|
Plagegeister aller Art und deren Bekämpfung: Starke Lags/Spikes seit ca. 1-2 WochenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.11.2016, 18:53 | #1 |
| Starke Lags/Spikes seit ca. 1-2 Wochen Hallo, ich mal wieder. Habe wieder Performanceeinbrüche und wäre dankbar, wenn noch mal jemand einen Blick auf mein System werfen könnte. Beim letzten Mal wurde ja nichts gefunden, danach bin ich, trotz der Umständlichkeit in meiner Wohnsituation, von WLAN auf Kabel umgestiegen und das Problem war gelöst. Dass es sich jetzt wieder verschlechtert hat, lässt mich vermuten, dass ich mir in den letzten Wochen was eingefangen habe. LG |
27.11.2016, 14:12 | #2 |
/// TB-Ausbilder | Starke Lags/Spikes seit ca. 1-2 WochenMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags: So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Zur ersten Analyse bitte FRST und TDSS-Killer ausführen: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt 2 Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
27.11.2016, 15:10 | #3 |
| Starke Lags/Spikes seit ca. 1-2 Wochen Hallo, Matthias, danke dir!
__________________FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016 durchgeführt von MG (Administrator) auf MG-PC (27-11-2016 15:06:31) Gestartet von C:\Users\MG\Desktop Geladene Profile: MG (Verfügbare Profile: MG) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 8 (Standard-Browser: "C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe" -- "%1") Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe () C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5296\Agent.exe (Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net.exe () C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net Helper.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe (Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6626696 2016-07-18] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-09-29] (Realtek Semiconductor) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-23] (Intel Corporation) HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2014-11-21] (AVM Berlin) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\MountPoints2: {94f3315e-866a-11e6-bea1-d8cb8ac229f5} - F:\pushinst.exe Startup: C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe [2015-06-26] () BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{3F6F289A-565B-4F81-9E9C-395B21529642}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{6502409B-1ABC-4918-8B41-A8FC86081581}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) FireFox: ======== FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S4 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2071224 2016-09-09] (Comodo) S4 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [392168 2016-08-31] (Digital Wave Ltd.) R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] () S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation) S3 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2227152 2016-08-17] (Micro-Star INT'L CO., LTD.) S3 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1740760 2014-09-03] (Safer-Networking Ltd.) S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [117400 2016-06-08] () S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-03-25] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2014-11-21] (AVM Berlin) S3 fwlanusb5_nv2; C:\Windows\System32\DRIVERS\fwlanusb5_nv2.sys [1322824 2014-11-21] (AVM GmbH) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-11-10] (Intel Corporation) R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] () S3 MSICDSetup; \??\D:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-27 15:06 - 2016-11-27 15:06 - 00008807 _____ C:\Users\MG\Desktop\FRST.txt 2016-11-27 15:06 - 2016-11-27 15:06 - 00000000 ____D C:\FRST 2016-11-27 15:05 - 2016-11-27 15:05 - 02412032 _____ (Farbar) C:\Users\MG\Desktop\FRST64.exe 2016-11-18 18:43 - 2016-11-17 23:00 - 00512263 _____ C:\Users\MG\Desktop\min 16 till end.StormReplay ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-27 15:04 - 2016-09-30 00:37 - 00000000 ____D C:\Users\MG\AppData\Local\Battle.net 2016-11-27 12:50 - 2016-09-30 00:34 - 00000000 ____D C:\Program Files (x86)\Battle.net 2016-11-27 12:50 - 2009-07-14 05:45 - 00022176 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-11-27 12:50 - 2009-07-14 05:45 - 00022176 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-11-27 12:47 - 2011-04-12 08:43 - 00672604 _____ C:\Windows\system32\perfh007.dat 2016-11-27 12:47 - 2011-04-12 08:43 - 00138300 _____ C:\Windows\system32\perfc007.dat 2016-11-27 12:47 - 2009-07-14 06:13 - 01550316 _____ C:\Windows\system32\PerfStringBackup.INI 2016-11-27 12:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-11-27 12:43 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-11-27 02:06 - 2016-09-29 18:57 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2016-11-27 01:26 - 2016-10-02 19:44 - 00000000 ____D C:\Users\MG\AppData\Roaming\vlc 2016-11-27 01:22 - 2016-09-29 18:51 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-11-27 00:00 - 2016-09-29 20:39 - 00000000 ____D C:\Users\MG\Desktop\MP3 2016-11-26 23:56 - 2016-10-03 19:15 - 00002799 _____ C:\Users\MG\Desktop\Neues Textdokument.txt 2016-11-26 23:55 - 2016-09-29 20:57 - 00000000 ____D C:\Users\MG\AppData\Roaming\DVDVideoSoft 2016-11-26 21:22 - 2016-09-30 06:49 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm 2016-11-26 14:17 - 2016-09-29 22:05 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater 2016-11-26 14:17 - 2016-09-29 18:36 - 00000000 ____D C:\Program Files\AMD 2016-11-26 14:16 - 2016-09-29 19:36 - 00000000 ____D C:\AMD 2016-11-26 14:14 - 2016-09-29 18:51 - 00000000 ____D C:\Program Files (x86)\AMD 2016-11-22 19:56 - 2016-09-30 06:49 - 00000000 ____D C:\Users\MG\Documents\Heroes of the Storm 2016-11-13 11:12 - 2016-09-29 21:35 - 00000000 ____D C:\Users\MG\AppData\Roaming\TS3Client 2016-11-13 11:12 - 2016-09-29 21:17 - 00000000 ____D C:\Program Files (x86)\Steam 2016-11-12 19:34 - 2016-09-29 18:51 - 00003928 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2016-11-12 19:34 - 2016-09-29 18:50 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-11-12 19:34 - 2016-09-29 18:50 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-11-12 19:34 - 2016-09-29 18:50 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2016-11-12 19:34 - 2016-09-29 18:50 - 00000000 ____D C:\Windows\system32\Macromed 2016-11-12 19:33 - 2016-09-29 20:00 - 00000000 ____D C:\Users\MG\AppData\Local\Adobe 2016-11-10 19:34 - 2016-09-30 11:04 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2016-11-09 20:56 - 2016-09-30 00:38 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2016-11-09 00:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2016-11-08 20:42 - 2016-09-29 20:20 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-11-07 18:26 - 2016-09-30 19:47 - 00000000 ____D C:\Users\MG\AppData\Local\ElevatedDiagnostics 2016-11-05 20:00 - 2016-09-29 20:20 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-09-29 19:15 - 2016-10-27 20:13 - 0007603 _____ () C:\Users\MG\AppData\Local\Resmon.ResmonCfg 2016-09-29 18:23 - 2016-09-29 18:23 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-11-14 18:37 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016 durchgeführt von MG (27-11-2016 15:06:52) Gestartet von C:\Users\MG\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2016-09-29 16:56:43) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1573683447-1232033385-2431656724-500 - Administrator - Disabled) Gast (S-1-5-21-1573683447-1232033385-2431656724-501 - Limited - Disabled) MG (S-1-5-21-1573683447-1232033385-2431656724-1000 - Administrator - Enabled) => C:\Users\MG ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Spybot - Search and Destroy (Enabled - Out of date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) . . . (Version: 2.1.28.3 - Intel) Hidden . . . (x32 Version: 2.6.1.4 - Intel) Hidden Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated) Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) Application Profiles (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.00 - AVM Berlin) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Catalyst Control Center Next Localization BR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Chromodo (HKLM-x32\...\Chromodo) (Version: 52.15.25.664 - Comodo) H1Z1: Just Survive (HKLM\...\Steam App 295110) (Version: - Daybreak Game Company) H1Z1: King of the Kill (HKLM\...\Steam App 433850) (Version: - Daybreak Game Company) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.31.1000 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden Intel® Driver Update Utility (HKLM-x32\...\{fe2eebd3-ee15-4538-bb19-b627e3f2a911}) (Version: 2.6.1.4 - Intel) Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.1.023 - MSI) OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation) Path of Exile (HKLM-x32\...\{1d6b00b2-5f7d-43c8-8987-212632193cd7}) (Version: 2.4.0.64312 - Grinding Gear Games) Path of Exile (x32 Version: 2.4.0.64312 - Grinding Gear Games) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7910 - Realtek Semiconductor Corp.) Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH) VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.8 - MSI) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {15F11A74-1C0B-4B57-8976-96A7EAF08506} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe [2016-11-12] (Adobe Systems Incorporated) Task: {25164A01-FC94-4C4E-A53E-E6AD5D63F7C9} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-27] (Advanced Micro Devices, Inc.) Task: {38B504F0-3EF3-4D68-8A05-711D50E1112A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated) Task: {521D8D38-94B1-439F-A873-B2025542B0DD} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {70B3FE7C-E517-40BE-AE2C-56F15F50B8F5} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation) Task: {762B451B-F4FA-48D0-AE1A-479435182DCF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.) Task: {CEB096E1-1DBA-41F5-9B04-098D7CB50006} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.) Task: {DB46B6C3-71D8-413B-A744-87A217B97A7F} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs" (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-06-08 17:04 - 2016-06-08 17:04 - 00117400 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe 2016-06-08 17:04 - 2016-06-08 17:04 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll 2016-06-08 17:04 - 2016-06-08 17:04 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll 2016-06-08 17:04 - 2016-06-08 17:04 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll 2016-06-07 18:56 - 2016-06-07 18:56 - 00019176 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll 2016-06-07 18:56 - 2016-06-07 18:56 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll 2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-09-29 20:33 - 2015-06-26 23:14 - 01201664 _____ () C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe 2016-09-29 21:37 - 2016-06-08 17:07 - 00458904 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe 2016-09-29 21:37 - 2016-06-08 17:18 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll 2016-09-29 21:37 - 2016-06-08 17:17 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll 2016-09-29 21:37 - 2016-06-08 17:12 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe 2016-09-29 21:37 - 2016-06-08 17:15 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll 2016-09-29 21:37 - 2016-06-08 17:16 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll 2016-09-29 21:37 - 2016-06-08 17:16 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll 2016-09-29 21:37 - 2016-06-08 17:16 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll 2016-09-29 21:37 - 2016-06-08 17:17 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll 2016-09-29 21:37 - 2016-06-08 17:17 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll 2016-09-29 21:37 - 2016-06-08 17:16 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll 2016-09-29 21:37 - 2016-06-08 17:15 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 01484776 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net Helper.exe 2016-09-29 19:57 - 2014-05-13 11:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2016-09-29 19:57 - 2014-05-13 11:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2016-09-29 19:57 - 2014-05-13 11:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2016-09-29 19:57 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2016-09-29 19:57 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-11-10 11:12 - 2014-11-10 11:12 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 00540336 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\ortp.