:59:05.0150 0x1988 BDESVC - ok
21:59:05.0166 0x1988 [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep C:\Windows\system32\drivers\Beep.sys
21:59:05.0182 0x1988 Beep - ok
21:59:05.0244 0x1988 [ 7BCB00EA702F78EC74CD9699D85CE80B, 17241ADAA13051B560DB9FA9079CAE6321D5B49788B596C125DC912443B00421 ] BFE C:\Windows\System32\bfe.dll
21:59:05.0307 0x1988 BFE - ok
21:59:05.0432 0x1988 [ 48554994279BFE17A3D2B00076D0CB1A, 6521B1EC0BC6B01F63976370D89FE7DC2E7404899F68B6FAC37A9173B9C5D489 ] BITS C:\Windows\System32\qmgr.dll
21:59:05.0588 0x1988 BITS - ok
21:59:05.0619 0x1988 [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:59:05.0619 0x1988 bowser - ok
21:59:05.0682 0x1988 [ FA601515FF2B59F25FDD8EDB1D2A1104, 21DFB53241F8E880F7546B9ADF38F47D6AD0782EC7F8F0284ED69DE7CEF7DCB9 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
21:59:05.0697 0x1988 BrokerInfrastructure - ok
21:59:05.0744 0x1988 [ BC111AADACD0BF59D56547461D13AB6E, 91E3619930C29EE4B2683683888BA7EE3CF6B1DDB0C19A14E0880470CBE40EF4 ] Browser C:\Windows\System32\browser.dll
21:59:05.0744 0x1988 Browser - ok
21:59:05.0775 0x1988 [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
21:59:05.0775 0x1988 BthAvrcpTg - ok
21:59:05.0838 0x1988 [ 272A62B660A48AEF366F8A1836CED19F, 78EFAC6B1B2313482329BBFFBF0DDA6462BD88E5BE3C817C5E8E0EAF3074C925 ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
21:59:05.0838 0x1988 BthHFEnum - ok
21:59:05.0885 0x1988 [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
21:59:05.0900 0x1988 bthhfhid - ok
21:59:05.0947 0x1988 [ 9307A4B743D277C499CDA8E19E5687AC, 7A01989EC3D54581F292BDEDC9B9445F2ABD50165102617E3089BDD061C63A19 ] BthHFSrv C:\Windows\System32\BthHFSrv.dll
21:59:05.0963 0x1988 BthHFSrv - ok
21:59:05.0994 0x1988 [ EF4B9E7C9AD88C00C18A12B0D22D1894, 672537E75201E690D86CD65252B8AEF887C76EBD37AB0C419462D69164B350CC ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
21:59:06.0010 0x1988 BTHMODEM - ok
21:59:06.0057 0x1988 [ 043A0F37631BF453F16D478B71320F46, C368296B802984F438852927B8A40EA3F4205724A05828F3173F08EC17228356 ] bthserv C:\Windows\system32\bthserv.dll
21:59:06.0057 0x1988 bthserv - ok
21:59:06.0088 0x1988 [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:59:06.0088 0x1988 cdfs - ok
21:59:06.0119 0x1988 [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom C:\Windows\System32\drivers\cdrom.sys
21:59:06.0135 0x1988 cdrom - ok
21:59:06.0182 0x1988 [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] CertPropSvc C:\Windows\System32\certprop.dll
21:59:06.0182 0x1988 CertPropSvc - ok
21:59:06.0229 0x1988 [ 4ECA59628D074CF45633EC7A3D7954D3, 054B4AE94920A06ECF8C65A66DC949B65665679B15733D021120159F6E2460DA ] cfwids C:\Windows\system32\drivers\cfwids.sys
21:59:06.0229 0x1988 cfwids - ok
21:59:06.0260 0x1988 [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass C:\Windows\System32\drivers\circlass.sys
21:59:06.0260 0x1988 circlass - ok
21:59:06.0322 0x1988 [ 8EB7E70C2D348FE2476A2E3F2D585E3D, 2B5D407FACF1D049261026CC552A7C93B028A661B0F4E959815EAE7670054127 ] CLFS C:\Windows\system32\drivers\CLFS.sys
21:59:06.0354 0x1988 CLFS - ok
21:59:07.0041 0x1988 [ 55C892763A614BA39BA956A0323C65F3, 3A4FFB6140D8390CBA67ADEB459C71B0B6B5720D17E30E2677CC9AB603D43016 ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
21:59:07.0354 0x1988 ClickToRunSvc - ok
21:59:07.0479 0x1988 [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
21:59:07.0494 0x1988 CmBatt - ok
21:59:07.0604 0x1988 [ 5E5AB950693F2C6D6ACBEE3A74697ED7, 3790A7DD0AC65F47A697A577744FDFA4CC1CA3422884C84E499F97AC91BA84F3 ] CNG C:\Windows\system32\Drivers\cng.sys
21:59:07.0666 0x1988 CNG - ok
21:59:07.0729 0x1988 [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
21:59:07.0744 0x1988 CompositeBus - ok
21:59:07.0760 0x1988 COMSysApp - ok
21:59:07.0807 0x1988 [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv C:\Windows\system32\drivers\condrv.sys
21:59:07.0807 0x1988 condrv - ok
21:59:07.0979 0x1988 [ 0712EFB5F93852EFB2E6912383102287, A0DF4E38F60AEF48F125C9247B4A0729D3EC93F7F37A1E1E33F5580779CA0A5F ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
21:59:08.0041 0x1988 cphs - ok
21:59:08.0119 0x1988 [ 6324F0D18FB52833BA64BC828E29054C, 04118FA1BDFC512F76E4A81FEF34C78B6BD98429DB1D65123B6802B4A1E30584 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:59:08.0135 0x1988 CryptSvc - ok
21:59:08.0182 0x1988 [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam C:\Windows\system32\drivers\dam.sys
21:59:08.0182 0x1988 dam - ok
21:59:08.0307 0x1988 [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:59:08.0400 0x1988 DcomLaunch - ok
21:59:08.0479 0x1988 [ 95E1ABFB27F8A62ED764805775F0D2F3, 692865DA60C93481E01592883678B2C51FD9AC9A835DFB00A8E3F2DFEE7AB0ED ] defragsvc C:\Windows\System32\defragsvc.dll
21:59:08.0541 0x1988 defragsvc - ok
21:59:08.0619 0x1988 [ FF086DEF5995558CCB1B5AAC2110195D, CED52FF01F9247BFDAFC5C7EFC538F8638146ED715574A422496EE0F846CB079 ] DeviceAssociationService C:\Windows\system32\das.dll
21:59:08.0666 0x1988 DeviceAssociationService - ok
21:59:08.0713 0x1988 [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
21:59:08.0760 0x1988 DeviceInstall - ok
21:59:08.0791 0x1988 [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
21:59:08.0807 0x1988 Dfsc - ok
21:59:08.0854 0x1988 [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
21:59:08.0854 0x1988 dg_ssudbus - ok
21:59:08.0932 0x1988 [ 3EEAADA3125431980E5804ED7143458A, 381E12C83E3211C255B321D35536F4049D67E31061F8D82155E4D4509E97F43D ] Dhcp C:\Windows\system32\dhcpcore.dll
21:59:08.0963 0x1988 Dhcp - ok
21:59:09.0150 0x1988 [ 21EDAD8188372C912B7BB9B1C6CB0D38, 4A102745DE8A2A82D2C069B30503BF9FF2312A035A82854F84EF9C27E3533CEE ] DiagTrack C:\Windows\system32\diagtrack.dll
21:59:09.0400 0x1988 DiagTrack - ok
21:59:09.0479 0x1988 [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk C:\Windows\system32\drivers\disk.sys
21:59:09.0494 0x1988 disk - ok
21:59:09.0541 0x1988 [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
21:59:09.0541 0x1988 dmvsc - ok
21:59:09.0651 0x1988 [ 33ADFB7453BF3271463712C4BCE61AD1, A1DB30F874BA7B2C4C653494D70B46B94BF7D39D0DD8559F6CA7A14B676FD617 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:59:09.0698 0x1988 Dnscache - ok
21:59:09.0791 0x1988 [ 811EACBCC7C51A03AE11F13CC27B2AB6, FAB94F84950FFB7D3649BAFB8D96D43B880D7FDE8D5B879472AE26C4BC4203B0 ] dot3svc C:\Windows\System32\dot3svc.dll
21:59:09.0838 0x1988 dot3svc - ok
21:59:09.0916 0x1988 [ B99CB575986789A93A683DCF292A43A1, 6ACEA31C723B74003E106FC8303542FCC6DBC4952B6B523F6590D006BE57238D ] DPS C:\Windows\system32\dps.dll
21:59:09.0932 0x1988 DPS - ok
21:59:09.0979 0x1988 [ 00C594D5A1DBD22AD8B2902B9F6EFF94, 2920D62B5F7C49A8AFA80FCAD1E834BBAA670AEBDD7E6F21F0496D1D3CCB4E90 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:59:09.0979 0x1988 drmkaud - ok
21:59:10.0057 0x1988 [ 263625A4F616538EB867B6306A6590DB, 2A064720C247EAA3446EFDCC9E01D84CBA875905D78DFED0FBD62D1EE422D416 ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
21:59:10.0088 0x1988 DsmSvc - ok
21:59:10.0307 0x1988 [ E1BB0B6F00F470B451AB45EA13EBA0B3, 3A2FC2175B69A5EB98D6C2D563DBFDCB320647AB87A14E47FAE800423DCACDAB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:59:10.0494 0x1988 DXGKrnl - ok
21:59:10.0635 0x1988 [ FA988D76745C917CDFE20031C06DE860, B01AA3611869854D3BCA8B6CD7A6F48CC3537145DD3EBE50F5BEF72239924BF7 ] e1iexpress C:\Windows\system32\DRIVERS\e1i63x64.sys
21:59:10.0697 0x1988 e1iexpress - ok
21:59:10.0760 0x1988 [ E253530BD5EDE28F1FF6AF93C4D8034D, 787A70C3E946348F066FB8EB81FCE60157217D93FD78ADC631B5835E8D76A253 ] Eaphost C:\Windows\System32\eapsvc.dll
21:59:10.0776 0x1988 Eaphost - ok
21:59:11.0229 0x1988 [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv C:\Windows\system32\drivers\evbda.sys
21:59:11.0635 0x1988 ebdrv - ok
21:59:11.0760 0x1988 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] EFS C:\Windows\System32\lsass.exe
21:59:11.0791 0x1988 EFS - ok
21:59:11.0823 0x1988 [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
21:59:11.0838 0x1988 EhStorClass - ok
21:59:11.0885 0x1988 [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
21:59:11.0916 0x1988 EhStorTcgDrv - ok
21:59:11.0947 0x1988 [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev C:\Windows\System32\drivers\errdev.sys
21:59:11.0963 0x1988 ErrDev - ok
21:59:12.0135 0x1988 [ F00C593994D57C75273F820653440536, 2DC986D9890EC907405FB2045E6F55ACC384169B45F0B56CCB1A953CF71D9A5D ] EventSystem C:\Windows\system32\es.dll
21:59:12.0229 0x1988 EventSystem - ok
21:59:12.0307 0x1988 [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat C:\Windows\system32\drivers\exfat.sys
21:59:12.0338 0x1988 exfat - ok
21:59:12.0416 0x1988 [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:59:12.0448 0x1988 fastfat - ok
21:59:12.0557 0x1988 [ 304B6AEC4639A7CCCCF544C6BA6177B2, B75CDD52FD3890B3008E06C503945D1E36478F0EC5E067C8DBC2822D7935D24B ] Fax C:\Windows\system32\fxssvc.exe
21:59:12.0651 0x1988 Fax - ok
21:59:12.0682 0x1988 [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc C:\Windows\System32\drivers\fdc.sys
21:59:12.0698 0x1988 fdc - ok
21:59:12.0744 0x1988 [ 020D2F29009F893ADEFF4405B4B44565, 9F8501064C72933D1442DA00E70392B30D0207EB7D60F50E6648FF363799E6F1 ] fdPHost C:\Windows\system32\fdPHost.dll
21:59:12.0760 0x1988 fdPHost - ok
21:59:12.0807 0x1988 [ E80D2EDD2F88B6E20076A0A4F5A5A245, E3CD6E0BE152B22E8A7340EFFD10CCDB1B632CD3EDF487E83F697D2E22A7D594 ] FDResPub C:\Windows\system32\fdrespub.dll
21:59:12.0823 0x1988 FDResPub - ok
21:59:12.0869 0x1988 [ 47AB7D16EDE434B934AA4D661456C2D5, D375A92FB3E4BB0A8DA5270DACC888E53FB9F514516039FE6DAE4D4EF6B9A970 ] fhsvc C:\Windows\system32\fhsvc.dll
