|
Plagegeister aller Art und deren Bekämpfung: Bereinigung durch ADWCleaner führt zum AbsturzWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.07.2018, 18:05 | #1 |
| Bereinigung durch ADWCleaner führt zum Absturz Hallo, in unregelmäßigen Abständen lasse ich das ein oder andere Programm über mein System laufen. Dabei hat Malwarebytes Anti-Malware nichts gefunden, ADWCleaner 7.2.2 aber aktuell 49 Bedrohungen gefunden (s. angehängte Log-Datei). Wenn ich "Bereinigen und Reparieren" anklicke, stürzt das System ab und Windows startet neu. Wie soll ich damit umgehen? Viele Grüße Oliver |
27.07.2018, 11:35 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum AbsturzLesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
27.07.2018, 12:28 | #3 |
| AdwCleaner LogfileCode:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-25.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 07-26-2018 # Duration: 00:00:47 # OS: Windows 10 Home # Scanned: 41737 # Detected: 49 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.AdvancedSystemCare C:\ProgramData\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\LocalLow\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\Roaming\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver_2\AppData\Roaming\IObit\Advanced SystemCare V8 ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.AdvancedSystemCare HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 9 PUP.Optional.AdvancedSystemCare HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Advanced SystemCare PUP.Optional.AdvancedSystemCare HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} PUP.Optional.DefaultSearch.ShrtCln HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\defaultsearch.com PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\649A52D257CA5DB4EAAE8BA9EB23E467 PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\3152E1F19977892449DC968802CE8964 PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mywebsearch.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchnow.ws PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mysearchnow.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\hotbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\isearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\get-search.cc PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchresults.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearcher.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearch247.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\whatsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\resultsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\crawlermachine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\nicecodec.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\niceblowjob.info PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\fucknicepics.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\codecnice.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\ifinditall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\icanfindit.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\findit-now.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\clearask.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchengine2000.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\best-searchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\adultdatingsearchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\http602.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\you-search.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\bestcrawler.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\tangounion.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\search-web.us PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchoutlaw.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\digistreamsa.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchable-sex.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\securesurface.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\easy-search.net PUP.Optional.SafeFinder HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\startravelsnp.com PUP.Optional.SearchProtect HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchproject.net ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. AdwCleaner[S00].txt - [7453 octets] - [26/07/2018 18:44:49] AdwCleaner[S01].txt - [7514 octets] - [26/07/2018 18:50:09] AdwCleaner[S02].txt - [7575 octets] - [26/07/2018 18:55:04] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ########## |
27.07.2018, 12:40 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum AbsturzCode:
ATTFilter IObit\Advanced SystemCare V8 Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
27.07.2018, 13:18 | #5 |
| Bereinigung durch ADWCleaner führt zum Absturz Das sollte deinstalliert sein. Windows führt es auch nicht als aktive App auf. Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21.07.2018 durchgeführt von Oliver (Administrator) auf SAMSUNG2011 (27-07-2018 13:53:10) Gestartet von C:\Users\Oliver\Desktop Geladene Profile: Oliver (Verfügbare Profile: Oliver & Andrea & Oliver_2 & DefaultAppPool) Platform: Windows 10 Home Version 1803 17134.191 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: IE) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe () C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe (Brio) C:\Program Files\FolderSize\FolderSizeSvc.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe (© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe () C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe () C:\Windows\SysWOW64\Rezip.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe () C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe () C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe () C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe (Sony) C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\splwow64.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\Video.UI.exe () C:\Users\Oliver\AppData\Local\Amazon Music\Amazon Music Helper.exe (Brio) C:\Program Files\FolderSize\FolderSize.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Digital Wave Ltd) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe (KARPOLAN) C:\Program Files (x86)\Touchpad Blocker\TouchpadBlocker.exe (Deutsche Post AG) C:\Program Files (x86)\Deutsche Post AG\E-POST MAILER\EpostMailer.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Password Manager 15\passwordmanagercom.exe () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosHotKeyService.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\passwordmanagercom.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosBrowserMonitor.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\Notifier.exe (Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\fredirstarter.exe (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\internet explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe (CANON INC.) C:\Program Files (x86)\Canon\My Image Garden\cnmigmain.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2149160 2010-05-21] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781824 2017-02-22] (Realtek Semiconductor) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (CANON INC.) HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink) HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePDRShortCut] => C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl8] => C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.) HKLM-x32\...\Run: [PDVD8LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePSTShortCut] => "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [136544 2009-05-19] (CANON INC.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318248 2016-01-08] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [SPM15 Chrome Autofill Relay] => C:\Program Files (x86)\Steganos Password Manager 15\passwordmanagercom.exe [480120 2014-06-25] (Steganos Software GmbH) HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [153424 2012-01-17] () HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3754168 2018-07-13] (Dropbox, Inc.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1279120 2012-09-27] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.) HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosHotKeyService.exe [104960 2016-07-28] (Steganos Software GmbH) HKLM-x32\...\Run: [SSS17 Chrome Autofill Relay] => C:\Program Files (x86)\Steganos Privacy Suite 17\passwordmanagercom.exe [1330736 2016-07-28] (Steganos Software GmbH) HKLM-x32\...\Run: [SSS17 Browser Monitor] => C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosBrowserMonitor.exe [1001528 2016-07-28] (Steganos Software GmbH) HKLM-x32\...\Run: [SSS17 Notifier] => C:\Program Files (x86)\Steganos Privacy Suite 17\Notifier.exe [3977736 2016-07-28] (Steganos Software GmbH) HKLM-x32\...\Run: [SSS17 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 17\fredirstarter.exe [18432 2016-07-28] (Steganos Software GmbH) HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [131360 2017-12-19] (Intel) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-07-04] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [64096 2018-07-09] (Avira Operations GmbH & Co. KG) HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [rfxsrvtray] => C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [Amazon Music] => C:\Users\Oliver\AppData\Local\Amazon Music\Amazon Music Helper.exe [5908968 2016-06-16] () HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [Folder Size] => C:\Program Files\FolderSize\FolderSize.exe [169472 2013-02-13] (Brio) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1572648 2016-01-08] (Samsung) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2097024 2017-02-07] (Sony) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe [1595368 2018-02-21] (Digital Wave Ltd) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Run: [TouchpadBlocker.exe] => C:\Program Files (x86)\Touchpad Blocker\TouchpadBlocker.exe [881152 2013-04-17] (KARPOLAN) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\MM_BAH~1.SCR [192512 2011-02-08] (Manfred Meyer, Martin Meyer) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\E-POST MAILER.lnk [2017-03-21] ShortcutTarget: E-POST MAILER.lnk -> C:\Program Files (x86)\Deutsche Post AG\E-POST MAILER\EpostMailer.exe (Deutsche Post AG) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2017-03-21] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{20c085a1-5ece-45da-8ddd-c50a4bd75f5a}: [DhcpNameServer] 192.168.224.1 Tcpip\..\Interfaces\{3ff85018-09c6-49e4-a9f4-50d2b4c220c6}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{4e2b02a8-ba4b-4ab0-8229-aeaa37ab63ec}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{e3d48fe7-e161-484a-a645-25f158eeeb58}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ SearchScopes: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001 -> DefaultScope {C2166740-6E19-4202-A46D-84DC087ECD44} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7ADRA_deDE423 SearchScopes: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001 -> {C2166740-6E19-4202-A46D-84DC087ECD44} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7ADRA_deDE423 BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-06-30] (Microsoft Corporation) BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO: Ghostery Plugin -> {6BF739DD-3323-4C6A-975B-C7E00A50B154} -> C:\Program Files (x86)\Ghostery\bin\ghostery64.dll [2015-05-28] (Ghostery, Inc.) BHO: Deaktivierungs-Add-on für Browser von Google Analytics -> {75EF13CE-B59E-41ba-8A5A-A944031BD8B4} -> C:\Program Files\Google\Google Analytics Opt-Out\gaoptout_x64.dll [2014-04-03] (Google, Inc.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc.) BHO: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-04-29] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH) BHO-x32: Ghostery Plugin -> {6BF739DD-3323-4C6A-975B-C7E00A50B154} -> C:\Program Files (x86)\Ghostery\bin\ghostery.dll [2015-05-28] (Ghostery, Inc.) BHO-x32: Deaktivierungs-Add-on für Browser von Google Analytics -> {75EF13CE-B59E-41ba-8A5A-A944031BD8B4} -> C:\Program Files (x86)\Google\Google Analytics Opt-Out\gaoptout.dll [2014-04-03] (Google, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\ssv.dll [2018-04-29] (Oracle Corporation) BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc.) BHO-x32: Kein Name -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> Keine Datei BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\jp2ssv.dll [2018-04-29] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc.) Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 17\SPMIEToolbar64.dll [2016-07-28] (Steganos Software GmbH) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc.) Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 17\SPMIEToolbar.dll [2016-07-28] (Steganos Software GmbH) Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc.) Toolbar: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc.) Toolbar: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) DPF: HKLM {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\WINDOWS\system32\mscoree.dll [2018-04-12] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-30] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-30] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-30] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-30] (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\SysWOW64\Skype4COM.dll [2007-02-07] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Oliver\AppData\Roaming\Mozilla\Firefox\Profiles\39i6ixzq.default-1469985681909 [2018-07-25] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-06-02] [Legacy] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension FF Extension: (Default Manager) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-10-25] [Legacy] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 17\spmplugin3 => nicht gefunden FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1232202.dll [2018-03-09] (Adobe Systems, Inc.) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @java.com/DTPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\dtplugin\npDeployJava1.dll [2018-04-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\plugin2\npjp2.dll [2018-04-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-03-30] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-04] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 -> C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll [2011-08-03] (Sony Computer Entertainment Inc.) FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2012-06-29] (Sony Network Entertainment International LLC) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.) FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-01-15] (pdfforge GmbH) Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [880040 2018-07-08] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [225384 2018-07-08] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [225384 2018-07-08] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1164808 2018-07-08] (Avira Operations GmbH & Co. KG) S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-03-29] (Apple Inc.) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [428072 2018-07-04] (Avira Operations GmbH & Co. KG) R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2980848 2018-06-28] (Avira Operations GmbH & Co. KG) R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [346528 2018-05-17] (Avira Operations GmbH & Co. KG) R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [103328 2018-06-15] (Avira Operations GmbH & Co. KG) R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-09-30] () R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8765104 2018-07-13] (Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51392 2018-07-13] (Dropbox, Inc.) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-21] (Digital Wave Ltd.) R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22304 2017-12-19] (Intel) S3 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [885992 2017-12-08] () R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert] R2 FolderSize; C:\Program Files\FolderSize\FolderSizeSvc.exe [163840 2013-02-13] (Brio) [Datei ist nicht signiert] S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel Corporation) R2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.) R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] () R2 Rezip; C:\windows\SysWOW64\Rezip.exe [311296 2009-03-05] () [Datei ist nicht signiert] R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] () R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Avanquest Software) [Datei ist nicht signiert] S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.) R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-09-30] () R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe [181992 2017-12-08] () R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2018-03-01] (TeamViewer GmbH) R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [270672 2012-01-17] () S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe [885992 2017-12-08] () S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-28] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-06-28] (Microsoft Corporation) R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2205568 2017-02-07] (Sony) [Datei ist nicht signiert] R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus64.sys [20992 2015-01-21] (LG Electronics Inc.) S3 AndNetDiag; C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys [30720 2015-01-26] (LG Electronics Inc.) S3 ANDNetModem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys [37376 2015-01-26] (LG Electronics Inc.) R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318648 2017-03-15] (Qualcomm Atheros Communications, Inc.) R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [60920 2018-04-25] (Avira Operations GmbH & Co. KG) R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [179376 2018-07-08] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [169864 2018-07-08] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2018-04-25] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2018-04-25] (Avira Operations GmbH & Co. KG) R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [38048 2018-04-25] (Avira Operations GmbH & Co. KG) R3 BlueletAudio; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.) R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.) R3 BlueletSCOAudio; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.) R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.) R3 BT; C:\WINDOWS\System32\drivers\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.) R3 BT; C:\Windows\SysWOW64\drivers\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.) R0 BTHidEnum; C:\WINDOWS\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.) R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.) R0 BTHidMgr; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.) R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.) S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2017-03-14] (Sony Mobile Communications) R1 HWiNFO32; C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS [27552 2016-11-20] (REALiX(tm)) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-07-26] (Malwarebytes) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-10-11] (NVIDIA Corporation) R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2018-04-19] (The OpenVPN Project) S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] () S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2010-12-29] (Windows (R) 2003 DDK 3790 provider) S3 s0017bus; C:\WINDOWS\System32\drivers\s0017bus.sys [113704 2008-10-21] (MCCI Corporation) S3 s0017mdfl; C:\WINDOWS\system32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation) S3 s0017mdm; C:\WINDOWS\system32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation) S3 s0017mgmt; C:\WINDOWS\system32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation) S3 s0017nd5; C:\WINDOWS\System32\drivers\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation) S3 s0017obex; C:\WINDOWS\system32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation) S3 s0017unic; C:\WINDOWS\System32\drivers\s0017unic.sys [145960 2008-10-21] (MCCI Corporation) S3 semav6msr64; C:\windows\system32\drivers\semav6msr64.sys [41512 2017-12-08] () R1 SLEE_19_DRIVER; C:\WINDOWS\Sleen1964.sys [117848 2016-07-28] (Softwareentwicklung Remus - ArchiCrypt - ) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42600 2016-11-20] (Synaptics Incorporated) R3 VComm; C:\WINDOWS\system32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.) R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.) R3 VcommMgr; C:\WINDOWS\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.) R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46592 2018-06-28] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-06-28] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-28] (Microsoft Corporation) R3 ykinw8; C:\WINDOWS\System32\drivers\ykinx64.sys [288768 2018-04-12] (Marvell) U3 idsvc; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-07-27 13:53 - 2018-07-27 13:53 - 000037704 _____ C:\Users\Oliver\Desktop\FRST.txt 2018-07-27 13:52 - 2018-07-27 13:53 - 000000000 ____D C:\FRST 2018-07-27 13:51 - 2018-07-27 13:51 - 002412544 _____ (Farbar) C:\Users\Oliver\Desktop\FRST64.exe 2018-07-27 13:26 - 2018-07-27 13:26 - 000000000 ____D C:\Users\Public\Speedup Sessions 2018-07-26 18:56 - 2018-07-26 18:56 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2018-07-26 18:55 - 2018-07-26 18:56 - 000723956 _____ C:\WINDOWS\Minidump\072618-7359-01.dmp 2018-07-26 18:50 - 2018-07-26 18:55 - 574069303 _____ C:\WINDOWS\MEMORY.DMP 2018-07-26 18:50 - 2018-07-26 18:52 - 000715052 _____ C:\WINDOWS\Minidump\072618-7421-01.dmp 2018-07-26 18:48 - 2018-07-26 18:55 - 000000000 ____D C:\WINDOWS\Minidump 2018-07-26 18:48 - 2018-07-26 18:49 - 000988244 _____ C:\WINDOWS\Minidump\072618-7453-01.dmp 2018-07-26 18:36 - 2018-07-26 18:36 - 000001315 _____ C:\Users\Oliver\Desktop\adwcleaner.lnk 2018-07-26 18:34 - 2018-07-26 18:34 - 000001109 _____ C:\Users\Oliver\Desktop\JRT.exe.lnk 2018-07-26 13:12 - 2018-07-15 02:56 - 001523240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2018-07-26 13:12 - 2018-07-15 02:44 - 006587392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2018-07-26 13:12 - 2018-07-15 02:43 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-07-26 13:12 - 2018-07-15 02:42 - 008624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2018-07-26 13:12 - 2018-07-15 02:42 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2018-07-26 13:12 - 2018-07-15 02:38 - 003652608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-07-26 13:12 - 2018-07-15 01:28 - 001327424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2018-07-26 13:12 - 2018-07-15 01:18 - 005657600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2018-07-26 13:12 - 2018-07-15 01:17 - 011901440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-07-26 13:12 - 2018-07-15 01:13 - 002895360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-07-26 13:12 - 2018-07-14 08:46 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-07-26 13:12 - 2018-07-14 08:42 - 019525632 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-07-26 13:12 - 2018-07-14 06:23 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-07-26 13:12 - 2018-07-14 06:22 - 006813744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2018-07-26 13:12 - 2018-07-14 06:22 - 001144664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2018-07-26 13:12 - 2018-07-14 06:19 - 009147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-07-26 13:12 - 2018-07-14 06:19 - 000981920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2018-07-26 13:12 - 2018-07-14 06:18 - 007436112 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-07-26 13:12 - 2018-07-14 06:18 - 002371416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2018-07-26 13:12 - 2018-07-14 06:18 - 001017584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2018-07-26 13:12 - 2018-07-14 06:18 - 000613176 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2018-07-26 13:12 - 2018-07-14 06:17 - 006527056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2018-07-26 13:12 - 2018-07-14 06:17 - 002420632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2018-07-26 13:12 - 2018-07-14 06:16 - 002331576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2018-07-26 13:12 - 2018-07-14 06:16 - 001143096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2018-07-26 13:12 - 2018-07-14 06:15 - 006044112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-07-26 13:12 - 2018-07-14 06:08 - 022006784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-07-26 13:12 - 2018-07-14 06:03 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-07-26 13:12 - 2018-07-14 06:03 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-07-26 13:12 - 2018-07-14 06:01 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-07-26 13:12 - 2018-07-14 06:00 - 022714368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-07-26 13:12 - 2018-07-14 05:59 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2018-07-26 13:12 - 2018-07-14 05:59 - 005883392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2018-07-26 13:12 - 2018-07-14 05:58 - 008188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-07-26 13:12 - 2018-07-14 05:58 - 004371456 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-07-26 13:12 - 2018-07-14 05:57 - 007057920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2018-07-26 13:12 - 2018-07-14 05:57 - 005779456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-07-26 13:12 - 2018-07-14 05:57 - 004331008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2018-07-26 13:12 - 2018-07-14 05:56 - 004559872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2018-07-26 13:12 - 2018-07-14 05:56 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2018-07-26 13:12 - 2018-07-14 05:56 - 002697216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll 2018-07-26 13:12 - 2018-07-14 05:55 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-07-26 13:12 - 2018-07-14 05:55 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-07-26 13:12 - 2018-07-14 05:54 - 007579648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-07-26 13:12 - 2018-07-14 05:54 - 003319808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2018-07-26 13:12 - 2018-07-14 05:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2018-07-26 13:12 - 2018-07-14 05:54 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-07-26 13:12 - 2018-07-14 05:53 - 004770816 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2018-07-26 13:12 - 2018-07-14 05:53 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-07-26 13:12 - 2018-07-14 05:53 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2018-07-26 13:12 - 2018-07-14 05:53 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2018-07-26 13:12 - 2018-07-14 05:53 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll 2018-07-26 13:12 - 2018-07-14 05:51 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2018-07-26 13:12 - 2018-07-14 05:51 - 002904576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-07-26 13:12 - 2018-07-14 05:51 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-07-26 13:12 - 2018-07-14 05:51 - 001395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2018-07-26 13:12 - 2018-07-14 05:50 - 001457664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2018-07-26 13:12 - 2018-07-14 05:50 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2018-07-26 13:11 - 2018-07-15 02:58 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2018-07-26 13:11 - 2018-07-15 02:44 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2018-07-26 13:11 - 2018-07-15 02:41 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2018-07-26 13:11 - 2018-07-15 02:41 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2018-07-26 13:11 - 2018-07-15 02:39 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2018-07-26 13:11 - 2018-07-15 02:39 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 002051584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 001004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2018-07-26 13:11 - 2018-07-15 02:38 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-07-26 13:11 - 2018-07-15 02:36 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2018-07-26 13:11 - 2018-07-15 01:15 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2018-07-26 13:11 - 2018-07-15 01:14 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2018-07-26 13:11 - 2018-07-15 01:13 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2018-07-26 13:11 - 2018-07-15 01:13 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2018-07-26 13:11 - 2018-07-15 01:13 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2018-07-26 13:11 - 2018-07-15 01:13 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2018-07-26 13:11 - 2018-07-15 01:13 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-07-26 13:11 - 2018-07-15 01:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2018-07-26 13:11 - 2018-07-14 06:37 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2018-07-26 13:11 - 2018-07-14 06:37 - 000230304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2018-07-26 13:11 - 2018-07-14 06:30 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-07-26 13:11 - 2018-07-14 06:24 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-07-26 13:11 - 2018-07-14 06:23 - 000760888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2018-07-26 13:11 - 2018-07-14 06:23 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-07-26 13:11 - 2018-07-14 06:22 - 000510392 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2018-07-26 13:11 - 2018-07-14 06:22 - 000203560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2018-07-26 13:11 - 2018-07-14 06:21 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-07-26 13:11 - 2018-07-14 06:21 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-07-26 13:11 - 2018-07-14 06:21 - 000722824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2018-07-26 13:11 - 2018-07-14 06:21 - 000192920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2018-07-26 13:11 - 2018-07-14 06:20 - 001457128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-07-26 13:11 - 2018-07-14 06:20 - 000567176 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2018-07-26 13:11 - 2018-07-14 06:20 - 000184472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2018-07-26 13:11 - 2018-07-14 06:20 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-07-26 13:11 - 2018-07-14 06:19 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2018-07-26 13:11 - 2018-07-14 06:19 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2018-07-26 13:11 - 2018-07-14 06:19 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-07-26 13:11 - 2018-07-14 06:19 - 000713368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-07-26 13:11 - 2018-07-14 06:19 - 000636944 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2018-07-26 13:11 - 2018-07-14 06:19 - 000483024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll 2018-07-26 13:11 - 2018-07-14 06:18 - 002563984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2018-07-26 13:11 - 2018-07-14 06:18 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-07-26 13:11 - 2018-07-14 06:18 - 000930712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2018-07-26 13:11 - 2018-07-14 06:18 - 000443216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2018-07-26 13:11 - 2018-07-14 06:18 - 000376216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2018-07-26 13:11 - 2018-07-14 06:17 - 001140568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-07-26 13:11 - 2018-07-14 06:17 - 000983008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-07-26 13:11 - 2018-07-14 06:17 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-07-26 13:11 - 2018-07-14 06:17 - 000743320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2018-07-26 13:11 - 2018-07-14 06:16 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2018-07-26 13:11 - 2018-07-14 06:15 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2018-07-26 13:11 - 2018-07-14 06:15 - 001174552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2018-07-26 13:11 - 2018-07-14 06:15 - 001129640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-07-26 13:11 - 2018-07-14 06:15 - 000829856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2018-07-26 13:11 - 2018-07-14 06:15 - 000581696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2018-07-26 13:11 - 2018-07-14 06:15 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-07-26 13:11 - 2018-07-14 06:01 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2018-07-26 13:11 - 2018-07-14 05:59 - 003553280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2018-07-26 13:11 - 2018-07-14 05:58 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll 2018-07-26 13:11 - 2018-07-14 05:58 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2018-07-26 13:11 - 2018-07-14 05:58 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2018-07-26 13:11 - 2018-07-14 05:57 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-07-26 13:11 - 2018-07-14 05:57 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2018-07-26 13:11 - 2018-07-14 05:57 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-07-26 13:11 - 2018-07-14 05:57 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-07-26 13:11 - 2018-07-14 05:57 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 001703936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Controls.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 001558016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll 2018-07-26 13:11 - 2018-07-14 05:56 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2018-07-26 13:11 - 2018-07-14 05:55 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-07-26 13:11 - 2018-07-14 05:55 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2018-07-26 13:11 - 2018-07-14 05:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe 2018-07-26 13:11 - 2018-07-14 05:55 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 001537024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000603648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys 2018-07-26 13:11 - 2018-07-14 05:54 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll 2018-07-26 13:11 - 2018-07-14 05:54 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPolicyManagerBrokerPS.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 001931776 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeangle.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2018-07-26 13:11 - 2018-07-14 05:53 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000972800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2018-07-26 13:11 - 2018-07-14 05:52 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2018-07-26 13:11 - 2018-07-14 05:51 - 001747968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2018-07-26 13:11 - 2018-07-14 05:51 - 001304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2018-07-26 13:11 - 2018-07-14 05:51 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll 2018-07-26 13:11 - 2018-07-14 05:51 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-07-26 13:11 - 2018-07-14 05:50 - 001773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 001359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2018-07-26 13:11 - 2018-07-14 05:50 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-07-26 13:11 - 2018-07-14 05:49 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2018-07-26 13:11 - 2018-07-14 04:35 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2018-07-26 13:11 - 2018-07-13 06:34 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-07-26 13:11 - 2018-07-13 06:32 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-07-26 13:11 - 2018-07-13 06:30 - 002718624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-07-26 13:11 - 2018-07-13 05:59 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-07-26 13:11 - 2018-07-11 12:23 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2018-07-26 13:11 - 2018-07-11 11:24 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2018-07-26 13:07 - 2018-07-11 06:52 - 001471384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2018-07-22 23:35 - 2018-07-22 23:35 - 000002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002582 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002561 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002536 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2018-07-22 23:35 - 2018-07-22 23:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2018-07-20 23:33 - 2018-07-20 23:33 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1125036280-3562319748-3601731155-1001 2018-07-20 23:33 - 2018-07-20 23:33 - 000002435 _____ C:\Users\Oliver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-07-14 09:50 - 2018-07-14 09:50 - 000150528 _____ C:\Users\Oliver\Desktop\Kauf bestätigt OSRAM D2S 66240ULT U....msg 2018-07-14 09:31 - 2018-07-14 09:31 - 000002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk 2018-07-14 09:31 - 2018-07-14 09:31 - 000002254 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk 2018-07-14 09:30 - 2018-07-14 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2018-07-14 09:29 - 2018-07-14 09:29 - 000001200 _____ C:\Users\Public\Desktop\Avira.lnk 2018-07-13 04:01 - 2018-07-13 04:01 - 000051392 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2018-07-13 04:01 - 2018-07-13 04:01 - 000050232 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2018-07-13 04:01 - 2018-07-13 04:01 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2018-07-13 04:01 - 2018-07-13 04:01 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2018-07-11 21:11 - 2018-06-29 03:13 - 000835064 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-07-11 21:11 - 2018-06-29 03:13 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-07-11 01:48 - 2018-07-06 16:20 - 002868640 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2018-07-11 01:48 - 2018-07-06 16:20 - 001610648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000792472 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000689560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000451992 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000309664 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2018-07-11 01:48 - 2018-07-06 16:20 - 000144792 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2018-07-11 01:48 - 2018-07-06 16:20 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2018-07-11 01:48 - 2018-07-06 16:17 - 003932672 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2018-07-11 01:48 - 2018-07-06 16:14 - 000541592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2018-07-11 01:48 - 2018-07-06 15:53 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2018-07-11 01:48 - 2018-07-06 15:53 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2018-07-11 01:48 - 2018-07-06 15:53 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2018-07-11 01:48 - 2018-07-06 15:52 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2018-07-11 01:48 - 2018-07-06 14:06 - 003611368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2018-07-11 01:48 - 2018-07-06 13:53 - 000347136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2018-07-11 01:48 - 2018-07-06 13:51 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2018-07-11 01:48 - 2018-07-06 09:32 - 000480672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2018-07-11 01:48 - 2018-07-06 09:31 - 000462752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2018-07-11 01:48 - 2018-07-06 09:31 - 000035232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2018-07-11 01:48 - 2018-07-06 09:27 - 000057440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.ShellCommon.Broker.dll 2018-07-11 01:48 - 2018-07-06 09:26 - 001148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2018-07-11 01:48 - 2018-07-06 09:26 - 000766608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 002571728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 001945784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 001026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2018-07-11 01:48 - 2018-07-06 09:25 - 000335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 000267680 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-07-11 01:48 - 2018-07-06 09:25 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-07-11 01:48 - 2018-07-06 09:24 - 000380824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2018-07-11 01:48 - 2018-07-06 09:14 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-07-11 01:48 - 2018-07-06 09:14 - 001981896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-07-11 01:48 - 2018-07-06 09:14 - 000988640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2018-07-11 01:48 - 2018-07-06 09:14 - 000573904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2018-07-11 01:48 - 2018-07-06 09:13 - 001620872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-07-11 01:48 - 2018-07-06 09:01 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2018-07-11 01:48 - 2018-07-06 09:01 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsTelemetry.dll 2018-07-11 01:48 - 2018-07-06 09:00 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 001153536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll 2018-07-11 01:48 - 2018-07-06 08:59 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 004867584 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProv2faHelper.