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 37247976 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libcef.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 06402560 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\battle.net.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 00133632 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libEGL.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 03384832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libGLESv2.dll 2016-11-09 18:15 - 2016-11-09 18:15 - 00990696 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\ffmpegsumo.dll 2015-12-02 17:58 - 2015-11-16 19:32 - 00919040 _____ () C:\Windows\mod_frst.exe ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 7914 mehr Seiten. IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123simsen.com -> www.123simsen.com Da befinden sich 7914 mehr Seiten. ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 03:34 - 2016-11-23 00:30 - 00453264 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123haustiereundmehr.com 127.0.0.1 123moviedownload.com 127.0.0.1 www.123moviedownload.com Da befinden sich 15554 zusätzliche Einträge. ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == MSCONFIG\startupreg: Live Update => C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{2B147BBB-7D6F-4F5D-8099-34B96BDF6C76}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{0FF345E9-E9DF-4957-9829-6E5B1EFBD6B9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{FA8D75CB-7754-4E7E-ADBB-AC64C9DA3793}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{81C1B12D-D5F0-4353-BD35-3D8615483B42}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{DF280AE6-BC46-4810-BE29-E688CB9FB983}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{95962549-0C98-4470-B36C-131608140732}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe FirewallRules: [{B933A1FE-10E5-4CDD-8488-62B53E0D92B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe FirewallRules: [TCP Query User{02EA8D3B-5723-4EE7-968D-788C3CC0F85B}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe FirewallRules: [UDP Query User{1A733FF8-E0F6-4706-B04B-3A0C858B9C43}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe FirewallRules: [{B2EB4091-50E5-4F13-B706-960B68744ABC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe FirewallRules: [{7388A04C-AFA7-4E1A-8473-4A70255A032D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe FirewallRules: [TCP Query User{81B82AEF-2436-4E9B-84DD-8B4D77ABBE2C}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{0E5764A8-D294-4B4D-8829-4C8E5D462EF5}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{78364E17-9CA7-408E-9829-7C2157B6A5D1}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe FirewallRules: [UDP Query User{55EE13A6-58DB-49D6-AD86-2D45F1C47ACB}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe FirewallRules: [TCP Query User{202CCA57-6078-4FCB-AFF7-EFA4BB38E1A6}C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe FirewallRules: [UDP Query User{335A4750-9273-4A8B-B012-D7E37A0BA98A}C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe FirewallRules: [TCP Query User{19B73C30-C32A-4020-A0A9-35A2DE73DC4C}C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe FirewallRules: [UDP Query User{6E5E227C-CA2B-438F-B466-50BDB37FE248}C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe FirewallRules: [TCP Query User{5E7FE3F3-DA96-402F-8A69-166132F5B159}C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe FirewallRules: [UDP Query User{D340EDB7-54EE-4312-AF37-70AC0A8E80BA}C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe FirewallRules: [TCP Query User{82B7BB73-9394-468F-B497-B73C4AD21841}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe FirewallRules: [UDP Query User{CBDE797C-FCFD-4D42-982F-C752D60D75DB}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe FirewallRules: [TCP Query User{8EFDF018-C569-467E-AC4C-2D271DF19863}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe FirewallRules: [UDP Query User{5BEEE6E2-A356-4C9B-ACD4-F30F70A795C1}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Wiederherstellungspunkte ========================= 21-10-2016 17:08:34 Ende der Bereinigung 31-10-2016 13:32:14 Geplanter Prüfpunkt 07-11-2016 18:26:40 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (11/27/2016 01:37:02 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (11/27/2016 01:31:05 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (11/27/2016 01:31:02 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (11/27/2016 01:28:58 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (11/27/2016 12:43:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (11/26/2016 02:18:02 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (11/26/2016 12:20:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (11/26/2016 10:11:40 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (11/25/2016 11:43:03 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist. Error: (11/25/2016 05:41:14 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Systemfehler: ============= Error: (11/23/2016 07:11:22 AM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: Der Dienst Energy Server Service WILLAMETTE konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (11/23/2016 07:11:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "User Energy Server Service WILLAMETTE" wurde mit folgendem Fehler beendet: %%268439640 Error: (11/19/2016 11:01:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden. Error: (11/18/2016 04:45:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden. Error: (11/18/2016 04:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden. Error: (11/13/2016 08:46:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (11/13/2016 08:46:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (11/13/2016 08:46:21 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (11/13/2016 08:46:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (11/12/2016 04:46:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz Prozentuale Nutzung des RAM: 29% Installierter physikalischer RAM: 8136.03 MB Verfügbarer physikalischer RAM: 5706.36 MB Summe virtueller Speicher: 16270.24 MB Verfügbarer virtueller Speicher: 13616.16 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:931.29 GB) (Free:760.62 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 994A7345) Partition: GPT. ==================== Ende von Addition.txt ============================ |
27.11.2016, 15:14 | #4 |
| Starke Lags/Spikes seit ca. 1-2 Wochen TDSS-Killer: Code:
ATTFilter 15:11:01.0781 0x092c TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01 15:11:01.0781 0x092c UEFI system 15:11:06.0319 0x092c ============================================================ 15:11:06.0319 0x092c Current date / time: 2016/11/27 15:11:06.0319 15:11:06.0320 0x092c SystemInfo: 15:11:06.0320 0x092c 15:11:06.0320 0x092c OS Version: 6.1.7601 ServicePack: 1.0 15:11:06.0320 0x092c Product type: Workstation 15:11:06.0320 0x092c ComputerName: MG-PC 15:11:06.0320 0x092c UserName: MG 15:11:06.0320 0x092c Windows directory: C:\Windows 15:11:06.0320 0x092c System windows directory: C:\Windows 15:11:06.0320 0x092c Running under WOW64 15:11:06.0320 0x092c Processor architecture: Intel x64 15:11:06.0320 0x092c Number of processors: 4 15:11:06.0320 0x092c Page size: 0x1000 15:11:06.0320 0x092c Boot type: Normal boot 15:11:06.0320 0x092c CodeIntegrityOptions = 0x00000001 15:11:06.0320 0x092c ============================================================ 15:11:08.0205 0x092c KLMD registered as C:\Windows\system32\drivers\56588892.sys 15:11:08.0205 0x092c KLMD ARK init status: drvProperties = 0x7FF00, osBuild = 7601.23403, osProperties = 0x1 15:11:08.0331 0x092c System UUID: {0FC2DCC7-0577-6C02-FFA0-1523BC9E523D} 15:11:08.0643 0x092c Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:11:08.0674 0x092c ============================================================ 15:11:08.0674 0x092c \Device\Harddisk0\DR0: 15:11:08.0696 0x092c GPT partitions: 15:11:08.0697 0x092c \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {27CDAD20-EA50-4517-AA54-7BC6E0C7EE81}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000 15:11:08.0697 0x092c \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {A0CE8F85-C6FD-4A94-8C9A-16E433214E18}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000 15:11:08.0697 0x092c \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {0B12D4E9-6BD3-4A32-A5C9-A5738445ED03}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x74694000 15:11:08.0697 0x092c MBR partitions: 15:11:08.0697 0x092c ============================================================ 15:11:08.0766 0x092c C: <-> \Device\Harddisk0\DR0\Partition3 15:11:08.0766 0x092c ============================================================ 15:11:08.0766 0x092c Initialize success 15:11:08.0766 0x092c ============================================================ 15:12:21.0810 0x12e4 ============================================================ 15:12:21.0810 0x12e4 Scan started 15:12:21.0810 0x12e4 Mode: Manual; SigCheck; TDLFS; 15:12:21.0810 0x12e4 ============================================================ 15:12:21.0810 0x12e4 KSN ping started 15:12:35.0632 0x12e4 KSN ping finished: true 15:12:36.0279 0x12e4 ================ Scan system memory ======================== 15:12:36.0279 0x12e4 System memory - ok 15:12:36.0279 0x12e4 ================ Scan services ============================= 15:12:36.0382 0x12e4 [ E96ECC2315E4F7B42973CEAADC727C18, 8C8644580C8FBF7A772C20CC2DBBD1DE854A3CEF8ECFB986FA98577ED3540A61 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 15:12:36.0420 0x12e4 1394ohci - ok 15:12:36.0439 0x12e4 [ 6ECB3791368947C1E3588062325CCBD8, AB01591F89B4E16795D8F0FE45381BD9F2519F544DDEC514A82F61DBCAC4D6E5 ] ACPI C:\Windows\system32\drivers\ACPI.sys 15:12:36.0449 0x12e4 ACPI - ok 15:12:36.0474 0x12e4 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 15:12:36.0491 0x12e4 AcpiPmi - ok 15:12:36.0550 0x12e4 [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 15:12:36.0556 0x12e4 AdobeARMservice - ok 15:12:36.0579 0x12e4 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 15:12:36.0591 0x12e4 adp94xx - ok 15:12:36.0609 0x12e4 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys 15:12:36.0618 0x12e4 adpahci - ok 15:12:36.0629 0x12e4 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 15:12:36.0636 0x12e4 adpu320 - ok 15:12:36.0660 0x12e4 [ DC3A5D287DC3213E01B9F401D025D04E, 59963E62C9B2179BC64602269B624A51944B48936F5D49F61FB9FF73D0405FD9 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 