Win10: Adware Elex und Adware Ghokswa kommen ständig wieder

BmgDroog · 16.05.2017, 20:10

Hallo Trojaner-Bord-Team!
Leider haben mich Adware Elex und Adware Ghokswa böse erwischt. Wann, wie sie auf meinen Rechner gekommen sind, weiß ich nicht.
Zunächst wurde Elex von Malwarebytes vor einigen Wochen entdeckt und zunächst entfernt. 1-2 Wochen später hatte ich plötzlich eine Google-Chrome Version und einige andere kleine Programme auf dem Rechner, die ich nie installiert hatte. Stutzig geworden ließ ich erneut Malwarebytes laufen: Elex und Ghokswa zuhauf.
Eine kurze Netzrecherche zu Ghokswa ließ mich zu folgenden Mitteln greifen: erst Adwarecleaner laufen lassen, danach Malwarebytes, danach HitmanPro. Ghokswa war (vermeintlich) weg, Elex zunächst auch.
Danach immer wieder starke Verlangsamung des Firefox Browsers, teilweise mehr als 30 Sekunden für einen Seitenaufbau.
Malwarebytes laufen lassen: Elex war wieder da... Kurze Zeit später auch wieder Ghokswa mit den bekannten Symptomen: unerwünschte Programme/Links und ein gefakter Chrome-Browser, der sich selbst installiert hatte.

Ich bin mit meiner Weisheit am Ende, im Anhang findet ihr die FRST-Files und die letzten Ergebnisse von Malwarebytes, HitmanPro und Adwarecleaner.

Sollten weitere Infos nötig sein, bitte um Mitteilung und vielen Dank für die Mühen vorab...

M-K-D-B · 16.05.2017, 20:51

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Um die Bereinigung möchlichst effektiv und schnell gestalten zu können, bitte ich um Beachtung der folgenden Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir meine Anleitungen immer sorgfältig durch, arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste immer alle Logdateien (auch wenn nichts gefunden wurde). Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Außerdem bitte ich dich, nicht eigenmächtig irgendwelche Sicherheitsprogramme auszuführen und damit deinen Rechner zu überprüfen/bereinigen, da ich so leicht den Überblick verlieren kann.
Außerdem hättest du dir das Eröffnen eines Themas in diesem Fall auch gleich sparen können, wenn du dann doch wieder alleine rumhantierst.
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop ( C:\users\dein Benutzername\Desktop\ ) abzuspeichern und von dort als Administrator zu starten!
Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.
Sollten die Logdateien einmal die zulässige Länge (~ 120.000 Zeichen) überschreiten, so teile die Logdateien auf mehrere Posts auf.
Zur Not kannst du die Logdateien dann auch zippen (in ein .zip Archiv packen) und als Anhang hochladen.
Bitte arbeite so lange mit mir zusammen, bis ich dir sage, dass wir fertig sind und dein Rechner "sauber" ist. Das vorzeitige Verschwinden von Symptomen heißt nicht automatisch, dass dein Rechner bereits vollständig sauber ist.
In der Regel antworte ich dir innerhalb von 24 Stunden, oft sogar wesentlich schneller.
Jedoch habe auch ich einen normalen Beruf und Familie. Ich bin daher nicht jeden Tag stundenlag hier im Forum unterwegs. Es kann unter Umständen bis zu 2 Tage dauern, bis du eine Antwort von mir erhältst. Sollte diese Zeit überschritten sein, so kannst du mir gerne eine PM als Erinnerung schicken.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

BmgDroog · 16.05.2017, 21:30

Hallo Matthias!
Vielen Dank für den schnellen Start der Bearbeitung!

Hier mein FRST.txt Teil 1...

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2017
durchgeführt von BmgDroog (Administrator) auf ARBEITSTIER (16-05-2017 22:04:44)
Gestartet von C:\Users\BmgDroog\Desktop
Geladene Profile: BmgDroog (Verfügbare Profile: BmgDroog & postgres & DefaultAppPool)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Cliqz GmbH) C:\Program Files (x86)\CLIQZ\CLIQZ.exe
(Cliqz GmbH) C:\Program Files (x86)\CLIQZ\CLIQZ.exe
(Cliqz GmbH) C:\Program Files (x86)\CLIQZ\CLIQZ.exe
(eVenture Limited) C:\Program Files (x86)\hide.me VPN\Hide.me.exe
(eVenture Limited) C:\Program Files (x86)\hide.me VPN\hidemesvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1051_none_7f2bf7ea21d201b2\TiWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [727896 2014-03-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [DATAflor Update-Manager] => C:\Program Files\DATAflor\Update-Manager\DATAflor.UpdateManager.exe [1697840 2016-10-19] (DATAflor AG)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-09] (AVAST Software)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [113656 2013-01-24] (Intel Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28432392 2017-05-01] (Dropbox, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\Run: [EPSON SX420W Series (Kopie 1)] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\Run: [EPSON SX420W Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\RunOnce: [Uninstall C:\Users\BmgDroog\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\BmgDroog\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\MountPoints2: {3c71560c-50b1-11e6-b549-74de2b99131f} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\MountPoints2: {515e8259-889e-11e6-b550-74de2b99131f} - "G:\setup.exe" /AUTORUN
HKU\S-1-5-18\...\Run: [] => [X]
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-09] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-01] (Dropbox, Inc.)
Startup: C:\Users\BmgDroog\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hide.me VPN.lnk [2017-05-16]
ShortcutTarget: hide.me VPN.lnk -> C:\Program Files (x86)\hide.me VPN\Hide.me.exe (eVenture Limited)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{000614B0-46EC-441A-ABFF-67EC40F082F1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{006D3C93-B2EF-4709-9EC9-BF3BE1C2CC45}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{00B55B84-AE6B-4D80-BF97-08348DFDC6C4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{00BCA9C4-9D74-481D-BBCA-969BC64ED788}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{00DC17C4-4189-40DB-AD54-77EFCCCD8165}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{015909BE-5E6A-42A2-906F-227B5684450C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{025B6047-F152-40C5-80DA-44E94944986D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{035229ED-B22E-4E3F-B88E-CDC4E11FCF12}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{03D9F339-6D5A-48EE-9D07-FDF180F397AF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{03FED8BD-ACFB-4CA3-ADCD-D365F03DC058}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0446BFC6-6D98-47DD-A1EF-7070E5E23659}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0532F414-57B8-421D-9A2E-A34A48A33F0D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{054BD0E5-8724-4EB7-9010-C23B39AB4129}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{06582000-C37C-48DE-9BE3-43A8065151B5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{06B60881-CC99-4C30-A84C-88D6D6900AE4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{08328A7C-0646-4550-B2B9-664300D608C3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{086b6efc-1b8d-4038-b4ed-5929a2148a99}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{08E8CA48-2295-414F-9357-6D9F53651ECC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{09614449-75E9-4096-9D6D-9828DDEA153A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0A8DB157-0AD5-42C7-9328-3A8A00B36022}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0ac7d42b-3241-4c90-af49-86060ae6e426}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{0ac7d42b-3241-4c90-af49-86060ae6e426}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{0BCA68AB-EC8A-4914-B163-B8908BE7E72B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0CFB55C6-9594-4004-B347-69D5ACDD4FE2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0D11D220-495A-4056-B3B4-C3968F134644}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0D568EE5-828C-4C9E-99D2-9740B0736696}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0E5F355C-E651-41DE-BCBD-E79786D866E5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0EAB84C2-ACDF-4605-845A-943320928A49}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{0F2DEAFC-BC66-44A3-AF8E-120290C8B915}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{10BDB8A6-E007-4A5B-8A7D-23A4B7359685}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{11248B99-87CA-44B2-BA00-88F0D9B67F4F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{11393531-50BE-4D38-B88D-6A1ABCE8778E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{11C71FD1-7879-46DC-932A-2F2BD540659C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{131784AD-F030-4318-840C-433C6D3865CF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{132A97F7-A070-4441-9333-3B462DB8E86E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1338529F-E82A-43E2-AD12-E45A09FD820F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{13804D30-8E6C-469E-88E2-7A0F4D95DC99}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1522E0F5-AEBD-469E-8F85-71CF91FFB496}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{157F8486-4D9C-49C4-AA78-9343C19CB2C5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{15F00748-A2CF-4E9E-8064-FF6168816BD1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{16753496-07C8-4D18-802B-55843D184D0E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{16809C8F-2B89-4650-8BE1-C7BC7A6C8B7B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{16E12EDC-8A2B-4231-8DB4-82139988CB15}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{173F945B-B0BD-4793-9031-034F26CE422A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{17D81AE3-A835-4C0B-B49F-3B2D8012364D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{19132344-A581-4330-96B3-2355B97E89DA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{19F9EED9-F808-437A-8428-19E0F3D52AE4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1B077A05-5312-4818-B610-31D598583F41}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1C0C04B3-68B4-4C73-8405-CD9E10912069}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1C7DB370-BBED-422E-9A20-B7985B461A5E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1CEF41A0-A735-4E9E-B247-EEFE0A1C17CA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1D9FF3D9-0C28-4638-88EB-AE7581E0CDDF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1EA4FC67-1AD2-49EC-B267-D64B695C2324}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1F737139-CFFF-4596-8DC4-D5C92D8FE578}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{1FEE54A3-9385-47AD-8A6D-FADEE1DC8209}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2107DE49-E246-43AA-8128-B3A0C278D28F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2159B50A-C13A-4037-A208-46CA70F0297B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{21A7C3D4-D9B2-408F-ABB1-6FD58133B6E1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{21FC7299-E060-40C4-B2B5-1F31BB064E27}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{226179AA-32DB-4AF5-8D72-A6D5435CC40A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{23593718-1AE6-4036-B5F2-FCFB1AEA8BE4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{23AD271E-7F14-4344-BFCC-60F02A433EE8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{24E637FB-06B4-49D4-B41D-D122A116F039}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{26CDF0C7-1B26-4950-B77D-6A0353D8F421}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2791EB75-3883-4C79-B513-69F64CBA14A4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{27C89898-7C2A-4468-82ED-19AF4EC5B9AC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{28DFF7AA-6820-44B7-8703-05030B4E081E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{29829571-870F-43E8-84F4-D852194D450E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{29fd1b11-79f2-11e6-94d2-806e6f6e6963}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2ABC5B77-CCD9-42A0-B0C3-FE58C2358631}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2AEFA81F-1532-48B6-8238-118C7F26C012}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2B0D067E-DA5F-4C9C-8EA5-C0104B69E940}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2B7BDDD3-1D01-4BD4-9A4E-4E8F0F888DC8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2C492F6E-D3BF-4766-A388-9C83F1CD1612}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2D05AE2C-A978-44C8-BE6B-3D7A234A5701}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2D7DF05E-6DD1-4674-ADA9-96A45BE73E7C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2E214504-56E8-4ED0-87A4-5F35ED9C5914}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2E9E2346-5EA7-40B1-A6B6-13D161B7B2B1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2FF8D85F-366A-440E-9CD7-D73D73428017}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{31AA74AC-32C8-451C-83A2-9B7273B0B5E1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{32B73F37-D445-45AB-A1B3-C01C5D85FE49}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3371D50E-80FF-47DB-A885-AE1A968265BC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{34165147-D9A7-4166-B455-C91DC8FF0E60}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{34DB9E82-0C40-4A4A-AE79-16DC18B448E0}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{34F26DE5-D688-44FD-B30A-DF32736CE054}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{352EFDDB-A290-473F-AEAB-69C0FAC1D724}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{35E15825-35F2-4E21-9CC4-1D85C41D7D6E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3601FD12-AD61-454E-8AB4-936FCAE1BFFD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{374DF26D-1F01-4923-9CE9-6AC3305A0733}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3766C767-E7EB-4C18-B84A-21E92BF26E34}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{377d7ac1-ca76-475a-882b-965937a1f177}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{37CCB8D9-C52C-446E-AF3A-BB078774F377}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{37D057FC-A278-4FB5-8A28-3F0646A43C4E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{38B1DE79-670D-4205-B221-0ED37CBD9916}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{394B8E04-D69A-4BD1-8F50-3E45A3B7074D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3A1289C7-EB15-4C2C-B0D4-4362AFDCE649}: [NameServer] 109.201.143.224 109.201.143.225
Tcpip\..\Interfaces\{3A52EA38-9D89-4895-BA0C-1A0A30B180DE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3A5FF55C-400C-45E9-B4AC-15AA0E6C5439}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3B77EE4E-1715-4C8A-A54E-71481871ACD5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3B790093-0663-4DAF-934B-9B38E7B574DB}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{3CE266C5-4A36-4092-8BFB-8D0A45D115F1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3EB62C8C-5264-42D9-B8ED-3EF7012A62F8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3EEB0BDB-2761-4BEC-9923-617006D44156}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3F0DF44F-4273-443F-BF7B-B11003F387D3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3F2645D0-6CE7-4F33-AB1F-AADCC55E986B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3F492C22-F311-4C95-BAF6-380F3A90E362}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{3F492C22-F311-4C95-BAF6-380F3A90E362}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{3F6637C2-EA48-47C1-99E3-DB6720B247BE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{40FCBCB6-F65F-4551-950C-94F21FFA8988}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{4179EBD3-06C9-4104-A94E-97356AF999ED}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{44EB690F-827B-498B-838F-B222F8AFFB49}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{45788752-8885-4bc2-86c7-6bce10233c55}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{4667B45A-2869-40E2-B3FF-5B43609E20FD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{47D8AFEC-B9CD-4895-94FC-6ECB6E1687B9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{47F60D3F-A8AF-4690-8D78-3999DFEDD392}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{4A07374D-7797-406E-A43B-DA23121A98D2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{4B64C53C-B366-47F5-862C-9198ACFF583A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{4BE1B6B2-34AF-45B4-8127-79D26663E4E6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{4C32DA09-ED03-4408-B6F4-DC37ADB7D53A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{50515070-277D-45CC-A8F6-9779D5813997}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{51074E6F-9529-41E7-B6CA-C408B006DC8D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5134F835-6DA2-4424-90B9-97C99906945C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{51E79E3D-625E-437F-82D5-A1630C4230F8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{52F7F455-3792-4A85-A2F4-47347883368A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{53267D2A-831C-4A01-A797-10096F6FF05F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{53FB0BD7-82AB-4890-8FE0-98A3AA3F9BD4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{54D28285-DE67-414F-A79C-41C17CF4995F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{54D40745-EE93-4DA9-9AF5-CBF34D43734D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{54DA46D7-6685-429A-93AC-FB16C6AF7922}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{57DDD937-3547-4DF0-8D1E-59CA5F32829C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{57F39FD1-D686-4A1A-A8A0-9EFF61F64F9F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5803DDFB-BBB8-4D12-8EF6-4F654A45697D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{58217B5D-5479-4575-8B96-59B49AF14DD4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5ABD4C46-D4BA-427F-A48F-C3D4624D32AC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5B726D6D-79B8-4D70-A99A-DB88DCB56199}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5C1CBF0C-73C8-44BC-B1E2-293FEC5966BC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5C61CCF9-62A8-488D-9351-7ECEBAC0BFCA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5D2FBF4E-9E96-4936-9986-48891A88A65C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5D4E42C7-B063-41E6-8D70-420BCC60F656}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5DE44B2D-53CD-4F7B-9B9B-DE52E5DE302C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{611C8CE3-E897-4C52-A5F1-DE431B65A1A8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{61318C93-716F-4189-B62E-D4584B733D9C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{620345E1-1C50-4F41-A8E1-CF2F38B46432}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{624B4FF2-BBE8-40BB-AEB3-E04EFA004403}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{63C6E18B-1B3B-4AAC-B9EE-CFF53B6EE21A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6499EAEA-8EFC-4988-B964-9B8F33288077}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6514D80C-B5C5-476E-A617-B92B639A7E5C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{666BE99C-2E81-4B65-84E3-4F952111DC44}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{67f400a8-5e03-4281-a7bb-ea1e7d8fd6f5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{683ED4F1-CB3B-4A7B-8EA0-4FE1F3732B7A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{686B6ECD-2F0D-4C43-9DC5-73F6603A63E1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{68C97B0A-F34F-4296-B6BC-B738AA46FF37}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{69922E64-F4BE-4C00-B1DD-9E0429051237}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6998BB62-4E21-4A3D-A0AB-11D1F9160C44}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6A42A154-6A69-47C3-94E9-BA56DA06C385}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6A50D3E2-B65A-408F-AC6B-F0D5D5CB8734}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6AC02272-7067-4B60-A36D-89BFC4CE9974}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6BA28497-DD61-4320-8BC3-1F2AA5FF3C63}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6CA7EE90-343D-441D-908D-2FB5D7F5C5E7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6d40db0e-e351-4acc-b23d-9d7b3213372d}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6E801AE2-CCAC-49D1-9999-A0C58106EF30}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6F8A97AE-6FD7-4760-9114-1514E1D99E2B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{70D3B1B5-19B5-4712-8688-87A9988B639C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{71D971E1-5426-47FC-8B41-2778513315EE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{72fe4922-0849-47fb-a435-cdd80407bb31}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{7316F7FA-3250-44F1-B25D-FBB12B727127}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{740f727d-336d-4fd5-b013-cc3a8749fd21}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{745FC762-5390-45F2-9457-D4E6B434923D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{74641BE3-F234-4EC5-A637-0394EAB164DB}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{746C4139-2373-4F7A-8750-7C9D8B90F376}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{749E411E-27E0-4735-A561-49DEFBAE17B6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7524DCE2-539C-4C9E-850A-C980FA9698DE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{76E440AB-E75A-4E6B-808A-089790343A34}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{77421ABD-DD53-4512-A406-305BA2EE5F68}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{775FD1BA-A13E-42C8-8025-D364EFEE84C7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{78AAB140-02BC-47E2-B613-07A2092CC4BF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{792BC27E-E9E9-417E-8B88-78577D860FB6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7A835DBF-8BE5-4428-8497-699D5EB7FA55}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7AD26823-5080-47D7-8A2A-8D84F417FE70}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7B790FED-B2F0-41A2-95E1-E0D6C411BA4A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7C38C1A8-BFC9-4CBD-820B-8651C6C21865}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7C883152-DE71-4CA4-AE41-D8DE65D8C7EB}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7E882BE2-0AF7-43AB-B1FF-5121D288F463}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{7E8E2F3C-7BAE-48EB-BEB3-6689E947C6B7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8089656A-B10D-497F-BBE2-034F6DD03767}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{81446480-144B-4162-B965-706B3B92DDD9}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{81CFD627-A05F-44F7-A3DB-326C2E2E8988}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{82db5934-998c-48ed-8d4f-59e348371f22}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{82E57E0A-DA3B-4529-B1C5-79486A9A8EF2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{839A5087-DCA7-4C39-9D47-540C976B133E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{842B693A-7340-4634-A940-D8BC997D089F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{84552E7D-1070-48E7-B2FC-DE01145D3157}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{84FCBDCD-7244-4AA8-BE64-BC3FDA9D6B8D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{85C9B9CB-8ACB-4D1C-80D6-AFEE69FF9A84}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{8670FDF5-D99F-4C43-B32D-F579E71D8641}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{87782B5D-C013-49BB-9C27-A6E40D723FC2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8928D311-A035-4399-81E4-06D706455EC5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{894CC402-360D-4A0E-9BB0-4950B1CEFB8E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8973E5CC-964F-4ADD-B463-713BA01F07A8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8B2D6444-C87F-4EC7-AD6B-D7C3A5704580}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8BC6750E-1ADC-4B60-9A2F-B62F16C23A61}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8C347A0B-1006-4ABB-95F2-BB767B14B528}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8C347A0B-1006-4ABB-95F2-BB767B14B528}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{8D05E968-4C0B-44A0-B6A3-B62F57FA18ED}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8F5441EB-857D-4F4E-BFDB-63821A301867}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8F5E207E-CF7A-4FDA-9C80-950494140E60}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8FEB951B-B2D2-4746-B2CF-9918CA74D150}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{902A4D6C-C0EF-462C-81E7-D7E95CC202CD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{910E7C4F-D54D-4940-84F9-123372293A5E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{913C785A-769C-4484-A8D5-98F85C50A11E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{91994D00-A29F-45B6-97A4-4DF4466B0FA5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{925F6830-B371-40FA-8C30-814192B806C3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{93AFEE8A-AB72-4B07-A1DB-328E3E2E4622}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{94128B20-545E-4625-9FC7-3BF8E7FC0F97}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{94A20F85-1F3F-4007-89A6-471BAEBF85AE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{94E55DFA-3040-48CE-BCAC-F36B918E36EB}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{970CF1A9-A9D9-4252-8EC2-EC7211EF6FB1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{970FFD63-5F75-4AD2-AFA6-A189C7B76B52}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{97A09D31-8A20-4836-8B8D-1BB4B1DF61AA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{97C9AEC7-85F5-494F-9904-0581BD499893}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{97FBDA41-FF39-4794-93DC-0DC7A59B8129}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{988931FF-D6F2-4523-8FA5-8D30AFD401BC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{998AAEC7-4856-417C-890C-AF6E0E8D5E16}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9B467EBB-9C7E-43A0-9A3F-7E2BB103CB08}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9B53D3DA-63DA-49AA-8E63-9A01A901C038}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9B7FED45-B660-4506-8E32-57A7A943175B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9D26B7BA-0500-4F88-A212-41C524E878E0}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9D4DF382-FD98-424A-BB9A-5E8E2F25942B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9D92D334-5A5B-4E64-8B45-6C76B78A48EE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9E4E59A5-E0B0-4EBC-8D43-930891598AE2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9E67E75F-2042-4D5B-8B08-839D1F73D295}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{9E97CD14-F8B8-41E4-A24A-ED706D49FA20}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A00E4A2D-3514-4533-9B42-64560C48792F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A07E58E9-367E-4E23-8BFB-A85540FE0341}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A1B6D924-E23E-458A-B26B-FDAA3921D627}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A1B7AF92-5A40-408A-8F38-D24AA1592B0F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A33515A4-4E14-412C-BBDB-68B07F26E454}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A3462B0A-FA17-4410-90F5-5AE9E60C3A1C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A38DC206-6ED3-45C8-B910-589367483853}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A52FA65D-9262-4EC0-8A86-1FD15DB0DA4A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A5B62E5B-2140-4FC8-B088-9F5800A4B32E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A6266AEF-A571-476B-83DD-5E7BB710A033}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A6330AC7-F926-4C54-9919-77BFDECBE5CD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A6A90397-7FB3-468B-A105-4920944D16CD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A70087A2-3E12-418F-A73F-E984B0F991D2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A768858A-4E62-4CF3-9168-4D6E6A221453}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A7D831FF-C20B-4DA1-8E12-5BB32713D0C9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A836E19E-9204-4D24-BCD9-4677AA062FAE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A8703686-48D2-4483-88B2-A8B6DAF5F069}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{AA255F53-0383-48A2-9FF8-034B5FAF9BCE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{ABD945F4-9E78-45B2-AEA9-3A3A9BC4A0E4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{AE403EC3-6B61-446F-B00F-CCD9D6332C7A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{AEC350E5-C76A-4EE1-8BAD-19AE33C18CC2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{AEF804C1-5951-4B53-A56C-4CE5C4695A16}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{AF0BA067-E895-4E5E-8767-3F05403AAB78}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B40E9A16-BFE3-49CC-BEC8-619CA3C17523}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B4EE7B32-5ADF-404C-B2A2-D12AA3DFEA55}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B5420D9E-B135-45F3-8777-E21C61CFF831}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B872020A-C0EC-47EE-9D2F-220B8487CCCF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B96C93B8-80EA-495A-8581-297553838667}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{BB205038-BEA5-42B8-A9E1-78A2CE92FAE4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{BB34C9BF-CF5D-435A-8D85-D7A7D2A6EEF4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{BBF30514-8CD4-45E1-8AC5-1B6CD1A2D5D8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{BCA0BF5A-B17D-4473-B712-B5E9EE917B6A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{BD435E8D-0392-441E-AAB1-9D0BB209FEF1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C0637BBA-6AC5-478C-95CD-B73708E776D7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C2525D8C-0C0E-44F9-8496-EDDBE75D8FD9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C310DA61-A354-4254-A62F-3F340334ED06}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C332707F-E083-4406-983D-AB32B99D1E14}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C4272951-AA67-4464-BDA2-933A564E09DB}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C494A7A6-5C0F-4275-AF09-AA852DA8DAC7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C50704FE-5944-40B6-9DAC-9C20CD707613}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C5B9CD30-A807-4A70-846B-0183FDFF9EDD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C5D6D38A-94F1-4763-919A-DB85896D00A7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C6446E41-B785-43A7-B8BB-B399150D0535}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C6D41E44-601D-4BA8-9610-C02E6F254C3D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C6E222CA-0A56-47CF-B618-18A3E0525EB5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C7419EA9-DFD2-46D1-9D19-A5E74929F26A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{C8F3C36B-55F7-4C74-88A7-DFE634C22BFA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CBC4992F-E3FF-48C6-BE63-FDF9300DE8AC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CBCA4C25-7C62-46F6-9AC7-4E16F5E5AD5A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CBD33E09-BAFE-4389-AC6A-4B8CA125B36E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CCE08D8E-0A4F-42A8-B438-0E120E0437AC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CCF7AF41-C976-4383-BA5F-9ABD5FF80948}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CD32DB17-BF99-4428-9A06-DE9C31D18C02}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CD622EAA-0F9D-4C2E-AE17-95B719341FD9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CDF173EF-0975-4095-A038-321BBA72F969}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CE742072-ACB5-4550-B0A2-3A56C93F591F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CEA814B0-A19D-47B2-AAC0-0604C40C8439}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CEAEF504-8184-4F63-9D8D-1C50278640BA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{CF562652-4042-4289-AEAF-19516967CE5C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D00FF82A-9E5F-4E39-B22F-DE789F5EAA40}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D03FA35E-F482-46C4-A79E-3B5AEFE2D45E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D05D374B-C3EE-4F50-962C-60B183448CB7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D0AE119C-CEAD-46B2-9821-78A2D67742AE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D0E25A8E-6139-4B92-8E0E-C899F8E2A26E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D15D5108-238F-47F0-9263-3375CDAD678E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D1EDC6B8-F96E-4A25-A871-E1D6488D9C66}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D2998EC9-9F60-438E-BE05-32148546F7F2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D300DA7C-453E-4C02-A88C-05424856BB2A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D43F6E7F-520F-4D35-9154-7AE7B6043781}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D6048B12-1E5B-4C4A-90BA-BB498D261055}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D6942881-8647-4DD6-803B-A90843AC502C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D829CC87-9282-41BC-BAD6-C829820FC7C3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D82AC88B-4F94-4611-9BD4-D3D47BA90DD0}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D94A95B3-EE1A-4029-B78A-BADD77A2327A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{D956A605-527C-4853-99E1-DEC7A09C8284}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DA10EE43-62BD-45A1-BBB8-9C631ECF9B9B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DAB697FB-5E6C-4605-BBF8-67CBE31BDC2F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DBA02583-6C13-4A0A-9314-8F1B224E9EC8}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DBC4CF08-FE83-48FC-AFC1-57898D2B6064}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DC30C684-9310-4F9F-9CCE-FC5B78EF87A1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DC471BED-FBF1-4AA2-B8CA-BD8A3A8A78E9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DDA57C7D-A902-48D2-8B5F-C0619E233A01}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DE5B831B-4B62-4158-88BF-7B65849DFD57}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DE692673-CC50-4F5B-877C-62079A92B903}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DEF9B69C-56FC-4896-A77F-BBD7700344FE}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{DFBA3AAC-BAC7-4709-87B7-8A38F5A66990}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E0733F30-3852-4CC9-8FE7-3B2EA2D289FC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E0999570-0690-4EF7-AA1D-89D2EB1322E6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E0E31FDD-7F33-43EB-915B-D0BCE2CB9D08}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E14A7DA7-22D7-4638-A8B9-E4AD3748212F}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E14E9381-FCB4-4039-A786-91E2964ECAC2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2902187-9DB6-4E0B-B008-B991684B8364}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2BB14E9-A7CD-498B-B29F-B01C14CED0D1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E47479C6-3541-4104-B633-FEFD8287415F}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{E486ED41-6E1D-40EF-A1A7-A01A8F6F368E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E4E9E827-8A4E-421D-A055-A61584E096F5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E6373D5B-B990-462B-995E-3A0E48CC9118}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E697C5DB-4A7E-4A12-9DD6-79639A81A4EF}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E7D9D612-D178-4F5C-8700-E27D4901AF2A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E805B0AA-86C3-4F7A-968D-B7255E8586D9}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E89C794C-BE2A-4811-864F-EBACF3E0C3D5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{EB610A57-E918-4E80-A8A6-94DC3C270D57}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{ED47128C-2DE8-4B1C-9133-38204D4A6138}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{EDE8D9F5-7EFF-4985-9B37-E3BF9092FF39}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{EDECE1D4-18A7-4FF0-8228-A828F8284B31}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{EFF6AF78-B4F1-4F8A-8478-FD03DD34922D}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{EFFC8800-6C44-465E-8494-6214E11E661E}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F049B3FB-3198-4E3A-B2EB-82021E135368}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F055BD98-83C3-48A6-A878-8E37998A3FC4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F05F2AF3-2C3A-4ACE-B52E-BF667809CD33}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F071AE94-2F9E-457D-83FC-2504E5FDFADB}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F15FCB7E-2502-4362-A119-36875B6C47EC}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F1B4141F-209A-4A72-9B01-CD0DC49E79E1}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F224CAB8-6C04-4585-BCD0-95961247A9B6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F23A5FB4-52AD-4968-A581-5AFB1EA6D18A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F248B6B4-2C17-4848-A9F8-026D34711771}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F3B6D036-A1CB-41EF-8286-8F62EF12691C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F4806152-E9FC-4522-B91B-31C392674D29}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{f4b91dcb-255f-4565-a111-8de19d0e8167}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{f4b91dcb-255f-4565-a111-8de19d0e8167}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{F4BB8ED0-EC86-41D6-A5EB-2B372F928C79}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F4CAFEB8-A548-4FCC-8C63-3786A8EC6166}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F5B51CB8-BDF6-4E65-8B87-9DB55CEF7ED5}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F6A212A6-4C6A-4FBF-B35C-4C08D9BB3C9B}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F783D9F8-EECD-4B0F-8A10-00455EA5ED85}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F7EA59BD-74D3-4DD4-B265-801147327E70}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F8C3E295-9FF2-45D6-8105-4BAA31379194}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{F9E1D64B-CF27-4ADE-BE0B-CB8D95A63B10}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FAF0399F-3D1B-4D6F-9117-8AEF1CD9473A}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FBE15959-0AEF-4F4F-8C91-D52C5AC75240}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FD0CA315-F3D7-44BC-819B-230465F4B207}: [NameServer] 208.67.222.222 208.67.220.220
Tcpip\..\Interfaces\{FDDAAA03-E8BC-4E35-A77C-A547D7A349A7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FE8C87D5-AD1D-4CEB-BE74-CBB2B6A6F258}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FF5894E0-8FC9-4432-8ABD-D2126645B9FD}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FF8912F8-B5AC-4582-AC16-909ECD4E3896}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{FFA5E836-AE33-47C5-A45F-C1DDD308BF80}: [NameServer] 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-05-16] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-16] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-05-16] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-16] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-16] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-16] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-16] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-16] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-3663192501-4106070722-3409359062-1000 -> hxxp://www.google.com

