Windows 10 - Trojaner (MS DOS in Doppelzip) in Giropay Mahnung

14:24:39.0019 0x0da8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
14:24:39.0019 0x0da8  UEFI system
14:24:43.0271 0x0da8  ============================================================
14:24:43.0271 0x0da8  Current date / time: 2016/11/20 14:24:43.0271
14:24:43.0292 0x0da8  SystemInfo:
14:24:43.0292 0x0da8  
14:24:43.0292 0x0da8  OS Version: 10.0.14393 ServicePack: 0.0
14:24:43.0292 0x0da8  Product type: Workstation
14:24:43.0292 0x0da8  ComputerName: DESKTOP-2SM1GNU
14:24:43.0292 0x0da8  UserName: Fabian
14:24:43.0292 0x0da8  Windows directory: C:\WINDOWS
14:24:43.0292 0x0da8  System windows directory: C:\WINDOWS
14:24:43.0292 0x0da8  Running under WOW64
14:24:43.0292 0x0da8  Processor architecture: Intel x64
14:24:43.0292 0x0da8  Number of processors: 4
14:24:43.0292 0x0da8  Page size: 0x1000
14:24:43.0292 0x0da8  Boot type: Normal boot
14:24:43.0292 0x0da8  CodeIntegrityOptions = 0x00000001
14:24:43.0292 0x0da8  ============================================================
14:24:43.0427 0x0da8  KLMD registered as C:\WINDOWS\system32\drivers\11266743.sys
14:24:43.0427 0x0da8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19
14:24:43.0558 0x0da8  System UUID: {2B81884F-DA78-8CE9-C300-6E151F2FDA3D}
14:24:44.0018 0x0da8  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:24:45.0512 0x0da8  Drive \Device\Harddisk1\DR1 - Size: 0x1DC5600000 ( 119.08 Gb ), SectorSize: 0x200, Cylinders: 0x3CB9, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:24:45.0515 0x0da8  ============================================================
14:24:45.0515 0x0da8  \Device\Harddisk0\DR0:
14:24:45.0519 0x0da8  GPT partitions:
14:24:45.0520 0x0da8  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {6C7EC5E5-D22C-4369-8053-CF384EB866E1}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x82000
14:24:45.0520 0x0da8  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {527BDCB9-76D5-47C9-BBBB-5E578E05FC6F}, Name: Microsoft reserved partition, StartLBA 0x82800, BlocksNum 0x40000
14:24:45.0520 0x0da8  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C271C2A1-CFB2-4985-94A2-6D1ED41D893A}, Name: Basic data partition, StartLBA 0xC2800, BlocksNum 0xE9F4800
14:24:45.0520 0x0da8  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {66D81C16-7FD8-4585-88AB-E9D8FA2484F7}, Name: Basic data partition, StartLBA 0xEAB7000, BlocksNum 0x3C5000
14:24:45.0521 0x0da8  MBR partitions:
14:24:45.0521 0x0da8  \Device\Harddisk1\DR1:
14:24:45.0526 0x0da8  MBR partitions:
14:24:45.0526 0x0da8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x8000, BlocksNum 0xEE23000
14:24:45.0526 0x0da8  ============================================================
14:24:45.0527 0x0da8  Initialize success
14:24:45.0527 0x0da8  ============================================================
14:25:24.0862 0x1a40  ============================================================
14:25:24.0862 0x1a40  Scan started
14:25:24.0862 0x1a40  Mode: Manual; SigCheck; TDLFS; 
14:25:24.0862 0x1a40  ============================================================
14:25:24.0862 0x1a40  KSN ping started
14:25:25.0161 0x1a40  KSN ping finished: true
14:25:25.0446 0x1a40  ================ Scan system memory ========================
14:25:25.0446 0x1a40  System memory - ok
14:25:25.0448 0x1a40  ================ Scan services =============================
14:25:25.0460 0x1a40  1394ohci - ok