15:12:36.0687 0x12e4 AeLookupSvc - ok 15:12:36.0722 0x12e4 [ 6621364405B22FB2C642CDB6B6DE751C, D76C2B242BDB7314177A385099246916D7C6FA02B343253A171ACC9F24F3ED91 ] AFD C:\Windows\system32\drivers\afd.sys 15:12:36.0736 0x12e4 AFD - ok 15:12:36.0763 0x12e4 [ 2823C845E4108CD74EC035E8ADB32A2B, B42CE70761F524B94BE4D2812DB3CD5486830346FFEBCA69D6D7AD97B8EEB333 ] agp440 C:\Windows\system32\drivers\agp440.sys 15:12:36.0769 0x12e4 agp440 - ok 15:12:36.0792 0x12e4 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe 15:12:36.0800 0x12e4 ALG - ok 15:12:36.0828 0x12e4 [ 56F1EA3065D386173EA976E7C8403E07, 9EE711A32D27B167F25FF3D2EF996431BB40815B48848F41C00FA9E80AD46A97 ] aliide C:\Windows\system32\drivers\aliide.sys 15:12:36.0833 0x12e4 aliide - ok 15:12:36.0875 0x12e4 [ 102E0A294D4A2C4BB53210F4AD246A4D, B9816220CACBBD0FEB10E09FC3F46E6C376DDB6823ADACE848A9A0B2F238E6D5 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 15:12:36.0905 0x12e4 AMD External Events Utility - ok 15:12:36.0907 0x12e4 [ 9B66BA4D578B18A3A02607A49A46ED15, 8DB7004A1401694D37C81D060C7B6CC1A72ACB25204CF9A25157A355D9955D0E ] amdide C:\Windows\system32\drivers\amdide.sys 15:12:36.0912 0x12e4 amdide - ok 15:12:36.0938 0x12e4 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 15:12:36.0944 0x12e4 AmdK8 - ok 15:12:36.0954 0x12e4 amdkmdag - ok 15:12:36.0974 0x12e4 [ B283403E7717FB0D41AD962C643FB7AC, D565C26ACF487B31961515330645100CD0BC77EA1C305E2012F1068146B232A5 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 15:12:36.0989 0x12e4 amdkmdap - ok 15:12:37.0002 0x12e4 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys 15:12:37.0009 0x12e4 AmdPPM - ok 15:12:37.0030 0x12e4 [ AA8663311D3E7B711710AFAEE1825A2F, E75CD6FD4E03B5AA303CE950406D3F8C577A9EEDA866CE8EC1F8F065A1D6D0B2 ] amdsata C:\Windows\system32\drivers\amdsata.sys 15:12:37.0036 0x12e4 amdsata - ok 15:12:37.0044 0x12e4 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 15:12:37.0051 0x12e4 amdsbs - ok 15:12:37.0064 0x12e4 [ 0B5BFDCF705BF9F462B151FC5BE428B8, 12755113A1022B10DB320D53AB2D6ACD3D529872EB937AB8E27423449AA5B470 ] amdxata C:\Windows\system32\drivers\amdxata.sys 15:12:37.0069 0x12e4 amdxata - ok 15:12:37.0104 0x12e4 [ 62D799D2FDE093DD6FD8D5696A6280EB, F859B9007B8D3041095DBD011F8F4791DA480C9EDBDB1FE91170D4ECCFA41661 ] AppID C:\Windows\system32\drivers\appid.sys 15:12:37.0111 0x12e4 AppID - ok 15:12:37.0139 0x12e4 [ F47AB7CFD2D7C409B2718A9256072FA4, 7FA180A6FB1C8254FB648496B655846EB7391194FCEBD4726925864BB712C8A2 ] AppIDSvc C:\Windows\System32\appidsvc.dll 15:12:37.0146 0x12e4 AppIDSvc - ok 15:12:37.0167 0x12e4 [ 00D1796D9D1A93908E7B6CD8F8D82CCF, CB3CD41F7C00D5483BF9B5AFBDEF33D1CE4B6BFA177754CD0CB47B45D6C74416 ] Appinfo C:\Windows\System32\appinfo.dll 15:12:37.0175 0x12e4 Appinfo - ok 15:12:37.0201 0x12e4 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys 15:12:37.0207 0x12e4 arc - ok 15:12:37.0213 0x12e4 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys 15:12:37.0219 0x12e4 arcsas - ok 15:12:37.0287 0x12e4 [ 108FB6DDB69E537A2EA53F425363FAE5, B12A9F5338D39805E08A44A335FF7AA77F2266F535A2F5C8412CC746C75E5B1D ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 15:12:37.0294 0x12e4 aspnet_state - ok 15:12:37.0317 0x12e4 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 15:12:37.0335 0x12e4 AsyncMac - ok 15:12:37.0349 0x12e4 [ C8AA50005E6461D5C2C247DBABBF2008, AD8A3FFCE945E8B9D4A3AECC0FFD6FC0484828502A902712E65F133CB54921E7 ] atapi C:\Windows\system32\drivers\atapi.sys 15:12:37.0354 0x12e4 atapi - ok 15:12:37.0385 0x12e4 [ F9DB31BC5CD3700D37DB136BA56E5E9D, 9AB7421975500EE7FE583CCF86914F94E697606A9199DC4F27D5609554C5D3F7 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 15:12:37.0392 0x12e4 AtiHDAudioService - ok 15:12:37.0432 0x12e4 [ 6C6372713030936C2DC7E8992C851467, F5AFE4531D4955A6DEAD9B99EC4A379888A8989ED34E5AC20A7F301C7BECE7F3 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 15:12:37.0448 0x12e4 AudioEndpointBuilder - ok 15:12:37.0459 0x12e4 [ 6C6372713030936C2DC7E8992C851467, F5AFE4531D4955A6DEAD9B99EC4A379888A8989ED34E5AC20A7F301C7BECE7F3 ] AudioSrv C:\Windows\System32\Audiosrv.dll 15:12:37.0475 0x12e4 AudioSrv - ok 15:12:37.0501 0x12e4 [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject C:\Windows\system32\drivers\avmeject.sys 15:12:37.0508 0x12e4 avmeject - ok 15:12:37.0538 0x12e4 [ D3AD54B05D8BA4535D3361F672F272C3, 29627C98475D062A836469EF1429233E2756B64B5809AD39530C648C73CABF3F ] AxInstSV C:\Windows\System32\AxInstSV.dll 15:12:37.0546 0x12e4 AxInstSV - ok 15:12:37.0582 0x12e4 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 15:12:37.0594 0x12e4 b06bdrv - ok 15:12:37.0634 0x12e4 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 15:12:37.0643 0x12e4 b57nd60a - ok 15:12:37.0664 0x12e4 [ A121235D24010DCACE05F4907ACF0B26, 4F5F048A30F996B55F62CAAEB553837CC6E3FD4E1093DBADCA9E96E87A2B2C45 ] BDESVC C:\Windows\System32\bdesvc.dll 15:12:37.0671 0x12e4 BDESVC - ok 15:12:37.0699 0x12e4 [ B688235B47E8AC299B346692F736A562, C6981AC67C680D2B95B6509D753163D94413261A7931FD60CCAC4F43F28BB9A4 ] Beep C:\Windows\system32\drivers\Beep.sys 15:12:37.0705 0x12e4 Beep - ok 15:12:37.0745 0x12e4 [ 3B192A21A7F995B9181EA6815466D6F9, 4CBB492402FA424A201244C7660179C689E831F923AF263BCF2348D5F805D975 ] BFE C:\Windows\System32\bfe.dll 15:12:37.0763 0x12e4 BFE - ok 15:12:37.0798 0x12e4 [ B01E5A72DE3A2B3DC97BA042F90288DF, 33EC152C16E15371DB17AA276C4C2D1E136D57232EA86EA039032561E3C45237 ] BITS C:\Windows\System32\qmgr.dll 15:12:37.0819 0x12e4 BITS - ok 15:12:37.0853 0x12e4 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 15:12:37.0859 0x12e4 blbdrive - ok 15:12:37.0867 0x12e4 [ 2256F9C53417855F4AB2BD2D604FEDD2, A834B4E1EB87D44A63F2EA97193B1518C65F15B9FD061A192BE522686F0291F2 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 15:12:37.0876 0x12e4 bowser - ok 15:12:37.0892 0x12e4 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 15:12:37.0899 0x12e4 BrFiltLo - ok 15:12:37.0906 0x12e4 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 15:12:37.0913 0x12e4 BrFiltUp - ok 15:12:37.0996 0x12e4 [ 50CD4AB9E87E9A55A816ACD7FB5740B7, 6816E87FBAA1F43611C9DB822F8F105CACC1A1E9A995D0301B921F8C01D6328E ] Browser C:\Windows\System32\browser.dll 15:12:38.0006 0x12e4 Browser - ok 15:12:38.0023 0x12e4 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys 15:12:38.0033 0x12e4 Brserid - ok 15:12:38.0055 0x12e4 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 15:12:38.0063 0x12e4 BrSerWdm - ok 15:12:38.0071 0x12e4 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 15:12:38.0078 0x12e4 BrUsbMdm - ok 15:12:38.0085 0x12e4 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 15:12:38.0091 0x12e4 BrUsbSer - ok 15:12:38.0112 0x12e4 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 15:12:38.0120 0x12e4 BTHMODEM - ok 15:12:38.0151 0x12e4 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll 15:12:38.0170 0x12e4 bthserv - ok 15:12:38.0183 0x12e4 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 15:12:38.0202 0x12e4 cdfs - ok 15:12:38.0223 0x12e4 [ 7200A15FCDDECA736E97D2815A32A54F, 2696A042DFFEFAFBBA57C6464CECF6F2944CABCD70ECF09024347AD4EE12F597 ] cdrom C:\Windows\system32\drivers\cdrom.sys 15:12:38.0231 0x12e4 cdrom - ok 15:12:38.0250 0x12e4 [ E37B315C170C8DE43592F416264A6C31, 41109BB6A3681763AB43F9BA8FDA58C1ECBEAD8258B5FF65F95AFA072468984A ] CertPropSvc C:\Windows\System32\certprop.dll 15:12:38.0257 0x12e4 CertPropSvc - ok 15:12:38.0332 0x12e4 [ 5C4A22156DB5EA87B44B2C3C9605DB09, 8C7B2D639E58485619C9B7BD2D68D6A58CDD9BEE1981193A3A834AA0E0670A35 ] ChromodoUpdater C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe 15:12:38.0366 0x12e4 ChromodoUpdater - ok 15:12:38.0398 0x12e4 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys 15:12:38.0405 0x12e4 circlass - ok 15:12:38.0430 0x12e4 [ 4BC058AF1AA60D540D216DF3EB26F2C9, B2BF0992FC8ED6F0FE2AD02E34FCB1BA0E10038D79E8A7D4C06238191004D415 ] CLFS C:\Windows\system32\CLFS.sys 15:12:38.0439 0x12e4 CLFS - ok 15:12:38.0477 0x12e4 [ 382F277620C6C9FD8B9EED8BB658EBCF, 4414EB13A6C32D05BCD10088AD00E9D77FA697AB89434BF4B00F1FC4CC11FD1E ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 15:12:38.0483 0x12e4 clr_optimization_v2.0.50727_32 - ok 15:12:38.0504 0x12e4 [ A465B5783694F4DDBAED960293884713, 5518FA470C8D9C74E9E6DFF4A8EFFDBBA1DF9F2820E550348B91081B9E9032EE ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 15:12:38.0510 0x12e4 clr_optimization_v2.0.50727_64 - ok 15:12:38.0573 0x12e4 [ 6D7C8A951AF6AD6835C029B3CB88D333, 66F3D79887B2449B4C6912D1A258D1A96056888F51A8AA24FEDF37942AD5BDBB ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 15:12:38.0581 0x12e4 clr_optimization_v4.0.30319_32 - ok 15:12:38.0592 0x12e4 [ 86329C35FF23CFEF0FB6C0023BA06BCE, D915CE7AD564F97A1C3B047D5248B7EF67ADDC59687FBC90F1776C21DAA0D3FD ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 15:12:38.0603 0x12e4 clr_optimization_v4.0.30319_64 - ok 15:12:38.0620 0x12e4 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 15:12:38.0626 0x12e4 CmBatt - ok 15:12:38.0645 0x12e4 [ 4B47BBF1744551C2BE1469DAA66C1038, 6B70381FD0602C3A830026ED3CF10496700FD73098019EF51E6C22E95A08ABF1 ] cmdide C:\Windows\system32\drivers\cmdide.sys 15:12:38.0650 0x12e4 cmdide - ok 15:12:38.0684 0x12e4 [ CA3FB5A6B626D8A00A89E049CF95954E, CD5E3E40972513195108BA46CEC1D0AEA6B09A67EEBDD17EB759BD1729B07C06 ] CNG C:\Windows\system32\Drivers\cng.sys 15:12:38.0699 0x12e4 CNG - ok 15:12:38.0715 0x12e4 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 15:12:38.0720 0x12e4 Compbatt - ok 15:12:38.0728 0x12e4 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys 15:12:38.0735 0x12e4 CompositeBus - ok 15:12:38.0737 0x12e4 COMSysApp - ok 15:12:38.0749 0x12e4 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 15:12:38.0754 0x12e4 crcdisk - ok 15:12:38.0771 0x12e4 [ 11DD823AAB4CE0E55D96BD3102BEB92B, 596C74FF16C391816513D901D30BB10F3978A970B304389E904CBE87F746BA02 ] CryptSvc C:\Windows\system32\cryptsvc.dll 15:12:38.0782 0x12e4 CryptSvc - ok 15:12:38.0802 0x12e4 [ 4B1099E362ADAF9A4FA9B06D76294349, 163B466029223827163D3CC3561CBEC0C2046F34C86BEA1461343E315471FBF4 ] DcomLaunch C:\Windows\system32\rpcss.dll 15:12:38.0818 0x12e4 DcomLaunch - ok 15:12:38.0836 0x12e4 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll 15:12:38.0858 0x12e4 defragsvc - ok 15:12:38.0876 0x12e4 [ CD7D1655EDCC30BDD5A8B4D717A3E40E, 220B36642A4898834DC7192A026BF6125D0A59BD52590B844CEFB5B953B23277 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 15:12:38.0885 0x12e4 DfsC - ok 15:12:38.0921 0x12e4 [ 85B0455CB0DA3F8D48EA80CA87AF4BAF, E6A830E0F5A6DA0428A51DCE4C3B7BC654485E304913319263CEFC2D7E38D68D ] Dhcp C:\Windows\system32\dhcpcore.dll 15:12:38.0932 0x12e4 Dhcp - ok 15:12:38.0997 0x12e4 [ A36145A198899C3E45241B4E07073CA1, 00D28ABE4A2988C368C1C8D1E4C8548ABDD259EA3360818E3EB4A7DA8966D222 ] DiagTrack C:\Windows\system32\diagtrack.dll 15:12:39.0022 0x12e4 DiagTrack - ok 15:12:39.0063 0x12e4 [ 3F67A20D02EF74C112A42FD7746C8E2E, 502FA3C7C5F1BC51CA51ECB9A29EFAFFB36867F76AACF51FA7BEE45674F2C278 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe 15:12:39.0076 0x12e4 DigitalWave.Update.Service - ok 15:12:39.0091 0x12e4 [ 3322A9E3CD6CD76729CBD1D96C1C3103, D85541CF1F59A21C10C7A8494E2DDB8B4DCBBED49D11D55EC50367650D4206EE ] discache C:\Windows\system32\drivers\discache.sys 15:12:39.0098 0x12e4 discache - ok 15:12:39.0117 0x12e4 [ 97659D0CEBCF0DB9C265D3DE1B116ECF, 70F6E01CF86B2CCCFBDC0E11A9AFC5E1C132F3830F8BEB7D003F912BC3C3EAE4 ] Disk C:\Windows\system32\drivers\disk.sys 15:12:39.0123 0x12e4 Disk - ok 15:12:39.0147 0x12e4 [ 358D6EE69EE2BF3C96121B66DA63960D, E17666D2AFFA06E592B373564D6EBE59F922C98E55A3A344FB6E4668B0AF47C6 ] Dnscache C:\Windows\System32\dnsrslvr.dll 15:12:39.0157 0x12e4 Dnscache - ok 15:12:39.0174 0x12e4 [ 813E257D6A40EF6BEA4B10ECF1AB65D3, 0A6EA3229907DDF02E90486E66109C1EAE7891ECC68F44A7CE268EAAB7ACDE64 ] dot3svc C:\Windows\System32\dot3svc.dll 15:12:39.0185 0x12e4 dot3svc - ok 15:12:39.0229 0x12e4 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll 15:12:39.0249 0x12e4 DPS - ok 15:12:39.0272 0x12e4 [ A1A42D99C70331B86B7B574598BDCA3A, DD04DD77CEC4F636CB02A7E9350FA710B079E7F2592003340A6B9394B0E36DCC ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 15:12:39.0277 0x12e4 drmkaud - ok 15:12:39.0319 0x12e4 [ C0219BE34C603ACEF3D9B7246A7E2247, 134B22A08DFD14B9CC18CABBF6AAEA2CE7FC59602D2F34B66485B5AFB9553F41 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 15:12:39.0337 0x12e4 DXGKrnl - ok 15:12:39.0351 0x12e4 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll 15:12:39.0370 0x12e4 EapHost - ok 15:12:39.0450 0x12e4 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys 15:12:39.0501 0x12e4 ebdrv - ok 15:12:39.0527 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] EFS C:\Windows\System32\lsass.exe 15:12:39.0533 0x12e4 EFS - ok 15:12:39.0553 0x12e4 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys 15:12:39.0565 0x12e4 elxstor - ok 15:12:39.0584 0x12e4 [ 7D8430241B482BC2BC8EACFD056C5F14, CC2F77457662422F08EE45D4597B952A101AE99BF5E1BF50EFFE80D9702D335F ] ErrDev C:\Windows\system32\drivers\errdev.sys 15:12:39.0590 0x12e4 ErrDev - ok 15:12:39.0627 0x12e4 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll 15:12:39.0651 0x12e4 EventSystem - ok 15:12:39.0677 0x12e4 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys 15:12:39.0698 0x12e4 exfat - ok 15:12:39.0711 0x12e4 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys 15:12:39.0732 0x12e4 fastfat - ok 15:12:39.0758 0x12e4 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe 15:12:39.0773 0x12e4 Fax - ok 15:12:39.0790 0x12e4 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys 15:12:39.0796 0x12e4 fdc - ok 15:12:39.0824 0x12e4 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll 15:12:39.0842 0x12e4 fdPHost - ok 15:12:39.0845 0x12e4 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll 15:12:39.0863 0x12e4 FDResPub - ok 15:12:39.0877 0x12e4 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 15:12:39.0882 0x12e4 FileInfo - ok 15:12:39.0890 0x12e4 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 15:12:39.0908 0x12e4 Filetrace - ok 15:12:39.0923 0x12e4 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 15:12:39.0929 0x12e4 flpydisk - ok 15:12:39.0953 0x12e4 [ 1010630ABAA94551C88EF3F111E5DB76, FF806263312E405D2755E574C1F9FE7506EE34FD59844BA2421BEBAAADAA402F ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 15:12:39.0962 0x12e4 FltMgr - ok 15:12:40.0005 0x12e4 [ C310D62EFBB0B004096133FB4505BAF2, 5C7AAF1E3A6879E7B9726ADA1C2F38CA5171DF940D3FCEA485C739B647AC1C40 ] FontCache C:\Windows\system32\FntCache.dll 15:12:40.0027 0x12e4 FontCache - ok 15:12:40.0066 0x12e4 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 15:12:40.0071 0x12e4 FontCache3.0.0.0 - ok 15:12:40.0086 0x12e4 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 15:12:40.0092 0x12e4 FsDepends - ok 15:12:40.0122 0x12e4 [ EC4F611CEB6B65672EEF06928C2CEB8C, 1DA5FEE52A85AEC36476CB00064451CF8550B39DE4FCC0820AE74FDB1F10BF28 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 15:12:40.0127 0x12e4 Fs_Rec - ok 15:12:40.0136 0x12e4 [ 21B39456D89EE661F20F08082292DC9F, B866F33A5649DC004E56D3378FC831684EDC60437A0A3C3C98003EC39786EDD0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 15:12:40.0145 0x12e4 fvevol - ok 15:12:40.0194 0x12e4 [ 0D2843C3C676B852D0B01CEA1E1DAE6C, 2F2751E09725D52008865F08A08F9989BCC4BA07FBC11B3BEF4332DC463CFC63 ] fwlanusb5_nv2 C:\Windows\system32\DRIVERS\fwlanusb5_nv2.sys 15:12:40.0217 0x12e4 fwlanusb5_nv2 - ok 15:12:40.0245 0x12e4 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 15:12:40.0250 0x12e4 gagp30kx - ok 15:12:40.0284 0x12e4 [ 01FE2473050AD2C1E5B37E257EC6BEA6, DC10DACE1D9FF3C6053D554696A8665D2705D6F61FE0EF7B184359D76DDB9140 ] gpsvc C:\Windows\System32\gpsvc.dll 15:12:40.0301 0x12e4 gpsvc - ok 15:12:40.0323 0x12e4 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 15:12:40.0329 0x12e4 hcw85cir - ok 15:12:40.0370 0x12e4 [ 345AC81C44BC37685725D78CB641F28F, BAC680DBF6A43DF48ADBEDEB128DC2B7D69AF4257619C0D70ED750A6615758E4 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 15:12:40.0380 0x12e4 HdAudAddService - ok 15:12:40.0398 0x12e4 [ 45DAAFD1056B8942C5038EFFD285658D, 5529F911F71A38614DCF7194E799DF79E846F87048099BCE9CB2C7DD96E9469E ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 15:12:40.0405 0x12e4 HDAudBus - ok 15:12:40.0419 0x12e4 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 15:12:40.0425 0x12e4 HidBatt - ok 15:12:40.0440 0x12e4 [ 387C19A65ECADEB9D27E80F27D882FCF, E389ACA137C5EA7021CDB8488E85D0055A41153D68A481216585C3579FE63932 ] HidBth C:\Windows\system32\drivers\hidbth.sys 15:12:40.0447 0x12e4 HidBth - ok 15:12:40.0472 0x12e4 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys 15:12:40.0479 0x12e4 HidIr - ok 15:12:40.0503 0x12e4 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll 15:12:40.0522 0x12e4 hidserv - ok 15:12:40.0536 0x12e4 [ D150C09088401493980E7A80CFA091FE, 40F3F2559E813D3023F83451358B331C11BA4CC137CD11B21B6A1268728EB84B ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 15:12:40.0542 0x12e4 HidUsb - ok 15:12:40.0563 0x12e4 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll 15:12:40.0582 0x12e4 hkmsvc - ok 15:12:40.0608 0x12e4 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 15:12:40.0617 0x12e4 HomeGroupListener - ok 15:12:40.0645 0x12e4 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 15:12:40.0653 0x12e4 HomeGroupProvider - ok 15:12:40.0664 0x12e4 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 15:12:40.0670 0x12e4 HpSAMD - ok 15:12:40.0704 0x12e4 [ 059D2AFA7C79FFDE302A4A440E9B8E55, 90C9F29A398FBB0227545B166344EF469069E75A4E49D846DB877D2E451B41F4 ] HTTP C:\Windows\system32\drivers\HTTP.sys 15:12:40.0722 0x12e4 HTTP - ok 15:12:40.0738 0x12e4 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 15:12:40.0743 0x12e4 hwpolicy - ok 15:12:40.0761 0x12e4 [ 55CCD3E5E4DA18FCF0598F42249D47DF, 9F1EF7E8A1E80C7EEFE60B1F93E42C58B8C5C110F026442DEFC0EE3A1D0EAC0E ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 15:12:40.0768 0x12e4 i8042prt - ok 15:12:40.0807 0x12e4 [ 58A8CCA18210A9096B626B08EACC0B28, FF01194265CE1E2C14D0DF44FEFF32574092376B263C9A9871BB4F04531D017E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 15:12:40.0817 0x12e4 iaStorV - ok 15:12:40.0857 0x12e4 [ 0845EA9630319721B01E49E0A659E109, D4ACF05337E4ED5699124893443092C7969F38FC9A5C72AE185D01950BAC99DF ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 15:12:40.0874 0x12e4 idsvc - ok 15:12:40.0888 0x12e4 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys 15:12:40.0894 0x12e4 iirsp - ok 15:12:40.0932 0x12e4 [ ED13D904AB82A0CA6D1C15AB19D010BD, 95B3A5490F684DC97703FE6B67783E1C6CF616AE19C7A9C6AF03DE48D1323D9A ] IKEEXT C:\Windows\System32\ikeext.dll 15:12:40.0953 0x12e4 IKEEXT - ok 15:12:41.0069 0x12e4 [ 13AD818FFE1E7524D85E1AA0531C9EA7, 2B10B7BBA88BF04D3863246625E3F4F546AFCA10EB0F078EACC8FDEC301927A1 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 15:12:41.0148 0x12e4 IntcAzAudAddService - ok 15:12:41.0235 0x12e4 [ 9A6DEB5DDF7E29728F6FEA5092AFA3F2, 21C47A0490EBA302657EF30C560E4AF83777685FFE126DCCAC310163C47401D1 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe 15:12:41.0252 0x12e4 Intel(R) Capability Licensing Service TCP IP Interface - ok 15:12:41.0296 0x12e4 [ 74D9B6BDA6F9CDAF7E19F5A33B63EBC9, 2304AE8ED2FCBD550B83E74795E8CBEDDE45CE99E7C506E0AF4CB39A77FC6C18 ] intelide C:\Windows\system32\drivers\intelide.sys 15:12:41.0301 0x12e4 intelide - ok 15:12:41.0322 0x12e4 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 15:12:41.0328 0x12e4 intelppm - ok 15:12:41.0352 0x12e4 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll 15:12:41.0372 0x12e4 IPBusEnum - ok 15:12:41.0380 0x12e4 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 15:12:41.0398 0x12e4 IpFilterDriver - ok 15:12:41.0437 0x12e4 [ 83185D9DB2C3944B296531B95FAB49FE, B570B4777AEE924A4C075692748843BC65C3479BC07E4B7856883B5E9604F364 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 15:12:41.0453 0x12e4 iphlpsvc - ok 15:12:41.0462 0x12e4 [ 63C9FB04EECFA385BC092D9B41E85990, 2B25E9586A635894E02A81097D9ABF53942A5A19A96AC71E1FD56573E5E69A76 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 15:12:41.0469 0x12e4 IPMIDRV - ok 15:12:41.0492 0x12e4 [ 9774AA4661A30E0ADCEA48B5A1B9F4B7, 7D1697A93FFF1C0F77D29A6D609623AC895420CCCD3C81BBD0105C0F2E52E143 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 15:12:41.0499 0x12e4 IPNAT - ok 15:12:41.0531 0x12e4 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys 15:12:41.0539 0x12e4 IRENUM - ok 15:12:41.0559 0x12e4 [ E3DBCD75AA78937303E54E0946669959, E04C0FE50850AEBB47CE5E933AEB6995EF44293694FD619D0951A43DD3123EBE ] isapnp C:\Windows\system32\drivers\isapnp.sys 15:12:41.0564 0x12e4 isapnp - ok 15:12:41.0579 0x12e4 [ 7A9C4A7DAE277FC177D60E4C75164763, 53DFE03F97912676BB31F3B84CD34A404696C3B8BCDB5D6BFFAFEB6B535BB4C0 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 15:12:41.0587 0x12e4 iScsiPrt - ok 15:12:41.0626 0x12e4 [ 8CAF9BE17438F875A82FCE36DE4DC634, 8CBD8817D4429D40FA60B9397C7AD33FB3DC342DEEF2E25C1C8B13976E16F42D ] iusb3hcs C:\Windows\system32\DRIVERS\iusb3hcs.sys 15:12:41.0631 0x12e4 iusb3hcs - ok 15:12:41.0644 0x12e4 [ 013AC194D2716C345742B01CDC4A73A7, AF1663A9D13EE892D6EF79C8460BACEAB476821FEAF9418122EB885AF47BC10A ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys 15:12:41.0656 0x12e4 iusb3hub - ok 15:12:41.0675 0x12e4 [ 242C9879365A45E4E0C5E2E13E43E938, 43F5003794D1388B58CA9D8CD126480DE5C8CC63CBA98DFF602F46F616DA5064 ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys 15:12:41.0695 0x12e4 iusb3xhc - ok 15:12:41.0713 0x12e4 [ CA295D3E5032DDF8A3CBD1A256E646FA, 03879D331AE446FCF25D0193805A5E0C17764439B5B8FE1D684DDB96B1A358C9 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe 15:12:41.0721 0x12e4 jhi_service - ok 15:12:41.0734 0x12e4 [ C3CEAAF93C02A205B0712DEF98BAE544, DEAB391D0A8C454F2423D37D7DAA77B3DAA04F7B50DD76867FD4CD797A5874FB ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 15:12:41.0739 0x12e4 kbdclass - ok 15:12:41.0748 0x12e4 [ 73DD773AC3F96B229AF7C6BB0D9009FE, 5DDEC781A3A31B764D02DEE234CAAFE386F90A7284A6B09B13B081195E784631 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 15:12:41.0754 0x12e4 kbdhid - ok 15:12:41.0760 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] KeyIso C:\Windows\system32\lsass.exe 15:12:41.0766 0x12e4 KeyIso - ok 15:12:41.0784 0x12e4 [ 7CE48DF5147ED56361A5BC8B7E9592B9, D9558942848CCE79D634B83DE0857B44A02E3176745D16B74ACC65B472C7905E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 15:12:41.0789 0x12e4 KSecDD - ok 15:12:41.0806 0x12e4 [ 6E8D4F00C8899A41A70F2EF2AE10ED35, B5628B22B042EDA97CC602C274F5E354BB5D8481F6549FF6CEDADF9201D49FCA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 15:12:41.0813 0x12e4 KSecPkg - ok 15:12:41.0842 0x12e4 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 15:12:41.0860 0x12e4 ksthunk - ok 15:12:41.0904 0x12e4 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll 15:12:41.0928 0x12e4 KtmRm - ok 15:12:41.0971 0x12e4 [ 119AE0B67CEE5F761304DFCA3C8EE1B5, 0EDED6FA4ACFD86281B9F05D375261286363C52AA38C86089B50CA0C586BF910 ] LanmanServer C:\Windows\system32\srvsvc.dll 15:12:41.0983 0x12e4 LanmanServer - ok 15:12:42.0005 0x12e4 [ 3B86086F7362872AB55983FE225F9E5E, 