FireFox:
========
FF DefaultProfile: 0fydc7ej.default-1494909172865
FF DefaultProfile: uzufk883.default
FF ProfilePath: C:\Users\BmgDroog\AppData\Roaming\Mozilla\Firefox\Profiles\0fydc7ej.default-1494909172865 [2017-05-16]
FF Extension: (Ghostery) - C:\Users\BmgDroog\AppData\Roaming\Mozilla\Firefox\Profiles\0fydc7ej.default-1494909172865\Extensions\firefox@ghostery.com.xpi [2017-05-16]
FF Extension: (Adblock Plus) - C:\Users\BmgDroog\AppData\Roaming\Mozilla\Firefox\Profiles\0fydc7ej.default-1494909172865\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-16]
FF ProfilePath: C:\Users\BmgDroog\AppData\Roaming\CLIQZ\Profiles\uzufk883.default [2017-05-16]
FF Homepage: CLIQZ\Profiles\uzufk883.default -> about:cliqz
FF Extension: (Cliqz) - C:\Users\BmgDroog\AppData\Roaming\CLIQZ\Profiles\uzufk883.default\features\{1668d816-a4ad-4dc8-94a9-8994033cecf1}\cliqz@cliqz.com.xpi [2017-05-16] [ist nicht signiert]
FF Extension: (HTTPS Everywhere) - C:\Users\BmgDroog\AppData\Roaming\CLIQZ\Profiles\uzufk883.default\features\{1668d816-a4ad-4dc8-94a9-8994033cecf1}\https-everywhere@cliqz.com.xpi [2017-05-16] [ist nicht signiert]
FF Extension: (HTTPS Everywhere) - C:\Program Files (x86)\CLIQZ\browser\features\https-everywhere@cliqz.com.xpi [2017-05-16] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-22] ()
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-22] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin HKU\S-1-5-21-3663192501-4106070722-3409359062-1000: @acestream.net/acestreamplugin,version=3.1.16.1 -> C:\Users\BmgDroog\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies)
FF Plugin HKU\S-1-5-21-3663192501-4106070722-3409359062-1000: @acestream.net/acestreamplugin,version=3.1.7 -> C:\Users\BmgDroog\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies)

Chrome: 
=======
CHR HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [87384 2014-03-27] (Alps Electric Co., Ltd.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-09] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-09] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3801280 2017-05-04] (Microsoft Corporation)
S3 CliqzMaintenance; C:\Program Files (x86)\Cliqz Maintenance Service\maintenanceservice.exe [170408 2017-05-16] (Cliqz GmbH)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-15] (Dropbox, Inc.)
S2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [48944 2017-05-01] (Dropbox, Inc.)
S2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [391656 2016-08-24] (Digital Wave Ltd.)
S2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135488 2017-05-15] (SurfRight B.V.)
R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\hidemesvc.exe [138960 2017-04-02] (eVenture Limited)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
S3 MBAMService; D:\Programme\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
S2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [Datei ist nicht signiert]
S2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-08-25] ()
R2 SDScannerService; D:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; D:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; D:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-09] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-09] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-09] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-09] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [83312 2016-08-23] (AVAST Software)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-09] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-09] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-09] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-09] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-09] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-09] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-09] (AVAST Software)
R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [488736 2015-08-03] (Intel Corporation)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251832 2017-05-16] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

BmgDroog · 16.05.2017, 21:31

FSRT.txt Teil 2...

Code:

ATTFilter

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-16 22:04 - 2017-05-16 22:05 - 00050409 _____ C:\Users\BmgDroog\Desktop\FRST.txt
2017-05-16 22:02 - 2017-05-16 22:02 - 04922400 _____ (AO Kaspersky Lab) C:\Users\BmgDroog\Desktop\tdsskiller.exe
2017-05-16 21:26 - 2017-05-16 21:26 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\PeerDistRepub
2017-05-16 21:05 - 2017-05-16 21:05 - 01381582 _____ (Igor Pavlov) C:\Users\BmgDroog\Downloads\7z1604-x64.exe
2017-05-16 19:42 - 2017-05-16 19:43 - 01663672 _____ (Malwarebytes) C:\Users\BmgDroog\Desktop\JRT.exe
2017-05-16 19:40 - 2017-05-16 22:04 - 00000000 ____D C:\FRST
2017-05-16 19:06 - 2017-05-16 19:06 - 02429952 _____ (Farbar) C:\Users\BmgDroog\Desktop\FRST64.exe
2017-05-16 19:03 - 2017-05-16 22:06 - 00000000 ____D C:\Users\BmgDroog\AppData\LocalLow\Mozilla
2017-05-16 18:55 - 2017-05-09 21:03 - 04102600 _____ C:\Users\BmgDroog\Desktop\adwcleaner_6.046.exe
2017-05-16 18:32 - 2017-05-16 18:32 - 00014117 _____ C:\Users\BmgDroog\Desktop\Final_Malware_2017_05_16.txt
2017-05-16 18:17 - 2017-05-16 18:17 - 00003599 _____ C:\Users\BmgDroog\Desktop\Final_AdwCleaner2017_05_16.txt
2017-05-16 18:14 - 2017-05-16 18:28 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-16 17:41 - 2017-05-16 17:41 - 00000000 ____D C:\Program Files (x86)\Google
2017-05-16 06:32 - 2017-05-16 06:32 - 00000000 ____D C:\Users\BmgDroog\Desktop\Alte Firefox-Daten
2017-05-16 06:11 - 2017-05-16 06:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-16 06:11 - 2017-05-16 06:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-16 06:10 - 2017-05-16 06:10 - 00246352 _____ (Mozilla) C:\Users\BmgDroog\Downloads\Firefox Setup Stub 53.0.2.exe
2017-05-15 19:13 - 2017-04-28 03:28 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-05-15 19:13 - 2017-04-28 02:59 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-15 19:13 - 2017-04-28 02:48 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-05-15 19:13 - 2017-04-28 02:46 - 01504056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-15 19:13 - 2017-04-28 02:46 - 01431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-05-15 19:13 - 2017-04-28 02:45 - 02263832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-15 19:13 - 2017-04-28 02:45 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-05-15 19:13 - 2017-04-28 02:45 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-05-15 19:13 - 2017-04-28 02:45 - 00781144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-05-15 19:13 - 2017-04-28 02:45 - 00493920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-15 19:13 - 2017-04-28 02:42 - 00601952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-05-15 19:13 - 2017-04-28 02:41 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2017-05-15 19:13 - 2017-04-28 02:40 - 06665952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-15 19:13 - 2017-04-28 02:39 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-15 19:13 - 2017-04-28 02:35 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2017-05-15 19:13 - 2017-04-28 02:29 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-05-15 19:13 - 2017-04-28 02:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-15 19:13 - 2017-04-28 02:22 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-05-15 19:13 - 2017-04-28 02:21 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2017-05-15 19:13 - 2017-04-28 02:20 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2017-05-15 19:13 - 2017-04-28 02:19 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-15 19:13 - 2017-04-28 02:19 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2017-05-15 19:13 - 2017-04-28 02:18 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-05-15 19:13 - 2017-04-28 02:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-05-15 19:13 - 2017-04-28 02:18 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-05-15 19:13 - 2017-04-28 02:17 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2017-05-15 19:13 - 2017-04-28 02:17 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-05-15 19:13 - 2017-04-28 02:16 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2017-05-15 19:13 - 2017-04-28 02:16 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-05-15 19:13 - 2017-04-28 02:16 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-15 19:13 - 2017-04-28 02:16 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2017-05-15 19:13 - 2017-04-28 02:15 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2017-05-15 19:13 - 2017-04-28 02:14 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-15 19:13 - 2017-04-28 02:14 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-15 19:13 - 2017-04-28 02:13 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2017-05-15 19:13 - 2017-04-28 02:13 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-05-15 19:13 - 2017-04-28 02:12 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-05-15 19:13 - 2017-04-28 02:12 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-05-15 19:13 - 2017-04-28 02:11 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2017-05-15 19:13 - 2017-04-28 02:11 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2017-05-15 19:13 - 2017-04-28 02:11 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-15 19:13 - 2017-04-28 02:11 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-15 19:13 - 2017-04-28 02:10 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-05-15 19:13 - 2017-04-28 02:09 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-05-15 19:13 - 2017-04-28 02:09 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2017-05-15 19:13 - 2017-04-28 02:09 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-15 19:13 - 2017-04-28 02:09 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-05-15 19:13 - 2017-04-28 02:08 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-15 19:13 - 2017-04-28 02:08 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-05-15 19:13 - 2017-04-28 02:08 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-05-15 19:13 - 2017-04-28 02:07 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2017-05-15 19:13 - 2017-04-28 02:06 - 04614656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-05-15 19:13 - 2017-04-28 02:06 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-05-15 19:13 - 2017-04-28 02:06 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-05-15 19:13 - 2017-04-28 02:05 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-15 19:13 - 2017-04-28 02:05 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-05-15 19:13 - 2017-04-28 02:05 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2017-05-15 19:13 - 2017-04-28 02:04 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2017-05-15 19:13 - 2017-04-28 02:03 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2017-05-15 19:13 - 2017-04-28 02:03 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2017-05-15 19:13 - 2017-04-28 02:03 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2017-05-15 19:13 - 2017-04-28 02:03 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsnt.dll
2017-05-15 19:13 - 2017-04-28 02:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-15 19:13 - 2017-04-28 02:01 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2017-05-15 19:13 - 2017-04-28 02:00 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-05-15 19:13 - 2017-04-28 02:00 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-15 19:13 - 2017-04-28 01:59 - 02154496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-05-15 19:13 - 2017-04-28 01:59 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2017-05-15 19:13 - 2017-04-28 01:58 - 07468544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-05-15 19:13 - 2017-04-28 01:58 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-15 19:13 - 2017-04-28 01:57 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2017-05-15 19:13 - 2017-04-28 01:56 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01987584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-05-15 19:13 - 2017-04-28 01:55 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 02747904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 02483200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 02027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-15 19:13 - 2017-04-28 01:54 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2017-05-15 19:13 - 2017-04-28 01:54 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2017-05-15 19:13 - 2017-04-28 01:53 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-05-15 19:13 - 2017-04-28 01:53 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-05-15 19:13 - 2017-04-28 01:53 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-15 19:13 - 2017-04-28 01:52 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-05-15 19:13 - 2017-04-28 01:52 - 02994176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-15 19:13 - 2017-04-28 01:52 - 01600000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-15 19:13 - 2017-04-28 01:50 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2017-05-15 19:13 - 2017-03-04 08:23 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2017-05-15 19:13 - 2017-03-04 08:22 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-05-15 19:13 - 2017-03-04 08:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2017-05-15 19:13 - 2017-03-04 08:16 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2017-05-15 19:13 - 2017-03-04 08:05 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2017-05-15 19:13 - 2017-03-04 08:01 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-05-15 19:13 - 2017-03-04 08:00 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-15 19:12 - 2017-04-28 02:58 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-15 19:12 - 2017-04-28 02:56 - 02048488 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-15 19:12 - 2017-04-28 02:53 - 00616048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-15 19:12 - 2017-04-28 02:46 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-05-15 19:12 - 2017-04-28 02:45 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-05-15 19:12 - 2017-04-28 02:43 - 02168288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-15 19:12 - 2017-04-28 02:43 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-05-15 19:12 - 2017-04-28 02:43 - 01557224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-15 19:12 - 2017-04-28 02:43 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 04023008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 01277856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 01202936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 00981888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-05-15 19:12 - 2017-04-28 02:40 - 00352760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2017-05-15 19:12 - 2017-04-28 02:39 - 04312248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-15 19:12 - 2017-04-28 02:39 - 00962760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-15 19:12 - 2017-04-28 02:35 - 01414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-15 19:12 - 2017-04-28 02:23 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-05-15 19:12 - 2017-04-28 02:22 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-15 19:12 - 2017-04-28 02:21 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-15 19:12 - 2017-04-28 02:21 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BthTelemetry.dll
2017-05-15 19:12 - 2017-04-28 02:20 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2017-05-15 19:12 - 2017-04-28 02:19 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-05-15 19:12 - 2017-04-28 02:19 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-15 19:12 - 2017-04-28 02:17 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-15 19:12 - 2017-04-28 02:17 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2017-05-15 19:12 - 2017-04-28 02:17 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-05-15 19:12 - 2017-04-28 02:16 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2017-05-15 19:12 - 2017-04-28 02:16 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-05-15 19:12 - 2017-04-28 02:16 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2017-05-15 19:12 - 2017-04-28 02:16 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2017-05-15 19:12 - 2017-04-28 02:16 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2017-05-15 19:12 - 2017-04-28 02:15 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2017-05-15 19:12 - 2017-04-28 02:15 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-15 19:12 - 2017-04-28 02:14 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2017-05-15 19:12 - 2017-04-28 02:14 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2017-05-15 19:12 - 2017-04-28 02:14 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 13873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-05-15 19:12 - 2017-04-28 02:13 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-05-15 19:12 - 2017-04-28 02:12 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-05-15 19:12 - 2017-04-28 02:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-05-15 19:12 - 2017-04-28 02:12 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2017-05-15 19:12 - 2017-04-28 02:12 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-15 19:12 - 2017-04-28 02:10 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2017-05-15 19:12 - 2017-04-28 02:10 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2017-05-15 19:12 - 2017-04-28 02:09 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2017-05-15 19:12 - 2017-04-28 02:08 - 18365440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-15 19:12 - 2017-04-28 02:08 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-05-15 19:12 - 2017-04-28 02:08 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2017-05-15 19:12 - 2017-04-28 02:07 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-05-15 19:12 - 2017-04-28 02:07 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-05-15 19:12 - 2017-04-28 02:06 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-05-15 19:12 - 2017-04-28 02:06 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-15 19:12 - 2017-04-28 02:05 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-15 19:12 - 2017-04-28 02:05 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-15 19:12 - 2017-04-28 02:03 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2017-05-15 19:12 - 2017-04-28 02:03 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2017-05-15 19:12 - 2017-04-28 02:02 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-05-15 19:12 - 2017-04-28 02:01 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2017-05-15 19:12 - 2017-04-28 02:01 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2017-05-15 19:12 - 2017-04-28 02:01 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2017-05-15 19:12 - 2017-04-28 02:00 - 12349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-05-15 19:12 - 2017-04-28 01:59 - 12187136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-15 19:12 - 2017-04-28 01:59 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2017-05-15 19:12 - 2017-04-28 01:58 - 00546304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2017-05-15 19:12 - 2017-04-28 01:58 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2017-05-15 19:12 - 2017-04-28 01:58 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2017-05-15 19:12 - 2017-04-28 01:57 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2017-05-15 19:12 - 2017-04-28 01:57 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-05-15 19:12 - 2017-04-28 01:57 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-05-15 19:12 - 2017-04-28 01:57 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2017-05-15 19:12 - 2017-04-28 01:56 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-05-15 19:12 - 2017-04-28 01:56 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2017-05-15 19:12 - 2017-04-28 01:56 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2017-05-15 19:12 - 2017-04-28 01:55 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-15 19:12 - 2017-04-28 01:54 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-05-15 19:12 - 2017-04-28 01:54 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-05-15 19:12 - 2017-04-28 01:54 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2017-05-15 19:12 - 2017-04-28 01:53 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-05-15 19:12 - 2017-04-28 01:52 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-05-15 19:12 - 2017-04-28 01:30 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-15 19:12 - 2017-03-04 09:57 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-05-15 19:05 - 2017-04-28 02:55 - 00088416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2017-05-15 19:05 - 2017-04-28 02:42 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-05-15 19:05 - 2017-04-28 02:02 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-15 19:05 - 2017-04-28 02:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll
2017-05-15 19:05 - 2017-04-28 02:00 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-05-15 19:05 - 2017-04-28 02:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-05-15 19:05 - 2017-04-28 01:59 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-05-15 19:05 - 2017-04-28 01:59 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-05-15 19:05 - 2017-04-28 01:58 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-05-15 19:05 - 2017-04-28 01:57 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-05-15 19:05 - 2017-04-28 01:56 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-05-15 19:05 - 2017-04-28 01:51 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-05-15 19:05 - 2017-04-28 01:43 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2017-05-15 19:05 - 2017-04-28 01:41 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-05-15 19:05 - 2017-04-28 01:40 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-05-15 19:05 - 2017-04-28 01:38 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-05-15 19:05 - 2017-04-28 01:37 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-05-15 19:05 - 2017-03-04 08:25 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2017-05-15 19:04 - 2017-04-28 02:56 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-05-15 19:04 - 2017-04-28 02:47 - 00699744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-05-15 19:04 - 2017-04-28 02:46 - 00410464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2017-05-15 19:04 - 2017-04-28 02:42 - 00526176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-05-15 19:04 - 2017-04-28 02:40 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-15 19:04 - 2017-04-28 02:40 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-05-15 19:04 - 2017-04-28 02:35 - 08170600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-15 19:04 - 2017-04-28 02:03 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-15 19:04 - 2017-04-28 02:02 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-05-15 19:04 - 2017-04-28 02:01 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-05-15 19:04 - 2017-04-28 02:01 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2017-05-15 19:04 - 2017-04-28 02:00 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-05-15 19:04 - 2017-04-28 02:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-05-15 19:04 - 2017-04-28 01:58 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-15 19:04 - 2017-04-28 01:57 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-05-15 19:04 - 2017-04-28 01:56 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-15 19:04 - 2017-04-28 01:56 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-15 19:04 - 2017-04-28 01:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-15 19:04 - 2017-04-28 01:55 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-05-15 19:04 - 2017-04-28 01:54 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-05-15 19:04 - 2017-04-28 01:53 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-05-15 19:04 - 2017-04-28 01:51 - 01913856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-05-15 19:04 - 2017-04-28 01:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-05-15 19:04 - 2017-04-28 01:47 - 03290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-05-15 19:04 - 2017-04-28 01:47 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2017-05-15 19:04 - 2017-04-28 01:46 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2017-05-15 19:04 - 2017-04-28 01:45 - 00946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2017-05-15 19:04 - 2017-04-28 01:44 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-15 19:04 - 2017-04-28 01:43 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-05-15 19:04 - 2017-04-28 01:43 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2017-05-15 19:04 - 2017-04-28 01:40 - 02914816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-05-15 19:04 - 2017-04-28 01:40 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-15 19:04 - 2017-04-28 01:39 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2017-05-15 19:04 - 2017-04-28 01:39 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-15 19:04 - 2017-04-28 01:38 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-05-15 19:04 - 2017-04-28 01:37 - 02316288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-15 19:04 - 2017-04-28 01:37 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-05-15 19:04 - 2017-04-28 01:37 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-05-15 19:04 - 2017-04-28 01:37 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-05-15 19:04 - 2017-04-28 01:36 - 03613184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-15 19:04 - 2017-04-28 01:36 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-05-15 19:04 - 2017-04-28 01:36 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-15 19:04 - 2017-04-28 01:36 - 01328640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-05-15 19:04 - 2017-04-28 01:36 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-05-15 19:04 - 2017-03-04 08:25 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-05-15 19:04 - 2017-03-04 08:06 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-05-15 19:03 - 2017-04-28 02:53 - 07784288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-15 19:03 - 2017-04-28 02:53 - 00774224 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-15 19:03 - 2017-04-28 02:52 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-05-15 19:03 - 2017-04-28 02:47 - 00501088 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2017-05-15 19:03 - 2017-04-28 02:40 - 01860288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-05-15 19:03 - 2017-04-28 02:40 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-05-15 19:03 - 2017-04-28 02:40 - 00578400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-15 19:03 - 2017-04-28 02:38 - 02446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-05-15 19:03 - 2017-04-28 02:38 - 00847200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-05-15 19:03 - 2017-04-28 02:38 - 00431968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-05-15 19:03 - 2017-04-28 02:36 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2017-05-15 19:03 - 2017-04-28 02:36 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-05-15 19:03 - 2017-04-28 02:35 - 04260576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-05-15 19:03 - 2017-04-28 02:35 - 01988048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-05-15 19:03 - 2017-04-28 02:35 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-05-15 19:03 - 2017-04-28 02:35 - 01302136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-05-15 19:03 - 2017-04-28 02:34 - 22220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-15 19:03 - 2017-04-28 02:34 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-05-15 19:03 - 2017-04-28 02:34 - 01072248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-05-15 19:03 - 2017-04-28 02:34 - 00443232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2017-05-15 19:03 - 2017-04-28 02:34 - 00244824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-05-15 19:03 - 2017-04-28 02:30 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2017-05-15 19:03 - 2017-04-28 02:28 - 00453536 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-05-15 19:03 - 2017-04-28 02:28 - 00387864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-15 19:03 - 2017-04-28 02:07 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2017-05-15 19:03 - 2017-04-28 02:07 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-05-15 19:03 - 2017-04-28 02:07 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2017-05-15 19:03 - 2017-04-28 02:04 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-15 19:03 - 2017-04-28 02:03 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspppoe.sys
2017-05-15 19:03 - 2017-04-28 02:02 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-05-15 19:03 - 2017-04-28 02:01 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2017-05-15 19:03 - 2017-04-28 02:01 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-05-15 19:03 - 2017-04-28 02:01 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2017-05-15 19:03 - 2017-04-28 02:01 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ClosedCaptioning.dll
2017-05-15 19:03 - 2017-04-28 02:00 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-05-15 19:03 - 2017-04-28 02:00 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-05-15 19:03 - 2017-04-28 01:59 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-05-15 19:03 - 2017-04-28 01:58 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-05-15 19:03 - 2017-04-28 01:58 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-05-15 19:03 - 2017-04-28 01:58 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-05-15 19:03 - 2017-04-28 01:58 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-05-15 19:03 - 2017-04-28 01:58 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2017-05-15 19:03 - 2017-04-28 01:57 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-05-15 19:03 - 2017-04-28 01:57 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2017-05-15 19:03 - 2017-04-28 01:56 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2017-05-15 19:03 - 2017-04-28 01:55 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-05-15 19:03 - 2017-04-28 01:55 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2017-05-15 19:03 - 2017-04-28 01:55 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2017-05-15 19:03 - 2017-04-28 01:55 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-05-15 19:03 - 2017-04-28 01:54 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-15 19:03 - 2017-04-28 01:53 - 06288384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-05-15 19:03 - 2017-04-28 01:53 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-05-15 19:03 - 2017-04-28 01:51 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-15 19:03 - 2017-04-28 01:51 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2017-05-15 19:03 - 2017-04-28 01:51 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-15 19:03 - 2017-04-28 01:50 - 01476608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-05-15 19:03 - 2017-04-28 01:50 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2017-05-15 19:03 - 2017-04-28 01:50 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2017-05-15 19:03 - 2017-04-28 01:49 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-05-15 19:03 - 2017-04-28 01:49 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-15 19:03 - 2017-04-28 01:49 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-05-15 19:03 - 2017-04-28 01:48 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
2017-05-15 19:03 - 2017-04-28 01:47 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-15 19:03 - 2017-04-28 01:47 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-15 19:03 - 2017-04-28 01:47 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2017-05-15 19:03 - 2017-04-28 01:47 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2017-05-15 19:03 - 2017-04-28 01:46 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-05-15 19:03 - 2017-04-28 01:46 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2017-05-15 19:03 - 2017-04-28 01:45 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-05-15 19:03 - 2017-04-28 01:45 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2017-05-15 19:03 - 2017-04-28 01:44 - 04749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-15 19:03 - 2017-04-28 01:44 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-05-15 19:03 - 2017-04-28 01:44 - 01145344 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2017-05-15 19:03 - 2017-04-28 01:44 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2017-05-15 19:03 - 2017-04-28 01:44 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-15 19:03 - 2017-04-28 01:43 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2017-05-15 19:03 - 2017-04-28 01:43 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-05-15 19:03 - 2017-04-28 01:43 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-15 19:03 - 2017-04-28 01:43 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-05-15 19:03 - 2017-04-28 01:43 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2017-05-15 19:03 - 2017-04-28 01:42 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-15 19:03 - 2017-04-28 01:42 - 08076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-05-15 19:03 - 2017-04-28 01:42 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-05-15 19:03 - 2017-04-28 01:42 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-15 19:03 - 2017-04-28 01:42 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-05-15 19:03 - 2017-04-28 01:42 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 01359872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 00860160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-05-15 19:03 - 2017-04-28 01:41 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-15 19:03 - 2017-04-28 01:40 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-05-15 19:03 - 2017-04-28 01:40 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-05-15 19:03 - 2017-04-28 01:40 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2017-05-15 19:03 - 2017-04-28 01:40 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-05-15 19:03 - 2017-04-28 01:40 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-05-15 19:03 - 2017-04-28 01:38 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-05-15 19:03 - 2017-04-28 01:37 - 04744192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-15 19:03 - 2017-04-28 01:37 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-05-15 19:03 - 2017-04-28 01:37 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-05-15 19:03 - 2017-04-28 01:37 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-05-15 19:03 - 2017-04-28 01:37 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-15 19:03 - 2017-04-28 01:36 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-05-15 19:03 - 2017-04-28 01:35 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-05-15 19:03 - 2017-04-28 01:35 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-15 19:03 - 2017-04-28 01:35 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-05-15 19:03 - 2017-04-28 01:34 - 00999424 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-15 19:03 - 2017-04-28 01:34 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2017-05-15 19:03 - 2017-04-28 01:34 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2017-05-15 19:03 - 2017-04-28 01:34 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2017-05-15 19:03 - 2017-04-28 01:33 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-15 19:03 - 2017-03-04 09:09 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-05-15 19:03 - 2017-03-04 08:27 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-05-15 19:03 - 2017-03-04 08:19 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-05-15 19:03 - 2016-12-21 09:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-05-15 19:02 - 2017-04-28 02:57 - 00794928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-15 19:02 - 2017-04-28 02:53 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-15 19:02 - 2017-04-28 02:49 - 00700936 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-15 19:02 - 2017-04-28 02:44 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys
2017-05-15 19:02 - 2017-04-28 02:40 - 07220184 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-05-15 19:02 - 2017-04-28 02:40 - 02759704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-15 19:02 - 2017-04-28 02:40 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-15 19:02 - 2017-04-28 02:40 - 00402784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-15 19:02 - 2017-04-28 02:39 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-05-15 19:02 - 2017-04-28 02:35 - 00596040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2017-05-15 19:02 - 2017-04-28 02:34 - 04674360 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-15 19:02 - 2017-04-28 02:30 - 01569184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-15 19:02 - 2017-04-28 02:10 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-05-15 19:02 - 2017-04-28 02:06 - 22569472 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-15 19:02 - 2017-04-28 02:05 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-05-15 19:02 - 2017-04-28 02:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-15 19:02 - 2017-04-28 02:03 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-15 19:02 - 2017-04-28 02:01 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-05-15 19:02 - 2017-04-28 02:01 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2017-05-15 19:02 - 2017-04-28 02:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-05-15 19:02 - 2017-04-28 01:59 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-05-15 19:02 - 2017-04-28 01:59 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-05-15 19:02 - 2017-04-28 01:59 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-05-15 19:02 - 2017-04-28 01:58 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-15 19:02 - 2017-04-28 01:58 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-05-15 19:02 - 2017-04-28 01:58 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsentUX.dll
2017-05-15 19:02 - 2017-04-28 01:57 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-05-15 19:02 - 2017-04-28 01:57 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-05-15 19:02 - 2017-04-28 01:57 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-05-15 19:02 - 2017-04-28 01:57 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-15 19:02 - 2017-04-28 01:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-15 19:02 - 2017-04-28 01:56 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-15 19:02 - 2017-04-28 01:56 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-15 19:02 - 2017-04-28 01:56 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-15 19:02 - 2017-04-28 01:55 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-05-15 19:02 - 2017-04-28 01:55 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-15 19:02 - 2017-04-28 01:55 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-05-15 19:02 - 2017-04-28 01:54 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-05-15 19:02 - 2017-04-28 01:54 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-05-15 19:02 - 2017-04-28 01:53 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-05-15 19:02 - 2017-04-28 01:53 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-05-15 19:02 - 2017-04-28 01:53 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2017-05-15 19:02 - 2017-04-28 01:53 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-05-15 19:02 - 2017-04-28 01:51 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2017-05-15 19:02 - 2017-04-28 01:50 - 03778048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-05-15 19:02 - 2017-04-28 01:49 - 17198592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-05-15 19:02 - 2017-04-28 01:48 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-05-15 19:02 - 2017-04-28 01:47 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-05-15 19:02 - 2017-04-28 01:47 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-05-15 19:02 - 2017-04-28 01:46 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2017-05-15 19:02 - 2017-04-28 01:46 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2017-05-15 19:02 - 2017-04-28 01:45 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-15 19:02 - 2017-04-28 01:45 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-05-15 19:02 - 2017-04-28 01:45 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2017-05-15 19:02 - 2017-04-28 01:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-15 19:02 - 2017-04-28 01:44 - 13091328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-15 19:02 - 2017-04-28 01:44 - 00937984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-05-15 19:02 - 2017-04-28 01:44 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2017-05-15 19:02 - 2017-04-28 01:44 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-05-15 19:02 - 2017-04-28 01:43 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-05-15 19:02 - 2017-04-28 01:43 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-05-15 19:02 - 2017-04-28 01:42 - 13441536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-05-15 19:02 - 2017-04-28 01:41 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-15 19:02 - 2017-04-28 01:40 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-15 19:02 - 2017-04-28 01:40 - 02096640 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-15 19:02 - 2017-04-28 01:40 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2017-05-15 19:02 - 2017-04-28 01:39 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-05-15 19:02 - 2017-04-28 01:38 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-05-15 19:02 - 2017-04-28 01:38 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-05-15 19:02 - 2017-04-28 01:38 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-05-15 19:02 - 2017-04-28 01:37 - 02895872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-15 19:02 - 2017-04-28 01:37 - 02286592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-15 19:02 - 2017-04-28 01:37 - 01783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-15 19:02 - 2017-04-28 01:37 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-15 19:02 - 2017-04-28 01:36 - 02478080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-05-15 19:02 - 2017-04-28 01:36 - 01844224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-05-15 19:02 - 2017-04-28 01:36 - 00735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-15 19:02 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-05-15 19:01 - 2017-04-28 02:57 - 00754528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-05-15 19:01 - 2017-04-28 02:57 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-05-15 19:01 - 2017-04-28 02:57 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-05-15 19:01 - 2017-04-28 02:57 - 00573280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-05-15 19:01 - 2017-04-28 02:49 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-15 19:01 - 2017-04-28 02:49 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-15 19:01 - 2017-04-28 02:40 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-05-15 19:01 - 2017-04-28 02:40 - 00026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-15 19:01 - 2017-04-28 02:38 - 02915704 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-15 19:01 - 2017-04-28 02:38 - 01852200 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-15 19:01 - 2017-04-28 02:38 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-05-15 19:01 - 2017-04-28 02:34 - 01277824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-15 19:01 - 2017-04-28 02:34 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-05-15 19:01 - 2017-04-28 02:28 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-15 19:01 - 2017-04-28 02:03 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthTelemetry.dll
2017-05-15 19:01 - 2017-04-28 02:02 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2017-05-15 19:01 - 2017-04-28 02:00 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-05-15 19:01 - 2017-04-28 02:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-15 19:01 - 2017-04-28 01:59 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2017-05-15 19:01 - 2017-04-28 01:58 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-15 19:01 - 2017-04-28 01:57 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-05-15 19:01 - 2017-04-28 01:57 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-05-15 19:01 - 2017-04-28 01:57 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2017-05-15 19:01 - 2017-04-28 01:57 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2017-05-15 19:01 - 2017-04-28 01:57 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2017-05-15 19:01 - 2017-04-28 01:56 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-05-15 19:01 - 2017-04-28 01:56 - 00692224 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2017-05-15 19:01 - 2017-04-28 01:56 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-05-15 19:01 - 2017-04-28 01:56 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-05-15 19:01 - 2017-04-28 01:55 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-05-15 19:01 - 2017-04-28 01:55 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2017-05-15 19:01 - 2017-04-28 01:55 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-05-15 19:01 - 2017-04-28 01:54 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-05-15 19:01 - 2017-04-28 01:54 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2017-05-15 19:01 - 2017-04-28 01:54 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2017-05-15 19:01 - 2017-04-28 01:51 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-05-15 19:01 - 2017-04-28 01:50 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsnt.dll
2017-05-15 19:01 - 2017-04-28 01:48 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-15 19:01 - 2017-04-28 01:48 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2017-05-15 19:01 - 2017-04-28 01:47 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-15 19:01 - 2017-04-28 01:46 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2017-05-15 19:01 - 2017-04-28 01:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-15 19:01 - 2017-04-28 01:45 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-05-15 19:01 - 2017-04-28 01:45 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2017-05-15 19:01 - 2017-04-28 01:44 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-15 19:01 - 2017-04-28 01:44 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-05-15 19:01 - 2017-04-28 01:43 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-05-15 19:01 - 2017-04-28 01:43 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-05-15 19:01 - 2017-04-28 01:42 - 01692160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-15 19:01 - 2017-04-28 01:42 - 01021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2017-05-15 19:01 - 2017-04-28 01:41 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-15 19:01 - 2017-04-28 01:41 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2017-05-15 19:01 - 2017-04-28 01:41 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-05-15 19:01 - 2017-04-28 01:40 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-05-15 19:01 - 2017-04-28 01:40 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-05-15 19:01 - 2017-04-28 01:37 - 02216960 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2017-05-15 19:01 - 2017-04-28 01:37 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-05-15 19:01 - 2017-04-28 01:36 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-05-15 19:00 - 2017-04-28 02:39 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-05-15 19:00 - 2017-04-28 02:38 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-05-15 19:00 - 2017-04-28 01:54 - 00967680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-05-13 13:39 - 2017-05-16 18:13 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\.ACEStream
2017-05-13 13:39 - 2017-05-13 13:39 - 00002120 _____ C:\Users\BmgDroog\Desktop\Ace Stream Media Center.lnk
2017-05-13 13:39 - 2017-05-13 13:39 - 00002016 _____ C:\Users\BmgDroog\Desktop\Ace Player.lnk
2017-05-13 13:39 - 2017-05-13 13:39 - 00000000 ____D C:\Users\BmgDroog\AppData\LocalLow\.ACEStream
2017-05-13 13:38 - 2017-05-13 13:39 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\ACEStream
2017-05-10 06:13 - 2017-05-16 19:02 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2017-05-09 22:49 - 2017-05-09 22:49 - 00001484 _____ C:\WINDOWS\system32\.crusader
2017-05-09 22:23 - 2017-05-09 22:23 - 00001978 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2017-05-09 22:23 - 2017-05-09 22:23 - 00000000 ____D C:\Program Files\HitmanPro
2017-05-09 21:04 - 2017-05-16 18:11 - 00000000 ____D C:\AdwCleaner
2017-05-09 19:59 - 2017-05-09 19:59 - 00000000 _____ C:\WINDOWS\SysWOW64\1111
2017-05-09 19:01 - 2017-05-09 20:48 - 00022040 _____ C:\Users\BmgDroog\Desktop\2017_05_09_Malware.txt
2017-05-09 19:01 - 2017-05-09 19:01 - 00081831 _____ C:\Users\BmgDroog\Desktop\2017_05_09_Malware2.txt
2017-05-09 18:05 - 2017-05-09 18:05 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-05-05 17:14 - 2017-05-05 17:14 - 00026137 _____ C:\Users\BmgDroog\Desktop\Adware_elex_report.txt
2017-05-04 17:18 - 2017-05-04 17:18 - 00000000 ____D C:\Users\Public\Documents\Google
2017-05-03 16:52 - 2017-05-03 16:52 - 00000000 _____ C:\WINDOWS\SysWOW64\1111111
2017-05-03 16:51 - 2017-05-03 16:51 - 00000000 _____ C:\WINDOWS\SysWOW64\11
2017-05-01 16:49 - 2017-05-01 16:49 - 00048944 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-04-28 21:27 - 2017-04-28 21:27 - 00000000 ____D C:\WINDOWS\psgo
2017-04-19 14:06 - 2017-04-19 14:06 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Google