14:25:25.0463 0x1a40  3ware - ok
14:25:25.0465 0x1a40  ACPI - ok
14:25:25.0469 0x1a40  AcpiDev - ok
14:25:25.0473 0x1a40  acpiex - ok
14:25:25.0475 0x1a40  acpipagr - ok
14:25:25.0478 0x1a40  AcpiPmi - ok
14:25:25.0480 0x1a40  acpitime - ok
14:25:25.0484 0x1a40  AdobeARMservice - ok
14:25:25.0488 0x1a40  ADP80XX - ok
14:25:25.0493 0x1a40  AFD - ok
14:25:25.0496 0x1a40  ahcache - ok
14:25:25.0499 0x1a40  AJRouter - ok
14:25:25.0502 0x1a40  ALG - ok
14:25:25.0505 0x1a40  AmdK8 - ok
14:25:25.0508 0x1a40  AmdPPM - ok
14:25:25.0510 0x1a40  amdsata - ok
14:25:25.0513 0x1a40  amdsbs - ok
14:25:25.0517 0x1a40  amdxata - ok
14:25:25.0519 0x1a40  AntiVirMailService - ok
14:25:25.0522 0x1a40  AntiVirSchedulerService - ok
14:25:25.0525 0x1a40  AntiVirService - ok
14:25:25.0527 0x1a40  AntiVirWebService - ok
14:25:25.0530 0x1a40  AppID - ok
14:25:25.0533 0x1a40  AppIDSvc - ok
14:25:25.0536 0x1a40  Appinfo - ok
14:25:25.0539 0x1a40  applockerfltr - ok
14:25:25.0542 0x1a40  AppMgmt - ok
14:25:25.0545 0x1a40  AppReadiness - ok
14:25:25.0548 0x1a40  AppVClient - ok
14:25:25.0551 0x1a40  AppvStrm - ok
14:25:25.0554 0x1a40  AppvVemgr - ok
14:25:25.0559 0x1a40  AppvVfs - ok
14:25:25.0562 0x1a40  AppXSvc - ok
14:25:25.0566 0x1a40  arcsas - ok
14:25:25.0569 0x1a40  AsyncMac - ok
14:25:25.0572 0x1a40  atapi - ok
14:25:25.0575 0x1a40  AudioEndpointBuilder - ok
14:25:25.0578 0x1a40  Audiosrv - ok
14:25:25.0580 0x1a40  avgntflt - ok
14:25:25.0584 0x1a40  avipbb - ok
14:25:25.0588 0x1a40  Avira.ServiceHost - ok
14:25:25.0590 0x1a40  avkmgr - ok
14:25:25.0593 0x1a40  avnetflt - ok
14:25:25.0596 0x1a40  AxInstSV - ok
14:25:25.0598 0x1a40  b06bdrv - ok
14:25:25.0602 0x1a40  BasicDisplay - ok
14:25:25.0605 0x1a40  BasicRender - ok
14:25:25.0609 0x1a40  bcmfn - ok
14:25:25.0612 0x1a40  bcmfn2 - ok
14:25:25.0614 0x1a40  BDESVC - ok
14:25:25.0617 0x1a40  Beep - ok
14:25:25.0620 0x1a40  BFE - ok
14:25:25.0622 0x1a40  BITS - ok
14:25:25.0625 0x1a40  bowser - ok
14:25:25.0627 0x1a40  BrokerInfrastructure - ok
14:25:25.0630 0x1a40  Browser - ok
14:25:25.0632 0x1a40  BthAvrcpTg - ok
14:25:25.0636 0x1a40  BthEnum - ok
14:25:25.0639 0x1a40  BthHFEnum - ok
14:25:25.0641 0x1a40  bthhfhid - ok
14:25:25.0643 0x1a40  BthHFSrv - ok
14:25:25.0646 0x1a40  BthLEEnum - ok
14:25:25.0649 0x1a40  BTHMODEM - ok
14:25:25.0652 0x1a40  BthPan - ok
14:25:25.0655 0x1a40  BTHPORT - ok
14:25:25.0658 0x1a40  bthserv - ok
14:25:25.0660 0x1a40  BTHUSB - ok
14:25:25.0663 0x1a40  buttonconverter - ok
14:25:25.0665 0x1a40  CapImg - ok
14:25:25.0669 0x1a40  cdfs - ok
14:25:25.0672 0x1a40  CDPSvc - ok
14:25:25.0674 0x1a40  CDPUserSvc - ok
14:25:25.0702 0x1a40  cdrom - ok
14:25:25.0705 0x1a40  CertPropSvc - ok
14:25:25.0708 0x1a40  cht4iscsi - ok
14:25:25.0711 0x1a40  cht4vbd - ok
14:25:25.0713 0x1a40  circlass - ok
14:25:25.0715 0x1a40  CLFS - ok
14:25:25.0718 0x1a40  ClickToRunSvc - ok
14:25:25.0722 0x1a40  ClipSVC - ok
14:25:25.0725 0x1a40  clreg - ok
14:25:25.0733 0x1a40  CmBatt - ok
14:25:25.0736 0x1a40  CNG - ok
14:25:25.0739 0x1a40  cnghwassist - ok
14:25:25.0768 0x1a40  CompositeBus - ok
14:25:25.0771 0x1a40  COMSysApp - ok
14:25:25.0774 0x1a40  condrv - ok
14:25:25.0777 0x1a40  CoreMessagingRegistrar - ok
14:25:25.0781 0x1a40  cphs - ok
14:25:25.0785 0x1a40  cplspcon - ok
14:25:25.0788 0x1a40  CryptSvc - ok
14:25:25.0791 0x1a40  CSC - ok
14:25:25.0794 0x1a40  CscService - ok
14:25:25.0797 0x1a40  CSI2HostControllerDriver - ok