88092F7C2F21116C01983748AA24BA01CA1402E50F8AD952E40E6662EC73CE78 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 15:12:42.0015 0x12e4 LanmanWorkstation - ok 15:12:42.0038 0x12e4 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 15:12:42.0057 0x12e4 lltdio - ok 15:12:42.0076 0x12e4 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll 15:12:42.0099 0x12e4 lltdsvc - ok 15:12:42.0115 0x12e4 [ 15BAC3E8DC159C701671F3C9D9F86D7F, 750F60062C81B7860292EE9BF47272265E1562B80635B83003B6BD82B624A87A ] lmhosts C:\Windows\System32\lmhsvc.dll 15:12:42.0124 0x12e4 lmhosts - ok 15:12:42.0169 0x12e4 [ ED5C8B920F2ACF11A26586B2FA66BF3D, D6F014F0CCAB7EDA38A8CC58F439D2A8CD89195AE84F82E25475CE11CB3883C9 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 15:12:42.0182 0x12e4 LMS - ok 15:12:42.0207 0x12e4 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 15:12:42.0213 0x12e4 LSI_FC - ok 15:12:42.0259 0x12e4 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 15:12:42.0265 0x12e4 LSI_SAS - ok 15:12:42.0278 0x12e4 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 15:12:42.0284 0x12e4 LSI_SAS2 - ok 15:12:42.0290 0x12e4 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 15:12:42.0296 0x12e4 LSI_SCSI - ok 15:12:42.0309 0x12e4 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys 15:12:42.0328 0x12e4 luafv - ok 15:12:42.0340 0x12e4 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys 15:12:42.0344 0x12e4 megasas - ok 15:12:42.0371 0x12e4 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 15:12:42.0379 0x12e4 MegaSR - ok 15:12:42.0389 0x12e4 [ 1BC9159CF58BABD89419072EA180A8F6, 6C9AB779C2355A341800A8F93AAAF9B19FAFF444CD6A7BD27C63D53F379A75EF ] MEIx64 C:\Windows\system32\DRIVERS\TeeDriverx64.sys 15:12:42.0397 0x12e4 MEIx64 - ok 15:12:42.0407 0x12e4 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll 15:12:42.0427 0x12e4 MMCSS - ok 15:12:42.0443 0x12e4 [ DFDA7308112839CE14D5F2C92B62607A, 098833170511DE6F65CCDD6A9EC38B01961A3627528467D92504EA7FAEFE480D ] Modem C:\Windows\system32\drivers\modem.sys 15:12:42.0450 0x12e4 Modem - ok 15:12:42.0478 0x12e4 [ 419D67778CA8B7DFFB39DF3FCE3EE351, 6E6AEECA191DAC838EB2DC8BC341E37F3E4F28458E85E7E1A87174D57E4DCF34 ] monitor C:\Windows\system32\drivers\monitor.sys 15:12:42.0483 0x12e4 monitor - ok 15:12:42.0502 0x12e4 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 15:12:42.0507 0x12e4 mouclass - ok 15:12:42.0526 0x12e4 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 15:12:42.0532 0x12e4 mouhid - ok 15:12:42.0547 0x12e4 [ 42F3A012BA759F1F2EEAE921C5BC6C56, 0C3CA25E18394D787A7F79466644D4A55C0ADDB0A52E35D93CCE27E1FB56431F ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 15:12:42.0552 0x12e4 mountmgr - ok 15:12:42.0571 0x12e4 [ AE8932E3B623A75B547F8CB71D70C469, DDF5B8FB3080E0EF1F2970B8F02314F9F16A7E275D53AC81518B272F18D4E317 ] mpio C:\Windows\system32\drivers\mpio.sys 15:12:42.0578 0x12e4 mpio - ok 15:12:42.0598 0x12e4 [ 5F46B69809CE21701289300B6B668684, 8B7363CCBCB0E84DA1CF9423FEC7B5134E6F56543D43CBA3736B7E98D248351F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 15:12:42.0607 0x12e4 mpsdrv - ok 15:12:42.0626 0x12e4 [ 041903F4EE7B3CD8DC7CB783C6085E28, 93E51EFA3DC81821698D57C0E5B9FC1DB3FD1D4725DC2D5977A954F35429F27B ] MpsSvc C:\Windows\system32\mpssvc.dll 15:12:42.0646 0x12e4 MpsSvc - ok 15:12:42.0671 0x12e4 [ 80DA0579FFB53575FC75EA7ADF2A5749, 20DB89266F5209DBBE439EF0614BF84A2D8207A5CAA701C7F84A612D3DB6D563 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 15:12:42.0679 0x12e4 MRxDAV - ok 15:12:42.0700 0x12e4 [ F4B3F9929024A9A28B8CE87D981D426C, 6A713CA7025F2F20B9ECED6F37D62371B7D7918B9E9E9A368C7F5759FD89A663 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 15:12:42.0711 0x12e4 mrxsmb - ok 15:12:42.0725 0x12e4 [ 7049DF10CE9F8FDBEB249795306DF746, A2888943D0EE84AB90AE26F91A3113AB35C9B355D1FCC46B4DCF7ECA2385764E ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 15:12:42.0737 0x12e4 mrxsmb10 - ok 15:12:42.0750 0x12e4 [ 39DAE97D859184B116F0464616240A89, 884A5C996BEF29F767202D52A1AB682D150712F8DF43C57B650281164282D005 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 15:12:42.0760 0x12e4 mrxsmb20 - ok 15:12:42.0774 0x12e4 [ 0C7033B1EF362F6C1F74E3E41B2306B8, 81EA18896C56FE3057CEF48F4555832CFF72A85E36234819F2401736195E96D1 ] msahci C:\Windows\system32\drivers\msahci.sys 15:12:42.0779 0x12e4 msahci - ok 15:12:42.0792 0x12e4 [ A75ADF411CF22D1C57AE40773BE51CDC, 9A210238AF65EC488431DD2A9A63B66F8619289162051489312F28960F67CDAD ] msdsm C:\Windows\system32\drivers\msdsm.sys 15:12:42.0799 0x12e4 msdsm - ok 15:12:42.0813 0x12e4 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe 15:12:42.0821 0x12e4 MSDTC - ok 15:12:42.0843 0x12e4 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys 15:12:42.0862 0x12e4 Msfs - ok 15:12:42.0871 0x12e4 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 15:12:42.0889 0x12e4 mshidkmdf - ok 15:12:42.0898 0x12e4 MSICDSetup - ok 15:12:42.0916 0x12e4 [ 5BDBD4F3C00E887B7FA8E416CD146855, 6A17BC29090AA3C712DD5EBD4B5B384C249A96C998B883B891E53965C2E6BE6B ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 15:12:42.0921 0x12e4 msisadrv - ok 15:12:42.0950 0x12e4 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 15:12:42.0970 0x12e4 MSiSCSI - ok 15:12:42.0972 0x12e4 msiserver - ok 15:12:43.0057 0x12e4 [ 8BDFEFB0F45C53D3C5B77730BF73BE91, ACC1FF6F5DC504792A01C7133DD5964864718CBD4AA6BFA3BF20B91F8AFE6D13 ] MSI_LiveUpdate_Service C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe 15:12:43.0093 0x12e4 MSI_LiveUpdate_Service - ok 15:12:43.0124 0x12e4 [ A7EDADFB0AE38AE6F0488F0F2448D8B5, 7DC08FF24CC4E2071BF8E876976B22E810A8A407FADE403D119F75AD50088105 ] MSI_Trigger_Service C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe 15:12:43.0128 0x12e4 MSI_Trigger_Service - ok 15:12:43.0159 0x12e4 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 15:12:43.0177 0x12e4 MSKSSRV - ok 15:12:43.0186 0x12e4 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 15:12:43.0205 0x12e4 MSPCLOCK - ok 15:12:43.0215 0x12e4 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 15:12:43.0233 0x12e4 MSPQM - ok 15:12:43.0250 0x12e4 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 15:12:43.0259 0x12e4 MsRPC - ok 15:12:43.0273 0x12e4 [ AEF3CB71F17CB9D8C6A3B49D3CDE5E22, 01A6072622BA88EE4D41A1FEFAD87256E7A46E2483FC57C31349A3FBAC91163F ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 15:12:43.0278 0x12e4 mssmbios - ok 15:12:43.0279 0x12e4 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 15:12:43.0297 0x12e4 MSTEE - ok 15:12:43.0306 0x12e4 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 15:12:43.0311 0x12e4 MTConfig - ok 15:12:43.0328 0x12e4 [ ADF51F0215E71361B35FA2C5D3F49D66, A4065BE1BB0C9F8B012CAC840DB951F4AB10DAB08B771BC277136FCAFF939A7B ] Mup C:\Windows\system32\Drivers\mup.sys 15:12:43.0334 0x12e4 Mup - ok 15:12:43.0353 0x12e4 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll 15:12:43.0377 0x12e4 napagent - ok 15:12:43.0417 0x12e4 [ FC380F5585171EE88045247D12F21242, A254F25DD4CB2B22BEDDE2C1A7ECB17A1735EFA57654364C6E542CB5EFB5C6ED ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 15:12:43.0427 0x12e4 NativeWifiP - ok 15:12:43.0457 0x12e4 [ 8664770EC3CF87492AD1CDDA424FD3CB, F6722F7D402AD8256B518C8E1F7AA0A1729206D33C08EF03C012CA24A75500EB ] NDIS C:\Windows\system32\drivers\ndis.sys 15:12:43.0475 0x12e4 NDIS - ok 15:12:43.0493 0x12e4 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 15:12:43.0511 0x12e4 NdisCap - ok 15:12:43.0538 0x12e4 [ 8196473CCF244832109BE0F5BEFD7C4D, F5CB1925163FC590D5A84F8E4B556CE192A637BD031EB12BD16AE05E896F8311 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 15:12:43.0544 0x12e4 NdisTapi - ok 15:12:43.0568 0x12e4 [ A17CC85238E2D08E0C44A8FE3DC3B192, 8823B58F111991ACC95A4BAADC8E0033A2EE334056C07B989FEC2499567F599A ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 15:12:43.0575 0x12e4 Ndisuio - ok 15:12:43.0585 0x12e4 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 15:12:43.0605 0x12e4 NdisWan - ok 15:12:43.0609 0x12e4 [ 357C6186EBE2B4065080A06F740DCB34, 1F4F090D1652260AF0AAF8B765FEC8D8B955CD2A9DA23A9E8F1B68D76DEF2B7D ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 15:12:43.0616 0x12e4 NDProxy - ok 15:12:43.0634 0x12e4 [ 7FA2D0AC5EA6E10013AC4B7D300BD906, E8ADC114A0E15AFD7C01297ADD0B94517F9DDD36423744D83181CAA7BC824008 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 15:12:43.0642 0x12e4 NetBIOS - ok 15:12:43.0661 0x12e4 [ 4B446DCE1B5059BEA80430E7C5498F5A, 5D775502A7C39B94EC9CB7DD613E3F94C99456914B81580AB650A8B20A2286E1 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 15:12:43.0672 0x12e4 NetBT - ok 15:12:43.0677 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] Netlogon C:\Windows\system32\lsass.exe 15:12:43.0683 0x12e4 Netlogon - ok 15:12:43.0713 0x12e4 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll 15:12:43.0736 0x12e4 Netman - ok 15:12:43.0759 0x12e4 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:12:43.0767 0x12e4 NetMsmqActivator - ok 15:12:43.0770 0x12e4 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:12:43.0777 0x12e4 NetPipeActivator - ok 15:12:43.0808 0x12e4 [ 66439DA1B5658290E15EC0A8DA95F71B, C00361B01EBC3903EC4DD0F0DC9888BB0723C92902D785A9BAD7CC9D521E31DA ] netprofm C:\Windows\System32\netprofm.dll 15:12:43.0823 0x12e4 netprofm - ok 15:12:43.0826 0x12e4 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:12:43.0834 0x12e4 NetTcpActivator - ok 15:12:43.0837 0x12e4 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:12:43.0845 0x12e4 NetTcpPortSharing - ok 15:12:43.0875 0x12e4 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 15:12:43.0881 0x12e4 nfrd960 - ok 15:12:43.0905 0x12e4 [ 4621514D60E64B17464F192155498077, B1BBDB2FF164BC88D6309F0C5785A7C39CEB6FC7CE4CB6D960C7D5E19E359DC9 ] NlaSvc C:\Windows\System32\nlasvc.dll 15:12:43.0918 0x12e4 NlaSvc - ok 15:12:43.0923 0x12e4 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys 15:12:43.0942 0x12e4 Npfs - ok 15:12:43.0945 0x12e4 [ 9702E6E07379F5FDA3B2FB1DC137553A, D7F9CB06A030BAB87724901376E593C6B66EF38FAED696446BECB71E21A6CD49 ] nsi C:\Windows\system32\nsisvc.dll 15:12:43.0953 0x12e4 nsi - ok 15:12:43.0968 0x12e4 [ 7D00B92D4803354BC6616A293A24C119, C9FB5EDE7CE2B698DBC6B788D758D5603C59AA25229F802901A152795FFA2C54 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 15:12:43.0976 0x12e4 nsiproxy - ok 15:12:44.0022 0x12e4 [ DF54A465B6C6AA7A306D03B9B1D2B61E, 691C409CFAC3BCA8470C9492E5DD72E604106FE9E5F8B0B40572F3481F2367EB ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 15:12:44.0053 0x12e4 Ntfs - ok 15:12:44.0065 0x12e4 NTIOLib_1_0_C - ok 15:12:44.0083 0x12e4 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys 15:12:44.0100 0x12e4 Null - ok 15:12:44.0129 0x12e4 [ C58189F39002E5E483C0B8BF728E8343, E86730A549F5F35B97109B16A84C32DCD51AC6379D911C1B7379AF449C76FA11 ] nvraid C:\Windows\system32\drivers\nvraid.sys 15:12:44.0136 0x12e4 nvraid - ok 15:12:44.0143 0x12e4 [ 77497B64AEAC221A081D2EE7C80B1CF4, 9C887206C24AD2BB276D2F21DCD882F824DF4A9D38731C20B12DAD392F623122 ] nvstor C:\Windows\system32\drivers\nvstor.sys 15:12:44.0150 0x12e4 nvstor - ok 15:12:44.0176 0x12e4 [ 1317382EDFDF491DA4CB3BACFF058A52, 393864357771F8658704C726ED3256F3C4FDF6E6CE682F2165F1792C48E12E55 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 15:12:44.0183 0x12e4 nv_agp - ok 15:12:44.0194 0x12e4 [ C1E10246E2F0436D0AFD147E8F28391F, 740488612F06A0876A7347D90C9D0EB01204F68AB1F5DD9ED579533BA8DAED6B ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 15:12:44.0201 0x12e4 ohci1394 - ok 15:12:44.0220 0x12e4 [ 1CBF382EAFF5E298F8CAE6F07A321DC0, 1958B6923F16D3D7C2EE6836EC1994CE566036FEBC95B4C2E03C99EC651CA4CC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 