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-16 21:57 - 2016-09-13 21:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-16 20:30 - 2017-02-22 18:42 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Hide.me
2017-05-16 20:29 - 2017-02-15 19:23 - 00000000 ____D C:\Program Files (x86)\Cliqz Maintenance Service
2017-05-16 20:29 - 2017-02-15 19:23 - 00000000 ____D C:\Program Files (x86)\CLIQZ
2017-05-16 19:14 - 2016-09-13 21:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-16 19:14 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-05-16 19:03 - 2016-05-04 21:18 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Mozilla
2017-05-16 18:28 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-16 18:18 - 2017-04-15 12:21 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-05-16 18:16 - 2017-01-15 11:49 - 00000000 ___RD C:\Users\BmgDroog\Dropbox
2017-05-16 18:16 - 2016-07-23 10:53 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Packages
2017-05-16 18:15 - 2017-01-15 11:42 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Dropbox
2017-05-16 18:14 - 2017-01-15 11:43 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-05-16 18:13 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-16 18:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-05-16 18:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2017-05-16 18:13 - 2016-05-19 12:52 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Scribus
2017-05-16 17:54 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2017-05-16 17:54 - 2016-05-04 20:44 - 00000000 ____D C:\Program Files (x86)\Intel
2017-05-16 17:54 - 2016-05-04 20:43 - 00000000 ____D C:\Program Files\Intel
2017-05-16 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-16 17:30 - 2016-09-13 21:45 - 03724256 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-16 17:30 - 2016-07-17 00:51 - 01680856 _____ C:\WINDOWS\system32\perfh007.dat
2017-05-16 17:30 - 2016-07-17 00:51 - 00430562 _____ C:\WINDOWS\system32\perfc007.dat
2017-05-16 05:58 - 2016-04-27 07:55 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-16 05:56 - 2016-10-09 10:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-05-16 05:47 - 2016-09-13 21:40 - 00341976 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-15 21:55 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-05-15 21:55 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-05-15 21:50 - 2016-05-12 09:30 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\vlc
2017-05-13 07:47 - 2016-05-04 21:11 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-05-09 22:25 - 2016-07-16 13:42 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2017-05-09 21:46 - 2017-03-19 22:09 - 00004268 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-05-09 21:33 - 2016-08-18 10:54 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-09 21:30 - 2016-08-18 10:54 - 156335152 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-09 18:07 - 2016-09-13 21:57 - 00004036 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1462389204
2017-05-09 18:05 - 2016-05-04 21:11 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-05-09 18:05 - 2016-05-04 21:11 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-05-09 18:05 - 2016-05-04 21:11 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-05-09 18:05 - 2016-05-04 21:11 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-05-09 18:05 - 2016-05-04 21:11 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-05-09 18:05 - 2016-05-04 21:11 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-05-09 18:03 - 2017-03-19 22:09 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-05-09 18:03 - 2017-03-19 22:09 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-05-09 18:03 - 2017-03-19 22:09 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-05-09 18:03 - 2017-03-19 22:09 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-05-09 18:03 - 2016-05-04 21:13 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-05-09 18:03 - 2016-05-04 21:11 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-05-03 19:53 - 2017-04-15 12:21 - 00111544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-05-03 19:53 - 2017-04-15 12:21 - 00092096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-05-03 19:53 - 2017-04-15 12:21 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-04-29 02:59 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-29 02:59 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-28 21:57 - 2016-09-13 22:39 - 00000000 ___DC C:\WINDOWS\Panther
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\security
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\InputMethod
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\IME
2017-04-28 21:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2017-04-28 21:56 - 2017-04-07 06:06 - 00000000 ____D C:\Users\TEMP\AppData\Roaming\Hide.me
2017-04-28 21:56 - 2017-04-01 10:11 - 00000000 ____D C:\Users\BmgDroog\AppData\LocalLow\Adobe
2017-04-28 21:56 - 2017-02-01 20:13 - 00000000 ___RD C:\Users\BmgDroog\Documents\Scanned Documents
2017-04-28 21:56 - 2016-11-22 18:20 - 00000000 ____D C:\Users\DefaultAppPool
2017-04-28 21:56 - 2016-09-13 22:29 - 00000000 ____D C:\inetpub
2017-04-28 21:56 - 2016-09-13 21:46 - 00000000 ____D C:\Users\postgres
2017-04-28 21:56 - 2016-09-13 21:46 - 00000000 ____D C:\Users\BmgDroog
2017-04-28 21:56 - 2016-08-13 10:52 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\MicrosoftEdge
2017-04-28 21:56 - 2016-07-27 23:37 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\dvdcss
2017-04-28 21:56 - 2016-07-21 11:46 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Audacity
2017-04-28 21:56 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-04-28 21:56 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-04-28 21:56 - 2016-07-08 09:48 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Windows Live
2017-04-28 21:56 - 2016-06-17 15:08 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\uTorrent
2017-04-28 21:56 - 2016-06-11 14:06 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2017-04-28 21:56 - 2016-06-11 14:04 - 00000000 ____D C:\Program Files\Lightworks
2017-04-28 21:56 - 2016-05-19 13:08 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Nitro
2017-04-28 21:56 - 2016-05-06 00:00 - 00000000 ____D C:\Users\BmgDroog\AppData\Roaming\Adobe
2017-04-28 21:56 - 2016-05-04 21:52 - 00000000 ____D C:\Intel
2017-04-28 21:56 - 2016-05-04 21:39 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Dell
2017-04-28 21:56 - 2016-05-04 21:31 - 00000000 ____D C:\Users\BmgDroog\AppData\Local\Apps\2.0
2017-04-28 21:56 - 2011-04-12 09:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2017-04-28 21:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2017-04-28 03:01 - 2016-09-13 21:41 - 02717184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-04-18 22:53 - 2017-02-22 18:42 - 00001098 _____ C:\Users\Public\Desktop\hide.me VPN.lnk
2017-04-18 22:53 - 2017-02-22 18:42 - 00000000 ____D C:\Program Files (x86)\hide.me VPN
2017-04-16 19:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-09-11 12:32 - 2016-12-18 12:23 - 0000287 _____ () C:\Users\BmgDroog\AppData\Local\VersionChecker_21.xml

Einige Dateien in TEMP:
====================
2016-10-11 06:46 - 2016-10-19 12:07 - 0019504 _____ () C:\Users\BmgDroog\AppData\Local\Temp\DATAflor.Ftp.dll
2016-10-11 06:47 - 2016-08-30 14:38 - 0015920 _____ (DATAflor AG) C:\Users\BmgDroog\AppData\Local\Temp\DATAflor.Installer.UserLevel.exe
2016-10-11 06:47 - 2016-08-30 14:38 - 0038448 _____ () C:\Users\BmgDroog\AppData\Local\Temp\DATAflor.SetupKernel.dll
2017-01-14 18:23 - 2016-10-19 12:07 - 1697840 _____ (DATAflor AG) C:\Users\BmgDroog\AppData\Local\Temp\DATAflor.UpdateManager.exe
2016-10-11 06:47 - 2016-08-30 14:04 - 0200704 _____ (ICSharpCode.net) C:\Users\BmgDroog\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
2016-10-11 06:46 - 2016-10-19 12:07 - 0199168 _____ (CodePlex Community) C:\Users\BmgDroog\AppData\Local\Temp\Microsoft.Win32.TaskScheduler.dll
2017-05-05 15:15 - 2013-03-22 16:13 - 0032768 _____ () C:\Users\BmgDroog\AppData\Local\Temp\shutdown1493990155.exe
2017-02-15 19:05 - 2017-02-15 19:05 - 5954592 _____ (eVenture Limited                                            ) C:\Users\BmgDroog\AppData\Local\Temp\tmp561.exe
2017-02-02 17:28 - 2017-02-02 17:28 - 5954672 _____ (eVenture Limited                                            ) C:\Users\BmgDroog\AppData\Local\Temp\tmpC8DC.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-05-15 06:47

==================== Ende von FRST.txt ============================

BmgDroog · 16.05.2017, 21:32

Addition.txt

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-05-2017
durchgeführt von BmgDroog (16-05-2017 22:06:47)
Gestartet von C:\Users\BmgDroog\Desktop
Windows 10 Pro Version 1607 (X64) (2016-09-13 20:04:37)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3663192501-4106070722-3409359062-500 - Administrator - Disabled)
BmgDroog (S-1-5-21-3663192501-4106070722-3409359062-1000 - Administrator - Enabled) => C:\Users\BmgDroog
DefaultAccount (S-1-5-21-3663192501-4106070722-3409359062-503 - Limited - Disabled)
Gast (S-1-5-21-3663192501-4106070722-3409359062-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3663192501-4106070722-3409359062-1002 - Limited - Enabled)
postgres (S-1-5-21-3663192501-4106070722-3409359062-1003 - Limited - Enabled) => C:\Users\postgres