14:25:25.0801 0x1a40  dam - ok
14:25:25.0805 0x1a40  DcomLaunch - ok
14:25:25.0807 0x1a40  DcpSvc - ok
14:25:25.0809 0x1a40  defragsvc - ok
14:25:25.0812 0x1a40  DeviceAssociationService - ok
14:25:25.0814 0x1a40  DeviceInstall - ok
14:25:25.0818 0x1a40  DevQueryBroker - ok
14:25:25.0824 0x1a40  Dfsc - ok
14:25:25.0827 0x1a40  Dhcp - ok
14:25:25.0830 0x1a40  diagnosticshub.standardcollector.service - ok
14:25:25.0833 0x1a40  DiagTrack - ok
14:25:25.0836 0x1a40  disk - ok
14:25:25.0839 0x1a40  DmEnrollmentSvc - ok
14:25:25.0842 0x1a40  dmvsc - ok
14:25:25.0845 0x1a40  dmwappushservice - ok
14:25:25.0848 0x1a40  Dnscache - ok
14:25:25.0853 0x1a40  dot3svc - ok
14:25:25.0855 0x1a40  DPS - ok
14:25:25.0858 0x1a40  drmkaud - ok
14:25:25.0860 0x1a40  DsmSvc - ok
14:25:25.0864 0x1a40  DsSvc - ok
14:25:25.0867 0x1a40  DXGKrnl - ok
14:25:25.0870 0x1a40  EapHost - ok
14:25:25.0872 0x1a40  ebdrv - ok
14:25:25.0875 0x1a40  EFS - ok
14:25:25.0877 0x1a40  EhStorClass - ok
14:25:25.0880 0x1a40  EhStorTcgDrv - ok
14:25:25.0884 0x1a40  embeddedmode - ok
14:25:25.0887 0x1a40  EntAppSvc - ok
14:25:25.0889 0x1a40  ErrDev - ok
14:25:25.0918 0x1a40  EventSystem - ok
14:25:25.0920 0x1a40  exfat - ok
14:25:25.0923 0x1a40  fastfat - ok
14:25:25.0925 0x1a40  Fax - ok
14:25:25.0928 0x1a40  fdc - ok
14:25:25.0930 0x1a40  fdPHost - ok
14:25:25.0933 0x1a40  FDResPub - ok
14:25:25.0937 0x1a40  fhsvc - ok
14:25:25.0940 0x1a40  FileCrypt - ok
14:25:25.0943 0x1a40  FileInfo - ok
14:25:25.0948 0x1a40  FileOpenManager - ok
14:25:25.0952 0x1a40  Filetrace - ok
14:25:25.0954 0x1a40  flpydisk - ok
14:25:25.0957 0x1a40  FltMgr - ok
14:25:25.0960 0x1a40  FontCache - ok
14:25:25.0963 0x1a40  FontCache3.0.0.0 - ok
14:25:25.0967 0x1a40  FrameServer - ok
14:25:25.0970 0x1a40  FsDepends - ok
14:25:25.0973 0x1a40  Fs_Rec - ok
14:25:25.0976 0x1a40  fvevol - ok
14:25:25.0978 0x1a40  gencounter - ok
14:25:25.0981 0x1a40  genericusbfn - ok
14:25:25.0984 0x1a40  GPIOClx0101 - ok
14:25:25.0987 0x1a40  gpsvc - ok
14:25:25.0990 0x1a40  GpuEnergyDrv - ok
14:25:25.0992 0x1a40  HDAudBus - ok
14:25:25.0995 0x1a40  HidBatt - ok
14:25:25.0997 0x1a40  HidBth - ok
14:25:26.0002 0x1a40  hidi2c - ok
14:25:26.0004 0x1a40  hidinterrupt - ok
14:25:26.0007 0x1a40  HidIr - ok
14:25:26.0010 0x1a40  hidserv - ok
14:25:26.0012 0x1a40  HidUsb - ok
14:25:26.0016 0x1a40  HomeGroupListener - ok
14:25:26.0019 0x1a40  HomeGroupProvider - ok
14:25:26.0022 0x1a40  HpSAMD - ok
14:25:26.0024 0x1a40  HTTP - ok
14:25:26.0027 0x1a40  HvHost - ok
14:25:26.0029 0x1a40  hvservice - ok
14:25:26.0033 0x1a40  hwpolicy - ok
14:25:26.0036 0x1a40  hyperkbd - ok
14:25:26.0038 0x1a40  i8042prt - ok
14:25:26.0041 0x1a40  iacamera64 - ok
14:25:26.0044 0x1a40  iagpio - ok
14:25:26.0046 0x1a40  iai2c - ok
14:25:26.0050 0x1a40  iaLPSS2i_GPIO2 - ok
14:25:26.0053 0x1a40  iaLPSS2i_I2C - ok
14:25:26.0056 0x1a40  iaLPSS2_GPIO2 - ok
14:25:26.0058 0x1a40  iaLPSS2_I2C - ok
14:25:26.0061 0x1a40  iaLPSS2_SPI - ok
14:25:26.0064 0x1a40  iaLPSS2_UART2 - ok
14:25:26.0067 0x1a40  iaLPSSi_GPIO - ok
14:25:26.0075 0x1a40  iaLPSSi_I2C - ok
14:25:26.0077 0x1a40  iaStorAV - ok
14:25:26.0080 0x1a40  iaStorV - ok
14:25:26.0083 0x1a40  ibbus - ok
14:25:26.0086 0x1a40  icssvc - ok
14:25:26.0088 0x1a40  igfx - ok
14:25:26.0091 0x1a40  IKEEXT - ok
14:25:26.0093 0x1a40  IndirectKmd - ok
14:25:26.0097 0x1a40  IntcAudioBus - ok
14:25:26.0101 0x1a40  IntcAzAudAddService - ok
14:25:26.0104 0x1a40  IntcDAud - ok