21:59:12.0885 0x1988 fhsvc - ok
21:59:12.0932 0x1988 [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:59:12.0948 0x1988 FileInfo - ok
21:59:12.0979 0x1988 [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:59:12.0979 0x1988 Filetrace - ok
21:59:13.0010 0x1988 [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
21:59:13.0010 0x1988 flpydisk - ok
21:59:13.0104 0x1988 [ C1FB505A73FA2E9019D32444AB33B75A, 765F0635C18295855CA4C0394192E8B94BA2EA1C4D74F86B720358ABA019FFAA ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:59:13.0135 0x1988 FltMgr - ok
21:59:13.0307 0x1988 [ 1E93CBB75D167CDF85501A8C790097A8, C9E5DD090C94E7855939CE1F416460DB408EFF897C2CD52E0D52A734D8ED18B7 ] FontCache C:\Windows\system32\FntCache.dll
21:59:13.0416 0x1988 FontCache - ok
21:59:13.0510 0x1988 [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:59:13.0526 0x1988 FontCache3.0.0.0 - ok
21:59:13.0573 0x1988 [ A7C31B168F371E8E6796219F23E354DB, C51C9BF568F1E96CBBE57D2432B38F93F40520086DDB6AAAAC48CBCD1691B441 ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:59:13.0588 0x1988 FsDepends - ok
21:59:13.0619 0x1988 [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:59:13.0635 0x1988 Fs_Rec - ok
21:59:13.0698 0x1988 [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:59:13.0744 0x1988 fvevol - ok
21:59:13.0776 0x1988 [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
21:59:13.0791 0x1988 FxPPM - ok
21:59:13.0807 0x1988 [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:59:13.0807 0x1988 gagp30kx - ok
21:59:13.0901 0x1988 [ 4A336C92A790A3F7C2D9952C73FCFA16, 2EB400EBAA2B50A97F442D18107316A172A92660F5D712D1C58D39172C9CD80C ] GamesAppIntegrationService C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
21:59:13.0916 0x1988 GamesAppIntegrationService - ok
21:59:13.0963 0x1988 [ A404AE536DD73FC8118A15BFF0BD4FC0, EA24D7866FEB40DD72713601E14DBDA60497324222196B8E0791DA656DBF5DA7 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
21:59:13.0979 0x1988 GamesAppService - ok
21:59:14.0010 0x1988 [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
21:59:14.0026 0x1988 gencounter - ok
21:59:14.0057 0x1988 [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
21:59:14.0073 0x1988 GPIOClx0101 - ok
21:59:14.0182 0x1988 [ 0D03F87D4FF4ADBAF8336DD80548155A, BC10CFA88EA2F41A8D96CB810B7953A4C168B79273A3E804A9F020F49AB58CD3 ] gpsvc C:\Windows\System32\gpsvc.dll
21:59:14.0276 0x1988 gpsvc - ok
21:59:14.0432 0x1988 [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:59:14.0510 0x1988 HdAudAddService - ok
21:59:14.0557 0x1988 [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
21:59:14.0573 0x1988 HDAudBus - ok
21:59:14.0604 0x1988 [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
21:59:14.0619 0x1988 HidBatt - ok
21:59:14.0698 0x1988 [ 42F88B57CAE42FC10059C887B3FCFCEA, 9363AA2B8E839A6935A7C6A36C491938DF78024886DCCE6D29CB18E1D6A6D806 ] HidBth C:\Windows\System32\drivers\hidbth.sys
21:59:14.0713 0x1988 HidBth - ok
21:59:14.0760 0x1988 [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
21:59:14.0776 0x1988 hidi2c - ok
21:59:14.0823 0x1988 [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr C:\Windows\System32\drivers\hidir.sys
21:59:14.0838 0x1988 HidIr - ok
21:59:14.0885 0x1988 [ EA85B5093DF7B5C3E80362B053740AE2, 1D4251385402A2ADEE8FA1642F54180304F88337DA74989BDE44025ABB145FE5 ] hidserv C:\Windows\system32\hidserv.dll
21:59:14.0901 0x1988 hidserv - ok
21:59:14.0948 0x1988 [ 894D982CEAB8CD45A56AE2C9988E86C0, AA2DEB62CB69FF1AEF772989342F2CF77CA48F212C9489A92A4FF97FD46D3866 ] HIDSwitch C:\Windows\System32\drivers\AsHIDSwitch64.sys
21:59:14.0948 0x1988 HIDSwitch - ok
21:59:14.0995 0x1988 [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb C:\Windows\System32\drivers\hidusb.sys
21:59:15.0010 0x1988 HidUsb - ok
21:59:15.0073 0x1988 [ E7AF59F1E0352F5EBEC4ECD32103D405, 0E02E031799F407A1BCE926D46471E7EFB8820359CBDE73759219B86C1882EB8 ] HipShieldK C:\Windows\system32\drivers\HipShieldK.sys
21:59:15.0104 0x1988 HipShieldK - ok
21:59:15.0151 0x1988 [ 93C4315F47F8D635C6DB0DF49FCE10EE, 70C52B8927D54ACD23F27948780B522974250FD5CD81AA9801C3F158C402889F ] hkmsvc C:\Windows\system32\kmsvc.dll
21:59:15.0182 0x1988 hkmsvc - ok
21:59:15.0245 0x1988 [ AC49522ED106BD4B545D6614D71C2445, 40BD738A301170378ECFC031635EB04E2F812B676376CADDD6607ECABEC9255F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:59:15.0291 0x1988 HomeGroupListener - ok
21:59:15.0385 0x1988 [ 99932E30CE0283B73BB6E5019E150394, 1F88C2F56A7B8E1F75E6359281F418F9661DA4FB7B7D7B14FA7F718B15D4DCE0 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:59:15.0448 0x1988 HomeGroupProvider - ok
21:59:15.0604 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] HomeNetSvc C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:15.0651 0x1988 HomeNetSvc - ok
21:59:15.0682 0x1988 [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:59:15.0698 0x1988 HpSAMD - ok
21:59:15.0885 0x1988 [ E87A6D3B8FECD5B93BC0CFBB48C27970, 55C49B6F3822450447C082B40A263F3370694DB53AD0018ADEB911E4A9F65A88 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:59:16.0041 0x1988 HTTP - ok
21:59:16.0073 0x1988 [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:59:16.0088 0x1988 hwpolicy - ok
21:59:16.0135 0x1988 [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
21:59:16.0166 0x1988 hyperkbd - ok
21:59:16.0198 0x1988 [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
21:59:16.0213 0x1988 HyperVideo - ok
21:59:16.0276 0x1988 [ 49EE0AE9E5B64FFBBD06D55C4984B598, 8866627F9241B24A59C81D8BCC67A4DCA87576F589599BA291D0E323F679EB4D ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
21:59:16.0291 0x1988 i8042prt - ok
21:59:16.0323 0x1988 [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
21:59:16.0338 0x1988 iaLPSSi_GPIO - ok
21:59:16.0370 0x1988 [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C C:\Windows\System32\drivers\iaLPSSi_I2C.sys
21:59:16.0385 0x1988 iaLPSSi_I2C - ok
21:59:16.0495 0x1988 [ 9863EC0FB887C0AD0C3A20AC3BF91629, B695048C370CB91BB0CFF2E29641636225B23347B08F7E451FB91CF8B1A0120A ] iaStorA C:\Windows\system32\drivers\iaStorA.sys
21:59:16.0604 0x1988 iaStorA - ok
21:59:16.0698 0x1988 [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV C:\Windows\system32\drivers\iaStorAV.sys
21:59:16.0776 0x1988 iaStorAV - ok
21:59:16.0870 0x1988 [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:59:16.0916 0x1988 iaStorV - ok
21:59:16.0979 0x1988 [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
21:59:17.0010 0x1988 ICCS - ok
21:59:17.0026 0x1988 IEEtwCollectorService - ok
21:59:17.0432 0x1988 [ 807AC6A76500002AB259188B5EE6D891, 74031DCA5F01F8636BD42B7E87BE7253642EDB614EF7853888B37D5CBB1D00A0 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
21:59:17.0807 0x1988 igfx - ok
21:59:17.0917 0x1988 [ 7C208BE7C64C2E4AADCC7BEFDCB023F6, 656F2DEF15CA4787D27C3767461435F77D3C78BFAA8742AF08996BD147610312 ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
21:59:17.0948 0x1988 igfxCUIService1.0.0.0 - ok
21:59:18.0104 0x1988 [ 3DBDBD9581C015F02651D6A89801FAD5, 81B6D302C9CD29AD8319515056CFBCD0BD25619B2B166937ACD5F1416B568837 ] IKEEXT C:\Windows\System32\ikeext.dll
21:59:18.0214 0x1988 IKEEXT - ok
21:59:18.0261 0x1988 [ FC7C456AF9B9811499EDBD10616832EE, CA2D8B0E672D3AE449C2FF0B9E142D74E8C72FD877D11162A9F7CC51AF58220F ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
21:59:18.0261 0x1988 intaud_WaveExtensible - ok
21:59:18.0682 0x1988 [ 5B301323F69E653CEFE6C14C86627FCA, 2B462CA6C3E1AFB21C41A4C46E4853B0C1DBBF481654C08C1E540001FC0839CC ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
21:59:18.0932 0x1988 IntcAzAudAddService - ok
21:59:19.0120 0x1988 [ 5F6F8E55DDB25BC41497DD11A85FC257, 45EF15064644729A776BBF35A790E23246309939A1614369553371EC82786890 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
21:59:19.0198 0x1988 IntcDAud - ok
21:59:19.0370 0x1988 [ 768DD5CB66952BC4A3BD474757AEE34F, 5A1F91FC8028D84FD83591D60CB7E3B24425C3B0FFF5A9BB0F7CE2E17AAB92D4 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
21:59:19.0479 0x1988 Intel(R) Capability Licensing Service Interface - ok
21:59:19.0604 0x1988 [ 7C9ED65324CF268ACBA8024257F782D8, 1DC43DBA3612E26454D7786DEB0538B44A736B67EC99642B4CC574D8A03E0DC7 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
21:59:19.0698 0x1988 Intel(R) Capability Licensing Service TCP IP Interface - ok
21:59:19.0745 0x1988 [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide C:\Windows\system32\drivers\intelide.sys
21:59:19.0760 0x1988 intelide - ok
21:59:19.0823 0x1988 [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep C:\Windows\system32\drivers\intelpep.sys
21:59:19.0823 0x1988 intelpep - ok
21:59:19.0870 0x1988 [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm C:\Windows\System32\drivers\intelppm.sys
21:59:19.0901 0x1988 intelppm - ok
21:59:19.0948 0x1988 [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:59:19.0948 0x1988 IpFilterDriver - ok
21:59:20.0104 0x1988 [ A5800036E4EA06697A34742A24ACFBE1, BA67060526E9213000B4206F86A74F904999AD7018EFCBE4FE9708650DA9D973 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:59:20.0213 0x1988 iphlpsvc - ok
21:59:20.0260 0x1988 [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
21:59:20.0260 0x1988 IPMIDRV - ok
21:59:20.0307 0x1988 [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:59:20.0323 0x1988 IPNAT - ok
21:59:20.0354 0x1988 [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:59:20.0370 0x1988 IRENUM - ok
21:59:20.0385 0x1988 [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:59:20.0401 0x1988 isapnp - ok
21:59:20.0464 0x1988 [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
21:59:20.0495 0x1988 iScsiPrt - ok