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
CLIQZ 1.13.4 (x86 de) (HKLM-x32\...\CLIQZ 1.13.4 (x86 de)) (Version: 1.13.4 - Cliqz GmbH)
Cliqz Maintenance Service (HKLM-x32\...\CliqzMaintenanceService) (Version: 1.13.4.6344 - Cliqz GmbH)
Crystal Report 10 Runtime (HKLM-x32\...\{98B830CD-FFFE-45B2-91A0-C4E8F86420D9}) (Version: 1.00.0000 - DATAflor GmbH)
Crystal Reports Basic Runtime for Visual Studio 2008 (HKLM-x32\...\{CE26F10F-C80F-4377-908B-1B7882AE2CE3}) (Version: 10.5.0.0 - Business Objects)
Crystal Reports Basic Runtime German Language Pack for Visual Studio 2008 (HKLM-x32\...\{8B871377-E4B0-4C39-BB98-EEBE84471911}) (Version: 10.5.0.0 - Business Objects)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4210.0 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.4210.0 - Ihr Firmenname) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DATAflor BUSINESS 2017 (HKLM-x32\...\DATAflor BUSINESS) (Version: 17.1.21.1 - DATAflor AG)
DATAflor Update-Manager (HKLM-x32\...\DATAflor Update-Manager) (Version: 4.0.2.6 - DATAflor AG)
DATAflor Update-Manager (Version: 4.0.2.6 - DATAflor AG) Hidden
DebugMode Wax 2.0 (HKLM-x32\...\DebugMode Wax 2.0) (Version:  - )
Dell ControlVault Host Components Installer 64 bit (HKLM\...\{8B5D0146-5187-40F5-9DD8-15DAF2D11902}) (Version: 2.3.24.1437 - Broadcom Corporation)
Dell System Detect (HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\58d94f3ce2c27db0) (Version: 7.4.0.3 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1206.101.112 - ALPS ELECTRIC CO., LTD.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 25.4.28 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX420W Series Printer Uninstall (HKLM\...\EPSON SX420W Series) (Version:  - SEIKO EPSON Corporation)
EyeFrame Converter 1.8.1 (HKLM-x32\...\{DAEA793F-1378-45D1-A4AD-8ED944AA1F76}_is1) (Version:  - Tin2tin)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Video to MP3 Converter (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.99.823 - Digital Wave Ltd)
hide.me VPN 1.2.12 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.2.12 - eVenture Limited)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.20.286 - SurfRight B.V.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.70.1205 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 18.1 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3040 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.7967.2161 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 53.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.2 (x86 de)) (Version: 53.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{0CB3B7EE-52C7-4136-AF40-605567D90318}) (Version: 3.0.07.23 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (x32 Version: 3.0.07.23 - O2Micro International LTD.) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7967.2161 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7967.2161 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7967.2161 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
SafeZone Stable 3.55.2393.596 (x32 Version: 3.55.2393.596 - Avast Software) Hidden
SAP Crystal Reports runtime engine for .NET Framework 4 (32-bit) (HKLM-x32\...\{083988D7-BDA9-4244-983B-409A634BBC09}) (Version: 13.0.1.220 - SAP)
Scribus 1.4.6 (HKLM-x32\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
SopCast 4.2.0 (HKLM-x32\...\SopCast) (Version: 4.2.0 - www.sopcast.com)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Vectorworks 2016 SP4 (HKLM\...\Vectorworks 2016 SP4 21.0.3) (Version: 21.0.3 - Vectorworks, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05709B77-FD42-484F-8043-52F484AC1B47} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-05-16] (Microsoft Corporation)
Task: {1388BF8F-7892-4D9B-85A6-C723FBFFB1BB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe 
Task: {163BCA67-E0BE-4A01-BFA3-F329A6DB08D0} - System32\Tasks\{A010508F-970A-448D-AD16-AED0B94CD474} => pcalua.exe -a C:\Users\BmgDroog\Downloads\CV_Setup_TJ9CD_A29_ZPE.exe -d C:\Users\BmgDroog\Downloads
Task: {1D740A21-7342-44FE-AF37-B7AA2997E0CB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {212BB1D8-7437-487B-B6A4-EDB83BE0EEBE} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2180E4E0-3819-40F8-A996-A1365525150B} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe 
Task: {25F0920D-16DA-4146-BBBF-F057ECEDA83E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2664A8DD-6A21-437C-A8F2-63113EE0A8F7} - System32\Tasks\SafeZone scheduled Autoupdate 1462389204 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-22] (Avast Software)
Task: {2B5DC26C-15CC-4D5C-8048-67801EBEB344} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {2C48FC47-4CC8-427E-ABD0-142DEC11DAC3} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {3167C7D0-77A3-42B8-AEC6-F6FEEFF72455} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {34962BB2-110F-4F40-BA28-5E163B6F3B58} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {3571F594-26C8-47BA-A3C7-CDEB0FE9A517} - \Popuspclerdersh -> Keine Datei <==== ACHTUNG
Task: {368123FB-E644-4CD8-9696-8EA8CBA31E53} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {38A65508-893C-4245-937E-E8CEE7FE2358} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {393ADC3C-334A-4549-B964-D24DEDA98720} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-15] (Dropbox, Inc.)
Task: {39782407-7DFE-413A-AEDB-832460A28601} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {3F448FCC-B32F-418B-99E8-C745156B9712} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-04] (Microsoft Corporation)
Task: {3F4F0F5E-FCDF-46C6-8116-8D9F74E3ADF0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-15] (Dropbox, Inc.)
Task: {42DD4C0A-4499-4E02-ADB2-AEA201489E34} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe 
Task: {45206F10-56B4-4E92-AEC7-99CB8185E884} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {467B4BC8-FB90-46EF-88AF-9BDC88E0DC6A} - System32\Tasks\cCOUp3xgDaLd => ccoup3xgdald.exe 
Task: {53B7C39F-FE7D-41A4-8BD9-E836B5E1FEB8} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {5A669AF8-0707-4B8B-BCD1-6DED79702BE7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => D:\Programme\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {614B364C-C1D6-467F-8CFA-EB8A111CCFEC} - \Microsoft\Windows\Setup\EOONotify -> Keine Datei <==== ACHTUNG
Task: {70C37828-E92C-4F63-A23C-BEB50A7ADBAE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe 
Task: {714932ED-5860-45CD-9A93-8D3F7EF7B9D1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {71782D92-0B8B-4629-91AE-FE5AB210D1FB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-09] (AVAST Software)
Task: {72E0286C-5FF9-4F0C-BB8D-2F9BFAE19E05} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {774FBCED-895F-4606-8DE3-0D071B867A77} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {7BF6F199-D900-4C20-8454-1A04B6064682} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {7F578C41-84DC-45EF-A1D8-7B45BFC90D4E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {801FE8C0-CBAA-4180-9FD0-E10EF0BFB693} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {86EB9153-2800-421F-931E-DE4EA419DB7A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-04] (Microsoft Corporation)
Task: {90812954-B485-4644-A79B-234DEAB80343} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {989B1247-EE61-4124-9381-988FA5A9CAC4} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {ACD17F34-D24B-4090-8171-6893BC5ED257} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {AEFF24A1-D319-4AE0-B4F0-F04BC851605A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {B60FCC8D-E931-4C31-BE68-F01508B9ADA5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {CA4015F4-AFCB-463D-B517-18759AD816F8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {D334C2A3-7F02-4949-96D7-7F87B24DF300} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {DF1EBFB0-B851-4861-ABC8-C18FFBFFA52C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe 
Task: {E0DBC8CC-A61A-4B7B-BCB6-E325EA13BA69} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {E2BF87A7-4D7C-48EE-9B26-8C9BF01FB3C5} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe 
Task: {E50D18BB-2D73-403D-AC44-56C149CFD1DC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-05-16] (Microsoft Corporation)
Task: {E575B312-3BBC-4531-BE8E-9E6F61B707ED} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E62D5909-379D-46BE-A3DB-891FEA725756} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {E730EBB9-7D4C-4203-92D5-F61907DA3D6F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-15] (AVAST Software)
Task: {E8D1E675-AF8B-4E3F-AA11-FDEB1C8A1AF6} - System32\Tasks\AutoPico Daily Restart => D:\Programme\KMSpico\AutoPico.exe 
Task: {EBB369E4-9491-463F-B1A8-8FB2FDE5618A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {F6CDFEBB-5BB4-46C0-8BDE-1005D31B0E0B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe 
Task: {FB63231C-0CE2-4F51-BE9E-503A2EFDD9E3} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {FE04EB61-9454-4282-BADE-9D3EC26F3613} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-05-15 19:01 - 2017-04-28 02:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-15 19:01 - 2017-04-28 02:49 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-03-15 07:00 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 07:00 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 07:00 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-15 19:01 - 2017-04-28 01:36 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-05-15 19:01 - 2017-04-28 01:36 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-15 19:01 - 2017-04-28 01:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-09-22 06:09 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 06:59 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-05-09 18:04 - 2017-05-09 18:04 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-09 18:04 - 2017-05-09 18:04 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-09 18:05 - 2017-05-09 18:05 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-09 18:04 - 2017-05-09 18:04 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-09 18:04 - 2017-05-09 18:04 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-09 18:03 - 2017-05-09 18:03 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-09 18:04 - 2017-05-09 18:04 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-26 20:45 - 2014-05-13 13:04 - 00109400 _____ () D:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-01-26 20:45 - 2014-05-13 13:04 - 00167768 _____ () D:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-01-26 20:45 - 2014-05-13 13:04 - 00416600 _____ () D:\Programme\Spybot - Search & Destroy 2\DEC150.bpl
2017-01-26 20:45 - 2012-08-23 11:38 - 00574840 _____ () D:\Programme\Spybot - Search & Destroy 2\sqlite3.dll
2017-01-26 20:45 - 2012-04-03 18:06 - 00565640 _____ () D:\Programme\Spybot - Search & Destroy 2\av\BDSmartDB.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\dell.com -> dell.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2017-05-16 19:44 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\Control Panel\Desktop\\Wallpaper -> d:\downtemp\greekriots.com_ph2.jpg
DNS Servers: 109.201.143.224 - 109.201.143.225
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-3663192501-4106070722-3409359062-1000\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{D5A64287-5854-4579-BDDC-B83FA88CC38A}D:\programme\vectorworks16\vectorworks2016e.exe] => (Allow) D:\programme\vectorworks16\vectorworks2016e.exe
FirewallRules: [TCP Query User{45C621BA-D154-49BB-87D1-558F3F8287D5}D:\programme\vectorworks16\vectorworks2016e.exe] => (Allow) D:\programme\vectorworks16\vectorworks2016e.exe
FirewallRules: [{E0CFBBE0-DF36-4BD7-84BE-6FA113D0A041}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{07709031-E4B9-426B-BBDD-ABECA713FB02}C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{D1C464A2-BEFA-4523-8973-23540AB6A0D1}C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{E39E503C-576A-41E5-876E-017A658AE0CC}] => (Block) C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{E85B385C-9A39-4325-A0EC-E7FD57EAAA38}] => (Block) C:\users\bmgdroog\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{0AF80FF2-0ADF-48EB-ABD5-901FB7F1723E}C:\program files\lightworks\ntcardvt.exe] => (Allow) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [UDP Query User{156822F5-3167-44E2-A222-A6B5CE431861}C:\program files\lightworks\ntcardvt.exe] => (Allow) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [{D3D08C1A-FCEC-4436-B49C-6F0451C47BAF}] => (Block) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [{63F05437-C74E-4038-942E-AB39E53A8AA1}] => (Block) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [{2726EC06-5425-4CFD-BA8D-22938ADA3EF2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{53990A23-62E9-49B8-BAF8-7BE937552F7C}] => (Allow) LPort=2869
FirewallRules: [{4336858A-B3EF-4AB0-93B5-D2DD4B4D9EA9}] => (Allow) LPort=1900
FirewallRules: [{B9471053-FBB7-45AA-B362-ADD9288118BD}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{CF1B730B-90BF-4094-8C9C-20D19BABD77F}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{9D60D9DE-F6AD-4079-8D1E-95BE8EDA29D7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{EE3BD370-37F0-48AF-94CB-07B32164CA4B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{20970017-0FB1-4542-9BD0-F68993CC1BD1}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{E3C235D2-3BB1-4B6C-A6E4-399662104CA8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{EA24F2F8-8AF1-4320-B5D1-22A2D3481273}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{5D12A162-8DEC-4C55-93CD-5A1E46CB06A6}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [{E4C338B3-C3A7-4F73-9EF2-D260C5432EF2}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [TCP Query User{1BC183C2-9606-4D54-A5DC-6BD67766819C}D:\programme\vectorworks16\vectorworks2016e.exe] => (Block) D:\programme\vectorworks16\vectorworks2016e.exe
FirewallRules: [UDP Query User{608D15C4-B020-4941-A4E2-943B62D90854}D:\programme\vectorworks16\vectorworks2016e.exe] => (Block) D:\programme\vectorworks16\vectorworks2016e.exe
FirewallRules: [TCP Query User{90F9E84A-E413-4191-B929-A7F0D5C46575}C:\users\bmgdroog\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\bmgdroog\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{F356824A-7078-4B10-9ACF-09CC968DA293}C:\users\bmgdroog\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\bmgdroog\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [TCP Query User{CCA73719-741E-4844-BBFF-3EFA744D4EF6}D:\programme\sopcast\sopcast.exe] => (Allow) D:\programme\sopcast\sopcast.exe
FirewallRules: [UDP Query User{7BD63C6C-C1EA-4238-96E1-59C305294170}D:\programme\sopcast\sopcast.exe] => (Allow) D:\programme\sopcast\sopcast.exe
FirewallRules: [{288F161B-F357-47BA-A337-4C6813433C40}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{8C317DDB-7B87-492E-A470-EB40D1F66F69}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{C40849E4-47E2-4FE4-88C8-FEDA28E2BFD7}C:\program files (x86)\dataflor\business\business.exe] => (Allow) C:\program files (x86)\dataflor\business\business.exe
FirewallRules: [UDP Query User{7572F246-5BAB-4C40-A21C-C59894740637}C:\program files (x86)\dataflor\business\business.exe] => (Allow) C:\program files (x86)\dataflor\business\business.exe
FirewallRules: [{736EF364-BB71-4693-9170-53475C372B39}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{61617BB1-0D7D-4C6B-A201-C486988CD64E}C:\program files (x86)\dataflor\sys\asa800\dbeng9.exe] => (Allow) C:\program files (x86)\dataflor\sys\asa800\dbeng9.exe
FirewallRules: [UDP Query User{9AE83F88-7F2E-4DD6-BE41-A1478D3E3B0D}C:\program files (x86)\dataflor\sys\asa800\dbeng9.exe] => (Allow) C:\program files (x86)\dataflor\sys\asa800\dbeng9.exe
FirewallRules: [{C1630FC6-7412-4098-A45D-D6628852D285}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{8218F7AB-0015-43AD-A750-2F72D656AA36}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{A7D01DB4-93D9-44BF-8F8E-14178E3BF92D}] => (Allow) C:\Program Files (x86)\CLIQZ\CLIQZ.exe
FirewallRules: [{2D980A7F-EF51-4909-8835-EA03A2E97FF9}] => (Allow) C:\Program Files (x86)\CLIQZ\CLIQZ.exe
FirewallRules: [{19DE2A6F-0028-4686-8D53-D8D797C56FE0}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe
FirewallRules: [{0C29E1A1-B34E-4AA9-984A-28D2D2075C42}] => (Allow) C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{4A62BE7A-00EA-4A72-8B20-492E4BE4239B}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{765174F2-7625-4C68-AFF8-803FA852901D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{027C0E38-3482-4493-88A8-7E113A507858}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{2AC7693E-613C-4B91-8EA3-5B012C2FF53E}] => (Allow) C:\Users\BmgDroog\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{5BB99EA3-C5F5-46B4-9551-D20297B0B49C}] => (Allow) C:\Users\BmgDroog\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{52538661-4B3B-4CB2-9B7C-667D9CBE23BC}] => (Allow) C:\Program Files (x86)\MIO\loader\st9500420as_5vjfeqh8.dat
FirewallRules: [{5349E31A-B2F3-493D-94FC-1564DF456116}] => (Allow) C:\Program Files (x86)\MIO\loader\st9500420as_5vjfeqh8.dat
FirewallRules: [{8873337F-F956-4620-9F41-5CD72737816A}] => (Allow) C:\Program Files (x86)\Footjane\Application\chrome.exe
FirewallRules: [{229F9F9A-8D74-4FDE-8005-7C8C874AE697}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
StandardProfile\AuthorizedApplications: [D:\Programme\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [D:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [D:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [D:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

09-05-2017 20:55:35 Removed AlphaGo
15-05-2017 20:31:22 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/16/2017 09:08:20 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files (x86)\dataflor\business\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files (x86)\dataflor\business\DelZip179.dll" in Zeile 8.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/16/2017 09:05:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (05/16/2017 08:30:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1

Error: (05/16/2017 08:30:16 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=254, Autor-ID=311, Lieferant-ID=14122, Lieferant-Typ=1

Error: (05/16/2017 08:30:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=311, Lieferant-ID=0, Lieferant-Typ=0


Systemfehler:
=============
Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Integrated Clock Controller Service - Intel(R) ICCS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "hide.me VPN Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/16/2017 07:44:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Net.Pipe-Listeneradapter" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2017-04-30 09:49:46.404
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-30 09:49:45.464
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-30 09:46:57.903
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-30 09:46:56.407
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-15 13:03:35.532
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-15 13:03:34.938
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-15 12:57:47.793
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-04-15 12:57:46.890
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-22 21:33:05.114
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-22 21:32:50.114
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 3977.05 MB
Verfügbarer physikalischer RAM: 2273.96 MB
Summe virtueller Speicher: 8073.05 MB
Verfügbarer virtueller Speicher: 5954.12 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:172.22 GB) (Free:125.79 GB) NTFS
Drive d: () (Fixed) (Total:292.97 GB) (Free:197.57 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1404DB59)
Partition 1: (Active) - (Size=134 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=172.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=293 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

BmgDroog · 16.05.2017, 21:37

und der Report von tdsskiller, ein Logfile wurde nicht automatisch erstellt. Hoffe das passt so...?

Report tdsskiller Teil 1...

Code:

ATTFilter

22:12:02.0179 0x18dc  TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
22:12:07.0358 0x18dc  ============================================================
22:12:07.0358 0x18dc  Current date / time: 2017/05/16 22:12:07.0358
22:12:07.0358 0x18dc  SystemInfo:
22:12:07.0359 0x18dc  
22:12:07.0359 0x18dc  OS Version: 10.0.14393 ServicePack: 0.0
22:12:07.0359 0x18dc  Product type: Workstation
22:12:07.0359 0x18dc  ComputerName: ARBEITSTIER
22:12:07.0359 0x18dc  UserName: BmgDroog
22:12:07.0359 0x18dc  Windows directory: C:\WINDOWS
22:12:07.0359 0x18dc  System windows directory: C:\WINDOWS
22:12:07.0359 0x18dc  Running under WOW64
22:12:07.0359 0x18dc  Processor architecture: Intel x64
22:12:07.0359 0x18dc  Number of processors: 4
22:12:07.0359 0x18dc  Page size: 0x1000
22:12:07.0359 0x18dc  Boot type: Normal boot
22:12:07.0359 0x18dc  CodeIntegrityOptions = 0x00000001
22:12:07.0359 0x18dc  ============================================================
22:12:07.0623 0x18dc  KLMD registered as C:\WINDOWS\system32\drivers\19845499.sys
22:12:07.0623 0x18dc  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.1198, osProperties = 0x19
22:12:57.0799 0x18dc  System UUID: {0A03045A-1547-C9AF-A8B8-5F1B045F190D}
22:13:11.0869 0x18dc  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:13:11.0889 0x18dc  ============================================================
22:13:11.0889 0x18dc  \Device\Harddisk0\DR0:
22:13:11.0889 0x18dc  MBR partitions:
22:13:11.0889 0x18dc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x43000
22:13:11.0889 0x18dc  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x43800, BlocksNum 0x15871800
22:13:11.0889 0x18dc  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x15996000, BlocksNum 0x249EF000
22:13:11.0889 0x18dc  ============================================================
22:13:11.0921 0x18dc  C: <-> \Device\Harddisk0\DR0\Partition2
22:13:11.0982 0x18dc  D: <-> \Device\Harddisk0\DR0\Partition3
22:13:11.0982 0x18dc  ============================================================
22:13:11.0982 0x18dc  Initialize success
22:13:11.0982 0x18dc  ============================================================
22:13:31.0619 0x0cf8  ============================================================
22:13:31.0619 0x0cf8  Scan started
22:13:31.0619 0x0cf8  Mode: Manual; 
22:13:31.0619 0x0cf8  ============================================================
22:13:31.0619 0x0cf8  KSN ping started
22:13:31.0748 0x0cf8  KSN ping finished: true
22:13:35.0089 0x0cf8  ================ Scan system memory ========================
22:13:35.0089 0x0cf8  System memory - ok
22:13:35.0090 0x0cf8  ================ Scan services =============================
22:13:35.0205 0x0cf8  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
22:13:35.0210 0x0cf8  1394ohci - ok
22:13:35.0229 0x0cf8  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
22:13:35.0231 0x0cf8  3ware - ok
22:13:35.0282 0x0cf8  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
22:13:35.0293 0x0cf8  ACPI - ok
22:13:35.0306 0x0cf8  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\WINDOWS\System32\drivers\AcpiDev.sys
22:13:35.0307 0x0cf8  AcpiDev - ok
22:13:35.0324 0x0cf8  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
22:13:35.0326 0x0cf8  acpiex - ok
22:13:35.0342 0x0cf8  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
22:13:35.0343 0x0cf8  acpipagr - ok
22:13:35.0372 0x0cf8  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
22:13:35.0373 0x0cf8  AcpiPmi - ok
22:13:35.0385 0x0cf8  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
22:13:35.0386 0x0cf8  acpitime - ok
22:13:35.0432 0x0cf8  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\WINDOWS\system32\drivers\ADP80XX.SYS
22:13:35.0456 0x0cf8  ADP80XX - ok
22:13:35.0504 0x0cf8  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD             C:\WINDOWS\system32\drivers\afd.sys
22:13:35.0517 0x0cf8  AFD - ok
22:13:35.0548 0x0cf8  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys
22:13:35.0552 0x0cf8  ahcache - ok
22:13:35.0571 0x0cf8  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\WINDOWS\System32\AJRouter.dll
22:13:35.0573 0x0cf8  AJRouter - ok
22:13:35.0603 0x0cf8  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\WINDOWS\System32\alg.exe
22:13:35.0605 0x0cf8  ALG - ok
22:13:35.0623 0x0cf8  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
22:13:35.0626 0x0cf8  AmdK8 - ok
22:13:35.0639 0x0cf8  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
22:13:35.0642 0x0cf8  AmdPPM - ok
22:13:35.0656 0x0cf8  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
22:13:35.0658 0x0cf8  amdsata - ok
22:13:35.0678 0x0cf8  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
22:13:35.0684 0x0cf8  amdsbs - ok
22:13:35.0696 0x0cf8  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
22:13:35.0697 0x0cf8  amdxata - ok
22:13:35.0730 0x0cf8  [ E3BBFBAC780F49AF61D35F904006DA0A, A252042DDC63D03CB229170557FF219A217AF4C1A4F67880ECC4D3F30B0E8B4F ] ApfiltrService  C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
22:13:35.0739 0x0cf8  ApfiltrService - ok
22:13:35.0803 0x0cf8  [ 39E327BC1E1FB314E1C3960B68A25DF5, 1C508FB786C7CC16A8C90312EC184A137D3C54B1E9AD3D8D072E40D2AFCF1C24 ] ApHidMonitorService C:\Program Files\DellTPad\HidMonitorSvc.exe
22:13:35.0806 0x0cf8  ApHidMonitorService - ok
22:13:35.0853 0x0cf8  [ 5B0F4FB165256DE463A51E3A3127969E, 6751ADFFE95FA671C584427A9624EEB79518DE08132FD7A83148700B75487316 ] AppHostSvc      C:\WINDOWS\system32\inetsrv\apphostsvc.dll
22:13:35.0855 0x0cf8  AppHostSvc - ok
22:13:35.0876 0x0cf8  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\WINDOWS\system32\drivers\appid.sys
22:13:35.0879 0x0cf8  AppID - ok
22:13:35.0901 0x0cf8  [ 0A7C202CDBFD295363A09DE1A2C05F45, AB516BB714CAD60994A42710E7747FB50A5890F71BD8880BF86096CC485DE393 ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
22:13:35.0904 0x0cf8  AppIDSvc - ok
22:13:35.0931 0x0cf8  [ 79A87DD43331290A276C02DC396BF530, D0781DC027EE60C94831A2C9C3DD741F8F2100A253CD847E7FCFA59919014278 ] Appinfo         C:\WINDOWS\System32\appinfo.dll
22:13:35.0934 0x0cf8  Appinfo - ok
22:13:35.0963 0x0cf8  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\WINDOWS\system32\drivers\applockerfltr.sys
22:13:35.0963 0x0cf8  applockerfltr - ok
22:13:35.0996 0x0cf8  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
22:13:35.0999 0x0cf8  AppMgmt - ok
22:13:36.0044 0x0cf8  [ E2B0B9A477C169C466609F866311CD45, 26846DC6BF6ECFD97A7C0714160B870A733E1255779029327C1415D48AF133E6 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
22:13:36.0053 0x0cf8  AppReadiness - ok
22:13:36.0095 0x0cf8  [ 99CA3E622070FDBD7B75EB7E86B2DE40, 12BDD092667250EBC99B4D597897C1B2C83115CD83ECCDEAC36B2D9C9BEA77B6 ] AppVClient      C:\WINDOWS\system32\AppVClient.exe
22:13:36.0108 0x0cf8  AppVClient - ok
22:13:36.0135 0x0cf8  [ B66ED2CB37F7E4696A51612AFBA08834, 70BA67AF7F1290E3145B873B53516F138E50D8AAC80CD00CBA66467ABC6643CB ] AppvStrm        C:\WINDOWS\system32\drivers\AppvStrm.sys
22:13:36.0137 0x0cf8  AppvStrm - ok
22:13:36.0161 0x0cf8  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr       C:\WINDOWS\system32\drivers\AppvVemgr.sys
22:13:36.0164 0x0cf8  AppvVemgr - ok
22:13:36.0193 0x0cf8  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs         C:\WINDOWS\system32\drivers\AppvVfs.sys
22:13:36.0196 0x0cf8  AppvVfs - ok
22:13:36.0298 0x0cf8  [ 95415C7C5C43882F7163CA07D956ADA2, 5A082F36A39BE9ABC47AE8A72972554BA577EB04D8018EC862615EA2130FA0E3 ] AppXSvc         C:\WINDOWS\system32\appxdeploymentserver.dll
22:13:36.0334 0x0cf8  AppXSvc - ok
22:13:36.0354 0x0cf8  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
22:13:36.0356 0x0cf8  arcsas - ok
22:13:36.0431 0x0cf8  [ 5EE26734A882478AF6696092E2E0F352, 6CACFF521B3B839F73EBEB6EFBFDCCA8A8BC319DDB254BE3EFE29A39040B2C26 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:13:36.0432 0x0cf8  aspnet_state - ok
22:13:36.0708 0x0cf8  [ A760C2AFBA1A71E0F7310A6E900CB0E4, 3827C8D4DFC3FC850E9BD049E1B127BD1076DDEFDA19BBA9445FF201F6AE99F8 ] aswbIDSAgent    C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
22:13:36.0837 0x0cf8  aswbIDSAgent - ok
22:13:36.0870 0x0cf8  [ 0C19C91ED99964925FF8B05C23743AB1, BF513CCC0E5D2D2CE7D06F17ABC34CD3A55B59588267A5868ADFB723454AF6EB ] aswbidsdriver   C:\WINDOWS\system32\drivers\aswbidsdrivera.sys
22:13:36.0875 0x0cf8  aswbidsdriver - ok
22:13:36.0893 0x0cf8  [ 670839F4BA6D82F3035AADFE8274F02E, E4E8B1F3B9138CB2600158CC8507CBA31637E48BBA4D67398E05970B2CECA671 ] aswbidsh        C:\WINDOWS\system32\drivers\aswbidsha.sys
22:13:36.0896 0x0cf8  aswbidsh - ok
22:13:36.0915 0x0cf8  [ 5C561968CF601D76A98692DCC8CF74ED, 26D0F34CE4485A813200032CE6889575A13196E79A4B124DD19E4584B0C102DC ] aswblog         C:\WINDOWS\system32\drivers\aswbloga.sys
22:13:36.0923 0x0cf8  aswblog - ok
22:13:36.0930 0x0cf8  [ 335E5F19E7397A283B7ED20FE7B369EB, 6A31ABA0BA671EA796E8920EBD64DB28D3D7EB65C4FF68C3EB1DEF4FFC002163 ] aswbuniv        C:\WINDOWS\system32\drivers\aswbuniva.sys
22:13:36.0931 0x0cf8  aswbuniv - ok
22:13:36.0957 0x0cf8  [ 00171C6C15B481B6E4286EBFEFA8E5BD, E8946C62059C04B78FED4B605BF2123C22293A458FFED70739735063003F4351 ] aswHdsKe        C:\WINDOWS\system32\drivers\aswHdsKe.sys
22:13:36.0959 0x0cf8  aswHdsKe - ok
22:13:36.0976 0x0cf8  [ BA02CA77D989710F79FD662019C4DF94, 2E989847BEE92EB8DE7492DE7AB9B4658CEFC38E678346B7548E6ECB528300D6 ] aswHwid         C:\WINDOWS\system32\drivers\aswHwid.sys
22:13:36.0977 0x0cf8  aswHwid - ok
22:13:36.0994 0x0cf8  [ 5E6FD2CB74138C6AF591779D2619BD6C, 7410384AE4280156451EB1EAC5CBA9E44834C49BD5A31049339895D5994AEF4E ] aswKbd          C:\WINDOWS\system32\drivers\aswKbd.sys
22:13:36.0995 0x0cf8  aswKbd - ok
22:13:37.0017 0x0cf8  [ 2B1490F2F1CC76C9C9B61CE63D6E7973, BFD456C598E74974B81453805ADD0792BD9636BF8213306F40029560B20DE036 ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys
22:13:37.0019 0x0cf8  aswMonFlt - ok
22:13:37.0041 0x0cf8  [ F26D1F761E14789743275FA5D258EAB8, D532AD4DFFC73BE8A889B75BB50D33FFF674B5AB31F05AA75D9E0667363057F1 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys
22:13:37.0043 0x0cf8  aswRdr - ok
22:13:37.0057 0x0cf8  [ C1007774450CFAB19D784D50C3410FC7, 2752FD77412D54D78A81DED9F05F094E589BCA5E360ECD420E28ECC844D35921 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys
22:13:37.0059 0x0cf8  aswRvrt - ok
22:13:37.0101 0x0cf8  [ EB1991686949400C51B8C21CE013621E, 248545BDD5E8D1BD2D752AF7D3B77E8F1EA6453FD3B007851A04E9B634966448 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
22:13:37.0119 0x0cf8  aswSnx - ok
22:13:37.0142 0x0cf8  [ 7A17BD26C74F5329CB1DF029AE4DD357, 31F98B74F6BC2D75BDC83E3E2E60C9541D57912B6DF2C8A9241F3CFB17E0ACBB ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys
22:13:37.0153 0x0cf8  aswSP - ok
22:13:37.0182 0x0cf8  [ 2933CBC7643168E4288D443B4125941C, 19DF1EB9F3EBF2496633D8D789E56EC8A59CF664ECC12A6BF69045BC2BC6CF48 ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys
22:13:37.0185 0x0cf8  aswStm - ok
22:13:37.0206 0x0cf8  [ E76C21203E29F2DCC489EF585E0B1A38, F64B8F5F2EFA10ADD64DE0574ADDE05DF1DFDEACF0E72879C9DD6DEB037E01A3 ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys
22:13:37.0214 0x0cf8  aswVmm - ok
22:13:37.0223 0x0cf8  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\WINDOWS\System32\drivers\asyncmac.sys
22:13:37.0224 0x0cf8  AsyncMac - ok
22:13:37.0247 0x0cf8  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
22:13:37.0248 0x0cf8  atapi - ok
22:13:37.0300 0x0cf8  [ 44D50F4B55BEE38C97A6CBECEBC59384, 43C35E5547E5180B25726F90E0B94149DE1099FD507A6357A6A284A2749433F3 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
22:13:37.0306 0x0cf8  AudioEndpointBuilder - ok
22:13:37.0338 0x0cf8  [ 36A9B38EA06A8C14CC82E0C8004A6635, 959E6B359D89E112976AF488F2756F770B491AE53ED07E9D31B4A3D8A7F33C80 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
22:13:37.0353 0x0cf8  Audiosrv - ok
22:13:37.0386 0x0cf8  [ D961A7C05A76302E782B1B0CF6546BA7, DAE7481B4FFC0746944213D10EF59C21BBA9937138D660E72E63F43BCDC1F799 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
22:13:37.0391 0x0cf8  avast! Antivirus - ok
22:13:37.0413 0x0cf8  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
22:13:37.0415 0x0cf8  AxInstSV - ok
22:13:37.0451 0x0cf8  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
22:13:37.0459 0x0cf8  b06bdrv - ok
22:13:37.0479 0x0cf8  [ 94D6B95485BFA35D81524B0EBA0F7569, 14A32CD501B1D816526A75A9EB3782E6C4FF78831628F257050AD2BA73733F57 ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
22:13:37.0480 0x0cf8  BasicDisplay - ok
22:13:37.0498 0x0cf8  [ 2E78B31C90766FD086D2B766528E9AEA, D0D9ED8AD90E3D400DA4231AB313B4B2869930DADC3034D6FCDEA000E424F843 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
22:13:37.0499 0x0cf8  BasicRender - ok
22:13:37.0512 0x0cf8  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\WINDOWS\System32\drivers\bcmfn.sys
22:13:37.0513 0x0cf8  bcmfn - ok
22:13:37.0523 0x0cf8  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
22:13:37.0524 0x0cf8  bcmfn2 - ok
22:13:37.0558 0x0cf8  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
22:13:37.0567 0x0cf8  BDESVC - ok
22:13:37.0588 0x0cf8  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
22:13:37.0589 0x0cf8  Beep - ok
22:13:37.0632 0x0cf8  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\WINDOWS\System32\bfe.dll
22:13:37.0645 0x0cf8  BFE - ok
22:13:37.0705 0x0cf8  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\WINDOWS\System32\qmgr.dll
22:13:37.0733 0x0cf8  BITS - ok
22:13:37.0767 0x0cf8  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
22:13:37.0769 0x0cf8  bowser - ok
22:13:37.0833 0x0cf8  [ 82A93A0772A29EB6E41438D9AE5ECDBD, 2C0EBA86DA33B763B6EBCF3D0A936FB92E0F36FD3D18D0812A33FC5FF1906C3C ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
22:13:37.0859 0x0cf8  BrokerInfrastructure - ok
22:13:37.0882 0x0cf8  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\WINDOWS\System32\browser.dll
22:13:37.0887 0x0cf8  Browser - ok
22:13:37.0906 0x0cf8  [ A70E09FD082BFA67BE085D41C8B6A85F, 1711163E7BE0DE83701A0293BF5D4D37AAD124D88F6FFA3FCC6CF0F3A7D3B78D ] BthA2DP         C:\WINDOWS\system32\drivers\BthA2DP.sys
22:13:37.0911 0x0cf8  BthA2DP - ok
22:13:37.0927 0x0cf8  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
22:13:37.0930 0x0cf8  BthAvrcpTg - ok
22:13:37.0976 0x0cf8  [ 77630A51FAF6A07922FEE835F4DED8F6, E096A9DC12885FD19575346A9693A66D0DDFF96C3155AD2040F2BF4249D1D609 ] BthEnum         C:\WINDOWS\System32\drivers\BthEnum.sys
22:13:37.0979 0x0cf8  BthEnum - ok
22:13:37.0991 0x0cf8  [ 20C63A9CC92CEA8D284C6EA36FED68DC, DA7669CCCA6838269297DD45EDB48149898B3E14648B5DB3B93AF82A3279B411 ] BthHFAud        C:\WINDOWS\system32\DRIVERS\BthHfAud.sys
22:13:37.0993 0x0cf8  BthHFAud - ok
22:13:38.0007 0x0cf8  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
22:13:38.0013 0x0cf8  BthHFEnum - ok
22:13:38.0022 0x0cf8  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
22:13:38.0024 0x0cf8  bthhfhid - ok
22:13:38.0049 0x0cf8  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\WINDOWS\System32\BthHFSrv.dll
22:13:38.0059 0x0cf8  BthHFSrv - ok
22:13:38.0072 0x0cf8  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
22:13:38.0074 0x0cf8  BTHMODEM - ok
22:13:38.0101 0x0cf8  [ 224BA1CB1F3C702F0D001D2AFC9793B1, F139F6F78C716E1167E16530AE31E4A26C2A69467BCB08A9A52A101B31DF7771 ] BthPan          C:\WINDOWS\System32\drivers\bthpan.sys
22:13:38.0105 0x0cf8  BthPan - ok
22:13:38.0161 0x0cf8  [ 34C35293F5A3DEFEC59DBCD7BD4C17D0, B1F39B8E348BDF936ED4C9544712A8A103D02B039658A98C0C465249769C7D20 ] BTHPORT         C:\WINDOWS\System32\drivers\BTHport.sys
22:13:38.0194 0x0cf8  BTHPORT - ok
22:13:38.0228 0x0cf8  [ 577FFA2B0B8572587FEB825F42453E81, D1BA449B7A535D0F6BC2EDE75D2CBA585E3A00FE552E244F342FB4ACA029A9A5 ] bthserv         C:\WINDOWS\system32\bthserv.dll
22:13:38.0233 0x0cf8  bthserv - ok
22:13:38.0250 0x0cf8  [ DC5955E589C55E2313D69B64E1A183F3, 06D703246D0813DE53D62885C8B7381135783673FF4BDDD5CC38FEB54901BB76 ] BTHUSB          C:\WINDOWS\System32\drivers\BTHUSB.sys
22:13:38.0253 0x0cf8  BTHUSB - ok
22:13:38.0273 0x0cf8  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
22:13:38.0275 0x0cf8  buttonconverter - ok
22:13:38.0302 0x0cf8  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys
22:13:38.0307 0x0cf8  CapImg - ok
22:13:38.0317 0x0cf8  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
22:13:38.0320 0x0cf8  cdfs - ok
22:13:38.0358 0x0cf8  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll
22:13:38.0380 0x0cf8  CDPSvc - ok
22:13:38.0398 0x0cf8  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll
22:13:38.0415 0x0cf8  CDPUserSvc - ok
22:13:38.0479 0x0cf8  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
22:13:38.0484 0x0cf8  cdrom - ok
22:13:38.0513 0x0cf8  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
22:13:38.0517 0x0cf8  CertPropSvc - ok
22:13:38.0540 0x0cf8  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\WINDOWS\system32\drivers\cht4sx64.sys
22:13:38.0557 0x0cf8  cht4iscsi - ok
22:13:38.0633 0x0cf8  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\WINDOWS\System32\drivers\cht4vx64.sys
22:13:38.0697 0x0cf8  cht4vbd - ok
22:13:38.0726 0x0cf8  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
22:13:38.0728 0x0cf8  circlass - ok
22:13:38.0769 0x0cf8  [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
22:13:38.0786 0x0cf8  CLFS - ok
22:13:38.0965 0x0cf8  [ 79BEA02EBBD4F51A44939E9395A9BCB6, 247A4B1CBD591B02B5B1994FA745EB5E7963A097DEE3A8948875E63604A1E734 ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
22:13:39.0029 0x0cf8  ClickToRunSvc - ok
22:13:39.0126 0x0cf8  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\WINDOWS\System32\ClipSVC.dll
22:13:39.0164 0x0cf8  ClipSVC - ok
22:13:39.0212 0x0cf8  [ 6CEDF7FC4A8AEBA399352FC8FC251549, 78FB2126C125A7D6D0ADAF17C4523E923326AA0D739EE80D03E471A304EDAE94 ] CliqzMaintenance C:\Program Files (x86)\Cliqz Maintenance Service\maintenanceservice.exe
22:13:39.0218 0x0cf8  CliqzMaintenance - ok
22:13:39.0226 0x0cf8  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\WINDOWS\System32\drivers\registry.sys
22:13:39.0229 0x0cf8  clreg - ok
22:13:39.0258 0x0cf8  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
22:13:39.0260 0x0cf8  CmBatt - ok
22:13:39.0298 0x0cf8  [ D7D1A078B0CBC042ACE81E7B0B082994, 4DE92876176C2F82A59B74CA1FAAE7A5CE84C90A505A52A737C631D7120E31A4 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
22:13:39.0311 0x0cf8  CNG - ok
22:13:39.0325 0x0cf8  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
22:13:39.0328 0x0cf8  cnghwassist - ok
22:13:39.0384 0x0cf8  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
22:13:39.0386 0x0cf8  CompositeBus - ok
22:13:39.0390 0x0cf8  COMSysApp - ok
22:13:39.0403 0x0cf8  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
22:13:39.0405 0x0cf8  condrv - ok
22:13:39.0452 0x0cf8  [ BE8478598F5D6FF600CC13DBA188F81C, 5D78E1F6F5F4AB77518F9B7DA904E6B97EA7B01D45B043939B048DF019FE49A6 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
22:13:39.0480 0x0cf8  CoreMessagingRegistrar - ok
22:13:39.0547 0x0cf8  [ 5D19617245C798A0EED86D4D36B8C6E8, 90AB9125B1A56134489E81CE5AEE1F2C7005BE505E52603B1A884A2B8C3C4735 ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
22:13:39.0563 0x0cf8  cphs - ok
22:13:39.0632 0x0cf8  [ 32F42C6FAF593A8C1695115EC6D9B660, EAAA70F253820E645DF7347A2ACBED675FF6AA64A8E21FE18A342E3B52250160 ] Credential Vault Host Control Service C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
22:13:39.0680 0x0cf8  Credential Vault Host Control Service - ok
22:13:39.0689 0x0cf8  [ F3AE65F2C114EDAE9E5D2C6BC55898F0, 939C25BA8B82D3981201FDA52463867AE68F9E0EC4F717733984D38C56DBA072 ] Credential Vault Host Storage C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
22:13:39.0692 0x0cf8  Credential Vault Host Storage - ok
22:13:39.0718 0x0cf8  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
22:13:39.0722 0x0cf8  CryptSvc - ok
22:13:39.0765 0x0cf8  [ EC2EA2F6C6D23315C20B4829F00D0440, BF1F47C3485E9112FB64F582DFA4679455203574F82A5ADB222BDA1FED1601E6 ] CSC             C:\WINDOWS\system32\drivers\csc.sys
22:13:39.0791 0x0cf8  CSC - ok
22:13:39.0833 0x0cf8  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\WINDOWS\System32\cscsvc.dll
22:13:39.0864 0x0cf8  CscService - ok
22:13:39.0898 0x0cf8  [ D4D81C4A43F8FF9BCA56D594C3B145EE, 66584A367E721CC0E726629BB85AFFAC2149301315B582E226CF2F9E35A7DDF2 ] cvusbdrv        C:\WINDOWS\System32\Drivers\cvusbdrv.sys
22:13:39.0900 0x0cf8  cvusbdrv - ok
22:13:39.0915 0x0cf8  [ 3BBD0073265DA6D3EFBA54B26E5D8236, 3C10C8BEC0D8AC41A3FBD589F41A83D6345C1FDD04B8B99063B2F5670CF10B18 ] dam             C:\WINDOWS\system32\drivers\dam.sys
22:13:39.0917 0x0cf8  dam - ok
22:13:39.0972 0x0cf8  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate        C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
22:13:39.0977 0x0cf8  dbupdate - ok
22:13:39.0984 0x0cf8  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem       C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
22:13:39.0987 0x0cf8  dbupdatem - ok
22:13:39.0992 0x0cf8  dbx - ok
22:13:40.0025 0x0cf8  [ B8F34CB79DF33C1A613709D99F4BFE77, 686E4E071EA43C122B0BE41C471220DE9BB31A3D5FEB30079C058FCA02FF3A59 ] DbxSvc          C:\WINDOWS\system32\DbxSvc.exe
22:13:40.0029 0x0cf8  DbxSvc - ok
22:13:40.0082 0x0cf8  [ 4A7015195E49A3BA7DB967B277B21E9D, 2EE10950BC0E2B13303491725FB3F0D3AF63518B7D1593BCC4BF503F4A11F408 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
22:13:40.0103 0x0cf8  DcomLaunch - ok
22:13:40.0145 0x0cf8  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\WINDOWS\system32\dcpsvc.dll
22:13:40.0152 0x0cf8  DcpSvc - ok
22:13:40.0173 0x0cf8  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
22:13:40.0199 0x0cf8  defragsvc - ok
22:13:40.0235 0x0cf8  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
22:13:40.0253 0x0cf8  DeviceAssociationService - ok
22:13:40.0280 0x0cf8  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
22:13:40.0288 0x0cf8  DeviceInstall - ok
22:13:40.0301 0x0cf8  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll
22:13:40.0305 0x0cf8  DevQueryBroker - ok
22:13:40.0337 0x0cf8  [ 4BC21E937E9F9F408672D2C2CBE4A153, 2F27560D09D184ABB7B4415146F5B8DE56C84FF74A4042596635EF896E39CBC4 ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
22:13:40.0342 0x0cf8  Dfsc - ok
22:13:40.0376 0x0cf8  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
22:13:40.0393 0x0cf8  Dhcp - ok
22:13:40.0443 0x0cf8  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
22:13:40.0446 0x0cf8  diagnosticshub.standardcollector.service - ok
22:13:40.0519 0x0cf8  [ 22391290BB9D3ED68950672E42B6F3F0, C4DC2DD3CF1564181377A67AB7E08DEFB377D4AE51956A4F27CE46C038D04AFE ] DiagTrack       C:\WINDOWS\system32\diagtrack.dll
22:13:40.0578 0x0cf8  DiagTrack - ok
22:13:40.0636 0x0cf8  [ BB5B80616BD01A9C59BF1D52BA238EDA, 8168F38127EC955B25AD4EF61081D86473E4959F797F68055E6210080EFEFF9F ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
22:13:40.0655 0x0cf8  DigitalWave.Update.Service - ok
22:13:40.0681 0x0cf8  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\WINDOWS\system32\drivers\disk.sys
22:13:40.0685 0x0cf8  disk - ok
22:13:40.0731 0x0cf8  [ 527CE76D1B0587A3F9156809B3E2275E, 6FAB680F73774F3FAA65258D53DC8ADCDAEE2ABDDF825ED79F9526DC3B9B7312 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
22:13:40.0743 0x0cf8  DmEnrollmentSvc - ok
22:13:40.0764 0x0cf8  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
22:13:40.0766 0x0cf8  dmvsc - ok
22:13:40.0787 0x0cf8  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
22:13:40.0791 0x0cf8  dmwappushservice - ok
22:13:40.0830 0x0cf8  [ 86E507EE1457D7FA463BBF05BA76EB1E, 2D2D05CED57C22F41684DC6DD00ACECDF708407493286B2D4007068154E436FF ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
22:13:40.0839 0x0cf8  Dnscache - ok
22:13:40.0856 0x0cf8  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
22:13:40.0864 0x0cf8  dot3svc - ok
22:13:40.0881 0x0cf8  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\WINDOWS\system32\dps.dll
22:13:40.0888 0x0cf8  DPS - ok
22:13:40.0898 0x0cf8  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\WINDOWS\system32\DRIVERS\drmkaud.sys
22:13:40.0900 0x0cf8  drmkaud - ok
22:13:40.0915 0x0cf8  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
22:13:40.0923 0x0cf8  DsmSvc - ok
22:13:40.0934 0x0cf8  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\WINDOWS\System32\DsSvc.dll
22:13:40.0942 0x0cf8  DsSvc - ok
22:13:41.0018 0x0cf8  [ 4CECF7C7BFBF95647FEC49475555BFB2, B914ADC19CA4A4EEE83AE560A5CCE2E21A3D9568E5961BEFAD7B455930FB0AB9 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
22:13:41.0055 0x0cf8  DXGKrnl - ok
22:13:41.0093 0x0cf8  [ 40C02799EE2421B0BE402D972CDC49CA, CB34EE412516D97B6F0831BE6B0AB9DBFAA6CC9A949183C96EF985D9DD264743 ] e1cexpress      C:\WINDOWS\system32\DRIVERS\e1c65x64.sys
22:13:41.0117 0x0cf8  e1cexpress - ok
22:13:41.0143 0x0cf8  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\WINDOWS\System32\eapsvc.dll
22:13:41.0148 0x0cf8  EapHost - ok
22:13:41.0283 0x0cf8  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
22:13:41.0375 0x0cf8  ebdrv - ok
22:13:41.0407 0x0cf8  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS             C:\WINDOWS\System32\lsass.exe
22:13:41.0411 0x0cf8  EFS - ok
22:13:41.0420 0x0cf8  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
22:13:41.0423 0x0cf8  EhStorClass - ok
22:13:41.0449 0x0cf8  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
22:13:41.0453 0x0cf8  EhStorTcgDrv - ok
22:13:41.0480 0x0cf8  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll
22:13:41.0486 0x0cf8  embeddedmode - ok
22:13:41.0516 0x0cf8  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc       C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
22:13:41.0525 0x0cf8  EntAppSvc - ok
22:13:41.0563 0x0cf8  [ 7DB097F4F6786307168C0DDDEC43A565, 963C0D3D88FB4BF9C2FBCB296B03603E2F8AA8B4E8976162842863B7538C1A9F ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
22:13:41.0568 0x0cf8  EPSON_EB_RPCV4_04 - ok
22:13:41.0576 0x0cf8  [ 258AA65A0862E19B7DE6981FDA3758AD, C090F19BEDC2CFB0B5265BCE48BD52102E06CBC15EEFE4CDB747D44F2E42D545 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
22:13:41.0579 0x0cf8  EPSON_PM_RPCV4_04 - ok
22:13:41.0597 0x0cf8  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
22:13:41.0599 0x0cf8  ErrDev - ok
22:13:41.0634 0x0cf8  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\WINDOWS\system32\es.dll
22:13:41.0643 0x0cf8  EventSystem - ok
22:13:41.0667 0x0cf8  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
22:13:41.0675 0x0cf8  exfat - ok
22:13:41.0693 0x0cf8  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
22:13:41.0702 0x0cf8  fastfat - ok
22:13:41.0737 0x0cf8  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\WINDOWS\system32\fxssvc.exe
22:13:41.0762 0x0cf8  Fax - ok
22:13:41.0785 0x0cf8  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
22:13:41.0788 0x0cf8  fdc - ok
22:13:41.0804 0x0cf8  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
22:13:41.0807 0x0cf8  fdPHost - ok
22:13:41.0822 0x0cf8  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
22:13:41.0826 0x0cf8  FDResPub - ok
22:13:41.0866 0x0cf8  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
22:13:41.0871 0x0cf8  fhsvc - ok
22:13:41.0897 0x0cf8  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\WINDOWS\system32\drivers\filecrypt.sys
22:13:41.0901 0x0cf8  FileCrypt - ok
22:13:41.0915 0x0cf8  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
22:13:41.0919 0x0cf8  FileInfo - ok
22:13:41.0932 0x0cf8  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
22:13:41.0934 0x0cf8  Filetrace - ok
22:13:41.0946 0x0cf8  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
22:13:41.0948 0x0cf8  flpydisk - ok
22:13:41.0970 0x0cf8  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
22:13:41.0981 0x0cf8  FltMgr - ok
22:13:42.0056 0x0cf8  [ 81C8AA35C92D3A5E82477DF00DEDCBFD, F825641B3DD12C35657DC6F05C3A3CF2821D3525CF51E376E678B5FD45AD664E ] FontCache       C:\WINDOWS\system32\FntCache.dll
22:13:42.0092 0x0cf8  FontCache - ok
22:13:42.0187 0x0cf8  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:13:42.0189 0x0cf8  FontCache3.0.0.0 - ok
22:13:42.0258 0x0cf8  [ CD7CD19E72EA2F597D01FC68ECD2F28E, 4E8BAA4AEF28B043780E2FEFFEB5E4DF4E2FB3211CE617D2DBAFB6C7B7DBBDFD ] FrameServer     C:\WINDOWS\system32\FrameServer.dll
22:13:42.0291 0x0cf8  FrameServer - ok
22:13:42.0320 0x0cf8  [ B07A40B5A7A58B8C75663A572A46084C, 01F34EAFD4A86FF6AFC015BE2D155A53ED8186BD6DA1A05CCEC8425417A8E320 ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
22:13:42.0323 0x0cf8  FsDepends - ok
22:13:42.0341 0x0cf8  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:13:42.0343 0x0cf8  Fs_Rec - ok
22:13:42.0396 0x0cf8  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
22:13:42.0420 0x0cf8  fvevol - ok
22:13:42.0455 0x0cf8  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
22:13:42.0464 0x0cf8  gencounter - ok
22:13:42.0484 0x0cf8  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\WINDOWS\System32\drivers\genericusbfn.sys
22:13:42.0486 0x0cf8  genericusbfn - ok
22:13:42.0500 0x0cf8  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
22:13:42.0506 0x0cf8  GPIOClx0101 - ok
22:13:42.0568 0x0cf8  [ 8997353398C8466ECD183942D5FCC65B, C73FD5FFD71003F7FDDC17F59812BD6860992FA35EC0ECC8DE37D935606B485B ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