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2018-07-11 01:48 - 2018-07-06 08:58 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys 2018-07-11 01:48 - 2018-07-06 08:58 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll 2018-07-11 01:48 - 2018-07-06 08:57 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-07-11 01:48 - 2018-07-06 08:57 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2018-07-11 01:48 - 2018-07-06 08:57 - 000676864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Devices.dll 2018-07-11 01:48 - 2018-07-06 08:57 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2018-07-11 01:48 - 2018-07-06 08:57 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 001817600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 001567744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2018-07-11 01:48 - 2018-07-06 08:56 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProv2faHelper.dll 2018-07-11 01:48 - 2018-07-06 08:55 - 003440128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-07-11 01:48 - 2018-07-06 08:55 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2018-07-11 01:48 - 2018-07-06 08:55 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2018-07-11 01:48 - 2018-07-06 08:55 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2018-07-11 01:48 - 2018-07-06 08:54 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll 2018-07-11 01:48 - 2018-07-06 08:53 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2018-07-11 01:48 - 2018-07-06 08:52 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-07-11 01:41 - 2018-07-11 01:41 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2018-07-11 01:40 - 2018-07-11 01:40 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-07-07 13:56 - 2018-06-15 19:50 - 001376576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-07-07 13:56 - 2018-06-15 19:49 - 021388856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-07-07 13:56 - 2018-06-15 19:48 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2018-07-07 13:56 - 2018-06-15 19:48 - 000338352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2018-07-07 13:56 - 2018-06-15 19:30 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll 2018-07-07 13:56 - 2018-06-15 19:30 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2018-07-07 13:56 - 2018-06-15 19:30 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2018-07-07 13:56 - 2018-06-15 19:29 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2018-07-07 13:56 - 2018-06-15 17:25 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-07-07 13:56 - 2018-06-15 17:22 - 001026896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-07-07 13:56 - 2018-06-15 17:16 - 002206528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL 2018-07-07 13:56 - 2018-06-15 17:02 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2018-07-07 13:56 - 2018-06-15 15:23 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2018-07-07 13:56 - 2018-06-15 07:21 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2018-07-07 13:56 - 2018-06-15 07:12 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-07-07 13:56 - 2018-06-15 07:12 - 000491304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2018-07-07 13:56 - 2018-06-15 07:10 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2018-07-07 13:56 - 2018-06-15 07:10 - 000717208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 002830240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-07-07 13:56 - 2018-06-15 07:09 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 001742272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 001659296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 001112600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2018-07-07 13:56 - 2018-06-15 07:09 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2018-07-07 13:56 - 2018-06-15 07:08 - 004403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2018-07-07 13:56 - 2018-06-15 07:08 - 002062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:08 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:08 - 001288840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:08 - 000898760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2018-07-07 13:56 - 2018-06-15 07:07 - 001611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2018-07-07 13:56 - 2018-06-15 07:05 - 000550608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2018-07-07 13:56 - 2018-06-15 07:04 - 001462824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2018-07-07 13:56 - 2018-06-15 07:04 - 001251736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 006572000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 004788504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 002163184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 001805752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 001710240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 001380192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 001020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2018-07-07 13:56 - 2018-06-15 07:03 - 001011968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2018-07-07 13:56 - 2018-06-15 06:49 - 002962944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-07-07 13:56 - 2018-06-15 06:46 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-07-07 13:56 - 2018-06-15 06:45 - 002548736 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2018-07-07 13:56 - 2018-06-15 06:45 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2018-07-07 13:56 - 2018-06-15 06:43 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2018-07-07 13:56 - 2018-06-15 06:43 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll 2018-07-07 13:56 - 2018-06-15 06:41 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2018-07-07 13:56 - 2018-06-15 06:41 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2018-07-07 13:56 - 2018-06-15 06:41 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-07-07 13:56 - 2018-06-15 06:40 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2018-07-07 13:56 - 2018-06-15 06:40 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2018-07-07 13:56 - 2018-06-15 06:39 - 002583552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-07-07 13:56 - 2018-06-15 06:39 - 000916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2018-07-07 13:56 - 2018-06-15 06:39 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-07-07 13:56 - 2018-06-15 06:39 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-07-07 13:56 - 2018-06-15 06:38 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2018-07-07 13:56 - 2018-06-15 06:37 - 001374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-07-07 13:55 - 2018-06-15 19:55 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll 2018-07-07 13:55 - 2018-06-15 19:53 - 000348256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2018-07-07 13:55 - 2018-06-15 19:34 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe 2018-07-07 13:55 - 2018-06-15 19:34 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll 2018-07-07 13:55 - 2018-06-15 19:33 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2018-07-07 13:55 - 2018-06-15 19:33 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll 2018-07-07 13:55 - 2018-06-15 19:33 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2018-07-07 13:55 - 2018-06-15 19:32 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll 2018-07-07 13:55 - 2018-06-15 19:32 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2018-07-07 13:55 - 2018-06-15 19:31 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe 2018-07-07 13:55 - 2018-06-15 19:31 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2018-07-07 13:55 - 2018-06-15 19:30 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2018-07-07 13:55 - 2018-06-15 19:29 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2018-07-07 13:55 - 2018-06-15 19:29 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe 2018-07-07 13:55 - 2018-06-15 19:29 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2018-07-07 13:55 - 2018-06-15 19:29 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2018-07-07 13:55 - 2018-06-15 19:29 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll 2018-07-07 13:55 - 2018-06-15 19:28 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll 2018-07-07 13:55 - 2018-06-15 19:28 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2018-07-07 13:55 - 2018-06-15 17:06 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll 2018-07-07 13:55 - 2018-06-15 17:04 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe 2018-07-07 13:55 - 2018-06-15 17:04 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll 2018-07-07 13:55 - 2018-06-15 17:03 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe 2018-07-07 13:55 - 2018-06-15 17:03 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2018-07-07 13:55 - 2018-06-15 17:01 - 002015744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2018-07-07 13:55 - 2018-06-15 17:01 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll 2018-07-07 13:55 - 2018-06-15 09:11 - 000611232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-07-07 13:55 - 2018-06-15 09:10 - 000048544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2018-07-07 13:55 - 2018-06-15 09:03 - 000083360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2018-07-07 13:55 - 2018-06-15 07:19 - 000116632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe 2018-07-07 13:55 - 2018-06-15 07:19 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2018-07-07 13:55 - 2018-06-15 07:18 - 000228768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2018-07-07 13:55 - 2018-06-15 07:16 - 000562080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2018-07-07 13:55 - 2018-06-15 07:16 - 000433560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2018-07-07 13:55 - 2018-06-15 07:15 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2018-07-07 13:55 - 2018-06-15 07:13 - 000324000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2018-07-07 13:55 - 2018-06-15 07:12 - 000661152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2018-07-07 13:55 - 2018-06-15 07:12 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2018-07-07 13:55 - 2018-06-15 07:12 - 000118872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2018-07-07 13:55 - 2018-06-15 07:10 - 000326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll 2018-07-07 13:55 - 2018-06-15 07:09 - 000247984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL 2018-07-07 13:55 - 2018-06-15 07:08 - 001921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2018-07-07 13:55 - 2018-06-15 07:08 - 001150408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2018-07-07 13:55 - 2018-06-15 07:08 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2018-07-07 13:55 - 2018-06-15 07:08 - 000642088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll 2018-07-07 13:55 - 2018-06-15 07:08 - 000604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-07-07 13:55 - 2018-06-15 07:08 - 000500552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2018-07-07 13:55 - 2018-06-15 07:08 - 000413816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2018-07-07 13:55 - 2018-06-15 07:08 - 000072768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys 2018-07-07 13:55 - 2018-06-15 07:04 - 001397192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2018-07-07 13:55 - 2018-06-15 07:04 - 000719552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2018-07-07 13:55 - 2018-06-15 07:04 - 000281080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll 2018-07-07 13:55 - 2018-06-15 07:04 - 000105376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2018-07-07 13:55 - 2018-06-15 07:03 - 000770152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2018-07-07 13:55 - 2018-06-15 07:03 - 000472136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2018-07-07 13:55 - 2018-06-15 07:03 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2018-07-07 13:55 - 2018-06-15 07:03 - 000232488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL 2018-07-07 13:55 - 2018-06-15 07:03 - 000129192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2018-07-07 13:55 - 2018-06-15 06:48 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll 2018-07-07 13:55 - 2018-06-15 06:47 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2018-07-07 13:55 - 2018-06-15 06:47 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll 2018-07-07 13:55 - 2018-06-15 06:47 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll 2018-07-07 13:55 - 2018-06-15 06:46 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2018-07-07 13:55 - 2018-06-15 06:46 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2018-07-07 13:55 - 2018-06-15 06:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2018-07-07 13:55 - 2018-06-15 06:46 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2018-07-07 13:55 - 2018-06-15 06:46 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2018-07-07 13:55 - 2018-06-15 06:45 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2018-07-07 13:55 - 2018-06-15 06:45 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2018-07-07 13:55 - 2018-06-15 06:45 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2018-07-07 13:55 - 2018-06-15 06:45 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2018-07-07 13:55 - 2018-06-15 06:45 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandlerPS.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2018-07-07 13:55 - 2018-06-15 06:44 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-07-07 13:55 - 2018-06-15 06:44 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll 2018-07-07 13:55 - 2018-06-15 06:43 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2018-07-07 13:55 - 2018-06-15 06:43 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2018-07-07 13:55 - 2018-06-15 06:43 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-07-07 13:55 - 2018-06-15 06:43 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll 2018-07-07 13:55 - 2018-06-15 06:43 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll 2018-07-07 13:55 - 2018-06-15 06:43 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2018-07-07 13:55 - 2018-06-15 06:43 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000978432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-07-07 13:55 - 2018-06-15 06:42 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2018-07-07 13:55 - 2018-06-15 06:42 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll 2018-07-07 13:55 - 2018-06-15 06:42 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2018-07-07 13:55 - 2018-06-15 06:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll 2018-07-07 13:55 - 2018-06-15 06:41 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2018-07-07 13:55 - 2018-06-15 06:41 - 000811520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2018-07-07 13:55 - 2018-06-15 06:41 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2018-07-07 13:55 - 2018-06-15 06:41 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2018-07-07 13:55 - 2018-06-15 06:41 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-07-07 13:55 - 2018-06-15 06:41 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll 2018-07-07 13:55 - 2018-06-15 06:40 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2018-07-07 13:55 - 2018-06-15 06:40 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll 2018-07-07 13:55 - 2018-06-15 06:38 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-07-07 13:55 - 2018-06-15 06:37 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2018-07-07 13:55 - 2018-06-15 06:36 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys 2018-07-07 13:55 - 2018-06-01 07:18 - 000058524 _____ C:\WINDOWS\system32\srms.dat 2018-07-07 13:55 - 2018-05-20 13:53 - 000792984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-07-07 13:55 - 2018-05-20 13:52 - 000413080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-06-30 18:19 - 2018-06-30 18:19 - 000002315 _____ C:\Users\Oliver\Desktop\WhatsApp.lnk 2018-06-30 10:42 - 2018-06-30 10:43 - 000016968 _____ C:\WINDOWS\SysWOW64\Defrag.debuglog ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-07-27 13:45 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-07-27 13:28 - 2017-06-11 13:16 - 000000000 ____D C:\ProgramData\NVIDIA 2018-07-27 13:26 - 2018-05-19 10:46 - 000003778 _____ C:\WINDOWS\System32\Tasks\AviraSystemSpeedupUpdate 2018-07-27 13:26 - 2018-04-30 00:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2018-07-27 13:25 - 2018-05-19 10:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-07-26 19:03 - 2018-05-19 10:29 - 002004578 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-07-26 19:03 - 2018-04-12 18:13 - 000855274 _____ C:\WINDOWS\system32\perfh007.dat 2018-07-26 19:03 - 2018-04-12 18:13 - 000191740 _____ C:\WINDOWS\system32\perfc007.dat 2018-07-26 19:03 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF 2018-07-26 18:57 - 2018-05-19 10:34 - 000000000 ____D C:\Users\Oliver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2018-07-26 18:55 - 2018-05-19 10:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-07-26 18:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-07-26 18:48 - 2018-05-19 10:34 - 000000000 ____D C:\Users\Oliver 2018-07-26 18:44 - 2016-07-31 19:01 - 000000000 ____D C:\AdwCleaner 2018-07-26 17:03 - 2014-09-14 21:05 - 000000000 ____D C:\Users\Oliver\Documents\Outlook-Dateien 2018-07-26 17:02 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-07-26 16:57 - 2018-05-19 10:26 - 000530360 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-07-26 16:57 - 2018-04-11 23:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2018-07-26 16:57 - 2016-11-20 15:32 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-07-26 16:57 - 2015-08-16 22:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\UNP 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\PrintDialog 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-07-26 16:56 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2018-07-26 13:15 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-07-25 15:40 - 2016-11-30 00:24 - 000000000 ____D C:\Users\Oliver\AppData\LocalLow\Mozilla 2018-07-25 15:40 - 2015-08-16 22:58 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-07-22 23:33 - 2010-10-25 09:28 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-07-22 22:03 - 2018-05-19 11:14 - 000152688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2018-07-22 13:58 - 2018-06-23 15:41 - 000000000 ____D C:\ProgramData\Packages 2018-07-21 22:02 - 2018-01-06 18:53 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant 2018-07-20 23:33 - 2015-11-19 21:57 - 000000000 ___RD C:\Users\Oliver\OneDrive 2018-07-20 23:22 - 2016-09-25 17:27 - 000000000 ____D C:\Users\Oliver\.mediathek3 2018-07-17 19:25 - 2011-03-10 00:00 - 000563832 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2018-07-14 09:31 - 2011-03-20 00:14 - 000000000 ____D C:\Program Files\Google 2018-07-14 09:30 - 2015-08-02 18:08 - 000000000 ____D C:\Program Files (x86)\Dropbox 2018-07-14 09:29 - 2014-12-05 00:43 - 000000000 ____D C:\ProgramData\Package Cache 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2018-07-11 21:10 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2018-07-11 21:10 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-07-11 21:10 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser 2018-07-11 02:01 - 2013-07-22 18:52 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-07-11 01:54 - 2011-03-06 20:13 - 134675576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-07-08 06:14 - 2018-04-30 00:56 - 000179376 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2018-07-08 06:14 - 2018-04-30 00:56 - 000169864 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2018-07-07 20:04 - 2017-12-10 00:47 - 000000000 ___RD C:\Users\Oliver\3D Objects 2018-07-07 20:04 - 2016-04-27 07:56 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-07-07 20:02 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2018-06-30 19:04 - 2017-09-02 14:41 - 000000000 ____D C:\Users\Oliver\AppData\Roaming\WhatsApp 2018-06-30 18:19 - 2017-09-03 23:05 - 000000000 ____D C:\Users\Oliver\AppData\Local\WhatsApp 2018-06-30 18:19 - 2017-09-02 14:41 - 000000000 ____D C:\Users\Oliver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2018-06-30 11:16 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ModemLogs 2018-06-30 11:16 - 2016-08-10 22:49 - 000000000 ____D C:\Windows10Upgrade 2018-06-30 11:16 - 2015-10-06 13:56 - 000000000 ____D C:\Program Files\PDFCreator 2018-06-30 11:16 - 2014-12-25 00:09 - 000000000 ____D C:\Users\Oliver\AppData\Roaming\Steganos VPN 2018-06-30 11:16 - 2014-12-05 01:36 - 000000000 ____D C:\Users\Oliver\AppData\Roaming\Steganos 2018-06-30 11:16 - 2013-11-16 17:58 - 000000000 ____D C:\TEMP 2018-06-28 03:07 - 2018-02-14 05:15 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-01-04 21:47 - 2012-05-18 19:12 - 000007668 _____ () C:\Users\Oliver\AppData\Roaming\.freeciv-client-rc-2.3 2011-09-22 20:20 - 2018-04-18 01:50 - 000021504 _____ () C:\Users\Oliver\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-12-31 14:20 - 2012-12-31 14:20 - 000001429 _____ () C:\Users\Oliver\AppData\Local\RecConfig.xml 2015-12-14 19:40 - 2016-03-03 22:39 - 000007599 _____ () C:\Users\Oliver\AppData\Local\Resmon.ResmonCfg 2014-01-11 14:47 - 2014-01-11 14:50 - 000019456 _____ () C:\Users\Oliver\AppData\Local\WebpageIcons.db ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2018-05-19 10:26 ==================== Ende von FRST.txt ============================ |
27.07.2018, 13:18 | #6 |
| Bereinigung durch ADWCleaner führt zum AbsturzCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21.07.2018 durchgeführt von Oliver (27-07-2018 13:54:09) Gestartet von C:\Users\Oliver\Desktop Windows 10 Home Version 1803 17134.191 (X64) (2018-05-19 08:46:49) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1125036280-3562319748-3601731155-500 - Administrator - Disabled) Andrea (S-1-5-21-1125036280-3562319748-3601731155-1006 - Limited - Enabled) => C:\Users\Andrea DefaultAccount (S-1-5-21-1125036280-3562319748-3601731155-503 - Limited - Disabled) Gast (S-1-5-21-1125036280-3562319748-3601731155-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1125036280-3562319748-3601731155-1010 - Limited - Enabled) Oliver (S-1-5-21-1125036280-3562319748-3601731155-1001 - Administrator - Enabled) => C:\Users\Oliver Oliver_2 (S-1-5-21-1125036280-3562319748-3601731155-1007 - Administrator - Enabled) => C:\Users\Oliver_2 WDAGUtilityAccount (S-1-5-21-1125036280-3562319748-3601731155-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) . . (HKLM\...\{BDB21711-3628-4159-B1E2-0BF55D105E2E}) (Version: 7.1 - Intel) Hidden . . . (HKLM-x32\...\{46267326-17DC-4A08-94BB-0FB32E31ACC2}) (Version: 3.1.1.2 - Intel) Hidden „Messenger“ pagalbinė priemonė (HKLM-x32\...\{7E274911-32ED-4489-9B04-4EF100D0E4D3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden „Windows Live Essentials“ (HKLM-x32\...\{19ADD3BF-C42B-47DC-81C6-5E9731B668C4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden „Windows Live Mail“ (HKLM-x32\...\{2720009D-9566-45A7-A370-0E6DAC313F3F}) (Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden „Windows Live Messenger“ (HKLM-x32\...\{539A0CEA-17E4-4FE4-A5E8-EC5D40610A79}) (Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden „Windows Live“ fotogalerija (HKLM-x32\...\{C877E454-FA36-409A-A00E-1240CEC61BBD}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 1&1 Surf-Stick (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - ) 7-Zip 18.05 (HKLM-x32\...\{23170F69-40C1-2701-1805-000001000000}) (Version: 18.05.00.0 - Igor Pavlov) 7-Zip 9.36 beta (HKLM-x32\...\7-Zip) (Version: - ) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.011.20055 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated) Adobe Digital Editions 3.0 (HKLM-x32\...\Adobe Digital Editions 3.0) (Version: 3.0.1 - Adobe Systems Incorporated) Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.2.202 - Adobe Systems, Inc.) Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media) Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version: - ) Amazon Music (HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\Amazon Amazon Music) (Version: 4.3.2.1367 - Amazon Services LLC) ANNO 1503 Königs- Edition (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 3.05.042.00 - ) Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{9E005AAA-81A3-478E-8944-532D350952EE}) (Version: 11.3.1.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation) Atheros Client Installation Program (HKLM-x32\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.5.0621 - Atheros) Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.) AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1997356270.48.56.40439018 - Audible, Inc.) Avira (HKLM-x32\...\{0bb4751a-1ff2-4c79-80df-5bab5da63823}) (Version: 1.2.116.18787 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{218C5045-A3A1-486C-91F5-A1B4D4772F8D}) (Version: 1.2.116.18787 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.36.211 - Avira Operations GmbH & Co. KG) Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG) Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.14.1.26975 - Avira Operations GmbH & Co. KG) Avira Software Updater (HKLM-x32\...\{A7F41426-5F75-4695-BE5D-B011821079A3}) (Version: 2.0.5.48230 - Avira Operations GmbH & Co. KG) Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.12.0.7662 - Avira Operations GmbH & Co. KG) BatteryLifeExtender (HKLM-x32\...\{74A579FB-EB06-497D-B194-01590D6FE51A}) (Version: 1.0.5 - Samsung) Bing Rewards Client Installer (HKLM-x32\...\{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}) (Version: 16.0.345.0 - Microsoft Corporation) Hidden Bluesoleil2.7.0.8 VoIP Release 070930 (HKLM-x32\...\{3A56CA23-F10D-4755-BD25-57578CBFD59C}) (Version: 2.7.0.8 VoIP Release 070930 - IVT Corporation) Bonbon Quest (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111768557}) (Version: - Oberon Media) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Cake Mania (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}) (Version: - Oberon Media) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.) Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - ) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.) Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - ) Canon MP640 series Benutzerregistrierung (HKLM-x32\...\Canon MP640 series Benutzerregistrierung) (Version: - ) Canon MP640 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series) (Version: - ) Canon MX920 series Benutzerregistrierung (HKLM-x32\...\Canon MX920 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.) Canon MX920 series On-screen Manual (HKLM-x32\...\Canon MX920 series On-screen Manual) (Version: 7.6.0 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.) Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - ) CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - ) Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version: - ) Civilization III v1.21f (HKLM-x32\...\{31E2413D-8AA1-43EC-8B8D-77B65ADA4611}) (Version: - ) Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Complément Messenger (HKLM-x32\...\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Complemento Messenger (HKLM-x32\...\{3A09ED0F-8DDF-47BB-B53D-841AB9D1D3A7}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.) CyberLink PowerDVD 8 (HKLM-x32\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.) CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.1.1812 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Daycare Nightmare (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113128447}) (Version: - Oberon Media) Deaktivierungs-Add-on für Browser von Google Analytics (HKLM\...\{9F540EA8-086E-4D53-B845-A06E6903DED6}) (Version: 0.9.6.0 - Google Inc.) Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation) Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform) DesignCAD 3D Max 22 (HKLM-x32\...\{CCB44106-246E-45A5-8507-801F39EFB55B}) (Version: 22.0.0 - IMSIDesign) Deutsche Post E-Porto (HKLM-x32\...\{98595F74-7670-4CC6-810F-57AFA47222B0}) (Version: 2.3.0 - Deutsche Post AG) Doplnok programu Messenger (HKLM-x32\...\{6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Dropbox (HKLM-x32\...\Dropbox) (Version: 53.4.67 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.75.1 - Dropbox, Inc.) Hidden DVDx 4.0 (HKLM-x32\...\DVDx 4.0) (Version: 4.0 - labDV) Easy Display Manager (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.2 - Samsung Electronics Co., Ltd.) Easy Network Manager (HKLM-x32\...\{F9557866-B4C8-4CE5-8508-0E386BDC20B2}) (Version: 4.3.3 - Samsung) Easy Poster Printer (HKLM-x32\...\{A8EC49E4-5EB8-444C-8CE0-446904D5E629}) (Version: 2.0.3 - GD Software) Easy SpeedUp Manager (HKLM-x32\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.) EasyBatteryManager (HKLM-x32\...\{4A331D24-A9E8-484F-835E-1BA7B139689C}) (Version: 4.0.0.4 - Samsung) E-POST MAILER (HKLM-x32\...\{0A6A93FF-29E4-488E-88FC-DE0EDFBABB84}) (Version: 2.0.1.1925 - Deutsche Post AG) Hidden E-POST MAILER (HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\{95e3a0df-045e-4fe7-9599-2bc0b80bf413}) (Version: 2.0.1.1925 - Deutsche Post AG) E-POST MAILER Drucker (HKLM\...\{D1FFAF34-8914-4F00-9808-BBB0720AD10A}) (Version: 2.0.1.1925 - Deutsche Post AG) Hidden E-POST MAILER Start (HKLM-x32\...\{A0E193BE-835F-4662-9EB2-88CBC27A375C}) (Version: 1.0.0.0 - Deutsche Post AG) Hidden ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated) FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) Flip Words (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}) (Version: - Oberon Media) FLV.com FLV Downloader 11.1 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-76FAF2D9B362}) (Version: 11.1 - GreenTree Applications SRL) Folder Size (64-bit) (HKLM\...\{F24FF688-7138-4CCF-A83F-71E9FB01170E}) (Version: 2.6 - Brio) Fotogalerija Windows Live (HKLM-x32\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.70.220 - Digital Wave Ltd) Freeciv 2.3.0 (GTK+ client) (HKLM-x32\...\Freeciv-2.3.0-gtk2) (Version: - ) Galapago (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version: - Oberon Media) Galeria de Fotografias do Windows Live (HKLM-x32\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (HKLM-x32\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (HKLM-x32\...\{CB66242D-12B1-4494-82D2-6F53A7E024A3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Gem Shop (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110521483}) (Version: - Oberon Media) Ghostery (HKLM-x32\...\Ghostery) (Version: - Ghostery Inc) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Earth Pro (HKLM\...\{B29B4ACE-362A-47D2-AB37-87C721D09803}) (Version: 7.3.2.5487 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden GPL Ghostscript (HKLM\...\GPL Ghostscript 9.14) (Version: 9.14 - Artifex Software Inc.) Hoffmans Lotto-Experte EJ V1.25 (HKLM\...\Hoffmanns Lotto-Experte EuroJackpot_is1) (Version: - Hoffmann Software - Eppendorf) Insaniquarium Deluxe (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793}) (Version: - Oberon Media) Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{D16A2127-B927-4379-B153-3DEC091E4EEB}) (Version: 13.02.1000 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden Intel® Driver & Support Assistant (HKLM-x32\...\{35fa0dcf-eda2-402b-b1f0-64973bb1938a}) (Version: 3.1.1.2 - Intel) Java 8 Update 172 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180172F0}) (Version: 8.0.1720.11 - Oracle Corporation) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.25.20150529 - LG Electronics) LG United Mobile Drivers (HKLM-x32\...\{4DE95ED9-0A29-4C4F-8463-35857CF9BA36}) (Version: 3.14.1 - LG Electronics) LifeGlobe Goldfish Aquarium (HKLM-x32\...\LifeGlobe Goldfish Aquarium) (Version: - ) LifeGlobe Sharks, Terrors of the Deep (HKLM-x32\...\LifeGlobe Sharks, Terrors of the Deep) (Version: - ) MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Goya burnR (MSI) (HKLM\...\{4745C004-7D5D-42BB-816A-79BF29C3A65C}) (Version: 4.3.2.0 - MAGIX Software GmbH) Hidden MAGIX Goya burnR (MSI) (HKLM-x32\...\MX.{4745C004-7D5D-42BB-816A-79BF29C3A65C}) (Version: 4.3.2.0 - MAGIX Software GmbH) MAGIX music cleaning lab 2005 deLuxe (HKLM-x32\...\MAGIX music cleaning lab 2005 deLuxe) (Version: 6.0.0.0 - MAGIX AG) MAGIX Music Maker 2013 (HKLM\...\{E7F7CA64-C0FC-4499-BC4D-C764E24CA67B}) (Version: 19.0.7.67 - MAGIX Software GmbH) Hidden MAGIX Music Maker 2013 (HKLM-x32\...\MX.{E7F7CA64-C0FC-4499-BC4D-C764E24CA67B}) (Version: 19.0.7.67 - MAGIX Software GmbH) MAGIX Music Maker 2013 Trial Soundpools (HKLM\...\{D826D424-4166-40D5-A70C-9C3A78F01ACD}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden Mahjong Escape Ancient China (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}) (Version: - Oberon Media) Malwarebytes Version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes) Manager (HKLM-x32\...\{A11F05A4-7CAD-4F85-8C85-DCA18E3E208D}) (Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden Maniac Mansion Deluxe (HKLM-x32\...\Maniac Mansion Deluxe) (Version: - ) Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 11.22.3.3 - Marvell) Media Go (HKLM-x32\...\{2BF9702B-52EE-4841-83C4-B5E640B6C97A}) (Version: 2.2.223 - Sony) Media Go Video Playback Engine 1.92.167.06150 (HKLM-x32\...\{A4F094CE-9B05-FB0C-DD73-A85DE5D8D283}) (Version: 1.92.167.06150 - Sony) Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Assistent (HKLM-x32\...\{56D42B00-572C-4AE9-BCFB-CD45A3B5D0E1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{066219C8-4BE6-46D7-9E01-60FCFA6B32DC}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{082E37F5-3924-4168-A69A-1B6B1FEA587C}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{3889988F-762B-4B85-AB17-71C9CC3AE445}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{50816F92-1652-4A7C-B9BC-48F682742C4B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{6DD3B54B-F0D0-4A69-8344-F52033225A02}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{781E0319-15CD-4A4C-A47E-D9FFF697E7A1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{8142D25E-028A-4563-86ED-5755783C8029}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{847C879C-1467-4924-A491-1302B4C58F70}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{939C80FA-96C9-44A6-B318-8E7D8BD8481B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{96403552-88D1-429F-9C92-388B814B885E}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{B44F3823-52DD-45CA-A916-8B320778715D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{C7DAD22D-29D4-438F-B986-03B9ED582EA4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{D4F81B27-4054-4AD6-A588-265508BAA17C}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Companion (HKLM-x32\...\{D58E381C-DE02-46A9-B9D1-A2CB807D2676}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger kísérő (HKLM-x32\...\{F3ECEB0A-82A0-4DB9-BB44-393A66BA0871}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Pratilac (HKLM-x32\...\{902585EB-8FA3-43A5-AD1C-5C9821A77114}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger Suradnik (HKLM-x32\...\{3FD1CB9F-807F-451B-926C-9D19C84CFC61}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger 사이트 공유 (HKLM-x32\...\{AB067785-9646-456B-91C3-E71228132A4C}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger 分享元件 (HKLM-x32\...\{CF088261-BC81-4FB9-9BA0-7B5B9602D01A}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger 浏览器插件 (HKLM-x32\...\{7F061FA8-5A87-4758-876B-17EE28B358D0}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger-kumppani (HKLM-x32\...\{D657CCB5-9F2F-4D3C-B93D-F77EBEF79B66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Camera Codec Pack (HKLM\...\{F7930EE9-0929-439D-A57B-D40C2C69C890}) (Version: 6.3.9723.0 - Microsoft Corporation) Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version: - Microsoft Corporation) Microsoft Mathematics (64-bit) (HKLM\...\{E57B7E0A-8BE5-42E2-BE60-C07ED680A063}) (Version: 4.0 - Microsoft Corporation) Microsoft Office 2003 Primary Interop Assemblies (HKLM-x32\...\{91490409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.6553.0 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.10228.20134 - Microsoft Corporation) Microsoft Office Standard Edition 2003 (HKLM-x32\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\OneDriveSetup.exe) (Version: 18.111.0603.0006 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60724 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60724 - Microsoft Corporation) Microsoft Windows SDK for Windows 7 (7.0) (HKLM\...\SDKSetup_7.0.7600.16385.40715) (Version: 7.0.7600.16385.40715 - Microsoft Corporation) MM Eisenbahn-Bildschirmschoner V3 (HKLM-x32\...\MM Eisenbahn-Bildschirmschoner V3) (Version: - ) Mozilla Firefox 60.0.1 (x64 de) (HKLM\...\Mozilla Firefox 60.0.1 (x64 de)) (Version: 60.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 60.0.1.6710 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger) No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23) NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.10228.20134 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.10228.20134 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.10228.20134 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.10228.20134 - Microsoft Corporation) Hidden OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.6.1 - Steganos Software GmbH) OpenTTD 1.1.5 (HKLM-x32\...\OpenTTD) (Version: 1.1.5 - OpenTTD) PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.26.25466 - pdfforge GmbH) PDF Architect 4 Asian Fonts Pack (HKLM\...\{DC5BA67E-C71F-43FD-90FE-3081FAC61EC9}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Convert Module (HKLM\...\{084F8FB4-5A8D-430B-A1B4-2B2210971DFB}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Create Module (HKLM\...\{D646643B-56BD-43B2-9932-9C03D7E90FED}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Edit Module (HKLM\...\{792B82BA-6895-4719-B603-E198AEE90D68}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Forms Module (HKLM\...\{FBD5F440-5096-44EA-9A03-5807E9613A75}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Insert Module (HKLM\...\{64CAE4E1-0ED7-4052-A3C2-7EC33530113F}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 OCR Module (HKLM\...\{2BBD9E71-E416-4120-937A-DC0C803A7B85}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Review Module (HKLM\...\{7C2E2DC7-178A-49FB-89CF-DD0F969AA471}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Secure Module (HKLM\...\{9726FDA2-DF5C-4837-8359-06F3FC1B2B7F}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 View Module (HKLM\...\{FF4FA406-055A-479E-B025-1AAA7FFAA39F}) (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 3.2.0 - pdfforge GmbH) Pingus (HKLM-x32\...\Pingus) (Version: 0.7.6 - ) PlayStation(R)Network Downloader (HKLM-x32\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.07.00849 - Sony Computer Entertainment Inc.) PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.9.4.14625 - Sony Computer Entertainment Inc.) Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden PokerTH (HKLM-x32\...\PokerTH 0.8.3) (Version: 0.8.3 - www.pokerth.net) Pomocnik Messenger (HKLM-x32\...\{BD8DA595-F501-4ABE-85A0-5C23E82472A0}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pošta Windows Live (HKLM-x32\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Raccolta foto di Windows Live (HKLM-x32\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Radio.fx (HKLM-x32\...\Tobit Radio.fx Server) (Version: - Tobit.Software) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Software (HKLM-x32\...\{0F796312-289C-40CA-856C-9FBCF5E83342}) (Version: 0133.09.1202 - REALTEK Semiconductor Corp.) Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.7 - Samsung) Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Samsung Recovery Solution 4 (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung) Samsung R-Series (HKLM-x32\...