Schädlingsbefall - Computer sehr langsam durch extrem grosse svhost.exe

schloemilein · 13.11.2016, 18:20

Hi,

ich habe seit ca 1 Monat festgestellt, dass mein Rechner sehr langsam ist und immer häufiger die Maus einfriert. Beim checken des Taskmanagers fiel mir auf, dass ich sehr viele svhost.exe in Anwendung habe die zudem sehr stark den Arbeistspeicher auslasten. Auch andere Anwendungen treten regelmässig mehrfach auf und zeigen eine sehr hohe Auslastung des Arbeitspeicher auf. Ich bin mir nicht sicher aber kann dies ein Schädlingsbefall sein? Mein Virenprogramm Kapersky hat bisher nichts erkannt oder gemeldet.

Vielleicht könnt ihr mir helfen.

Mit freundlichen Grüssen

Schloemilein

cosinus · 14.11.2016, 09:38

Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

schloemilein · 15.11.2016, 20:32

Code:

ATTFilter

Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 12-11-2016
Exécuté par Admin (15-11-2016 20:28:05)
Exécuté depuis C:\Users\Admin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2009-08-30 09:56:12)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Admin (S-1-5-21-2801922753-1568483922-2384193263-1003 - Administrator - Enabled) => C:\Users\Admin
Administrateur (S-1-5-21-2801922753-1568483922-2384193263-500 - Administrator - Disabled)
Invité (S-1-5-21-2801922753-1568483922-2384193263-501 - Limited - Disabled)
Sonos (S-1-5-21-2801922753-1568483922-2384193263-1004 - Limited - Enabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Anti-Virus (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

"Nero SoundTrax Help (x32 Version: 4.0.15.0 - Nero AG) Hidden
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32 bits) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
dLAN Cockpit (x32 Version: 3.2.28 - devolo AG) Hidden
DolbyFiles (x32 Version: 2.0 - Nero AG) Hidden
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.1.119 - DVDVideoSoft Ltd.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{0D44E3A4-6C3D-45D7-B443-079509E5BE5D}) (Version: 12.3.2.35 - Apple Inc.)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
LightScribe System Software  1.14.17.1 (HKLM-x32\...\{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}) (Version: 1.14.17.1 - LightScribe)
Menu Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden
Microsoft .NET Framework 4.5.2 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version:  - Microsoft)
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version:  - Microsoft)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version:  - Microsoft)
Mise à jour Microsoft Office Word 2007 Help  (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version:  - Microsoft)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Movie Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 9 (HKLM-x32\...\{6f33747d-f570-467a-8b9f-a9b23d983e71}) (Version:  - Nero AG)
NVIDIA PhysX (HKLM-x32\...\{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}) (Version: 9.09.1112 - NVIDIA Corporation)
OF: Red River (x32 Version: 1.0.0001.129 - Codemasters) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 16.0.1196.73 (HKLM-x32\...\Opera 16.0.1196.73) (Version: 16.0.1196.73 - Opera Software ASA)
Opera Stable 41.0.2353.56 (HKLM-x32\...\Opera 41.0.2353.56) (Version: 41.0.2353.56 - Opera Software)
Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.)
SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.5860 - Analog Devices)
SoundTrax (x32 Version: 4.0.18.0 - Nero AG) Hidden
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
SuperCopier2 (HKLM-x32\...\SuperCopier2) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {25E3D323-6ECF-4D73-8974-1D70C676DFA9} - System32\Tasks\{C6EB1BA7-B755-40A2-BA05-1FFD64F971BF} => pcalua.exe -a D:\Downloads\install_flash_player.exe -d D:\Downloads
Task: {2A8F4288-04D4-40D0-A1EC-FD52E3B4721F} - System32\Tasks\{42D5FC95-3697-4663-BB88-37BC7A331CEC} => C:\Program Files (x86)\Skype\Phone\Skype.exe
Task: {3FF104F0-597C-4057-B1BC-057C476E427C} - \Microsoft\Windows\Multimedia\SMupdate3 -> Pas de fichier <==== ATTENTION
Task: {479FE9A0-D7B8-4D98-8095-412C75628824} - System32\Tasks\Opera scheduled Autoupdate 1373463090 => C:\Program Files (x86)\Opera\launcher.exe [2016-11-07] (Opera Software)
Task: {7114D927-EC9B-453F-AF86-02D40832A4C7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-05] (Piriform Ltd)
Task: {7CA3E8C5-C632-4BAF-9A60-558F62699FCE} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe [2016-11-03] (Adobe Systems Incorporated)
Task: {8E702C39-129B-4A20-AD78-183ED6E888E0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-03] (Adobe Systems Incorporated)
Task: {8F83D543-21E8-404B-BF63-ED10A7DDF2AB} - \Microsoft\Windows\Maintenance\SMupdate2 -> Pas de fichier <==== ATTENTION
Task: {A21E6800-9EDD-4B71-BB04-587E8B15A47A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {A53F3892-0619-4D6F-87AD-F975B5BF4530} - \SMupdate1 -> Pas de fichier <==== ATTENTION
Task: {D9AC8B82-C55D-4E4E-AD06-B6E8FAC1B4B2} - \User_Feed_Synchronization-{FD5BA123-7CA4-44FA-ADC6-89C2337C8DBA} -> Pas de fichier <==== ATTENTION
Task: {DDC93D15-E44A-465B-B7B4-C180AB570399} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {E20D9FE4-69F8-4424-BEF6-C734796A40A0} - System32\Tasks\{2A8F9BDD-BFC9-4FF2-B6D1-508ABC38FD34} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/55100
Task: {F35A9A1A-681C-4F8F-A0AF-3E26ACD1DAD6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {FD18A892-47F0-4E2C-BCE2-D22720D9405F} - \Ad-Aware Update (Weekly) -> Pas de fichier <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}.job => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe

==================== Raccourcis =============================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)

==================== Modules chargés (Avec liste blanche) ==============

2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-08-05 17:52 - 2016-08-05 17:52 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\kpcengine.2.3.dll
2016-11-12 09:58 - 2016-11-11 17:53 - 66023632 _____ () C:\Program Files (x86)\Opera\41.0.2353.56\opera.dll
2016-11-12 09:58 - 2016-11-11 17:53 - 01888464 _____ () C:\Program Files (x86)\Opera\41.0.2353.56\libglesv2.dll
2016-11-12 09:58 - 2016-11-11 17:53 - 00094416 _____ () C:\Program Files (x86)\Opera\41.0.2353.56\libegl.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [127]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)

IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\100sexlinks.com -> 100sexlinks.com

Il y a 5317 plus de sites.


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2009-07-14 03:34 - 2011-12-05 21:14 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AEADIFilters => 2
MSCONFIG\Services: AxInstSV => 3
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: c2cautoupdatesvc => 2
MSCONFIG\Services: c2cpnrsvc => 2
MSCONFIG\Services: DigitalWave.Update.Service => 2
MSCONFIG\Services: EFUploadSrv => 2
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: fsssvc => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HomeGroupListener => 3
MSCONFIG\Services: HomeGroupProvider => 3
MSCONFIG\Services: LightScribeService => 2
MSCONFIG\Services: LVPrcS64 => 2
MSCONFIG\Services: Nero BackItUp Scheduler 4.0 => 2
MSCONFIG\Services: RemoteRegistry => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk => C:\Windows\pss\Adobe Gamma Loader.exe.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
MSCONFIG\startupreg: Hilfe Assistent => C:\Program Files (x86)\Hilfe Assistent\Hilfe_Assistent.exe /auto
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Kernel and Hardware Abstraction Layer => KHALMNPR.EXE
MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SSBkgdUpdate => "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SuperCopier2.exe => C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
MSCONFIG\startupreg: VX1000 => C:\Windows\vVX1000.exe
MSCONFIG\startupreg: YTDownloader => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{A7E358F5-A22A-46D8-80B7-C0E2B0A2F239}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5FE3A724-3223-468F-B91D-2C7DF0D85B3C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{12790A1B-33D9-442F-89A0-74B06489D01D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5A45485B-4BB6-4C17-8DB6-2FEC4EFD4FA1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2E1C4AF8-D569-4E02-AABA-F9AD97E26272}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{C0C86D53-91E1-40F9-B0FA-FC5F6BE4F25B}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{C98E3DC6-AFB2-424F-BB75-955FD768821B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{735E09E1-EE07-4B18-A81D-3732FF0CBA01}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{51B68E6C-D99B-4A86-9A43-B81EDEC8B093}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A2AA5AFE-C2D1-4887-B910-416C7E759818}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F25D77E3-B28A-4456-8634-0A9827F09824}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Points de restauration =========================

ATTENTION: La Restauration système est désactivée

==================== Éléments en erreur du Gestionnaire de périphériques =============

Name: PS/2 Mouse
Description: PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Logitech
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Contrôleur PCI de communications simplifiées
Description: Contrôleur PCI de communications simplifiées
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PS/2 Keyboard
Description: PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: Logitech
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================

Erreurs système:
=============
Error: (11/15/2016 08:22:40 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Le Gestionnaire de services de contrôle a essayé d’entreprendre une action corrective (Redémarrer le service) après la fin inattendue du service Explorateur d’ordinateurs, mais cette action a échoué en raison de l’erreur suivante*: 
Une instance du service s’exécute déjà.

Error: (11/15/2016 08:22:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Superfetch s’est terminé de façon inattendue pour la 3ème fois.

Error: (11/15/2016 08:22:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Service de l’Assistant Compatibilité des programmes s’est terminé de façon inattendue pour la 3ème fois.

Error: (11/15/2016 08:22:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Connexions réseau s’est terminé de façon inattendue pour la 3ème fois.

Error: (11/15/2016 08:22:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Générateur de points de terminaison du service Audio Windows s’est terminé de façon inattendue pour la 3ème fois.

Error: (11/15/2016 08:19:40 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Le Gestionnaire de services de contrôle a essayé d’entreprendre une action corrective (Redémarrer le service) après la fin inattendue du service Serveur, mais cette action a échoué en raison de l’erreur suivante*: 
Une instance du service s’exécute déjà.

Error: (11/15/2016 08:17:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Service de configuration automatique WLAN s’est terminé de manière inattendue. Ceci s’est produit 2 fois. L’action corrective suivante va être effectuée dans 300000 millisecondes*: Redémarrer le service.

Error: (11/15/2016 08:17:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Gestionnaire de sessions du Gestionnaire de fenêtrage s’est terminé de manière inattendue. Ceci s’est produit 2 fois. L’action corrective suivante va être effectuée dans 300000 millisecondes*: Redémarrer le service.

Error: (11/15/2016 08:17:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Client de suivi de lien distribué s’est terminé de manière inattendue. Ceci s’est produit 2 fois. L’action corrective suivante va être effectuée dans 300000 millisecondes*: Redémarrer le service.

Error: (11/15/2016 08:17:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Superfetch s’est terminé de manière inattendue. Ceci s’est produit 2 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes*: Redémarrer le service.


CodeIntegrity:
===================================
  Date: 2015-03-10 21:55:33.623
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-10 21:55:33.621
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-10 21:55:33.619
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-10 21:55:33.607
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-10 21:55:33.605
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-10 21:55:33.603
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-08 14:19:09.385
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-08 14:19:09.385
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-08 14:19:09.385
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2015-03-08 14:19:09.370
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.