22:13:42.0588 0x0cf8  gpsvc - ok
22:13:42.0605 0x0cf8  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys
22:13:42.0607 0x0cf8  GpuEnergyDrv - ok
22:13:42.0646 0x0cf8  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\WINDOWS\system32\DRIVERS\HdAudio.sys
22:13:42.0675 0x0cf8  HdAudAddService - ok
22:13:42.0791 0x0cf8  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
22:13:42.0795 0x0cf8  HDAudBus - ok
22:13:42.0853 0x0cf8  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
22:13:42.0856 0x0cf8  HidBatt - ok
22:13:42.0897 0x0cf8  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
22:13:42.0908 0x0cf8  HidBth - ok
22:13:42.0926 0x0cf8  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
22:13:42.0960 0x0cf8  hidi2c - ok
22:13:43.0040 0x0cf8  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\WINDOWS\System32\drivers\hidinterrupt.sys
22:13:43.0043 0x0cf8  hidinterrupt - ok
22:13:43.0062 0x0cf8  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
22:13:43.0064 0x0cf8  HidIr - ok
22:13:43.0086 0x0cf8  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\WINDOWS\system32\hidserv.dll
22:13:43.0090 0x0cf8  hidserv - ok
22:13:43.0116 0x0cf8  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
22:13:43.0126 0x0cf8  HidUsb - ok
22:13:43.0160 0x0cf8  [ A6FFE56E72D6C500A0D2AA0843630D40, DFF576C71D02B0E7117AFD5F1738ABA1078F1D54961E51B81F5D954DBA5F8104 ] HitmanProScheduler C:\Program Files\HitmanPro\hmpsched.exe
22:13:43.0165 0x0cf8  HitmanProScheduler - ok
22:13:43.0202 0x0cf8  [ E1C43C08A9650F2DB2E1048AC68BE7AE, B8DF9B2464B5A374C5CE7F05AEF506AB1568A707EB4A5850F41FA9D338B4C2A1 ] hmevpnsvc       C:\Program Files (x86)\hide.me VPN\hidemesvc.exe
22:13:43.0207 0x0cf8  hmevpnsvc - ok
22:13:43.0245 0x0cf8  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
22:13:43.0255 0x0cf8  HomeGroupListener - ok
22:13:43.0293 0x0cf8  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
22:13:43.0317 0x0cf8  HomeGroupProvider - ok
22:13:43.0339 0x0cf8  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
22:13:43.0343 0x0cf8  HpSAMD - ok
22:13:43.0394 0x0cf8  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
22:13:43.0443 0x0cf8  HTTP - ok
22:13:43.0460 0x0cf8  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll
22:13:43.0465 0x0cf8  HvHost - ok
22:13:43.0497 0x0cf8  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice       C:\WINDOWS\system32\drivers\hvservice.sys
22:13:43.0500 0x0cf8  hvservice - ok
22:13:43.0532 0x0cf8  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
22:13:43.0535 0x0cf8  hwpolicy - ok
22:13:43.0550 0x0cf8  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
22:13:43.0552 0x0cf8  hyperkbd - ok
22:13:43.0569 0x0cf8  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
22:13:43.0573 0x0cf8  i8042prt - ok
22:13:43.0590 0x0cf8  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\WINDOWS\System32\drivers\iagpio.sys
22:13:43.0592 0x0cf8  iagpio - ok
22:13:43.0606 0x0cf8  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\WINDOWS\System32\drivers\iai2c.sys
22:13:43.0609 0x0cf8  iai2c - ok
22:13:43.0630 0x0cf8  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
22:13:43.0633 0x0cf8  iaLPSS2i_GPIO2 - ok
22:13:43.0649 0x0cf8  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
22:13:43.0655 0x0cf8  iaLPSS2i_I2C - ok
22:13:43.0667 0x0cf8  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
22:13:43.0670 0x0cf8  iaLPSSi_GPIO - ok
22:13:43.0685 0x0cf8  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
22:13:43.0689 0x0cf8  iaLPSSi_I2C - ok
22:13:43.0715 0x0cf8  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
22:13:43.0740 0x0cf8  iaStorAV - ok
22:13:43.0758 0x0cf8  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
22:13:43.0775 0x0cf8  iaStorV - ok
22:13:43.0801 0x0cf8  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\WINDOWS\System32\drivers\ibbus.sys
22:13:43.0826 0x0cf8  ibbus - ok
22:13:43.0871 0x0cf8  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
22:13:43.0877 0x0cf8  ICCS - ok
22:13:43.0895 0x0cf8  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\WINDOWS\System32\tetheringservice.dll
22:13:43.0912 0x0cf8  icssvc - ok
22:13:43.0947 0x0cf8  [ 6F95324909B502E2651442C1548AB12F, FF1B104990FE186C6100ED229A45345FF695323AC778688EC11AA8F5A87B141E ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
22:13:43.0950 0x0cf8  IDriverT - ok
22:13:44.0116 0x0cf8  [ 226EAECA4F21F899E3F0C95297678A0B, DC18AAE3F1505C9BECB75218F4CCCD8DC6E1C6258EDA9A57B57028246EF346FA ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
22:13:44.0279 0x0cf8  igfx - ok
22:13:44.0334 0x0cf8  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
22:13:44.0369 0x0cf8  IKEEXT - ok
22:13:44.0383 0x0cf8  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\WINDOWS\System32\drivers\IndirectKmd.sys
22:13:44.0386 0x0cf8  IndirectKmd - ok
22:13:44.0420 0x0cf8  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
22:13:44.0441 0x0cf8  IntcDAud - ok
22:13:44.0468 0x0cf8  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
22:13:44.0470 0x0cf8  intelide - ok
22:13:44.0484 0x0cf8  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
22:13:44.0487 0x0cf8  intelpep - ok
22:13:44.0505 0x0cf8  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
22:13:44.0509 0x0cf8  intelppm - ok
22:13:44.0537 0x0cf8  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys
22:13:44.0540 0x0cf8  iorate - ok
22:13:44.0570 0x0cf8  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:13:44.0574 0x0cf8  IpFilterDriver - ok
22:13:44.0622 0x0cf8  [ 68C50E8E4265698BE6835156F4DD5008, 5B9CBBCE99315E5569E6733F13E91A687A36F536A68A2B670CC24C4BCC4EAFF4 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
22:13:44.0667 0x0cf8  iphlpsvc - ok
22:13:44.0695 0x0cf8  [ 10D01A3657AC8E8004C83D613163DE1E, F9389F1BF87A2D28899F50D270DA6F48B0912CFAF06CEE566697B041DBE92F9C ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
22:13:44.0698 0x0cf8  IPMIDRV - ok
22:13:44.0714 0x0cf8  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
22:13:44.0720 0x0cf8  IPNAT - ok
22:13:44.0732 0x0cf8  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\WINDOWS\system32\drivers\irda.sys
22:13:44.0736 0x0cf8  irda - ok
22:13:44.0745 0x0cf8  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
22:13:44.0747 0x0cf8  IRENUM - ok
22:13:44.0770 0x0cf8  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\WINDOWS\System32\irmon.dll
22:13:44.0774 0x0cf8  irmon - ok
22:13:44.0800 0x0cf8  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
22:13:44.0802 0x0cf8  isapnp - ok
22:13:44.0836 0x0cf8  [ CA20F4621AB8CD3F69199DE21B5B41C4, 0AFFC66DD10D4D15139337E5ED343A2ABBB26CC8A83B3BDF6AD10C68B3931A7C ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
22:13:44.0844 0x0cf8  iScsiPrt - ok
22:13:44.0865 0x0cf8  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
22:13:44.0867 0x0cf8  kbdclass - ok
22:13:44.0893 0x0cf8  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
22:13:44.0895 0x0cf8  kbdhid - ok
22:13:44.0906 0x0cf8  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\WINDOWS\System32\drivers\kdnic.sys
22:13:44.0908 0x0cf8  kdnic - ok
22:13:44.0930 0x0cf8  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\WINDOWS\system32\lsass.exe
22:13:44.0934 0x0cf8  KeyIso - ok
22:13:44.0966 0x0cf8  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
22:13:44.0971 0x0cf8  KSecDD - ok
22:13:45.0000 0x0cf8  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
22:13:45.0003 0x0cf8  KSecPkg - ok
22:13:45.0017 0x0cf8  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
22:13:45.0020 0x0cf8  ksthunk - ok
22:13:45.0047 0x0cf8  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
22:13:45.0068 0x0cf8  KtmRm - ok
22:13:45.0095 0x0cf8  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
22:13:45.0112 0x0cf8  LanmanServer - ok
22:13:45.0141 0x0cf8  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
22:13:45.0163 0x0cf8  LanmanWorkstation - ok
22:13:45.0183 0x0cf8  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\WINDOWS\System32\lfsvc.dll
22:13:45.0188 0x0cf8  lfsvc - ok
22:13:45.0196 0x0cf8  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll
22:13:45.0201 0x0cf8  LicenseManager - ok
22:13:45.0213 0x0cf8  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys
22:13:45.0216 0x0cf8  lltdio - ok
22:13:45.0233 0x0cf8  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
22:13:45.0243 0x0cf8  lltdsvc - ok
22:13:45.0262 0x0cf8  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
22:13:45.0266 0x0cf8  lmhosts - ok
22:13:45.0319 0x0cf8  [ 713B289020B0C72DBAE93EB1EC79B28B, D15713E72D22D183C4AF7B75E74AF3F82F946C7B2AA841DB2B49D88FEF7C5853 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
22:13:45.0336 0x0cf8  LMS - ok
22:13:45.0359 0x0cf8  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
22:13:45.0364 0x0cf8  LSI_SAS - ok
22:13:45.0383 0x0cf8  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\WINDOWS\system32\drivers\lsi_sas2i.sys
22:13:45.0387 0x0cf8  LSI_SAS2i - ok
22:13:45.0400 0x0cf8  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\WINDOWS\system32\drivers\lsi_sas3i.sys
22:13:45.0404 0x0cf8  LSI_SAS3i - ok
22:13:45.0422 0x0cf8  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
22:13:45.0426 0x0cf8  LSI_SSS - ok
22:13:45.0451 0x0cf8  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM             C:\WINDOWS\System32\lsm.dll
22:13:45.0481 0x0cf8  LSM - ok
22:13:45.0518 0x0cf8  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
22:13:45.0522 0x0cf8  luafv - ok
22:13:45.0550 0x0cf8  [ 9F699136FA1A8A170C2C05D7790A5FC0, 4363C527BD2FC9FD8937E9866CA200809AC87B64EA57084491BAB6DEB8ED9E87 ] MapsBroker      C:\WINDOWS\System32\moshost.dll
22:13:45.0557 0x0cf8  MapsBroker - ok
22:13:45.0740 0x0cf8  [ 804E3246E3E73D4A936F2F4BCDC53A2D, BF1F9B4AC292238FA6EE541E325B220F311977F9D87D5BC7F90AD058FBF0B35A ] MBAMService     D:\Programme\Anti-Malware\mbamservice.exe
22:13:45.0889 0x0cf8  MBAMService - ok
22:13:45.0935 0x0cf8  [ 53283EB9998AC9350E14C35A880989DB, 11DD963C67DB7584742810C54BEC4871584413A1BAA8209F79AC923006DE45BB ] MBAMSwissArmy   C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
22:13:45.0942 0x0cf8  MBAMSwissArmy - ok
22:13:45.0956 0x0cf8  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
22:13:45.0959 0x0cf8  megasas - ok
22:13:45.0986 0x0cf8  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\WINDOWS\system32\drivers\MegaSas2i.sys
22:13:45.0989 0x0cf8  megasas2i - ok
22:13:46.0016 0x0cf8  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
22:13:46.0037 0x0cf8  megasr - ok
22:13:46.0062 0x0cf8  [ 6EA2F13DEAF130753F6FC19AFFFF94A8, ADA5BA2DBCD58372918FD278834B2E13FE0F73E200A2E747AB7B123C31E46825 ] MEIx64          C:\WINDOWS\System32\drivers\HECIx64.sys
22:13:46.0065 0x0cf8  MEIx64 - ok
22:13:46.0085 0x0cf8  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
22:13:46.0090 0x0cf8  MessagingService - ok
22:13:46.0175 0x0cf8  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\WINDOWS\System32\drivers\mlx4_bus.sys
22:13:46.0204 0x0cf8  mlx4_bus - ok
22:13:46.0218 0x0cf8  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\WINDOWS\system32\drivers\mmcss.sys
22:13:46.0220 0x0cf8  MMCSS - ok
22:13:46.0245 0x0cf8  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem           C:\WINDOWS\system32\drivers\modem.sys
22:13:46.0247 0x0cf8  Modem - ok
22:13:46.0260 0x0cf8  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
22:13:46.0262 0x0cf8  monitor - ok
22:13:46.0277 0x0cf8  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
22:13:46.0280 0x0cf8  mouclass - ok
22:13:46.0288 0x0cf8  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
22:13:46.0290 0x0cf8  mouhid - ok
22:13:46.0306 0x0cf8  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
22:13:46.0310 0x0cf8  mountmgr - ok
22:13:46.0372 0x0cf8  [ 260DB638038D0D9ACCBFCA9F2BF9B692, 68B9454D1E10A5A710AA3F823C7EAF2E8F3DDF5534262AC289BF454FC829B0B7 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:13:46.0377 0x0cf8  MozillaMaintenance - ok
22:13:46.0383 0x0cf8  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
22:13:46.0385 0x0cf8  mpsdrv - ok
22:13:46.0437 0x0cf8  [ A231E1861F7AA9CCC24B97176BBA838D, CDAB9A25CC55B71E8A83E50504B12E948D7A88F035918E4F94E3624E4AA0A28D ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
22:13:46.0470 0x0cf8  MpsSvc - ok
22:13:46.0496 0x0cf8  [ 4FC62380457DE25B69011D3542E954AC, D212DDD2446618A6215CF9FC370FA2634F027BC92D1D4999E019BEF8A86AA6EB ] MQAC            C:\WINDOWS\system32\drivers\mqac.sys
22:13:46.0501 0x0cf8  MQAC - ok
22:13:46.0527 0x0cf8  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
22:13:46.0532 0x0cf8  MRxDAV - ok
22:13:46.0573 0x0cf8  [ D559FF28B1AD9B1E15A4186E785E61F6, 4B22A740E86CA10B1B43E36CBE9A50B53D1E5504C25694C8FF3A514DF699E99C ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:13:46.0592 0x0cf8  mrxsmb - ok
22:13:46.0628 0x0cf8  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
22:13:46.0636 0x0cf8  mrxsmb10 - ok
22:13:46.0659 0x0cf8  [ 0698B15E21EA1B8742F2E7BB3142B754, 0DB79841E863F08452F895DA47CEEF6CA4D527A616EB616FDFF5F7431487E5F7 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
22:13:46.0665 0x0cf8  mrxsmb20 - ok
22:13:46.0692 0x0cf8  [ BEF575A5A8EC38F3BA6DB68D3CFFBD9A, 86D0BDD22430092CE1E11A7A2948725746DD848F5DF6F94808D8F0919BDF787C ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys
22:13:46.0694 0x0cf8  MsBridge - ok
22:13:46.0726 0x0cf8  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
22:13:46.0734 0x0cf8  MSDTC - ok
22:13:46.0750 0x0cf8  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
22:13:46.0753 0x0cf8  Msfs - ok
22:13:46.0783 0x0cf8  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
22:13:46.0787 0x0cf8  msgpiowin32 - ok
22:13:46.0817 0x0cf8  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
22:13:46.0819 0x0cf8  mshidkmdf - ok
22:13:46.0832 0x0cf8  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
22:13:46.0834 0x0cf8  mshidumdf - ok
22:13:46.0844 0x0cf8  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
22:13:46.0846 0x0cf8  msisadrv - ok
22:13:46.0871 0x0cf8  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
22:13:46.0878 0x0cf8  MSiSCSI - ok
22:13:46.0882 0x0cf8  msiserver - ok
22:13:46.0911 0x0cf8  [ 4586CDA25B7866DD9505CEECF9DB3C74, B94CE1A7C1B6FFEF7AA33AEC30C27E01E44E6E56A4274705684BFBB738F95BCF ] MSKSSRV         C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
22:13:46.0913 0x0cf8  MSKSSRV - ok
22:13:46.0931 0x0cf8  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys
22:13:46.0934 0x0cf8  MsLldp - ok
22:13:46.0952 0x0cf8  [ F3EF38D07A4ADCDF922EEEAF0FED7D4D, B9D436BFA29AA0A7B00889D96C4F8BC33C1809E19B7A71A69AB2E534E9794BF0 ] MSMQ            C:\WINDOWS\system32\mqsvc.exe
22:13:46.0957 0x0cf8  MSMQ - ok
22:13:46.0969 0x0cf8  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
22:13:46.0970 0x0cf8  MSPCLOCK - ok
22:13:46.0983 0x0cf8  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\WINDOWS\system32\DRIVERS\MSPQM.sys
22:13:46.0985 0x0cf8  MSPQM - ok
22:13:47.0008 0x0cf8  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
22:13:47.0024 0x0cf8  MsRPC - ok
22:13:47.0045 0x0cf8  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\WINDOWS\system32\drivers\mssecflt.sys
22:13:47.0051 0x0cf8  MsSecFlt - ok
22:13:47.0066 0x0cf8  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
22:13:47.0069 0x0cf8  mssmbios - ok
22:13:47.0081 0x0cf8  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\WINDOWS\system32\DRIVERS\MSTEE.sys
22:13:47.0084 0x0cf8  MSTEE - ok
22:13:47.0098 0x0cf8  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
22:13:47.0100 0x0cf8  MTConfig - ok
22:13:47.0106 0x0cf8  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
22:13:47.0110 0x0cf8  Mup - ok
22:13:47.0121 0x0cf8  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
22:13:47.0123 0x0cf8  mvumis - ok
22:13:47.0165 0x0cf8  [ A5FA29F748BBF38FC3FAE4B54FA20A93, 8912F08967CFDD2A74593C9D23F43D6487D1920969C380B39BA8EA4672B24C3B ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
22:13:47.0191 0x0cf8  NativeWifiP - ok
22:13:47.0219 0x0cf8  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
22:13:47.0227 0x0cf8  NcaSvc - ok
22:13:47.0251 0x0cf8  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
22:13:47.0274 0x0cf8  NcbService - ok
22:13:47.0290 0x0cf8  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
22:13:47.0297 0x0cf8  NcdAutoSetup - ok
22:13:47.0316 0x0cf8  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\WINDOWS\System32\drivers\ndfltr.sys
22:13:47.0320 0x0cf8  ndfltr - ok
22:13:47.0380 0x0cf8  [ 63560E6BC9BCA978A6B72DF65F7A8930, 278AAB22ED6001E7E336EFC027073EDA727A3D333FF2576D087C92F8E6D768B2 ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
22:13:47.0428 0x0cf8  NDIS - ok
22:13:47.0440 0x0cf8  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\WINDOWS\system32\drivers\ndiscap.sys
22:13:47.0443 0x0cf8  NdisCap - ok
22:13:47.0469 0x0cf8  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys
22:13:47.0473 0x0cf8  NdisImPlatform - ok
22:13:47.0485 0x0cf8  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:13:47.0487 0x0cf8  NdisTapi - ok
22:13:47.0502 0x0cf8  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\WINDOWS\system32\drivers\ndisuio.sys
22:13:47.0505 0x0cf8  Ndisuio - ok
22:13:47.0519 0x0cf8  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
22:13:47.0522 0x0cf8  NdisVirtualBus - ok
22:13:47.0530 0x0cf8  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\WINDOWS\System32\drivers\ndiswan.sys
22:13:47.0534 0x0cf8  NdisWan - ok
22:13:47.0543 0x0cf8  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:13:47.0547 0x0cf8  ndiswanlegacy - ok
22:13:47.0552 0x0cf8  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\WINDOWS\system32\DRIVERS\NDProxy.sys
22:13:47.0555 0x0cf8  ndproxy - ok
22:13:47.0597 0x0cf8  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
22:13:47.0601 0x0cf8  Ndu - ok
22:13:47.0616 0x0cf8  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\WINDOWS\system32\drivers\NetAdapterCx.sys
22:13:47.0620 0x0cf8  NetAdapterCx - ok
22:13:47.0625 0x0cf8  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\WINDOWS\system32\drivers\netbios.sys
22:13:47.0627 0x0cf8  NetBIOS - ok
22:13:47.0673 0x0cf8  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
22:13:47.0680 0x0cf8  NetBT - ok
22:13:47.0695 0x0cf8  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\WINDOWS\system32\lsass.exe
22:13:47.0700 0x0cf8  Netlogon - ok
22:13:47.0738 0x0cf8  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\WINDOWS\System32\netman.dll
22:13:47.0761 0x0cf8  Netman - ok
22:13:47.0795 0x0cf8  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:13:47.0800 0x0cf8  NetMsmqActivator - ok
22:13:47.0806 0x0cf8  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:13:47.0808 0x0cf8  NetPipeActivator - ok
22:13:47.0850 0x0cf8  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
22:13:47.0874 0x0cf8  netprofm - ok
22:13:47.0923 0x0cf8  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc     C:\WINDOWS\System32\NetSetupSvc.dll
22:13:47.0933 0x0cf8  NetSetupSvc - ok
22:13:47.0940 0x0cf8  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:13:47.0943 0x0cf8  NetTcpActivator - ok
22:13:47.0949 0x0cf8  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:13:47.0952 0x0cf8  NetTcpPortSharing - ok
22:13:48.0069 0x0cf8  [ 99C24A7DC1F3D4845553B4BD189274A0, 801C2A1F12E6F0D646E92C98477FCDB84C6743803CD7365B774B0F88EB650584 ] NETwNe64        C:\WINDOWS\System32\drivers\NETwew01.sys
22:13:48.0158 0x0cf8  NETwNe64 - ok
22:13:48.0212 0x0cf8  [ 589882D9779C262F10C509BA458746E4, 85A964D69C50602CEE86DA4523D635962DE6526BE425A940340039979D511BA0 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll
22:13:48.0223 0x0cf8  NgcCtnrSvc - ok
22:13:48.0259 0x0cf8  [ 56D1846C49F2D2B0110535AD8C90C0E4, 33C59489919A334E18A971F983E93E4A69FCD243BD06B45BC9A4F5CA224A976B ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll
22:13:48.0293 0x0cf8  NgcSvc - ok
22:13:48.0329 0x0cf8  [ 2FF6B48563AAFC12BB8CE2B4E4D7C65F, AAA77EBD643D4EE7EF40E9388CC6F8EA9AC19E491DDE64A8D8B0CAD666B21C94 ] NitroReaderDriverReadSpool3 C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
22:13:48.0335 0x0cf8  NitroReaderDriverReadSpool3 - ok
22:13:48.0379 0x0cf8  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
22:13:48.0403 0x0cf8  NlaSvc - ok
22:13:48.0422 0x0cf8  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
22:13:48.0425 0x0cf8  Npfs - ok
22:13:48.0435 0x0cf8  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
22:13:48.0437 0x0cf8  npsvctrig - ok
22:13:48.0461 0x0cf8  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\WINDOWS\system32\nsisvc.dll
22:13:48.0466 0x0cf8  nsi - ok
22:13:48.0476 0x0cf8  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
22:13:48.0479 0x0cf8  nsiproxy - ok
22:13:48.0566 0x0cf8  [ 8DB6A6B731CEC9046CD8CA0267EC5679, 1C9D826D41B6C069E557B9CBF8762AB02F3C3D817AFD4F9284CD73505477E87C ] NTFS            C:\WINDOWS\system32\drivers\NTFS.sys
22:13:48.0608 0x0cf8  NTFS - ok
22:13:48.0628 0x0cf8  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\WINDOWS\system32\drivers\Null.sys
22:13:48.0630 0x0cf8  Null - ok
22:13:48.0655 0x0cf8  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
22:13:48.0659 0x0cf8  nvraid - ok
22:13:48.0707 0x0cf8  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
22:13:48.0712 0x0cf8  nvstor - ok
22:13:48.0733 0x0cf8  [ 4E37455DB16AEC75862B1D0BC35B589E, F60FCE0C3E6C1559B0A8E0A032AFD30216E1DE2142E8E4C181C43DB6C4B5A443 ] O2FLASH         C:\WINDOWS\system32\DRIVERS\o2flash.exe
22:13:48.0736 0x0cf8  O2FLASH - ok
22:13:48.0759 0x0cf8  [ 8ED738ABA394BBF6D7802698BE453112, E91E8C27FA111CC20CCB05F41CBF181C398F48A980B523A041CACE242990F77A ] O2MDRRDR        C:\WINDOWS\system32\DRIVERS\O2MDRw7x64.sys
22:13:48.0762 0x0cf8  O2MDRRDR - ok
22:13:48.0825 0x0cf8  [ 4635935FC972C582632BF45C26BFCB0E, ABD4AFD71B3C2BD3F741BBE3CEC52C4FA63AC78D353101D2E7DC4DE2725D1CA1 ] O2SDIOAssist    C:\Windows\SysWOW64\srvany.exe
22:13:48.0831 0x0cf8  O2SDIOAssist - ok
22:13:48.0847 0x0cf8  [ A9C1E6B7C134FAD124338B7944FA996D, 38BE43BE57B5596659CDC2C4E15C6E85A361935B31A3E7A738AF0D646447A9F3 ] O2SDJRDR        C:\WINDOWS\System32\drivers\o2sdjw7x64.sys
22:13:48.0851 0x0cf8  O2SDJRDR - ok
22:13:48.0884 0x0cf8  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll
22:13:48.0899 0x0cf8  OneSyncSvc - ok
22:13:48.0978 0x0cf8  [ 5B32D0B4376B02DA2DCFC8C521D66A11, 7442DA396874D01015345930ABB5986F66538CE80F06EA4758131E75954DBAF8 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:13:48.0981 0x0cf8  ose - ok
22:13:49.0007 0x0cf8  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
22:13:49.0030 0x0cf8  p2pimsvc - ok
22:13:49.0060 0x0cf8  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
22:13:49.0089 0x0cf8  p2psvc - ok
22:13:49.0116 0x0cf8  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\WINDOWS\System32\drivers\parport.sys
22:13:49.0119 0x0cf8  Parport - ok
22:13:49.0145 0x0cf8  [ 0553ECB742278C8F4CFA28B43FF20EAD, ACD7F5BC36573BCEC2C3413DEA687034ECC101EDD3C1544B264BBA29EFCE3425 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
22:13:49.0149 0x0cf8  partmgr - ok
22:13:49.0188 0x0cf8  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
22:13:49.0217 0x0cf8  PcaSvc - ok
22:13:49.0251 0x0cf8  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\WINDOWS\system32\drivers\pci.sys
22:13:49.0268 0x0cf8  pci - ok
22:13:49.0286 0x0cf8  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
22:13:49.0288 0x0cf8  pciide - ok
22:13:49.0311 0x0cf8  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
22:13:49.0343 0x0cf8  pcmcia - ok
22:13:49.0420 0x0cf8  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
22:13:49.0425 0x0cf8  pcw - ok
22:13:49.0483 0x0cf8  [ CA979960D3A580C78EDB4BBD6BD3ABCC, 2A136BC562235D26F6421027B158D406FB1D08FE7D70A50DD3E4D344B0E27205 ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
22:13:49.0558 0x0cf8  pdc - ok
22:13:49.0693 0x0cf8  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
22:13:49.0766 0x0cf8  PEAUTH - ok
22:13:49.0858 0x0cf8  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc     C:\WINDOWS\system32\peerdistsvc.dll
22:13:49.0927 0x0cf8  PeerDistSvc - ok
22:13:49.0952 0x0cf8  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\WINDOWS\system32\drivers\percsas2i.sys
22:13:49.0956 0x0cf8  percsas2i - ok
22:13:49.0975 0x0cf8  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\WINDOWS\system32\drivers\percsas3i.sys
22:13:49.0978 0x0cf8  percsas3i - ok
22:13:50.0003 0x0cf8  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
22:13:50.0008 0x0cf8  PerfHost - ok
22:13:50.0065 0x0cf8  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll
22:13:50.0099 0x0cf8  PhoneSvc - ok
22:13:50.0136 0x0cf8  [ C7A94D99CDF054248EFBD9B93D096DA6, F59F0EB5B17DC078E47D044B1126A786D67DC149AC9614CDA6AA1226EEE3EF55 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
22:13:50.0152 0x0cf8  PimIndexMaintenanceSvc - ok
22:13:50.0418 0x0cf8  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\WINDOWS\system32\pla.dll
22:13:50.0472 0x0cf8  pla - ok
22:13:50.0512 0x0cf8  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
22:13:50.0520 0x0cf8  PlugPlay - ok
22:13:50.0534 0x0cf8  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
22:13:50.0540 0x0cf8  PNRPAutoReg - ok
22:13:50.0566 0x0cf8  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
22:13:50.0575 0x0cf8  PNRPsvc - ok
22:13:50.0642 0x0cf8  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
22:13:50.0664 0x0cf8  PolicyAgent - ok
22:13:50.0681 0x0cf8  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\WINDOWS\system32\umpo.dll
22:13:50.0689 0x0cf8  Power - ok
22:13:50.0705 0x0cf8  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\WINDOWS\System32\drivers\raspptp.sys
22:13:50.0709 0x0cf8  PptpMiniport - ok
22:13:50.0850 0x0cf8  [ 30AA256A85C1A7B17A590B1C5244D28E, 2C1FB30DEF53C37CA0D0CA54B65CB8572C53DDFB430DE57F964253F1082ACEA0 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
22:13:50.0952 0x0cf8  PrintNotify - ok
22:13:50.0984 0x0cf8  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\WINDOWS\System32\drivers\processr.sys
22:13:50.0988 0x0cf8  Processor - ok
22:13:51.0024 0x0cf8  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
22:13:51.0048 0x0cf8  ProfSvc - ok
22:13:51.0146 0x0cf8  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys
22:13:51.0198 0x0cf8  Psched - ok
22:13:51.0261 0x0cf8  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\WINDOWS\system32\qwave.dll
22:13:51.0283 0x0cf8  QWAVE - ok
22:13:51.0315 0x0cf8  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
22:13:51.0322 0x0cf8  QWAVEdrv - ok
22:13:51.0348 0x0cf8  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:13:51.0350 0x0cf8  RasAcd - ok
22:13:51.0395 0x0cf8  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\WINDOWS\System32\drivers\AgileVpn.sys
22:13:51.0398 0x0cf8  RasAgileVpn - ok
22:13:51.0419 0x0cf8  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
22:13:51.0426 0x0cf8  RasAuto - ok
22:13:51.0439 0x0cf8  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\WINDOWS\System32\drivers\rasl2tp.sys
22:13:51.0443 0x0cf8  Rasl2tp - ok
22:13:51.0479 0x0cf8  [ 28C80449AC9CA09A6DBADF4940C125A7, A827E3A2D7DF67073CCE63C63168B2F4067C7D36E89BB99D4C6F17E46BECEB56 ] RasMan          C:\WINDOWS\System32\rasmans.dll
22:13:51.0493 0x0cf8  RasMan - ok
22:13:51.0534 0x0cf8  [ 726857E441D1D67F57694A1B613ABD34, 564027EF2E80F99595282FF76B6D339045B7E9AFE72D8DDF2D6EB0D98C329834 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:13:51.0537 0x0cf8  RasPppoe - ok
22:13:51.0549 0x0cf8  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\WINDOWS\System32\drivers\rassstp.sys
22:13:51.0552 0x0cf8  RasSstp - ok
22:13:51.0577 0x0cf8  [ 1A49C9F966A04D031DAD4C73C49D5288, 05C8690948EAA2A55A208D8D34118C27FD5C7D7AEEF4FAD1346E40BBE586946D ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:13:51.0585 0x0cf8  rdbss - ok
22:13:51.0597 0x0cf8  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
22:13:51.0599 0x0cf8  rdpbus - ok
22:13:51.0616 0x0cf8  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
22:13:51.0622 0x0cf8  RDPDR - ok
22:13:51.0663 0x0cf8  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
22:13:51.0666 0x0cf8  RdpVideoMiniport - ok
22:13:51.0682 0x0cf8  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
22:13:51.0690 0x0cf8  rdyboost - ok
22:13:51.0731 0x0cf8  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\WINDOWS\system32\drivers\ReFSv1.sys
22:13:51.0761 0x0cf8  ReFSv1 - ok
22:13:51.0804 0x0cf8  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
22:13:51.0829 0x0cf8  RemoteAccess - ok
22:13:51.0853 0x0cf8  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
22:13:51.0862 0x0cf8  RemoteRegistry - ok
22:13:51.0903 0x0cf8  [ 6FF3A30B1220D939D6120646BD5801F3, A526A24912FC5401E96796E41A4945D549486464067179201BCB25BF53049862 ] RetailDemo      C:\WINDOWS\system32\RDXService.dll
22:13:51.0919 0x0cf8  RetailDemo - ok
22:13:51.0944 0x0cf8  [ E82F3B1918C6A5FE6EB761CDF1E772AF, 0C993FCB7BFD6E01B70A1821E0DEAFA2CB241AF8C2E6D4CC120F59C1B5F6FF5F ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
22:13:51.0950 0x0cf8  RFCOMM - ok