21:59:20.0542 0x1988 [ A90C843F4FDD7A07129BA73C6BE13976, A76DEA9F09E3B2F18D3B646A0DD39E2773EC62E2F3C55421BA61C12190D78C1C ] iwdbus C:\Windows\System32\drivers\iwdbus.sys
21:59:20.0542 0x1988 iwdbus - ok
21:59:20.0589 0x1988 [ 5917AFE4A3F695A54B99C1849C8207FE, DD57638966F2F0387DCF9DA4BBAEE3CDD8CC6F1A2D49581A0374D46A565BED4F ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
21:59:20.0604 0x1988 kbdclass - ok
21:59:20.0636 0x1988 [ 8CD840A062F6BDF41DDE3ACB96164B72, AEAE867F3557C1CE6B931E19D7144A3BD3CBABD81B1542667680D54FC24DEBE1 ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
21:59:20.0651 0x1988 kbdhid - ok
21:59:20.0682 0x1988 [ 6C6F4A5FC5A2343995D1B0F111D5CF06, 62282992D3B1634C7BBDD1BCFC13F77FC806AD85B2C667FA09D73355825D19A8 ] kbfiltr C:\Windows\System32\drivers\kbfiltr.sys
21:59:20.0682 0x1988 kbfiltr - ok
21:59:20.0714 0x1988 [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
21:59:20.0729 0x1988 kdnic - ok
21:59:20.0745 0x1988 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] KeyIso C:\Windows\system32\lsass.exe
21:59:20.0776 0x1988 KeyIso - ok
21:59:20.0823 0x1988 [ 4E829B18D5BAEC29893792A3C671A847, 64C3B99F53A9D1ACA802B46B09E820AD210B667D5A1CD0ADAF1F12944B15B52E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:59:20.0823 0x1988 KSecDD - ok
21:59:20.0886 0x1988 [ 46711F40D0F9E63F786ED23F9BD5215E, 1FBC5101D843E5B43184C98B3D9AF3015C9409EEA6C7BB01B143FD08D4946FC0 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:59:20.0901 0x1988 KSecPkg - ok
21:59:20.0932 0x1988 [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:59:20.0948 0x1988 ksthunk - ok
21:59:20.0995 0x1988 [ C1591A66028C71147A3E2EAB0B1CCB7E, 82F3D5DCC1614398A144D9791E4BAA814DBA9112677341FD57D5E9834CEDEB41 ] KtmRm C:\Windows\system32\msdtckrm.dll
21:59:21.0026 0x1988 KtmRm - ok
21:59:21.0089 0x1988 [ CA2828DDE4B09FEFFDB7CE68B3D8D00A, B514792FF1EF36C678BB51644A1C420105D5E2CD6DD5A89A3FB252D08277A40C ] LanmanServer C:\Windows\system32\srvsvc.dll
21:59:21.0120 0x1988 LanmanServer - ok
21:59:21.0182 0x1988 [ 3DBD9100745F9B8506B8FEC6FE6CCDE3, C3EF2856A1680AFDE133887E48946CF9CAB6755C3BDC07F0326965DCD4096F62 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:59:21.0229 0x1988 LanmanWorkstation - ok
21:59:21.0339 0x1988 [ 8B9F3796EC1762CF255BDB324E5529C8, F73D6BEF19BE20AEB18DA82CB63E9D8B50ACBBE4ED9B646EF0C9F598F6B81F94 ] lfsvc C:\Windows\System32\GeofenceMonitorService.dll
21:59:21.0386 0x1988 lfsvc - ok
21:59:21.0417 0x1988 [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:59:21.0417 0x1988 lltdio - ok
21:59:21.0479 0x1988 [ DAE98CC96C5EE308BF4EA7B18F226CB8, 7A6CC56BF075010707715AB6608764291E358EDF27C806A025532869004C686B ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:59:21.0495 0x1988 lltdsvc - ok
21:59:21.0542 0x1988 [ 1E2662D847B7D9995C65D90D254A7E0F, AFD4063D2071FFCB6B0EAC0715276D986F42326919C86E525DCE12E1109A93E2 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:59:21.0542 0x1988 lmhosts - ok
21:59:21.0589 0x1988 [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:59:21.0604 0x1988 LSI_SAS - ok
21:59:21.0620 0x1988 [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
21:59:21.0620 0x1988 LSI_SAS2 - ok
21:59:21.0635 0x1988 [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3 C:\Windows\system32\drivers\lsi_sas3.sys
21:59:21.0651 0x1988 LSI_SAS3 - ok
21:59:21.0667 0x1988 [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
21:59:21.0667 0x1988 LSI_SSS - ok
21:59:21.0761 0x1988 [ 9A7A7E45DAED2E8C2816716D8D28236A, C94787988826E546A8DC752BD6BE4EA7423DC3762B2D371DB297A63F865A95FF ] LSM C:\Windows\System32\lsm.dll
21:59:21.0807 0x1988 LSM - ok
21:59:21.0839 0x1988 [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv C:\Windows\system32\drivers\luafv.sys
21:59:21.0854 0x1988 luafv - ok
21:59:21.0886 0x1988 [ 0D3CF8B876F55291B137B972891C1575, 2E7D0A54D5B2211D340EB56F3D5FCB8362E75415A3C75F553643BA55888DC690 ] MBI C:\Windows\system32\drivers\MBI.sys
21:59:21.0886 0x1988 MBI - ok
21:59:22.0104 0x1988 [ D8E5D83BE1F296F5AF38F89E4D0C3F3B, F0C3C94FBAC1A3DA4299257CB6DDA581CAAE602606E0039C49BCD19370248CB0 ] McAfee SiteAdvisor Service C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
21:59:22.0120 0x1988 McAfee SiteAdvisor Service - ok
21:59:22.0323 0x1988 [ 6BE500A77E653B3E621F280BA544AA0B, 2AFE3221EC6EABA1C085022555AD349996026E6883952833CF0A69F280E9C8EE ] McAPExe C:\Program Files\McAfee\MSC\McAPExe.exe
21:59:22.0448 0x1988 McAPExe - ok
21:59:22.0854 0x1988 [ 2F5C40E9774716950C5011051E5E5C3C, BA8AD474814250AA1605162E831223E5F9F095DE81477803705C5AD824274B82 ] mccspsvc C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
21:59:22.0995 0x1988 mccspsvc - ok
21:59:23.0089 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McMPFSvc C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0104 0x1988 McMPFSvc - ok
21:59:23.0151 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McNaiAnn C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0182 0x1988 McNaiAnn - ok
21:59:23.0276 0x1988 [ C32F9DAFD27557A53ED44915075B5658, 3C14A497021BA51AD8200D94B898ABA039666ED971C3AE4EB4859A35BDFFD564 ] McODS C:\Program Files\mcafee\VirusScan\mcods.exe
21:59:23.0323 0x1988 McODS - ok
21:59:23.0386 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] mcpltsvc C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0401 0x1988 mcpltsvc - ok
21:59:23.0448 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McProxy C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0479 0x1988 McProxy - ok
21:59:23.0511 0x1988 [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas C:\Windows\system32\drivers\megasas.sys
21:59:23.0511 0x1988 megasas - ok
21:59:23.0573 0x1988 [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr C:\Windows\system32\drivers\megasr.sys
21:59:23.0620 0x1988 megasr - ok
21:59:23.0667 0x1988 [ B57322E3BC44A1F0A9C97B68A9EFF495, 2C967B0E965DF834BDC92E3D12E372CB47BA88CB02B0B12FA2AE7B94C2AD80A1 ] mfeaack C:\Windows\system32\drivers\mfeaack.sys
21:59:23.0698 0x1988 mfeaack - ok
21:59:23.0745 0x1988 [ 2BD453B97EF1B1DB5AA195A261F926F8, 47582D78B3ADD1D77F98C5D4EC89B1EC1EE7A79677691FAE543DECA2EE5ACF79 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
21:59:23.0792 0x1988 mfeavfk - ok
21:59:23.0823 0x1988 [ D1780DF54D9DB0DF6801F8657D5F0A14, 4B695A7165BB11521E602D93E73770D4181E170AA010CE5F91F95031BF4865C9 ] mfeelamk C:\Windows\system32\drivers\mfeelamk.sys
21:59:23.0823 0x1988 mfeelamk - ok
21:59:23.0886 0x1988 [ B58B438EE841934F0425AC91560D13F4, 3D6FAFB2E7EB3616E2A4827D713DB95795AFA0D50140F8DDF08C102838776277 ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
21:59:23.0901 0x1988 mfefire - ok
21:59:23.0948 0x1988 [ 9F9BC4DBB610F1AD600F619416A6144D, DE957B0CEF45A4DFD5280DFF8EC4D3EDFBE00E1CB920262D2F6B86E19DDAD7C6 ] mfefirek C:\Windows\system32\drivers\mfefirek.sys
21:59:23.0979 0x1988 mfefirek - ok
21:59:24.0073 0x1988 [ B98911F49EA2F83A9079315846BE1E53, 2335ED3F166D5B10F2DBECE330C1FE8D50E1DEE4EA7D523AB6AC79E99A26C206 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
21:59:24.0120 0x1988 mfehidk - ok
21:59:24.0182 0x1988 [ 38C25BC79FE3EAEDBB1B03796DB59BAB, 05E2D4691334AB107733EDEB297AB4701F528C215E16B36EF2D5C2D6473FB541 ] mfemms C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe
21:59:24.0198 0x1988 mfemms - ok
21:59:24.0292 0x1988 [ 759ABC713BCA60F5508FC1455046670D, 1E8E903982B04D66ACBA0251B5256189F1BA4BD024A1C5F2E37E24D6CD1F96F3 ] mfencbdc C:\Windows\system32\DRIVERS\mfencbdc.sys
21:59:24.0370 0x1988 mfencbdc - ok
21:59:24.0433 0x1988 [ 3924A68351C527CCB1AEF2DF486F0C35, C308C472DCB370D10935B1B00368C27F9F66B650F64D9B454495CD1CC5ABF3B6 ] mfencrk C:\Windows\system32\DRIVERS\mfencrk.sys
21:59:24.0464 0x1988 mfencrk - ok
21:59:24.0605 0x1988 [ 4BEC4AE374CBE6D562D2DD1DD6118BB4, 2D6F13A6DF5BF1C89291749B061C0152A56417C82B6E4742365B112DA2FBC3B2 ] mfesapsn C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys
21:59:24.0620 0x1988 mfesapsn - ok
21:59:24.0698 0x1988 [ E2082E1EF67506041CAD66D905494B43, B577E1D37D16A9FDA9818317D4A8DB0FF49F1099D983F014FFDB697A3FC889F7 ] mfevtp C:\Windows\system32\mfevtps.exe
21:59:24.0745 0x1988 mfevtp - ok
21:59:24.0855 0x1988 [ 34CA0FA858BC45FA83247AAD4976CCE7, 676ED2E7EE58D2316F2DC05AB4BD9F9CFE75570E9919D568ACC992B4F9152514 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
21:59:24.0901 0x1988 mfewfpk - ok
21:59:24.0948 0x1988 [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] MMCSS C:\Windows\system32\mmcss.dll
21:59:24.0980 0x1988 MMCSS - ok
21:59:25.0011 0x1988 [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem C:\Windows\system32\drivers\modem.sys
21:59:25.0026 0x1988 Modem - ok
21:59:25.0057 0x1988 [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor C:\Windows\System32\drivers\monitor.sys
21:59:25.0057 0x1988 monitor - ok
21:59:25.0089 0x1988 [ 08374E4E5B8914DE6067CBA99F61E930, CBB1390D6523FC968BEDF78FD13699488621ACB2CD1DF55D1606316090548661 ] mouclass C:\Windows\System32\drivers\mouclass.sys
21:59:25.0104 0x1988 mouclass - ok
21:59:25.0151 0x1988 [ 5FCBAB60598AE119E02B4C27DE6B99EA, 36F30094F700DE41C293047ACB49ED1961DD927BEDAD8DFDAB7023D4D24CB0DE ] mouhid C:\Windows\System32\drivers\mouhid.sys
21:59:25.0167 0x1988 mouhid - ok
21:59:25.0214 0x1988 [ 9A788037D768809DFD677F4BA08A224A, E0686B3318F924E440ADA439D6671D44D3FF97C13D45C2E0A3A7B9E23DA38350 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:59:25.0229 0x1988 mountmgr - ok
21:59:25.0308 0x1988 [ 2E1F005987F6C31ADE25B67C2D172DF6, 7DDEA05F80158FECCF37A31F056D04E8E76115B178557450056DEC516D3027C8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:59:25.0323 0x1988 MozillaMaintenance - ok