14:25:26.0107 0x1a40  IntcOED - ok
14:25:26.0109 0x1a40  intelide - ok
14:25:26.0112 0x1a40  intelpep - ok
14:25:26.0114 0x1a40  intelppm - ok
14:25:26.0118 0x1a40  IntTouch - ok
14:25:26.0121 0x1a40  iorate - ok
14:25:26.0123 0x1a40  IpFilterDriver - ok
14:25:26.0126 0x1a40  iphlpsvc - ok
14:25:26.0129 0x1a40  IPMIDRV - ok
14:25:26.0131 0x1a40  IPNAT - ok
14:25:26.0135 0x1a40  irda - ok
14:25:26.0137 0x1a40  IRENUM - ok
14:25:26.0140 0x1a40  irmon - ok
14:25:26.0142 0x1a40  isapnp - ok
14:25:26.0145 0x1a40  iScsiPrt - ok
14:25:26.0147 0x1a40  kbdclass - ok
14:25:26.0153 0x1a40  kbdhid - ok
14:25:26.0155 0x1a40  kdnic - ok
14:25:26.0158 0x1a40  KeyIso - ok
14:25:26.0160 0x1a40  KSecDD - ok
14:25:26.0163 0x1a40  KSecPkg - ok
14:25:26.0166 0x1a40  ksthunk - ok
14:25:26.0170 0x1a40  KtmRm - ok
14:25:26.0172 0x1a40  LanmanServer - ok
14:25:26.0175 0x1a40  LanmanWorkstation - ok
14:25:26.0200 0x1a40  lfsvc - ok
14:25:26.0203 0x1a40  LicenseManager - ok
14:25:26.0205 0x1a40  lltdio - ok
14:25:26.0208 0x1a40  lltdsvc - ok
14:25:26.0210 0x1a40  lmhosts - ok
14:25:26.0214 0x1a40  LSI_SAS - ok
14:25:26.0218 0x1a40  LSI_SAS2i - ok
14:25:26.0220 0x1a40  LSI_SAS3i - ok
14:25:26.0223 0x1a40  LSI_SSS - ok
14:25:26.0225 0x1a40  LSM - ok
14:25:26.0228 0x1a40  luafv - ok
14:25:26.0230 0x1a40  MapsBroker - ok
14:25:26.0236 0x1a40  MBAMProtector - ok
14:25:26.0239 0x1a40  MBAMScheduler - ok
14:25:26.0242 0x1a40  MBAMService - ok
14:25:26.0245 0x1a40  MBAMSwissArmy - ok
14:25:26.0248 0x1a40  MBAMWebAccessControl - ok
14:25:26.0251 0x1a40  megasas - ok
14:25:26.0255 0x1a40  megasas2i - ok
14:25:26.0258 0x1a40  megasr - ok
14:25:26.0260 0x1a40  MEIx64 - ok
14:25:26.0263 0x1a40  MessagingService - ok
14:25:26.0269 0x1a40  mlx4_bus - ok
14:25:26.0271 0x1a40  MMCSS - ok
14:25:26.0274 0x1a40  Modem - ok
14:25:26.0276 0x1a40  monitor - ok
14:25:26.0279 0x1a40  mouclass - ok
14:25:26.0281 0x1a40  mouhid - ok
14:25:26.0285 0x1a40  mountmgr - ok
14:25:26.0287 0x1a40  mpsdrv - ok
14:25:26.0290 0x1a40  MpsSvc - ok
14:25:26.0293 0x1a40  mrvlpcie8897 - ok
14:25:26.0295 0x1a40  MRxDAV - ok
14:25:26.0298 0x1a40  mrxsmb - ok
14:25:26.0301 0x1a40  mrxsmb10 - ok
14:25:26.0304 0x1a40  mrxsmb20 - ok
14:25:26.0306 0x1a40  MsBridge - ok
14:25:26.0309 0x1a40  MSDTC - ok
14:25:26.0314 0x1a40  Msfs - ok
14:25:26.0319 0x1a40  msgpiowin32 - ok
14:25:26.0322 0x1a40  mshidkmdf - ok
14:25:26.0324 0x1a40  mshidumdf - ok
14:25:26.0327 0x1a40  msisadrv - ok
14:25:26.0329 0x1a40  MSiSCSI - ok
14:25:26.0336 0x1a40  msiserver - ok
14:25:26.0342 0x1a40  MSKSSRV - ok
14:25:26.0346 0x1a40  MsLldp - ok
14:25:26.0351 0x1a40  MSPCLOCK - ok
14:25:26.0354 0x1a40  MSPQM - ok
14:25:26.0357 0x1a40  MsRPC - ok
14:25:26.0361 0x1a40  MsSecFlt - ok
14:25:26.0363 0x1a40  mssmbios - ok
14:25:26.0368 0x1a40  MSTEE - ok
14:25:26.0370 0x1a40  MTConfig - ok
14:25:26.0373 0x1a40  Mup - ok
14:25:26.0375 0x1a40  mvumis - ok
14:25:26.0379 0x1a40  NativeWifiP - ok
14:25:26.0382 0x1a40  NcaSvc - ok
14:25:26.0385 0x1a40  NcbService - ok
14:25:26.0388 0x1a40  NcdAutoSetup - ok
14:25:26.0391 0x1a40  ndfltr - ok
14:25:26.0395 0x1a40  NDIS - ok
14:25:26.0397 0x1a40  NdisCap - ok
14:25:26.0401 0x1a40  NdisImPlatform - ok
14:25:26.0403 0x1a40  NdisTapi - ok
14:25:26.0406 0x1a40  Ndisuio - ok
14:25:26.0408 0x1a40  NdisVirtualBus - ok
14:25:26.0411 0x1a40  NdisWan - ok
14:25:26.0415 0x1a40  ndiswanlegacy - ok
14:25:26.0418 0x1a40  ndproxy - ok
14:25:26.0421 0x1a40  Ndu - ok