BmgDroog · 16.05.2017, 21:38

und tdsskiller Teil 2...

Code:

ATTFilter

22:13:52.0021 0x0cf8  [ 895B73F5BB93D46962258E6514A7ED8A, 239E45548381BACF1E636F00CDDD4343C8515812D5AE71629F0248E417DBAE11 ] RichVideo64     C:\Program Files\CyberLink\Shared files\RichVideo64.exe
22:13:52.0031 0x0cf8  RichVideo64 - ok
22:13:52.0069 0x0cf8  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc           C:\WINDOWS\System32\RMapi.dll
22:13:52.0077 0x0cf8  RmSvc - ok
22:13:52.0107 0x0cf8  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
22:13:52.0116 0x0cf8  RpcEptMapper - ok
22:13:52.0140 0x0cf8  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\WINDOWS\system32\locator.exe
22:13:52.0144 0x0cf8  RpcLocator - ok
22:13:52.0196 0x0cf8  [ 4A7015195E49A3BA7DB967B277B21E9D, 2EE10950BC0E2B13303491725FB3F0D3AF63518B7D1593BCC4BF503F4A11F408 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
22:13:52.0215 0x0cf8  RpcSs - ok
22:13:52.0254 0x0cf8  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys
22:13:52.0258 0x0cf8  rspndr - ok
22:13:52.0350 0x0cf8  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
22:13:52.0354 0x0cf8  s3cap - ok
22:13:52.0390 0x0cf8  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs           C:\WINDOWS\system32\lsass.exe
22:13:52.0394 0x0cf8  SamSs - ok
22:13:52.0482 0x0cf8  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
22:13:52.0515 0x0cf8  sbp2port - ok
22:13:52.0606 0x0cf8  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
22:13:52.0622 0x0cf8  SCardSvr - ok
22:13:52.0650 0x0cf8  [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
22:13:52.0660 0x0cf8  ScDeviceEnum - ok
22:13:52.0669 0x0cf8  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
22:13:52.0672 0x0cf8  scfilter - ok
22:13:52.0712 0x0cf8  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
22:13:52.0759 0x0cf8  Schedule - ok
22:13:52.0779 0x0cf8  [ B8B1D49283F33E3FFFDB611E51BCA7E5, C467A60150ED3E59D42CA45E8D0410613CC78D1B99DE011CF1C5D82FC799C27B ] scmbus          C:\WINDOWS\system32\drivers\scmbus.sys
22:13:52.0783 0x0cf8  scmbus - ok
22:13:52.0876 0x0cf8  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101     C:\WINDOWS\System32\drivers\scmdisk0101.sys
22:13:52.0922 0x0cf8  scmdisk0101 - ok
22:13:52.0978 0x0cf8  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
22:13:52.0984 0x0cf8  SCPolicySvc - ok
22:13:53.0040 0x0cf8  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
22:13:53.0048 0x0cf8  sdbus - ok
22:13:53.0064 0x0cf8  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
22:13:53.0081 0x0cf8  SDRSVC - ok
22:13:53.0172 0x0cf8  [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService D:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe
22:13:53.0255 0x0cf8  SDScannerService - ok
22:13:53.0294 0x0cf8  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
22:13:53.0297 0x0cf8  sdstor - ok
22:13:53.0378 0x0cf8  [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService D:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe
22:13:53.0453 0x0cf8  SDUpdateService - ok
22:13:53.0474 0x0cf8  [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService    D:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe
22:13:53.0479 0x0cf8  SDWSCService - ok
22:13:53.0506 0x0cf8  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\WINDOWS\system32\seclogon.dll
22:13:53.0513 0x0cf8  seclogon - ok
22:13:53.0544 0x0cf8  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\WINDOWS\System32\sens.dll
22:13:53.0551 0x0cf8  SENS - ok
22:13:53.0566 0x0cf8  Sense - ok
22:13:53.0635 0x0cf8  [ CF2AEB951CFC56D4F6CF2D66218B673C, CEA0B0E0251EA198893830080EE4CB8A9F18ADBF1F6FEFFC9C7E8AB4588D0639 ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
22:13:53.0681 0x0cf8  SensorDataService - ok
22:13:53.0704 0x0cf8  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService   C:\WINDOWS\system32\SensorService.dll
22:13:53.0730 0x0cf8  SensorService - ok
22:13:53.0747 0x0cf8  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
22:13:53.0756 0x0cf8  SensrSvc - ok
22:13:53.0769 0x0cf8  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
22:13:53.0772 0x0cf8  SerCx - ok
22:13:53.0789 0x0cf8  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
22:13:53.0794 0x0cf8  SerCx2 - ok
22:13:53.0805 0x0cf8  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
22:13:53.0808 0x0cf8  Serenum - ok
22:13:53.0868 0x0cf8  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
22:13:53.0898 0x0cf8  Serial - ok
22:13:53.0946 0x0cf8  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
22:13:53.0980 0x0cf8  sermouse - ok
22:13:54.0056 0x0cf8  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
22:13:54.0069 0x0cf8  SessionEnv - ok
22:13:54.0110 0x0cf8  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
22:13:54.0113 0x0cf8  sfloppy - ok
22:13:54.0164 0x0cf8  [ E38BE81F0F6D9C74E420A82BC6A02AFE, 25D7594FD1BE0B303F9777ACBA702ACD0C27B00D21F82659989C40636851A330 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
22:13:54.0189 0x0cf8  SharedAccess - ok
22:13:54.0226 0x0cf8  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
22:13:54.0251 0x0cf8  ShellHWDetection - ok
22:13:54.0279 0x0cf8  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
22:13:54.0296 0x0cf8  shpamsvc - ok
22:13:54.0307 0x0cf8  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
22:13:54.0310 0x0cf8  SiSRaid2 - ok
22:13:54.0332 0x0cf8  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
22:13:54.0336 0x0cf8  SiSRaid4 - ok
22:13:54.0369 0x0cf8  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost         C:\WINDOWS\System32\smphost.dll
22:13:54.0376 0x0cf8  smphost - ok
22:13:54.0405 0x0cf8  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\WINDOWS\system32\SmsRouterSvc.dll
22:13:54.0433 0x0cf8  SmsRouter - ok
22:13:54.0466 0x0cf8  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
22:13:54.0472 0x0cf8  SNMPTRAP - ok
22:13:54.0522 0x0cf8  [ A265FF86BF4C03F47EC277881138675D, 52671A64D22EAA790CAE47D6710289ADB5DBF9BC98CD7CCCF64CA43B2F2A641A ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
22:13:54.0550 0x0cf8  spaceport - ok
22:13:54.0565 0x0cf8  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
22:13:54.0568 0x0cf8  SpbCx - ok
22:13:54.0613 0x0cf8  [ 1DFE222F8D6A422B7ADC909E0C8840DA, 96761691CF4447710D65573044A1005F2F0F89443DF581A30B97D7944940BB70 ] Spooler         C:\WINDOWS\System32\spoolsv.exe
22:13:54.0649 0x0cf8  Spooler - ok
22:13:54.0889 0x0cf8  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
22:13:55.0057 0x0cf8  sppsvc - ok
22:13:55.0106 0x0cf8  [ 2E0F160AFE1EB7E8C21D6FE782FFFE0B, 0CA845468E42F0448FD7BECFA4E75E8548E20CAAA0DE0C37FFFACF7EB16CE0DE ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
22:13:55.0123 0x0cf8  srv - ok
22:13:55.0157 0x0cf8  [ A0BDA7332A9EE59062A7037D161C8715, C08818E52B64BDB194A2434C3F479360C960A99AD08F81CF51D64B7D92EBE0CB ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
22:13:55.0185 0x0cf8  srv2 - ok
22:13:55.0214 0x0cf8  [ 0C4540311E11664B245A263E1154CEF8, 63376322BFFAFF2F166AF3FDD3F1A346C21FAE21F406F659F8630779D1D6525D ] SrvHsfHDA       C:\WINDOWS\system32\DRIVERS\VSTAZL6.SYS
22:13:55.0230 0x0cf8  SrvHsfHDA - ok
22:13:55.0277 0x0cf8  [ 02071D207A9858FBE3A48CBFD59C4A04, FEA4DEBAEC3465E0C7C1E8B721805922F6BBCB96A60A193B11688F4252F4B89E ] SrvHsfV92       C:\WINDOWS\system32\DRIVERS\VSTDPV6.SYS
22:13:55.0319 0x0cf8  SrvHsfV92 - ok
22:13:55.0348 0x0cf8  [ 18E40C245DBFAF36FD0134A7EF2DF396, 0138A68958112101A5D3BD94114F320CE80B0C9A93E009AC78DE7415FCCC7DE7 ] SrvHsfWinac     C:\WINDOWS\system32\DRIVERS\VSTCNXT6.SYS
22:13:55.0373 0x0cf8  SrvHsfWinac - ok
22:13:55.0417 0x0cf8  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
22:13:55.0426 0x0cf8  srvnet - ok
22:13:55.0468 0x0cf8  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
22:13:55.0484 0x0cf8  SSDPSRV - ok
22:13:55.0601 0x0cf8  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
22:13:55.0654 0x0cf8  SstpSvc - ok
22:13:55.0926 0x0cf8  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
22:13:56.0039 0x0cf8  StateRepository - ok
22:13:56.0064 0x0cf8  [ E4EA2412FB1B8AEE33667A9CC6D456A4, E553D07BBD98CB026033D7D10D859795682D1BFCB9D33D494177B2E747EA5064 ] stdcfltn        C:\WINDOWS\system32\DRIVERS\stdcfltn.sys
22:13:56.0066 0x0cf8  stdcfltn - ok
22:13:56.0129 0x0cf8  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
22:13:56.0132 0x0cf8  stexstor - ok
22:13:56.0239 0x0cf8  [ 505F32DE573ECEDF398DB9E2FC0D5E45, 0F257200BD79C7A62C39279B1C0AF9032028B23561DB71DA9903366A0DF88E5C ] stisvc          C:\WINDOWS\System32\wiaservc.dll
22:13:56.0273 0x0cf8  stisvc - ok
22:13:56.0308 0x0cf8  [ 6BC6023E866489D22CE30E18846B80D9, FD0D13332F3E267524A9FA7FEC128298D4905722807C172AE8E3DFE445C28DB1 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
22:13:56.0312 0x0cf8  storahci - ok
22:13:56.0328 0x0cf8  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\WINDOWS\system32\drivers\vmstorfl.sys
22:13:56.0331 0x0cf8  storflt - ok
22:13:56.0359 0x0cf8  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
22:13:56.0363 0x0cf8  stornvme - ok
22:13:56.0379 0x0cf8  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\WINDOWS\system32\drivers\storqosflt.sys
22:13:56.0382 0x0cf8  storqosflt - ok
22:13:56.0422 0x0cf8  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc         C:\WINDOWS\system32\storsvc.dll
22:13:56.0447 0x0cf8  StorSvc - ok
22:13:56.0460 0x0cf8  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\WINDOWS\system32\drivers\storufs.sys
22:13:56.0462 0x0cf8  storufs - ok
22:13:56.0478 0x0cf8  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
22:13:56.0481 0x0cf8  storvsc - ok
22:13:56.0501 0x0cf8  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\WINDOWS\system32\svsvc.dll
22:13:56.0508 0x0cf8  svsvc - ok
22:13:56.0524 0x0cf8  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
22:13:56.0527 0x0cf8  swenum - ok
22:13:56.0549 0x0cf8  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\WINDOWS\System32\swprv.dll
22:13:56.0575 0x0cf8  swprv - ok
22:13:56.0610 0x0cf8  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys
22:13:56.0614 0x0cf8  Synth3dVsc - ok
22:13:56.0659 0x0cf8  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\WINDOWS\system32\sysmain.dll
22:13:56.0705 0x0cf8  SysMain - ok
22:13:56.0731 0x0cf8  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
22:13:56.0756 0x0cf8  SystemEventsBroker - ok
22:13:56.0792 0x0cf8  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
22:13:56.0807 0x0cf8  TabletInputService - ok
22:13:56.0826 0x0cf8  [ 134B275751051C5D03F9ACCDC4F8CAAB, D50F96485AF6F26EA9A5A3A2ADEACC2DFD3B2ABCDAB88195B75CC72EAC543BE2 ] tap0901         C:\WINDOWS\System32\drivers\tap0901.sys
22:13:56.0829 0x0cf8  tap0901 - ok
22:13:56.0851 0x0cf8  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
22:13:56.0876 0x0cf8  TapiSrv - ok
22:13:57.0043 0x0cf8  [ F3CFBE74DAF9ABD06F0B2A037DC4C90A, 17644CD7F70CCFFC9C0881AB4017F30D030DE4884B6029C48859C9CF9CA2F14E ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
22:13:57.0118 0x0cf8  Tcpip - ok
22:13:57.0209 0x0cf8  [ F3CFBE74DAF9ABD06F0B2A037DC4C90A, 17644CD7F70CCFFC9C0881AB4017F30D030DE4884B6029C48859C9CF9CA2F14E ] Tcpip6          C:\WINDOWS\system32\drivers\tcpip.sys
22:13:57.0248 0x0cf8  Tcpip6 - ok
22:13:57.0289 0x0cf8  [ EC9450227A4C661513661F1F9C1F7DD6, 4DB122DECEA7C76BD20A6682958609A40CA2C9EDD236DFA19E9B31C57114DA3A ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
22:13:57.0292 0x0cf8  tcpipreg - ok
22:13:57.0313 0x0cf8  [ 0B237F8A96952BF95A14865030E131F2, 263089672218D3A768A6FC9D28DBEFE113D6757A9ECBAB4D364A62AC5DDA8AAE ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
22:13:57.0370 0x0cf8  tdx - ok
22:13:57.0414 0x0cf8  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
22:13:57.0417 0x0cf8  terminpt - ok
22:13:57.0553 0x0cf8  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\WINDOWS\System32\termsrv.dll
22:13:57.0594 0x0cf8  TermService - ok
22:13:57.0607 0x0cf8  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\WINDOWS\system32\themeservice.dll
22:13:57.0616 0x0cf8  Themes - ok
22:13:57.0641 0x0cf8  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
22:13:57.0665 0x0cf8  TieringEngineService - ok
22:13:57.0693 0x0cf8  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
22:13:57.0722 0x0cf8  tiledatamodelsvc - ok
22:13:57.0737 0x0cf8  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\WINDOWS\System32\TimeBrokerServer.dll
22:13:57.0753 0x0cf8  TimeBrokerSvc - ok
22:13:57.0787 0x0cf8  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\WINDOWS\System32\drivers\tpm.sys
22:13:57.0795 0x0cf8  TPM - ok
22:13:57.0810 0x0cf8  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
22:13:57.0818 0x0cf8  TrkWks - ok
22:13:57.0865 0x0cf8  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
22:13:57.0868 0x0cf8  TrustedInstaller - ok
22:13:57.0885 0x0cf8  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\WINDOWS\system32\drivers\TsUsbFlt.sys
22:13:57.0888 0x0cf8  tsusbflt - ok
22:13:57.0897 0x0cf8  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
22:13:57.0900 0x0cf8  TsUsbGD - ok
22:13:57.0931 0x0cf8  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\WINDOWS\system32\drivers\tsusbhub.sys
22:13:57.0936 0x0cf8  tsusbhub - ok
22:13:57.0972 0x0cf8  [ 13781908186770ABE9F8EBCC2B45B138, 4BEC8466254E0C6492CC55CE344A6173878CFA040238C6BE5842E5209F066DEE ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll
22:13:57.0981 0x0cf8  tzautoupdate - ok
22:13:58.0005 0x0cf8  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
22:13:58.0008 0x0cf8  UASPStor - ok
22:13:58.0027 0x0cf8  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\WINDOWS\system32\Drivers\UcmCx.sys
22:13:58.0030 0x0cf8  UcmCx0101 - ok
22:13:58.0037 0x0cf8  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
22:13:58.0040 0x0cf8  UcmTcpciCx0101 - ok
22:13:58.0068 0x0cf8  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\WINDOWS\System32\drivers\UcmUcsi.sys
22:13:58.0071 0x0cf8  UcmUcsi - ok
22:13:58.0094 0x0cf8  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\WINDOWS\system32\drivers\ucx01000.sys
22:13:58.0100 0x0cf8  Ucx01000 - ok
22:13:58.0115 0x0cf8  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\WINDOWS\system32\drivers\udecx.sys
22:13:58.0139 0x0cf8  UdeCx - ok
22:13:58.0157 0x0cf8  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
22:13:58.0166 0x0cf8  udfs - ok
22:13:58.0179 0x0cf8  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
22:13:58.0183 0x0cf8  UEFI - ok
22:13:58.0200 0x0cf8  [ 166B17AE1DD24D8BA8CA474C7C31148F, D34E786277093278F58EFAC957279DC4ED43A190538C875B80F5B1E0A0C30381 ] UevAgentDriver  C:\WINDOWS\system32\drivers\UevAgentDriver.sys
22:13:58.0259 0x0cf8  UevAgentDriver - ok
22:13:58.0461 0x0cf8  [ FCA4D901FB9934DAB82ED31C4EE89A11, 8EDF8DD71C13DE77AC83D1086670E9E90C69DE379F1CF768C8B9C789254C04AA ] UevAgentService C:\WINDOWS\system32\AgentService.exe
22:13:58.0533 0x0cf8  UevAgentService - ok
22:13:58.0575 0x0cf8  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys
22:13:58.0582 0x0cf8  Ufx01000 - ok
22:13:58.0595 0x0cf8  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea     C:\WINDOWS\System32\drivers\UfxChipidea.sys
22:13:58.0599 0x0cf8  UfxChipidea - ok
22:13:58.0620 0x0cf8  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys     C:\WINDOWS\System32\drivers\ufxsynopsys.sys
22:13:58.0626 0x0cf8  ufxsynopsys - ok
22:13:58.0652 0x0cf8  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
22:13:58.0658 0x0cf8  UI0Detect - ok
22:13:58.0670 0x0cf8  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
22:13:58.0673 0x0cf8  umbus - ok
22:13:58.0687 0x0cf8  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
22:13:58.0690 0x0cf8  UmPass - ok
22:13:58.0715 0x0cf8  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
22:13:58.0738 0x0cf8  UmRdpService - ok
22:13:58.0795 0x0cf8  [ 6C8E89E9CA8A4E703631E54A5E015AF8, 3C74B9329558ACC4F701099516923DE82CBEDABD8814987221BDF71B53550586 ] UnistoreSvc     C:\WINDOWS\System32\unistore.dll
22:13:58.0847 0x0cf8  UnistoreSvc - ok
22:13:58.0998 0x0cf8  [ F0EDD898A6B56C69BD92A06146E8ED98, 624D8F84E9FD82A852C9884A80381814A8D4880D19A53E71B64B1A2E388ADF25 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
22:13:59.0086 0x0cf8  UNS - ok
22:13:59.0124 0x0cf8  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\WINDOWS\System32\upnphost.dll
22:13:59.0147 0x0cf8  upnphost - ok
22:13:59.0170 0x0cf8  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea     C:\WINDOWS\System32\drivers\urschipidea.sys
22:13:59.0173 0x0cf8  UrsChipidea - ok
22:13:59.0204 0x0cf8  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys
22:13:59.0206 0x0cf8  UrsCx01000 - ok
22:13:59.0218 0x0cf8  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys     C:\WINDOWS\System32\drivers\urssynopsys.sys
22:13:59.0221 0x0cf8  UrsSynopsys - ok
22:13:59.0238 0x0cf8  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
22:13:59.0244 0x0cf8  usbccgp - ok
22:13:59.0260 0x0cf8  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
22:13:59.0263 0x0cf8  usbcir - ok
22:13:59.0275 0x0cf8  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
22:13:59.0277 0x0cf8  usbehci - ok
22:13:59.0300 0x0cf8  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
22:13:59.0319 0x0cf8  usbhub - ok
22:13:59.0349 0x0cf8  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
22:13:59.0374 0x0cf8  USBHUB3 - ok
22:13:59.0393 0x0cf8  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
22:13:59.0395 0x0cf8  usbohci - ok
22:13:59.0410 0x0cf8  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
22:13:59.0413 0x0cf8  usbprint - ok
22:13:59.0426 0x0cf8  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
22:13:59.0430 0x0cf8  usbser - ok
22:13:59.0449 0x0cf8  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
22:13:59.0453 0x0cf8  USBSTOR - ok
22:13:59.0465 0x0cf8  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
22:13:59.0468 0x0cf8  usbuhci - ok
22:13:59.0493 0x0cf8  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
22:13:59.0509 0x0cf8  USBXHCI - ok
22:13:59.0572 0x0cf8  [ A39AFDD26E6F2E5595FF2D3997D7E1FE, 30DE54033DE437C16A069602529E63FF971AF0ABB383885E47B4DF5E0F8483AE ] UserDataSvc     C:\WINDOWS\System32\userdataservice.dll
22:13:59.0635 0x0cf8  UserDataSvc - ok
22:13:59.0710 0x0cf8  [ A1BDC8AF9F66A71744B5DC99CCEF4058, 098EDA0D186098A8D61DEF20B76F05B978FC3A08A068243FC4823423B430E95B ] UserManager     C:\WINDOWS\System32\usermgr.dll
22:13:59.0752 0x0cf8  UserManager - ok
22:13:59.0793 0x0cf8  [ F1374B17FE4A4617DFB6D20A0E699763, C3A515594B1593C9F141C342CA1CDB4FE7A3243D8F1785655A3378DB1FE8ED65 ] UsoSvc          C:\WINDOWS\system32\usocore.dll
22:13:59.0819 0x0cf8  UsoSvc - ok
22:13:59.0832 0x0cf8  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