15:12:44.0231 0x12e4 p2pimsvc - ok 15:12:44.0251 0x12e4 [ 27DF5BAA26444B4166F1015193787725, 946BE0655B824F744109F357D8BF43F159605F1354673A7C4D355C84FA66A7B6 ] p2psvc C:\Windows\system32\p2psvc.dll 15:12:44.0263 0x12e4 p2psvc - ok 15:12:44.0291 0x12e4 [ 0E75370C05A7AB23E3B05840BA9E1935, F1C77B265A8DDB966A69434484D5AC90987B72C43EAC87E6C6A7EE7704537915 ] Parport C:\Windows\system32\drivers\parport.sys 15:12:44.0298 0x12e4 Parport - ok 15:12:44.0322 0x12e4 [ B38E9BF9A0A43B0E84731CE83541D710, 759DB5086A2966B506B0A22583C60FCCEEFEEE760CA734A65BEC129509F1EAA4 ] partmgr C:\Windows\system32\drivers\partmgr.sys 15:12:44.0327 0x12e4 partmgr - ok 15:12:44.0349 0x12e4 [ 50B4EB78246F2B5EA57826F5F6244DD7, 4C04F7DC6C21EBC7D13AF0478A063C14ECF5D8804F3F98DE39A99E123F4FCCD8 ] PcaSvc C:\Windows\System32\pcasvc.dll 15:12:44.0359 0x12e4 PcaSvc - ok 15:12:44.0370 0x12e4 [ E8EDD0D68FB3D1FD1B1EB410DC8E87BC, 3D590E365BE388E21286AF70D195B9159B70CA6EB43538B5EB9EEA1D55CD09F9 ] pci C:\Windows\system32\drivers\pci.sys 15:12:44.0377 0x12e4 pci - ok 15:12:44.0402 0x12e4 [ 7D7E0DC331C675B35627B9E2C4ED1B4B, D7898C6638B9DF29DA7614A1EA10CFC4A9095813665275DC91010A56D2D89209 ] pciide C:\Windows\system32\drivers\pciide.sys 15:12:44.0407 0x12e4 pciide - ok 15:12:44.0441 0x12e4 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 15:12:44.0448 0x12e4 pcmcia - ok 15:12:44.0461 0x12e4 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys 15:12:44.0466 0x12e4 pcw - ok 15:12:44.0499 0x12e4 [ A1437BBF4DD736F0FEBE720ABB591316, 008B0B7B11D40B7D0E283575DBE8F50C026732A117C9A562562210FE8764F492 ] PEAUTH C:\Windows\system32\drivers\peauth.sys 15:12:44.0515 0x12e4 PEAUTH - ok 15:12:44.0571 0x12e4 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe 15:12:44.0577 0x12e4 PerfHost - ok 15:12:44.0626 0x12e4 [ B92FD8F870E56A3A010A7B77C583DCDA, F7D309CF8AFFC35C90DB37D0C22A209FFB259040D5BAE57B3938CFB07E08713D ] pla C:\Windows\system32\pla.dll 15:12:44.0654 0x12e4 pla - ok 15:12:44.0689 0x12e4 [ 9AB25C0B739B432819F0D141BEB3B38A, 354AEB215643B49FB729789BBDB9037B6FA10A538AF1262D882972952D651004 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 15:12:44.0703 0x12e4 PlugPlay - ok 15:12:44.0723 0x12e4 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 15:12:44.0729 0x12e4 PNRPAutoReg - ok 15:12:44.0745 0x12e4 [ 1CBF382EAFF5E298F8CAE6F07A321DC0, 1958B6923F16D3D7C2EE6836EC1994CE566036FEBC95B4C2E03C99EC651CA4CC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 15:12:44.0756 0x12e4 PNRPsvc - ok 15:12:44.0784 0x12e4 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 15:12:44.0808 0x12e4 PolicyAgent - ok 15:12:44.0835 0x12e4 [ 94A61BDF895925BAD2A36417E3FBF706, 22F3ABC273C66B64D0C0353B388902368307415E8EBA488DA6C6C1E1330E3D0C ] Power C:\Windows\system32\umpo.dll 15:12:44.0845 0x12e4 Power - ok 15:12:44.0873 0x12e4 [ 0E13F3D32ED2C76B3485294E43040738, 8CCEEC4D2B5F41704A0393AF299811B305B140C944B16C6D40B58AC5FF7BC548 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 15:12:44.0881 0x12e4 PptpMiniport - ok 15:12:44.0901 0x12e4 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys 15:12:44.0907 0x12e4 Processor - ok 15:12:44.0951 0x12e4 [ 1EA789C00B0ACAD75193CDC6F8829015, C5E830992AC71E5969FCA2825700224812888CD33F84D94EFA60F39AD8FF9B57 ] ProfSvc C:\Windows\system32\profsvc.dll 15:12:44.0963 0x12e4 ProfSvc - ok 15:12:44.0968 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] ProtectedStorage C:\Windows\system32\lsass.exe 15:12:44.0974 0x12e4 ProtectedStorage - ok 15:12:44.0994 0x12e4 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 15:12:45.0013 0x12e4 Psched - ok 15:12:45.0052 0x12e4 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 15:12:45.0078 0x12e4 ql2300 - ok 15:12:45.0110 0x12e4 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 15:12:45.0116 0x12e4 ql40xx - ok 15:12:45.0140 0x12e4 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll 15:12:45.0152 0x12e4 QWAVE - ok 15:12:45.0161 0x12e4 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 15:12:45.0170 0x12e4 QWAVEdrv - ok 15:12:45.0176 0x12e4 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 15:12:45.0194 0x12e4 RasAcd - ok 15:12:45.0212 0x12e4 [ FCBC6E55B7EAFEE6E26B5AF77441DD2A, CCAB8711CBFD9435609FBF0C0F2013FF5E5174BC23A6DD0B3142147F6770937E ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 15:12:45.0219 0x12e4 RasAgileVpn - ok 15:12:45.0236 0x12e4 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll 15:12:45.0256 0x12e4 RasAuto - ok 15:12:45.0272 0x12e4 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 15:12:45.0291 0x12e4 Rasl2tp - ok 15:12:45.0332 0x12e4 [ F674C89CC5835F2EB6E914150F59C0D4, 1B753FFCCFDD44E0CC705DE8DBCCAC146D70E8C066564C056A969230929582E5 ] RasMan C:\Windows\System32\rasmans.dll 15:12:45.0343 0x12e4 RasMan - ok 15:12:45.0363 0x12e4 [ 64908FACD0C3EAE09E4FDF251A4B2792, 1A8F7D28B7A6366B081F774EAC08C92DEC21F03B8BC74B0A918B6AB7CA67B682 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 15:12:45.0370 0x12e4 RasPppoe - ok 15:12:45.0398 0x12e4 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 15:12:45.0418 0x12e4 RasSstp - ok 15:12:45.0447 0x12e4 [ 7FC7357E1FA467EB68F405B1B5FEE365, 0EC3FDB080494F85E58641B10411448C931ED1EB8D5176A958437FC9B39B15DE ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 15:12:45.0460 0x12e4 rdbss - ok 15:12:45.0470 0x12e4 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 15:12:45.0478 0x12e4 rdpbus - ok 15:12:45.0491 0x12e4 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 15:12:45.0509 0x12e4 RDPCDD - ok 15:12:45.0527 0x12e4 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 15:12:45.0545 0x12e4 RDPENCDD - ok 15:12:45.0549 0x12e4 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 15:12:45.0568 0x12e4 RDPREFMP - ok 15:12:45.0584 0x12e4 [ 79062C89658D3E71097E0CB7A85B7E46, 22DE59A0C2DC3207A759DD5570CC0988F31F4DDA64D165D68A4A170D8CB9C2C2 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 15:12:45.0595 0x12e4 RDPWD - ok 15:12:45.0630 0x12e4 [ 53E15480838EB8550D80A8796982C7EE, F188A30180E8CEBB1157E7A404BC5D6EB414976C5AA1BD49E420715169D3E16A ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 15:12:45.0637 0x12e4 rdyboost - ok 15:12:45.0655 0x12e4 [ AE0D1BF6603EBC2A831B80918C9DB444, 39FA55F4EA56964954C76DE56D78515D454C3DD59E9D942E8A5EDF6A73DADD69 ] RemoteAccess C:\Windows\System32\mprdim.dll 15:12:45.0664 0x12e4 RemoteAccess - ok 15:12:45.0691 0x12e4 [ 71AD40FFF94D90B86748952022ECED2D, A2AEF7FC3B062D2EE2D70B4CA1CE23E353685F7E51F23F5CD493683275CCB0FB ] RemoteRegistry C:\Windows\system32\regsvc.dll 15:12:45.0702 0x12e4 RemoteRegistry - ok 15:12:45.0726 0x12e4 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 15:12:45.0746 0x12e4 RpcEptMapper - ok 15:12:45.0755 0x12e4 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe 15:12:45.0762 0x12e4 RpcLocator - ok 15:12:45.0785 0x12e4 [ 4B1099E362ADAF9A4FA9B06D76294349, 163B466029223827163D3CC3561CBEC0C2046F34C86BEA1461343E315471FBF4 ] RpcSs C:\Windows\system32\rpcss.dll 15:12:45.0800 0x12e4 RpcSs - ok 15:12:45.0818 0x12e4 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 15:12:45.0837 0x12e4 rspndr - ok 15:12:45.0877 0x12e4 [ DCF7221D6588EDA8CD77CB27AE9B1844, 7741A4F513952CC3C4D5056958D0D50F8F2A9D3142C7478707F73A83D3CDE01C ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 15:12:45.0895 0x12e4 RTL8167 - ok 15:12:45.0901 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] SamSs C:\Windows\system32\lsass.exe 15:12:45.0907 0x12e4 SamSs - ok 15:12:45.0918 0x12e4 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 15:12:45.0924 0x12e4 sbp2port - ok 15:12:45.0950 0x12e4 [ 9C7ECDB7D4F0113621D0C2806D634DEC, A2CD66F1BB6329309B9423D72112299F6E24F09B8B0F2FB82EFEE57ED67E5C85 ] SCardSvr C:\Windows\System32\SCardSvr.dll 15:12:45.0959 0x12e4 SCardSvr - ok 15:12:45.0979 0x12e4 [ 53CE84F6E4FABFC5AB47375546E1303D, 8FA3B1063ED1EE8B4771DDC5A8CA87AA93E1F0FB7B7A206E0AFFAEBF707FCB6E ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 15:12:45.0984 0x12e4 scfilter - ok 15:12:46.0020 0x12e4 [ FFF0BE84084D90265A6ED79229CE53AA, 2A0D76E68E15B1821C8977F1BACE7785EEA621DF0B5E804D337D0362CE479544 ] Schedule C:\Windows\system32\schedsvc.dll 15:12:46.0045 0x12e4 Schedule - ok 15:12:46.0065 0x12e4 [ E37B315C170C8DE43592F416264A6C31, 41109BB6A3681763AB43F9BA8FDA58C1ECBEAD8258B5FF65F95AFA072468984A ] SCPolicySvc C:\Windows\System32\certprop.dll 15:12:46.0071 0x12e4 SCPolicySvc - ok 15:12:46.0097 0x12e4 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 15:12:46.0104 0x12e4 SDRSVC - ok 15:12:46.0184 0x12e4 [ 2ED9CD42F4E46EF13073847F8924B60C, 01AD75364DED7596C131FF73300BB910555C6901C826A669ABDA4A01D0DD2178 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe 15:12:46.0212 0x12e4 SDScannerService - ok 15:12:46.0302 0x12e4 [ 94653C9CFDC15B30EEECD94BA7219654, 59F54AC9BC79C1BFBEA84992181C58AF434A3DDDF473C9BE942D3462875A8375 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe 15:12:46.0374 0x12e4 SDUpdateService - ok 15:12:46.0403 0x12e4 [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe 15:12:46.0410 0x12e4 SDWSCService - ok 15:12:46.0439 0x12e4 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 15:12:46.0446 0x12e4 secdrv - ok 15:12:46.0474 0x12e4 [ B17F80360153B9DCED601108B74BDC25, 8AAE54EB719442EADDA8C67887A311838083B848BB714B4C8AF44BF4E9A7B75E ] seclogon C:\Windows\system32\seclogon.dll 15:12:46.0483 0x12e4 seclogon - ok 15:12:46.0518 0x12e4 [ 07F83829E7429E60298440CD1E601A6A, 9F1229CD8DD9092C27A01F5D56E3C0D59C2BB9F0139ABF042E56F343637FDA33 ] semav6msr64 C:\Windows\system32\drivers\semav6msr64.sys 15:12:46.0524 0x12e4 semav6msr64 - ok 15:12:46.0551 0x12e4 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll 15:12:46.0571 0x12e4 SENS - ok 15:12:46.0588 0x12e4 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll 15:12:46.0595 0x12e4 SensrSvc - ok 15:12:46.0617 0x12e4 [ 38B4E056D31DF16EC0EB5884F65B1979, 58EF8363103702352B9BB9F4DB47E388E86193F3C93E7392523BCC86A76B46FE ] Serenum C:\Windows\system32\drivers\serenum.sys 15:12:46.0622 0x12e4 Serenum - ok 15:12:46.0640 0x12e4 [ F9DF63C7E70CBAC77EB07E454B35AB2A, 4FB02E23F48BE9876EE4C6B1CD6B7DAFBD7AE1FD7C61B42B3A1C617F46053EC6 ] Serial C:\Windows\system32\drivers\serial.sys 15:12:46.0647 0x12e4 Serial - ok 15:12:46.0675 0x12e4 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys 15:12:46.0681 0x12e4 sermouse - ok 15:12:46.0712 0x12e4 [ 8E7762634E03FE9B8774C73309563BAD, 9A56D9E0CE17EA31EC0299F24CF55DF9F3C5462D0EB66BD4165851570BA71670 ] SessionEnv C:\Windows\system32\sessenv.dll 15:12:46.0723 0x12e4 SessionEnv - ok 15:12:46.0730 0x12e4 [ 5E332126E8DBAB045A21D623EA5A0488, C9EBEEDDD8DBE38CFF061FC6C3E487E871E6C56C06AEBCE0C0CDF5566CD0827D ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 15:12:46.0735 0x12e4 sffdisk - ok 15:12:46.0745 0x12e4 [ C7CF5601AEBC0AFD053C065998E312B1, 72FB7E64D06B73A9C27ACDEC3B96C8474CF0202FE3C00D51E573965F5CBC74FC ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 15:12:46.0751 0x12e4 sffp_mmc - ok 15:12:46.0753 0x12e4 [ 4530300DB74296B77FCC9E549E0C3752, 8F830353CBF103EC5B7A95FEF5164E31619121BEBB4940F4405435A71F7207BE ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 15:12:46.0758 0x12e4 sffp_sd - ok 15:12:46.0780 0x12e4 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 15:12:46.0786 0x12e4 sfloppy - ok 15:12:46.0813 0x12e4 [ 595D3A71FDAF4ADB4227E4F8FA31FC59, 988F20A2F8B8B56524C82B4B2F6E1C7E7471FD44AB5BA85A468A7B3E51117308 ] SharedAccess C:\Windows\System32\ipnathlp.dll 15:12:46.0824 0x12e4 SharedAccess - ok 15:12:46.0859 0x12e4 [ 4B247D567187961DCBAA98FD13D8EB39, 8758021A5303A2EF2DF7549AA3719CE927FCA13D497DD0AE9F4A4BF55EEF8D2F ] ShellHWDetection