==================== Infos Mémoire =========================== 

Processeur: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz
Pourcentage de mémoire utilisée: 38%
Mémoire physique - RAM - totale: 3063.3 MB
Mémoire physique - RAM - disponible: 1887.43 MB
Mémoire virtuelle totale: 6124.81 MB
Mémoire virtuelle disponible: 4596.78 MB

==================== Lecteurs ================================

Drive c: (c) (Fixed) (Total:74.43 GB) (Free:9.38 GB) NTFS
Drive d: (DOCUMENT) (Fixed) (Total:149.05 GB) (Free:36.66 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: 7D627685)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 8C878C87)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)

==================== Fin de Addition.txt ============================

Code:

ATTFilter

Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Exécuté par Admin (administrateur) sur PC01 (15-11-2016 20:26:55)
Exécuté depuis C:\Users\Admin\Desktop
Profils chargés: Admin (Profils disponibles: Admin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avpui.exe
(Ruiware) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
() C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.56\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.56\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.56\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.56\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\41.0.2353.56\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-09] (Apple Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [134416 2007-04-11] (Logitech Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2008-07-08] (Analog Devices, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1216648 2015-08-06] (Ruiware)
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\MountPoints2: {40948ce1-f1fb-11de-a88d-0024819f1d68} - F:\NokiaPCIA_Autorun.exe
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\...\MountPoints2: {5ac33e38-8991-11df-999b-0024819f1d68} - "F:\WD SmartWare.exe" autoplay=true
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{986FC6A8-E58E-47A8-BF57-7DC4A769A00D}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2801922753-1568483922-2384193263-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.web.de/
SearchScopes: HKLM -> DefaultScope la valeur est absente
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2016-10-24] (AO Kaspersky Lab)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-15] (Oracle Corporation)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2016-10-24] (AO Kaspersky Lab)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-15] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2016-10-24] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2016-10-24] (AO Kaspersky Lab)
Toolbar: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003 -> Pas de nom - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  Pas de fichier
Toolbar: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Pas de fichier
Toolbar: HKU\S-1-5-21-2801922753-1568483922-2384193263-1003 -> Pas de nom - {71576546-354D-41C9-AAE8-31F2EC22BF0D} -  Pas de fichier
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: HKLM-x32 {41EF3CD2-D8CC-4438-84B1-280BB4E77C8E} C:\Users\Admin\AppData\Local\Temp\f5tmp\f5tunsrv.cab
DPF: HKLM-x32 {45B69029-F3AB-4204-92DE-D5140C3E8E74} C:\Users\Admin\AppData\Local\Temp\f5tmp\InstallerControl.cab
DPF: HKLM-x32 {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://www.extrafilm.fr/ImageUploader5.cab
DPF: HKLM-x32 {CC85ACDF-B277-486F-8C70-2C9B2ED2A4E7} C:\Users\Admin\AppData\Local\Temp\f5tmp\urxshost.cab
DPF: HKLM-x32 {E0FF21FA-B857-45C5-8621-F120A0C17FF2} C:\Users\Admin\AppData\Local\Temp\f5tmp\urxhost.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\TomTom\HOME\Profiles\76cffhmm.default [2010-11-10]
FF Extension: (Emulator) - C:\Users\Admin\AppData\Roaming\TomTom\HOME\Profiles\76cffhmm.default\Extensions\Navcore.7.903.9183@tomtom.com [2010-10-22] [non signé]
FF Extension: (Pas de nom) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [non trouvé(e)]
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default [2016-11-15]
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\hph5sjan.default -> 
FF Homepage: Mozilla\Firefox\Profiles\hph5sjan.default -> www.google.de
FF Extension: (All-in-One Sidebar) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2014-12-24] [non signé]
FF Extension: (NoScript) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-12-24] [non signé]
FF Extension: (Adblock Plus) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-23] [non signé]
FF Extension: (F5 Networks Host Plugin) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default\Extensions\{DBBB3167-6E81-400f-BBFD-BD8921726F52} [2011-10-21] [non signé]
FF Extension: (Hilfe Assistent) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hph5sjan.default\Extensions\{} [2013-12-01] [non signé]
FF Extension: (Pas de nom) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [non trouvé(e)]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox [2016-10-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-13] ()
FF Plugin: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\system32\npDeployJava1.dll [2012-08-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-15] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Pas de fichier]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2801922753-1568483922-2384193263-1003: @facebook.com/FBPlugin,version=1.0.3 -> C:\Users\Admin\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll [Pas de fichier]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-01-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-01-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-01-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-01-23] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-01-23] (Apple Inc.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-06-01] <==== ATTENTION

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

Opera: 
=======
OPR Extension: (History Eraser) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\lfpoajlbkhlfoeeokbppmecpplmieedm [2015-08-14]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S4 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [109056 2008-05-28] (Andrea Electronics Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe [194000 2015-12-13] (Kaspersky Lab ZAO)
S4 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-01-19] (Digital Wave Ltd.)
S4 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [Fichier non signé]
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [77728 2016-03-06] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [181640 2015-12-13] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [237480 2016-05-23] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [943536 2016-05-23] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [49240 2016-05-23] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-13] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-07-12] (Lavasoft AB)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2011-05-10] (Apple Inc.) [Fichier non signé]
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [12464 2016-09-03] (Macrovision Europe Ltd) [Fichier non signé]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-11-15 20:26 - 2016-11-15 20:27 - 00015948 _____ C:\Users\Admin\Desktop\FRST.txt
2016-11-15 18:20 - 2016-11-15 18:20 - 00002795 ____H C:\Users\Admin\Desktop\Microsoft Office Outlook 2007 (2).lnk
2016-11-15 18:17 - 2016-11-15 18:17 - 00109296 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-15 18:03 - 2016-11-15 18:04 - 00409760 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-13 18:20 - 2016-11-13 18:20 - 00032421 _____ C:\Users\Admin\Documents\Addition.txt
2016-11-13 18:19 - 2016-11-13 18:19 - 00023282 _____ C:\Users\Admin\Documents\FRST.txt
2016-11-13 17:44 - 2016-11-15 20:26 - 00000000 ____D C:\FRST
2016-11-13 17:43 - 2016-11-13 17:44 - 02411520 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2016-10-24 18:22 - 2016-11-12 10:12 - 00000320 _____ C:\Windows\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}.job

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-11-15 20:21 - 2009-07-14 05:45 - 00015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-15 20:21 - 2009-07-14 05:45 - 00015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-15 20:18 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-15 20:17 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-11-15 20:16 - 2016-01-03 12:54 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-15 18:37 - 2012-05-11 09:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-11-15 18:19 - 2010-09-29 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2016-11-15 18:19 - 2009-08-31 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-11-15 18:18 - 2016-09-03 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-11-15 18:18 - 2015-12-13 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2016-11-15 18:18 - 2015-11-07 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2016-11-15 18:18 - 2013-07-10 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2016-11-15 18:18 - 2009-08-31 21:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2016-11-15 18:18 - 2009-08-30 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-15 18:17 - 2015-12-12 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-14 23:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-13 16:49 - 2009-07-14 16:24 - 00750416 _____ C:\Windows\system32\perfh00C.dat
2016-11-13 16:49 - 2009-07-14 16:24 - 00151062 _____ C:\Windows\system32\perfc00C.dat
2016-11-13 16:49 - 2009-07-14 06:13 - 01677434 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-13 16:28 - 2009-12-20 11:37 - 00000000 ____D C:\audiograbber
2016-11-12 10:27 - 2009-08-30 13:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-12 10:21 - 2015-11-07 16:12 - 00000000 ____D C:\ProgramData\TEMP
2016-11-12 09:59 - 2016-07-08 13:27 - 00003850 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1373463090
2016-11-12 09:59 - 2013-07-10 14:31 - 00000000 ____D C:\Program Files (x86)\Opera
2016-11-10 22:38 - 2016-02-21 23:05 - 00000000 ___HD C:\Users\Admin\AppData\Roaming\DVDVideoSoft
2016-11-07 19:49 - 2016-09-26 21:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader*DC.lnk
2016-11-07 19:48 - 2016-09-26 21:41 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-04 06:25 - 2015-12-13 00:26 - 00001064 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-11-03 08:16 - 2016-01-03 12:54 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-03 08:16 - 2015-12-13 00:26 - 00004050 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-11-03 08:16 - 2013-09-11 22:17 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-03 08:16 - 2013-09-11 22:17 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-03 08:16 - 2011-12-22 08:37 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-03 08:16 - 2009-08-30 14:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-03 08:15 - 2009-10-03 21:27 - 00000000 ___HD C:\Users\Admin\AppData\Local\Adobe

==================== Fichiers à la racine de certains dossiers =======

2014-05-17 08:55 - 2014-05-17 08:58 - 6103040 _____ () C:\Program Files (x86)\GUTE14A.tmp
2011-06-06 14:01 - 2011-06-06 14:01 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\2004018.exe
2011-07-07 07:13 - 2011-07-07 07:13 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\2132383.exe
2011-06-06 14:01 - 2011-06-06 14:01 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\3026427.exe
2011-06-20 18:49 - 2011-06-20 18:49 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\3571244.exe
2011-06-20 18:49 - 2011-06-20 18:49 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\4641925.exe
2011-06-10 07:17 - 2011-06-10 07:17 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\5023435.exe
2011-06-21 22:55 - 2011-06-21 22:55 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\5172694.exe
2011-07-07 07:13 - 2011-07-07 07:13 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\5636342.exe
2011-06-10 07:17 - 2011-06-10 07:17 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\6189015.exe
2011-07-07 07:13 - 2011-07-07 07:13 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\6676497.exe
2011-06-20 18:49 - 2011-06-20 18:49 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\6861954.exe
2011-06-10 07:17 - 2011-06-10 07:17 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\7348724.exe
2011-07-07 07:13 - 2011-07-07 07:13 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\7444266.exe
2011-06-06 14:01 - 2011-06-06 14:01 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\7593921.exe
2011-06-20 18:49 - 2011-06-20 18:49 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\8119061.exe
2011-06-10 07:17 - 2011-06-10 07:17 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\8473777.exe
2011-06-21 22:55 - 2011-06-21 22:55 - 0000000 ____H () C:\Users\Admin\AppData\Roaming\9750403.exe
2009-09-13 17:47 - 2016-09-02 20:11 - 0000118 ____H () C:\Users\Admin\AppData\Roaming\default.rss
2011-03-05 20:06 - 2011-08-21 13:41 - 0028036 ____H () C:\Users\Admin\AppData\Roaming\OFMissionEditorConfig.xml
2011-01-31 22:31 - 2011-01-31 22:31 - 0000760 ____H () C:\Users\Admin\AppData\Roaming\setup_ldm.iss
2014-05-07 18:23 - 2014-05-07 18:23 - 0017408 ____H () C:\Users\Admin\AppData\Local\WebpageIcons.db
2009-12-20 09:35 - 2009-12-20 09:35 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


LastRegBack: 2016-09-25 17:35

==================== Fin de FRST.txt ============================

cosinus · 16.11.2016, 01:05

Wieso hast du ein französisches OS fragst aber in einem deutschen Forum?

schloemilein · 16.11.2016, 21:25

weil ich als Deutscher lange in Paris gelebt habe und den Rechner dort gekauft habe.

cosinus · 17.11.2016, 10:11

Aha.

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

schloemilein · 18.11.2016, 10:05

Virenscanner Kapersky - nein habe ihn mehrfach laufen lassen habe aber nie eine Warnmeldung erhalten; Daher auch kein detaillierteres log;

Malwarebytes reiche ich nach, muss es mir erst noch runterladen und ausführen.