14:25:26.0423 0x1a40  NetAdapterCx - ok
14:25:26.0426 0x1a40  NetBIOS - ok
14:25:26.0430 0x1a40  NetBT - ok
14:25:26.0434 0x1a40  Netlogon - ok
14:25:26.0437 0x1a40  Netman - ok
14:25:26.0440 0x1a40  netprofm - ok
14:25:26.0442 0x1a40  NetSetupSvc - ok
14:25:26.0445 0x1a40  NetTcpPortSharing - ok
14:25:26.0450 0x1a40  NgcCtnrSvc - ok
14:25:26.0453 0x1a40  NgcSvc - ok
14:25:26.0456 0x1a40  NlaSvc - ok
14:25:26.0458 0x1a40  Npfs - ok
14:25:26.0461 0x1a40  npsvctrig - ok
14:25:26.0464 0x1a40  nsi - ok
14:25:26.0467 0x1a40  nsiproxy - ok
14:25:26.0472 0x1a40  NTFS - ok
14:25:26.0474 0x1a40  Null - ok
14:25:26.0477 0x1a40  nvraid - ok
14:25:26.0479 0x1a40  nvstor - ok
14:25:26.0483 0x1a40  OneSyncSvc - ok
14:25:26.0487 0x1a40  ose - ok
14:25:26.0490 0x1a40  ov5693 - ok
14:25:26.0493 0x1a40  ov7251 - ok
14:25:26.0496 0x1a40  ov8865 - ok
14:25:26.0498 0x1a40  p2pimsvc - ok
14:25:26.0502 0x1a40  p2psvc - ok
14:25:26.0504 0x1a40  PanGpd - ok
14:25:26.0507 0x1a40  PanGPS - ok
14:25:26.0510 0x1a40  Parport - ok
14:25:26.0513 0x1a40  Partizan - ok
14:25:26.0516 0x1a40  partmgr - ok
14:25:26.0519 0x1a40  PcaSvc - ok
14:25:26.0521 0x1a40  pci - ok
14:25:26.0524 0x1a40  pciide - ok
14:25:26.0526 0x1a40  pcmcia - ok
14:25:26.0530 0x1a40  pcw - ok
14:25:26.0533 0x1a40  pdc - ok
14:25:26.0535 0x1a40  PEAUTH - ok
14:25:26.0539 0x1a40  PeerDistSvc - ok
14:25:26.0542 0x1a40  percsas2i - ok
14:25:26.0544 0x1a40  percsas3i - ok
14:25:26.0548 0x1a40  PerfHost - ok
14:25:26.0556 0x1a40  phidmice - ok
14:25:26.0558 0x1a40  PhoneSvc - ok
14:25:26.0561 0x1a40  PimIndexMaintenanceSvc - ok
14:25:26.0567 0x1a40  pla - ok
14:25:26.0571 0x1a40  PlugPlay - ok
14:25:26.0573 0x1a40  pmouself - ok
14:25:26.0577 0x1a40  PNRPAutoReg - ok
14:25:26.0579 0x1a40  PNRPsvc - ok
14:25:26.0582 0x1a40  PolicyAgent - ok
14:25:26.0586 0x1a40  Power - ok
14:25:26.0588 0x1a40  PptpMiniport - ok
14:25:26.0591 0x1a40  PrintNotify - ok
14:25:26.0594 0x1a40  Processor - ok
14:25:26.0596 0x1a40  ProfSvc - ok
14:25:26.0601 0x1a40  Psched - ok
14:25:26.0604 0x1a40  pvendrlf - ok
14:25:26.0606 0x1a40  QWAVE - ok
14:25:26.0608 0x1a40  QWAVEdrv - ok
14:25:26.0611 0x1a40  RasAcd - ok
14:25:26.0614 0x1a40  RasAgileVpn - ok
14:25:26.0618 0x1a40  RasAuto - ok
14:25:26.0620 0x1a40  Rasl2tp - ok
14:25:26.0623 0x1a40  RasMan - ok
14:25:26.0626 0x1a40  RasPppoe - ok
14:25:26.0628 0x1a40  RasSstp - ok
14:25:26.0631 0x1a40  rdbss - ok
14:25:26.0636 0x1a40  rdpbus - ok
14:25:26.0638 0x1a40  RDPDR - ok
14:25:26.0644 0x1a40  RdpVideoMiniport - ok
14:25:26.0647 0x1a40  rdyboost - ok
14:25:26.0652 0x1a40  ReFSv1 - ok
14:25:26.0656 0x1a40  RemoteAccess - ok
14:25:26.0658 0x1a40  RemoteRegistry - ok
14:25:26.0661 0x1a40  RetailDemo - ok
14:25:26.0664 0x1a40  RFCOMM - ok
14:25:26.0668 0x1a40  RmSvc - ok
14:25:26.0670 0x1a40  RpcEptMapper - ok
14:25:26.0673 0x1a40  RpcLocator - ok
14:25:26.0675 0x1a40  RpcSs - ok
14:25:26.0679 0x1a40  rspndr - ok
14:25:26.0681 0x1a40  s3cap - ok
14:25:26.0684 0x1a40  SamSs - ok
14:25:26.0687 0x1a40  sbp2port - ok
14:25:26.0689 0x1a40  SCardSvr - ok
14:25:26.0693 0x1a40  ScDeviceEnum - ok
14:25:26.0696 0x1a40  scfilter - ok
14:25:26.0699 0x1a40  Schedule - ok
14:25:26.0702 0x1a40  scmbus - ok
14:25:26.0704 0x1a40  scmdisk0101 - ok
14:25:26.0707 0x1a40  SCPolicySvc - ok
14:25:26.0710 0x1a40  sdbus - ok
14:25:26.0712 0x1a40  SDRSVC - ok
14:25:26.0716 0x1a40  sdstor - ok
14:25:26.0718 0x1a40  seclogon - ok