C:\Windows\System32\shsvcs.dll 15:12:46.0871 0x12e4 ShellHWDetection - ok 15:12:46.0885 0x12e4 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 15:12:46.0890 0x12e4 SiSRaid2 - ok 15:12:46.0906 0x12e4 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 15:12:46.0912 0x12e4 SiSRaid4 - ok 15:12:46.0933 0x12e4 [ 4E6FAEE3F259DAC82213D935785991FB, ADA019AD261BBEAE78495B508B4D375BEC1005DF119F20897D29C3C613A0CA46 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 15:12:46.0943 0x12e4 SkypeUpdate - ok 15:12:46.0963 0x12e4 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys 15:12:46.0983 0x12e4 Smb - ok 15:12:47.0017 0x12e4 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 15:12:47.0024 0x12e4 SNMPTRAP - ok 15:12:47.0028 0x12e4 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys 15:12:47.0033 0x12e4 spldr - ok 15:12:47.0073 0x12e4 [ E9B8F49884BDDE8BE466F6133523577F, 9B6E22F340640C8FC97C4F081C0B34F055C4088FCB9B6EFB35E2424DBBEDF842 ] Spooler C:\Windows\System32\spoolsv.exe 15:12:47.0087 0x12e4 Spooler - ok 15:12:47.0180 0x12e4 [ 19907FFEF003698B25D6D58AD38A256A, BFAFEE132EF82A29ECF69BE37E9A4A12641F22CEB015B9103D3AE200E64EBC03 ] sppsvc C:\Windows\system32\sppsvc.exe 15:12:47.0250 0x12e4 sppsvc - ok 15:12:47.0274 0x12e4 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll 15:12:47.0294 0x12e4 sppuinotify - ok 15:12:47.0326 0x12e4 [ DFB9455AA17E89E20F302B0D63F3DF01, 127842C77A601AC92D20C18EE1298CFED1D4D25314F2B31FE02E572BD7DE32F2 ] srv C:\Windows\system32\DRIVERS\srv.sys 15:12:47.0340 0x12e4 srv - ok 15:12:47.0356 0x12e4 [ B33FBF664008CD1D73454D3B6BBBBB6F, 2A13D281D1E169055A282603447E22D0F9AD6E5227A0234E91A4AEF4CBE602B0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 15:12:47.0370 0x12e4 srv2 - ok 15:12:47.0387 0x12e4 [ 707E7C3E39DEAF69E34D502FAD96E5EF, 6017F20C9ED0A9B1D726146849E107AA274CDA881D20D7E3CCB8FA9219E28EA9 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 15:12:47.0398 0x12e4 srvnet - ok 15:12:47.0426 0x12e4 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 15:12:47.0447 0x12e4 SSDPSRV - ok 15:12:47.0461 0x12e4 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll 15:12:47.0480 0x12e4 SstpSvc - ok 15:12:47.0529 0x12e4 [ 04F9B53224689BB3638CC2D3DA721E5C, D073C8D5CEFD59CC3D4834A6B92EA8FE113A73C400C27BB6B3D215522FAE17C3 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe 15:12:47.0553 0x12e4 Steam Client Service - ok 15:12:47.0566 0x12e4 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys 15:12:47.0571 0x12e4 stexstor - ok 15:12:47.0596 0x12e4 [ 82848B4B4D2E4987844C7DC51AAF7313, 2A91F1411228D5B2BFA3B531FE756BFC50C2E84604D1E29724E8CF5964189BE2 ] stisvc C:\Windows\System32\wiaservc.dll 15:12:47.0609 0x12e4 stisvc - ok 15:12:47.0628 0x12e4 [ 5485470D82D50777757AF985776474BD, 6BCCC3F9379BB02C83CCA29534A899528E42B46E7C16133ED17CFCA60711E15A ] swenum C:\Windows\system32\drivers\swenum.sys 15:12:47.0632 0x12e4 swenum - ok 15:12:47.0655 0x12e4 [ EFF602790C7B1407510BB6FCCE487D97, BF42D990287773F3FA75486078DDC0C97E3FC43E3C2BB640AA0F9FEA894DB6D8 ] swprv C:\Windows\System32\swprv.dll 15:12:47.0671 0x12e4 swprv - ok 15:12:47.0719 0x12e4 [ B30860D06FC3296FA04A7C7AB5ED02B9, 98C112F9AB70DA36F622095C28ABBFC13C5BDB816B67940D0C8ACB110427CF15 ] SysMain C:\Windows\system32\sysmain.dll 15:12:47.0749 0x12e4 SysMain - ok 15:12:47.0780 0x12e4 [ 2BE3A44B764D6C43CBF4650E862CB807, 78920DA47F3A0C26503FB62EF159455A860E57A9A39C72AEE23A9324168EC1D2 ] SystemUsageReportSvc_WILLAMETTE C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe 15:12:47.0787 0x12e4 SystemUsageReportSvc_WILLAMETTE - ok 15:12:47.0804 0x12e4 [ 2682F3E219BDD0FCDC452E1FE7AD7E8B, 764BAF7F52DB774CFCF8E40957A7BA7AE4E729585F37C31154569F04A1A02135 ] TabletInputService C:\Windows\System32\TabSvc.dll 15:12:47.0812 0x12e4 TabletInputService - ok 15:12:47.0846 0x12e4 [ A58C3A68BD01A3A96E3244A8C15CE585, D9EED5BF3E06BC1636A17652171847C4E7C2F541DA818221E37D2B4F201ECDA8 ] TapiSrv C:\Windows\System32\tapisrv.dll 15:12:47.0857 0x12e4 TapiSrv - ok 15:12:47.0917 0x12e4 [ FF92A3BBFA7E7CB71B1892BF13AB8AFF, 17BE2DE04564F5B3309C5F35DA6CB49995715A9DDAAF4AE844E3C29F5AEAA1C7 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 15:12:47.0948 0x12e4 Tcpip - ok 15:12:47.0985 0x12e4 [ FF92A3BBFA7E7CB71B1892BF13AB8AFF, 17BE2DE04564F5B3309C5F35DA6CB49995715A9DDAAF4AE844E3C29F5AEAA1C7 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 15:12:48.0016 0x12e4 TCPIP6 - ok 15:12:48.0027 0x12e4 [ 7D5ACA08ACF6F39441C09E0C3E397138, C52AA6ED5892D06CF3D4B5621C0B708A399C6757D29276FD99440CB55CA20A5F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 15:12:48.0035 0x12e4 tcpipreg - ok 15:12:48.0055 0x12e4 [ 5FB705F7D93059B059900F2C6F7DE76B, F5AEF8C3DA8042FA04124F58B32B66ADF76107DB63D5D1D7B7D9511135524550 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 15:12:48.0064 0x12e4 TDPIPE - ok 15:12:48.0066 0x12e4 [ CEB11D6BB417E3E26CD0FEFDCAD5A052, 4AB18D67ACAAA66D527E3CA73267C8FC0ABFD9E11866D8849668E5E13F7A783C ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 15:12:48.0074 0x12e4 TDTCP - ok 15:12:48.0098 0x12e4 [ 106269AB8623435C130A33DCA499A7EF, B61A982924F34694BB90BCB174BED25CE2A1A8B0A59EB0C196D423EAA7D6FFA7 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 15:12:48.0108 0x12e4 tdx - ok 15:12:48.0122 0x12e4 [ DF87E778D5EDC3F8959C6AB05A9C4E39, 4364E19490D49F99F39FAD8002D269B95566F8CE835E6DF19BA246D840550981 ] TermDD C:\Windows\system32\drivers\termdd.sys 15:12:48.0127 0x12e4 TermDD - ok 15:12:48.0162 0x12e4 [ 30A3A5BE7A486ADB5E20FFE4324362BF, 81F9B5E10478316F250466B24BCBFA77B38DA9CF43223FAC4CF37379E5DE49E0 ] TermService C:\Windows\System32\termsrv.dll 15:12:48.0181 0x12e4 TermService - ok 15:12:48.0207 0x12e4 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll 15:12:48.0217 0x12e4 Themes - ok 15:12:48.0240 0x12e4 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll 15:12:48.0259 0x12e4 THREADORDER - ok 15:12:48.0274 0x12e4 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll 15:12:48.0295 0x12e4 TrkWks - ok 15:12:48.0337 0x12e4 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 15:12:48.0357 0x12e4 TrustedInstaller - ok 15:12:48.0374 0x12e4 [ 9E5A819FA3016108CED020FE621CB0AE, 99F49191D957157AEC03672598FE9C6C5F6BEECA9BC254F1CFB84E3931B2392A ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 15:12:48.0382 0x12e4 tssecsrv - ok 15:12:48.0413 0x12e4 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 15:12:48.0419 0x12e4 TsUsbFlt - ok 15:12:48.0435 0x12e4 [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 15:12:48.0440 0x12e4 TsUsbGD - ok 15:12:48.0453 0x12e4 [ 06BC523D39A2E6A9FBAED812C7A5ED6B, F3E2D2B24F52465223D790A8618825024617220FF19AC19006FDCED98739D74F ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 15:12:48.0461 0x12e4 tunnel - ok 15:12:48.0463 0x12e4 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 15:12:48.0469 0x12e4 uagp35 - ok 15:12:48.0494 0x12e4 [ 8DE87C94A4938BF4C21C310077DB22BD, 11DCBD0B7B00BC5D51D9575F90083D9F7C57FDB317AAD638EC775EFD9419574E ] udfs C:\Windows\system32\DRIVERS\udfs.sys 15:12:48.0507 0x12e4 udfs - ok 15:12:48.0536 0x12e4 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe 15:12:48.0543 0x12e4 UI0Detect - ok 15:12:48.0578 0x12e4 [ F76C937416EE9A617FF5519370EEA1A1, 5036EDEC68F3D039C7A23BD532944FB5724155964FBB10659435C5989BE9FD4A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 15:12:48.0584 0x12e4 uliagpkx - ok 15:12:48.0603 0x12e4 [ C77B614D818386596EC5540E318AE034, EE4B6D5E612E3C927CFC6C8E9E979CFAEC47EA160FFA4602014B7C8D4644EC58 ] umbus C:\Windows\system32\drivers\umbus.sys 15:12:48.0609 0x12e4 umbus - ok 15:12:48.0618 0x12e4 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys 15:12:48.0624 0x12e4 UmPass - ok 15:12:48.0640 0x12e4 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll 15:12:48.0664 0x12e4 upnphost - ok 15:12:48.0687 0x12e4 [ 3676F1F15EC8953F05AE618A049891ED, DEB084CCC5733E20E3FD5AA24636FFA7396B70BB1FB5E2A7627CC1DF5D0355F4 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 15:12:48.0694 0x12e4 usbccgp - ok 15:12:48.0714 0x12e4 [ 710EE0EEDFF1DB5089397CCBBBD80C58, E6336A6292557FBE49B94F07DF0195A186D5EB2FF137E5AD6DD435F4AC525373 ] usbcir C:\Windows\system32\drivers\usbcir.sys 15:12:48.0720 0x12e4 usbcir - ok 15:12:48.0731 0x12e4 [ E94288914A796BD942D8FCCFEC91E34D, 243CCE3C402D73DCF83D840F6A02C4911FA90D77F58B21E94B7F8BF5E42DF1A4 ] usbehci C:\Windows\system32\drivers\usbehci.sys 15:12:48.0737 0x12e4 usbehci - ok 15:12:48.0757 0x12e4 [ FEAA37A971ACA6F2AED20551E5E3E5ED, BBFE80E2EB5E6FCE69DE46D7ADC30A91587AF463DA79E0CD7630764AE592FEBE ] usbhub C:\Windows\system32\drivers\usbhub.sys 15:12:48.0767 0x12e4 usbhub - ok 15:12:48.0781 0x12e4 [ 19317FFA87F6AD97EB56E8C520C6CC97, 76CE555988172BA8BD6C39AE85E25A5301FDA9C682CACC3F4B9D9B6175EE503E ] usbohci C:\Windows\system32\drivers\usbohci.sys 15:12:48.0786 0x12e4 usbohci - ok 15:12:48.0807 0x12e4 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\drivers\usbprint.sys 15:12:48.0815 0x12e4 usbprint - ok 15:12:48.0823 0x12e4 [ 18C50A2277BCB1509A27F91A07377263, 8034DF1A6841E029482B6843DFF906E9FBD3F26B8A317191145A670EB07AC0DA ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 15:12:48.0829 0x12e4 USBSTOR - ok 15:12:48.0839 0x12e4 [ F906A62B9F67CD98761D6767964B426A, CA908E31388E2E05BB19526E7028421AD8DD96501DBE48A83D9570380404B7C0 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 15:12:48.0845 0x12e4 usbuhci - ok 15:12:48.0904 0x12e4 [ F4D8F67474DDA4FEF3935393AAA0173F, 5EB1700895E33972816DE4C2B920769CCE5580B83CAB8B2D7A8A6264F3A42B80 ] USER_ESRV_SVC_WILLAMETTE C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe 15:12:48.0915 0x12e4 USER_ESRV_SVC_WILLAMETTE - ok 15:12:48.0929 0x12e4 [ 0FD209CC2F2A2B17D07CE2D977087088, E68280D69CF6499B2182AF4257F282D0700B79BA94B2C0B393B049A99BC786F5 ] UxSms C:\Windows\System32\uxsms.dll 15:12:48.0937 0x12e4 UxSms - ok 15:12:48.0943 0x12e4 [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] VaultSvc C:\Windows\system32\lsass.exe 15:12:48.0949 0x12e4 VaultSvc - ok 15:12:48.0970 0x12e4 [ DB25700CE057D426102AB5A2259F275B, 797ED4C829B827AECF63C25FF93BAA4DBEE7625C6240077E7403F1246988A3AE ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 15:12:48.0975 0x12e4 vdrvroot - ok 15:12:49.0005 0x12e4 [ 57295E9336C4AE8408725B6246BA6B9A, 58994C975E3378EE29A2A6127CF32EDDA4FF0D64881AE11C36D464DF718A2167 ] vds C:\Windows\System32\vds.exe 15:12:49.0021 0x12e4 vds - ok 15:12:49.0034 0x12e4 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 15:12:49.0041 0x12e4 vga - ok 15:12:49.0054 0x12e4 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys 15:12:49.0073 0x12e4 VgaSave - ok 15:12:49.0094 0x12e4 [ FF0E9994E61F7D9778DB1C4E6F3F25F5, F160278446BB09F136AA7678F2920A5F0101A29C2B8E90D3A472AC53DBECC212 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 15:12:49.0101 0x12e4 vhdmp - ok 15:12:49.0120 0x12e4 [ 2B6E179E984F5A11521F8FE1EA6BAE83, AF9B3C0826C8F9CC7DB37CF4385AD365B623FB03293C5AF907077799F202A7C7 ] viaide C:\Windows\system32\drivers\viaide.sys 15:12:49.0125 0x12e4 viaide - ok 15:12:49.0127 0x12e4 [ 95B852EC9A799A1FDAD33A8F8FDE8818, A9511B8E4729D0333F81C1FEF0371407B0EDBB9CB653E679BD8DE8C05B88D52D ] volmgr C:\Windows\system32\drivers\volmgr.sys 15:12:49.0133 0x12e4 volmgr - ok 15:12:49.0161 0x12e4 [ 758824D06738A437E56304FC1D400F7F, 76CB0EF89C24149F0D5C3BB81DD68FF2C42C45ADC7E29E97D1CA6640BDB55C19 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 15:12:49.0170 0x12e4 volmgrx - ok 15:12:49.0192 0x12e4 [ B52F1F5F55CD773BA89E5739B82E9C34, FBA4EC1EB9564B9EEFB1477AF54FE8862B8F52DCC518CB659B8862697C417A7B ] volsnap C:\Windows\system32\drivers\volsnap.sys 15:12:49.0201 0x12e4 volsnap - ok 15:12:49.0223 0x12e4 