Code:

ATTFilter

<logs>
   <record severity="debug" LoggingEventType="1" datetime="2016-11-18T09:32:22.923032+01:00" source="Manual" type="Update" username="SYSTEM" systemname="PC01" fromVersion="2016.2.12.1" last_modified_tag="ad725788-9dd9-4069-a633-8cec5e783df9" name="Remediation Database" toVersion="2016.9.21.1"></record>
   <record severity="debug" LoggingEventType="1" datetime="2016-11-18T09:32:24.228046+01:00" source="Manual" type="Update" username="SYSTEM" systemname="PC01" fromVersion="2016.2.8.1" last_modified_tag="b35cf247-2c4e-4a56-80a7-2175a6a7c917" name="Rootkit Database" toVersion="2016.10.31.1"></record>
   <record severity="debug" LoggingEventType="1" datetime="2016-11-18T09:32:24.250647+01:00" source="Manual" type="Update" username="SYSTEM" systemname="PC01" fromVersion="2016.2.8.1" last_modified_tag="6172b1fa-5c3f-4cd0-b6d5-0debbc8c3791" name="IP Database" toVersion="2016.11.17.1"></record>
   <record severity="debug" LoggingEventType="1" datetime="2016-11-18T09:32:24.260647+01:00" source="Manual" type="Update" username="SYSTEM" systemname="PC01" fromVersion="2016.2.16.8" last_modified_tag="f190080c-c78a-48cd-b8cc-118de91249fd" name="Domain Database" toVersion="2016.11.17.9"></record>
   <record severity="debug" LoggingEventType="1" datetime="2016-11-18T09:32:26.226867+01:00" source="Manual" type="Update" username="SYSTEM" systemname="PC01" fromVersion="2016.2.16.6" last_modified_tag="e3783db2-7187-4d49-9292-8610cb3d70b3" name="Malware Database" toVersion="2016.11.18.1"></record>
</logs>

so oben nun die malwarebyteslog datei es sind bedrohungen erkannt worden soll ich dievon Malwarebytes beheben lassen?

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 18/11/2016
Suchlaufzeit: 09:32
Protokolldatei: mwb 1 11 2016.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.11.18.01
Rootkit-Datenbank: v2016.10.31.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Admin

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 304905
Abgelaufene Zeit: 22 Min., 19 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 11
Adware.1ClickDownload, HKLM\SOFTWARE\CLASSES\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, , [1c9d71505644a591152cd7d158a9857b], 
Adware.1ClickDownload, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, , [1c9d71505644a591152cd7d158a9857b], 
Adware.1ClickDownload, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, , [1c9d71505644a591152cd7d158a9857b], 
PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A53F3892-0619-4D6F-87AD-F975B5BF4530}, , [f3c6ae13fd9d0f27a954c91015ecff01], 
PUP.Optional.OpenCandy, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OpenCandyHelperRunAsStandardUserDB453F7856C34A0B8145425B22EEF3CE, , [4277c2ffccce79bd6776c8cc18ea55ab], 
PUP.Optional.OpenCandy, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OpenCandyHelperRunOnceEFDF4DE00FB94457938490C2EB06B004, , [0cad5e63b9e147efb7265f35768c5aa6], 
PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SMupdate1, , [dbde2e934258b185749a2c5fee14b947], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32C8E373-D89C-4156-BE8F-DE970B150D56}, , [9326c2fff0aac3732606f88e5aa846ba], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61014881-9F7E-4D40-92E2-21C3081E3A94}, , [1d9c526f257546f0ee3d2561f70b6799], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FF3449AB-D1D1-4773-96BC-2244E23C0590}, , [f6c3b30ebfdbb284f733681eb54d7789], 
PUP.Optional.CrossRider, HKU\S-1-5-21-2801922753-1568483922-2384193263-1003_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\iWebar, , [06b37a472b6f82b4ded46475fd04c63a], 

Registrierungswerte: 5
PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A53F3892-0619-4D6F-87AD-F975B5BF4530}|Path, \SMupdate1, , [f3c6ae13fd9d0f27a954c91015ecff01]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32c8e373-d89c-4156-be8f-de970b150d56}|AppName, Plus-HD-2.2-codedownloader.exe, , [9326c2fff0aac3732606f88e5aa846ba]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61014881-9f7e-4d40-92e2-21c3081e3a94}|AppName, Plus-HD-2.2-buttonutil.exe, , [1d9c526f257546f0ee3d2561f70b6799]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ff3449ab-d1d1-4773-96bc-2244e23c0590}|AppName, Plus-HD-2.2-bg.exe, , [f6c3b30ebfdbb284f733681eb54d7789]
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|Plus-HD-2.2-bg.exe, 8000, , [4b6e14ad3b5fa88e11cf993d40c27c84]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

ich glaube das war die richtige log datei sorry

cosinus · 18.11.2016, 13:15

Zitat:

Suchlaufdatum: 18/11/2016
Suchlaufzeit: 09:32

Einfach mal alles richtig lesen geht nicht weil?
Wo steht, du sollest einen neuen Suchlauf machen?

schloemilein · 21.11.2016, 19:56

Ok sorry da war ich zu schnell im Eifer des Gefechts. Was darf ich als nächstes tun?

cosinus · 22.11.2016, 09:00

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

schloemilein · 27.11.2016, 22:56

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.11.27.08
  rootkit: v2016.11.20.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18124
Admin :: PC01 [administrator]

27/11/2016 22:14:05
mbar-log-2016-11-27 (22-14-05).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 306005
Time elapsed: 25 minute(s), 40 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Code:

ATTFilter

22:40:02.0764 0x11dc  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
22:40:06.0414 0x11dc  ============================================================
22:40:06.0414 0x11dc  Current date / time: 2016/11/27 22:40:06.0414
22:40:06.0414 0x11dc  SystemInfo:
22:40:06.0414 0x11dc  
22:40:06.0414 0x11dc  OS Version: 6.1.7601 ServicePack: 1.0
22:40:06.0414 0x11dc  Product type: Workstation
22:40:06.0414 0x11dc  ComputerName: PC01
22:40:06.0414 0x11dc  UserName: Admin
22:40:06.0414 0x11dc  Windows directory: C:\Windows
22:40:06.0414 0x11dc  System windows directory: C:\Windows
22:40:06.0414 0x11dc  Running under WOW64
22:40:06.0414 0x11dc  Processor architecture: Intel x64
22:40:06.0414 0x11dc  Number of processors: 2
22:40:06.0414 0x11dc  Page size: 0x1000
22:40:06.0414 0x11dc  Boot type: Normal boot
22:40:06.0414 0x11dc  CodeIntegrityOptions = 0x00000001
22:40:06.0414 0x11dc  ============================================================
22:40:08.0957 0x11dc  KLMD registered as C:\Windows\system32\drivers\80367964.sys
22:40:08.0957 0x11dc  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.19045, osProperties = 0x1
22:40:09.0378 0x11dc  System UUID: {8E67BC41-8149-BEA2-E2F3-7AE62DE3E3D4}
22:40:10.0174 0x11dc  Drive \Device\Harddisk1\DR1 - Size: 0x12A1F16000 ( 74.53 Gb ), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:40:10.0205 0x11dc  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:40:10.0205 0x11dc  ============================================================
22:40:10.0205 0x11dc  \Device\Harddisk1\DR1:
22:40:10.0205 0x11dc  MBR partitions:
22:40:10.0205 0x11dc  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
22:40:10.0205 0x11dc  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x94DC800
22:40:10.0205 0x11dc  \Device\Harddisk0\DR0:
22:40:10.0205 0x11dc  MBR partitions:
22:40:10.0205 0x11dc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x12A18800
22:40:10.0205 0x11dc  ============================================================
22:40:10.0220 0x11dc  C: <-> \Device\Harddisk1\DR1\Partition2
22:40:10.0252 0x11dc  D: <-> \Device\Harddisk0\DR0\Partition1
22:40:10.0267 0x11dc  ============================================================
22:40:10.0267 0x11dc  Initialize success
22:40:10.0267 0x11dc  ============================================================
22:40:48.0253 0x12a4  ============================================================
22:40:48.0253 0x12a4  Scan started
22:40:48.0253 0x12a4  Mode: Manual; SigCheck; TDLFS; 
22:40:48.0253 0x12a4  ============================================================
22:40:48.0253 0x12a4  KSN ping started
22:40:50.0765 0x12a4  KSN ping finished: true
22:40:51.0451 0x12a4  ================ Scan system memory ========================
22:40:51.0451 0x12a4  System memory - ok
22:40:51.0451 0x12a4  ================ Scan services =============================
22:40:51.0623 0x12a4  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
22:40:51.0763 0x12a4  1394ohci - ok
22:40:51.0841 0x12a4  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
22:40:51.0857 0x12a4  ACPI - ok
22:40:51.0888 0x12a4  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
22:40:51.0935 0x12a4  AcpiPmi - ok
22:40:51.0997 0x12a4  [ 1FD92A51554427A604C33E9EE6F5FC39, 8A9FCF5DC078F38D2521766C8F8AAD15F0580522E9F2A48443564EC00CE82E5A ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
22:40:52.0075 0x12a4  ADIHdAudAddService - ok
22:40:52.0200 0x12a4  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:40:52.0216 0x12a4  AdobeARMservice - ok
22:40:52.0356 0x12a4  [ C3D6244407B9A4FAD5C2D831A7B19F21, 0DEB9CFB91ED16B5B3F84F2BFFDF0E11392B5508D51B5C913097ED67E02CC33E ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:40:52.0372 0x12a4  AdobeFlashPlayerUpdateSvc - ok
22:40:52.0419 0x12a4  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
22:40:52.0450 0x12a4  adp94xx - ok
22:40:52.0481 0x12a4  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
22:40:52.0512 0x12a4  adpahci - ok
22:40:52.0528 0x12a4  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
22:40:52.0528 0x12a4  adpu320 - ok
22:40:52.0559 0x12a4  [ 8CF9089F83440422020C66D090C3BB63, D5A12254F14A87B421946D5E23B3842A02D7DADA5C7814B6380A641FCD5B6FCF ] AEADIFilters    C:\Windows\system32\AEADISRV.EXE
22:40:52.0606 0x12a4  AEADIFilters - ok
22:40:52.0637 0x12a4  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
22:40:52.0715 0x12a4  AeLookupSvc - ok
22:40:52.0777 0x12a4  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys
22:40:52.0840 0x12a4  AFD - ok
22:40:52.0902 0x12a4  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
22:40:52.0902 0x12a4  agp440 - ok
22:40:52.0949 0x12a4  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
22:40:53.0011 0x12a4  ALG - ok
22:40:53.0058 0x12a4  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
22:40:53.0074 0x12a4  aliide - ok
22:40:53.0121 0x12a4  [ DDEA39A56B801A675E118429AF6A30D2, D61A702E8777514A6926D1D5EB180F33C6317871013B355E7C17FE37C14C5D7F ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
22:40:53.0183 0x12a4  AMD External Events Utility - ok
22:40:53.0230 0x12a4  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
22:40:53.0230 0x12a4  amdide - ok
22:40:53.0277 0x12a4  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
22:40:53.0308 0x12a4  AmdK8 - ok
22:40:53.0776 0x12a4  [ 7F2BDD27F3611041D6B0D6C565A748A7, F74A3589253AAEDAFB15D5C439771339FC3B78B1CE51409A630822B653D4885D ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
22:40:54.0259 0x12a4  amdkmdag - ok
22:40:54.0369 0x12a4  [ 8E2A3479CF4E871F37D0F023692E6694, BE995D5679ABEF800E24208A068C44A10607305A8C328FF29A11DCAAB4D18FBB ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
22:40:54.0415 0x12a4  amdkmdap - ok
22:40:54.0447 0x12a4  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
22:40:54.0478 0x12a4  AmdPPM - ok
22:40:54.0525 0x12a4  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
22:40:54.0540 0x12a4  amdsata - ok
22:40:54.0556 0x12a4  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
22:40:54.0571 0x12a4  amdsbs - ok
22:40:54.0618 0x12a4  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
22:40:54.0618 0x12a4  amdxata - ok
22:40:54.0681 0x12a4  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID           C:\Windows\system32\drivers\appid.sys
22:40:54.0727 0x12a4  AppID - ok
22:40:54.0774 0x12a4  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
22:40:54.0805 0x12a4  AppIDSvc - ok
22:40:54.0868 0x12a4  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll
22:40:54.0930 0x12a4  Appinfo - ok
22:40:55.0055 0x12a4  [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:40:55.0055 0x12a4  Apple Mobile Device Service - ok
22:40:55.0102 0x12a4  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
22:40:55.0117 0x12a4  arc - ok
22:40:55.0117 0x12a4  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
22:40:55.0133 0x12a4  arcsas - ok
22:40:55.0258 0x12a4  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:40:55.0289 0x12a4  aspnet_state - ok
22:40:55.0336 0x12a4  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
22:40:55.0398 0x12a4  AsyncMac - ok
22:40:55.0429 0x12a4  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
22:40:55.0445 0x12a4  atapi - ok
22:40:55.0866 0x12a4  [ 7F2BDD27F3611041D6B0D6C565A748A7, F74A3589253AAEDAFB15D5C439771339FC3B78B1CE51409A630822B653D4885D ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
22:40:56.0116 0x12a4  atikmdag - ok
22:40:56.0225 0x12a4  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:40:56.0303 0x12a4  AudioEndpointBuilder - ok
22:40:56.0350 0x12a4  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
22:40:56.0365 0x12a4  AudioSrv - ok
22:40:56.0599 0x12a4  [ 03B45C52179E8DAE51A0F685C30D06D6, E06F066B4BFE5344BBF5749B9B8B8CFBA0C02920FD2B9C73BDDA7E34F1785DA7 ] AVP17.0.0       C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\avp.exe
22:40:56.0631 0x12a4  AVP17.0.0 - ok
22:40:56.0677 0x12a4  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
22:40:56.0724 0x12a4  AxInstSV - ok
22:40:56.0771 0x12a4  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
22:40:56.0833 0x12a4  b06bdrv - ok
22:40:56.0880 0x12a4  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
22:40:56.0911 0x12a4  b57nd60a - ok
22:40:56.0943 0x12a4  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
22:40:57.0005 0x12a4  BDESVC - ok
22:40:57.0021 0x12a4  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
22:40:57.0083 0x12a4  Beep - ok
22:40:57.0161 0x12a4  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
22:40:57.0255 0x12a4  BFE - ok
22:40:57.0317 0x12a4  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
22:40:57.0379 0x12a4  BITS - ok
22:40:57.0426 0x12a4  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
22:40:57.0442 0x12a4  blbdrive - ok
22:40:57.0520 0x12a4  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:40:57.0535 0x12a4  Bonjour Service - ok
22:40:57.0582 0x12a4  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
22:40:57.0645 0x12a4  bowser - ok
22:40:57.0660 0x12a4  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:40:57.0691 0x12a4  BrFiltLo - ok
22:40:57.0723 0x12a4  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:40:57.0754 0x12a4  BrFiltUp - ok
22:40:57.0801 0x12a4  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
22:40:57.0863 0x12a4  Browser - ok
22:40:57.0879 0x12a4  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
22:40:57.0910 0x12a4  Brserid - ok
22:40:57.0925 0x12a4  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
22:40:57.0972 0x12a4  BrSerWdm - ok
22:40:57.0988 0x12a4  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
22:40:58.0035 0x12a4  BrUsbMdm - ok
22:40:58.0066 0x12a4  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
22:40:58.0113 0x12a4  BrUsbSer - ok
22:40:58.0128 0x12a4  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
22:40:58.0175 0x12a4  BTHMODEM - ok
22:40:58.0222 0x12a4  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
22:40:58.0269 0x12a4  bthserv - ok
22:40:58.0331 0x12a4  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
22:40:58.0378 0x12a4  cdfs - ok
22:40:58.0440 0x12a4  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
22:40:58.0456 0x12a4  cdrom - ok
22:40:58.0503 0x12a4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
22:40:58.0565 0x12a4  CertPropSvc - ok
22:40:58.0596 0x12a4  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
22:40:58.0643 0x12a4  circlass - ok
22:40:58.0674 0x12a4  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
22:40:58.0705 0x12a4  CLFS - ok
22:40:58.0783 0x12a4  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:40:58.0783 0x12a4  clr_optimization_v2.0.50727_32 - ok
22:40:58.0861 0x12a4  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:40:58.0861 0x12a4  clr_optimization_v2.0.50727_64 - ok
22:40:58.0939 0x12a4  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:40:58.0955 0x12a4  clr_optimization_v4.0.30319_32 - ok
22:40:59.0002 0x12a4  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:40:59.0080 0x12a4  clr_optimization_v4.0.30319_64 - ok
22:40:59.0127 0x12a4  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
22:40:59.0158 0x12a4  CmBatt - ok
22:40:59.0189 0x12a4  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
22:40:59.0205 0x12a4  cmdide - ok
22:40:59.0283 0x12a4  [ B29A764A1E76473CD9D64C9438705C19, CD0497EB84DE60E1E491CA495AF981A8DFC4949BB373C1978CAF1BCF4321D30E ] cm_km           C:\Windows\system32\DRIVERS\cm_km.sys
22:40:59.0298 0x12a4  cm_km - ok
22:40:59.0361 0x12a4  [ EC0511BB85BAA42A9734011685A6732C, 10B52F0860CCB3AA0FC34DDA5C5538BFCF7B6D40738B7756297237FD2D9E01C1 ] CNG             C:\Windows\system32\Drivers\cng.sys
22:40:59.0423 0x12a4  CNG - ok
22:40:59.0454 0x12a4  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
22:40:59.0470 0x12a4  Compbatt - ok
22:40:59.0517 0x12a4  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
22:40:59.0548 0x12a4  CompositeBus - ok
22:40:59.0579 0x12a4  COMSysApp - ok
22:40:59.0595 0x12a4  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
22:40:59.0610 0x12a4  crcdisk - ok