21:59:25.0386 0x1988 [ 6FC047578785B0435F4E2660946D1ADC, 8AEA5659F01FC2F75160922C69622502DABA39F33CB90D5178DD679A1CDE617D ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:59:25.0401 0x1988 mpsdrv - ok
21:59:25.0542 0x1988 [ C18AA14126ADC66478E8E962B2DFAA98, A6F8CE9D88D590DC083253004392572C3BD02C33433CD6C0D9117D2AA7171EEC ] MpsSvc C:\Windows\system32\mpssvc.dll
21:59:25.0651 0x1988 MpsSvc - ok
21:59:25.0714 0x1988 [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:59:25.0730 0x1988 MRxDAV - ok
21:59:25.0823 0x1988 [ 6FBDF2B1B025A8E6E069234362FFFFB7, CF1AFC088F59AD61037F4C4650F3BAEE7FE37C40B3A27B903475F005410F8155 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:59:25.0886 0x1988 mrxsmb - ok
21:59:25.0964 0x1988 [ BCBD64220AD85C26823453FF1DC3EFBD, 0245E3659E9135B9276F3CCFBEA0CEFFC4F4C0826F6D19B6329057620235F087 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:59:26.0011 0x1988 mrxsmb10 - ok
21:59:26.0073 0x1988 [ 57C2473D501331211D6885FD59F3E44B, 10253703DB32A32291C61B6962A79E374B5DF7DD14A6B6AFD08A99EF26206619 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:59:26.0089 0x1988 mrxsmb20 - ok
21:59:26.0136 0x1988 [ F3C060444777A59FC63D920719E43CCD, 8766A2746E3DFB0749E902F458141269335CA6F0CEDCA3D5F8C204637C19E783 ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
21:59:26.0151 0x1988 MsBridge - ok
21:59:26.0214 0x1988 [ 915747E010A9414B069173284A9B93F4, 8A335C28FE1EF96DD71485877F2E86155D24B5614ACE05468F4B07E2ACD56331 ] MSDTC C:\Windows\System32\msdtc.exe
21:59:26.0230 0x1988 MSDTC - ok
21:59:26.0276 0x1988 [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:59:26.0276 0x1988 Msfs - ok
21:59:26.0323 0x1988 [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
21:59:26.0323 0x1988 msgpiowin32 - ok
21:59:26.0339 0x1988 [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:59:26.0354 0x1988 mshidkmdf - ok
21:59:26.0386 0x1988 [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
21:59:26.0386 0x1988 mshidumdf - ok
21:59:26.0401 0x1988 [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:59:26.0417 0x1988 msisadrv - ok
21:59:26.0464 0x1988 [ 4EAEEBAC8CFF4E0D717DFA920BC58A90, A65CB1BB3392B6A04B978348CAC18A414560A6B04A727F22DFC0ADB20DD3AF6B ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:59:26.0480 0x1988 MSiSCSI - ok
21:59:26.0495 0x1988 msiserver - ok
21:59:26.0542 0x1988 [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] MSK80Service C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:26.0573 0x1988 MSK80Service - ok
21:59:26.0604 0x1988 [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:59:26.0604 0x1988 MSKSSRV - ok
21:59:26.0651 0x1988 [ 51B3AC0560848CD6D65AC2033E293113, 73A27E88774C6929328E6C9FC9C389F4DF76D4D4D5CBFC4F51651CC308829628 ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
21:59:26.0667 0x1988 MsLldp - ok
21:59:26.0683 0x1988 [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:59:26.0683 0x1988 MSPCLOCK - ok
21:59:26.0714 0x1988 [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:59:26.0714 0x1988 MSPQM - ok
21:59:26.0776 0x1988 [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:59:26.0792 0x1988 MsRPC - ok
21:59:26.0839 0x1988 [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
21:59:26.0839 0x1988 mssmbios - ok
21:59:26.0870 0x1988 [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:59:26.0870 0x1988 MSTEE - ok
21:59:26.0886 0x1988 [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
21:59:26.0901 0x1988 MTConfig - ok
21:59:26.0979 0x1988 [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup C:\Windows\system32\Drivers\mup.sys
21:59:27.0026 0x1988 Mup - ok
21:59:27.0073 0x1988 [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis C:\Windows\system32\drivers\mvumis.sys
21:59:27.0073 0x1988 mvumis - ok
21:59:27.0151 0x1988 [ 8DF30698BDD9492A9D45A4B94FB4A82A, 26B1B2D7E785E29B8BCB74C467C66AE4EBDD481ACFF36334F3BDF4506B778244 ] napagent C:\Windows\system32\qagentRT.dll
21:59:27.0183 0x1988 napagent - ok
21:59:27.0261 0x1988 [ 008F7CED69FD5B30CBDE1E03C6F36A27, D4ADA7834C470B17A3CD976012DC5A511B32545B9F91D23D09A85722E0B75320 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:59:27.0292 0x1988 NativeWifiP - ok
21:59:27.0355 0x1988 [ BFCE1225D10619029E68946929CEB64C, 499F560331FFBA82E3D673B47F027FDAB7BEE4F2CB5B811D69E0218839F6E6A5 ] NcaSvc C:\Windows\System32\ncasvc.dll
21:59:27.0370 0x1988 NcaSvc - ok
21:59:27.0417 0x1988 [ 267C97373110B7AFD3B46DF60B6CBB85, CEBB99F71D47634BB9C04DF2836DF6B47F15B3073FEFC237F85526DF01E4E38B ] NcbService C:\Windows\System32\ncbservice.dll
21:59:27.0448 0x1988 NcbService - ok
21:59:27.0495 0x1988 [ 9ACED0F5B458C9011F39143326494E93, 9DFFC7EE7DE6FD92545EC6A203213C498A01EEFB0BC55460D339BCE498E56A7F ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
21:59:27.0511 0x1988 NcdAutoSetup - ok
21:59:27.0636 0x1988 [ 97DC5967F65503213FD1F1B3E4A6F983, 3EC515856C7CE9B30032F963DC04190F66EE62402A819781DC45B7D088C84229 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:59:27.0714 0x1988 NDIS - ok
21:59:27.0761 0x1988 [ 8CECC8DA55F3274181FD1EA28AD76664, 188112424CEF97FB926A0FB915260B803555A775DD2E1846725A9C8616300F42 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:59:27.0761 0x1988 NdisCap - ok
21:59:27.0808 0x1988 [ 269882812E9A68FFF1AFE1283D428322, 50B99EBC42DA9B46A8C2C28C9BADCF58AE3079535CDD1227D0F5C86291C715FF ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
21:59:27.0823 0x1988 NdisImPlatform - ok
21:59:27.0854 0x1988 [ 82821F4EEC776B4CF11695A38F3ABA46, 23184F9D31E662855DC4D23EFE7C2FE00E5487D3762B6024704A5D8C87762E1C ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:59:27.0870 0x1988 NdisTapi - ok
21:59:27.0901 0x1988 [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:59:27.0917 0x1988 Ndisuio - ok
21:59:27.0933 0x1988 [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus C:\Windows\System32\drivers\NdisVirtualBus.sys
21:59:27.0948 0x1988 NdisVirtualBus - ok
21:59:27.0995 0x1988 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:28.0027 0x1988 NdisWan - ok
21:59:28.0042 0x1988 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:28.0058 0x1988 NdisWanLegacy - ok
21:59:28.0105 0x1988 [ DDD7F92A83F74D1476B71FBA9530A8DC, D3F94FC9F48854E09B0B77CE5E1C1DB948D54EAC63C5583437051BB893B5A386 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:59:28.0120 0x1988 NDProxy - ok
21:59:28.0167 0x1988 [ 3083926D1CC5B56EA0786527B557DD1B, 3C3F0CA0D43398576DBE8F677B353ADDA7E8F56829874958CE668E31261C1590 ] Ndu C:\Windows\system32\drivers\Ndu.sys
21:59:28.0167 0x1988 Ndu - ok
21:59:28.0214 0x1988 [ 42FF4975D032CAE558AE4BB8448F6E5A, 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:59:28.0214 0x1988 NetBIOS - ok
21:59:28.0261 0x1988 [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:59:28.0292 0x1988 NetBT - ok
21:59:28.0339 0x1988 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] Netlogon C:\Windows\system32\lsass.exe
21:59:28.0386 0x1988 Netlogon - ok
21:59:28.0495 0x1988 [ 8F074B62E66B6117D9598C62A12069C5, 5FDB19045D3E2F6D0F0C5158AC2ECB0D5404CD2AF7A319755D7E3753CA3B7CF3 ] Netman C:\Windows\System32\netman.dll
21:59:28.0542 0x1988 Netman - ok
21:59:28.0714 0x1988 [ 4A04B1CD5BFB4A978C5F60E86D6C3E45, A946922C1C38ADD3CF9D3B09DDCC301AE4DAC960A081B2F42B32BE1E7095B3FD ] netprofm C:\Windows\System32\netprofmsvc.dll
21:59:28.0792 0x1988 netprofm - ok
21:59:28.0902 0x1988 [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:59:28.0964 0x1988 NetTcpPortSharing - ok
21:59:29.0042 0x1988 [ D4DCE03870314D3354F3501F9DDD4123, 5BFE8299B3F72B8C39A4965365CBF5BA151024451F02DD872FAD1CC35CF94CEA ] netvsc C:\Windows\System32\drivers\netvsc63.sys
21:59:29.0073 0x1988 netvsc - ok
21:59:30.0230 0x1988 [ 272BB8C52BE106B5CC69171AF1D281D4, 3D65A772C15440DF5895843185241D890CCDECA0E02DD6CF32CCB9B5849E31A4 ] NETwNs64 C:\Windows\system32\DRIVERS\Netwsw00.sys
21:59:31.0355 0x1988 NETwNs64 - ok
21:59:31.0511 0x1988 [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc C:\Windows\System32\nlasvc.dll
21:59:31.0573 0x1988 NlaSvc - ok
21:59:31.0636 0x1988 [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:59:31.0652 0x1988 Npfs - ok
21:59:31.0683 0x1988 [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
21:59:31.0698 0x1988 npsvctrig - ok
21:59:31.0761 0x1988 [ 0F12A72A753CFD7FB0631EE8D08FE983, 860A96471F6CD90DDA9AB3A48E95CEAD826C87D2FA98A00EF91B61C44A4C8B82 ] nsi C:\Windows\system32\nsisvc.dll
21:59:31.0777 0x1988 nsi - ok
21:59:31.0839 0x1988 [ 0E046FF5823B95326D10CF1B4AF23541, 39D22715003746527AB4BFEDED8C34B695DAF589091AE7F3A2A2C4B8A35675A9 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:59:31.0839 0x1988 nsiproxy - ok
21:59:32.0183 0x1988 [ 7F68063A5A0461E02BC860CE0E6BFDDC, 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:59:32.0433 0x1988 Ntfs - ok
21:59:32.0480 0x1988 [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null C:\Windows\system32\drivers\Null.sys
21:59:32.0480 0x1988 Null - ok
21:59:32.0527 0x1988 [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:59:32.0574 0x1988 nvraid - ok
21:59:32.0605 0x1988 [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:59:32.0636 0x1988 nvstor - ok
21:59:32.0667 0x1988 [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:59:32.0683 0x1988 nv_agp - ok
21:59:32.0761 0x1988 [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:59:32.0777 0x1988 ose - ok
21:59:32.0855 0x1988 [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:59:32.0917 0x1988 p2pimsvc - ok
21:59:33.0042 0x1988 [ FD8F61F0D1F64BBB3D835F39A3F979C9, E5C5F86576488EA7F605E26C06EE5AFB36506A446F60C894D55E0A148BF7F02D ] p2psvc C:\Windows\system32\p2psvc.dll
21:59:33.0121 0x1988 p2psvc - ok
21:59:33.0183 0x1988 [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport C:\Windows\System32\drivers\parport.sys