14:25:26.0721 0x1a40  SENS - ok
14:25:26.0724 0x1a40  Sense - ok
14:25:26.0727 0x1a40  SensorDataService - ok
14:25:26.0729 0x1a40  SensorService - ok
14:25:26.0733 0x1a40  SensorsHIDClassDriver - ok
14:25:26.0736 0x1a40  SensrSvc - ok
14:25:26.0740 0x1a40  SerCx - ok
14:25:26.0766 0x1a40  SerCx2 - ok
14:25:26.0771 0x1a40  Serenum - ok
14:25:26.0774 0x1a40  Serial - ok
14:25:26.0777 0x1a40  sermouse - ok
14:25:26.0784 0x1a40  SessionEnv - ok
14:25:26.0787 0x1a40  sfloppy - ok
14:25:26.0790 0x1a40  SharedAccess - ok
14:25:26.0815 0x1a40  ShellHWDetection - ok
14:25:26.0818 0x1a40  shpamsvc - ok
14:25:26.0821 0x1a40  SiSRaid2 - ok
14:25:26.0823 0x1a40  SiSRaid4 - ok
14:25:26.0826 0x1a40  SkcController - ok
14:25:26.0829 0x1a40  SkypeUpdate - ok
14:25:26.0833 0x1a40  smphost - ok
14:25:26.0835 0x1a40  SmsRouter - ok
14:25:26.0840 0x1a40  SNMPTRAP - ok
14:25:26.0843 0x1a40  spaceport - ok
14:25:26.0846 0x1a40  SpbCx - ok
14:25:26.0850 0x1a40  Spooler - ok
14:25:26.0853 0x1a40  sppsvc - ok
14:25:26.0856 0x1a40  srv - ok
14:25:26.0859 0x1a40  srv2 - ok
14:25:26.0861 0x1a40  srvnet - ok
14:25:26.0864 0x1a40  SSDPSRV - ok
14:25:26.0868 0x1a40  SSPORT - ok
14:25:26.0872 0x1a40  SstpSvc - ok
14:25:26.0874 0x1a40  StateRepository - ok
14:25:26.0877 0x1a40  stexstor - ok
14:25:26.0880 0x1a40  stisvc - ok
14:25:26.0884 0x1a40  storahci - ok
14:25:26.0888 0x1a40  storflt - ok
14:25:26.0891 0x1a40  stornvme - ok
14:25:26.0894 0x1a40  storqosflt - ok
14:25:26.0897 0x1a40  StorSvc - ok
14:25:26.0900 0x1a40  storufs - ok
14:25:26.0903 0x1a40  storvsc - ok
14:25:26.0906 0x1a40  supportdriver - ok
14:25:26.0909 0x1a40  SurfaceAccessoryDevice - ok
14:25:26.0912 0x1a40  SurfaceButton - ok
14:25:26.0914 0x1a40  SurfaceCoSAR - ok
14:25:26.0919 0x1a40  SurfaceDigitizerIntegration - ok
14:25:26.0921 0x1a40  SurfaceDisplayCalibration - ok
14:25:26.0924 0x1a40  SurfaceIntegrationDriver - ok
14:25:26.0927 0x1a40  SurfacePenDriver - ok
14:25:26.0930 0x1a40  SurfacePro4TypeCoverIntegration - ok
14:25:26.0934 0x1a40  SurfaceService - ok
14:25:26.0936 0x1a40  SurfaceStorageFwUpdate - ok
14:25:26.0939 0x1a40  SurfaceSystemTelemetryDriver - ok
14:25:26.0942 0x1a40  SurfaceTouchServicingML - ok
14:25:26.0945 0x1a40  SurfaceTypeCover - ok
14:25:26.0948 0x1a40  svsvc - ok
14:25:26.0953 0x1a40  swenum - ok
14:25:26.0956 0x1a40  swprv - ok
14:25:26.0960 0x1a40  Synth3dVsc - ok
14:25:26.0964 0x1a40  SysMain - ok
14:25:26.0971 0x1a40  SystemEventsBroker - ok
14:25:26.0975 0x1a40  TabletInputService - ok
14:25:26.0978 0x1a40  TapiSrv - ok
14:25:26.0981 0x1a40  Tcpip - ok
14:25:26.0985 0x1a40  Tcpip6 - ok
14:25:27.0000 0x1a40  tcpipreg - ok
14:25:27.0006 0x1a40  tdx - ok
14:25:27.0018 0x1a40  terminpt - ok
14:25:27.0023 0x1a40  TermService - ok
14:25:27.0031 0x1a40  Themes - ok
14:25:27.0038 0x1a40  TieringEngineService - ok
14:25:27.0042 0x1a40  tiledatamodelsvc - ok
14:25:27.0057 0x1a40  TimeBrokerSvc - ok
14:25:27.0068 0x1a40  TPM - ok
14:25:27.0072 0x1a40  TrkWks - ok
14:25:27.0076 0x1a40  TrustedInstaller - ok
14:25:27.0104 0x1a40  tsusbflt - ok
14:25:27.0107 0x1a40  TsUsbGD - ok
14:25:27.0109 0x1a40  tsusbhub - ok
14:25:27.0112 0x1a40  tunnel - ok
14:25:27.0117 0x1a40  tzautoupdate - ok
14:25:27.0120 0x1a40  UASPStor - ok
14:25:27.0123 0x1a40  UcmCx0101 - ok
14:25:27.0126 0x1a40  UcmTcpciCx0101 - ok
14:25:27.0129 0x1a40  UcmUcsi - ok
14:25:27.0131 0x1a40  Ucx01000 - ok
14:25:27.0135 0x1a40  UdeCx - ok
14:25:27.0138 0x1a40  udfs - ok