22:40:59.0657 0x12a4  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll
22:40:59.0719 0x12a4  CryptSvc - ok
22:40:59.0782 0x12a4  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
22:40:59.0844 0x12a4  DcomLaunch - ok
22:40:59.0922 0x12a4  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
22:40:59.0985 0x12a4  defragsvc - ok
22:41:00.0016 0x12a4  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
22:41:00.0078 0x12a4  DfsC - ok
22:41:00.0141 0x12a4  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
22:41:00.0203 0x12a4  Dhcp - ok
22:41:00.0359 0x12a4  [ DEE4A1F675EC604E9641B1A03CF1816F, A0AC84713DDFD9A94B8558DFA26B278FB29833C5663451CC582ACA85B29CBFD8 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
22:41:00.0375 0x12a4  DigitalWave.Update.Service - ok
22:41:00.0406 0x12a4  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
22:41:00.0421 0x12a4  discache - ok
22:41:00.0453 0x12a4  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
22:41:00.0468 0x12a4  Disk - ok
22:41:00.0499 0x12a4  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
22:41:00.0562 0x12a4  Dnscache - ok
22:41:00.0624 0x12a4  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
22:41:00.0687 0x12a4  dot3svc - ok
22:41:00.0718 0x12a4  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
22:41:00.0780 0x12a4  DPS - ok
22:41:00.0811 0x12a4  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
22:41:00.0843 0x12a4  drmkaud - ok
22:41:00.0905 0x12a4  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
22:41:00.0967 0x12a4  DXGKrnl - ok
22:41:01.0014 0x12a4  [ 099E01A94167CA8BDA2CF72037AD0E28, 937501E15A9C8E195DC778DBC9C3A45EB5DD024AF9E4C188ED5B69F94EEC233D ] e1express       C:\Windows\system32\DRIVERS\e1e6232e.sys
22:41:01.0030 0x12a4  e1express - ok
22:41:01.0045 0x12a4  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
22:41:01.0108 0x12a4  EapHost - ok
22:41:01.0264 0x12a4  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
22:41:01.0420 0x12a4  ebdrv - ok
22:41:01.0451 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] EFS             C:\Windows\System32\lsass.exe
22:41:01.0529 0x12a4  EFS - ok
22:41:01.0607 0x12a4  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
22:41:01.0701 0x12a4  ehRecvr - ok
22:41:01.0732 0x12a4  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
22:41:01.0763 0x12a4  ehSched - ok
22:41:01.0825 0x12a4  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
22:41:01.0857 0x12a4  elxstor - ok
22:41:01.0888 0x12a4  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
22:41:01.0919 0x12a4  ErrDev - ok
22:41:01.0981 0x12a4  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
22:41:02.0044 0x12a4  EventSystem - ok
22:41:02.0075 0x12a4  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
22:41:02.0137 0x12a4  exfat - ok
22:41:02.0153 0x12a4  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
22:41:02.0200 0x12a4  fastfat - ok
22:41:02.0262 0x12a4  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
22:41:02.0356 0x12a4  Fax - ok
22:41:02.0371 0x12a4  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
22:41:02.0403 0x12a4  fdc - ok
22:41:02.0449 0x12a4  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
22:41:02.0512 0x12a4  fdPHost - ok
22:41:02.0543 0x12a4  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
22:41:02.0590 0x12a4  FDResPub - ok
22:41:02.0621 0x12a4  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
22:41:02.0637 0x12a4  FileInfo - ok
22:41:02.0637 0x12a4  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
22:41:02.0699 0x12a4  Filetrace - ok
22:41:02.0715 0x12a4  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
22:41:02.0761 0x12a4  flpydisk - ok
22:41:02.0824 0x12a4  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
22:41:02.0839 0x12a4  FltMgr - ok
22:41:02.0917 0x12a4  [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache       C:\Windows\system32\FntCache.dll
22:41:03.0042 0x12a4  FontCache - ok
22:41:03.0120 0x12a4  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:41:03.0120 0x12a4  FontCache3.0.0.0 - ok
22:41:03.0151 0x12a4  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
22:41:03.0167 0x12a4  FsDepends - ok
22:41:03.0183 0x12a4  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
22:41:03.0198 0x12a4  Fs_Rec - ok
22:41:03.0229 0x12a4  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
22:41:03.0261 0x12a4  fvevol - ok
22:41:03.0276 0x12a4  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
22:41:03.0292 0x12a4  gagp30kx - ok
22:41:03.0323 0x12a4  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
22:41:03.0339 0x12a4  GEARAspiWDM - ok
22:41:03.0401 0x12a4  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
22:41:03.0463 0x12a4  gpsvc - ok
22:41:03.0479 0x12a4  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
22:41:03.0541 0x12a4  hcw85cir - ok
22:41:03.0604 0x12a4  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:41:03.0635 0x12a4  HdAudAddService - ok
22:41:03.0682 0x12a4  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
22:41:03.0729 0x12a4  HDAudBus - ok
22:41:03.0744 0x12a4  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
22:41:03.0760 0x12a4  HidBatt - ok
22:41:03.0775 0x12a4  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
22:41:03.0822 0x12a4  HidBth - ok
22:41:03.0853 0x12a4  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
22:41:03.0869 0x12a4  HidIr - ok
22:41:03.0900 0x12a4  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
22:41:03.0947 0x12a4  hidserv - ok
22:41:04.0041 0x12a4  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
22:41:04.0056 0x12a4  HidUsb - ok
22:41:04.0103 0x12a4  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
22:41:04.0150 0x12a4  hkmsvc - ok
22:41:04.0197 0x12a4  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:41:04.0259 0x12a4  HomeGroupListener - ok
22:41:04.0306 0x12a4  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:41:04.0353 0x12a4  HomeGroupProvider - ok
22:41:04.0415 0x12a4  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
22:41:04.0415 0x12a4  HpSAMD - ok
22:41:04.0477 0x12a4  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
22:41:04.0555 0x12a4  HTTP - ok
22:41:04.0602 0x12a4  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
22:41:04.0618 0x12a4  hwpolicy - ok
22:41:04.0649 0x12a4  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
22:41:04.0665 0x12a4  i8042prt - ok
22:41:04.0711 0x12a4  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
22:41:04.0727 0x12a4  iaStorV - ok
22:41:04.0821 0x12a4  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:41:04.0867 0x12a4  idsvc - ok
22:41:04.0883 0x12a4  IEEtwCollectorService - ok
22:41:04.0914 0x12a4  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
22:41:04.0930 0x12a4  iirsp - ok
22:41:04.0992 0x12a4  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
22:41:05.0070 0x12a4  IKEEXT - ok
22:41:05.0101 0x12a4  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
22:41:05.0117 0x12a4  intelide - ok
22:41:05.0148 0x12a4  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
22:41:05.0179 0x12a4  intelppm - ok
22:41:05.0211 0x12a4  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
22:41:05.0242 0x12a4  IPBusEnum - ok
22:41:05.0273 0x12a4  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:41:05.0320 0x12a4  IpFilterDriver - ok
22:41:05.0382 0x12a4  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
22:41:05.0460 0x12a4  iphlpsvc - ok
22:41:05.0507 0x12a4  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
22:41:05.0538 0x12a4  IPMIDRV - ok
22:41:05.0585 0x12a4  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
22:41:05.0632 0x12a4  IPNAT - ok
22:41:05.0741 0x12a4  [ BD713ED20CFD71C32C4BE1928423AE9A, E0EE95FEA3930EA335D9B1FF74EEFAA61ECEC89AEBB1D0E43A1E1088F9990273 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
22:41:05.0772 0x12a4  iPod Service - ok
22:41:05.0803 0x12a4  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
22:41:05.0835 0x12a4  IRENUM - ok
22:41:05.0850 0x12a4  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
22:41:05.0866 0x12a4  isapnp - ok
22:41:05.0913 0x12a4  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
22:41:05.0928 0x12a4  iScsiPrt - ok
22:41:05.0959 0x12a4  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
22:41:05.0975 0x12a4  kbdclass - ok
22:41:06.0022 0x12a4  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
22:41:06.0022 0x12a4  kbdhid - ok
22:41:06.0037 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] KeyIso          C:\Windows\system32\lsass.exe
22:41:06.0053 0x12a4  KeyIso - ok
22:41:06.0131 0x12a4  [ 97E3E8F35632EECD0ABD2DE6519A9666, ABE96FDEB1076E380D7FB4975C020B43ED4E821097EFC6AFE8C75D764167D6E8 ] KL1             C:\Windows\system32\DRIVERS\kl1.sys
22:41:06.0162 0x12a4  KL1 - ok
22:41:06.0225 0x12a4  [ B01AD8DA034EE42D4C2282F77FDB03AE, 3FF55F3CEE4A0E5D559F04F5A639297EA0F36580720E94CF9DD56DEBF2E98F39 ] klbackupdisk    C:\Windows\system32\DRIVERS\klbackupdisk.sys
22:41:06.0240 0x12a4  klbackupdisk - ok
22:41:06.0271 0x12a4  [ 39DFFABF0E74E1F4856EF0A9E696C337, F7CA397BC87B01EAF0A2B737447B0B84ACCD72782473CA98FA73DA3232B64AD7 ] klbackupflt     C:\Windows\system32\DRIVERS\klbackupflt.sys
22:41:06.0287 0x12a4  klbackupflt - ok
22:41:06.0334 0x12a4  [ 7DAA9047F50BF5A3F8C147719FC520AF, 0740387075AF46DB1E9AEE3B12C65A06EDFE58EADB8B562C36CB1FEFF9905C26 ] kldisk          C:\Windows\system32\DRIVERS\kldisk.sys
22:41:06.0334 0x12a4  kldisk - ok
22:41:06.0396 0x12a4  [ DCF9E429D30DD641F948DF7F6B1AE098, 04A2241B93FA6C543BC57FA5E7817D526F0BB98970A8DA1EF2783300227DC58C ] klflt           C:\Windows\system32\DRIVERS\klflt.sys
22:41:06.0427 0x12a4  klflt - ok
22:41:06.0505 0x12a4  [ 9A5B29ADF3F6F3A09DD92C6A6C6C4C3C, F8F8FC5CEE5A39C53FB39EC8F5B55EEC318206690B81A4D32C27018294820ECB ] klhk            C:\Windows\system32\DRIVERS\klhk.sys
22:41:06.0521 0x12a4  klhk - ok
22:41:06.0599 0x12a4  [ 622221DD2139DB851385BE1305C0F72A, 7C781883CD94603D66C6A516745EF261D7EE1FCA0A1AA8E24048B0B337BA4139 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys
22:41:06.0661 0x12a4  KLIF - ok
22:41:06.0739 0x12a4  [ F2BF7BCD057681E4B2CA9DA7661B1399, C9923C9C1417EF88B70C17D1B4F873C8F99E3EE948ED7AF1E9A3675BD287F07A ] KLIM6           C:\Windows\system32\DRIVERS\klim6.sys
22:41:06.0739 0x12a4  KLIM6 - ok
22:41:06.0786 0x12a4  [ DDBA4D4C8C08E4C972D7AF7B06B84804, FDC9138316C1ADA0895BBB9358EC74CD1E1B546E09EA1079393C4E6568523612 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys
22:41:06.0802 0x12a4  klkbdflt - ok
22:41:06.0802 0x12a4  [ D792857D47B8DF5BFEC02534C1933BE2, BDD483FA8E2DC50DB4E54D475867455F0D7E115494E2A31CD27A065C7EC26951 ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys
22:41:06.0817 0x12a4  klmouflt - ok
22:41:06.0849 0x12a4  [ 6B0C605591C892CBB683F63EA47822DC, E74C0A0501A1B4B56B417402108521F34DA6A23FCD1C05E4E524E41EBA0906FF ] klpd            C:\Windows\system32\DRIVERS\klpd.sys
22:41:06.0864 0x12a4  klpd - ok
22:41:06.0927 0x12a4  [ CFE5FD219EC7773D5674C6EDDF8C1A98, 34F7EEA492690980BE3A76E978D545CA49245E668174A51C9209B878ADA1E96A ] kltdi           C:\Windows\system32\DRIVERS\kltdi.sys
22:41:06.0942 0x12a4  kltdi - ok
22:41:07.0051 0x12a4  [ D7F0B46844565E2ED68AC99AF0F4263F, AB419CBC29F96703237127AC4178A5365D4CCA010BAB1BD66D100D635E6E89B8 ] klvssbrigde64   C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\vssbridge64.exe
22:41:07.0051 0x12a4  klvssbrigde64 - ok
22:41:07.0114 0x12a4  [ 483679B1E8A278EDA54412F3E559E81A, 0BA1FA336D1ACE640CC42D6C0F6E7363261770FE7E632DA61C09EDD53D696CB8 ] Klwtp           C:\Windows\system32\DRIVERS\klwtp.sys
22:41:07.0129 0x12a4  Klwtp - ok
22:41:07.0176 0x12a4  [ 67EFD862ACEFCB9687523832C62FA584, B3C9A36C535B706EB19E5C5437705E8C5EC71F45115A2C97E1348462EC2A3922 ] kneps           C:\Windows\system32\DRIVERS\kneps.sys
22:41:07.0192 0x12a4  kneps - ok
22:41:07.0239 0x12a4  [ BCC83F22805F560C8A487F2F296A78FE, B6729B9D85CC3B9377E3143FEF920EFAA82D152845A43074417E9266C9F5C1A8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
22:41:07.0254 0x12a4  KSecDD - ok
22:41:07.0285 0x12a4  [ 33D52A96BEEE8AFCE9E07EEC9FE0C9DB, 5367B46A43296792A0E6294906D40511079D5CAA23F08D5A7EDE02C06AD34484 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