21:59:33.0199 0x1988 Parport - ok
21:59:33.0277 0x1988 [ BAFF6122CFC9F95CA175AD8C348179A4, 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:59:33.0292 0x1988 partmgr - ok
21:59:33.0417 0x1988 [ ABE95ABE27A8BD9701782BBCD82C9925, AE3BA1E9ECDE692374D8DAC95A8DAA289DD2470E3D8D58EFAD9F83A37F3AC8E5 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:59:33.0511 0x1988 PcaSvc - ok
21:59:33.0589 0x1988 [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci C:\Windows\system32\drivers\pci.sys
21:59:33.0621 0x1988 pci - ok
21:59:33.0667 0x1988 [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide C:\Windows\system32\drivers\pciide.sys
21:59:33.0667 0x1988 pciide - ok
21:59:33.0714 0x1988 [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
21:59:33.0745 0x1988 pcmcia - ok
21:59:33.0777 0x1988 [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw C:\Windows\system32\drivers\pcw.sys
21:59:33.0792 0x1988 pcw - ok
21:59:33.0855 0x1988 [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc C:\Windows\system32\drivers\pdc.sys
21:59:33.0871 0x1988 pdc - ok
21:59:33.0995 0x1988 [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:59:34.0089 0x1988 PEAUTH - ok
21:59:34.0199 0x1988 [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:59:34.0214 0x1988 PerfHost - ok
21:59:34.0402 0x1988 [ 70B39E7241F750A248798CE82C44596D, 54A72199EB277EE586611DCBC21654786FD2196F91D5884C4F531297893CC3EC ] pla C:\Windows\system32\pla.dll
21:59:34.0527 0x1988 pla - ok
21:59:34.0589 0x1988 [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:59:34.0605 0x1988 PlugPlay - ok
21:59:34.0636 0x1988 [ 4570F8A37D221660F3A09D6F4DD4BA94, 0EA190CFFA53DF9CCA2D53A4EF1BCB837BA3F2489A3AC5BD11F6D6ED811D118E ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:59:34.0652 0x1988 PNRPAutoReg - ok
21:59:34.0714 0x1988 [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:59:34.0761 0x1988 PNRPsvc - ok
21:59:34.0855 0x1988 [ BDD52AB4AEBB8B1904568DBD0CCB70CB, C3D1DBA349C79B43DCDD9EF5255C5EE973EFB844235B808B5EF9B63A51FF00AA ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:59:34.0886 0x1988 PolicyAgent - ok
21:59:34.0949 0x1988 [ C8DD82C3035E60D671B8CC5DF128D3A9, 6AABF632CBEDA9A7B553BC9134FF100CB6FDC88000D499D2883408FCEDD97576 ] Power C:\Windows\system32\umpo.dll
21:59:34.0980 0x1988 Power - ok
21:59:35.0292 0x1988 [ C0B3AD50136FE57C2548BD75CAC49DA2, B5661CE7631C5D1B1C50F36EE66AF6DF2E9E69DA1D9BA7C852E74D206F72D8DB ] PrintNotify C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
21:59:35.0480 0x1988 PrintNotify - ok
21:59:35.0527 0x1988 [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor C:\Windows\System32\drivers\processr.sys
21:59:35.0527 0x1988 Processor - ok
21:59:35.0574 0x1988 [ 6E409D818C6B342544EAE741B1422B85, B4ADFB7809FC42C432C984C3AC13FAFD1B7AD53BCC7FB16E86371DE4C829DD1A ] ProfSvc C:\Windows\system32\profsvc.dll
21:59:35.0589 0x1988 ProfSvc - ok
21:59:35.0636 0x1988 [ FC0141B4A5AD6D637D883C1A89FC45C5, DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:59:35.0636 0x1988 Psched - ok
21:59:35.0714 0x1988 [ DAA9DEE0A5D5F238C4EE54C2C7FB67C5, 7EC8C603BD92699AC35BDCD294F13BEE90D5C2C195FD93A3F16928BFCF53CA93 ] QWAVE C:\Windows\system32\qwave.dll
21:59:35.0777 0x1988 QWAVE - ok
21:59:35.0839 0x1988 [ 83868EB2924E6BC21A54337C65D614D1, 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:59:35.0855 0x1988 QWAVEdrv - ok
21:59:35.0902 0x1988 [ B337B1F1E82A83E20A1743E008E25C0F, A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:59:35.0902 0x1988 RasAcd - ok
21:59:35.0980 0x1988 [ 044638489B4A5FE5334F46C5314A0826, E06CC2A9EF369794DAD69FBB5AFD1676D4283DDAB2AD5E3EFE454C473F62F955 ] RasAuto C:\Windows\System32\rasauto.dll
21:59:36.0011 0x1988 RasAuto - ok
21:59:36.0136 0x1988 [ F83B38FCD4F69157B3D158433FA149CC, AB103BD3E2B3B134CB355C556DF70BCF0CF4DB11EFF7DB4A9876D5AA43D81293 ] RasMan C:\Windows\System32\rasmans.dll
21:59:36.0230 0x1988 RasMan - ok
21:59:36.0293 0x1988 [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:59:36.0308 0x1988 RasPppoe - ok
21:59:36.0371 0x1988 [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:59:36.0433 0x1988 rdbss - ok
21:59:36.0480 0x1988 [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
21:59:36.0480 0x1988 rdpbus - ok
21:59:36.0527 0x1988 [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
21:59:36.0543 0x1988 RDPDR - ok
21:59:36.0621 0x1988 [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:59:36.0621 0x1988 RdpVideoMiniport - ok
21:59:36.0668 0x1988 [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:59:36.0699 0x1988 rdyboost - ok
21:59:36.0824 0x1988 [ 615DFD97DEA56CE1C3A52185A3038FF8, 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 ] ReFS C:\Windows\system32\drivers\ReFS.sys
21:59:36.0902 0x1988 ReFS - ok
21:59:36.0949 0x1988 [ 0CF7CB56BF2D5E9DBCEE0185CB626FAD, 2BD2E2FB1D2EADD1F70EF55E8523C353F95D4FEB1BAD5017FA4D94F790F27825 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:59:36.0964 0x1988 RemoteAccess - ok
21:59:37.0027 0x1988 [ AC8785B53F8436058C90450DA1840AE7, CC1FFC2713910211F8A6AD532DBB9253ACD188CBD784F1BE6613DF382825A3C1 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:59:37.0058 0x1988 RemoteRegistry - ok
21:59:37.0089 0x1988 [ 65B9FDE300A6DECC03BA44C4616DCAD6, CAD992982733DD20282A3453DC4E554AE1FC077C35479C0CA4E8BC3A9DCD3BB0 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:59:37.0105 0x1988 RpcEptMapper - ok
21:59:37.0136 0x1988 [ A737B433ABAF3F2DCB2BD7B4CC582B26, 3B5706B0CF0969A9F82060FD4DCC745F2D83C066B663FE8A4F0F493B64032C9C ] RpcLocator C:\Windows\system32\locator.exe
21:59:37.0152 0x1988 RpcLocator - ok
21:59:37.0246 0x1988 [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] RpcSs C:\Windows\system32\rpcss.dll
21:59:37.0308 0x1988 RpcSs - ok
21:59:37.0355 0x1988 [ 566B32C6C06B31384C4D5D7762955A8F, A71E746CED15294DC5268953AE573D3DD59829A7B28F0FC887F343D762F69897 ] RSBASTOR C:\Windows\system32\DRIVERS\RtsBaStor.sys
21:59:37.0371 0x1988 RSBASTOR - ok
21:59:37.0418 0x1988 [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:59:37.0433 0x1988 rspndr - ok
21:59:37.0527 0x1988 [ CE9B0D2B0790C23952A3554AD375699C, 5ED67683F06B448D104345CD479CA3F1FEFEE92B5A302E9284A04B747993BC03 ] RTL8168 C:\Windows\system32\DRIVERS\Rt630x64.sys
21:59:37.0589 0x1988 RTL8168 - ok
21:59:37.0871 0x1988 [ 19D1C2B85E17F94CAD6FC8184FB65A04, E7943EA2A64860D4DB44CF58B6B48C19C350A005C12DF188D42346502C27C517 ] RTWlanE C:\Windows\system32\DRIVERS\rtwlane.sys
21:59:38.0105 0x1988 RTWlanE - ok
21:59:38.0136 0x1988 [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap C:\Windows\System32\drivers\vms3cap.sys
21:59:38.0136 0x1988 s3cap - ok
21:59:38.0168 0x1988 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] SamSs C:\Windows\system32\lsass.exe
21:59:38.0183 0x1988 SamSs - ok
21:59:38.0199 0x1988 [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:59:38.0214 0x1988 sbp2port - ok
21:59:38.0261 0x1988 [ 74A3B67F03877D06B09B1B40C5ED582E, A8FF9BF416F0BF365BFB4E1796859825C811A74B5E54DDDCE8345193BEEBE206 ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:59:38.0293 0x1988 SCardSvr - ok
21:59:38.0355 0x1988 [ 8B9C4D55B4A536FB01C360DDB9533574, 9B939FE68F6F9C171ED0D91E2CE1E67515295D34EC23606BCDFD097DCC8CFD4A ] ScDeviceEnum C:\Windows\System32\ScDeviceEnum.dll
21:59:38.0386 0x1988 ScDeviceEnum - ok
21:59:38.0449 0x1988 [ 13BEA6C882D4D877A5A85CA149C86BC1, 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:59:38.0449 0x1988 scfilter - ok
21:59:38.0699 0x1988 [ 3151A020E03DDE31AAC49F35C5EFB4DB, 5ABB1103009979F86C862357E28F37C2744979F2C99F7CF6ABB4EB1B8416B3F6 ] Schedule C:\Windows\system32\schedsvc.dll
21:59:38.0902 0x1988 Schedule - ok
21:59:39.0027 0x1988 [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] SCPolicySvc C:\Windows\System32\certprop.dll
21:59:39.0058 0x1988 SCPolicySvc - ok
21:59:39.0168 0x1988 [ C54B6B2170BF628FD42F799A66956D75, BCF460A124CAA6F1F1A9A7BCBDCC2D5E39B0404D96B7C9FFAC806E041782B91E ] sdbus C:\Windows\System32\drivers\sdbus.sys
21:59:39.0215 0x1988 sdbus - ok
21:59:39.0261 0x1988 [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor C:\Windows\System32\drivers\sdstor.sys
21:59:39.0277 0x1988 sdstor - ok
21:59:39.0324 0x1988 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:59:39.0340 0x1988 secdrv - ok
21:59:39.0371 0x1988 [ BA24CEA7152239F42ECD04AFB7C89D24, A2A11EABB0C283772B74667C7544B61BEB1B9745FBF065E831542129EB585AFA ] seclogon C:\Windows\system32\seclogon.dll
21:59:39.0402 0x1988 seclogon - ok
21:59:39.0449 0x1988 [ 81FE9A81EDF8016816C9E91FBFBF7D35, 87FB92A3D15F312F0B9C423EF851061A944B013E5668D8C9A441B4DC0EB690AF ] SENS C:\Windows\System32\sens.dll
21:59:39.0465 0x1988 SENS - ok
21:59:39.0527 0x1988 [ 6E4012AE67F09F867EF620C8D5524C0B, 63933E51F8E413E63481369CE2F9FD224560550FBD3BD2B4573E9F4AD88708A2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:59:39.0558 0x1988 SensrSvc - ok
21:59:39.0590 0x1988 [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx C:\Windows\system32\drivers\SerCx.sys
21:59:39.0605 0x1988 SerCx - ok
21:59:39.0636 0x1988 [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2 C:\Windows\system32\drivers\SerCx2.sys
21:59:39.0652 0x1988 SerCx2 - ok
21:59:39.0668 0x1988 [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum C:\Windows\System32\drivers\serenum.sys
21:59:39.0683 0x1988 Serenum - ok
21:59:39.0730 0x1988 [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial C:\Windows\System32\drivers\serial.sys
21:59:39.0730 0x1988 Serial - ok
21:59:39.0761 0x1988 [ 148195AE95D9BC7375A08846439FDAC1, 3A2F78FD18AA7A6D659921E19335E943894530874AC5AB5E7219CEF28FA54F7A ] sermouse C:\Windows\System32\drivers\sermouse.sys