14:25:27.0141 0x1a40  UEFI - ok
14:25:27.0144 0x1a40  UevAgentDriver - ok
14:25:27.0146 0x1a40  UevAgentService - ok
14:25:27.0150 0x1a40  Ufx01000 - ok
14:25:27.0153 0x1a40  UfxChipidea - ok
14:25:27.0156 0x1a40  ufxsynopsys - ok
14:25:27.0161 0x1a40  UI0Detect - ok
14:25:27.0164 0x1a40  umbus - ok
14:25:27.0168 0x1a40  UmPass - ok
14:25:27.0171 0x1a40  UmRdpService - ok
14:25:27.0174 0x1a40  UnistoreSvc - ok
14:25:27.0178 0x1a40  upnphost - ok
14:25:27.0181 0x1a40  UrsChipidea - ok
14:25:27.0185 0x1a40  UrsCx01000 - ok
14:25:27.0188 0x1a40  UrsSynopsys - ok
14:25:27.0191 0x1a40  usbccgp - ok
14:25:27.0194 0x1a40  usbcir - ok
14:25:27.0196 0x1a40  usbehci - ok
14:25:27.0200 0x1a40  usbhub - ok
14:25:27.0203 0x1a40  USBHUB3 - ok
14:25:27.0206 0x1a40  usbohci - ok
14:25:27.0209 0x1a40  usbprint - ok
14:25:27.0212 0x1a40  usbser - ok
14:25:27.0215 0x1a40  USBSTOR - ok
14:25:27.0218 0x1a40  usbuhci - ok
14:25:27.0221 0x1a40  USBXHCI - ok
14:25:27.0224 0x1a40  UserDataSvc - ok
14:25:27.0250 0x1a40  UserManager - ok
14:25:27.0253 0x1a40  UsoSvc - ok
14:25:27.0256 0x1a40  VaultSvc - ok
14:25:27.0259 0x1a40  vdrvroot - ok
14:25:27.0262 0x1a40  vds - ok
14:25:27.0266 0x1a40  VerifierExt - ok
14:25:27.0269 0x1a40  vhdmp - ok
14:25:27.0272 0x1a40  vhf - ok
14:25:27.0275 0x1a40  vmbus - ok
14:25:27.0277 0x1a40  VMBusHID - ok
14:25:27.0280 0x1a40  vmgid - ok
14:25:27.0284 0x1a40  vmicguestinterface - ok
14:25:27.0287 0x1a40  vmicheartbeat - ok
14:25:27.0290 0x1a40  vmickvpexchange - ok
14:25:27.0292 0x1a40  vmicrdv - ok
14:25:27.0295 0x1a40  vmicshutdown - ok
14:25:27.0298 0x1a40  vmictimesync - ok
14:25:27.0302 0x1a40  vmicvmsession - ok
14:25:27.0305 0x1a40  vmicvss - ok
14:25:27.0308 0x1a40  volmgr - ok
14:25:27.0311 0x1a40  volmgrx - ok
14:25:27.0314 0x1a40  volsnap - ok
14:25:27.0318 0x1a40  volume - ok
14:25:27.0321 0x1a40  vpci - ok
14:25:27.0323 0x1a40  vsmraid - ok
14:25:27.0326 0x1a40  VSS - ok
14:25:27.0329 0x1a40  VSTXRAID - ok
14:25:27.0333 0x1a40  vwifibus - ok
14:25:27.0336 0x1a40  vwififlt - ok
14:25:27.0339 0x1a40  vwifimp - ok
14:25:27.0342 0x1a40  W32Time - ok
14:25:27.0344 0x1a40  WacomPen - ok
14:25:27.0347 0x1a40  WalletService - ok
14:25:27.0351 0x1a40  wanarp - ok
14:25:27.0355 0x1a40  wanarpv6 - ok
14:25:27.0358 0x1a40  wbengine - ok
14:25:27.0361 0x1a40  WbioSrvc - ok
14:25:27.0364 0x1a40  wcifs - ok
14:25:27.0367 0x1a40  Wcmsvc - ok
14:25:27.0372 0x1a40  wcncsvc - ok
14:25:27.0375 0x1a40  wcnfs - ok
14:25:27.0378 0x1a40  WdBoot - ok
14:25:27.0381 0x1a40  Wdf01000 - ok
14:25:27.0385 0x1a40  WdFilter - ok
14:25:27.0388 0x1a40  WdiServiceHost - ok
14:25:27.0391 0x1a40  WdiSystemHost - ok
14:25:27.0393 0x1a40  wdiwifi - ok
14:25:27.0396 0x1a40  WdNisDrv - ok
14:25:27.0400 0x1a40  WdNisSvc - ok
14:25:27.0403 0x1a40  WebClient - ok
14:25:27.0407 0x1a40  Wecsvc - ok
14:25:27.0409 0x1a40  WEPHOSTSVC - ok
14:25:27.0412 0x1a40  wercplsupport - ok
14:25:27.0416 0x1a40  WerSvc - ok
14:25:27.0419 0x1a40  WFPLWFS - ok
14:25:27.0422 0x1a40  WiaRpc - ok
14:25:27.0425 0x1a40  WIMMount - ok
14:25:27.0428 0x1a40  WinDefend - ok
14:25:27.0434 0x1a40  WindowsTrustedRT - ok
14:25:27.0437 0x1a40  WindowsTrustedRTProxy - ok
14:25:27.0440 0x1a40  WinHttpAutoProxySvc - ok
14:25:27.0443 0x1a40  WinMad - ok
14:25:27.0446 0x1a40  Winmgmt - ok
14:25:27.0450 0x1a40  WinRM - ok
14:25:27.0456 0x1a40  WINUSB - ok
14:25:27.0459 0x1a40  WinVerbs - ok
14:25:27.0463 0x1a40  wisvc - ok