22:41:07.0301 0x12a4  KSecPkg - ok
22:41:07.0348 0x12a4  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
22:41:07.0395 0x12a4  ksthunk - ok
22:41:07.0441 0x12a4  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
22:41:07.0504 0x12a4  KtmRm - ok
22:41:07.0582 0x12a4  [ 5746399C73B372F0C8E9D3A0CC3B2D8F, 526C4CB39D0EF6C5AEA8DFCB40C337BC215CA6DC86524DDD9EE9932DEC844462 ] L8042Kbd        C:\Windows\system32\DRIVERS\L8042Kbd.sys
22:41:07.0597 0x12a4  L8042Kbd - ok
22:41:07.0644 0x12a4  [ 1433A7549A64D50E4FBBD747E9143454, A1EEACDB2DCC99BFE267455B1A390954E7FC920732F476498163F39A1C52AF8B ] L8042mou        C:\Windows\system32\DRIVERS\L8042mou.Sys
22:41:07.0644 0x12a4  L8042mou - ok
22:41:07.0707 0x12a4  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
22:41:07.0769 0x12a4  LanmanServer - ok
22:41:07.0831 0x12a4  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:41:07.0878 0x12a4  LanmanWorkstation - ok
22:41:07.0941 0x12a4  [ 3C46290F7A5D45BA6EF32C248E22AA69, E2EAC359B38AE1A36DACDFE6E3923C1D70D6F5B9E5E411279B074802CB019760 ] Lbd             C:\Windows\system32\DRIVERS\Lbd.sys
22:41:07.0956 0x12a4  Lbd - ok
22:41:08.0003 0x12a4  [ 97CAAA9FD47AF67E590552C34CE2D9B1, ECF513A59FD6BFEF1671FE052C6B9F55D8F3C6B8AAD5C718A5233DA4CE2CA436 ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys
22:41:08.0003 0x12a4  LHidFilt - ok
22:41:08.0097 0x12a4  [ ABF90FC5A127F481219B873C1B8DFC1C, 465188183B2848C11743B2A6B987B307D30F636E4958E60766336479473DD121 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
22:41:08.0128 0x12a4  LightScribeService - detected UnsignedFile.Multi.Generic ( 1 )
22:41:10.0593 0x12a4  Detect skipped due to KSN trusted
22:41:10.0593 0x12a4  LightScribeService - ok
22:41:10.0639 0x12a4  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
22:41:10.0686 0x12a4  lltdio - ok
22:41:10.0733 0x12a4  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
22:41:10.0764 0x12a4  lltdsvc - ok
22:41:10.0780 0x12a4  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
22:41:10.0811 0x12a4  lmhosts - ok
22:41:10.0873 0x12a4  [ 1A3C49B3EDBA8F8FAF49AD5679813321, A99B33139BE439305F05BF4F816F34261621603832F735B8B2AB5072D0F71D06 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys
22:41:10.0873 0x12a4  LMouFilt - ok
22:41:10.0920 0x12a4  [ 91B345109AD08CC9926EC0299AF60418, 711D56376FC9C91FA1AA30121F655EF4F0CD7D2014CE87E56FB9756889756EA9 ] LMouKE          C:\Windows\system32\DRIVERS\LMouKE.Sys
22:41:10.0936 0x12a4  LMouKE - ok
22:41:10.0967 0x12a4  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
22:41:10.0983 0x12a4  LSI_FC - ok
22:41:10.0983 0x12a4  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
22:41:10.0998 0x12a4  LSI_SAS - ok
22:41:11.0014 0x12a4  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:41:11.0014 0x12a4  LSI_SAS2 - ok
22:41:11.0029 0x12a4  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:41:11.0045 0x12a4  LSI_SCSI - ok
22:41:11.0061 0x12a4  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
22:41:11.0107 0x12a4  luafv - ok
22:41:11.0154 0x12a4  LVPr2M64 - ok
22:41:11.0201 0x12a4  [ 986C1CB787A007BAA5F74E7D316D7246, 8846D5FF09A669816F57C98507FBCBE60F770B22BC784269765E46B36EE38D9D ] LVRS64          C:\Windows\system32\DRIVERS\lvrs64.sys
22:41:11.0217 0x12a4  LVRS64 - ok
22:41:11.0482 0x12a4  [ 5747BC465ABEA2858C5D037252AED84E, 1D62E05ED1D3265FEFDD02C8653B2901B05994091F1D417632E2FBF053C5D451 ] LVUVC64         C:\Windows\system32\DRIVERS\lvuvc64.sys
22:41:11.0747 0x12a4  LVUVC64 - ok
22:41:11.0794 0x12a4  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
22:41:11.0809 0x12a4  Mcx2Svc - ok
22:41:11.0825 0x12a4  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
22:41:11.0841 0x12a4  megasas - ok
22:41:11.0856 0x12a4  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
22:41:11.0887 0x12a4  MegaSR - ok
22:41:11.0919 0x12a4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
22:41:11.0981 0x12a4  MMCSS - ok
22:41:11.0997 0x12a4  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
22:41:12.0059 0x12a4  Modem - ok
22:41:12.0090 0x12a4  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
22:41:12.0106 0x12a4  monitor - ok
22:41:12.0153 0x12a4  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
22:41:12.0168 0x12a4  mouclass - ok
22:41:12.0199 0x12a4  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
22:41:12.0215 0x12a4  mouhid - ok
22:41:12.0262 0x12a4  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
22:41:12.0277 0x12a4  mountmgr - ok
22:41:12.0324 0x12a4  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
22:41:12.0340 0x12a4  mpio - ok
22:41:12.0355 0x12a4  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
22:41:12.0387 0x12a4  mpsdrv - ok
22:41:12.0449 0x12a4  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
22:41:12.0496 0x12a4  MpsSvc - ok
22:41:12.0543 0x12a4  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
22:41:12.0605 0x12a4  MRxDAV - ok
22:41:12.0652 0x12a4  [ 73ADDCC406B86E7DA4416691E8E74BDA, 4EC970B9095E6DAA79BF7EFB92DF3F2C0AB0C46739AA36C171A262E05B63CBB5 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
22:41:12.0714 0x12a4  mrxsmb - ok
22:41:12.0761 0x12a4  [ 7C81098FBAF2EAF5B54B939F832B0F61, 999435DF4638ECB136D5BF1B84305A84B215BAB542E4D5301E57D28D507E11B3 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:41:12.0792 0x12a4  mrxsmb10 - ok
22:41:12.0823 0x12a4  [ ACB763673BCCE6C7B3B8F858C9FE4F1F, CCD49558F8A01A225AEAE60BF299BCA6E9399E39F4F553FABC36CADB164BBBC0 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:41:12.0855 0x12a4  mrxsmb20 - ok
22:41:12.0901 0x12a4  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
22:41:12.0917 0x12a4  msahci - ok
22:41:12.0964 0x12a4  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
22:41:12.0964 0x12a4  msdsm - ok
22:41:12.0995 0x12a4  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
22:41:13.0026 0x12a4  MSDTC - ok
22:41:13.0073 0x12a4  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
22:41:13.0120 0x12a4  Msfs - ok
22:41:13.0167 0x12a4  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
22:41:13.0198 0x12a4  mshidkmdf - ok
22:41:13.0260 0x12a4  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
22:41:13.0276 0x12a4  msisadrv - ok
22:41:13.0401 0x12a4  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
22:41:13.0494 0x12a4  MSiSCSI - ok
22:41:13.0494 0x12a4  msiserver - ok
22:41:13.0525 0x12a4  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
22:41:13.0557 0x12a4  MSKSSRV - ok
22:41:13.0572 0x12a4  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
22:41:13.0635 0x12a4  MSPCLOCK - ok
22:41:13.0650 0x12a4  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
22:41:13.0681 0x12a4  MSPQM - ok
22:41:13.0728 0x12a4  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
22:41:13.0759 0x12a4  MsRPC - ok
22:41:13.0806 0x12a4  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
22:41:13.0806 0x12a4  mssmbios - ok
22:41:13.0837 0x12a4  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
22:41:13.0884 0x12a4  MSTEE - ok
22:41:13.0915 0x12a4  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
22:41:13.0931 0x12a4  MTConfig - ok
22:41:13.0947 0x12a4  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
22:41:13.0962 0x12a4  Mup - ok
22:41:14.0009 0x12a4  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
22:41:14.0056 0x12a4  napagent - ok
22:41:14.0103 0x12a4  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
22:41:14.0149 0x12a4  NativeWifiP - ok
22:41:14.0243 0x12a4  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys
22:41:14.0290 0x12a4  NDIS - ok
22:41:14.0305 0x12a4  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
22:41:14.0352 0x12a4  NdisCap - ok
22:41:14.0399 0x12a4  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
22:41:14.0430 0x12a4  NdisTapi - ok
22:41:14.0493 0x12a4  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
22:41:14.0539 0x12a4  Ndisuio - ok
22:41:14.0586 0x12a4  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
22:41:14.0633 0x12a4  NdisWan - ok
22:41:14.0680 0x12a4  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
22:41:14.0727 0x12a4  NDProxy - ok
22:41:14.0898 0x12a4  [ C7F5C284B6F46FCAF6910EA4E644700B, 754B11B71C06BC597EC5685E20772B604326C421BBD234BCD90678FD57C07768 ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
22:41:14.0929 0x12a4  Nero BackItUp Scheduler 4.0 - ok
22:41:14.0976 0x12a4  [ 6F4607E2333FE21E9E3FF8133A88B35B, F7B7B262D85D03552A8D0F3F91E795B31E3D09020DDA1E3D62A4A3209D916BB6 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl64.sys
22:41:15.0007 0x12a4  Netaapl - detected UnsignedFile.Multi.Generic ( 1 )
22:41:17.0441 0x12a4  Detect skipped due to KSN trusted
22:41:17.0441 0x12a4  Netaapl - ok
22:41:17.0488 0x12a4  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
22:41:17.0519 0x12a4  NetBIOS - ok
22:41:17.0566 0x12a4  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
22:41:17.0613 0x12a4  NetBT - ok
22:41:17.0613 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] Netlogon        C:\Windows\system32\lsass.exe
22:41:17.0628 0x12a4  Netlogon - ok
22:41:17.0675 0x12a4  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
22:41:17.0737 0x12a4  Netman - ok
22:41:17.0815 0x12a4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:41:17.0831 0x12a4  NetMsmqActivator - ok
22:41:17.0831 0x12a4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:41:17.0847 0x12a4  NetPipeActivator - ok
22:41:17.0878 0x12a4  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
22:41:17.0925 0x12a4  netprofm - ok
22:41:17.0971 0x12a4  [ C553716F6F7BCA3444CEE52DFB7C9016, 268D8109154565E590FBC5ED6EEBC6A3DDD057771AF703FC2FC12C2DEF3BD5E6 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys
22:41:18.0049 0x12a4  netr28ux - ok
22:41:18.0049 0x12a4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:41:18.0065 0x12a4  NetTcpActivator - ok
22:41:18.0065 0x12a4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:41:18.0081 0x12a4  NetTcpPortSharing - ok
22:41:18.0112 0x12a4  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
22:41:18.0127 0x12a4  nfrd960 - ok
22:41:18.0174 0x12a4  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
22:41:18.0205 0x12a4  NlaSvc - ok
22:41:18.0221 0x12a4  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
22:41:18.0252 0x12a4  Npfs - ok
22:41:18.0283 0x12a4  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
22:41:18.0330 0x12a4  nsi - ok
22:41:18.0361 0x12a4  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
22:41:18.0393 0x12a4  nsiproxy - ok
22:41:18.0502 0x12a4  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
22:41:18.0549 0x12a4  Ntfs - ok
22:41:18.0564 0x12a4  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
22:41:18.0595 0x12a4  Null - ok
22:41:18.0642 0x12a4  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
22:41:18.0658 0x12a4  nvraid - ok
22:41:18.0705 0x12a4  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
22:41:18.0720 0x12a4  nvstor - ok
22:41:18.0767 0x12a4  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
22:41:18.0783 0x12a4  nv_agp - ok
22:41:18.0892 0x12a4  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
22:41:18.0907 0x12a4  odserv - ok
22:41:18.0954 0x12a4  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
22:41:18.0985 0x12a4  ohci1394 - ok
22:41:19.0048 0x12a4  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:41:19.0063 0x12a4  ose - ok
22:41:19.0095 0x12a4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
22:41:19.0157 0x12a4  p2pimsvc - ok
22:41:19.0204 0x12a4  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
22:41:19.0219 0x12a4  p2psvc - ok
22:41:19.0251 0x12a4  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
22:41:19.0282 0x12a4  Parport - ok
22:41:19.0329 0x12a4  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
22:41:19.0344 0x12a4  partmgr - ok
22:41:19.0391 0x12a4  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
22:41:19.0438 0x12a4  PcaSvc - ok
22:41:19.0500 0x12a4  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
22:41:19.0516 0x12a4  pci - ok
22:41:19.0547 0x12a4  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