\{3EED7541-55F8-4DC6-B9CD-28762D71310E}) (Version: 1.0 - Samsung) Samsung Support Center (HKLM-x32\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.0.2 - Samsung) Samsung Update Plus (HKLM-x32\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.) Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) SereneScreen Marine Aquarium (HKLM-x32\...\SereneScreen Marine Aquarium) (Version: - ) Sid Meier's Railroad Tycoon (HKLM-x32\...\Sid Meier's Railroad Tycoon) (Version: 1.0 - 2K Games) Ski Challenge 15 (HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\sc15-GAMETWIST_MAIN) (Version: - ) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Slingo (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733}) (Version: - Oberon Media) Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.17.4.201703061453 - Sony Mobile Communications Inc.) Sony PC Companion 2.10.275 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.275 - Sony) Spremljevalec Messenger (HKLM-x32\...\{F14F9EE9-9B68-42B4-90F7-0924F7619281}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Steganos Password Manager 15 (HKLM-x32\...\{B8F35E03-DC02-4CAB-AEF2-577B4CA25E8A}) (Version: 15.2.4 - Steganos Software GmbH) Steganos Privacy Suite 17 (HKLM-x32\...\{7381E9AB-68A4-418F-8130-88666557C6F4}) (Version: 17.1.3 - Steganos Software GmbH) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.22.0 - Synaptics Incorporated) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.95388 - TeamViewer) Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH) Touchpad Blocker (HKLM-x32\...\Touchpad Blocker) (Version: 2.9 - KARPOLAN) User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) VLC media player (HKLM\...\VLC media player) (Version: 3.0.2 - VideoLAN) WhatsApp (HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\WhatsApp) (Version: 0.2.9928 - WhatsApp) Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17387 - Microsoft Corporation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Xperia Companion (HKLM-x32\...\{62FC2304-E50B-4476-8AB0-8DE598A57076}) (Version: 1.5.3.0 - Sony) Hidden Xperia Companion (HKLM-x32\...\{8d53ad63-24f0-4f9e-bb4f-53c7d69a67d6}) (Version: 1.5.3.0 - Sony) Xperia Companion Service (HKLM\...\{1BF08694-7353-47AD-B618-6A619DC2DD2F}) (Version: 1.5.3.0 - Sony) Hidden Zattoo4 4.0.5 (HKLM-x32\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.) Συλλογή φωτογραφιών του Windows Live (HKLM-x32\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Компаньон Messenger (HKLM-x32\...\{3705D53F-BB01-4BEE-8585-289E71CAC4B4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (HKLM-x32\...\{E83DC314-C926-4214-AD58-147691D6FE9F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Помощник на Messenger (HKLM-x32\...\{FEA0181F-3758-46DA-B7EC-F3CDFA7E0CE7}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (HKLM-x32\...\{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}) (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (HKLM-x32\...\{77F69CA1-E53D-4D77-8BA3-FA07606CC851}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (HKLM-x32\...\{4444F27C-B1A8-464E-9486-4C37BAB39A09}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (HKLM-x32\...\{CE929F09-3853-4180-BD90-30764BFF7136}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden מסייע Messenger (HKLM-x32\...\{AB5977C5-11AE-4003-BA7D-261C48F2BC35}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (HKLM-x32\...\{0A4C4B29-5A9D-4910-A13C-B920D5758744}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (HKLM-x32\...\{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [01MemopalBackedUp] -> {8ED3CC2D-6BC2-43AD-8C43-F51FBB413AE6} => -> Keine Datei ShellIconOverlayIdentifiers: [02MemopalToBackup] -> {2CDD871E-60EB-40BD-9721-A1CB57042F75} => -> Keine Datei ShellIconOverlayIdentifiers: [03MemopalPartiallyBackedUp] -> {95DDC869-FC98-4D47-BD34-2EDC9AA09C01} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers1-x32: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Keine Datei ContextMenuHandlers1-x32: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd) ContextMenuHandlers1-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ContextMenuHandlers1-x32: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers1-x32-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) ContextMenuHandlers1-x32-x32: [PDFArchitect4_ManagerExt] -> {3AECFCB3-8472-48E9-BC7B-5A3CD945C886} => C:\Program Files\PDF Architect 4\creator-context-menu.dll [2016-01-15] (pdfforge GmbH) ContextMenuHandlers1-x32-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\WINDOWS\system32\mscoree.dll [2018-04-12] (Microsoft Corporation) ContextMenuHandlers1-x32-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-07-08] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1-x32-x32: [SystemSpeedupFilesMenu] -> {ef263503-8f0e-3e6a-ae2e-fe0b4b441d52} => C:\WINDOWS\system32\mscoree.dll [2018-04-12] (Microsoft Corporation) ContextMenuHandlers1-x32-x32: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => -> Keine Datei ContextMenuHandlers2: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 17\ShellExtension.dll [2016-07-28] () ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers3: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Privacy Suite 17\ShellExtension.dll [2016-07-28] () ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers4-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ContextMenuHandlers4-x32: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers4-x32: [SystemSpeedupFoldersMenu] -> {3d52b24d-33bb-3895-99ea-a0156f24a3f9} => C:\WINDOWS\system32\mscoree.dll [2018-04-12] (Microsoft Corporation) ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-07-13] (Dropbox, Inc.) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation) ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {cefaf456-bc17-3f4b-b7d9-75070925911b} => C:\WINDOWS\system32\mscoree.dll [2018-04-12] (Microsoft Corporation) ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers6-x32: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd) ContextMenuHandlers6-x32: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers6-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-07-08] (Avira Operations GmbH & Co. KG) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {04593281-20AC-446B-A05E-4263A4D724BF} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.) Task: {0F4CA353-274D-4D63-B7B9-4C45B3D1C2E8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {1631C8A9-F335-49A7-951A-0C1534B33E70} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation) Task: {1B4AA8F6-9C5E-42A5-8D25-F9E29C6E09E2} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation) Task: {1C5430A9-DA4D-4BA7-924A-65AC9077F57E} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {1CF02AB3-0D73-4DDF-AF75-5F847A04DE59} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {1DF4211F-3816-40B7-948B-59284566F43D} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2018-07-27] (Avira Operations GmbH & Co. KG ) Task: {245CC674-6B23-44EA-BD50-C2F8A8874ACA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-07-20] (Microsoft Corporation) Task: {2712BDFD-6584-4DB3-BCA6-C86A6F7013D5} - System32\Tasks\{C7A66041-A9FE-4C6A-BFEC-C177FB26015C} => E:\setup.exe Task: {2741EE23-61F1-4CB6-8B87-3CE06D53F520} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe Task: {2D3EF697-CC5F-46AC-8F51-6361D11A6F9E} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {2D527C4B-43A1-4366-A610-91A7ADEB8AF8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-07-20] (Microsoft Corporation) Task: {2EDC3D1C-FF5B-458C-A1D2-B0ADD183223F} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {30F3D06C-8002-47FE-8CCE-93D776915B20} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2018-03-28] (Oracle Corporation) Task: {30F8FE30-73A5-4DF1-991C-B429AAF42111} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-07-13] (Microsoft Corporation) Task: {37AA7302-DFAD-4DA1-BE1F-C0CDFCE52F1F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {4081E48B-112D-4E32-8EF9-7FDB6E4D0032} - \Games\UpdateCheck_S-1-5-21-1125036280-3562319748-3601731155-1001 -> Keine Datei <==== ACHTUNG Task: {4122DDC9-3CC7-4BD5-9372-E7E3AFD62D11} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation) Task: {4394150D-FC8F-4961-944C-CE3983F82392} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {44C2A668-3B78-4D18-904A-2DC64AF73D4D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation) Task: {46C2B14A-1F0A-438A-9AD6-B1D087AB13C4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {4993D41B-407C-454E-B98B-B2512704B459} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation) Task: {4E46D67D-2AC0-4AAA-9112-6B39FF663D11} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {596E1C76-2FA5-41CB-B411-5A61F7000AD4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {5C3DC062-082E-4CA1-9FCC-7BB8330DCFA3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-07-13] (Microsoft Corporation) Task: {5D1F032D-FDA2-4B95-B283-9311D64B7C87} - System32\Tasks\{BE683AA6-DDAC-4D88-91E7-2C785B45CC14} => D:\Downloads\Software\Der Planer 1 (Spedition)\DerPlaner1.exe Task: {60833BD9-71DB-4B67-8457-1E251502745B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {673CD488-7A6D-4D14-B522-6868792EBBBF} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {6B87A0EE-04F4-41CB-B9F9-9E79DCEEC802} - System32\Tasks\{86DB032A-9AB3-4010-83BC-3F5C28D22582} => D:\Downloads\Software\Der Planer 1 (Spedition)\DerPlaner1.exe Task: {6FBB108B-41FE-4ADD-B22E-D675DBD5B83E} - System32\Tasks\{FF123E23-6AED-405A-A543-7C641D527825} => C:\windows\system32\pcalua.exe -a "C:\Users\Oliver\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HRUW1HOS\ADE_2.0_Installer.exe" -d C:\Users\Oliver\Desktop Task: {701C8113-0CA0-4CBA-996C-A9A5EA6CF8ED} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated) Task: {72432CF1-C0CA-42DA-B718-309E5EB56FA8} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG Task: {7411CF65-5066-4D60-A7FF-B01463894CFD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-28] (Microsoft Corporation) Task: {756DE121-174D-47BC-A724-6E36E7AA69C1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {75B6CC5D-120A-4799-ABAC-91FA2120D47A} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2010-05-06] (SAMSUNG Electronics) Task: {75FD74BF-F7F1-4D52-9FF3-D953A3E03CD7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-07-20] (Microsoft Corporation) Task: {77A2C558-9CDE-4976-A278-22772AD5D5A3} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {7D5238B1-05C8-41C8-B943-6B967CFF609D} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {81DBE8CD-F8C4-4E5D-BDD6-969632D5D33A} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG Task: {828F688C-6167-4BA2-BACC-64EB8492D7CB} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation) Task: {846805AC-2B87-48AD-97B0-9F05D3E45571} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe Task: {84FB1AA9-8DA4-4B0E-A538-AC821826D2C7} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {8A780B12-5A49-46E2-9EF1-D34097717DB1} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2018-07-09] (Avira Operations GmbH & Co. KG) Task: {8C050ECB-8159-4DE7-9725-C9871486E900} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG Task: {8FD5D8EC-9B50-4052-B920-22CE4C351580} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {91FC6F3B-3BD0-4313-BFBC-96CBC308F604} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG Task: {995FFAF6-F6DE-4FBF-8D11-DF1798CDB08F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation) Task: {99EDE322-18B2-4DE3-8563-75359B74F1C8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {9A5E384E-65F1-4695-AA00-8DCF527F9CBC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-28] (Microsoft Corporation) Task: {9CE329F7-C797-4F14-95EF-4B71910F17E3} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG Task: {A0BC5882-10E6-48FA-AA39-63D10AE92F34} - System32\Tasks\{7E0203B8-9FF5-4CBC-A5DE-DFC09D3DC621} => C:\windows\system32\pcalua.exe -a E:\install_franzoesisch.exe -d E:\ Task: {A5444D44-3629-40BD-9E32-19E44D341172} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A608ACD2-4A8E-45BE-8A3B-616DD07B5E76} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation) Task: {AD939FB0-CF62-40DA-A979-5B521986B5D7} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-07-08] (Avira Operations GmbH & Co. KG) Task: {ADB61CE5-481D-4F46-823E-4D96CB77B30A} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG Task: {AF5EF11F-B31F-467F-8B64-1B97BF7D8C7B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B25753CA-F88A-4E97-817F-A67A6B95D3C2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B2AD7A39-6E8F-492D-AB62-E9E181105E27} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {B2C5DD05-1CA0-4E79-B74C-BC8FB854D8B9} - System32\Tasks\advSRS4 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC) Task: {B62214C2-6845-491C-AF0F-26B6AAF860A2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-28] (Microsoft Corporation) Task: {B7D7F3CA-008E-43F3-B763-2D7092F8A7F5} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-15] (Adobe Systems Incorporated) Task: {B809A65B-CCEC-4FDC-B703-B6901AE482BC} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-06-01] (Samsung Electronics. Co. Ltd.) Task: {B9417B7E-0A31-41C5-99C6-89F63C55875B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-28] (Microsoft Corporation) Task: {B94C4763-2E44-4A79-B2A2-7430053A7964} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B9666274-F138-4E27-8B70-D3D8E4CEA2E2} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-07-20] (Microsoft Corporation) Task: {BF27FF79-CC0A-4B1B-8EC5-571541E3DE79} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {BFFABB68-4469-460B-9573-B88948EA598E} - System32\Tasks\{F1349C79-9128-4A54-BFCD-47FCDF9B1568} => C:\windows\system32\pcalua.exe -a "D:\Downloads\Software\Domination (Risiko)\Domination_install_1.1.1.5.exe" -d C:\Users\Oliver\Desktop Task: {C5672354-A572-484C-A4DE-F2D09DD1D445} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CE022317-A82E-4351-9937-9D759EC26E2C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {D281A472-35B3-4F31-B24B-98AFB601C716} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation) Task: {D2B49CA5-155C-4B51-BAF0-73ABE1C18A21} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D49EE244-3C41-4662-B855-AD55D316E38C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Task: {D5391F67-FD60-4888-9EA8-6FEE805C5EAC} - System32\Tasks\{E63D7445-855D-48CD-99AF-D47DA98FB11F} => C:\windows\system32\pcalua.exe -a "C:\Users\Oliver\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KQT4M7R\AudibleDM_iTunesSetup.exe" -d C:\Users\Oliver\Desktop Task: {D8CB346F-8F02-44D9-B4E9-991C234DF310} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-07-20] (Microsoft Corporation) Task: {D97B3E7D-BCCB-44BC-8674-610D42FC101D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D9ACCE80-7422-4557-AC0D-BDCA9E7A837E} - System32\Tasks\{8B4378DD-2AE8-40DB-969A-28BA75FEE532} => C:\windows\system32\pcalua.exe -a "D:\Downloads\Software\Microsoft Apps\Microsoft Mathematics\MASetup.exe" -d "D:\Downloads\Software\Microsoft Apps\Microsoft Mathematics" Task: {DAA1D256-3FB1-4BA3-828B-2494561E395F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {DC21076A-5565-41C6-A1B2-720BB3DA0A61} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {DCE6B088-94FC-443C-A553-21C533EB7356} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {DFFF43A3-0D7D-4005-BDD9-0A0108204A53} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs" Task: {E2D1C15F-9182-4F67-8D04-D0FCFAEEE887} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {E5C426A2-B106-4F17-AC92-95A7AF017353} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [2017-07-13] (Intel Corporation) Task: {E9ECBFD0-FE01-444A-88C1-6FF1A0F9765C} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-06-08] (Samsung Electronics Co., Ltd.) Task: {EA6904D6-C4F6-4BC1-AF35-5D1E9CECEE76} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {EB69CC91-5177-469A-A1EC-7B8EB76DA117} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {ED51DCBC-ED31-49BA-9C06-D4466B9F4E00} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {EDF38042-85EB-4C04-A307-C43581000037} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {F298C280-96EA-4344-B8B9-9365FC3AC302} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe Task: {F3B01DAD-A55E-4123-A57A-8C7CA1D1988A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F3B8C393-C9A1-4C0C-A912-0817D6E3017D} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F52327B7-ADBD-45BD-97F3-437B4B984587} - System32\Tasks\{A60A2DCA-A68A-44B6-B91E-25B68901E791} => C:\windows\system32\pcalua.exe -a "D:\Downloads\Software\Domination (Risiko)\Domination_install_1.1.1.6.exe" -d "D:\Downloads\Software\Domination (Risiko)" Task: {FCD7A711-D90F-467C-85A9-AB413ECC67D0} - System32\Tasks\{AFDE2D15-E129-4481-90FE-E927163F4DD6} => C:\windows\system32\pcalua.exe -a "C:\Users\Oliver\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CF8ERY8T\sbvade19.exe" -d C:\Users\Oliver\Desktop Task: {FE463D9E-77A8-45C9-AE43-3BEED5CD0215} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {FEB8F0BB-74C5-4F48-B3C7-378ACDFB49BC} - System32\Tasks\{ACE48ADB-2B0C-49D5-A8BD-C3768F54568C} => C:\windows\system32\pcalua.exe -a "D:\Downloads\Software\Domination (Risiko)\Domination_install_1.1.0.6.exe" -d "D:\Downloads\Software\Domination (Risiko)" (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\Users\Oliver\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.co ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2017-06-11 13:16 - 2016-11-14 13:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2007-09-30 09:16 - 2007-09-30 09:16 - 000166520 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe 2016-11-27 14:59 - 2017-10-11 03:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2013-03-16 20:17 - 2013-06-03 14:06 - 003999512 _____ () C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe 2010-10-25 08:27 - 2009-03-05 11:54 - 000311296 _____ () C:\windows\SysWOW64\Rezip.exe 2010-10-25 08:33 - 2009-07-07 20:23 - 000247152 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2007-09-30 09:16 - 2007-09-30 09:16 - 000051816 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe 2017-12-08 00:29 - 2017-12-08 00:29 - 000181992 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe 2015-05-23 19:37 - 2012-01-17 18:49 - 000270672 _____ () C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe 2018-05-19 11:14 - 2018-07-22 22:03 - 002433744 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2016-07-28 11:53 - 2016-07-28 11:53 - 000226656 _____ () C:\Program Files (x86)\Steganos Privacy Suite 17\ShellExtension.dll 2018-07-11 01:48 - 2018-07-06 08:55 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-07-17 19:26 - 2018-07-17 19:26 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-07-17 19:26 - 2018-07-17 19:26 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-07-17 19:26 - 2018-07-17 19:26 - 022373888 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-07-17 19:26 - 2018-07-17 19:26 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\skypert.dll 2018-07-26 17:02 - 2018-07-26 17:02 - 035195392 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-07-26 17:02 - 2018-07-26 17:02 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-07-26 17:02 - 2018-07-26 17:02 - 006373376 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 21:43 - 2017-09-26 21:43 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-26 17:02 - 2018-07-26 17:02 - 008903168 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\EntPlat.dll 2016-12-16 14:23 - 2016-06-16 22:05 - 005908968 _____ () C:\Users\Oliver\AppData\Local\Amazon Music\Amazon Music Helper.exe 2015-05-23 19:37 - 2012-01-17 18:49 - 000153424 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe 2018-07-21 22:05 - 2018-07-21 22:06 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-07-21 22:05 - 2018-07-21 22:06 - 068153856 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-10-06 19:48 - 2017-10-06 19:54 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 004139008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-04-27 08:25 - 2018-04-27 08:27 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-03-30 12:33 - 2018-03-30 12:39 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 014919168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 003982848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 002938880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-05-31 11:53 - 2018-05-31 11:54 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 001396224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2018-02-01 16:36 - 2018-02-01 16:37 - 004601048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 000162816 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\SKU.dll 2018-07-21 22:05 - 2018-07-21 22:06 - 000045056 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.17710.0_x64__8wekyb3d8bbwe\ImageDecoding.dll 2018-07-14 09:32 - 2018-07-14 09:32 - 000199168 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2018-07-14 09:32 - 2018-07-14 09:32 - 002449952 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-14 09:32 - 2018-07-14 09:32 - 007813632 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11806.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2018-03-20 23:48 - 2018-02-21 15:56 - 000114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll 2018-03-20 23:48 - 2018-02-21 15:56 - 000108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll 2018-03-20 23:48 - 2018-02-21 15:56 - 000024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll 2018-03-20 23:48 - 2018-02-21 15:56 - 000048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll 2017-01-12 21:37 - 2016-06-21 20:30 - 000442144 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl 2017-01-12 21:37 - 2016-06-21 20:29 - 000210720 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl 2017-01-12 21:37 - 2016-06-21 20:29 - 000059680 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl 2010-10-25 08:37 - 2006-08-12 05:48 - 000049152 _____ () C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll 2013-03-16 20:17 - 2013-06-03 14:06 - 009907712 _____ () C:\Program Files (x86)\Tobit Radio.fx\Client\TOBITCLT.dll 2013-03-16 20:17 - 2013-05-16 15:28 - 000242688 _____ () C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client$.ger 2017-02-22 00:32 - 2017-10-11 03:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-03-20 23:48 - 2018-02-21 16:08 - 000042984 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\jansson.dll 2017-09-30 17:41 - 2017-09-25 12:44 - 000114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\zlib1.dll 2009-06-03 13:59 - 2009-06-03 13:59 - 000619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-06-03 13:59 - 2009-06-03 13:59 - 000013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2018-07-14 09:30 - 2018-07-13 04:01 - 001107648 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll 2018-07-14 09:30 - 2018-07-13 04:01 - 002079424 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll 2018-07-14 09:30 - 2018-07-13 04:05 - 000021704 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 000022752 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000135656 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 001881816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 000023768 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000111576 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes35.dll 2018-07-14 09:30 - 2018-07-13 04:01 - 000103392 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000069320 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000080064 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000399832 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom35.dll 2018-07-14 09:30 - 2018-07-13 04:01 - 000024544 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000043496 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000021472 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000124896 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000114664 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000392392 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000028896 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000024552 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000175584 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000024544 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000026080 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000024272 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000048616 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000057824 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 000022728 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 000025296 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000070360 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000026336 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 003866304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000089272 _____ () C:\Program Files (x86)\Dropbox\Client\sip.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 001800896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 001960640 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000028640 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000155856 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000521920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000051400 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000043720 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000131264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000220872 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000205512 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000060896 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000056536 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000024040 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000024792 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000023776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000022752 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000023768 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:02 - 000028392 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000348128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000102088 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000024800 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000026840 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000036312 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll 2018-07-14 09:30 - 2018-07-13 04:03 - 000034528 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:01 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll 2018-07-14 09:30 - 2018-07-13 04:05 - 000023776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.advapi32.compiled._winffi_advapi32.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000181432 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL 2018-07-14 09:30 - 2018-07-13 04:05 - 000031952 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000024752 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL 2018-07-14 09:30 - 2018-07-13 04:03 - 001638576 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll 2018-07-14 09:30 - 2018-07-13 04:05 - 000090840 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:05 - 000027352 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000547008 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.cp35-win32.pyd 2018-07-14 09:30 - 2018-07-13 04:03 - 000360128 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.cp35-win32.pyd ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\1001movie.com -> 1001movie.com IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\1001night.biz -> 1001night.biz IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\100gal.net -> 100gal.net IE restricted site: HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\...\100sexlinks.com -> 100sexlinks.com Da befinden sich 4789 mehr Seiten. ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2017-12-09 23:44 - 2015-07-28 23:59 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1125036280-3562319748-3601731155-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Oliver\AppData\Local\Microsoft\Windows\Themes\DE-wp1.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{BBF833FE-F689-42A5-8632-7F14269C2872}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{026156DB-934E-469C-BECF-7DF0106B17A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{DA06C4DA-81D7-404B-959B-7323946BF340}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{FD0CC498-5ACB-4F81-AE5E-002A3D5E66CC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{135C212F-4C86-4344-8C74-24985DB4C208}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{A08FB3F7-0B78-4D61-997E-29285AD6E5D4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{7DDB7099-1107-4AE9-B91C-86BEB35B458E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{38694954-5DAD-4AD9-89C8-263FF1F677B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{6B96451D-59D6-4D62-813B-4CA68D6E3D35}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{3C89AF38-590F-4B03-88DE-98B10E41E1E8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [UDP Query User{827C0FE4-8348-4420-A573-FD8FEF535CA8}C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe] => (Allow) C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe FirewallRules: [TCP Query User{A644E489-4B8A-4CA2-95D0-AB804D5C1273}C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe] => (Allow) C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe FirewallRules: [{63C901AF-CD29-4FEE-883E-D83F1E5C33FC}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe FirewallRules: [{3D64949B-1983-4A07-9836-26C018B18635}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe FirewallRules: [{7B1AB339-C86C-4318-BB45-A2BC41D84AF4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{63021AFB-ACB8-4328-84E8-B91E9151A457}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe FirewallRules: [{4A5F6223-2D3A-4ACA-99BB-7E9EEC626A67}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe FirewallRules: [{E14C05DA-BA95-451D-A6C0-B3090A859A41}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe FirewallRules: [{B40C3B2A-CCFF-4896-92EB-36BE94CCAA39}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe FirewallRules: [{64940C2C-3771-4706-A1B4-4D438E057822}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [{9BABAABF-6666-4BA8-A0B1-79488B024986}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [{D758D97D-54E5-433D-88C5-05A4820FE685}] => (Allow) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanion.exe FirewallRules: [{28692685-0859-4775-97BD-104EF7E4B23A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\AutoUpdate.exe FirewallRules: [{C2C52BDB-5032-426C-A9B2-54A3BE0442A2}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\AutoUpdate.exe FirewallRules: [{88C3FF94-A0E3-4AD9-8FEB-F028B23E5580}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\DBDownloader.exe FirewallRules: [{DCCAD07A-0CED-4B6B-B18E-D0C63FD29CB4}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\DBDownloader.exe FirewallRules: [{096B8FAE-F7C0-4A45-ABF9-A69D37615F78}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\DriverBooster.exe FirewallRules: [{FE55784B-999E-44BE-AE99-629AFC2ED3A9}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.2.0\DriverBooster.exe FirewallRules: [{BD1E49AB-E42F-49CA-82A8-4777F20B5CEA}] => (Allow) C:\Program Files (x86)\concept design\onlineTV 12\onlineTV.exe FirewallRules: [{28C8AA0C-9920-4B0A-AB07-DE5BE300E6B0}] => (Allow) C:\Program Files (x86)\concept design\onlineTV 12\onlineTV.exe FirewallRules: [{701EF907-136E-429B-B4BB-FDFA0F35C1D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{D3439C20-2CC2-40A9-AE35-A21A219DC0F4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{5709D091-5762-4E7D-BF42-1362BA19AFBB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{45D4415F-962A-485C-905E-280907186750}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{FD2BA2A2-D0A5-484D-8E78-7CE3801683DD}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{1A8A1714-C9A9-4503-B421-258D25BB7836}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{883AB608-CB21-453A-ACB8-D8575D2FE2D9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{172F5CCC-ED4F-4F80-8E6D-AD00D96F173E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{16E538FE-080A-4710-8FC7-B6CECCE0F3D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{B4A2C854-F9D4-4782-B742-7E9B3DFE2A81}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [TCP Query User{B4EE357E-D3EA-4FEE-A276-39D74666823F}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{44582FCA-6486-4F3B-80CE-3B4665309235}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{12EA5A87-1759-4A10-82F2-0A99EA48C32E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{492E2D0B-CCCD-4380-ABE8-A5F1F13830CC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{D3A33A5E-86B4-4851-A730-A0233508E9FC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{219EFBB1-FA3C-4665-98A3-BB53BC506CE7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{BFD66AC0-BD12-4243-8500-E23947808E66}] => (Allow) C:\Users\Oliver\AppData\Roaming\Steganos\OkayFreedom\Proxy\node.exe FirewallRules: [UDP Query User{A5DB761B-4A2D-44FA-B0E5-60E185EDFAA2}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [TCP Query User{3DA6BB43-6F2A-46A4-8089-899884CE6614}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{9E8265B8-CF66-42A1-AEF2-BA43BBF071A5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{9A857211-8BCD-40A5-88A9-3FEE41BA99FC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{827E3217-47B0-4280-B506-F1523776E5E5}] => (Allow) C:\Program Files (x86)\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe FirewallRules: [{562A77F0-80D2-4603-8DE9-21C356E2DF41}] => (Allow) C:\Program Files (x86)\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe FirewallRules: [{ADE348E3-4E1C-4EC6-8C77-061A35A34814}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{DF9095B6-85EF-478F-9AC7-9E987AA3710E}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{4930F2E5-BE03-430E-B196-1559D500945F}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{013EB47B-7077-4C2F-A67E-577538203B83}] => (Allow) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{74228A23-0E9A-4A1E-8E5E-4B0A77852DDA}] => (Block) C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe FirewallRules: [{2D4CFA88-021E-49AE-946D-D262D3D8362F}] => (Block) C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe FirewallRules: [UDP Query User{DCDFC204-49E6-4CCE-B625-F90A9AFDC4A2}C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe] => (Allow) C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe FirewallRules: [TCP Query User{54EE9A16-6021-4AD6-829D-C524DF82FF54}C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe] => (Allow) C:\program files (x86)\freeciv-2.3.0-gtk2\freeciv-server.exe FirewallRules: [{E7DB479E-DB48-42AD-B206-14068A7BE2BB}] => (Allow) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client.exe FirewallRules: [{C4B0D147-EFFC-4E60-8BFC-E49FA8F53B4D}] => (Allow) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-client.exe FirewallRules: [{B6CD3001-A16F-4548-9B5F-8D61F6E83876}] => (Allow) C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe FirewallRules: [{B6AFF474-4F8A-4424-B81B-63C0261E652C}] => (Allow) C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe FirewallRules: [UDP Query User{F239EFC2-7DC4-4445-8C2C-8B3D301FCFC5}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [TCP Query User{9B96CFA6-866D-4334-9360-BAF4B41420DE}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [{202D6B83-84EF-4C8E-8EEC-94F421692B26}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{B45CD369-2A01-43A1-96AE-89C3F89EA614}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{C619F102-509D-458F-B7FF-426945F1E784}] => (Allow) LPort=1900 FirewallRules: [{6C6FA21B-DDFC-4F48-B8B6-644A30FB0469}] => (Allow) LPort=2869 FirewallRules: [{64712D61-CFE6-4D9B-98B3-BF7AAFA0EF3E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{603A756A-E1D8-47AB-B27D-6727609D338F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD8\PowerDVD8.EXE FirewallRules: [{B9B162EC-FD9E-41C6-BCB7-71ED04025558}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE FirewallRules: [{FDB9A10C-2FBB-4C48-91D2-9498B9741530}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ==================== Wiederherstellungspunkte ========================= 21-07-2018 23:17:35 Geplanter Prüfpunkt 26-07-2018 13:07:29 Windows Update ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (07/27/2018 01:51:16 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Downloads\Software\ESET\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Error: (07/27/2018 01:51:14 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Downloads\Software\ESET\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Error: (07/27/2018 01:51:14 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Downloads\Software\ESET\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Error: (07/27/2018 01:51:13 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Error: (07/27/2018 01:27:10 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Downloads\Software\ESET\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Error: (07/27/2018 01:27:10 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Downloads\Software\ESET\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Error: (07/27/2018 01:27:08 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_42ebcb8844e52e49.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.191_none_fb3e94b130690543.manifest. Error: (07/27/2018 01:19:09 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15625 Systemfehler: ============= Error: (07/27/2018 01:25:45 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:18 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:18 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:17 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:17 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:17 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/27/2018 01:19:16 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (07/26/2018 06:59:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID Windows.SecurityCenter.WscBrokerManager und der APPID Nicht verfügbar im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Windows Defender: =================================== Date: 2018-05-31 14:50:18.325 Description: Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {698A1DBC-5884-494E-AE87-DB4066E44CE4} Überprüfungstyp: Antimalware Überprüfungsparameter: Vollständige Überprüfung Benutzer: Samsung2011\Oliver CodeIntegrity: =================================== Date: 2018-07-26 17:17:29.467 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:17:29.428 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:17:29.299 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:17:29.285 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:17:28.133 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:17:27.954 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:10:30.795 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 17:10:30.762 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz Prozentuale Nutzung des RAM: 51% Installierter physikalischer RAM: 8052.55 MB Verfügbarer physikalischer RAM: 3938.21 MB Summe virtueller Speicher: 20130.55 MB Verfügbarer virtueller Speicher: 15591.11 MB ==================== Laufwerke ================================ Drive c: (SSD) (Fixed) (Total:232.08 GB) (Free:103.85 GB) NTFS Drive d: (Daten) (Fixed) (Total:931.51 GB) (Free:119.2 GB) NTFS Drive f: (extern WD 2000) (Fixed) (Total:1862.86 GB) (Free:545.9 GB) NTFS \\?\Volume{7972be43-4cea-11e6-8961-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.25 GB) NTFS \\?\Volume{38844df4-0000-0000-0000-c01b3a000000}\ () (Fixed) (Total:0.45 GB) (Free:0.03 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: 38844DF4) Partition 1: (Active) - (Size=356 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=460 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: F9BC3826) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 16F2A91F) Partition: GPT. ==================== Ende von Addition.txt ============================ |
27.07.2018, 13:28 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum Absturz Dein Rechner ist echt übel zugemüllt. Meine persönliche Meinung: dieses System neu installieren und dann nicht mehr mit Programminstallationen zupflastern!! Avira bitte komplett deinstallieren Von Avira raten wir schon lange ab, außerdem will ich für eine Analyse und Bereinigung so wenig Störquellen wie nur möglich. Zum Abschluss gibt es Hinweise zur Absicherung deines Windows-Systems. Wir deinstallieren dann am besten auch gleich weiteren unnötigen oder veralteten Krempel. Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Gib Bescheid wenn das weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!