21:59:39.0777 0x1988 sermouse - ok
21:59:39.0855 0x1988 [ 3A2F1A7472C3B7CC9B89C8516C726488, 9BCBBAC10C900EA7B30822B463A77EE5067F217C4B490857A09E5277983CB89B ] SessionEnv C:\Windows\system32\sessenv.dll
21:59:39.0886 0x1988 SessionEnv - ok
21:59:39.0918 0x1988 [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
21:59:39.0918 0x1988 sfloppy - ok
21:59:40.0011 0x1988 [ 8081FF3DAE8159FE8956B09BC29CE983, AC0F305AEE8B1AB2E1275F1D33EC1D2F3E23F234F831BD9D41F415A94A19D3AB ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:59:40.0043 0x1988 SharedAccess - ok
21:59:40.0183 0x1988 [ 7FD9A61A3523A61FC135D61D6E160314, 409E1CF7A62FD90CBC31AEAFBB7230B02DBEC6CFCA2D266D221A7643FAEBA13B ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:59:40.0230 0x1988 ShellHWDetection - ok
21:59:40.0277 0x1988 [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
21:59:40.0277 0x1988 SiSRaid2 - ok
21:59:40.0308 0x1988 [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:59:40.0308 0x1988 SiSRaid4 - ok
21:59:40.0402 0x1988 [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:59:40.0433 0x1988 SkypeUpdate - ok
21:59:40.0496 0x1988 [ 3C84DCCE5B322F745A75CA8BA3A0F6B3, 1FB94A8A1C63D6FDB82E28ED5B696B3CB1F64183A89A3B5153B266C292CB7815 ] smphost C:\Windows\System32\smphost.dll
21:59:40.0496 0x1988 smphost - ok
21:59:40.0558 0x1988 [ D0EB0DF8C603BBA084351A92732B1CBE, E24ED8F78EF41C1BC17386AE4BBCE0DC892C5B89B12C03FC9FB61D359B13F1B4 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:59:40.0558 0x1988 SNMPTRAP - ok
21:59:40.0652 0x1988 [ D24B1945ED1F9C96DA786DBBF1E983CE, B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 ] spaceport C:\Windows\system32\drivers\spaceport.sys
21:59:40.0683 0x1988 spaceport - ok
21:59:40.0714 0x1988 [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
21:59:40.0730 0x1988 SpbCx - ok
21:59:40.0824 0x1988 [ FCB156A6745631A67DEA61827061D483, 9275ABFA1E1E595969A71C0DA228D18D1B868BF46E097E1276142BD80F8A32C9 ] Spooler C:\Windows\System32\spoolsv.exe
21:59:40.0886 0x1988 Spooler - ok
21:59:41.0715 0x1988 [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc C:\Windows\system32\sppsvc.exe
21:59:42.0574 0x1988 sppsvc - ok
21:59:42.0668 0x1988 [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv C:\Windows\system32\DRIVERS\srv.sys
21:59:42.0715 0x1988 srv - ok
21:59:42.0824 0x1988 [ 00D8AC8E3053290BDE6EA2FB6810D2FC, 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:59:42.0886 0x1988 srv2 - ok
21:59:42.0933 0x1988 [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:59:42.0965 0x1988 srvnet - ok
21:59:43.0043 0x1988 [ CF6C3037839CF78421A94F9060C2886F, CA98C180AE03F5BE8FEFFBA75BD98DEE2AD4FA975E1EF83215C9CD2476946811 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:59:43.0074 0x1988 SSDPSRV - ok
21:59:43.0137 0x1988 [ 198A737DBA666F4808D62E9A8277A6B7, 90B6E5E2ACE95D850C913A3A1DA1F966C44955C530004C228FA93B2A536F5C27 ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:59:43.0152 0x1988 SstpSvc - ok
21:59:43.0215 0x1988 [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
21:59:43.0230 0x1988 ssudmdm - ok
21:59:43.0293 0x1988 [ 76F7D7217FBDAB77798A2A244ACD641F, E65CF2CE789E721CEFCA35DF5100304C56135459DA2421DB2A0DF9E6E9DDE70F ] ssudserd C:\Windows\system32\DRIVERS\ssudserd.sys
21:59:43.0308 0x1988 ssudserd - ok
21:59:43.0340 0x1988 [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor C:\Windows\system32\drivers\stexstor.sys
21:59:43.0340 0x1988 stexstor - ok
21:59:43.0465 0x1988 [ 63E9CE568CF1192771A5F0460DE7D2B9, C27B21FD2C14AD41A59EF62EB8AC95C08EB13CCB1CEECD8378B8CDD4DC352E69 ] stisvc C:\Windows\System32\wiaservc.dll
21:59:43.0543 0x1988 stisvc - ok
21:59:43.0590 0x1988 [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci C:\Windows\system32\drivers\storahci.sys
21:59:43.0605 0x1988 storahci - ok
21:59:43.0652 0x1988 [ 8B9486B64E5FC17FB9CC04CA10B77A34, C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
21:59:43.0668 0x1988 storflt - ok
21:59:43.0683 0x1988 [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme C:\Windows\system32\drivers\stornvme.sys
21:59:43.0699 0x1988 stornvme - ok
21:59:43.0746 0x1988 [ A45F5AC9D8069D0EC66E3CA73103073B, 996788F1C58E016E8E5CF3FD1D220A3C40AFFD6C21361A34636415DB12E0D381 ] StorSvc C:\Windows\system32\storsvc.dll
21:59:43.0746 0x1988 StorSvc - ok
21:59:43.0793 0x1988 [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc C:\Windows\system32\drivers\storvsc.sys
21:59:43.0809 0x1988 storvsc - ok
21:59:43.0855 0x1988 [ E395BE02F80A79A6CF973BA38DBB8135, 4C6F85B0EB8E7725BA720F9742561D229726C0D7C17505D1E79F19A5626F6325 ] svsvc C:\Windows\system32\svsvc.dll
21:59:43.0871 0x1988 svsvc - ok
21:59:43.0918 0x1988 [ 65454187E0F8B6C0DCECB0287D06EC43, 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE ] swenum C:\Windows\System32\drivers\swenum.sys
21:59:43.0918 0x1988 swenum - ok
21:59:44.0027 0x1988 [ 1C71D72D4997A284128FBEE770726330, 21682BDE74A1108FED1124FB1EA35A03CBFA94ABE1B89CC0FADB4DD82596C43E ] swprv C:\Windows\System32\swprv.dll
21:59:44.0105 0x1988 swprv - ok
21:59:44.0262 0x1988 [ 7E85DB0463AD2403AE84AD162B162279, 996C42ECAFC6E24C623068AFAFCC0A2612526333AF9315F7536C6D40C2570632 ] SysMain C:\Windows\system32\sysmain.dll
21:59:44.0387 0x1988 SysMain - ok
21:59:44.0465 0x1988 [ D73DBBB96CEE90C2856164AAD8543425, D11ADB5D4C5DD355314CA656D375D0062CAE7462E866F94F1B26D5803F65DCB2 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
21:59:44.0512 0x1988 SystemEventsBroker - ok
21:59:44.0574 0x1988 [ D6A71B95ACF71ACA63B67232059F1BCD, C5CEC032E7AB507500D1CC7A4E65DA6322412C798201A9D770CBDE892E50DFC8 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:59:44.0590 0x1988 TabletInputService - ok
21:59:44.0668 0x1988 [ 5A5BAB1CA9621E73E25EE4744B67CDA6, 479EBD7BAE1E2AD431153FDC016742F7A8D824716EAB1A4CA87EBBD21D61DECD ] TapiSrv C:\Windows\System32\tapisrv.dll
21:59:44.0699 0x1988 TapiSrv - ok
21:59:44.0965 0x1988 [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:59:45.0152 0x1988 Tcpip - ok
21:59:45.0355 0x1988 [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:59:45.0527 0x1988 TCPIP6 - ok
21:59:45.0621 0x1988 [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:59:45.0637 0x1988 tcpipreg - ok
21:59:45.0668 0x1988 [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:59:45.0684 0x1988 tdx - ok
21:59:45.0715 0x1988 [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt C:\Windows\System32\drivers\terminpt.sys
21:59:45.0715 0x1988 terminpt - ok
21:59:45.0855 0x1988 [ C50997E282576DA492EBA66B059D4196, EBD793CB396F9503376207FA60353F5672DEDB620C8E01C8D6AE0030B3B03339 ] TermService C:\Windows\System32\termsrv.dll
21:59:45.0918 0x1988 TermService - ok
21:59:45.0965 0x1988 [ 2180DBCE75B914E5E5BBFFFAAE97AA21, 8000AECC8855903DB50ABA7E304396D1FCEAE8DC9ADD4FC50275CF24B4D914DE ] Themes C:\Windows\system32\themeservice.dll
21:59:45.0980 0x1988 Themes - ok
21:59:46.0012 0x1988 [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] THREADORDER C:\Windows\system32\mmcss.dll
21:59:46.0027 0x1988 THREADORDER - ok
21:59:46.0074 0x1988 [ B5ED9CC61798C7D44BD535D40B89EFB5, 1BDCEAA9AF2096381870D92129C748F4EE06A1167ABA9367B9DD43BAF27E3F5B ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
21:59:46.0105 0x1988 TimeBroker - ok
21:59:46.0152 0x1988 [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM C:\Windows\system32\drivers\tpm.sys
21:59:46.0152 0x1988 TPM - ok
21:59:46.0215 0x1988 [ 884113C2BB703FE806C8608B75F34831, 24DE5750CA4363455412BABB0B1FAB08497153E8F158ED44958F100410F93506 ] TrkWks C:\Windows\System32\trkwks.dll
21:59:46.0230 0x1988 TrkWks - ok
21:59:46.0293 0x1988 [ 44A94FB4C76528D2382FFE04B05827C3, B0BCDF7CD1D65E61A9061D539D83527A89B69583958F8A26C6BF9766C1B61E0C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:59:46.0309 0x1988 TrustedInstaller - ok
21:59:46.0340 0x1988 [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:59:46.0340 0x1988 TsUsbFlt - ok
21:59:46.0371 0x1988 [ 20185BEB7512EDE4EFECDFA148AC9F99, 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
21:59:46.0371 0x1988 TsUsbGD - ok
21:59:46.0418 0x1988 [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:59:46.0418 0x1988 tunnel - ok
21:59:46.0465 0x1988 [ E624283C1A2F9BB4688A002914CC00A7, B6908C1FFDD6BCFFC5C2FC0C429FC3E237E340F891F80CFD737BE41E5EF7E328 ] TXEIx64 C:\Windows\System32\drivers\TXEIx64.sys
21:59:46.0465 0x1988 TXEIx64 - ok
21:59:46.0480 0x1988 [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
21:59:46.0496 0x1988 uagp35 - ok
21:59:46.0512 0x1988 [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
21:59:46.0527 0x1988 UASPStor - ok
21:59:46.0574 0x1988 [ 807F8CF3E973305FC435C61CBBEE2A49, 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 ] UCX01000 C:\Windows\System32\drivers\ucx01000.sys
21:59:46.0590 0x1988 UCX01000 - ok
21:59:46.0637 0x1988 [ C61EAF8E1E4B2F62BA4FDF457440B2C6, 961F76A789925234AC27F56AAE34556FA06088D71580B42C24B0BC209EAFD67E ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:59:46.0652 0x1988 udfs - ok
21:59:46.0699 0x1988 [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI C:\Windows\System32\drivers\UEFI.sys
21:59:46.0715 0x1988 UEFI - ok
21:59:46.0762 0x1988 [ A867F0F978EE64C87FADC3B100869EE4, 2686BE85F963D0D0BB275E92E5B543280D8742CF10772303E3189D0719B6A277 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:59:46.0762 0x1988 UI0Detect - ok
21:59:46.0777 0x1988 [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:59:46.0777 0x1988 uliagpkx - ok
21:59:46.0809 0x1988 [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus C:\Windows\System32\drivers\umbus.sys
21:59:46.0809 0x1988 umbus - ok
21:59:46.0824 0x1988 [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass C:\Windows\System32\drivers\umpass.sys