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 15:12:49.0230 0x12e4 vsmraid - ok 15:12:49.0272 0x12e4 [ A6B355943A77FC59B4BE54F6CC2C1A06, 422DE0C69A4F34FAD576663587F6BD03A48E20C96F1283D803F7667A288B962D ] VSS C:\Windows\system32\vssvc.exe 15:12:49.0302 0x12e4 VSS - ok 15:12:49.0321 0x12e4 [ BFCBFD74A7D673AF8311F236AA15D0AF, AE52D49121A6FB173D30DA6F3901A934A1F6C8FF9CF0DCEE8954FE05F111A063 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 15:12:49.0327 0x12e4 vwifibus - ok 15:12:49.0347 0x12e4 [ 97B4B3EB0CCEA0D020CC26A308921B9E, 25AEA08F5C769F292C801770141574C219434CD1BAB4F659726FAEB2EED9820C ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 15:12:49.0354 0x12e4 vwififlt - ok 15:12:49.0383 0x12e4 [ 77B02662D2485F43C096B32FC7A99B48, 7DB0EE090311CD1BC25629F4EA6F6E72F4B67287B753B02E9F76183A797D1C2F ] W32Time C:\Windows\system32\w32time.dll 15:12:49.0397 0x12e4 W32Time - ok 15:12:49.0415 0x12e4 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 15:12:49.0421 0x12e4 WacomPen - ok 15:12:49.0451 0x12e4 [ 7AF9F1F2BAF52266096501BBBEEE62A9, 5B6B908B4F398F64E440DDD703E80F3C3E8537D5EB593CC69028E2E20456F213 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 15:12:49.0459 0x12e4 WANARP - ok 15:12:49.0461 0x12e4 [ 7AF9F1F2BAF52266096501BBBEEE62A9, 5B6B908B4F398F64E440DDD703E80F3C3E8537D5EB593CC69028E2E20456F213 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 15:12:49.0468 0x12e4 Wanarpv6 - ok 15:12:49.0512 0x12e4 [ 01037578F5CFE26D347296A03E0801C0, 91405FB934EFD8D0FE9B51CECBB977814B359C2EE1F409E62717C230362D7AFC ] wbengine C:\Windows\system32\wbengine.exe 15:12:49.0539 0x12e4 wbengine - ok 15:12:49.0554 0x12e4 [ 55E42FA7B170579F9F95AC5A405F82FD, 1F3DA26D8395B9AF53ADCE075FA24E48FF4AA7553FC0F8CAF696B3F032EA6545 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 15:12:49.0564 0x12e4 WbioSrvc - ok 15:12:49.0591 0x12e4 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll 15:12:49.0605 0x12e4 wcncsvc - ok 15:12:49.0618 0x12e4 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 15:12:49.0624 0x12e4 WcsPlugInService - ok 15:12:49.0648 0x12e4 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys 15:12:49.0653 0x12e4 Wd - ok 15:12:49.0684 0x12e4 [ 37CE6867FC4A6827009A713A9737262C, D8890524F4EF358E35C4A992BEAF7C8FB5ED647FE4D899D3CF608C2201E218A5 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 15:12:49.0701 0x12e4 Wdf01000 - ok 15:12:49.0724 0x12e4 [ E8E4226F02B3CDC87FC53C9406F3BEA0, 2CF36989DCC2B534C4E55F95F52C911BD364735D2089D8195E5CB913268A5757 ] WdiServiceHost C:\Windows\system32\wdi.dll 15:12:49.0734 0x12e4 WdiServiceHost - ok 15:12:49.0736 0x12e4 [ E8E4226F02B3CDC87FC53C9406F3BEA0, 2CF36989DCC2B534C4E55F95F52C911BD364735D2089D8195E5CB913268A5757 ] WdiSystemHost C:\Windows\system32\wdi.dll 15:12:49.0747 0x12e4 WdiSystemHost - ok 15:12:49.0770 0x12e4 [ 0F9A4358F20B443D303F9FA222D4ECD2, 8552F4D8DF9E62DF7C1B1233B036E78BCE70F2BD1F057E23729CEF991BD65441 ] WebClient C:\Windows\System32\webclnt.dll 15:12:49.0781 0x12e4 WebClient - ok 15:12:49.0807 0x12e4 [ D833A60DE407802A3A4894DD3B2E2AFB, CBB0CA5300A6F67D12EF0BE76F7EA30DE1C64C02D3CF1F835E36C5AD866A1D66 ] Wecsvc C:\Windows\system32\wecsvc.dll 15:12:49.0820 0x12e4 Wecsvc - ok 15:12:49.0843 0x12e4 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll 15:12:49.0863 0x12e4 wercplsupport - ok 15:12:49.0883 0x12e4 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll 15:12:49.0903 0x12e4 WerSvc - ok 15:12:49.0937 0x12e4 [ 7575DC87DF112AC0C6E95A0F87915CDC, 1EC63A4CC0AC3341F639A5483F1A0B710E148DCB2DDA16ADCDDDED6E5EECE549 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 15:12:49.0942 0x12e4 WfpLwf - ok 15:12:49.0963 0x12e4 [ EACC800ECF26D82A063BC8E49EE1D8BF, DB14CDF030EDD10E174F44AA6EDC953964EC5E26D219480C776C29378BF84314 ] WiaRpc C:\Windows\System32\wiarpc.dll 15:12:49.0970 0x12e4 WiaRpc - ok 15:12:49.0987 0x12e4 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys 15:12:49.0992 0x12e4 WIMMount - ok 15:12:50.0011 0x12e4 WinDefend - ok 15:12:50.0019 0x12e4 WinHttpAutoProxySvc - ok 15:12:50.0053 0x12e4 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 15:12:50.0075 0x12e4 Winmgmt - ok 15:12:50.0129 0x12e4 [ A7F3CD630FAEDA9110881CBC5ED43F70, 4715EE145790CF0EC8B14E925D4D72AC92A30130F07F64746C6F030E9B0F73C5 ] WinRM C:\Windows\system32\WsmSvc.dll 15:12:50.0167 0x12e4 WinRM - ok 15:12:50.0211 0x12e4 [ 20BEDD4C86D69D8036821B5FBF0081E5, 10FFAFBDBE0D576EA825351BFF3816551417C53E01E3D8B1955ACE3EA9DB027F ] Wlansvc C:\Windows\System32\wlansvc.dll 15:12:50.0230 0x12e4 Wlansvc - ok 15:12:50.0248 0x12e4 [ 241A2D103E5F63A69B130D7C344A228D, 26458F76235116F2BD4F689763F1B730BD024C850B7B22238210D60ABB1393D8 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 15:12:50.0254 0x12e4 WmiAcpi - ok 15:12:50.0275 0x12e4 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 15:12:50.0284 0x12e4 wmiApSrv - ok 15:12:50.0313 0x12e4 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll 15:12:50.0319 0x12e4 WPCSvc - ok 15:12:50.0336 0x12e4 [ 74D81AAA1AAAA9F74A978D9584EF0CB6, C4377E29C80004767CD9EB66B343DF46A96373A0F92F3D5A6D3536DFB3E3F226 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 15:12:50.0343 0x12e4 WPDBusEnum - ok 15:12:50.0363 0x12e4 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 15:12:50.0381 0x12e4 ws2ifsl - ok 15:12:50.0396 0x12e4 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll 15:12:50.0407 0x12e4 wscsvc - ok 15:12:50.0470 0x12e4 [ 0506D69B820F2D82506C19D8CF5E4A3F, 210A14364D46E96C45906F07E9B0BD7627CAB1E997F8E5634832987328B6E1B4 ] wuauserv C:\Windows\system32\wuaueng.dll 15:12:50.0512 0x12e4 wuauserv - ok 15:12:50.0534 0x12e4 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 15:12:50.0543 0x12e4 WudfPf - ok 15:12:50.0562 0x12e4 [ 1685B0232BF1306A31DFBC04F36A32B9, E4D98D1636E0E16F7EEAA6E2991307D66A5BA235D4CAF6293F423012E4D6B6B0 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 15:12:50.0572 0x12e4 wudfsvc - ok 15:12:50.0602 0x12e4 [ 13E19A9868C6E1C9F5584D571DDA7D76, 05F0BFA9C1F089EF35EBA85B9B142CF2AC5BDF82968073739E2950CB8444B4BA ] WwanSvc C:\Windows\System32\wwansvc.dll 15:12:50.0613 0x12e4 WwanSvc - ok 15:12:50.0629 0x12e4 ================ Scan global =============================== 15:12:50.0644 0x12e4 [ CEC94EC582DBBAD9461EB2BE2BE319A6, A0FAACC5790D8B813415FB55BB56C5DBD1A9E04BD2CE29BB8671D706F4DA1DF6 ] C:\Windows\system32\basesrv.dll 15:12:50.0667 0x12e4 [ 01CF024CF63002A8134AE73CFACB2B51, 8CC1D0FE5EE04CAB68E41C5953832D8AF0C0BDA5F00D653B7B3064F604E8D9F2 ] C:\Windows\system32\winsrv.dll 15:12:50.0675 0x12e4 [ 01CF024CF63002A8134AE73CFACB2B51, 8CC1D0FE5EE04CAB68E41C5953832D8AF0C0BDA5F00D653B7B3064F604E8D9F2 ] C:\Windows\system32\winsrv.dll 15:12:50.0687 0x12e4 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll 15:12:50.0715 0x12e4 [ 38382A6B73FB37EF692DCBD882AB1FC4, 66B8501C3797C8B4525CD8EC2B141A8751D7A163E24E249C3E1DE42F7C055889 ] C:\Windows\system32\services.exe 15:12:50.0719 0x12e4 [ Global ] - ok 15:12:50.0720 0x12e4 ================ Scan MBR ================================== 15:12:50.0727 0x12e4 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0 15:12:50.0807 0x12e4 \Device\Harddisk0\DR0 - ok 15:12:50.0807 0x12e4 ================ Scan VBR ================================== 15:12:50.0808 0x12e4 [ 67244C0705B3A4B3430C77B9DF889843 ] \Device\Harddisk0\DR0\Partition1 15:12:50.0808 0x12e4 \Device\Harddisk0\DR0\Partition1 - ok 15:12:50.0845 0x12e4 [ A1A1CC4BA4AE1C51FC0245E9B1587FFB ] \Device\Harddisk0\DR0\Partition2 15:12:50.0845 0x12e4 \Device\Harddisk0\DR0\Partition2 - ok 15:12:50.0850 0x12e4 [ D636959D87291DFF36CF784BAB1DE298 ] \Device\Harddisk0\DR0\Partition3 15:12:50.0850 0x12e4 \Device\Harddisk0\DR0\Partition3 - ok 15:12:50.0851 0x12e4 ================ Scan generic autorun ====================== 15:12:50.0995 0x12e4 [ F1BECCB20E118DBCED2C777FC54459F4, E5D1A1193FDCBAD0E930EC6E73942D339FC3885CE407C56BEE2F861F6F1735F1 ] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe 15:12:51.0103 0x12e4 StartCN - ok 15:12:51.0288 0x12e4 [ 7F1D9A8ADFA040DBF7D23B7338DB77F3, A71CF7325333E6073A58C70245548AAC6569D2296DCEDC326ABE8F55611A2F99 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe 15:12:51.0432 0x12e4 RTHDVCPL - ok 15:12:51.0501 0x12e4 [ 2555A094409BD20DAB7A97A5A539F21C, 9227932E394C9AB803C423ED38F58F2D7FBCB193A041FD3975B6F0A927D56B55 ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe 15:12:51.0510 0x12e4 USB3MON - ok 15:12:51.0544 0x12e4 [ 4B5985DC72C3546A890C881A6EA5BE5A, CEB1B4F63517E9E4F7E473A70EE1B1968AD45AD41C6900CE38040F8CF857D98F ] C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe 15:12:51.0565 0x12e4 AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 ) 15:12:53.0938 0x12e4 Detect skipped due to KSN trusted 15:12:53.0938 0x12e4 AVMWlanClient - ok 15:12:54.0113 0x12e4 [ 7EE68A122ED08E4AAD8DA551E34D2515, B3C9AB270AF595D3DBAFBF4A312B96CBF00C16F0A03CCC86BE56825CD1EB7143 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe 15:12:54.0172 0x12e4 SDTray - ok 15:12:54.0223 0x12e4 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:12:54.0259 0x12e4 Sidebar - ok 15:12:54.0278 0x12e4 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:12:54.0298 0x12e4 mctadmin - ok 15:12:54.0316 0x12e4 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 15:12:54.0338 0x12e4 Sidebar - ok 15:12:54.0341 0x12e4 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe 15:12:54.0350 0x12e4 mctadmin - ok 15:12:54.0395 0x12e4 [ F51BB12D8977D26C1A4CDA348770D9F1, DDA35CD8F8A6591B83821B5180D457740E0B820CCE000BC7FB1B78FB4AEAD3BA ] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe 15:12:54.0411 0x12e4 SpybotPostWindows10UpgradeReInstall - detected UnsignedFile.Multi.Generic ( 1 ) 15:12:56.0748 0x12e4 Detect skipped due to KSN trusted 15:12:56.0748 0x12e4 SpybotPostWindows10UpgradeReInstall - ok 15:12:56.0749 0x12e4 Waiting for KSN requests completion. In queue: 5 15:12:57.0749 0x12e4 Waiting for KSN requests completion. In queue: 5 15:12:58.0749 0x12e4 Waiting for KSN requests completion. In queue: 5 15:12:59.0754 0x12e4 AV detected via SS2: Spybot - Search and Destroy, C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe ( 2.3.39.0 ), 0x61010 ( enabled : outofdate ) 15:12:59.0781 0x12e4 Win FW state via NFP2: enabled ( trusted ) 15:13:02.0177 0x12e4 ============================================================ 15:13:02.0177 0x12e4 Scan finished 15:13:02.0177 0x12e4 ============================================================ 15:13:02.0180 0x12ac Detected object count: 0 15:13:02.0180 0x12ac Actual detected object count: 0 |
28.11.2016, 16:05 | #5 |
/// TB-Ausbilder | Starke Lags/Spikes seit ca. 1-2 Wochen Servus, Logdateien sehen gut aus. Wir können gerne ein paar Tools laufen lassen, wenn du magst... gib mir einfach Bescheid. |
28.11.2016, 17:16 | #6 |
| Starke Lags/Spikes seit ca. 1-2 Wochen Ja, gerne. |
29.11.2016, 15:32 | #7 |
/// TB-Ausbilder | Starke Lags/Spikes seit ca. 1-2 Wochen Servus, wir beginnen so: Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers |
30.11.2016, 15:03 | #8 |
| Starke Lags/Spikes seit ca. 1-2 Wochen Habs drüber laufen lassen, es wurde allerdings nichts gefunden, deshalb war auch kein Cleanup nötig/möglich.. Passt das? |
30.11.2016, 17:07 | #9 |
/// TB-Ausbilder | Starke Lags/Spikes seit ca. 1-2 Wochen Servus, ja, passt. Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
03.12.2016, 14:49 | #10 |
/// TB-Ausbilder | Starke Lags/Spikes seit ca. 1-2 Wochen Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
Themen zu Starke Lags/Spikes seit ca. 1-2 Wochen |
blick, dankbar, eingefangen, gefangen, gefunde, kabel, nichts, problem, situation, starke, system, trotz, vermute, werfen, wlan, woche, wochen |