__________________ Logfiles bitte immer in CODE-Tags posten |
27.07.2018, 14:07 | #8 |
| Bereinigung durch ADWCleaner führt zum Absturz Erledigt. Dabei zierte sich Avira (Reihenfolge musste geändert werden und bei dem "Browser Safety" gab es den Fehlerhinweis "OS incompatibility", ist aber dann gemäß Revo weg gewesen). Mehrere Neustarts zwischendurch und am Ende durchgeführt. |
27.07.2018, 14:16 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum Absturz Schädlinge suchen mit Kaspersky TDSS-Killer Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
27.07.2018, 14:27 | #10 |
| Bereinigung durch ADWCleaner führt zum Absturz Teil 1 von 2 Code:
ATTFilter 15:19:16.0825 0x00c8 TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17 15:19:25.0258 0x00c8 ============================================================ 15:19:25.0258 0x00c8 Current date / time: 2018/07/27 15:19:25.0258 15:19:25.0258 0x00c8 SystemInfo: 15:19:25.0258 0x00c8 15:19:25.0258 0x00c8 OS Version: 10.0.17134 ServicePack: 0.0 15:19:25.0258 0x00c8 Product type: Workstation 15:19:25.0258 0x00c8 ComputerName: SAMSUNG2011 15:19:25.0259 0x00c8 UserName: Oliver 15:19:25.0259 0x00c8 Windows directory: C:\WINDOWS 15:19:25.0259 0x00c8 System windows directory: C:\WINDOWS 15:19:25.0259 0x00c8 Running under WOW64 15:19:25.0259 0x00c8 Processor architecture: Intel x64 15:19:25.0259 0x00c8 Number of processors: 4 15:19:25.0259 0x00c8 Page size: 0x1000 15:19:25.0259 0x00c8 Boot type: Normal boot 15:19:25.0259 0x00c8 CodeIntegrityOptions = 0x00000001 15:19:25.0259 0x00c8 ============================================================ 15:19:25.0325 0x00c8 KLMD registered as C:\WINDOWS\system32\drivers\35129936.sys 15:19:25.0325 0x00c8 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19 15:19:25.0408 0x00c8 System UUID: {84B562D4-0572-90CF-34A2-C50C4BDBC547} 15:19:25.0692 0x00c8 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:19:26.0065 0x00c8 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:19:31.0926 0x00c8 Drive \Device\Harddisk2\DR2 - Size: 0x1D1BF100000 ( 1862.99 Gb ), SectorSize: 0x200, Cylinders: 0x3B5FD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 15:19:31.0931 0x00c8 ============================================================ 15:19:31.0931 0x00c8 \Device\Harddisk0\DR0: 15:19:31.0931 0x00c8 MBR partitions: 15:19:31.0931 0x00c8 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xB2000 15:19:31.0931 0x00c8 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xB2800, BlocksNum 0x1D02B0E2 15:19:31.0931 0x00c8 \Device\Harddisk1\DR1: 15:19:31.0933 0x00c8 MBR partitions: 15:19:31.0933 0x00c8 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800 15:19:31.0933 0x00c8 \Device\Harddisk2\DR2: 15:19:31.0934 0x00c8 GPT partitions: 15:19:31.0936 0x00c8 \Device\Harddisk2\DR2\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {7E42B50D-718D-4E36-9FD6-CF8D092A7D69}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000 15:19:31.0936 0x00c8 \Device\Harddisk2\DR2\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {DB7F2EBD-B1C1-4B8C-BAEE-BE3C3B828C9A}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0xE8DB7800 15:19:31.0936 0x00c8 MBR partitions: 15:19:31.0936 0x00c8 ============================================================ 15:19:31.0940 0x00c8 C: <-> \Device\Harddisk0\DR0\Partition2 15:19:32.0004 0x00c8 D: <-> \Device\Harddisk1\DR1\Partition1 15:19:32.0021 0x00c8 F: <-> \Device\Harddisk2\DR2\Partition2 15:19:32.0021 0x00c8 ============================================================ 15:19:32.0021 0x00c8 Initialize success 15:19:32.0021 0x00c8 ============================================================ 15:20:17.0928 0x0778 ============================================================ 15:20:17.0928 0x0778 Scan started 15:20:17.0928 0x0778 Mode: Manual; SigCheck; TDLFS; 15:20:17.0928 0x0778 ============================================================ 15:20:17.0928 0x0778 KSN ping started 15:20:17.0967 0x0778 KSN ping finished: true 15:20:18.0663 0x0778 ================ Scan system memory ======================== 15:20:18.0663 0x0778 System memory - ok 15:20:18.0664 0x0778 ================ Scan services ============================= 15:20:18.0737 0x0778 [ 4B45A2D37CCE3CC0F161B7C7286081A6, DF4EBAA12E083AE45411AABD3EDE916E2CC6963FBA664861AC9B2351B5E042DC ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys 15:20:18.0808 0x0778 1394ohci - ok 15:20:18.0821 0x0778 [ F5E5BA493B7C497F1F769942E2EA4CE2, 4AD54DA24142BCE49FB64CFF2CB28764FAA93827E7DB02925090B68F8C73B1FB ] 3ware C:\WINDOWS\system32\drivers\3ware.sys 15:20:18.0840 0x0778 3ware - ok 15:20:18.0861 0x0778 [ CA51BB1B81F97E896E116C839B92D9D8, 09F73D8FB93EA524D3C9A9C264F62340560DC7042589597A318626A0A198F91F ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys 15:20:18.0897 0x0778 ACPI - ok 15:20:18.0904 0x0778 [ 75795E4B19BB3ED8D3C25A17CD15DC30, 22A13064E0B472A0A2258D61A889B73EE3F537DA7796CCE39DF973AFA8FA1567 ] AcpiDev C:\WINDOWS\System32\drivers\AcpiDev.sys 15:20:18.0929 0x0778 AcpiDev - ok 15:20:18.0938 0x0778 [ DDA0FC1400A24988A7D3E746AEDF2C0F, 3A703A204FDE46C67017C274CA1F50F591D909EE182A82697E89442D4A5569CE ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys 15:20:18.0956 0x0778 acpiex - ok 15:20:18.0962 0x0778 [ 1F2EC25DA23D1DF3ADA12FE5A26D321C, B165D72949E43F04312C95BF0FF5C25CFE5CA0CDF43415E01AB2B1550D06C737 ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys 15:20:18.0989 0x0778 acpipagr - ok 15:20:18.0995 0x0778 [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys 15:20:19.0020 0x0778 AcpiPmi - ok 15:20:19.0026 0x0778 [ 0FC8673FAFC7D78C1CDC000F892CAC64, 33FB109ABD18FBF4DA5047BAA9FAF63E88D5BA1826442DB02F9130DAD11D15F2 ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys 15:20:19.0042 0x0778 acpitime - ok 15:20:19.0071 0x0778 [ 328708CB8CDADD9C284B4E33E2B19904, 037854C773AA9C7A542A4ED04D61F6BDD10C933EE9BA98D7DD7DB128EC915970 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 15:20:19.0089 0x0778 AdobeFlashPlayerUpdateSvc - ok 15:20:19.0126 0x0778 [ A3D4CF2F3A433BE18CD4AD3E6665DC63, 9D62A7E2DDA15B2E75490CCB9C8E10A41030F496A93631EDED5F1003DF368290 ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS 15:20:19.0176 0x0778 ADP80XX - ok 15:20:19.0201 0x0778 [ 4DCCC3E02A22ED4A4ADB11386F226071, 40BB183049DE3ADCC7A5B1B269620C8534291BB7A956157434C857DE249559EE ] AFD C:\WINDOWS\system32\drivers\afd.sys 15:20:19.0233 0x0778 AFD - ok 15:20:19.0241 0x0778 [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix C:\WINDOWS\system32\drivers\afunix.sys 15:20:19.0269 0x0778 afunix - ok 15:20:19.0280 0x0778 [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys 15:20:19.0316 0x0778 ahcache - ok 15:20:19.0323 0x0778 [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll 15:20:19.0355 0x0778 AJRouter - ok 15:20:19.0363 0x0778 [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG C:\WINDOWS\System32\alg.exe 15:20:19.0397 0x0778 ALG - ok 15:20:19.0408 0x0778 [ 6DF48AD26E6285FB137F11328B64A376, 76FF9A753C262065E819E862E7950127472C5E6AB7E97B57977C6DCE6180760A ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys 15:20:19.0439 0x0778 AmdK8 - ok 15:20:19.0449 0x0778 [ D8804032BCDE4077A6D8D431D12AC6CC, F017A3FEAB2919A9662A9BFEF31AE7B7EC19F1136C9D0DC6C48A415B540A8062 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys 15:20:19.0473 0x0778 AmdPPM - ok 15:20:19.0481 0x0778 [ A88F5E24B65228FB25F2051B3408A0E4, C124B486839EA15D6806EB51E91EBF99401CD7D226541320A7A4934A8477DCEF ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys 15:20:19.0496 0x0778 amdsata - ok 15:20:19.0511 0x0778 [ AECD39E51DABC2BF045B2857F02FA2BD, 83E2AC3200B6EA1586E4E0204D81CEAF303D7C9EBE7E5D1273A41A4EC1390E56 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys 15:20:19.0533 0x0778 amdsbs - ok 15:20:19.0539 0x0778 [ B4CC9943230CAEB05B46CC30C220E141, 013716E6911136EB0916A1D592198DD7953800549DA0C885093D2BA3CC9BA2A7 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys 15:20:19.0553 0x0778 amdxata - ok 15:20:19.0562 0x0778 [ 809D92855656EFC1D71C980582F7FF8B, 01B551CEC0CFD50CA88EB49AA3F68EEEAE34DFE31E6CA37DA106B3C49CF7FA81 ] AmUStor C:\WINDOWS\system32\drivers\AmUStor.SYS 15:20:19.0581 0x0778 AmUStor - ok 15:20:19.0587 0x0778 [ 34BBA51A066D55C948EDDAE065553CD1, BB7577F3622609E1FAD795DB79B9AF9111D911B2BA369F794E2D3D37B75EA535 ] AndnetBus C:\WINDOWS\System32\drivers\lgandnetbus64.sys 15:20:19.0641 0x0778 AndnetBus - ok 15:20:19.0647 0x0778 [ DB9374B42A0203DF3B13F7909742F18E, ADA57FA76458DEA6F2F468D9A5FFD7059588CEE94A7387D5E79B112777C56758 ] AndNetDiag C:\WINDOWS\system32\DRIVERS\lgandnetdiag64.sys 15:20:19.0696 0x0778 AndNetDiag - ok 15:20:19.0703 0x0778 [ 362169798009F467211D8BB9EBC6BE17, E6008F6A5B3199028E62D00BF4456AAB35C012D62BDC9CA94911DF4D451651CA ] ANDNetModem C:\WINDOWS\system32\DRIVERS\lgandnetmodem64.sys 15:20:19.0746 0x0778 ANDNetModem - ok 15:20:19.0755 0x0778 [ 2CCB04097E143C7F82333863343C838C, E6A79EDDF03317BEF9B25C9FA658DF6A588DC06A9AF66338ADE31D5D29E4FB3C ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll 15:20:19.0784 0x0778 AppHostSvc - ok 15:20:19.0794 0x0778 [ C3ECF8840E4EAF09A4F2AE0174D6F36A, F810A2158FAA4C6B086259125691E163696C67698BD447FE403E740131815F0B ] AppID C:\WINDOWS\system32\drivers\appid.sys 15:20:19.0813 0x0778 AppID - ok 15:20:19.0821 0x0778 [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll 15:20:19.0843 0x0778 AppIDSvc - ok 15:20:19.0852 0x0778 [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo C:\WINDOWS\System32\appinfo.dll 15:20:19.0891 0x0778 Appinfo - ok 15:20:19.0900 0x0778 [ A4811754EF548619F68FB3418325BB66, D9DA070D4B0F74F29B8D94B90F1827B5863C4053D185889F7BF451FF5677C773 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 15:20:19.0938 0x0778 Apple Mobile Device Service - ok 15:20:19.0945 0x0778 [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys 15:20:19.0971 0x0778 applockerfltr - ok 15:20:19.0992 0x0778 [ 636575088044E7271088BB8CFA382B45, DCD2CAD626E66AF98D31B9339A4A92FD94E99F335B48649529AC327B7AF52B9A ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll 15:20:20.0047 0x0778 AppReadiness - ok 15:20:20.0140 0x0778 [ 68733E7DE5B8180A735E44507364BB21, 1B3D1799CA9CCC57DE5CD730B6DFCE6A151F045F6FEE6C967DED8957B48225B2 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll 15:20:20.0315 0x0778 AppXSvc - ok 15:20:20.0329 0x0778 [ 013E057DF3D13A4462AD912D7732E7E0, 7C89AD5799091D17EAED682058559DBAE882D0E18C347B5AECE7BCCFD0E2D21C ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys 15:20:20.0346 0x0778 arcsas - ok 15:20:20.0364 0x0778 [ 9EDC7F9BB19D3F12EB05437BD5687C8A, 182772D576C3C8A9CFDADE7F75A14DD0639C0DF5C3C345F158C2DE51708A2F76 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 15:20:20.0379 0x0778 aspnet_state - ok 15:20:20.0386 0x0778 [ B25ACCD9BE5F5798E9DD8FFB04D7BE4C, 87577AD2E4A47518B8101C67F1025CB3CD2ABBA678774A5926192FCD56EF1350 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys 15:20:20.0412 0x0778 AsyncMac - ok 15:20:20.0420 0x0778 [ 90AB4ED8EBD72A1C096A40CC35404B91, C343466D439552D154BBD1A5F9D391CDD3FA298A712594EA27C3049E3516D1AF ] atapi C:\WINDOWS\system32\drivers\atapi.sys 15:20:20.0434 0x0778 atapi - ok 15:20:20.0544 0x0778 [ C620BA04BEF23496D85B91050425E581, 4DB788547F50722B5CA19EC1CF6C20AD1ABED82FE2E3B41DD464D7BED8E78A05 ] athr C:\WINDOWS\System32\drivers\athw10x.sys 15:20:20.0699 0x0778 athr - ok 15:20:20.0729 0x0778 [ 49C40F52EB06F9E9C8A14436F97AAEB8, F98E04CD9674C99BA1D1C63177AA81C628D505AED1DE4110500FC33A5C494864 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll 15:20:20.0787 0x0778 AudioEndpointBuilder - ok 15:20:20.0842 0x0778 [ 50DE2E82D65B6006360660D085E80B8B, C279E90A975D71E193048BA324C99685CFF977A0D3B171B6BDFBDEF7FF7A084B ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll 15:20:20.0937 0x0778 Audiosrv - ok 15:20:20.0948 0x0778 [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll 15:20:20.0970 0x0778 AxInstSV - ok 15:20:20.0990 0x0778 [ F10E4C9444A9FC6DCBAB2C42F6999FA1, 4238B6DD49CBADFE2C737AC1B211AE045F458DDF1693EE54608455C1ECE1BCCA ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys 15:20:21.0020 0x0778 b06bdrv - ok 15:20:21.0028 0x0778 [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam C:\WINDOWS\system32\drivers\bam.sys 15:20:21.0042 0x0778 bam - ok 15:20:21.0050 0x0778 [ FA4973E379E872C61D0CF4E39F807833, 3320FAB0CF16BB1ABBBA222CC31D20B5AC7A4259DE4323B109A8F2FECC28C8A4 ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys 15:20:21.0077 0x0778 BasicDisplay - ok 15:20:21.0085 0x0778 [ F024B80EA0076A318598DAB795F9C3D0, 6225A5FCD2B750A0E4FFFCCB1CDF49BAA7809A4B4AD7AB625A585CF4971CDE25 ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys 15:20:21.0101 0x0778 BasicRender - ok 15:20:21.0142 0x0778 [ 27A12920B623EF8A727AB95F6CBCDF91, 87FA155B57DEF40495F45695860A6455ABB41BA0DE99B6AF574629B60272DEDB ] BcastDVRUserService C:\WINDOWS\System32\BcastDVRUserService.dll 15:20:21.0225 0x0778 BcastDVRUserService - ok 15:20:21.0238 0x0778 [ 739D089777D2B66DBE7201E5EA4BA2D7, 9AD12E18A042C5B8EFB19297BC2E7BD1FEF75A138FEFB64C6BF0261FD3E53AB1 ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys 15:20:21.0255 0x0778 bcmfn2 - ok 15:20:21.0270 0x0778 [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC C:\WINDOWS\System32\bdesvc.dll 15:20:21.0310 0x0778 BDESVC - ok 15:20:21.0318 0x0778 [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep C:\WINDOWS\system32\drivers\Beep.sys 15:20:21.0347 0x0778 Beep - ok 15:20:21.0372 0x0778 [ 0B9B6D7A2F31FBD63301D19B1B08238E, 7EF63C87FB2B9E0971B633BC86F99B12F8BBE188D53E0B105E44766A0657A67E ] BFE C:\WINDOWS\System32\bfe.dll 15:20:21.0432 0x0778 BFE - ok 15:20:21.0442 0x0778 [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt C:\WINDOWS\system32\drivers\bindflt.sys 15:20:21.0459 0x0778 bindflt - ok 15:20:21.0497 0x0778 [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS C:\WINDOWS\System32\qmgr.dll 15:20:21.0589 0x0778 BITS - ok 15:20:21.0611 0x0778 [ DAA72C9154459E613EED88502624C340, B512CA4461625D847DB023CDE17C1C9AD3B1079A925A89F8724008D8690CE617 ] BlueletAudio C:\WINDOWS\system32\DRIVERS\blueletaudio.sys 15:20:21.0627 0x0778 BlueletAudio - ok 15:20:21.0637 0x0778 [ 8AF05BCB15D846E1E8B34AF0635879C9, 391149EB799977E3C0FFDD348B8E6DD508095B6F4D32CB0A2ABD498EC14926BE ] BlueletSCOAudio C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys 15:20:21.0647 0x0778 BlueletSCOAudio - ok 15:20:21.0659 0x0778 [ 2D3DB4A520AAAD4BFF4D18A5F98C91A8, 0A0F6DABE836F5C713D01F17AEB01FCEDD0003C07A251FB617B1B3C7F5EC8FC1 ] BlueSoleil Hid Service C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe 15:20:21.0672 0x0778 BlueSoleil Hid Service - ok 15:20:21.0689 0x0778 [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll 15:20:21.0738 0x0778 BluetoothUserService - ok 15:20:21.0757 0x0778 [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 15:20:21.0779 0x0778 Bonjour Service - ok 15:20:21.0788 0x0778 [ 00C33AC3096BB64BACD5554A55025F8F, E13669966AA69A9C18E8932491F722F595666163DA2C6695C8F415AD55836B53 ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys 15:20:21.0815 0x0778 bowser - ok 15:20:21.0843 0x0778 [ 0E1A0E81EF4B33FFDE8EDA46EE38F0D4, F92E7FC14264F58EF79A10025D8375B7455A339B556AEE72A32FFE29278FAF23 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll 15:20:21.0911 0x0778 BrokerInfrastructure - ok 15:20:21.0921 0x0778 [ 0F890E854FCBE98F4574ACC6423FCCEF, D3F0549F4CD4AEA64179EB4691FD8E7F54907D43EDB558ECBA191B4D5CDB3356 ] BT C:\WINDOWS\System32\drivers\btnetdrv.sys 15:20:21.0930 0x0778 BT - ok 15:20:21.0950 0x0778 [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService C:\WINDOWS\System32\BTAGService.dll 15:20:21.0992 0x0778 BTAGService - ok 15:20:22.0010 0x0778 [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc C:\WINDOWS\System32\BthAvctpSvc.dll 15:20:22.0048 0x0778 BthAvctpSvc - ok 15:20:22.0059 0x0778 [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys 15:20:22.0083 0x0778 BthHFEnum - ok 15:20:22.0091 0x0778 [ E49A371185D5E79C103765DA93856EE1, D160269DA8A72316104FA657E23CAE168C90C996A59CEACA21CD79E17A1E04FE ] BTHidEnum C:\WINDOWS\system32\Drivers\vbtenum.sys 15:20:22.0100 0x0778 BTHidEnum - ok 15:20:22.0109 0x0778 [ 8FA060B557C7DE309D2D5C16C3DA2EF6, E559B3379B3C9FBC0E3E0F6A2B864266F644EFC6E93318C6D8278F3D2C39FAB3 ] BTHidMgr C:\WINDOWS\system32\Drivers\BTHidMgr.sys 15:20:22.0118 0x0778 BTHidMgr - ok 15:20:22.0128 0x0778 [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys 15:20:22.0158 0x0778 BTHMODEM - ok 15:20:22.0171 0x0778 [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv C:\WINDOWS\system32\bthserv.dll 15:20:22.0205 0x0778 bthserv - ok 15:20:22.0211 0x0778 [ E3786BEBB7E4003DE324A18069DDA081, 4DDA70CCB011D74811BA51686E6ED9A404EBE549AE6B3CE0DDBCB83D09E8AABA ] bttflt C:\WINDOWS\system32\drivers\bttflt.sys 15:20:22.0226 0x0778 bttflt - ok 15:20:22.0233 0x0778 [ 03C13BB635635B9152DBF49AA07B728C, F6141576EB54EFE5E329762EC548C7D256EFB57C42A46BB3426B779413F0C975 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys 15:20:22.0253 0x0778 buttonconverter - ok 15:20:22.0261 0x0778 [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD C:\WINDOWS\System32\drivers\CAD.sys 15:20:22.0276 0x0778 CAD - ok 15:20:22.0289 0x0778 [ B405F59CF690653105600F85C9B576B9, BEB313DF7D343B2A421EF76E908FCDB64C62AB2ABB7A3188F48A6CACA9644D97 ] camsvc C:\WINDOWS\system32\CapabilityAccessManager.dll 15:20:22.0328 0x0778 camsvc - ok 15:20:22.0338 0x0778 [ 407B33DE151A3DFCF564AC4270E44B1D, 8B1419FEDDCEF9F9F239B4C1A629F4F2748FC09CF3E38CA01D8D6D1D32252346 ] CapImg C:\WINDOWS\System32\drivers\capimg.sys 15:20:22.0368 0x0778 CapImg - ok 15:20:22.0376 0x0778 [ D3CBC6DE5955D014407C7BD1FFE80F00, 9D185AED383FCBF16EE63192452DE888D8485D7BD9C0257BF92A68C42120A1B8 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys 15:20:22.0406 0x0778 cdfs - ok 15:20:22.0427 0x0778 [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll 15:20:22.0475 0x0778 CDPSvc - ok 15:20:22.0492 0x0778 [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll 15:20:22.0530 0x0778 CDPUserSvc - ok 15:20:22.0543 0x0778 [ 6834DBBA2A1DBA5B9B6360D0B9A3CBB5, 637331058347D94FBDEE0D47E56723C98BDBBE8E044A225CCE7B3592AA562021 ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys 15:20:22.0591 0x0778 cdrom - ok 15:20:22.0602 0x0778 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc C:\WINDOWS\System32\certprop.dll 15:20:22.0631 0x0778 CertPropSvc - ok 15:20:22.0645 0x0778 [ 4A08B239F92B319AD31E3916D27AD4B9, 948772689F14090E9E096CF7423CE5D994E3F9964775AD5B2F78C37A987EE980 ] cht4iscsi C:\WINDOWS\system32\drivers\cht4sx64.sys 15:20:22.0671 0x0778 cht4iscsi - ok 15:20:22.0721 0x0778 [ C8EA9376E4D284F9DF24B27AC6E3AB85, DAD3B00A37797E7C80E0C359BA735B65BBBE5DC25480910737D86D2711A6FF8C ] cht4vbd C:\WINDOWS\System32\drivers\cht4vx64.sys 15:20:22.0796 0x0778 cht4vbd - ok 15:20:22.0805 0x0778 [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass C:\WINDOWS\System32\drivers\circlass.sys 15:20:22.0823 0x0778 circlass - ok 15:20:22.0839 0x0778 [ 4C9CDDE070A9A005CC11CF17483720A4, F2F95125A52B13F34A9DC5473CEF777D6D85C4D810FA0102553EBF72560F6CAA ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys 15:20:22.0896 0x0778 CldFlt - ok 15:20:22.0910 0x0778 [ DB26170CF6555B9AFF76CFA067ABCF90, A066E89267783A5E54A36D1CF193916218BE2E1D177F0ACA82E2B86211629806 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys 15:20:22.0936 0x0778 CLFS - ok 15:20:23.0159 0x0778 [ 1D46F38E0F5CCE3726EDAC81B26D4A89, 2082A99A47653D6EE53DA58A51D02F9BD7AF612A55AE7272B4BD614ED86AF165 ] ClickToRunSvc C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe 15:20:23.0431 0x0778 ClickToRunSvc - ok 15:20:23.0478 0x0778 [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll 15:20:23.0525 0x0778 ClipSVC - ok 15:20:23.0542 0x0778 [ 66CBF6F8FE6F436B315D7FEAF5D2BB40, 0F6AE6412EF73C74EF0EB1866E8CD85AACE4373D5C24F3D0121F5A7420E5A03B ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys 15:20:23.0559 0x0778 CmBatt - ok 15:20:23.0581 0x0778 [ 9CACC75FE8AB232A82926651F026760B, 65B91E641C07C183EC9E5E75C52B9BF0C8454EF2A3E1D58C743D7BA68D5CD8DB ] CNG C:\WINDOWS\system32\Drivers\cng.sys 15:20:23.0618 0x0778 CNG - ok 15:20:23.0625 0x0778 [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys 15:20:23.0639 0x0778 cnghwassist - ok 15:20:23.0655 0x0778 [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys 15:20:23.0672 0x0778 CompositeBus - ok 15:20:23.0678 0x0778 COMSysApp - ok 15:20:23.0686 0x0778 [ 3799A9DFB162D9AAD6AC12CB8185FD19, 942F2777049166EC43F93177F0084EA08B06CE9107AF55337124FE25CCB158C4 ] condrv C:\WINDOWS\system32\drivers\condrv.sys 15:20:23.0700 0x0778 condrv - ok 15:20:23.0727 0x0778 [ 663A33714C4FEA8704BF7E4AD0EA2D8B, 3A0B21C9063DBEC4F3A7E7D432D839C981ABE9AAEEB9F2588176DA28F92F3D78 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll 15:20:23.0769 0x0778 CoreMessagingRegistrar - ok 15:20:23.0788 0x0778 [ 6C6073B45D65887A6035F1A8D073274A, F002B25E05D0894CD12BA3D046E11D4AD6F0BCE8796618B0EE54851223A65C15 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll 15:20:23.0821 0x0778 CryptSvc - ok 15:20:23.0829 0x0778 [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam C:\WINDOWS\system32\drivers\dam.sys 15:20:23.0844 0x0778 dam - ok 15:20:23.0853 0x0778 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 15:20:23.0866 0x0778 dbupdate - ok 15:20:23.0874 0x0778 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 15:20:23.0885 0x0778 dbupdatem - ok 15:20:23.0893 0x0778 [ 55446FAE23DDA25EE08782064E41ED94, 6514B8F1731D2BA2DB012EAD88D300B18B30D53E6A8126DAB9E855BEAD20AEFC ] DbxSvc C:\WINDOWS\system32\DbxSvc.exe 15:20:23.0905 0x0778 DbxSvc - ok 15:20:23.0941 0x0778 [ 107661923943E9DC06ED2713AC5F7753, 2B311E9BD635F1CEB222EF798C5523447AAF63E2331377804884572D7512F299 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 15:20:24.0021 0x0778 DcomLaunch - ok 15:20:24.0040 0x0778 [ 94FC38FADA032862E579044C123C0D58, C4A7DF6EE20BE3F2784FE66AF37AC01D0DBBD8A6C15BF03A6AC78CA9D2403F3D ] defragsvc C:\WINDOWS\System32\defragsvc.dll 15:20:24.0084 0x0778 defragsvc - ok 15:20:24.0101 0x0778 [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll 15:20:24.0139 0x0778 