21:59:46.0824 0x1988 UmPass - ok
21:59:46.0887 0x1988 [ A023F267A262D5DA6CE1436D9C5E8FD9, 92AD7AF91184C244A7E392F49663143193A80D5D81114546A00F18227DE31D23 ] UmRdpService C:\Windows\System32\umrdp.dll
21:59:46.0902 0x1988 UmRdpService - ok
21:59:46.0965 0x1988 [ C98493DD8E6A50154FAC75C15E1C36BB, CECD1C826C8F7AF05468871BF6A0ACDBB6B0202F4F87F48C6D367E5BD699E800 ] upnphost C:\Windows\System32\upnphost.dll
21:59:46.0981 0x1988 upnphost - ok
21:59:47.0027 0x1988 [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
21:59:47.0043 0x1988 usbccgp - ok
21:59:47.0090 0x1988 [ 0139248F6B95CF0D837B5B46A2722D40, 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 ] usbcir C:\Windows\System32\drivers\usbcir.sys
21:59:47.0090 0x1988 usbcir - ok
21:59:47.0121 0x1988 [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci C:\Windows\System32\drivers\usbehci.sys
21:59:47.0137 0x1988 usbehci - ok
21:59:47.0184 0x1988 [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub C:\Windows\System32\drivers\usbhub.sys
21:59:47.0215 0x1988 usbhub - ok
21:59:47.0277 0x1988 [ 95B0179BDA907252025DEEA183699FB3, A6BDFB93EE9418A83407024204A41640A08638C60E2BE75C249D102601DC1D80 ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
21:59:47.0309 0x1988 USBHUB3 - ok
21:59:47.0324 0x1988 [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci C:\Windows\System32\drivers\usbohci.sys
21:59:47.0340 0x1988 usbohci - ok
21:59:47.0355 0x1988 [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint C:\Windows\System32\drivers\usbprint.sys
21:59:47.0371 0x1988 usbprint - ok
21:59:47.0402 0x1988 [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS
21:59:47.0418 0x1988 USBSTOR - ok
21:59:47.0434 0x1988 [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
21:59:47.0434 0x1988 usbuhci - ok
21:59:47.0496 0x1988 [ 5C8F604F6DC74177CDD8372D7B1ADFF0, C1DE9A37A7A01CCCBFCE13C1E5B26683F620AB21EDA5A14C82022E2F49C84484 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
21:59:47.0512 0x1988 usbvideo - ok
21:59:47.0559 0x1988 [ 44603DA5A87FB491EF59C889EBBB4DDB, 59AA9B6B0B5D66F9312CD3F999D0D9F12F1A2C5D230365AD7287CD71FD86961C ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
21:59:47.0574 0x1988 USBXHCI - ok
21:59:47.0621 0x1988 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] VaultSvc C:\Windows\system32\lsass.exe
21:59:47.0621 0x1988 VaultSvc - ok
21:59:47.0668 0x1988 [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:59:47.0668 0x1988 vdrvroot - ok
21:59:47.0777 0x1988 [ 8A4D808D1EC7C1C47B2C8BF488A9A07A, 63C07312ADB6F8A8BDE93361C30AC63DAB4DE1141AF54630EEF11E54B0BF983D ] vds C:\Windows\System32\vds.exe
21:59:47.0840 0x1988 vds - ok
21:59:47.0887 0x1988 [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
21:59:47.0887 0x1988 VerifierExt - ok
21:59:47.0965 0x1988 [ C06E8481E068F170A258441639AC5792, 2F550530BACB511A195D5047F003B01CB6E04FA9A0DCCF638CB3D51FF5467DC7 ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
21:59:47.0996 0x1988 vhdmp - ok
21:59:48.0027 0x1988 [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide C:\Windows\system32\drivers\viaide.sys
21:59:48.0027 0x1988 viaide - ok
21:59:48.0059 0x1988 [ 511AD3FF957A0127E6BD336FF6F89C38, 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 ] vmbus C:\Windows\system32\drivers\vmbus.sys
21:59:48.0059 0x1988 vmbus - ok
21:59:48.0090 0x1988 [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
21:59:48.0090 0x1988 VMBusHID - ok
21:59:48.0152 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
21:59:48.0184 0x1988 vmicguestinterface - ok
21:59:48.0215 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicheartbeat C:\Windows\System32\ICSvc.dll
21:59:48.0246 0x1988 vmicheartbeat - ok
21:59:48.0277 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
21:59:48.0309 0x1988 vmickvpexchange - ok
21:59:48.0340 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicrdv C:\Windows\System32\ICSvc.dll
21:59:48.0371 0x1988 vmicrdv - ok
21:59:48.0402 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicshutdown C:\Windows\System32\ICSvc.dll
21:59:48.0434 0x1988 vmicshutdown - ok
21:59:48.0465 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmictimesync C:\Windows\System32\ICSvc.dll
21:59:48.0481 0x1988 vmictimesync - ok
21:59:48.0512 0x1988 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicvss C:\Windows\System32\ICSvc.dll
21:59:48.0543 0x1988 vmicvss - ok
21:59:48.0590 0x1988 [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:59:48.0605 0x1988 volmgr - ok
21:59:48.0637 0x1988 [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:59:48.0652 0x1988 volmgrx - ok
21:59:48.0684 0x1988 [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:59:48.0699 0x1988 volsnap - ok
21:59:48.0746 0x1988 [ EF31713EE4C7CCFE4049F7E7F15645A2, 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 ] vpci C:\Windows\System32\drivers\vpci.sys
21:59:48.0746 0x1988 vpci - ok
21:59:48.0793 0x1988 [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
21:59:48.0809 0x1988 vsmraid - ok
21:59:48.0918 0x1988 [ 94FAFD473CDD80CE19A21FB9503D7ED1, 953E5E8C753C0017E1258695A76F60CC05D283F7476B9D9C5C8AC78B8E3FCE18 ] VSS C:\Windows\system32\vssvc.exe
21:59:48.0965 0x16dc Object required for P2P: [ 55C892763A614BA39BA956A0323C65F3 ] ClickToRunSvc
21:59:48.0996 0x1988 VSS - ok
21:59:49.0043 0x1988 [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
21:59:49.0059 0x1988 VSTXRAID - ok
21:59:49.0074 0x1988 [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
21:59:49.0090 0x1988 vwifibus - ok
21:59:49.0105 0x1988 [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
21:59:49.0105 0x1988 vwififlt - ok
21:59:49.0137 0x1988 [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
21:59:49.0152 0x1988 vwifimp - ok
21:59:49.0199 0x1988 [ DC821E811EFBB65CDD77FBB8B6ECA385, B7C8AACDF81DBA298F2F384983D36B269876C31F0398D89BF9070217A069B96F ] W32Time C:\Windows\system32\w32time.dll
21:59:49.0215 0x1988 W32Time - ok
21:59:49.0246 0x1988 [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen C:\Windows\System32\drivers\wacompen.sys
21:59:49.0246 0x1988 WacomPen - ok
21:59:49.0356 0x1988 [ A81988DCC4FA440AA88B84CA452F5E22, 3573AAA09971E8ADB6FEFA778E02B2D8EE5E4249267CF37A524D9F019CC836FB ] wbengine C:\Windows\system32\wbengine.exe
21:59:49.0434 0x1988 wbengine - ok
21:59:49.0512 0x1988 [ 0F1DFA2FED73FA78B8C3CDE332A870F6, 1089F6F585F5350D349A640EBD3117832DF6B3657EB6667CB00AE217E04ACA17 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:59:49.0543 0x1988 WbioSrvc - ok
21:59:49.0590 0x1988 [ 0EAEC313B24837613621B4A2536ED382, 61C194ED7FA7D65BBE61A546D5FCA52F52AB08324E084D3EC23C9706E9BF0175 ] Wcmsvc C:\Windows\System32\wcmsvc.dll
21:59:49.0606 0x1988 Wcmsvc - ok
21:59:49.0684 0x1988 [ F6B4C2280FF7C7156AC8A4687B9DA35E, 1899D584D7469BB49355D84080051E2575B033E6312009D9C6C1DD3F7F9AA4C5 ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:59:49.0699 0x1988 wcncsvc - ok
21:59:49.0746 0x1988 [ B7BF1D783F5B2484E8CE1C0C78257F16, 468601199FCCF63DBAE86EE6B8825EA85B2A1EE177413353FFA2CC9CA5249FCD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:59:49.0762 0x1988 WcsPlugInService - ok
21:59:49.0793 0x1988 [ 81285DDC994F03379DB46419300B2DCB, 98D3622E11F375718AEA1DE3B5F0104DDAB4F96B6D4C19788C14F7B338A6F235 ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
21:59:49.0793 0x1988 WdBoot - ok
21:59:49.0871 0x1988 [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:59:49.0918 0x1988 Wdf01000 - ok
21:59:49.0965 0x1988 [ 26B8FED3F3B85F5F0C4BD03FD00B9941, 7F94FE7954498223B33C025258DB588A3AC9FF25C58EEAD204514FD20652FE40 ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
21:59:49.0996 0x1988 WdFilter - ok
21:59:50.0043 0x1988 [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:59:50.0043 0x1988 WdiServiceHost - ok
21:59:50.0059 0x1988 [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:59:50.0074 0x1988 WdiSystemHost - ok
21:59:50.0106 0x1988 [ CE67080F00E0AF32755096CEA6430ABA, 0E5D626F9F76C0BC63B2D246AD66D9CBF7D92F34B56398417BCFD0C331DBD282 ] WdNisDrv C:\Windows\system32\Drivers\WdNisDrv.sys
21:59:50.0106 0x1988 WdNisDrv - ok
21:59:50.0137 0x1988 WdNisSvc - ok
21:59:50.0184 0x1988 [ 40F83492DB9ABBA59773A45FB487C8B2, 0D0DE0B0C9B929FEFD2674CCF17F5F2FC4B16EAB8E1981BBCE51B0305FD7D75E ] WebClient C:\Windows\System32\webclnt.dll
21:59:50.0199 0x1988 WebClient - ok
21:59:50.0246 0x1988 [ 384E1D04FE20845B2559D292F17A9FA1, AD3B0B2B2219691AC30FEEC8AFDB3BBB74B51BB7D02038AE2B4DEA514E245315 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:59:50.0262 0x1988 Wecsvc - ok
21:59:50.0293 0x1988 [ 455014F4E48B67EBE0F032E2B0E06BF2, A36435784A034B27056A0E606683A20C69F1B0AB2B6BAEDEAEAA190F6287CAEF ] WEPHOSTSVC C:\Windows\system32\wephostsvc.dll
21:59:50.0309 0x1988 WEPHOSTSVC - ok
21:59:50.0340 0x1988 [ F13DBA57CEA9B7074B95EDCA6AD2635E, 1D9BA4841EF1343A5D9096B5FE27FC65DC1901D6683DD13516171638549666B5 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:59:50.0356 0x1988 wercplsupport - ok
21:59:50.0387 0x1988 [ FD7E58B6AA3EABF2D12B9762A20E11E4, 4C5E2E246C5C70074866BB3DBC2AAF483ECE4345004CCB8D1FE285047268685D ] WerSvc C:\Windows\System32\WerSvc.dll
21:59:50.0402 0x1988 WerSvc - ok
21:59:50.0465 0x1988 [ BAB713B409258DB7B5D9F9693F802B0E, C0D0391EC4FDC07E0A07F4EEB2DC9CC5B2BE5D2E292E7D01929E8D39D6F73EA5 ] WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs.sys
21:59:50.0465 0x1988 WFPLWFS - ok
21:59:50.0512 0x1988 [ 8C840E1FD7584E74BD0CC1EA581EC187, 148E534A94B4882E7396B13FABE17407802292E7890713540080D03D5629C81D ] WiaRpc C:\Windows\System32\wiarpc.dll
21:59:50.0528 0x1988 WiaRpc - ok