22:41:19.0563 0x12a4  pciide - ok
22:41:19.0578 0x12a4  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
22:41:19.0594 0x12a4  pcmcia - ok
22:41:19.0625 0x12a4  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
22:41:19.0625 0x12a4  pcw - ok
22:41:19.0703 0x12a4  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
22:41:19.0750 0x12a4  PEAUTH - ok
22:41:19.0828 0x12a4  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
22:41:19.0828 0x12a4  PerfHost - ok
22:41:19.0921 0x12a4  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
22:41:20.0031 0x12a4  pla - ok
22:41:20.0109 0x12a4  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
22:41:20.0171 0x12a4  PlugPlay - ok
22:41:20.0202 0x12a4  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
22:41:20.0233 0x12a4  PNRPAutoReg - ok
22:41:20.0265 0x12a4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
22:41:20.0280 0x12a4  PNRPsvc - ok
22:41:20.0343 0x12a4  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
22:41:20.0405 0x12a4  PolicyAgent - ok
22:41:20.0452 0x12a4  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
22:41:20.0514 0x12a4  Power - ok
22:41:20.0561 0x12a4  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
22:41:20.0608 0x12a4  PptpMiniport - ok
22:41:20.0655 0x12a4  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
22:41:20.0686 0x12a4  Processor - ok
22:41:20.0748 0x12a4  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
22:41:20.0779 0x12a4  ProfSvc - ok
22:41:20.0795 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:41:20.0811 0x12a4  ProtectedStorage - ok
22:41:20.0857 0x12a4  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
22:41:20.0904 0x12a4  Psched - ok
22:41:21.0013 0x12a4  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
22:41:21.0076 0x12a4  ql2300 - ok
22:41:21.0107 0x12a4  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
22:41:21.0123 0x12a4  ql40xx - ok
22:41:21.0154 0x12a4  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
22:41:21.0201 0x12a4  QWAVE - ok
22:41:21.0216 0x12a4  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
22:41:21.0263 0x12a4  QWAVEdrv - ok
22:41:21.0279 0x12a4  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
22:41:21.0325 0x12a4  RasAcd - ok
22:41:21.0372 0x12a4  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
22:41:21.0419 0x12a4  RasAgileVpn - ok
22:41:21.0450 0x12a4  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
22:41:21.0481 0x12a4  RasAuto - ok
22:41:21.0513 0x12a4  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
22:41:21.0544 0x12a4  Rasl2tp - ok
22:41:21.0606 0x12a4  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
22:41:21.0669 0x12a4  RasMan - ok
22:41:21.0700 0x12a4  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
22:41:21.0747 0x12a4  RasPppoe - ok
22:41:21.0778 0x12a4  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
22:41:21.0825 0x12a4  RasSstp - ok
22:41:21.0871 0x12a4  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
22:41:21.0903 0x12a4  rdbss - ok
22:41:21.0918 0x12a4  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
22:41:21.0934 0x12a4  rdpbus - ok
22:41:21.0949 0x12a4  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
22:41:21.0996 0x12a4  RDPCDD - ok
22:41:22.0043 0x12a4  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
22:41:22.0074 0x12a4  RDPENCDD - ok
22:41:22.0074 0x12a4  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
22:41:22.0137 0x12a4  RDPREFMP - ok
22:41:22.0261 0x12a4  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
22:41:22.0308 0x12a4  RdpVideoMiniport - ok
22:41:22.0355 0x12a4  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
22:41:22.0371 0x12a4  RDPWD - ok
22:41:22.0433 0x12a4  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
22:41:22.0449 0x12a4  rdyboost - ok
22:41:22.0480 0x12a4  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
22:41:22.0542 0x12a4  RemoteAccess - ok
22:41:22.0573 0x12a4  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
22:41:22.0636 0x12a4  RemoteRegistry - ok
22:41:22.0683 0x12a4  [ 7B04C9843921AB1F695FB395422C5360, C9B02BE0384357FD242613C2A12029B45322AF9A795CD69F33500CA7530899A7 ] RimUsb          C:\Windows\system32\Drivers\RimUsb_AMD64.sys
22:41:22.0745 0x12a4  RimUsb - ok
22:41:22.0776 0x12a4  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
22:41:22.0823 0x12a4  RpcEptMapper - ok
22:41:22.0870 0x12a4  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
22:41:22.0901 0x12a4  RpcLocator - ok
22:41:22.0963 0x12a4  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
22:41:22.0995 0x12a4  RpcSs - ok
22:41:23.0026 0x12a4  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
22:41:23.0088 0x12a4  rspndr - ok
22:41:23.0119 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] SamSs           C:\Windows\system32\lsass.exe
22:41:23.0119 0x12a4  SamSs - ok
22:41:23.0166 0x12a4  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
22:41:23.0182 0x12a4  sbp2port - ok
22:41:23.0197 0x12a4  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
22:41:23.0244 0x12a4  SCardSvr - ok
22:41:23.0275 0x12a4  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
22:41:23.0322 0x12a4  scfilter - ok
22:41:23.0431 0x12a4  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
22:41:23.0525 0x12a4  Schedule - ok
22:41:23.0572 0x12a4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
22:41:23.0603 0x12a4  SCPolicySvc - ok
22:41:23.0650 0x12a4  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
22:41:23.0681 0x12a4  SDRSVC - ok
22:41:23.0775 0x12a4  [ 16A252022535B680046F6E34E136D378, 31BCDAA742FDEC9E062C61E78D9E72A7ACBF77D5FEEE76933D0D378787F88E53 ] SeaPort         C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
22:41:23.0790 0x12a4  SeaPort - ok
22:41:23.0821 0x12a4  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
22:41:23.0868 0x12a4  secdrv - ok
22:41:23.0915 0x12a4  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
22:41:23.0962 0x12a4  seclogon - ok
22:41:24.0009 0x12a4  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
22:41:24.0040 0x12a4  SENS - ok
22:41:24.0040 0x12a4  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
22:41:24.0102 0x12a4  SensrSvc - ok
22:41:24.0133 0x12a4  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
22:41:24.0149 0x12a4  Serenum - ok
22:41:24.0180 0x12a4  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
22:41:24.0211 0x12a4  Serial - ok
22:41:24.0258 0x12a4  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
22:41:24.0258 0x12a4  sermouse - ok
22:41:24.0305 0x12a4  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
22:41:24.0383 0x12a4  SessionEnv - ok
22:41:24.0414 0x12a4  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
22:41:24.0430 0x12a4  sffdisk - ok
22:41:24.0445 0x12a4  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
22:41:24.0477 0x12a4  sffp_mmc - ok
22:41:24.0508 0x12a4  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
22:41:24.0539 0x12a4  sffp_sd - ok
22:41:24.0586 0x12a4  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
22:41:24.0617 0x12a4  sfloppy - ok
22:41:24.0679 0x12a4  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
22:41:24.0726 0x12a4  SharedAccess - ok
22:41:24.0789 0x12a4  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:41:24.0851 0x12a4  ShellHWDetection - ok
22:41:24.0867 0x12a4  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:41:24.0882 0x12a4  SiSRaid2 - ok
22:41:24.0898 0x12a4  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
22:41:24.0913 0x12a4  SiSRaid4 - ok
22:41:24.0945 0x12a4  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
22:41:24.0976 0x12a4  Smb - ok
22:41:25.0023 0x12a4  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
22:41:25.0054 0x12a4  SNMPTRAP - ok
22:41:25.0085 0x12a4  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
22:41:25.0085 0x12a4  spldr - ok
22:41:25.0132 0x12a4  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
22:41:25.0210 0x12a4  Spooler - ok
22:41:25.0366 0x12a4  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
22:41:25.0522 0x12a4  sppsvc - ok
22:41:25.0553 0x12a4  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
22:41:25.0615 0x12a4  sppuinotify - ok
22:41:25.0662 0x12a4  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
22:41:25.0725 0x12a4  srv - ok
22:41:25.0787 0x12a4  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
22:41:25.0834 0x12a4  srv2 - ok
22:41:25.0865 0x12a4  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
22:41:25.0896 0x12a4  srvnet - ok
22:41:25.0959 0x12a4  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
22:41:25.0990 0x12a4  SSDPSRV - ok
22:41:26.0005 0x12a4  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
22:41:26.0037 0x12a4  SstpSvc - ok
22:41:26.0068 0x12a4  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
22:41:26.0068 0x12a4  stexstor - ok
22:41:26.0146 0x12a4  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
22:41:26.0177 0x12a4  stisvc - ok
22:41:26.0208 0x12a4  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
22:41:26.0224 0x12a4  swenum - ok
22:41:26.0271 0x12a4  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
22:41:26.0349 0x12a4  swprv - ok
22:41:26.0442 0x12a4  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
22:41:26.0567 0x12a4  SysMain - ok
22:41:26.0614 0x12a4  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:41:26.0661 0x12a4  TabletInputService - ok
22:41:26.0723 0x12a4  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys
22:41:26.0739 0x12a4  tap0901 - ok
22:41:26.0754 0x12a4  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
22:41:26.0817 0x12a4  TapiSrv - ok
22:41:26.0848 0x12a4  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
22:41:26.0910 0x12a4  TBS - ok
22:41:27.0004 0x12a4  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
22:41:27.0097 0x12a4  Tcpip - ok
22:41:27.0160 0x12a4  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
22:41:27.0207 0x12a4  TCPIP6 - ok
22:41:27.0253 0x12a4  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
22:41:27.0300 0x12a4  tcpipreg - ok
22:41:27.0331 0x12a4  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
22:41:27.0394 0x12a4  TDPIPE - ok
22:41:27.0441 0x12a4  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
22:41:27.0472 0x12a4  TDTCP - ok
22:41:27.0534 0x12a4  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
22:41:27.0581 0x12a4  tdx - ok
22:41:27.0628 0x12a4  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
22:41:27.0643 0x12a4  TermDD - ok
22:41:27.0706 0x12a4  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
22:41:27.0784 0x12a4  TermService - ok
22:41:27.0815 0x12a4  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
22:41:27.0846 0x12a4  Themes - ok
22:41:27.0877 0x12a4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
22:41:27.0909 0x12a4  THREADORDER - ok
22:41:27.0940 0x12a4  [ DBCC20C02E8A3E43B03C304A4E40A84F, BF5F3ACCB0342304A6870E94D2576644B08DBF307C853C7DBA4B82B0C7309DA4 ] TPM             C:\Windows\system32\drivers\tpm.sys
22:41:27.0971 0x12a4  TPM - ok
22:41:28.0018 0x12a4  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
22:41:28.0049 0x12a4  TrkWks - ok
22:41:28.0111 0x12a4  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:41:28.0158 0x12a4  TrustedInstaller - ok
22:41:28.0221 0x12a4  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
22:41:28.0252 0x12a4  tssecsrv - ok
22:41:28.0330 0x12a4  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
22:41:28.0377 0x12a4  TsUsbFlt - ok
22:41:28.0439 0x12a4  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
22:41:28.0470 0x12a4  tunnel - ok
22:41:28.0486 0x12a4  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
22:41:28.0501 0x12a4  uagp35 - ok
22:41:28.0548 0x12a4  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
22:41:28.0595 0x12a4  udfs - ok
22:41:28.0642 0x12a4  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
22:41:28.0673 0x12a4  UI0Detect - ok
22:41:28.0704 0x12a4  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
22:41:28.0720 0x12a4  uliagpkx - ok
22:41:28.0782 0x12a4  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys
22:41:28.0798 0x12a4  umbus - ok
22:41:28.0813 0x12a4  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
22:41:28.0829 0x12a4  UmPass - ok
22:41:28.0860 0x12a4  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
22:41:28.0891 0x12a4  upnphost - ok
22:41:28.0938 0x12a4  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
22:41:29.0001 0x12a4  USBAAPL64 - ok
22:41:29.0032 0x12a4  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
22:41:29.0063 0x12a4  usbaudio - ok
22:41:29.0094 0x12a4  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
22:41:29.0141 0x12a4  usbccgp - ok
22:41:29.0203 0x12a4  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
22:41:29.0250 0x12a4  usbcir - ok
22:41:29.0281 0x12a4  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
22:41:29.0313 0x12a4  usbehci - ok
22:41:29.0375 0x12a4  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
22:41:29.0406 0x12a4  usbhub - ok
22:41:29.0422 0x12a4  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
22:41:29.0453 0x12a4  usbohci - ok
22:41:29.0500 0x12a4  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
22:41:29.0515 0x12a4  usbprint - ok
22:41:29.0562 0x12a4  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
22:41:29.0609 0x12a4  usbscan - ok
22:41:29.0640 0x12a4  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:41:29.0703 0x12a4  USBSTOR - ok
22:41:29.0734 0x12a4  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
22:41:29.0765 0x12a4  usbuhci - ok
22:41:29.0812 0x12a4  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
22:41:29.0827 0x12a4  usbvideo - ok
22:41:29.0859 0x12a4  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
22:41:29.0905 0x12a4  UxSms - ok
22:41:29.0937 0x12a4  [ 2BC45F4CF55B45BDD650828192F132B8, 4ABBC1DE6B17F7FEE9CB0BEEFEB6C88321826B4D52FBDF8B4B885CEA3CFD24F7 ] VaultSvc        C:\Windows\system32\lsass.exe
22:41:29.0937 0x12a4  VaultSvc - ok
22:41:29.0968 0x12a4  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
22:41:29.0983 0x12a4  vdrvroot - ok
22:41:30.0030 0x12a4  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
22:41:30.0108 0x12a4  vds - ok
22:41:30.0155 0x12a4  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
22:41:30.0171 0x12a4  vga - ok
22:41:30.0186 0x12a4  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
22:41:30.0249 0x12a4  VgaSave - ok
22:41:30.0295 0x12a4  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
22:41:30.0311 0x12a4  vhdmp - ok
22:41:30.0358 0x12a4  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
22:41:30.0358 0x12a4  viaide - ok
22:41:30.0373 0x12a4  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
22:41:30.0389 0x12a4  volmgr - ok
22:41:30.0436 0x12a4  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
22:41:30.0451 0x12a4  volmgrx - ok
22:41:30.0514 0x12a4  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
22:41:30.0529 0x12a4  volsnap - ok
22:41:30.0561 0x12a4  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
22:41:30.0576 0x12a4  vsmraid - ok
22:41:30.0670 0x12a4  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
22:41:30.0763 0x12a4  VSS - ok
22:41:30.0779 0x12a4  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
22:41:30.0795 0x12a4  vwifibus - ok
22:41:30.0904 0x12a4  [ 7959EA6EADC1AAF7FB40678F0BAB4C0E, 97EC6C5D86F8E77B9EFA009CAC798A78ED7249B5CB7F845711882ACA19841EB3 ] VX1000          C:\Windows\system32\DRIVERS\VX1000.sys
22:41:30.0997 0x12a4  VX1000 - ok
22:41:31.0044 0x12a4  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
22:41:31.0091 0x12a4  W32Time - ok
22:41:31.0107 0x12a4  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
22:41:31.0138 0x12a4  WacomPen - ok
22:41:31.0216 0x12a4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
22:41:31.0263 0x12a4  WANARP - ok
22:41:31.0278 0x12a4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
22:41:31.0294 0x12a4  Wanarpv6 - ok
22:41:31.0387 0x12a4  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
22:41:31.0434 0x12a4  WatAdminSvc - ok
22:41:31.0543 0x12a4  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
22:41:31.0668 0x12a4  wbengine - ok
22:41:31.0699 0x12a4  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
22:41:31.0746 0x12a4  WbioSrvc - ok
22:41:31.0809 0x12a4  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
22:41:31.0824 0x12a4  wcncsvc - ok
22:41:31.0840 0x12a4  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:41:31.0871 0x12a4  WcsPlugInService - ok
22:41:31.0887 0x12a4  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
22:41:31.0902 0x12a4  Wd - ok
22:41:31.0965 0x12a4  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
22:41:31.0996 0x12a4  Wdf01000 - ok
22:41:32.0043 0x12a4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
22:41:32.0074 0x12a4  WdiServiceHost - ok
22:41:32.0089 0x12a4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
22:41:32.0105 0x12a4  WdiSystemHost - ok
22:41:32.0152 0x12a4  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll
22:41:32.0183 0x12a4  WebClient - ok
22:41:32.0214 0x12a4  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
22:41:32.0277 0x12a4  Wecsvc - ok
22:41:32.0292 0x12a4  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
22:41:32.0355 0x12a4  wercplsupport - ok
22:41:32.0417 0x12a4  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
22:41:32.0448 0x12a4  WerSvc - ok
22:41:32.0479 0x12a4  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
22:41:32.0511 0x12a4  WfpLwf - ok
22:41:32.0526 0x12a4  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
22:41:32.0526 0x12a4  WIMMount - ok
22:41:32.0542 0x12a4  WinDefend - ok
22:41:32.0557 0x12a4  WinHttpAutoProxySvc - ok
22:41:32.0604 0x12a4  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
22:41:32.0651 0x12a4  Winmgmt - ok
22:41:32.0745 0x12a4  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
22:41:32.0869 0x12a4  WinRM - ok
22:41:32.0916 0x12a4  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
22:41:32.0932 0x12a4  WinUsb - ok
22:41:32.0994 0x12a4  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
22:41:33.0041 0x12a4  Wlansvc - ok
22:41:33.0103 0x12a4  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
22:41:33.0103 0x12a4  WmiAcpi - ok
22:41:33.0150 0x12a4  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
22:41:33.0181 0x12a4  wmiApSrv - ok
22:41:33.0213 0x12a4  WMPNetworkSvc - ok
22:41:33.0228 0x12a4  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
22:41:33.0291 0x12a4  WPCSvc - ok
22:41:33.0322 0x12a4  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
22:41:33.0353 0x12a4  WPDBusEnum - ok
22:41:33.0384 0x12a4  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
22:41:33.0415 0x12a4  ws2ifsl - ok
22:41:33.0431 0x12a4  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
22:41:33.0447 0x12a4  wscsvc - ok
22:41:33.0462 0x12a4  WSearch - ok
22:41:33.0587 0x12a4  [ 6075791ED85E47A2A2916B1F34582944, 25B5FAD161711875B38BDD014A26FA527C8EE4854D485989D19A72D5EBBA4054 ] wuauserv        C:\Windows\system32\wuaueng.dll
22:41:33.0712 0x12a4  wuauserv - ok
22:41:33.0759 0x12a4  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
22:41:33.0821 0x12a4  WudfPf - ok
22:41:33.0883 0x12a4  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
22:41:33.0930 0x12a4  WUDFRd - ok
22:41:33.0961 0x12a4  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
22:41:34.0008 0x12a4  wudfsvc - ok
22:41:34.0055 0x12a4  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
22:41:34.0086 0x12a4  WwanSvc - ok
22:41:34.0117 0x12a4  ================ Scan global ===============================
22:41:34.0149 0x12a4  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
22:41:34.0211 0x12a4  [ FF41063E45C6238CAF48CBE6D0D6FC4B, 9B755EA23E7D2554E3AC3ADFFC4AFF7EB4F4A0F5CD3E6F2300BC98B21474CBC6 ] C:\Windows\system32\winsrv.dll
22:41:34.0227 0x12a4  [ FF41063E45C6238CAF48CBE6D0D6FC4B, 9B755EA23E7D2554E3AC3ADFFC4AFF7EB4F4A0F5CD3E6F2300BC98B21474CBC6 ] C:\Windows\system32\winsrv.dll
22:41:34.0258 0x12a4  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
22:41:34.0305 0x12a4  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
22:41:34.0320 0x12a4  [ Global ] - ok
22:41:34.0320 0x12a4  ================ Scan MBR ==================================
22:41:34.0336 0x12a4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
22:41:34.0539 0x12a4  \Device\Harddisk1\DR1 - ok
22:41:34.0570 0x12a4  [ 6F6B894AB585105EF278F4EF085E2D69 ] \Device\Harddisk0\DR0
22:41:34.0648 0x12a4  \Device\Harddisk0\DR0 - ok
22:41:34.0648 0x12a4  ================ Scan VBR ==================================
22:41:34.0648 0x12a4  [ 1F8D93A19FCE52B3279CB5F3C9733A30 ] \Device\Harddisk1\DR1\Partition1
22:41:34.0648 0x12a4  \Device\Harddisk1\DR1\Partition1 - ok
22:41:34.0663 0x12a4  [ 2216D4E367CA858C9254B27F4008384C ] \Device\Harddisk1\DR1\Partition2
22:41:34.0663 0x12a4  \Device\Harddisk1\DR1\Partition2 - ok
22:41:34.0663 0x12a4  [ C5B1635CE9AB536572B38025C4D50614 ] \Device\Harddisk0\DR0\Partition1
22:41:34.0663 0x12a4  \Device\Harddisk0\DR0\Partition1 - ok
22:41:34.0663 0x12a4  ================ Scan generic autorun ======================
22:41:34.0741 0x12a4  [ C7F017C9B163E7DAB864649E8241F683, F007F107FCA0E3A12D7E900101EBF02C2453D4AA56BE18769E86B592C88C5106 ] C:\Program Files\iTunes\iTunesHelper.exe
22:41:34.0757 0x12a4  iTunesHelper - ok
22:41:34.0819 0x12a4  [ BA73EBA10FB47DB98FAB2DAEDD983930, 3BDFAAAA6F4CDA10C9B6DB16085B0B9326D082D49D5B43FF43A6F554DBB2B434 ] C:\Windows\KHALMNPR.EXE
22:41:34.0819 0x12a4  Kernel and Hardware Abstraction Layer - ok
22:41:34.0882 0x12a4  [ CFC11251C8CAC28DE01A5685541FC87A, ADD3520C260852141DAF30A112D5F9B4A45FD96863EB21D329D186B11191CA80 ] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
22:41:34.0960 0x12a4  SoundMAXPnP - ok
22:41:35.0053 0x12a4  [ AFF32534C8DEBC60607CDBCA3F18619C, 0701F91FFD15458383DD2AC40E538440F470A6BF5A5E53C55282083C8DF99912 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
22:41:35.0116 0x12a4  StartCCC - ok
22:41:35.0116 0x12a4  AMD AVT - ok
22:41:35.0209 0x12a4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
22:41:35.0272 0x12a4  Sidebar - ok
22:41:35.0303 0x12a4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
22:41:35.0350 0x12a4  mctadmin - ok
22:41:35.0412 0x12a4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
22:41:35.0443 0x12a4  Sidebar - ok
22:41:35.0443 0x12a4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
22:41:35.0459 0x12a4  mctadmin - ok
22:41:35.0553 0x12a4  [ FF37B3D8CBF340B0EC7C0DB7A07BC6F9, 67DB514FC4E07FE0710A2F744AD35393DC644CA50AEB58D4E910196DC2BD041C ] C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe
22:41:35.0584 0x12a4  WinPatrol - ok
22:41:35.0911 0x12a4  [ F81F345586F08409752FC89EE3C02B17, 64D6F5D290C53DA2867205B659C4EFFF245194E2ACA764CC88D32594A9EA5D56 ] C:\Program Files\CCleaner\CCleaner64.exe
22:41:36.0255 0x12a4  CCleaner Monitoring - ok
22:41:36.0286 0x12a4  Waiting for KSN requests completion. In queue: 92
22:41:37.0300 0x12a4  Waiting for KSN requests completion. In queue: 92
22:41:38.0314 0x12a4  Waiting for KSN requests completion. In queue: 92
22:41:39.0421 0x12a4  AV detected via SS2: Kaspersky Anti-Virus, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\wmiav.exe ( 17.0.0.611 ), 0x41000 ( enabled : updated )
22:41:39.0437 0x12a4  Win FW state via NFP2: enabled ( trusted )
22:41:41.0871 0x12a4  ============================================================
22:41:41.0871 0x12a4  Scan finished
22:41:41.0871 0x12a4  ============================================================
22:41:41.0871 0x0abc  Detected object count: 0
22:41:41.0871 0x0abc  Actual detected object count: 0

cosinus · 28.11.2016, 09:14

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

16.11.2016, 01:05	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Schädlingsbefall - Computer sehr langsam durch extrem grosse svhost.exe Wieso hast du ein französisches OS fragst aber in einem deutschen Forum? __________________ Logfiles bitte immer in CODE-Tags posten

Schädlingsbefall - Computer sehr langsam durch extrem grosse svhost.exe

Plagegeister aller Art und deren Bekämpfung: Schädlingsbefall - Computer sehr langsam durch extrem grosse svhost.exe