DeviceAssociationService - ok 15:20:24.0147 0x0778 [ DBD6E8A5C358AAA3B4900EFD5CF94CC8, C8261CBE358562B3F31ADA0567723E0118A8687DFC8939FABC65E61C38BFE20B ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll 15:20:24.0182 0x0778 DeviceInstall - ok 15:20:24.0198 0x0778 [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll 15:20:24.0246 0x0778 DevicePickerUserSvc - ok 15:20:24.0273 0x0778 [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll 15:20:24.0338 0x0778 DevicesFlowUserSvc - ok 15:20:24.0347 0x0778 [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll 15:20:24.0381 0x0778 DevQueryBroker - ok 15:20:24.0390 0x0778 [ 8A1C10410FDA4287A76EC5A64371E221, 66CE271DDAD9CD82D2DF220247D91CCB906FA4B5508ABE0DC4A56D1C0C008BCA ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys 15:20:24.0438 0x0778 Dfsc - ok 15:20:24.0451 0x0778 [ A25AA328816454FA5CCD054343CADAFC, BA2524E443213DF65DF923C58D5C6A99681F102917C1AFD94B31196F4838DB8A ] Dhcp C:\WINDOWS\system32\dhcpcore.dll 15:20:24.0489 0x0778 Dhcp - ok 15:20:24.0497 0x0778 [ FF05980EEE93D2B4AB1284BF21D7F12B, 026C8489CC9232605B87F02E3276B81DB23A6B64BB66C01F0FD6E7D266ECD17C ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 15:20:24.0523 0x0778 diagnosticshub.standardcollector.service - ok 15:20:24.0534 0x0778 [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc C:\WINDOWS\system32\DiagSvc.dll 15:20:24.0569 0x0778 diagsvc - ok 15:20:24.0647 0x0778 [ E74FCFD1499A4F816A99D35E297CCE63, 9C6D75200A8D0932CA77F68D78F11B89B0A45441ABB1662BE69567FE13138D19 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll 15:20:24.0805 0x0778 DiagTrack - ok 15:20:24.0827 0x0778 [ 974C20A14D6850126784579FFF2C2203, 06C489951318B614B1FFD6D730743D4A49F54D1E8300F81B8B714510323EC025 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe 15:20:24.0852 0x0778 DigitalWave.Update.Service - ok 15:20:24.0860 0x0778 [ A79FCB89805FA9EA9F48B671A4591D4E, 13CA8B9CB35DF9F8EFFF8E6ECC0F65E4F179FA9BEF4B68F3382CA4A6BF14FA54 ] Disk C:\WINDOWS\system32\drivers\disk.sys 15:20:24.0876 0x0778 Disk - ok 15:20:24.0901 0x0778 [ EAA267FAABDBE6194985DC6A0AC96664, 604908384B503AD7E14F15776C1B3DC58A278149145C2811B5B5300EA597A50C ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll 15:20:24.0962 0x0778 DmEnrollmentSvc - ok 15:20:24.0970 0x0778 [ F69D7A5D7EDEE16B85F08040836FB09C, 944730FA6CA6ED0ECA85848A2F00EE1E647F7DD4CC37E557A812ECE8A92B3999 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys 15:20:24.0997 0x0778 dmvsc - ok 15:20:25.0003 0x0778 [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll 15:20:25.0025 0x0778 dmwappushservice - ok 15:20:25.0038 0x0778 [ E65844BC31FE3687A745C2E48C845CBC, 826845A9FC00E4D68CDE5FA5C293DF6D41DB0E8D15B43647A1335F0A79AFD4D6 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 15:20:25.0075 0x0778 Dnscache - ok 15:20:25.0090 0x0778 [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc C:\WINDOWS\System32\dot3svc.dll 15:20:25.0125 0x0778 dot3svc - ok 15:20:25.0135 0x0778 [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS C:\WINDOWS\system32\dps.dll 15:20:25.0161 0x0778 DPS - ok 15:20:25.0167 0x0778 [ AD1BEFBF96C0273925EDC9282557D984, E23B1B043E9EE25054DCEFB10C1C69009DCB1E12675DAE60B00A646735B03D99 ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys 15:20:25.0182 0x0778 drmkaud - ok 15:20:25.0187 0x0778 [ B5D6BF691F31D069732EA103689D7F98, 72503C99518F0B899B52D89B4AB2E19562B7A221E8A40324DB6071109A1D3405 ] DSAService C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe 15:20:25.0206 0x0778 DSAService - ok 15:20:25.0217 0x0778 [ E7D1636EEA6F9A941573CA426F214054, 7730C82E808C80BAFB59A6AD140B11C2269A62F2396783CB063E58D8EA624BDD ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll 15:20:25.0252 0x0778 DsmSvc - ok 15:20:25.0260 0x0778 [ 4323DDFF8CB51FD74B241810CFA6CDBB, D9CDE22055C6D139DC3E21C3D92112704426D60F5EF83E3E338B68D885BD3D30 ] DsSvc C:\WINDOWS\System32\DsSvc.dll 15:20:25.0293 0x0778 DsSvc - ok 15:20:25.0306 0x0778 [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll 15:20:25.0343 0x0778 DusmSvc - ok 15:20:25.0419 0x0778 [ 8FF323926AAF82B04CCE7DD4FAA17990, 2856B00864240408021E930209BEBADF37A71B254449EE2C746449F61B0787E9 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys 15:20:25.0527 0x0778 DXGKrnl - ok 15:20:25.0540 0x0778 [ 7E9A1608894297B133AF5EE18E404208, 9E2E4B4F6133375DB8E490337594BEFB86BA964223FB272A23ADD02FA8065253 ] Eaphost C:\WINDOWS\System32\eapsvc.dll 15:20:25.0570 0x0778 Eaphost - ok 15:20:25.0658 0x0778 [ 75CA88887850A74DDAAAF92500B6D9B9, 1C413719D0E659E20C66B0762B2FC708E55536961A1D9F21906ADBE9CF431489 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys 15:20:25.0782 0x0778 ebdrv - ok 15:20:25.0795 0x0778 [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] EFS C:\WINDOWS\System32\lsass.exe 15:20:25.0812 0x0778 EFS - ok 15:20:25.0822 0x0778 [ 7E838D857FC55535710C316441459C38, C4673014D3ED3E68E02DB5BE6DB53E45B1E4A3CE2B04B15BFD507AF703A60134 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys 15:20:25.0838 0x0778 EhStorClass - ok 15:20:25.0847 0x0778 [ 49023DD6F646B8C70AE1C105415F3E2B, 16EC2920A2CB71C17BFA7A0E22EDAE1C0E7004C986BEBCA9435F6FDB5D8E64CF ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys 15:20:25.0864 0x0778 EhStorTcgDrv - ok 15:20:25.0874 0x0778 [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll 15:20:25.0901 0x0778 embeddedmode - ok 15:20:25.0915 0x0778 [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 15:20:25.0949 0x0778 EntAppSvc - ok 15:20:25.0957 0x0778 [ 1DF19D7A941CB06F8EADF89FA0BF59AD, 0A8891AD73AF277B764FA5CF163E6BC29DFFA0E35388A941AE27E001289C0A4A ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys 15:20:25.0981 0x0778 ErrDev - ok 15:20:26.0011 0x0778 [ D1554E8E4839785C36E13F2C1E1ECA76, 6C34877D0C4DA3BED52D769DD930B8EF7187448DBBF2F36C6789434AD4E4C5D9 ] ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe 15:20:26.0082 0x0778 ESRV_SVC_QUEENCREEK - ok 15:20:26.0105 0x0778 [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem C:\WINDOWS\system32\es.dll 15:20:26.0144 0x0778 EventSystem - ok 15:20:26.0159 0x0778 [ D31158A3876110ABAC5E479B49661140, 174147E19D04CF08D2CF8250D0F71702E901263BB3CA62F821E8DCCA5D99CC0F ] exfat C:\WINDOWS\system32\drivers\exfat.sys 15:20:26.0218 0x0778 exfat - ok 15:20:26.0223 0x0778 Fabs - ok 15:20:26.0238 0x0778 [ F1FBBADF0D7F4B6D56E3202C987BA525, 408FB3085A905EA22BE535CE9CFA3E218BC4CB489F8CC496A91E17402034E02F ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys 15:20:26.0264 0x0778 fastfat - ok 15:20:26.0285 0x0778 [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax C:\WINDOWS\system32\fxssvc.exe 15:20:26.0340 0x0778 Fax - ok 15:20:26.0348 0x0778 [ 6701B9973DE98578A491721B4BDE0926, 48D07092E6B44CAA529559DF620BDAA4DFCC16430DBA8178B461E556AC526DE1 ] fdc C:\WINDOWS\System32\drivers\fdc.sys 15:20:26.0374 0x0778 fdc - ok 15:20:26.0380 0x0778 [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost C:\WINDOWS\system32\fdPHost.dll 15:20:26.0409 0x0778 fdPHost - ok 15:20:26.0415 0x0778 [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub C:\WINDOWS\system32\fdrespub.dll 15:20:26.0437 0x0778 FDResPub - ok 15:20:26.0445 0x0778 [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc C:\WINDOWS\system32\fhsvc.dll 15:20:26.0468 0x0778 fhsvc - ok 15:20:26.0476 0x0778 [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys 15:20:26.0502 0x0778 FileCrypt - ok 15:20:26.0510 0x0778 [ A0AF205465482EE0FC6261782629566B, E0C0E9EB327F4DEEDF3E32EB5573A74436829078331A8EA1B795438892EE81B8 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys 15:20:26.0526 0x0778 FileInfo - ok 15:20:26.0533 0x0778 [ 01D83D284E6B37902DB3C4D4DB0649E0, 4376F872575013DE87CA8173FABAD367FFF907086864C106A4C82933EF9DA308 ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys 15:20:26.0557 0x0778 Filetrace - ok 15:20:26.0628 0x0778 [ 5BD96D8C5411ACE71A7EAACAF0EF2903, 2AF58E6060C7DEC44B4CA30E14E164473CD4089AE475DAFFC61DFE56990C1147 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe 15:20:26.0789 0x0778 FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:26.0830 0x0778 Detect skipped due to KSN trusted 15:20:26.0831 0x0778 FirebirdServerMAGIXInstance - ok 15:20:26.0839 0x0778 [ CE9CB1DB00B5007ABFFF0717E748E919, 314E1FA6B0CD9416894EED93ADF3DCB273FF37F6E56EF64C9E7B55E174EB3226 ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys 15:20:26.0858 0x0778 flpydisk - ok 15:20:26.0875 0x0778 [ C5374BA2CAE89DE7269EC61A969EF5D5, 520D7A4C50A9FFF308599C6EADDCADD3D9E398718786D82F02F7EE5C30E7D6A2 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 15:20:26.0901 0x0778 FltMgr - ok 15:20:26.0912 0x0778 [ 813155B27B68DACCBAECCCEEA60BD8BF, 24BD34825B0D1A1DCB9BD1834733B21A8EB2DA49B9B31F8B1AFC1D71DC8CE823 ] FolderSize C:\Program Files\FolderSize\FolderSizeSvc.exe 15:20:26.0926 0x0778 FolderSize - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:26.0969 0x0778 Detect skipped due to KSN trusted 15:20:26.0969 0x0778 FolderSize - ok 15:20:27.0024 0x0778 [ 8F528FD267C55ABE2A156C5F6EA6B867, 540A852F250783553E042FC31D3F2D695DADA4777FF31F1BA8B60E3407333277 ] FontCache C:\WINDOWS\system32\FntCache.dll 15:20:27.0127 0x0778 FontCache - ok 15:20:27.0138 0x0778 [ CE9456F925ADA70ED5A4158F103F9A26, 89753CCCB2E8B1553F077B8F13C63FBEC2EABE7093A6B847477542483347C827 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 15:20:27.0152 0x0778 FontCache3.0.0.0 - ok 15:20:27.0174 0x0778 [ B6BC6E6731FB1E02F0B3C73A87E1C35E, D9CA56006C1D995568A557E53DCCD7802D152CADE535BDB5DBBFC66F3F2EE236 ] FrameServer C:\WINDOWS\system32\FrameServer.dll 15:20:27.0230 0x0778 FrameServer - ok 15:20:27.0238 0x0778 [ 835F9C7193B6F9A796DE76897DC56968, 62D6CF40CD6B798E79FF3274DB156DAB17724EDEEC85F6602F3C0EDCDD2DBA11 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys 15:20:27.0252 0x0778 FsDepends - ok 15:20:27.0259 0x0778 [ A01BA0506E07F316483E99D7AD9B6E75, B2CFB3AAE0E49C539C743A7F416CFC0DE2E0CFC2D5AE685F8B1BECBDB95C4308 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 15:20:27.0273 0x0778 Fs_Rec - ok 15:20:27.0298 0x0778 [ F00AA662A862BA1B5B0BB9FBDFAE2DFC, 1DBEA358E58370C1BD8D5797382FD22A19E92BA171AB70868359CF921F324CA7 ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys 15:20:27.0336 0x0778 fvevol - ok 15:20:27.0343 0x0778 [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys 15:20:27.0368 0x0778 gencounter - ok 15:20:27.0375 0x0778 [ EA5EE5EF9765A9157B346DF671952F18, FD0A8DBA6EA3E47D454B877CEC74B7B6BEC8B7A98BE37E9E1110D867009D9EA1 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys 15:20:27.0394 0x0778 genericusbfn - ok 15:20:27.0402 0x0778 [ A1F556318931B9EA276F4E2DA2C1791C, 1E5564A9B213689C56BFBBEC1A7BBFAD78DF1FB55422171C0680935338C5DE57 ] ggflt C:\WINDOWS\System32\drivers\ggflt.sys 15:20:27.0411 0x0778 ggflt - ok 15:20:27.0417 0x0778 [ 7F56A3E09A6AD40B07E4EFAD34A40A18, E0EC4293035162E9EFA89A45FFF26B5BC829F7BB7F4D2D5A2CAA5E88AC6DC0C9 ] ggsomc C:\WINDOWS\System32\drivers\ggsomc.sys 15:20:27.0426 0x0778 ggsomc - ok 15:20:27.0436 0x0778 [ 6BE6550F1A32796A11EBC58BBC72C44D, 99DC4058EC1B3BF316F1470BF1208F0A2FC72A508BCC9E7548D91BB0FF04376A ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys 15:20:27.0454 0x0778 GPIOClx0101 - ok 15:20:27.0490 0x0778 [ 3FC2377994D9D63FC128B6C48B22B68F, B47D6BE6FF596A23BBDB7261B1CA9CA67CD138CBF89AEA7A68882E62C0087561 ] gpsvc C:\WINDOWS\System32\gpsvc.dll 15:20:27.0564 0x0778 gpsvc - ok 15:20:27.0573 0x0778 [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys 15:20:27.0595 0x0778 GpuEnergyDrv - ok 15:20:27.0602 0x0778 [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll 15:20:27.0626 0x0778 GraphicsPerfSvc - ok 15:20:27.0635 0x0778 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:20:27.0647 0x0778 gupdate - ok 15:20:27.0654 0x0778 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 15:20:27.0665 0x0778 gupdatem - ok 15:20:27.0675 0x0778 [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 15:20:27.0689 0x0778 gusvc - ok 15:20:27.0707 0x0778 [ 99FB3BA9180CDD9E71A6DDCB07F91140, 28A2DD9B44AD2A20CBAAC7F62F701D9B46B1A89373131AFD2B39B42DB87A407B ] HdAudAddService C:\WINDOWS\System32\drivers\HdAudio.sys 15:20:27.0751 0x0778 HdAudAddService - ok 15:20:27.0759 0x0778 [ DED74127C7A2266715C0B8EA2EE75214, 999507BECB4BAAC61317D98311962D446844CAC6271BFFE181F6CD6DFE221465 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys 15:20:27.0778 0x0778 HDAudBus - ok 15:20:27.0786 0x0778 [ 95888B85956AF97320D1F5C354632957, C0218271A17897D4682192AB431658523EC87CB13551B2BDA40576BF766BB26C ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys 15:20:27.0801 0x0778 HidBatt - ok 15:20:27.0811 0x0778 [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys 15:20:27.0836 0x0778 HidBth - ok 15:20:27.0843 0x0778 [ 6D767FEB02DF712F783BEEFF09E06431, AB64C61E5729FB27BF9564CA8308D895CFFB992CE8606FDC31EFF01BB1FF8FFE ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys 15:20:27.0863 0x0778 hidi2c - ok 15:20:27.0870 0x0778 [ 542AB7A14235C5227A9307ACF1636F0B, E54C4C4511727F4E70CB1C9259C56D4AC62E70BAB2F42E9AB402C1DF4AF3FA25 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys 15:20:27.0885 0x0778 hidinterrupt - ok 15:20:27.0892 0x0778 [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr C:\WINDOWS\System32\drivers\hidir.sys 15:20:27.0911 0x0778 HidIr - ok 15:20:27.0917 0x0778 [ 3030F19C6A73367D6D5EEDD157F5D01A, B1F13C2AE334C8CDF15BD96B70E92A81487308D841196A29AE3D1164CDAF9AA2 ] hidserv C:\WINDOWS\system32\hidserv.dll 15:20:27.0944 0x0778 hidserv - ok 15:20:27.0950 0x0778 [ 6E3FB2047B8AE72E1B5F1C00A5F3E475, A5F791BECA43925D410751C114BCF2FC4A46D7A44BE80B02CD3259C6E271FF31 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys 15:20:27.0977 0x0778 HidUsb - ok 15:20:27.0990 0x0778 [ 621B1FFB2E4E4745484EA01B013BF1D2, 6F6761922EF931DB95D6597A5884DEB3CC127FB9D763A5A27369F7881DE64B8D ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys 15:20:28.0005 0x0778 HpSAMD - ok 15:20:28.0035 0x0778 [ B96A51E96768A56180EF4934A8613E54, A9F2EA25BF3707A0FD47EA49F9CE6F93DF13EE14F2F20D7BA763A706B0CB6328 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys 15:20:28.0082 0x0778 HTTP - ok 15:20:28.0090 0x0778 [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash C:\WINDOWS\System32\drivers\hvcrash.sys 15:20:28.0104 0x0778 hvcrash - ok 15:20:28.0111 0x0778 [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll 15:20:28.0126 0x0778 HvHost - ok 15:20:28.0133 0x0778 [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys 15:20:28.0149 0x0778 hvservice - ok 15:20:28.0171 0x0778 [ EF558A02D734A1403583E95CCEEC2487, F0D052DAF48A62E4A90D067BFCB5EE9563804DE68D0EA82E0E11C8D16AD19D29 ] HWiNFO32 C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS 15:20:28.0181 0x0778 HWiNFO32 - ok 15:20:28.0189 0x0778 [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101 C:\WINDOWS\system32\Drivers\mshwnclx.sys 15:20:28.0210 0x0778 HwNClx0101 - ok 15:20:28.0216 0x0778 [ FE36689912DEC37D45B7A6C6414046FE, 3AE4E52B4ECD50ABEF67DCD1E30E409908F53624D9854BDD472352E8B280F19D ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys 15:20:28.0230 0x0778 hwpolicy - ok 15:20:28.0237 0x0778 [ A1133368F47D514D73DD7FB4C4FD2B75, 6019DABCAB9E2941D76EC62F4352FA76DDCD964671C490730BF725CA2234CA3D ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys 15:20:28.0256 0x0778 hyperkbd - ok 15:20:28.0262 0x0778 [ B68252C53556FFB52CCE18FF30FACA99, 0463FB8661A9EF338EFBBE43EE76C63DE170510D0E9B612D62009D7D85669365 ] HyperVideo C:\WINDOWS\System32\drivers\HyperVideo.sys 15:20:28.0287 0x0778 HyperVideo - ok 15:20:28.0296 0x0778 [ DA179667B8CEC22E4ECBBF4210DC0E35, 70CDB592E1775919B9AB1810A7BA18FE4851FBD493E4772741F36FC11A4CA47E ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys 15:20:28.0321 0x0778 i8042prt - ok 15:20:28.0328 0x0778 [ B5EC43755E62591197DE5CBBDAA9FEB7, 1B4E0EAB677B09A050925879ECDA311404270DCF020AAD390692427198C73C9F ] iagpio C:\WINDOWS\System32\drivers\iagpio.sys 15:20:28.0355 0x0778 iagpio - ok 15:20:28.0364 0x0778 [ D8CA23F9C5FEF44296FDE1E005C06EC0, 0D7B03EF9E19B9B2A28C3318560488B3F9573CF364A533A9B4A2CD0A7FFA4F84 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys 15:20:28.0392 0x0778 iai2c - ok 15:20:28.0400 0x0778 [ 7B769C9D19C013F94874C4B15D59A005, 53A15F0480AEC43B5A01CFB17360188885B6ECBFFF6E566D27E5B6D4C7737243 ] iaLPSS2i_GPIO2 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 15:20:28.0419 0x0778 iaLPSS2i_GPIO2 - ok 15:20:28.0427 0x0778 [ E0F1B3A2A70FABE3BE1C9140BB55E607, 34E5B055619F3A26B7BB6054EA49D40B7D6DAFE234F57F358FE7C8EE83E10618 ] iaLPSS2i_GPIO2_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys 15:20:28.0447 0x0778 iaLPSS2i_GPIO2_BXT_P - ok 15:20:28.0457 0x0778 [ 89A869BCC0588A3009ECB875B09ECD39, 5ECC2C6E661B326511682D8EA1C82F942C63835890687285FEF455C5C9DC2476 ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 15:20:28.0480 0x0778 iaLPSS2i_I2C - ok 15:20:28.0490 0x0778 [ 2E693DF3C02A0859DB8DE25772751100, 3EFFDA44B247E04258429ADC85E88E23F926FD487A3A85BF879E6E5802197B3F ] iaLPSS2i_I2C_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys 15:20:28.0514 0x0778 iaLPSS2i_I2C_BXT_P - ok 15:20:28.0520 0x0778 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 15:20:28.0531 0x0778 iaLPSSi_GPIO - ok 15:20:28.0540 0x0778 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys 15:20:28.0560 0x0778 iaLPSSi_I2C - ok 15:20:28.0576 0x0778 [ D7921D5A870B11CC1ADAB198A519D50A, 5DF99EB5D5504E9D9EB21658E8B4A58DEE2AD143A1875DB7F9B7BF4877FCB57F ] iaStor C:\WINDOWS\system32\drivers\iaStor.sys 15:20:28.0595 0x0778 iaStor - ok 15:20:28.0622 0x0778 [ 26405FA714257E449581DE5D6E6200E6, 1C3055AF6BB53308B7E6268A11929881263767619FF524674C51C03B7990C0A8 ] iaStorAVC C:\WINDOWS\system32\drivers\iaStorAVC.sys 15:20:28.0664 0x0778 iaStorAVC - ok 15:20:28.0680 0x0778 [ 11AC0355FE52CC8813EE6864DE7531E4, 4D77C451C230395E03B3DB592B1BDCDB8B2142961906A25F0FD070D3A8B670EB ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys 15:20:28.0706 0x0778 iaStorV - ok 15:20:28.0725 0x0778 [ 62CD9FA7394BCDF7784CCEFC9D00C9AA, 2A09A921EBD998EC45470675FC8D803EAE5F9E2E16B9313591987AA574835CFE ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys 15:20:28.0754 0x0778 ibbus - ok 15:20:28.0767 0x0778 [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc C:\WINDOWS\System32\tetheringservice.dll 15:20:28.0798 0x0778 icssvc - ok 15:20:28.0831 0x0778 [ 25793D173BD83ACF8B248C97ABC3B860, 0133EEB7C08E02F3C732FA89381920E5C4BB0CD2190E49C19619FAB43C68708A ] IKEEXT C:\WINDOWS\System32\ikeext.dll 15:20:28.0889 0x0778 IKEEXT - ok 15:20:28.0897 0x0778 [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys 15:20:28.0917 0x0778 IndirectKmd - ok 15:20:28.0964 0x0778 [ 310C18A371002983E7BF25BEB0333480, 2A251FDD552F2757059B49441BD6AC683FAEB254D828A792EA382B0D4070F1F8 ] InstallService C:\WINDOWS\system32\InstallService.dll 15:20:29.0043 0x0778 InstallService - ok 15:20:29.0182 0x0778 [ 00D0BAD638E321E12A0A1F0D0CFF96B6, 5A315284FE9393E11057FB036EB3120E4151212EB5595C1F079D622408F92E81 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys 15:20:29.0354 0x0778 IntcAzAudAddService - ok 15:20:29.0371 0x0778 [ D737E59752DCE9D0B697E233784F9114, 62E2F932F69527CD8A2EA8ED989BCF533FBF54AF8C6BF415FFCFD216E880A650 ] Intel(R) SUR QC SAM C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe 15:20:29.0383 0x0778 Intel(R) SUR QC SAM - ok 15:20:29.0390 0x0778 [ F1B552F7ACDF6E3E4DDDB76118CAFDE3, C4047BAAECF6FA3B73EB684F53C7F81A08AA39F42F8DC7C31BF35DFA93B7C647 ] intelide C:\WINDOWS\system32\drivers\intelide.sys 15:20:29.0403 0x0778 intelide - ok 15:20:29.0413 0x0778 [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys 15:20:29.0431 0x0778 intelpep - ok 15:20:29.0441 0x0778 [ 2CEF9DEB97B2CA327175EE8AD5F195A1, 1D6A3B47A844A235B73F8DC2BF872A943FE980480480843EDD5935307C115B3E ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys 15:20:29.0465 0x0778 intelppm - ok 15:20:29.0480 0x0778 [ CD6FE4D2E29D70D9E2AA587DE5978A15, 03BA3338E0178FCB6FC7792FE4BB2B836CEA8B791D53DD4E273AB48621397DC5 ] IObitUnSvr C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe 15:20:29.0498 0x0778 IObitUnSvr - ok 15:20:29.0506 0x0778 [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate C:\WINDOWS\system32\drivers\iorate.sys 15:20:29.0520 0x0778 iorate - ok 15:20:29.0528 0x0778 [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 15:20:29.0558 0x0778 IpFilterDriver - ok 15:20:29.0582 0x0778 [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll 15:20:29.0634 0x0778 iphlpsvc - ok 15:20:29.0643 0x0778 [ 5C58142E0F1F8AA379748CC123BA7527, 1D6D42F2595DF3C0EE8FEF751F13119951A2D040D2B22A7F0CBD6083B49F8A37 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys 15:20:29.0659 0x0778 IPMIDRV - ok 15:20:29.0669 0x0778 [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys 15:20:29.0696 0x0778 IPNAT - ok 15:20:29.0702 0x0778 [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT C:\WINDOWS\System32\drivers\ipt.sys 15:20:29.0726 0x0778 IPT - ok 15:20:29.0734 0x0778 [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll 15:20:29.0756 0x0778 IpxlatCfgSvc - ok 15:20:29.0765 0x0778 [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda C:\WINDOWS\system32\drivers\irda.sys 15:20:29.0788 0x0778 irda - ok 15:20:29.0794 0x0778 [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys 15:20:29.0812 0x0778 IRENUM - ok 15:20:29.0818 0x0778 [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon C:\WINDOWS\System32\irmon.dll 15:20:29.0838 0x0778 irmon - ok 15:20:29.0844 0x0778 [ 38A6EC08D0067DECF7B5BA4C871B846C, 0FAB8EACA2BB4A0BF3895B6BB7CA9BCF74447CF640535A57998C6A4A35EAC030 ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys 15:20:29.0858 0x0778 isapnp - ok 15:20:29.0870 0x0778 [ 5529131AAB75E07D9295B19E20C54DAE, C2F2C7D33945C13DDC5EF540581772CEF73EFB23F19E6BCDBB6A99D8C96A302B ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys 15:20:29.0893 0x0778 iScsiPrt - ok 15:20:29.0902 0x0778 [ C35FD802C800F3CBB4FD426D5A542A22, B2325956DB68222C5FBB43DFA0BF5EEC073470010E13997F2A5635CC89D66872 ] ItSas35i C:\WINDOWS\system32\drivers\ItSas35i.sys 15:20:29.0920 0x0778 ItSas35i - ok 15:20:29.0927 0x0778 [ 17F3B012B28F27E7B813A7B037A3D790, DADE75BB016438B7E0A11A1CF1FFA596C27246EF7F4E04D96366029C9F65F0C5 ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys 15:20:29.0943 0x0778 kbdclass - ok 15:20:29.0949 0x0778 [ 843B4BBD15DD0340C5C293CD419D4A76, F6D17CCE13697669DA4EF1F83E394F5496C437496E0E09307F8B615DE3216CC5 ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys 15:20:29.0969 0x0778 kbdhid - ok 15:20:29.0976 0x0778 [ 5BBB86F3F1700E0ACE1DF10F0EF7B227, 348FE61522F8C24F407F87D2966F62BD816DF27CD824AC103699CA66EE799640 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys 15:20:29.0999 0x0778 kdnic - ok 15:20:30.0007 0x0778 [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] KeyIso C:\WINDOWS\system32\lsass.exe 15:20:30.0023 0x0778 KeyIso - ok 15:20:30.0032 0x0778 [ 65EF1DBF0132AE84A71B555E97445D4E, 5B48E8E469EA81B58DA11AF79006752A689089467320E5CC19E9DAFFFB60A6DD ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys 15:20:30.0050 0x0778 KSecDD - ok 15:20:30.0061 0x0778 [ 44758CF3E2C08937F33CFAAE495FAE98, 1FD62CC05C4B202546755BCD6E4998248FAA3BD89B755B8AA19B6ED132C3DFA1 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys 15:20:30.0080 0x0778 KSecPkg - ok 15:20:30.0087 0x0778 [ 10F2EBC1F1C4549C355781715DE47B66, 9D23CBA56245532D88396DF99C62A26E71A7EEEF7CD8BA98FFF9FD2804DDF946 ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys 15:20:30.0107 0x0778 ksthunk - ok 15:20:30.0123 0x0778 [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm C:\WINDOWS\system32\msdtckrm.dll 15:20:30.0158 0x0778 KtmRm - ok 15:20:30.0170 0x0778 [ 081D030BC669BDEDC68B8FE81A67E6A7, B5C1FA89ACAE1683A524CD14E2D7D6C3C1FAE0ABCD330841D493FC6DB0843798 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll 15:20:30.0205 0x0778 LanmanServer - ok 15:20:30.0217 0x0778 [ 514E8BD07F42D95667F54777D57403D0, 3D024A18F7AC70A846FAB3255AA1048F8DD1DC4301F1B70B647B71F5E7A1AA24 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll 15:20:30.0256 0x0778 LanmanWorkstation - ok 15:20:30.0265 0x0778 [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc C:\WINDOWS\System32\lfsvc.dll 15:20:30.0286 0x0778 lfsvc - ok 15:20:30.0293 0x0778 [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll 15:20:30.0315 0x0778 LicenseManager - ok 15:20:30.0323 0x0778 [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys 15:20:30.0348 0x0778 lltdio - ok 15:20:30.0360 0x0778 [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll 15:20:30.0391 0x0778 lltdsvc - ok 15:20:30.0397 0x0778 [ BD35F484DA59014D091736F8F10BFB42, 7004408EEE281BA707248369910483928A15F3304F4A8F594EA2E04D43929926 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll 15:20:30.0422 0x0778 lmhosts - ok 15:20:30.0433 0x0778 [ 48380096385DB46E43D85CD92B9500DB, D93F4FDAA5A665E09004F7676E821AEAD0ED059F0E006FF73F02BB8FF1C0F9FC ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys 15:20:30.0450 0x0778 LSI_SAS - ok 15:20:30.0459 0x0778 [ F708223E5829510DF0D5AF209D11C8B8, DE82ACC6D04092C22BA4E63CF527814467870A10B93D7E9B061DBA23CEF9424B ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys 15:20:30.0477 0x0778 LSI_SAS2i - ok 15:20:30.0488 0x0778 [ B91BCC8F670F128A4BB826ACF2C2B9D5, D905232E3E49EA6CACE04CDB241D12CA9E84F106D15340C921B980610C1080FB ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys 15:20:30.0506 0x0778 LSI_SAS3i - ok 15:20:30.0515 0x0778 [ FA31CDF977CD31AF9AEAAA422966ACC1, 705761786930A2534CD1B797F5F16F56F58647192175F5D19E13642A89462CAA ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys 15:20:30.0531 0x0778 LSI_SSS - ok 15:20:30.0555 0x0778 [ 52B6D805C60127F0456DF019775F5740, 3005C49349072EDD68DBFC6DBF884FC75E060920EA3FA90A60C39F5A83939595 ] LSM C:\WINDOWS\System32\lsm.dll 15:20:30.0602 0x0778 LSM - ok 15:20:30.0612 0x0778 [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv C:\WINDOWS\system32\drivers\luafv.sys 15:20:30.0635 0x0778 luafv - ok 15:20:30.0645 0x0778 [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc C:\WINDOWS\System32\LanguageOverlayServer.dll 15:20:30.0675 0x0778 LxpSvc - ok 15:20:30.0683 0x0778 [ 1CA48E995EE9BDAE7EE3601C792D8DA4, DC4EE789810D3993343F7085DBCFBE1E74B10A31B32C60964582E2F27B5D716B ] MapsBroker C:\WINDOWS\System32\moshost.dll 15:20:30.0712 0x0778 MapsBroker - ok 15:20:30.0730 0x0778 [ BD3D311802427608403C5E73A8D6137D, C85DCB557E931E302AF90270731C3F5AA820CDF14D7DBACA95284FD9E4BF5F3D ] mausbhost C:\WINDOWS\System32\drivers\mausbhost.sys 15:20:30.0761 0x0778 mausbhost - ok 15:20:30.0768 0x0778 [ 61C2D9790943D8E3AD05AE35E4A313EF, 96BBA5333F4AEEE41FAD28124DD448CFECD8111F931758CAB60FCB1DAA05E239 ] mausbip C:\WINDOWS\System32\drivers\mausbip.sys 15:20:30.0783 0x0778 mausbip - ok 15:20:30.0942 0x0778 [ F7265B7490428499F2FE409FA9247866, 43A406C74689B72020E4669B45F19D377A5FF3EFE79B03AF58C2679D14405E9D ] MBAMService C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe 15:20:31.0117 0x0778 MBAMService - ok 15:20:31.0142 0x0778 [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy C:\WINDOWS\System32\Drivers\mbamswissarmy.sys 15:20:31.0182 0x0778 MBAMSwissArmy - ok 15:20:31.0195 0x0778 [ 11F714F85530A2BD134074DC30E99FCA, BDB5FD3B2DF4ADD19B31965B3E789768B59E872B3EA85912B1FFB32B2AF9D5D8 ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 15:20:31.0213 0x0778 MDM - ok 15:20:31.0221 0x0778 [ 61BCE12529E96E6F0335A2A8DEB83C61, BFDD1E52736311CF53AE9C778C664D37B5B711B544BC41BDFB137F7A9789AD2A ] megasas C:\WINDOWS\system32\drivers\megasas.sys 15:20:31.0237 0x0778 megasas - ok 15:20:31.0244 0x0778 [ CA22763F12783A9C81C512ED747CECDD, 8D2403364D5479D89479FA0C23BB9511A4360F51504F78AA1675220CDCD21398 ] megasas2i C:\WINDOWS\system32\drivers\MegaSas2i.sys 15:20:31.0260 0x0778 megasas2i - ok 15:20:31.0268 0x0778 [ FDB06D857FC43D654547BBB31D039DB4, 4CBE0F0FBDD88A5DB4F333466BB4E1C886E0742D41B4ED418587B40C4F59B307 ] megasas35i C:\WINDOWS\system32\drivers\megasas35i.sys 15:20:31.0284 0x0778 megasas35i - ok 15:20:31.0305 0x0778 [ 230361AF74DDB91705284E024A22DF4F, 82F13E3E4A8B3CB6AE65C1C9F878702D16D101B0DCC79B9FF8368F9B87E0F285 ] megasr C:\WINDOWS\system32\drivers\megasr.sys 15:20:31.0337 0x0778 megasr - ok 15:20:31.0344 0x0778 [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll 15:20:31.0369 0x0778 MessagingService - ok 15:20:31.0397 0x0778 [ A8931C3820D5F392D89176E0628E766E, 0F035833B1CBABDF9E5142F3E5EB6413DC7DDBF3A0562170018A8EBA20992CA4 ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys 15:20:31.0438 0x0778 mlx4_bus - ok 15:20:31.0446 0x0778 [ EB4D7C9354CB88DE4B085EA3EEA5BC76, DD842967ED5A9232AF34E68548C98F9760487D5626C9628A44598A97B28F24D3 ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys 15:20:31.0467 0x0778 MMCSS - ok 15:20:31.0474 0x0778 [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem C:\WINDOWS\system32\drivers\modem.sys 15:20:31.0493 0x0778 Modem - ok 15:20:31.0500 0x0778 [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor C:\WINDOWS\System32\drivers\monitor.sys 15:20:31.0524 0x0778 monitor - ok 15:20:31.0531 0x0778 [ 66C9CCC6A100ACF7A4514BD3091CE566, 1423EC39D4203D717B79BF2E5F4A89A0541CCEA2162351A670EA46AA69A0859D ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys 15:20:31.0546 0x0778 mouclass - ok 15:20:31.0553 0x0778 [ 6BE61DAF4CDC0E13940096EAC4A9F490, 954DA0C9FE3881030EC0B9A428C2C2BBC86353EC9421009AC48FDC047315160F ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys 15:20:31.0573 0x0778 mouhid - ok 15:20:31.0582 0x0778 [ 2CFB54C638F75E39FBB22723401A8A56, 5E4B1107534AF4ADCD031FC4931B6819B8371720A3D68B5C9788C2AB34DA2C21 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys 15:20:31.0599 0x0778 mountmgr - ok 15:20:31.0610 0x0778 [ 1D8121F646343BD58B25ACBD0E5E9A8A, 5189E054F64159931B11699AAB3B0F9C21170253BED8B9271B74FDB452FBD263 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 15:20:31.0626 0x0778 MozillaMaintenance - ok 15:20:31.0634 0x0778 [ D78D87D9F0F6A0BB96A712DB3CD47440, 38AF07573224472BAEF036959E2A10AAA12980C22EF1F190285108DE498D10BC ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys 15:20:31.0662 0x0778 mpsdrv - ok 15:20:31.0690 0x0778 [ 9C7CE5CF0CDB6F41FDB96EF03754D283, A9A8B755EAF20C13FA32240FF71134020F21EF1EB7F033F385AA1F7FDB3CEF14 ] mpssvc C:\WINDOWS\system32\mpssvc.dll 15:20:31.0745 0x0778 mpssvc - ok 15:20:31.0758 0x0778 [ FE4CB8E6B4852BFEC3754A454290353C, 215208FC8196C42C9FC37E81F84FD3AA883F44DCA098A7AFCBE98116F64B8A48 ] MQAC C:\WINDOWS\system32\drivers\mqac.sys 15:20:31.0789 0x0778 MQAC - ok 15:20:31.0798 0x0778 [ C12373EC998C6F17C0FE2D6C3CBB9C04, 5F41757D6774B2DCADB340430B26C2C1BA93D7A47948DA92023622B66BB7B482 ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys 15:20:31.0846 0x0778 MRxDAV - ok 15:20:31.0864 0x0778 [ 3C0FA2ED75875481D00F3D77B1A3E336, 031E1A6F826CEDB44D9FAAA1615872087B822F7A4E0731D3023AEF1CFCD10A2F ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 15:20:31.0895 0x0778 mrxsmb - ok 15:20:31.0907 0x0778 [ 42FE3D84EFE835443151DC2A50D05643, 3582EA0CAA2A02AA9A6FDECF9DE0F962BF10FB1C2E7E804A3F0D62C4A4C365B1 ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys 15:20:31.0927 0x0778 mrxsmb20 - ok 15:20:31.0936 0x0778 [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys 15:20:31.0960 0x0778 MsBridge - ok 15:20:31.0970 0x0778 [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC C:\WINDOWS\System32\msdtc.exe 15:20:31.0997 0x0778 MSDTC - ok 15:20:32.0009 0x0778 [ 128E1D8C23F690DF1DD7AFDB214DB6ED, 9A04B77E91956B76B2FA2FE5F192C794E0C1DA708AE99B64B3B3D39902452E39 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 15:20:32.0029 0x0778 Msfs - ok 15:20:32.0036 0x0778 [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys 15:20:32.0051 0x0778 msgpiowin32 - ok 15:20:32.0058 0x0778 [ D727DEA75E316C80793C7098225D3F56, F6E7F01DDDED03E29BE64796873875A4CC7215B3C8152192A465EE2E76FFC8A1 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys 15:20:32.0078 0x0778 mshidkmdf - ok 15:20:32.0084 0x0778 [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys 15:20:32.0104 0x0778 mshidumdf - ok 15:20:32.0110 0x0778 [ 8E42D6B92CB4567467E29F58F2E31715, F1EEB6811526C079EF8C3702A535B23FA14C5A33CA2B14C9A65BAE136568B724 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys 15:20:32.0123 0x0778 msisadrv - ok 15:20:32.0132 0x0778 [ C9930B9F2ABF42C732202813951A9A26, FFCE4E4FEC9F8393C75828C1D5CC380A666D4606891789D3A6923CE6701D5D99 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll 15:20:32.0159 0x0778 MSiSCSI - ok 15:20:32.0165 0x0778 msiserver - ok 15:20:32.0173 0x0778 [ 2F3B9A23F8DEE9C3AD58CB3D966D83DD, C030A6376B392AA2D9CB8FF16196A4F71F4E7A3E32124B4B30D714D75B6583B2 ] MSKSSRV C:\WINDOWS\System32\drivers\MSKSSRV.sys 15:20:32.0215 0x0778 MSKSSRV - ok 15:20:32.0223 0x0778 [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys 15:20:32.0249 0x0778 MsLldp - ok 15:20:32.0257 0x0778 [ 5048B167703E801A1C631B07532A3942, F195D27C540F8A26130E6FA948B622E2ADE3973CCDE8EB37089A32D3816F07F7 ] MSMQ C:\WINDOWS\system32\mqsvc.exe 15:20:32.0283 0x0778 MSMQ - ok 15:20:32.0289 0x0778 [ 83364A92271339D8042C9DD5FD938A84, 23B9A90411DEF1ABA0A9EBFA6CC39F7EA2BFABD578F3783AD398551816AFEC2A ] MSPCLOCK C:\WINDOWS\System32\drivers\MSPCLOCK.sys 15:20:32.0309 0x0778 MSPCLOCK - ok 15:20:32.0315 0x0778 [ AE5A4B89CDFF544B6481970BFD48A056, 6BE9ABE33305387AA61B29AB075C2C72CCFC01A7E86C573B6BE9B4A0FFA9D3EC ] MSPQM C:\WINDOWS\System32\drivers\MSPQM.sys 15:20:32.0336 0x0778 MSPQM - ok 15:20:32.0352 0x0778 [ 999433544A4136A9B879C98049821EE6, 757B1EEE1BE010E06140D3F99F755F482782940D829BD7E00877775D9263C534 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys 15:20:32.0378 0x0778 MsRPC - ok 15:20:32.0390 0x0778 [ 4566CB65F176CE5CD8FCA487D2E3A64B, C058E431ED6D3F83A6C923648A79664A61A25F8797DA83C4AE25B491CC195F30 ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys 15:20:32.0405 0x0778 mssmbios - ok 15:20:32.0411 0x0778 [ 8A11E03B32840C0B73C14D16794F1A8A, A003C44F5234522454E285D388E506B7880CCE5FCE5622618F97C2DFFC6EA9DB ] MSTEE C:\WINDOWS\System32\drivers\MSTEE.sys 15:20:32.0431 0x0778 MSTEE - ok 15:20:32.0438 0x0778 [ 794285C4F166B8108292E63FEA3C41E3, 69BB7DDB7D6F3D21395432384FB06E114B2C343664CD62A5DE1A95FBC0F5AEDD ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys 15:20:32.0455 0x0778 MTConfig - ok 15:20:32.0464 0x0778 [ EEB9D3E90B83546864211D63C1A0A74A, E67118F7B91A192B50C9C2DC159B4276BBD8BF9CC935ABADA459E4DF4191066A ] Mup C:\WINDOWS\system32\Drivers\mup.sys 15:20:32.0481 0x0778 Mup - ok 15:20:32.0489 0x0778 [ 69CECA6726FAD321F5643B16A1FF3934, 8F43BEC668DD0A1D65D3B545B78AF4324AE36DCC3524B7CF3385FE2B19CB6B07 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys 15:20:32.0504 0x0778 mvumis - ok 15:20:32.0526 0x0778 [ B66E5DDF484DE03D61B83118E45D5E11, ECADFC9178CC957498F54F22758F4944C23CE692653DA1862061C9382AE8FD23 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys 15:20:32.0565 0x0778 NativeWifiP - ok 15:20:32.0592 0x0778 [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll 15:20:32.0647 0x0778 NaturalAuthentication - ok 15:20:32.0657 0x0778 [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc C:\WINDOWS\System32\ncasvc.dll 15:20:32.0692 0x0778 NcaSvc - ok 15:20:32.0707 0x0778 [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService C:\WINDOWS\System32\ncbservice.dll 15:20:32.0745 0x0778 NcbService - ok 15:20:32.0753 0x0778 [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll 15:20:32.0776 0x0778 NcdAutoSetup - ok 15:20:32.0784 0x0778 [ AB9EB3CADF4D415B598487397476A23A, EA48BC5CCD9814F6CA50485818BA150A1066D462306764C197935A926DF0565E ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys 15:20:32.0801 0x0778 ndfltr - ok 15:20:32.0838 0x0778 [ 5269DDC879DF5FEA2B7DB91AA4726CCA, 14B0A7A03A1A49D7018F8E82A8B95BEDCBF444535B4FF4A38157FC4FD61FA72B ] NDIS C:\WINDOWS\system32\drivers\ndis.sys 15:20:32.0894 0x0778 NDIS - ok 15:20:32.0903 0x0778 [ AF73B18F3096B165A6F4417C5ED36B01, B0FA9E52D7208F756103E2E853F1D17F594C9FDD2E76304743C581613E612449 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys 15:20:32.0923 0x0778 NdisCap - ok 15:20:32.0945 0x0778 [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys 15:20:32.0970 0x0778 NdisImPlatform - ok 15:20:32.0977 0x0778 [ 4C8BBD7EE829CE9BFB8E21134AC477E0, ED8E0D603AFFA4BD7C7057B7B10FEB811B89CB8C6D66EC8212AC24062D58CEDB ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 15:20:32.0996 0x0778 NdisTapi - ok 15:20:33.0003 0x0778 [ 76DB7B344F90A29A16CB6B7C67B87CF6, 921E6AF5B22CF3A9E153F6A6F5E3FFE64BE49959AD705F865D2734B0F8A07517 ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys 15:20:33.0027 0x0778 Ndisuio - ok 15:20:33.0034 0x0778 [ A76D79B71300EB3FEDD3D12D4C6F1D76, 9B20C3716DDD9EECCDDFA2C4F1A9ACA512B612A8CDFC8C22B2F867280AE51A3B ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 15:20:33.0054 0x0778 NdisVirtualBus - ok 15:20:33.0065 0x0778 [ DA9896F6ED9EAFDAC19177ADF99DD932, A89EA83567059A59058C0330951B292C1FD98A829276618703570293C73E2FFE ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys 15:20:33.0092 0x0778 NdisWan - ok 15:20:33.0102 0x0778 [ DA9896F6ED9EAFDAC19177ADF99DD932, A89EA83567059A59058C0330951B292C1FD98A829276618703570293C73E2FFE ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys 15:20:33.0128 0x0778 ndiswanlegacy - ok 15:20:33.0135 0x0778 [ 934E4A5CFD9CB891CD338052FA3467C6, 0D7C1709E6C818E2DA969220C888BF3A28D0952E73322EDDFF66AFEEB03A3103 ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys 15:20:33.0156 0x0778 ndproxy - ok 15:20:33.0165 0x0778 [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys 15:20:33.0189 0x0778 Ndu - ok 15:20:33.0199 0x0778 [ A704515CF3038668E9E2CA66E31A0700, 0F5A75AC5FF8E021D15D89ACE4C4D215825D931097E1BB633F46177E36F40157 ] NetAdapterCx C:\WINDOWS\system32\drivers\NetAdapterCx.sys 15:20:33.0227 0x0778 NetAdapterCx - ok 15:20:33.0234 0x0778 [ DD09E3115DF2CDB36FED21E67149EB91, F2FAD5091F456E593FB25843026C5F2440D3605E5355F5FEFBFEF5E9E70DDED6 ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys 15:20:33.0250 0x0778 NetBIOS - ok 15:20:33.0267 0x0778 [ 045A018E0BA5F9B75C5928A31C0E822C, 4285B752D5D1BC601B43537064DCE385F52A46D13E7988088B3BF2E2ADF3E2F2 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 15:20:33.0297 0x0778 NetBT - ok 15:20:33.0304 0x0778 [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] Netlogon C:\WINDOWS\system32\lsass.exe 15:20:33.0319 0x0778 Netlogon - ok 15:20:33.0331 0x0778 [ C3D07481FDD607F9B66B2CF1D8E26EF0, 5B20EAE39884B103F83A36E9AA55BA8932432344C7BADB11D8B827C07C7999E4 ] Netman C:\WINDOWS\System32\netman.dll 15:20:33.0363 0x0778 Netman - ok 15:20:33.0374 0x0778 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:20:33.0391 0x0778 NetMsmqActivator - ok 15:20:33.0398 0x0778 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:20:33.0413 0x0778 NetPipeActivator - ok 15:20:33.0432 0x0778 [ 9D7149C9E3487CA71036D21FE153CADF, 479E887E067319537331735AB2E29169038F61A4A3E4E58C084897DC78DF9E22 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll 15:20:33.0478 0x0778 netprofm - ok 15:20:33.0492 0x0778 [ C8B1AF912319FEF251288BDD27E9576D, 0A8C2CDE353C23F076F6ED8609F3074116179B3C8BF7700324250689FDB2331C ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll 15:20:33.0529 0x0778 NetSetupSvc - ok 15:20:33.0537 0x0778 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:20:33.0552 0x0778 NetTcpActivator - ok 15:20:33.0560 0x0778 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 15:20:33.0576 0x0778 NetTcpPortSharing - ok 15:20:33.0586 0x0778 [ DA8548D75434CE421BF921BAAC0916D9, 3A7E1D5EC02D6D4FD3321A1B8ADB20E99DD556E2D5FE1C98633F06EE6A023A23 ] netvsc C:\WINDOWS\System32\drivers\netvsc.sys 15:20:33.0618 0x0778 netvsc - ok 15:20:33.0640 0x0778 [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll 15:20:33.0685 0x0778 NgcCtnrSvc - ok 15:20:33.0712 0x0778 [ 6084A17157D6F80EAD0413152DEF6185, 2018FAC7A18DCEEA2095E76832BD38CF884C0E093B8743053B1EE1057612CA92 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll 15:20:33.0763 0x0778 NgcSvc - ok 15:20:33.0779 0x0778 [ BF69FF80C3975B1D1E9428A689A16CB1, 670016D59D2169B44E2EF4CBDE281A34C4E868D2465362B09FA2DBFA393A2804 ] NlaSvc C:\WINDOWS\System32\nlasvc.dll 15:20:33.0813 0x0778 NlaSvc - ok 15:20:33.0820 0x0778 [ 7190932DB00BE83B57C01B5EAC4D746B, A3C7C87874620E042EFCDF64332450ACEDD4FAB7F6C1B2DE97A1C6EDA2DA3055 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 15:20:33.0842 0x0778 Npfs - ok 15:20:33.0848 0x0778 [ 218DB396170D77BB94F69B526CC51B8F, 6AACC3C38E22061A210918771D3B087903CB7024AFBD013827864C02CD75A3F9 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys 15:20:33.0870 0x0778 npsvctrig - ok 15:20:33.0877 0x0778 [ 457DAC0D0978F5391E0742ADCB4C2E28, AD53F2FC597E90AFF0795655A36192BA803AD1E737C86FD216CD39E2EC4F9C36 ] nsi C:\WINDOWS\system32\nsisvc.dll 15:20:33.0905 0x0778 nsi - ok 15:20:33.0911 0x0778 [ A4952889D7C5804F17ABB9F454A371C2, 0FCE2AD4F705805D95993337915607F74CE2AA9EC92919DDE3D2569D6B9B5C13 ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys 15:20:33.0929 0x0778 nsiproxy - ok 15:20:33.0996 0x0778 [ 277F1B33E2D9915169A8155BF63DA5D7, A9B476C4E06349FBDD2DEE2ED327DC65BD5D3F2B93FE33729158EA01DF90C5AF ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 15:20:34.0090 0x0778 Ntfs - ok 15:20:34.0103 0x0778 [ C029E5408EEE26C3B4E5BA5D29738DB8, 8463A19A690304DC757E7698FCB59902B6305A0E9C48BF2FB2DF24C1EFA4A6EC ] Null C:\WINDOWS\system32\drivers\Null.sys 15:20:34.0126 0x0778 Null - ok 15:20:34.0139 0x0778 [ 189E5FCB96ABFEA84239A16062256EE4, F3233B1B14363CD4CD032F43368FD10A42C0BE665F4B13A7E253C327C2B832DB ] nvdimm C:\WINDOWS\System32\drivers\nvdimm.sys 15:20:34.0159 0x0778 nvdimm - ok 15:20:34.0170 0x0778 [ D4D60DDB6239D5F89B609D9174F313FE, 7849106C64A1BE5C5C9DCC6C1F0781DA2F4358372FB97A3159B1C08EED2F662B ] NVHDA C:\WINDOWS\system32\drivers\nvhda64v.sys 15:20:34.0185 0x0778 NVHDA - ok 15:20:34.0498 0x0778 [ 9859A34471D991AB7437B430C5FA8EDE, 9117AA2A513F161F5F5A382F5A1F5EEA8E36074973B793E9A42FAC55DC7E439A ] nvlddmkm C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys 15:20:34.0876 0x0778 nvlddmkm - ok 15:20:34.0947 0x0778 [ A6102293847A7A2DF01E7BF7AC1C1F12, 14E4E75711C00DA826136FB531E9AD53787502F441103386C5CD37EEFCE27AFC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe 15:20:35.0011 0x0778 NvNetworkService - ok 15:20:35.0024 0x0778 [ 1F50ED95984009BF3634D6BD1A16FA5B, 650A25B2419331D95B1E4C26DE253AC3500374EDEFC5DB55CD5D5884A26783F0 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys 15:20:35.0042 0x0778 nvraid - ok 15:20:35.0051 0x0778 [ D6C14906B78F235461EEF96A886830D4, 5D0EDE46EB9965C494B994F7071696C91C0C01352D1B000501E7B55F54F11952 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys 15:20:35.0069 0x0778 nvstor - ok 15:20:35.0074 0x0778 [ 23423E859CA253382D80D0321522A171, 79C914C0A421E0BE566B5FCD5868B1248D4F397C24F8C5E70A8EA6E260617845 ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 15:20:35.0084 0x0778 NvStreamKms - ok 15:20:35.0113 0x0778 [ FFADB2E34CE378F059F57161AD555DBF, 442C79D96012ABD76CB8A4FE1490AEB7D8CC9068170AB85DB7F8115FA807ADB0 ] nvsvc C:\WINDOWS\system32\nvvsvc.exe 15:20:35.0151 0x0778 nvsvc - ok 15:20:35.0168 0x0778 [ 9DF8BBA81D0A44AA9D14B7ADE47D2200, 3F50BE14892D168032DA9AF22259A986F024E6AD43DAEEC3C1E777BFA9E5A157 ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe 15:20:35.0189 0x0778 NvTelemetryContainer - ok 15:20:35.0196 0x0778 [ E502016A185B5BB9DC341873F82CD49C, A1F7D3E4FA5B4C81966F0E1DE8039CDD0374A9FF86AB252483FC9D98360089A1 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys 15:20:35.0206 0x0778 nvvad_WaveExtensible - ok 15:20:35.0214 0x0778 [ E3BCAF332BC25574784D4B91EA8E0C57, 0C0FFEE1519D0E5BB0B04900860590777513B4B1315218406DFB8DEB15B2AF52 ] nvvhci C:\WINDOWS\System32\drivers\nvvhci.sys 15:20:35.0224 0x0778 nvvhci - ok 15:20:35.0237 0x0778 [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll 15:20:35.0274 0x0778 OneSyncSvc - ok 15:20:35.0286 0x0778 [ 9338126799D9121151AE80EB8E418E1F, B5AA218375ABAACAD89ACCF9CB8F882BC28752DCE07A6BF37B6CC120064761BB ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 15:20:35.0306 0x0778 ose - ok 15:20:35.0431 0x0778 [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 15:20:35.0590 0x0778 osppsvc - ok 15:20:35.0616 0x0778 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll 15:20:35.0656 0x0778 p2pimsvc - ok 