22:13:59.0838 0x0cf8  VaultSvc - ok
22:13:59.0854 0x0cf8  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
22:13:59.0858 0x0cf8  vdrvroot - ok
22:13:59.0909 0x0cf8  [ 70D165B3EA8BC576828DC2B964C8D116, 92C9381BDECB5C991F848A02AF2F4189CE0119961FB37E57A37594A80704DDC5 ] vds             C:\WINDOWS\System32\vds.exe
22:13:59.0954 0x0cf8  vds - ok
22:13:59.0984 0x0cf8  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
22:13:59.0989 0x0cf8  VerifierExt - ok
22:14:00.0033 0x0cf8  [ F7F3E80E84E51A6F89831A6F26056A98, CB7587900C466D834693115E1E23D0A44490C128CA1684FB93CB8C34AFCEBC71 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
22:14:00.0059 0x0cf8  vhdmp - ok
22:14:00.0091 0x0cf8  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf             C:\WINDOWS\System32\drivers\vhf.sys
22:14:00.0094 0x0cf8  vhf - ok
22:14:00.0106 0x0cf8  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
22:14:00.0110 0x0cf8  vmbus - ok
22:14:00.0121 0x0cf8  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
22:14:00.0123 0x0cf8  VMBusHID - ok
22:14:00.0135 0x0cf8  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid           C:\WINDOWS\System32\drivers\vmgid.sys
22:14:00.0138 0x0cf8  vmgid - ok
22:14:00.0177 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
22:14:00.0193 0x0cf8  vmicguestinterface - ok
22:14:00.0215 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat   C:\WINDOWS\System32\icsvc.dll
22:14:00.0225 0x0cf8  vmicheartbeat - ok
22:14:00.0241 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
22:14:00.0251 0x0cf8  vmickvpexchange - ok
22:14:00.0282 0x0cf8  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicrdv         C:\WINDOWS\System32\icsvcext.dll
22:14:00.0300 0x0cf8  vmicrdv - ok
22:14:00.0323 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll
22:14:00.0330 0x0cf8  vmicshutdown - ok
22:14:00.0350 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll
22:14:00.0356 0x0cf8  vmictimesync - ok
22:14:00.0433 0x0cf8  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession   C:\WINDOWS\System32\icsvc.dll
22:14:00.0440 0x0cf8  vmicvmsession - ok
22:14:00.0490 0x0cf8  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicvss         C:\WINDOWS\System32\icsvcext.dll
22:14:00.0497 0x0cf8  vmicvss - ok
22:14:00.0531 0x0cf8  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
22:14:00.0535 0x0cf8  volmgr - ok
22:14:00.0594 0x0cf8  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
22:14:00.0626 0x0cf8  volmgrx - ok
22:14:00.0652 0x0cf8  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
22:14:00.0659 0x0cf8  volsnap - ok
22:14:00.0674 0x0cf8  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\WINDOWS\system32\drivers\volume.sys
22:14:00.0676 0x0cf8  volume - ok
22:14:00.0704 0x0cf8  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
22:14:00.0707 0x0cf8  vpci - ok
22:14:00.0726 0x0cf8  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
22:14:00.0732 0x0cf8  vsmraid - ok
22:14:00.0793 0x0cf8  [ DDA66AEF89DAC320A85AECCB4369D2E7, 0F267FC985E0CA3624FC5F4DDA25623649BAD544772179261576F793A0485523 ] VSS             C:\WINDOWS\system32\vssvc.exe
22:14:00.0824 0x0cf8  VSS - ok
22:14:00.0878 0x0cf8  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
22:14:00.0887 0x0cf8  VSTXRAID - ok
22:14:00.0904 0x0cf8  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
22:14:00.0907 0x0cf8  vwifibus - ok
22:14:00.0934 0x0cf8  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\WINDOWS\system32\drivers\vwififlt.sys
22:14:00.0938 0x0cf8  vwififlt - ok
22:14:00.0953 0x0cf8  [ B1133B813E4CBF258A392CA08255BA24, 6061F27BD24F39A630ABE77921051785CB4B325156379A5E3636817DD6399C6F ] vwifimp         C:\WINDOWS\System32\drivers\vwifimp.sys
22:14:00.0957 0x0cf8  vwifimp - ok
22:14:00.0999 0x0cf8  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time         C:\WINDOWS\system32\w32time.dll
22:14:01.0030 0x0cf8  W32Time - ok
22:14:01.0070 0x0cf8  [ 4053FB949F48647A327BC18DFEEA4374, 52511C35854A673ADCD9084FEF9BC6A339BCA0290374B81140A371D67B13A8FB ] w3logsvc        C:\WINDOWS\system32\inetsrv\w3logsvc.dll
22:14:01.0073 0x0cf8  w3logsvc - ok
22:14:01.0106 0x0cf8  [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] W3SVC           C:\WINDOWS\system32\inetsrv\iisw3adm.dll
22:14:01.0132 0x0cf8  W3SVC - ok
22:14:01.0288 0x0cf8  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
22:14:01.0291 0x0cf8  WacomPen - ok
22:14:01.0389 0x0cf8  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService   C:\WINDOWS\system32\WalletService.dll
22:14:01.0403 0x0cf8  WalletService - ok
22:14:01.0424 0x0cf8  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:14:01.0427 0x0cf8  wanarp - ok
22:14:01.0432 0x0cf8  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:14:01.0434 0x0cf8  wanarpv6 - ok
22:14:01.0486 0x0cf8  [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] WAS             C:\WINDOWS\system32\inetsrv\iisw3adm.dll
22:14:01.0497 0x0cf8  WAS - ok
22:14:01.0566 0x0cf8  [ 8413D292CD1B27D6B6127B90697F2B1C, E03F9AAC410F5AEDCC30FDB4D8F4739AE7B290EFA735C480A29E9FE53C1D8420 ] wbengine        C:\WINDOWS\system32\wbengine.exe
22:14:01.0635 0x0cf8  wbengine - ok
22:14:01.0683 0x0cf8  [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
22:14:01.0715 0x0cf8  WbioSrvc - ok
22:14:01.0739 0x0cf8  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs           C:\WINDOWS\system32\drivers\wcifs.sys
22:14:01.0743 0x0cf8  wcifs - ok
22:14:01.0791 0x0cf8  [ CA10C91D802ABE6E5136E2168C2CD2B4, 5979FF9ED783ED3154257ED0507C7BBAF8C77C081CC30AE835EA8AF7508AAD08 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
22:14:01.0824 0x0cf8  Wcmsvc - ok
22:14:01.0853 0x0cf8  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
22:14:01.0879 0x0cf8  wcncsvc - ok
22:14:01.0895 0x0cf8  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs           C:\WINDOWS\system32\drivers\wcnfs.sys
22:14:01.0898 0x0cf8  wcnfs - ok
22:14:01.0938 0x0cf8  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
22:14:01.0945 0x0cf8  WdBoot - ok
22:14:01.0994 0x0cf8  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
22:14:02.0027 0x0cf8  Wdf01000 - ok
22:14:02.0048 0x0cf8  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
22:14:02.0063 0x0cf8  WdFilter - ok
22:14:02.0083 0x0cf8  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
22:14:02.0099 0x0cf8  WdiServiceHost - ok
22:14:02.0115 0x0cf8  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
22:14:02.0122 0x0cf8  WdiSystemHost - ok
22:14:02.0165 0x0cf8  [ EDC08B8D3E67F96688774841C247B82A, DB5AFAF87C74431B8EB5420DBF5428691F291B63C2FDE8282EE2E399C76F63F3 ] wdiwifi         C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
22:14:02.0194 0x0cf8  wdiwifi - ok
22:14:02.0216 0x0cf8  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
22:14:02.0262 0x0cf8  WdNisDrv - ok
22:14:02.0342 0x0cf8  WdNisSvc - ok
22:14:02.0410 0x0cf8  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient       C:\WINDOWS\System32\webclnt.dll
22:14:02.0432 0x0cf8  WebClient - ok
22:14:02.0456 0x0cf8  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
22:14:02.0472 0x0cf8  Wecsvc - ok
22:14:02.0490 0x0cf8  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
22:14:02.0497 0x0cf8  WEPHOSTSVC - ok
22:14:02.0522 0x0cf8  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
22:14:02.0538 0x0cf8  wercplsupport - ok
22:14:02.0558 0x0cf8  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
22:14:02.0565 0x0cf8  WerSvc - ok
22:14:02.0579 0x0cf8  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS         C:\WINDOWS\system32\drivers\wfplwfs.sys
22:14:02.0585 0x0cf8  WFPLWFS - ok
22:14:02.0592 0x0cf8  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
22:14:02.0600 0x0cf8  WiaRpc - ok
22:14:02.0616 0x0cf8  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
22:14:02.0619 0x0cf8  WIMMount - ok
22:14:02.0622 0x0cf8  WinDefend - ok
22:14:02.0646 0x0cf8  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
22:14:02.0650 0x0cf8  WindowsTrustedRT - ok
22:14:02.0678 0x0cf8  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
22:14:02.0680 0x0cf8  WindowsTrustedRTProxy - ok
22:14:02.0730 0x0cf8  [ 4AB1AC1E60118443A14C241F91AC8FC9, 2B9237AC124874664E31B4F313BAAF8059BD0749653496784B4B89B4B7F66784 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
22:14:02.0762 0x0cf8  WinHttpAutoProxySvc - ok
22:14:02.0777 0x0cf8  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\WINDOWS\System32\drivers\winmad.sys
22:14:02.0780 0x0cf8  WinMad - ok
22:14:02.0827 0x0cf8  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
22:14:02.0834 0x0cf8  Winmgmt - ok
22:14:02.0930 0x0cf8  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
22:14:03.0020 0x0cf8  WinRM - ok
22:14:03.0062 0x0cf8  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS
22:14:03.0067 0x0cf8  WINUSB - ok
22:14:03.0081 0x0cf8  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\WINDOWS\System32\drivers\winverbs.sys
22:14:03.0084 0x0cf8  WinVerbs - ok
22:14:03.0132 0x0cf8  [ 15F0990B7C101163FE27D9B19FEB3D43, 5020EF7755E0ACDA77E816C44A5B75286CC1BEA182BECF9D7252EB826A4F1FFE ] wisvc           C:\WINDOWS\system32\flightsettings.dll
22:14:03.0149 0x0cf8  wisvc - ok
22:14:03.0254 0x0cf8  [ 5A7AA8198156DC2BFF9F064E29D11AF5, 9CBAF1B99B54CDE087E0FC0A2601B3F056F81F2F5AF63B5BB71C7389247E496A ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
22:14:03.0339 0x0cf8  WlanSvc - ok
22:14:03.0438 0x0cf8  [ EF39F106D7E0A8918E98E4CDAE25F2E2, B6EDF2646C1E3A1684C40DFC475694DF540C2B1B8E4247AE343E1DF34B1CE4F7 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
22:14:03.0533 0x0cf8  wlidsvc - ok
22:14:03.0550 0x0cf8  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
22:14:03.0552 0x0cf8  WmiAcpi - ok
22:14:03.0592 0x0cf8  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
22:14:03.0598 0x0cf8  wmiApSrv - ok
22:14:03.0618 0x0cf8  WMPNetworkSvc - ok
22:14:03.0643 0x0cf8  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
22:14:03.0650 0x0cf8  Wof - ok
22:14:03.0730 0x0cf8  [ 5820CC51AB1C368F29ECCA713397D006, AA0CC2BC4DF7DBFB144FF47C3508BEEF00467C9D312C135AFB3406E42C6CD821 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
22:14:03.0798 0x0cf8  workfolderssvc - ok
22:14:03.0822 0x0cf8  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
22:14:03.0831 0x0cf8  WPDBusEnum - ok
22:14:03.0844 0x0cf8  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
22:14:03.0847 0x0cf8  WpdUpFltr - ok
22:14:03.0865 0x0cf8  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\WINDOWS\system32\WpnService.dll
22:14:03.0888 0x0cf8  WpnService - ok
22:14:03.0906 0x0cf8  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll
22:14:03.0915 0x0cf8  WpnUserService - ok
22:14:03.0956 0x0cf8  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
22:14:03.0958 0x0cf8  ws2ifsl - ok
22:14:04.0051 0x0cf8  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
22:14:04.0060 0x0cf8  wscsvc - ok
22:14:04.0082 0x0cf8  [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
22:14:04.0084 0x0cf8  WSDPrintDevice - ok
22:14:04.0099 0x0cf8  [ 46E4A69825A7554A5DB784A55F8AD203, 7F347054FCDD5DEF93083D420E56EBE5EEBBAE2BD2FED9B2E75E85149DE52780 ] WSDScan         C:\WINDOWS\system32\DRIVERS\WSDScan.sys
22:14:04.0102 0x0cf8  WSDScan - ok
22:14:04.0107 0x0cf8  WSearch - ok
22:14:04.0197 0x0cf8  [ A44EAEFD97814D970870F393A06E6F43, 58EF20121E656F1FBB7ADD9AAE789DFE6E8BA9FB3363678645708C9DDEB9814E ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
22:14:04.0280 0x0cf8  wuauserv - ok
22:14:04.0299 0x0cf8  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
22:14:04.0304 0x0cf8  WudfPf - ok
22:14:04.0322 0x0cf8  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
22:14:04.0329 0x0cf8  WUDFRd - ok
22:14:04.0355 0x0cf8  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
22:14:04.0364 0x0cf8  wudfsvc - ok
22:14:04.0374 0x0cf8  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
22:14:04.0380 0x0cf8  WUDFWpdFs - ok
22:14:04.0390 0x0cf8  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
22:14:04.0396 0x0cf8  WUDFWpdMtp - ok
22:14:04.0448 0x0cf8  [ D313FF382A26D1295B212A66EE3E52A8, 59FEF2AF611507BCB6FE036A7D4F1595F3449B76F9B055CDC67DC1BE1D90EEB8 ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
22:14:04.0492 0x0cf8  WwanSvc - ok
22:14:04.0548 0x0cf8  [ 7EF75102A793AAA6AAA45A4F7C15FF4D, A3FB68905F3E3A7DE52B85FAD966ABCB787FAC7E709964CE9BF2A4F9AC8B0653 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll
22:14:04.0592 0x0cf8  XblAuthManager - ok
22:14:04.0659 0x0cf8  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave     C:\WINDOWS\System32\XblGameSave.dll
22:14:04.0706 0x0cf8  XblGameSave - ok
22:14:04.0741 0x0cf8  [ DB77764B46D02DCB9777D9E00A3F7D63, 469491E3A57FBB0CB0482A2493823B57410E24A5BD4C1C96D79FE9888F7827BB ] xboxgip         C:\WINDOWS\System32\drivers\xboxgip.sys
22:14:04.0746 0x0cf8  xboxgip - ok
22:14:04.0794 0x0cf8  [ 1A8D9EA4DD1A3E276B85EDB05B42BEC7, 23FC10AC29BDF917AEDB3AAF82537EC2C72453E52B41836FD83643054FA4F0BE ] XboxNetApiSvc   C:\WINDOWS\system32\XboxNetApiSvc.dll
22:14:04.0817 0x0cf8  XboxNetApiSvc - ok
22:14:04.0846 0x0cf8  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\WINDOWS\System32\drivers\xinputhid.sys
22:14:04.0847 0x0cf8  xinputhid - ok
22:14:04.0851 0x0cf8  ================ Scan global ===============================
22:14:04.0882 0x0cf8  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
22:14:04.0914 0x0cf8  [ F109EE1ACA4F7E5714C892D2B01D0890, 1915BD17558BE17C3242AF014351676D47E22A7E8A455A14C23B564E726DB061 ] C:\WINDOWS\system32\winsrv.dll
22:14:04.0953 0x0cf8  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
22:14:04.0994 0x0cf8  [ 9A3B47CD17283B299311013AD3D21D26, 48D5695E7610E7A742E403B2C37664D961E466C10E4FFAE07C8AB6B5BE5F7BF8 ] C:\WINDOWS\system32\services.exe
22:14:05.0005 0x0cf8  [ Global ] - ok
22:14:05.0006 0x0cf8  ================ Scan MBR ==================================
22:14:05.0018 0x0cf8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:14:05.0710 0x0cf8  \Device\Harddisk0\DR0 - ok
22:14:05.0711 0x0cf8  ================ Scan VBR ==================================
22:14:05.0713 0x0cf8  [ 8C3FD0B70E94624731A11100B962CDB4 ] \Device\Harddisk0\DR0\Partition1
22:14:05.0715 0x0cf8  \Device\Harddisk0\DR0\Partition1 - ok
22:14:05.0718 0x0cf8  [ 1E20F4286D51161E6381D9246B0F78CA ] \Device\Harddisk0\DR0\Partition2
22:14:05.0720 0x0cf8  \Device\Harddisk0\DR0\Partition2 - ok
22:14:05.0739 0x0cf8  [ 9F951802765BC2BB20D6B2EA5CDAFDAA ] \Device\Harddisk0\DR0\Partition3
22:14:05.0742 0x0cf8  \Device\Harddisk0\DR0\Partition3 - ok
22:14:05.0743 0x0cf8  ================ Scan generic autorun ======================
22:14:05.0809 0x0cf8  [ FAF64638A42A32B449E7EB474064731A, 40462B51B3CAE21E5650525F90BAB5FCB6C1B44EA4C2DBB8AA0991A0F2EE7837 ] C:\Program Files\DellTPad\Apoint.exe
22:14:05.0833 0x0cf8  Apoint - ok
22:14:05.0917 0x0cf8  [ DA607C51DB2A8218D7FC2783994CD2A1, C83E8BCBDAC80E064A82B260AB54C704FCD028821C8D3E50C2D0017203C0BD12 ] C:\Program Files\DATAflor\Update-Manager\DATAflor.UpdateManager.exe
22:14:05.0965 0x0cf8  DATAflor Update-Manager - ok
22:14:06.0002 0x0cf8  [ 3402BBBC16E909985C4F184EB247E9BD, 715806A02C33060C3A20AA1387AC656D92A217115123A2BA16DBE4B37C31880F ] C:\WINDOWS\system32\igfxtray.exe
22:14:06.0009 0x0cf8  IgfxTray - ok
22:14:06.0034 0x0cf8  [ 22BF0CCB64AAE89004355E924E0AD463, BA8FA7DCFAD8396C7A2DB583FF6118361F959040837215FD5198D8D0A4D7E9B6 ] C:\WINDOWS\system32\hkcmd.exe
22:14:06.0056 0x0cf8  HotKeysCmds - ok
22:14:06.0077 0x0cf8  [ FDA7C3D4227097EC5B45BF9E769B5427, C8A41A3EA957A64CECD17B6E5AFAE2775541C0838CE27FD759031B84180FBFA0 ] C:\WINDOWS\system32\igfxpers.exe
22:14:06.0099 0x0cf8  Persistence - ok
22:14:06.0162 0x0cf8  [ 8DD6F98101EBBA3FC92C8092333A6B32, 80FE7E4433731614B92F8C0256EA5440508C535EBDA45188D1225BFEDA6F0F67 ] C:\Program Files\AVAST Software\Avast\AvLaunch.exe
22:14:06.0167 0x0cf8  AvastUI.exe - ok
22:14:06.0200 0x0cf8  [ 4BBE4F124A85554921A04CA1F00C7A79, 5C7D7F0764C56FAE4A05B4002D6CBB76432BACEF4FB779788679034E5183770B ] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
22:14:06.0204 0x0cf8  IMSS - ok
22:14:06.0260 0x0cf8  Dropbox - ok
22:14:06.0631 0x0cf8  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
22:14:06.0877 0x0cf8  OneDriveSetup - ok
22:14:06.0952 0x0cf8  [ 42E974C4428C22980B17547D0AE32A83, 33C55B98C9001F2F999025E43BCE6ACC2A8E95FD5D6B5BB7DF2E31C88828A210 ] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE
22:14:06.0958 0x0cf8  EPSON SX420W Series (Kopie 1) - ok
22:14:07.0002 0x0cf8  [ 42E974C4428C22980B17547D0AE32A83, 33C55B98C9001F2F999025E43BCE6ACC2A8E95FD5D6B5BB7DF2E31C88828A210 ] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE
22:14:07.0005 0x0cf8  EPSON SX420W Series - ok
22:14:07.0216 0x0cf8  [ F51BB12D8977D26C1A4CDA348770D9F1, DDA35CD8F8A6591B83821B5180D457740E0B820CCE000BC7FB1B78FB4AEAD3BA ] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe
22:14:07.0275 0x0cf8  SpybotPostWindows10UpgradeReInstall - ok
22:14:07.0294 0x0cf8  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
22:14:07.0300 0x0cf8  Uninstall C:\Users\BmgDroog\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64 - ok
22:14:07.0337 0x0cf8  [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
22:14:07.0357 0x0cf8  WAB Migrate - ok
22:14:07.0358 0x0cf8  Waiting for KSN requests completion. In queue: 269
22:14:08.0359 0x0cf8  Waiting for KSN requests completion. In queue: 269
22:14:09.0372 0x0cf8  AV detected via SS2: Avast Antivirus, C:\Program Files\AVAST Software\Avast\wsc_proxy.exe ( 17.4.3482.0 ), 0x41000 ( enabled : updated )
22:14:09.0372 0x0cf8  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.1198 ), 0x62100 ( disabled : updated )
22:14:09.0376 0x0cf8  Win FW state via NFP2: enabled ( trusted )
22:14:09.0683 0x0cf8  ============================================================
22:14:09.0683 0x0cf8  Scan finished
22:14:09.0683 0x0cf8  ============================================================
22:14:09.0689 0x0c10  Detected object count: 0
22:14:09.0689 0x0c10  Actual detected object count: 0

M-K-D-B · 17.05.2017, 15:02

Du hast da mindestens eine illegale/gecrackte Software auf deinem Rechner:
Microsoft Office Professional Plus 2016

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter, wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

BmgDroog · 19.05.2017, 05:33

Ok.
Problem hat sich erledigt, ich bitte darum, den Thread zu löschen.

Vielen Dank für die Unterstützung und bitte um Entschuldigung für den entstandenen Aufwand!

M-K-D-B · 19.05.2017, 20:14

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine Profilnachricht inklusive Link zum Thema.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Win10: Adware Elex und Adware Ghokswa kommen ständig wieder

Log-Analyse und Auswertung: Win10: Adware Elex und Adware Ghokswa kommen ständig wieder