21:59:50.0574 0x1988 [ 5F66B7BB330AA80067FC66149A692620, 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:59:50.0574 0x1988 WIMMount - ok
21:59:50.0590 0x1988 WinDefend - ok
21:59:50.0668 0x1988 [ 10DAD6A7FC617A221313BD584E3C3A00, F139B878668ECF38FE59831E8595A207D5CEEE76C6FFDA8C9F735435E601A763 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
21:59:50.0715 0x1988 WinHttpAutoProxySvc - ok
21:59:50.0777 0x1988 [ FC8BD690321216C32BB58B035B6D5674, D61698DB19D9DB2593B60B6BA13F7B7735667206F41D751D507135469D6D3CDD ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:59:50.0793 0x1988 Winmgmt - ok
21:59:51.0199 0x1988 [ 75436315AA383CF527695C6D49D0CA59, E3D55F2ACBD45D4D031FA6CA799394459C89BE50FF6ADE4FE36F2CAB2D2E63D0 ] WinRM C:\Windows\system32\WsmSvc.dll
21:59:51.0606 0x1988 WinRM - ok
21:59:51.0684 0x1988 [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb C:\Windows\System32\drivers\WinUSB.sys
21:59:51.0700 0x1988 WinUsb - ok
21:59:51.0918 0x1988 [ DC079BA8390089E4EBCA63D27EEA3ECB, 4D549217A68292E2B16C09FD9F84317011EE54A2DAF4E2AB85554267DF0D3249 ] WlanSvc C:\Windows\System32\wlansvc.dll
21:59:52.0090 0x1988 WlanSvc - ok
21:59:52.0309 0x1988 [ 06BF5897949A8F24893F792E876B71F5, 9D3719492A86BF52A56E2EA798FD6FDB5862A03F6D360FCC4B0CEA9BE9792AE4 ] wlidsvc C:\Windows\system32\wlidsvc.dll
21:59:52.0449 0x1988 wlidsvc - ok
21:59:52.0481 0x1988 [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
21:59:52.0496 0x1988 WmiAcpi - ok
21:59:52.0559 0x1988 [ B96F7A1236C3F21212DE2C40A3DDB005, 5A29EBB6DA036E303611EB1304192655021405BB05452FD37886DDE604FF0D9D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:59:52.0575 0x1988 wmiApSrv - ok
21:59:52.0606 0x1988 WMPNetworkSvc - ok
21:59:52.0653 0x1988 [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof C:\Windows\system32\drivers\Wof.sys
21:59:52.0668 0x1988 Wof - ok
21:59:52.0731 0x16dc Object send P2P result: true
21:59:52.0887 0x1988 [ 588040D595BBF0856CA1ADD941A8ED17, CBC92BB5453FE1BEA6F33239B7CE884F312559591383408EA5F95A006156C5D3 ] workfolderssvc C:\Windows\system32\workfolderssvc.dll
21:59:52.0965 0x1988 workfolderssvc - ok
21:59:52.0996 0x1988 [ A2468CC3509394A33C4C32F99563D845, 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
21:59:53.0012 0x1988 wpcfltr - ok
21:59:53.0043 0x1988 [ 19F4DF69876DA7E9C4965351560FE6B7, 127247A7964F55EE3AF842D25120F5ACD387632BEE2BF3D28FAC05840CEA19BA ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:59:53.0043 0x1988 WPCSvc - ok
21:59:53.0075 0x1988 [ 2ADE11F3D84709C5F6781E4C59F11683, F003C43396CF8FCF44EAB87583650DB4D2A233322D28D6A78D1694945D9073BB ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:59:53.0090 0x1988 WPDBusEnum - ok
21:59:53.0106 0x1988 [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr.sys
21:59:53.0121 0x1988 WpdUpFltr - ok
21:59:53.0137 0x1988 [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:59:53.0137 0x1988 ws2ifsl - ok
21:59:53.0184 0x1988 [ 5596C0960ED6ED7494BF2A55DE428684, C95CF09A657F37F421CC80E16F2F95B8EC59A8D5D48F104551155EAC8E53DCB2 ] wscsvc C:\Windows\System32\wscsvc.dll
21:59:53.0200 0x1988 wscsvc - ok
21:59:53.0200 0x1988 WSearch - ok
21:59:53.0403 0x1988 [ 6B2D71124C1EA86B74412F414C42431D, 078CC6C9667EF6BDA3E6900BC26A5A5B030CAA66928A6BBB7B7DC43C5C199EDC ] WSService C:\Windows\System32\WSService.dll
21:59:53.0559 0x1988 WSService - ok
21:59:53.0746 0x1988 [ 3F726FF7B1ACC7D5E89940EA5BFF0E61, DF84486870C677B30985005A909CFDF8446BD566F601A295FF29F258E1D1AFF4 ] wuauserv C:\Windows\system32\wuaueng.dll
21:59:53.0903 0x1988 wuauserv - ok
21:59:53.0934 0x1988 [ 481286719402E4BAEFEA0604AB1B5113, F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:59:53.0949 0x1988 WudfPf - ok
21:59:53.0996 0x1988 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFRd C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0028 0x1988 WUDFRd - ok
21:59:54.0043 0x1988 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFSensorLP C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0043 0x1988 WUDFSensorLP - ok
21:59:54.0106 0x1988 [ 51D28F7F1F888DDCF2C67DCF3B79A5D3, 74FF2936AFCEB9A36175D5B00EB91A5AD614B52BE3FB3FA9B994A025A484D2B7 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:59:54.0137 0x1988 wudfsvc - ok
21:59:54.0200 0x1988 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdFs C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0262 0x1988 WUDFWpdFs - ok
21:59:54.0324 0x1988 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdMtp C:\Windows\system32\DRIVERS\WUDFRd.sys
21:59:54.0387 0x1988 WUDFWpdMtp - ok
21:59:54.0528 0x1988 [ A0900F8F628B5AF6841414EB3CF11E50, 8A531F2472FF4B4D895D469D28C215C834ECADBEF539894B8F3F606079A86184 ] WwanSvc C:\Windows\System32\wwansvc.dll
21:59:54.0622 0x1988 WwanSvc - ok
21:59:54.0684 0x1988 ================ Scan global ===============================
21:59:54.0793 0x1988 [ 05B08C20B8428ECE088CB5635696A48D, 471642A2D0E5C3BB235962FC8D86A49AC30D7DDE80B97E348425BBFCDE4DCDC3 ] C:\Windows\system32\basesrv.dll
21:59:54.0871 0x1988 [ EAB311B0A7A8EA0346F14F08D4BC8F46, 11168E4074679F8A69DA714C0ABD0C68BA49D171B379343F14783C9C563202CA ] C:\Windows\system32\winsrv.dll
21:59:54.0965 0x1988 [ 3600ED7EA8AED849E20700551C0BD63B, 4A8C346C1646E80B58EF93F87F915A41E05CA2E993BB1C96955AE62A0669AF66 ] C:\Windows\system32\sxssrv.dll
21:59:55.0106 0x1988 [ E0C7813A97CA7947FF5C18A8F3B61A45, 083BB4F3B20419C87DB656F1465E5F782ACDE76838CDE6207F26AAD035C69DE0 ] C:\Windows\system32\services.exe
21:59:55.0184 0x1988 [ Global ] - ok
21:59:55.0184 0x1988 ================ Scan MBR ==================================
21:59:55.0200 0x1988 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
21:59:55.0262 0x1988 \Device\Harddisk0\DR0 - ok
21:59:55.0262 0x1988 ================ Scan VBR ==================================
21:59:55.0278 0x1988 [ 44C751946C60B5D0D621FA0CD6C945AD ] \Device\Harddisk0\DR0\Partition1
21:59:55.0293 0x1988 \Device\Harddisk0\DR0\Partition1 - ok
21:59:55.0325 0x1988 [ EDF646E536477EF7F6ECB1D274D4F197 ] \Device\Harddisk0\DR0\Partition2
21:59:55.0340 0x1988 \Device\Harddisk0\DR0\Partition2 - ok
21:59:55.0387 0x1988 [ 3B1727C808837DAC4104A16DB3F7F6F8 ] \Device\Harddisk0\DR0\Partition3
21:59:55.0387 0x1988 \Device\Harddisk0\DR0\Partition3 - ok
21:59:55.0418 0x1988 [ D9D396A12180C37548F829E3A11AF993 ] \Device\Harddisk0\DR0\Partition4
21:59:55.0434 0x1988 \Device\Harddisk0\DR0\Partition4 - ok
21:59:55.0481 0x1988 [ 61418FB9FA5338AEED10070F8D3FF5E2 ] \Device\Harddisk0\DR0\Partition5
21:59:55.0496 0x1988 \Device\Harddisk0\DR0\Partition5 - ok
21:59:55.0559 0x1988 [ 00C57FDFA0EC955C3D6BB97DA52427CB ] \Device\Harddisk0\DR0\Partition6
21:59:55.0590 0x1988 \Device\Harddisk0\DR0\Partition6 - ok
21:59:55.0590 0x1988 ================ Scan generic autorun ======================
21:59:55.0668 0x1988 [ EC160CC63955C4C4845C056962F9987F, 99AC2E788982742B9539C519F2E779C78C34CDF8CACBB4D34FF20F3E47981F5D ] C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe
21:59:55.0668 0x1988 WebStorage - ok
21:59:55.0684 0x1988 Waiting for KSN requests completion. In queue: 109
21:59:56.0700 0x1988 Waiting for KSN requests completion. In queue: 109
21:59:57.0715 0x1988 Waiting for KSN requests completion. In queue: 109
21:59:59.0309 0x1988 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.207.0 ), 0x60100 ( disabled : updated )
21:59:59.0356 0x1988 AV detected via SS2: McAfee Anti-Virus und Anti-Spyware, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 14.0.0.0 ), 0x51000 ( enabled : updated )
21:59:59.0403 0x1988 FW detected via SS2: McAfee Firewall, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 14.0.0.0 ), 0x51010 ( enabled )
22:00:01.0950 0x1988 ============================================================
22:00:01.0950 0x1988 Scan finished
22:00:01.0950 0x1988 ============================================================
22:00:02.0012 0x0054 Detected object count: 0
22:00:02.0012 0x0054 Actual detected object count: 0
22:00:18.0372 0x0d98 Deinitialize success
Uta |
|
28.09.2015, 20:04
| #4 |
| /// the machine /// TB-Ausbilder | WIndows 8 immer wieder SPAM Mails vom Web.de Account Rechner hat keine Malware. Ist das der einzige Rechner auf dem die Mails abgerufen werden?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
29.09.2015, 04:04
| #5 |
| | WIndows 8 immer wieder SPAM Mails vom Web.de Account Nein, es gibt noch mein Handy, auf dem ich eine mobile Web App für meine Mails installiert hatte, die habe ich inzwischen gelöscht und CM Security drüberlaufen lassen. Und einen anderen Rechner, der war jetzt mehrere Wochen in Reperatur, bei dem habe ich die Schritte noch nicht durchführen können. Da die SPAM Mails kurz nach dem Erhalten des Netbooks das erste Mal auftraten (hier habe ich die Schritte durchgeführt), dachte ich, dass der Fehler hier liegen könnte. Ich werde heute die entsprechenden Schritte auf meinem Laptop wiederholen und die LOG Dateien hier posten. Mit freundlichen Grüßen Uta |
|
29.09.2015, 19:12
| #6 |
| /// the machine /// TB-Ausbilder | WIndows 8 immer wieder SPAM Mails vom Web.de Account Meist, sagen wir mal in 99% der Fälle, ist da eh keine Malware auf dem Rechner. Das Konto wird einfach gehackt oder gespooft.
__________________ --> WIndows 8 immer wieder SPAM Mails vom Web.de Account |
|
| Themen zu WIndows 8 immer wieder SPAM Mails vom Web.de Account |
| browser-security, computer, cpu, desktop, device driver, dnsapi.dll, failed, firefox, flash player, google, homepage, iexplore.exe, mail delivery failed, mail delivery failed: returning message to sender, monitor, mozilla, prozesse, realtek, registry, rundll, scan, siteadvisor, software, spam, svchost.exe, system, trojaner, trojaner board, vondos, warnung, webadvisor, windows |
Linear-Darstellung