14:25:27.0466 0x1a40  WlanSvc - ok
14:25:27.0470 0x1a40  wlidsvc - ok
14:25:27.0473 0x1a40  WmiAcpi - ok
14:25:27.0477 0x1a40  wmiApSrv - ok
14:25:27.0481 0x1a40  WMPNetworkSvc - ok
14:25:27.0485 0x1a40  Wof - ok
14:25:27.0489 0x1a40  workfolderssvc - ok
14:25:27.0492 0x1a40  WPDBusEnum - ok
14:25:27.0494 0x1a40  WpdUpFltr - ok
14:25:27.0497 0x1a40  WpnService - ok
14:25:27.0502 0x1a40  WpnUserService - ok
14:25:27.0529 0x1a40  ws2ifsl - ok
14:25:27.0532 0x1a40  wscsvc - ok
14:25:27.0535 0x1a40  WSearch - ok
14:25:27.0539 0x1a40  wuauserv - ok
14:25:27.0542 0x1a40  WudfPf - ok
14:25:27.0545 0x1a40  WUDFRd - ok
14:25:27.0548 0x1a40  wudfsvc - ok
14:25:27.0552 0x1a40  WUDFWpdFs - ok
14:25:27.0556 0x1a40  WwanSvc - ok
14:25:27.0558 0x1a40  XblAuthManager - ok
14:25:27.0562 0x1a40  XblGameSave - ok
14:25:27.0564 0x1a40  xboxgip - ok
14:25:27.0568 0x1a40  XboxNetApiSvc - ok
14:25:27.0571 0x1a40  xinputhid - ok
14:25:27.0574 0x1a40  ================ Scan global ===============================
14:25:27.0575 0x1a40  [ Global ] - ok
14:25:27.0576 0x1a40  ================ Scan MBR ==================================
14:25:27.0577 0x1a40  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
14:25:27.0621 0x1a40  \Device\Harddisk0\DR0 - ok
14:25:29.0117 0x1a40  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
14:25:29.0537 0x1a40  \Device\Harddisk1\DR1 - ok
14:25:29.0538 0x1a40  ================ Scan VBR ==================================
14:25:29.0565 0x1a40  [ 62C3A488D27B78F45883CB3BF267A61F ] \Device\Harddisk0\DR0\Partition1
14:25:29.0566 0x1a40  \Device\Harddisk0\DR0\Partition1 - ok
14:25:29.0570 0x1a40  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition2
14:25:29.0570 0x1a40  \Device\Harddisk0\DR0\Partition2 - ok
14:25:29.0573 0x1a40  [ D04098786D03C42F16D7246136B95B6B ] \Device\Harddisk0\DR0\Partition3
14:25:29.0574 0x1a40  \Device\Harddisk0\DR0\Partition3 - ok
14:25:29.0576 0x1a40  [ A6AF1BB7AA512DA5DAB40724B02355EE ] \Device\Harddisk0\DR0\Partition4
14:25:29.0577 0x1a40  \Device\Harddisk0\DR0\Partition4 - ok
14:25:29.0584 0x1a40  [ 82679DD73CB0CA8D5A482C6813FE93D0 ] \Device\Harddisk1\DR1\Partition1
14:25:29.0585 0x1a40  \Device\Harddisk1\DR1\Partition1 - ok
14:25:29.0585 0x1a40  ================ Scan generic autorun ======================
14:25:29.0585 0x1a40  FileOpenBroker - ok
14:25:29.0587 0x1a40  GlobalProtect - ok
14:25:29.0588 0x1a40  SurfaceService.exe - ok
14:25:29.0589 0x1a40  Avira SystrayStartTrigger - ok
14:25:29.0590 0x1a40  avgnt - ok
14:25:29.0592 0x1a40  Samsung PanelMgr - ok
14:25:29.0593 0x1a40  OneDriveSetup - ok
14:25:29.0594 0x1a40  OneDriveSetup - ok
14:25:29.0595 0x1a40  OneDrive - ok
14:25:29.0596 0x1a40  f.lux - ok
14:25:29.0597 0x1a40  Skype - ok
14:25:29.0599 0x1a40  Spotify Web Helper - ok
14:25:29.0601 0x1a40  Spotify - ok
14:25:29.0602 0x1a40  CCleaner Monitoring - ok
14:25:29.0662 0x1a40  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\wsctool.exe ( 15.0.23.58 ), 0x41000 ( enabled : updated )
14:25:29.0667 0x1a40  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
14:25:29.0698 0x1a40  Win FW state via NFP2: enabled ( trusted )
14:25:29.0903 0x1a40  ============================================================
14:25:29.0903 0x1a40  Scan finished
14:25:29.0903 0x1a40  ============================================================
14:25:29.0919 0x0140  Detected object count: 0
14:25:29.0919 0x0140  Actual detected object count: 0