15:20:35.0672 0x0778 [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc C:\WINDOWS\system32\p2psvc.dll 15:20:35.0706 0x0778 p2psvc - ok 15:20:35.0714 0x0778 [ 13B175715A4391E4E5D2AB2EBC8CDBB5, 12BA91A586C5A31FBECEB2D4842E52F79EDD3E2AD4DB169C902B9A120AEC0201 ] Parport C:\WINDOWS\System32\drivers\parport.sys 15:20:35.0734 0x0778 Parport - ok 15:20:35.0745 0x0778 [ 428B9FAFB0EE6EF66EAAB7B49A96487A, 90892AC924B529B86B42D011B2B2F0556E204650C890FDACABD8051AD6EDB631 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys 15:20:35.0763 0x0778 partmgr - ok 15:20:35.0783 0x0778 [ 646118D521C8131F6940E8BD808246A0, AB43BF7BD1410C344F72F4DFE87094C4B883018C518088D6A244C95235B0A7BD ] PcaSvc C:\WINDOWS\System32\pcasvc.dll 15:20:35.0817 0x0778 PcaSvc - ok 15:20:35.0842 0x0778 [ 4B7830F9A04B1650B198CDC44F8B2F16, C6492F2EEA0C48EA6B2BEDCB8AA2EF0DAD83CCEED8490A2C7217B386EE3143AB ] pci C:\WINDOWS\system32\drivers\pci.sys 15:20:35.0876 0x0778 pci - ok 15:20:35.0886 0x0778 [ C447CDA030A3415711E4E940D2E9B399, 292888AE9D44013D8B12BB1D8803988EFF64957DE682B64FDC82E100646390DA ] pciide C:\WINDOWS\system32\drivers\pciide.sys 15:20:35.0902 0x0778 pciide - ok 15:20:35.0914 0x0778 [ 753174DF234EA8BBF732986D5F78FCE7, 6BE93B24DA2161DAE5ECBE393729BD4661F04CD0CDEBEBF6D92E9E212FA89D71 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys 15:20:35.0931 0x0778 pcmcia - ok 15:20:35.0939 0x0778 [ 1D05B6DE437515281CD91A16C16529E6, 0FC581E40AF55D916CF428ECF4387C1E909C3361426F1D9F723F9497C9B025D8 ] pcw C:\WINDOWS\system32\drivers\pcw.sys 15:20:35.0954 0x0778 pcw - ok 15:20:35.0963 0x0778 [ F5F1A092463D6E46E71CC709A65403D1, 9EEB499D54842667B4ECF1036E28926C8AD20515333373D2965C57BC2C7EAD4C ] pdc C:\WINDOWS\system32\drivers\pdc.sys 15:20:35.0980 0x0778 pdc - ok 15:20:36.0047 0x0778 [ DFEF059EBBDC137DD242326EB67770C7, FEA245E7316A0567D4A0930F96C502BCB37350C80742F3FFEA668512EC5B9225 ] PDF Architect 4 C:\Program Files\PDF Architect 4\ws.exe 15:20:36.0169 0x0778 PDF Architect 4 - ok 15:20:36.0203 0x0778 [ 82AA78BB5365D76F5D9EF4A978BFEF5A, C5A99C748E1E43134CEADEF89CD439E411465242741241B38BA99032710D84A7 ] PDF Architect 4 CrashHandler C:\Program Files\PDF Architect 4\crash-handler-ws.exe 15:20:36.0274 0x0778 PDF Architect 4 CrashHandler - ok 15:20:36.0304 0x0778 [ 462724DA4AD38C159F8AFDB8F6A55BE2, 189F5C1B470DF6EAF9E02A8E294FA3B33DBCAD36695C6C17747B1D56FE8FC78D ] PDF Architect 4 Creator C:\Program Files\PDF Architect 4\creator-ws.exe 15:20:36.0339 0x0778 PDF Architect 4 Creator - ok 15:20:36.0369 0x0778 [ 08DAD53D89403158FC493FABAE217773, 833BF76818B984FE26A87A8DB75BA15A1143C9FCC0BBB5A8708656C7C09D6A28 ] PDF Architect 4 Manager C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe 15:20:36.0404 0x0778 PDF Architect 4 Manager - ok 15:20:36.0429 0x0778 [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys 15:20:36.0481 0x0778 PEAUTH - ok 15:20:36.0490 0x0778 [ CD9BA1C279BE0E92E971C2B45A7F3D9B, EC6546868718771EE45D07E9E856E5F33DD4339C1115E4479D7DEF4394D141D0 ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys 15:20:36.0506 0x0778 percsas2i - ok 15:20:36.0513 0x0778 [ 6D5EA79E82A48B181E18C2C39416E8C8, 4F5EF24FFFABB82B1E9D98DE3275508D458589F729C4976FDB3C2EC51549D414 ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys 15:20:36.0528 0x0778 percsas3i - ok 15:20:36.0552 0x0778 [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe 15:20:36.0601 0x0778 PerfHost - ok 15:20:36.0617 0x0778 [ 419F10BCF592762A22821AACBF5B629D, 0866BE3470A98F81AA83C90635FCF43493A1739389DB88F7FD20604AD21AB691 ] phantomtap C:\WINDOWS\System32\drivers\phantomtap.sys 15:20:36.0628 0x0778 phantomtap - ok 15:20:36.0652 0x0778 [ 1206779B445417A29B33FCC7230CD28C, FCC61CF4F27F0585F267D37324CBCDE2DE20C3EB34E87256F59997F0984C8EDE ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll 15:20:36.0718 0x0778 PhoneSvc - ok 15:20:36.0729 0x0778 [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll 15:20:36.0758 0x0778 PimIndexMaintenanceSvc - ok 15:20:36.0803 0x0778 [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla C:\WINDOWS\system32\pla.dll 15:20:36.0898 0x0778 pla - ok 15:20:36.0910 0x0778 [ DBD6E8A5C358AAA3B4900EFD5CF94CC8, C8261CBE358562B3F31ADA0567723E0118A8687DFC8939FABC65E61C38BFE20B ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll 15:20:36.0934 0x0778 PlugPlay - ok 15:20:36.0942 0x0778 [ E8BE4041A69023B6A4D1096EE8436347, 133BAA21852D077EA600F0A09C112F6511ACB792757472891E71185E94135D5B ] pmem C:\WINDOWS\System32\drivers\pmem.sys 15:20:36.0962 0x0778 pmem - ok 15:20:36.0969 0x0778 [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM C:\WINDOWS\System32\drivers\pnpmem.sys 15:20:36.0986 0x0778 PNPMEM - ok 15:20:36.0994 0x0778 [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll 15:20:37.0012 0x0778 PNRPAutoReg - ok 15:20:37.0027 0x0778 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll 15:20:37.0058 0x0778 PNRPsvc - ok 15:20:37.0075 0x0778 [ 9744ADAF8DD679D64A33D828FABA39E1, AE820E529697A2F308E6A24127B3D4A7F02C406DA46A6CB65243EC3F6B400950 ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll 15:20:37.0113 0x0778 PolicyAgent - ok 15:20:37.0127 0x0778 [ F39D3876C731BB01BFE8F574188837C8, 51CB5E89397D6A150A05BDD53CC9B90B419A040BE1828C2E7BBD6684FE371588 ] Power C:\WINDOWS\system32\umpo.dll 15:20:37.0156 0x0778 Power - ok 15:20:37.0164 0x0778 [ 1FB09FD846D5030B82EB345E9970A105, 871D38DD966EDD919B2E0C51125E1834A15A0222E2452605988BFD7E7B37C5C1 ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys 15:20:37.0187 0x0778 PptpMiniport - ok 15:20:37.0278 0x0778 [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll 15:20:37.0459 0x0778 PrintNotify - ok 15:20:37.0474 0x0778 [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll 15:20:37.0503 0x0778 PrintWorkflowUserSvc - ok 15:20:37.0516 0x0778 [ E0E55CDA29C80A9520FCFC78D7F8A73D, 9DE15A73643D71183E568F8F4DD8776D935786BE46F15BFE2DFD607378FC9E58 ] Processor C:\WINDOWS\System32\drivers\processr.sys 15:20:37.0540 0x0778 Processor - ok 15:20:37.0555 0x0778 [ F96AA93B40D4670016DAF8C8F0D1BCB5, E8B77B271FDD6036F44EB9F7B7D270E754E69914F91E19512BF038FC3EDAC04F ] ProfSvc C:\WINDOWS\system32\profsvc.dll 15:20:37.0597 0x0778 ProfSvc - ok 15:20:37.0607 0x0778 [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched C:\WINDOWS\system32\drivers\pacer.sys 15:20:37.0625 0x0778 Psched - ok 15:20:37.0631 0x0778 [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI C:\WINDOWS\system32\DRIVERS\psi_mf_amd64.sys 15:20:37.0640 0x0778 PSI - ok 15:20:37.0652 0x0778 [ 114C1662EBF3C52B0FF52EAB1D9787BB, 6EB1871F69EF4CB1A8FBFA9D73050E5253861D4BF8DC8999B652EAAFB04DD10D ] PushToInstall C:\WINDOWS\system32\PushToInstall.dll 15:20:37.0690 0x0778 PushToInstall - ok 15:20:37.0696 0x0778 [ C32ECB99AD25E9A04F01C8665DF29EF8, 0489B3DEC6A33E50D8A48A8DAD3F5B923A81F7300E4A71358D90D2879BAC9AA2 ] pwdrvio C:\WINDOWS\system32\pwdrvio.sys 15:20:37.0708 0x0778 pwdrvio - ok 15:20:37.0714 0x0778 [ D619356B955EEFA642F5FF72755E8B3C, 1FD54978A77ACD6FBF1236E177ED074894743A9141E4169FE9AFE28680FC93C5 ] pwdspio C:\Windows\system32\pwdspio.sys 15:20:37.0725 0x0778 pwdspio - ok 15:20:37.0738 0x0778 [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE C:\WINDOWS\system32\qwave.dll 15:20:37.0770 0x0778 QWAVE - ok 15:20:37.0777 0x0778 [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys 15:20:37.0799 0x0778 QWAVEdrv - ok |
27.07.2018, 14:28 | #11 |
| Bereinigung durch ADWCleaner führt zum Absturz Teil 2 von 2 Code:
ATTFilter 15:20:37.0903 0x0778 [ 9B35220786B06B61D19C54406904E6ED, 166FDD8CC15D3D1B13E2CECC814ED876EA66D65E9308043ED0024660C4F90E8D ] Radio.fx C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe 15:20:38.0014 0x0778 Radio.fx - ok 15:20:38.0029 0x0778 [ 0FFABEB2D06CD74DDE0BCA510EEAEEBC, 8598F39D312754C92A3776104D596F0C0312712D934B9994B2711F95FA6FE0AE ] Ramdisk C:\WINDOWS\system32\DRIVERS\ramdisk.sys 15:20:38.0043 0x0778 Ramdisk - ok 15:20:38.0050 0x0778 [ B834761352403111D0113284D8736025, 444D05D5F4CED956AFE48CA29CD59420BDB2B14336D19BE2A28612A851EACF4E ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 15:20:38.0068 0x0778 RasAcd - ok 15:20:38.0076 0x0778 [ FA99CE309B66586A0AA6EF9CFF7BC467, 4684EB05828C2153FE94468E7A9A75D8C81F90E700B437C5990BC9451AD39AC7 ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys 15:20:38.0100 0x0778 RasAgileVpn - ok 15:20:38.0108 0x0778 [ C7CCE345D0010B3B9AC5067578436BFE, 4473E7D0492B7F0214576861A6AD90363D7F826B5E0DE15A56E93DA94BBF19E7 ] RasAuto C:\WINDOWS\System32\rasauto.dll 15:20:38.0133 0x0778 RasAuto - ok 15:20:38.0140 0x0778 [ 775ED7E51B58CF9EB415A1DBA540DACF, A3035A8A299D35B7A24A347FB8A2DB6B5892FD2A181D90F64CCD4806EA154395 ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys 15:20:38.0164 0x0778 Rasl2tp - ok 15:20:38.0192 0x0778 [ 157D149DB0061CBE44C29D3EAB43A4FF, F2263B448307F9CE33B202D366D3AF40494B579738483C0801EAD04D40C5D90C ] RasMan C:\WINDOWS\System32\rasmans.dll 15:20:38.0258 0x0778 RasMan - ok 15:20:38.0267 0x0778 [ E2433A620ABF4083157944E4692C500D, 126CA9F9D38FB4FA312A82FEA24C13D0693407384B1BCD55A0CBEFA8E52E1D8A ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 15:20:38.0289 0x0778 RasPppoe - ok 15:20:38.0296 0x0778 [ EE5D1D51FA74ECCE57CF2DB8F6A417D8, CC295366C60CAECA7CC32903E3A983635B55A5F5FD6E6BC4FEFE997B8154345C ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys 15:20:38.0319 0x0778 RasSstp - ok 15:20:38.0335 0x0778 [ 5F7027A2F16AFF56DA68D996FAFDAAD8, E1DC1CC818E7ED8B107386CD55EFF38B663FD3F9A2ACDD0919F5AF3591638D1F ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 15:20:38.0363 0x0778 rdbss - ok 15:20:38.0372 0x0778 [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys 15:20:38.0396 0x0778 rdpbus - ok 15:20:38.0406 0x0778 [ 3DE4216324BE32FC3AF7667AE2406EE5, B2E3C47983C58B32E07E251FF729670B5D481249EEDFD3A3EFB0F8734673F1F6 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys 15:20:38.0438 0x0778 RDPDR - ok 15:20:38.0449 0x0778 [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys 15:20:38.0465 0x0778 RdpVideoMiniport - ok 15:20:38.0479 0x0778 [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys 15:20:38.0501 0x0778 rdyboost - ok 15:20:38.0554 0x0778 [ 3DCB3FAFE46B9FE41C9065EBBED97724, AEB08C8C1E6AB6181A5F2B540F913B59A1256AF0E6D5355C4AC7DDBA0BF0F20B ] ReFS C:\WINDOWS\system32\drivers\ReFS.sys 15:20:38.0630 0x0778 ReFS - ok 15:20:38.0663 0x0778 [ B76350D40A46DBA17205F8373528FD83, A599A9B1297B5D70632A9EF23E9771BA646672A1B0E323144EDE906CCA172EB7 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys 15:20:38.0707 0x0778 ReFSv1 - ok 15:20:38.0726 0x0778 [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 15:20:38.0776 0x0778 RemoteAccess - ok 15:20:38.0786 0x0778 [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 15:20:38.0813 0x0778 RemoteRegistry - ok 15:20:38.0836 0x0778 [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo C:\WINDOWS\system32\RDXService.dll 15:20:38.0886 0x0778 RetailDemo - ok 15:20:38.0913 0x0778 [ F85AE59A52885F4B09AADAFB23001A3B, CE722F19C0F916BC9EC1B7B28A479C71504190271B54B4B9ACA82922B484FEA0 ] Rezip C:\windows\SysWOW64\Rezip.exe 15:20:38.0934 0x0778 Rezip - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:38.0969 0x0778 Detect skipped due to KSN trusted 15:20:38.0969 0x0778 Rezip - ok 15:20:38.0981 0x0778 [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy C:\WINDOWS\System32\drivers\rhproxy.sys 15:20:39.0003 0x0778 rhproxy - ok 15:20:39.0015 0x0778 [ 7CCAEBCAB6FC1ED0206C07E083E79207, 40BFA1BEDFF093652279494EDD397FC094794B76916C2681D0544D6793314DFE ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 15:20:39.0029 0x0778 RichVideo - ok 15:20:39.0039 0x0778 [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc C:\WINDOWS\System32\RMapi.dll 15:20:39.0067 0x0778 RmSvc - ok 15:20:39.0073 0x0778 [ C7FA7FB7A02185C29F46886B3938EE53, 2B495D655529F0E5497E9D686D3169FDFECA99B6BB56A02809F39D7E022EFCC4 ] ROOTMODEM C:\WINDOWS\system32\Drivers\RootMdm.sys 15:20:39.0093 0x0778 ROOTMODEM - ok 15:20:39.0101 0x0778 [ 3CD63AE6A9A1DE4CD5831AE15221C861, CB8B5FDA48D9D4E5A9F26F67859105E2769AF82B2CA1B0B35D9BFBA611445CC0 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll 15:20:39.0128 0x0778 RpcEptMapper - ok 15:20:39.0134 0x0778 [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator C:\WINDOWS\system32\locator.exe 15:20:39.0155 0x0778 RpcLocator - ok 15:20:39.0187 0x0778 [ 107661923943E9DC06ED2713AC5F7753, 2B311E9BD635F1CEB222EF798C5523447AAF63E2331377804884572D7512F299 ] RpcSs C:\WINDOWS\system32\rpcss.dll 15:20:39.0249 0x0778 RpcSs - ok 15:20:39.0261 0x0778 [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys 15:20:39.0284 0x0778 rspndr - ok 15:20:39.0290 0x0778 [ 4CA0DBA9E224473D664C25E411F5A3BD, 71423A66165782EFB4DB7BE6CE48DDB463D9F65FD0F266D333A6558791D158E5 ] rtport C:\windows\SysWOW64\drivers\rtport.sys 15:20:39.0299 0x0778 rtport - ok 15:20:39.0308 0x0778 [ 032F537623A7B2FB81AAA184C30B70C3, C9E0569322A173D62D357CEA7BFECB0CF9D5817E3AE4B46955760BF98F5D16B3 ] s0017bus C:\WINDOWS\System32\drivers\s0017bus.sys 15:20:39.0321 0x0778 s0017bus - ok 15:20:39.0327 0x0778 [ 9964A28E569B4FF105B446EF8978FD5C, 7872699B528C31E8B8699B6F8D2127440CD67A3BEAD0E5941BD58FDCD73DBE2C ] s0017mdfl C:\WINDOWS\system32\DRIVERS\s0017mdfl.sys 15:20:39.0335 0x0778 s0017mdfl - ok 15:20:39.0345 0x0778 [ 06347087D274C23DCFA8C4AB5C4314DB, 757DDAC72524EB59854A05E46A16CE2B0AF0CE1FC411110712576327D3984E91 ] s0017mdm C:\WINDOWS\system32\DRIVERS\s0017mdm.sys 15:20:39.0357 0x0778 s0017mdm - ok 15:20:39.0365 0x0778 [ F0F0747B3FA50272DE6B1BF575FA4700, FCB9007C630A0FD23CA0A8286BA9E498F6B36F1090F717B4A713286EEC4346C0 ] s0017mgmt C:\WINDOWS\system32\DRIVERS\s0017mgmt.sys 15:20:39.0377 0x0778 s0017mgmt - ok 15:20:39.0384 0x0778 [ 7224412CEA2FF2DF7D4842C1B0E71045, A2773319909B66F4DEA2E6134BB2723383866A63C482A26E2ADB65F29A405281 ] s0017nd5 C:\WINDOWS\System32\drivers\s0017nd5.sys 15:20:39.0392 0x0778 s0017nd5 - ok 15:20:39.0401 0x0778 [ 3FEADBC7F09B8B596CBFB82F12ABA87F, FBA6209893FF7C07823AB6F89FF7E36CF116C9FE202868DB4289233AF85E659A ] s0017obex C:\WINDOWS\system32\DRIVERS\s0017obex.sys 15:20:39.0413 0x0778 s0017obex - ok 15:20:39.0424 0x0778 [ 2B63BEA31D939888B2A8F3F14D89B5C1, 0C1333885DB315A63C1FAA53ED2160695F97C1B336B8DA986A48B97F39A46954 ] s0017unic C:\WINDOWS\System32\drivers\s0017unic.sys 15:20:39.0435 0x0778 s0017unic - ok 15:20:39.0441 0x0778 [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys 15:20:39.0458 0x0778 s3cap - ok 15:20:39.0464 0x0778 [ 62DB6CC4B0818F1B5F3441241B098F12, 7A53B3FBA3F82EDE6FA688E531FBE7EC9E1AE329090C0AFE0DCD64F65BD90F21 ] SABI C:\windows\system32\Drivers\SABI.sys 15:20:39.0492 0x0778 SABI - ok 15:20:39.0500 0x0778 [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] SamSs C:\WINDOWS\system32\lsass.exe 15:20:39.0523 0x0778 SamSs - ok 15:20:39.0534 0x0778 [ 04C51BBD8C9F54E5F2C5D831B03B11E3, 15AD9F224CBBCAFB117574F03C6F1C02639928A95BC4533453EBAFB20F7AE671 ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys 15:20:39.0559 0x0778 sbp2port - ok 15:20:39.0571 0x0778 [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll 15:20:39.0604 0x0778 SCardSvr - ok 15:20:39.0615 0x0778 [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll 15:20:39.0645 0x0778 ScDeviceEnum - ok 15:20:39.0652 0x0778 [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys 15:20:39.0676 0x0778 scfilter - ok 15:20:39.0703 0x0778 [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule C:\WINDOWS\system32\schedsvc.dll 15:20:39.0764 0x0778 Schedule - ok 15:20:39.0776 0x0778 [ 6538E939E55B589AA4F5BC22D35A6B36, 262BB2C6499B1B033E07CD0B8CB9C41122EE9DE52B34F664999B667E1C7CDB0D ] scmbus C:\WINDOWS\system32\drivers\scmbus.sys 15:20:39.0793 0x0778 scmbus - ok 15:20:39.0804 0x0778 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll 15:20:39.0833 0x0778 SCPolicySvc - ok 15:20:39.0846 0x0778 [ 495273177E87B0C34D7E431E9254FA23, 61116DA77622F5A0E931F5033C1B870A22AD3438C056FD1F320F857908E4124B ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys 15:20:39.0868 0x0778 sdbus - ok 15:20:39.0875 0x0778 [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys 15:20:39.0889 0x0778 SDFRd - ok 15:20:39.0898 0x0778 [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll 15:20:39.0929 0x0778 SDRSVC - ok 15:20:39.0938 0x0778 [ F80D6C03FEA2F7DEE14023B7229DA8C2, B62AFCFCDE9C1BA0A5D80BAAC3D3D95546DB2E532C04C765FF85B27D1CBD5B8D ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys 15:20:39.0954 0x0778 sdstor - ok 15:20:39.0961 0x0778 [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon C:\WINDOWS\system32\seclogon.dll 15:20:39.0982 0x0778 seclogon - ok 15:20:40.0018 0x0778 [ 398A81D590424441B2F5C5C08073CADB, 1E064DFCC49EB0D8A4150276BF796B9DFA030C451570A170EC940F8CBAAD80F3 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe 15:20:40.0062 0x0778 Secunia PSI Agent - ok 15:20:40.0085 0x0778 [ 8C2D3A80FC90A860F0F24DEB67471481, CE4D17B63149C44B4CD5CB7776FD4705DC675F6D2D077D53BE15578294EBC9D4 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe 15:20:40.0112 0x0778 Secunia Update Agent - ok 15:20:40.0137 0x0778 [ 0F67F777705C6DC33FFE0FF459762957, 16BE999DCEC6C2C4F799025ACBFDE04CCE66B39160B6186A00F4BCFA2A1E41AA ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe 15:20:40.0178 0x0778 SecurityHealthService - ok 15:20:40.0186 0x0778 [ 32B159FE12047F7526303D0F30949645, A5067FFB79D02FC8737773458FC459F8ACD14BE7F143C4356863227D63DF667F ] semav6msr64 C:\windows\system32\drivers\semav6msr64.sys 15:20:40.0242 0x0778 semav6msr64 - ok 15:20:40.0278 0x0778 [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll 15:20:40.0354 0x0778 SEMgrSvc - ok 15:20:40.0364 0x0778 [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS C:\WINDOWS\System32\sens.dll 15:20:40.0387 0x0778 SENS - ok 15:20:40.0424 0x0778 [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe 15:20:40.0500 0x0778 SensorDataService - ok 15:20:40.0529 0x0778 [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService C:\WINDOWS\system32\SensorService.dll 15:20:40.0591 0x0778 SensorService - ok 15:20:40.0606 0x0778 [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll 15:20:40.0652 0x0778 SensrSvc - ok 15:20:40.0664 0x0778 [ C5CF2941AA9E417B3A224601255C002E, 31E2988E13D9BB3630980E8B71AE5FB244EFB15970623C1FE76B7ACA25A4A2F2 ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys 15:20:40.0682 0x0778 SerCx - ok 15:20:40.0695 0x0778 [ B9C113BD9FCA4F3E23F03708A7DA07CC, 0A070BDDA956B1869D58A173B56ABA011E1F7A3C5D258343D0AEDC1EC87F4B53 ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys 15:20:40.0715 0x0778 SerCx2 - ok 15:20:40.0722 0x0778 [ 1845736FA47A1DFBBB642FE21095B4E0, 057E8750E8695F6B72A33BBF1C5CFCCD6BFC992E6B99A487A07F5A4921004791 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys 15:20:40.0739 0x0778 Serenum - ok 15:20:40.0747 0x0778 [ F1BABF50469041797ED9928C31318832, 1A8C75F4696D4D2AA47EA33BC96069A394466953EBC3CFB2B3D6B961B8B5875A ] Serial C:\WINDOWS\System32\drivers\serial.sys 15:20:40.0766 0x0778 Serial - ok 15:20:40.0773 0x0778 [ 340116988930B07629A2D0C2B380A365, EBAAC3DF2E8DABFB477340E79FC8E3A8B74340C389D73E51D64A97A332664113 ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys 15:20:40.0793 0x0778 sermouse - ok 15:20:40.0816 0x0778 [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv C:\WINDOWS\system32\sessenv.dll 15:20:40.0855 0x0778 SessionEnv - ok 15:20:40.0866 0x0778 [ 77FF0A5BA023D8E8C82EACCD54EA5C78, A4A88A550419C347E369DDD29D4EB5C1BC4D980FBA9C655DF787A166FCA2497D ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys 15:20:40.0884 0x0778 sfloppy - ok 15:20:40.0892 0x0778 [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent C:\WINDOWS\system32\drivers\SgrmAgent.sys 15:20:40.0907 0x0778 SgrmAgent - ok 15:20:40.0917 0x0778 [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker C:\WINDOWS\system32\SgrmBroker.exe 15:20:40.0937 0x0778 SgrmBroker - ok 15:20:40.0957 0x0778 [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 15:20:41.0003 0x0778 SharedAccess - ok 15:20:41.0028 0x0778 [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll 15:20:41.0085 0x0778 SharedRealitySvc - ok 15:20:41.0107 0x0778 [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 15:20:41.0154 0x0778 ShellHWDetection - ok 15:20:41.0166 0x0778 [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll 15:20:41.0194 0x0778 shpamsvc - ok 15:20:41.0201 0x0778 [ 1443CF919C2A3207CE7724E0A31686A2, 3F0ECC565F67638A57A23BF69C399AD638DA9F81F1660CF3E027DC057E990EA4 ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys 15:20:41.0216 0x0778 SiSRaid2 - ok 15:20:41.0223 0x0778 [ C0B1EAD6CC127CAE4E84EBF54105B3B8, 86F5C937D9DC61F262FF00B45249162F4087B6A1CA0FC24EF7950E4E77FEF26B ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys 15:20:41.0239 0x0778 SiSRaid4 - ok 15:20:41.0251 0x0778 [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 15:20:41.0277 0x0778 SkypeUpdate - ok 15:20:41.0285 0x0778 [ 0D0D3F885589CDEA678C3B17ABB70DC7, FA1D628A81CBE9DE287162A1D2B8661548476ED7159C2AEF60E7B954EB8FC133 ] SLEE_19_DRIVER C:\WINDOWS\Sleen1964.sys 15:20:41.0316 0x0778 SLEE_19_DRIVER - ok 15:20:41.0323 0x0778 [ 4C51055DA5FF23500EA6FE587EBE26E6, AD2B90FBE4B7989E7715BC566DDE012DE65C1173392232E039A4AAD368AF5075 ] SmbDrvI C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys 15:20:41.0333 0x0778 SmbDrvI - ok 15:20:41.0340 0x0778 [ B7C6144293CFAD2DEDCD022C44735DC2, 75F26A8F43EED45764D50B2CCE44C453BFBBD0FA56B6AF1F2B4B8B3665C3961E ] smphost C:\WINDOWS\System32\smphost.dll 15:20:41.0361 0x0778 smphost - ok 15:20:41.0383 0x0778 [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll 15:20:41.0428 0x0778 SmsRouter - ok 15:20:41.0445 0x0778 [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe 15:20:41.0469 0x0778 SNMPTRAP - ok 15:20:41.0479 0x0778 [ 21FF393512F51F5A98620C794B4488A3, 8A35923D3D6993FC014D86F0F7BD5C106586824DB8D26C04DC2AD0B8ED13ED20 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe 15:20:41.0497 0x0778 Sony PC Companion - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:41.0539 0x0778 Detect skipped due to KSN trusted 15:20:41.0539 0x0778 Sony PC Companion - ok 15:20:41.0561 0x0778 [ 5E70A578D27BCC7E37E16055669F2836, 7713A750902E1B9BA70C9F9EE8977E7C591AAE80D155657370E63FA2CEDACCAC ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys 15:20:41.0595 0x0778 spaceport - ok 15:20:41.0603 0x0778 [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys 15:20:41.0621 0x0778 SpatialGraphFilter - ok 15:20:41.0631 0x0778 [ D05EB2BB52EC6B665D1631EC33241B80, 29598FC180020515254A9FAE7BE8077549C656EDB425059691007EEC0F9346F9 ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys 15:20:41.0649 0x0778 SpbCx - ok 15:20:41.0682 0x0778 [ 52A4B8C04C345434C974B9A949521BAE, 5FAA7E1BECD6FA28E4BA53E9B3301328B6E8516867BD7D76202A73B8CD530BC5 ] spectrum C:\WINDOWS\system32\spectrum.exe 15:20:41.0741 0x0778 spectrum - ok 15:20:41.0768 0x0778 [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler C:\WINDOWS\System32\spoolsv.exe 15:20:41.0819 0x0778 Spooler - ok 15:20:41.0938 0x0778 [ 95EBCA251177AD13238FF0DC15C3202C, A7AAB09BAA42562D3638664FEE899B47BF93AEFC94EC112E9E433A3F093909A8 ] sppsvc C:\WINDOWS\system32\sppsvc.exe 15:20:42.0105 0x0778 sppsvc - ok 15:20:42.0139 0x0778 [ 3EB4023AC700182D84CB6761D3727394, 6993C127F4AD8B899E6A285EDB849807F522D9B0A0018E5436114F527EC8B1F1 ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys 15:20:42.0191 0x0778 srv2 - ok 15:20:42.0205 0x0778 [ 93DF24D0C33F2894429D4180145CBDA7, 763F05818AD5F348887C297FA14FB77B6F54B9A5C3C1D70CF2B7B0692961950C ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys 15:20:42.0256 0x0778 srvnet - ok 15:20:42.0269 0x0778 [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 15:20:42.0300 0x0778 SSDPSRV - ok 15:20:42.0318 0x0778 [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent C:\WINDOWS\System32\OpenSSH\ssh-agent.exe 15:20:42.0364 0x0778 ssh-agent - ok 15:20:42.0376 0x0778 [ C7DF51E24DD853E7E2D3C0BCDCE57D6C, D1BFDC89F00C5B8388EB233290B6D540C246D0267B1C192C51645004A8CD8C62 ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll 15:20:42.0407 0x0778 SstpSvc - ok 15:20:42.0431 0x0778 [ 7DB9E612A2742ACEAB080B882E83141C, FFD1FA36E732F55223F3F4B5F845331DBB3073B023C2C5BF51A0E7680DEE7FA7 ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe 15:20:42.0463 0x0778 ss_conn_service - ok 15:20:42.0471 0x0778 [ 972C24CD7FF2C1BA19A89B990539B0EC, 7EF96F5C7BE63F665F2841FF8BBC5F647CD73B8195804FE486B0034102438356 ] Start BT in service C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe 15:20:42.0479 0x0778 Start BT in service - ok 15:20:42.0602 0x0778 [ B9E4174DFBDCA9979A92D17C2E67890E, 1717A6B7CADDDFCA8879B293C29617E194437E049308BCEDF3D07007C41FE39F ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll 15:20:42.0789 0x0778 StateRepository - ok 15:20:42.0804 0x0778 [ DA82903F26AE12034CC5229F61098948, E7B5CA27C864BE95EC109D0692F44BE9F5F56AB6173AB1811F4E83A3EB5F26CA ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys 15:20:42.0818 0x0778 stexstor - ok 15:20:42.0841 0x0778 [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc C:\WINDOWS\System32\wiaservc.dll 15:20:42.0888 0x0778 stisvc - ok 15:20:42.0899 0x0778 [ F2D1983C7BEF5E3AB8978A7796C59A75, 39B2005F7CCEC95D2F67AE5F69C3768FEFA04AABC0723BAD8A986A036AF0629B ] storahci C:\WINDOWS\system32\drivers\storahci.sys 15:20:42.0917 0x0778 storahci - ok 15:20:42.0925 0x0778 [ 76C9E2AA3400C22FC7091AD2F2999F95, 0015CF42CBA603448DFD85909D5047D5F9BE9153972C3832B1CF4B92A6BF0D01 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys 15:20:42.0940 0x0778 storflt - ok 15:20:42.0949 0x0778 [ 701078F20919BD635EA25F691880F651, 6D56027007EF92A72C20B9B8024FDD96E03E2B8746F39D57BD1F7CAD2FC80DB2 ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys 15:20:42.0966 0x0778 stornvme - ok 15:20:42.0976 0x0778 [ 47CE4211A40C2C023A8138E18757F3D2, D684D2A7DECC23418A685358EA9B4F6EB3A68C690D5ED8E82F4B4639DF022775 ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys 15:20:43.0003 0x0778 storqosflt - ok 15:20:43.0033 0x0778 [ DEA7BB6D3724F2FD9E61ED085E69DFA7, 5047F184894E79C31739D3C9632E43E8D2ABD70AA674DE82D6D2D0FDA137BF3F ] StorSvc C:\WINDOWS\system32\storsvc.dll 15:20:43.0104 0x0778 StorSvc - ok 15:20:43.0113 0x0778 [ 25D7B79F80F3C2CD97D797C14D470165, 5425F98A66741BB2BC7BDC8B21C3AF859A503596D983010883BF5BE4FD999D9D ] storufs C:\WINDOWS\system32\drivers\storufs.sys 15:20:43.0128 0x0778 storufs - ok 15:20:43.0136 0x0778 [ 1FC7B7BE58A29DF27F5E6F6C2F061FA3, D8CD6D1BD0ACA4B851DBC85F898CB5DA8715C5AB3D62D7B0D6BBFEADC0382A8E ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys 15:20:43.0151 0x0778 storvsc - ok 15:20:43.0158 0x0778 [ 0B154B033AD7F9215DED11E0CFC80A25, 383D7BF361D75A3B78E4C8E3F616E487FA6172F860AE364B1AC73F75BE38944F ] svsvc C:\WINDOWS\system32\svsvc.dll 15:20:43.0193 0x0778 svsvc - ok 15:20:43.0208 0x0778 [ 54255DF324C621A97220EBFA832237D2, 27BAB2018BE66C67D6C2BBAA8E849E89B4150B8C81E7350DB0A1D14BEEB965D9 ] swenum C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys 15:20:43.0221 0x0778 swenum - ok 15:20:43.0239 0x0778 [ B3C113C9B784A4D296C7A7BA515F74BF, 0D20281B8AA9ED6C89E10122F3A153C2E21464686E5A3D2F907224584E6B5BCF ] swprv C:\WINDOWS\System32\swprv.dll 15:20:43.0283 0x0778 swprv - ok 15:20:43.0291 0x0778 [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys 15:20:43.0317 0x0778 Synth3dVsc - ok 15:20:43.0357 0x0778 [ 14FEB5052837D9277520088DCE549036, 8A0AC2E5F3E202E97C71A500CE5947A19163B166FB1D88FDB9FCD69A7FFC8E1D ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys 15:20:43.0405 0x0778 SynTP - ok 15:20:43.0440 0x0778 [ A8D839012996A00F3071116C529FF5D5, 9C2828C8F645F9F44B65FAC50CACD7D2699634059585DDE84D11C7F06F244060 ] SysMain C:\WINDOWS\system32\sysmain.dll 15:20:43.0506 0x0778 SysMain - ok 15:20:43.0520 0x0778 [ 607143646829B70F7C60F4CF499AD41D, 00746AA3D0ECE27BC04FCAB4955A199C5E040F850D0129865EC8F03DD202EF7A ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll 15:20:43.0553 0x0778 SystemEventsBroker - ok 15:20:43.0565 0x0778 [ 36C9970435778474D5484D41D8D4606D, A8A6AD08C60920F5E2DA77E11A0C4DC702F545FFF0DA0A140EB4EB63661DC2E5 ] SystemUsageReportSvc_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe 15:20:43.0580 0x0778 SystemUsageReportSvc_QUEENCREEK - ok 15:20:43.0594 0x0778 [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll 15:20:43.0628 0x0778 TabletInputService - ok 15:20:43.0635 0x0778 [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901 C:\WINDOWS\system32\DRIVERS\tap0901.sys 15:20:43.0647 0x0778 tap0901 - ok 15:20:43.0661 0x0778 [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 15:20:43.0696 0x0778 TapiSrv - ok 15:20:43.0769 0x0778 [ AD15A3D2B165B5CBA09D5A634C9881C1, BAD9310C29B63626680E65E000DEB73B0F4C65F48EC60E8F791F5ADBDB6E53C6 ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys 15:20:43.0872 0x0778 Tcpip - ok 15:20:43.0951 0x0778 [ AD15A3D2B165B5CBA09D5A634C9881C1, BAD9310C29B63626680E65E000DEB73B0F4C65F48EC60E8F791F5ADBDB6E53C6 ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys 15:20:44.0046 0x0778 Tcpip6 - ok 15:20:44.0062 0x0778 [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys 15:20:44.0082 0x0778 tcpipreg - ok 15:20:44.0095 0x0778 [ 16071C42E21CE3378FA449322FB9AB1D, 44CA7FD91275546492EEF0A59261E2B1C924613515D45EFD2EF0442023B2CBE5 ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys 15:20:44.0112 0x0778 tdx - ok 15:20:44.0376 0x0778 [ 6B99AA8C89B915ECB6BD99D985F5B629, DBD800B416693825A2001FC3C73FDFD280D8AAE8083C0F2F03D9BDC52159E5CA ] TeamViewer C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe 15:20:46.0830 0x0778 TeamViewer - ok 15:20:46.0855 0x0778 [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys 15:20:46.0869 0x0778 terminpt - ok 15:20:46.0902 0x0778 [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService C:\WINDOWS\System32\termsrv.dll 15:20:46.0964 0x0778 TermService - ok 15:20:46.0974 0x0778 [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes C:\WINDOWS\system32\themeservice.dll 15:20:47.0000 0x0778 Themes - ok 15:20:47.0013 0x0778 [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe 15:20:47.0048 0x0778 TieringEngineService - ok 15:20:47.0060 0x0778 [ 8BF5E2FD72E939CF68D617E273034793, EE27D070E1C4EFE902BE173C5561F5601499F835762278CC1E5987886BD8A4D1 ] TimeBrokerSvc C:\WINDOWS\System32\TimeBrokerServer.dll 15:20:47.0088 0x0778 TimeBrokerSvc - ok 15:20:47.0128 0x0778 [ 01FFF483ACCF4B855C30DF6FAF7E2157, CF74C5CFED7736B87219424E731B0FF460ED84D8A5B51F8E7D5E2D25E891338B ] TokenBroker C:\WINDOWS\System32\TokenBroker.dll 15:20:47.0214 0x0778 TokenBroker - ok 15:20:47.0229 0x0778 [ 900F8AD6086A4AA9EFE0C69D93377BC9, B08A36EA7B8B3D4E38B5D4FED7CB3A5E6262FEF07790052BCC831B5044463968 ] TPM C:\WINDOWS\System32\drivers\tpm.sys 15:20:47.0249 0x0778 TPM - ok 15:20:47.0258 0x0778 [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks C:\WINDOWS\System32\trkwks.dll 15:20:47.0284 0x0778 TrkWks - ok 15:20:47.0292 0x0778 [ 4578046C54A954C917BB393B70BA0AEB, 2DFE9DE656B415CF7D81F583F33A20A74CD54C07DB8C3196AA2102431F42F74F ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe 15:20:47.0320 0x0778 TrustedInstaller - ok 15:20:47.0331 0x0778 [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys 15:20:47.0357 0x0778 TsUsbFlt - ok 15:20:47.0364 0x0778 [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys 15:20:47.0381 0x0778 TsUsbGD - ok 15:20:47.0390 0x0778 [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel C:\WINDOWS\system32\drivers\tunnel.sys 15:20:47.0414 0x0778 tunnel - ok 15:20:47.0423 0x0778 [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll 15:20:47.0448 0x0778 tzautoupdate - ok 15:20:47.0456 0x0778 [ BDFACE024EFF2398214797143AD76C87, EF9B6CB1F6EAE4786BBDE1E0946BECC5BD2AA493FC32A8F779A757BA57238EC9 ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys 15:20:47.0471 0x0778 UASPStor - ok 15:20:47.0481 0x0778 [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys 15:20:47.0505 0x0778 UcmCx0101 - ok 15:20:47.0515 0x0778 [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys 15:20:47.0540 0x0778 UcmTcpciCx0101 - ok 15:20:47.0548 0x0778 [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys 15:20:47.0569 0x0778 UcmUcsi - ok 15:20:47.0580 0x0778 [ EE62D07172014C8BBE7C80A3AAF56E8F, C93DFEB0179129AE95968BA1E1E68D71504D1288FE1A1106EB9A2EAA04AEE8E1 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys 15:20:47.0600 0x0778 Ucx01000 - ok 15:20:47.0608 0x0778 [ 12E2B6B642360E66396502B62B048694, C9AC86BF767ED4ACE0F58BA3720369A2758BA154AFFE10CAAD5A2C4C259BA50A ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys 15:20:47.0625 0x0778 UdeCx - ok 15:20:47.0638 0x0778 [ 6A442723D4D05D9F15D24C9942CDA00D, 4A60D6CF7214A3891877AC6E5A49AE49D056567162D6355C0D893510F0241DA7 ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys 15:20:47.0669 0x0778 udfs - ok 15:20:47.0676 0x0778 [ D30AF38971B6670C222250AC2CBB6227, 52C1C7AC29D06C701DA0E2772294CED0C1790EC7FCBD5074238B54BEB951E9D0 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys 15:20:47.0690 0x0778 UEFI - ok 15:20:47.0703 0x0778 [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys 15:20:47.0728 0x0778 Ufx01000 - ok 15:20:47.0737 0x0778 [ 78B5C069C9AA1463ACC833FD7E2A3BD5, A44BAB6AB5E071537BD37A26DAF6D0D69BBFFFF686C183BFAAB04286DD3B81BB ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys 15:20:47.0753 0x0778 UfxChipidea - ok 15:20:47.0763 0x0778 [ 533BF4F456A1C6E7581E8C0A4EC59300, E5AE7EB4A8E6CE410F465C48F102797806172B5881C2CF570A9851CCDFE656FD ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys 15:20:47.0781 0x0778 ufxsynopsys - ok 15:20:47.0799 0x0778 [ 1BBF135FA5D385858DEC0F484D5934A5, 4DFB0D287B0CA6124DEFFE253A684D4F6DE3B9436BFE107FFAE1E684F97722DF ] UI Assistant Service C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe 15:20:47.0814 0x0778 UI Assistant Service - ok 15:20:47.0822 0x0778 [ 360FEE6F687D98EFFE46A5433FE6182E, 1A35569DC29F45F78D705BCEDE850CAF86FD27D6253977497EB3B000CAAE0B27 ] umbus C:\WINDOWS\System32\drivers\umbus.sys 15:20:47.0840 0x0778 umbus - ok 15:20:47.0847 0x0778 [ F6F1A9D91F684AA02951B96EE8127DAE, 351139331041BC123C9FEE3A5CE4965AFC4CDCA488080338D98C5EB85D5843D4 ] UmPass C:\WINDOWS\System32\drivers\umpass.sys 15:20:47.0866 0x0778 UmPass - ok 15:20:47.0882 0x0778 [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService C:\WINDOWS\System32\umrdp.dll 15:20:47.0915 0x0778 UmRdpService - ok 15:20:47.0950 0x0778 [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll 15:20:48.0026 0x0778 UnistoreSvc - ok 15:20:48.0049 0x0778 [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost C:\WINDOWS\System32\upnphost.dll 15:20:48.0089 0x0778 upnphost - ok 15:20:48.0096 0x0778 [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys 15:20:48.0110 0x0778 UrsChipidea - ok 15:20:48.0117 0x0778 [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys 15:20:48.0133 0x0778 UrsCx01000 - ok 15:20:48.0140 0x0778 [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys 15:20:48.0154 0x0778 UrsSynopsys - ok 15:20:48.0164 0x0778 [ B7211393225AB05324C52BA47B31FEB4, 3FFB7F1C1CA5001B95026D30ECD1991747DDAFFBE3B4929CAEDFA90E169A28AE ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys 15:20:48.0182 0x0778 usbccgp - ok 15:20:48.0191 0x0778 [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys 15:20:48.0211 0x0778 usbcir - ok 15:20:48.0220 0x0778 [ 4269DE1EB8029D55B3BB3A8A330FCF90, 5D9081A07F91AF704D27EEE60516D6E1E0A106D1656CEF0C5C50E51C23E17F61 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys 15:20:48.0236 0x0778 usbehci - ok 15:20:48.0255 0x0778 [ D67AABAE0C9EBAC9BBA2E20E0AF52EF1, FE51895BB81E5320F66C433378469092D39F325D310543AFE28A5603FA9B4F08 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys 15:20:48.0285 0x0778 usbhub - ok 15:20:48.0306 0x0778 [ D1F6348F41DFCE25AA918E38F02E80FD, 1ED0F3358D0C245C7160F3E9B5A5C5927488BE69468C51E5F329801EE844A476 ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys 15:20:48.0338 0x0778 USBHUB3 - ok 15:20:48.0346 0x0778 [ A547E7B1B3FB2228259AA85AC7E82698, AB18BBE30A2D149A0E10621DC8497A72DFB841B09F4E4B47FED21843C0F88D92 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys 15:20:48.0366 0x0778 usbohci - ok 15:20:48.0373 0x0778 [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys 15:20:48.0391 0x0778 usbprint - ok 15:20:48.0399 0x0778 [ 45A9E57185B79420EFEA5A4AED655809, 91D4BDBBAF1D06C404AC926357C3F20D780CF5C858B223930D69CFB17D81F3D3 ] usbser C:\WINDOWS\System32\drivers\usbser.sys 15:20:48.0417 0x0778 usbser - ok 15:20:48.0427 0x0778 [ CEF7527514EC49EBE0C760D784643EF0, 2A4E49C5C906339C31F0A646E53773297F4B4CEAFD94CE653C37556AE243E104 ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS 15:20:48.0444 0x0778 USBSTOR - ok 15:20:48.0451 0x0778 [ A4124036C4FD2B94C6157C4588EEB4E3, 595C8BFB5E63AEA2F7DF2745F7C7CE45938B091470C921E3064E766A0E12851F ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys 15:20:48.0473 0x0778 usbuhci - ok 15:20:48.0487 0x0778 [ 9431F7E997A8750139517709B04D8629, 250DE2A461DD3E6D40BD7A21041BF451D954D5BC14A9BC4D819955A135FC34F4 ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys 15:20:48.0508 0x0778 usbvideo - ok 15:20:48.0525 0x0778 [ 9F4CCFCD4B4C6008C940510E43D54AEC, CD6082E95EBA618490A2A97E258875440B3440E721B21E81608804B90DEF0D20 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS 15:20:48.0552 0x0778 USBXHCI - ok 15:20:48.0594 0x0778 [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll 15:20:48.0678 0x0778 UserDataSvc - ok 15:20:48.0717 0x0778 [ B8D1D74FEF1F190BA4DA7E7A72D5D9CE, F467F39EE09DDC7750BF42C3FF317E0DC324897589268B4C7B63F8E176445820 ] UserManager C:\WINDOWS\System32\usermgr.dll 15:20:48.0783 0x0778 UserManager - ok 15:20:48.0812 0x0778 [ D1554E8E4839785C36E13F2C1E1ECA76, 6C34877D0C4DA3BED52D769DD930B8EF7187448DBBF2F36C6789434AD4E4C5D9 ] USER_ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe 15:20:48.0846 0x0778 USER_ESRV_SVC_QUEENCREEK - ok 15:20:48.0887 0x0778 [ C6C17BECA29DB0D6F6FF6D45EB65FF80, EAF77B7A92E1C86E046C1570521F2389B804AADDB52C860DC2124340378FF26B ] UsoSvc C:\WINDOWS\system32\usocore.dll 15:20:48.0972 0x0778 UsoSvc - ok 15:20:48.0991 0x0778 [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc C:\WINDOWS\System32\vac.dll 15:20:49.0019 0x0778 VacSvc - ok 15:20:49.0027 0x0778 [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] VaultSvc C:\WINDOWS\system32\lsass.exe 15:20:49.0043 0x0778 VaultSvc - ok 15:20:49.0050 0x0778 [ B9B0A0B9232A51BBDE9F28CA41716D61, 1FB9EEEA5C75CC3234B473F8DD9B77943ED74C52EF19C4A92C4274456C9C171E ] VComm C:\WINDOWS\system32\DRIVERS\VComm.sys 15:20:49.0060 0x0778 VComm - ok 15:20:49.0069 0x0778 [ F1B2D9AC422F8B72BF417C8D77C85A3B, A0010C58DE71CE3894A7851196C3578E3FE6C378D2C913E5E5812E0C669DBEFF ] VcommMgr C:\WINDOWS\System32\Drivers\VcommMgr.sys 15:20:49.0078 0x0778 VcommMgr - ok 15:20:49.0085 0x0778 [ 8DCB7E5A9497C030484E5AD9E541B85C, 1170E5C190E2B6F2966076EFF11B8476CC03D924F43144C2936E11314A89ACA6 ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys 15:20:49.0101 0x0778 vdrvroot - ok 15:20:49.0123 0x0778 [ 4940B49502323905B66039D0D1AB4613, 963BFD563B5A79F0AE81EB9708E85901A545545D4F25FCF37A17295EE9EDA514 ] vds C:\WINDOWS\System32\vds.exe 15:20:49.0172 0x0778 vds - ok 15:20:49.0184 0x0778 [ 5C25C1A89650C95D15F7988D71487B08, EC42E586309B46CF51EC5DC00362ABA82A503545292CACE7B3D23BB0F5E687B9 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys 15:20:49.0204 0x0778 VerifierExt - ok 15:20:49.0227 0x0778 [ E8E5F722A699EF037891D735CB588F8D, 66D0C76C668DBD5BCE2B30B1936486EC21455BE293203C41B8E3B031ED012A22 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys 15:20:49.0264 0x0778 vhdmp - ok 15:20:49.0272 0x0778 [ 209A34F4BE17B0A56328C86F8CCC5577, 58F8A57233FC7DD220A6EF64FD48C2A5756B21AB30644FF6919847D13FF44F16 ] vhf C:\WINDOWS\System32\drivers\vhf.sys 15:20:49.0289 0x0778 vhf - ok 15:20:49.0298 0x0778 [ 44F4ED5D8FC0CFA7C3755D44C575D994, CB52418888916D185C74992BDD7A26E13A1C60F83E5FF664A3DE00424C1C4BC6 ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys 15:20:49.0314 0x0778 vmbus - ok 15:20:49.0321 0x0778 [ E2D57FB1A62F0BB7F70570806A09CE2B, DCF1699488D913C9E94E2C74CD8606BDAFF69B995B2E3B7DE7F2E9C4D2E6ECF2 ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys 15:20:49.0338 0x0778 VMBusHID - ok 15:20:49.0345 0x0778 [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys 15:20:49.0368 0x0778 vmgid - ok 15:20:49.0382 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll 15:20:49.0418 0x0778 vmicguestinterface - ok 15:20:49.0432 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll 15:20:49.0460 0x0778 vmicheartbeat - ok 15:20:49.0472 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll 15:20:49.0500 0x0778 vmickvpexchange - ok 15:20:49.0514 0x0778 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll 15:20:49.0550 0x0778 vmicrdv - ok 15:20:49.0564 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll 15:20:49.0591 0x0778 vmicshutdown - ok 15:20:49.0603 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync C:\WINDOWS\System32\icsvc.dll 15:20:49.0630 0x0778 vmictimesync - ok 15:20:49.0642 0x0778 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll 15:20:49.0669 0x0778 vmicvmsession - ok 15:20:49.0684 0x0778 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss C:\WINDOWS\System32\icsvcext.dll 15:20:49.0712 0x0778 vmicvss - ok 15:20:49.0720 0x0778 [ 708410755721F94FC8939673893C2E2B, C8516DDE667614545DA076A9D034A7941D3E03953CB41576A979199363AB7A99 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys 15:20:49.0736 0x0778 volmgr - ok 15:20:49.0751 0x0778 [ 1514506CA7462A64DC38C48108DDBB45, DEE5D7B79962D9EB6D92FCF870CA1B06FE68CE6AE25F82A5B449445C99E76D2A ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys 15:20:49.0779 0x0778 volmgrx - ok 15:20:49.0795 0x0778 [ F0EE4E6028CCA58BEA9A04E7BEAB7DB4, 628D0E3D60256B914E46C26BCE8F512DFE0409C34EA603EB0A20C80EB469A4D2 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys 15:20:49.0820 0x0778 volsnap - ok 15:20:49.0827 0x0778 [ 77FD1607F2C371ABD241EC7699C58884, A6FE00D76C615DC641A667EB9B6824C992ED752A31A89AE3FE43BAE5462F3EB7 ] volume C:\WINDOWS\system32\drivers\volume.sys 15:20:49.0841 0x0778 volume - ok 15:20:49.0849 0x0778 [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci C:\WINDOWS\System32\drivers\vpci.sys 15:20:49.0864 0x0778 vpci - ok 15:20:49.0874 0x0778 [ ED0B3436E1DE601C6C8EB86789AC8BAB, 0CD186B09903A1D3748A3258D8B84557F3674DA04FEB8EFA24AE81FFE376265C ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys 15:20:49.0892 0x0778 vsmraid - ok 15:20:49.0935 0x0778 [ C7053D974A35EAB81F153FF33C883613, 9D89DC644971F93931D0E59D42ADE0A4AB49A5490709B46FCBBC309041C5432D ] VSS C:\WINDOWS\system32\vssvc.exe 15:20:50.0022 0x0778 VSS - ok 15:20:50.0040 0x0778 [ 3D706FBED35DF3B17809C6714F31F9B0, BBC337479DEB628721E651FC165EA01D986E31950189F1A81534922667101487 ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys 15:20:50.0065 0x0778 VSTXRAID - ok 15:20:50.0072 0x0778 [ 0B11DBB8173AD374D67893D54EBEE9F3, AB8B6FC81244729157E59D062FCC234FD7E818804D94AA6B7BF81E01B7922395 ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys 15:20:50.0090 0x0778 vwifibus - ok 15:20:50.0098 0x0778 [ 95540F74893235C189409C98643D7A77, 4F041301C95F55C8448C3CC5825ED9E631E770BA35BEC8498A0ABB3563584AAE ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys 15:20:50.0120 0x0778 vwififlt - ok 15:20:50.0127 0x0778 [ 60A14582772A4DF0D0BE27B3F873BE6B, 93DB43D2F4B985A3FF1A152ADEDBB52567CCC29B899F96F8BA0FA9558EF2DF6D ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys 15:20:50.0146 0x0778 vwifimp - ok 15:20:50.0167 0x0778 [ 4F904ADE8BECDFB48CBA3F44FC0676A1, 2C3D619E9AD0D0DAEC0D170795FD6E5B7FE3FC667C947660320A9BC671B55736 ] W32Time C:\WINDOWS\system32\w32time.dll 15:20:50.0212 0x0778 W32Time - ok 15:20:50.0222 0x0778 [ 244BA3FE721EAF5377634A4A39EB323D, A009894399149AC3442462DDB44C31E5E7012B43489E8458D48E30485763D0B9 ] w3logsvc C:\WINDOWS\system32\inetsrv\w3logsvc.dll 15:20:50.0241 0x0778 w3logsvc - ok 15:20:50.0261 0x0778 [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] W3SVC C:\WINDOWS\system32\inetsrv\iisw3adm.dll 15:20:50.0304 0x0778 W3SVC - ok 15:20:50.0320 0x0778 [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc C:\WINDOWS\System32\WaaSMedicSvc.dll 15:20:50.0358 0x0778 WaaSMedicSvc - ok 15:20:50.0365 0x0778 [ 87A01F65BD16C9FCCDD1B65F56CB93B0, E84B46DB67F2FCB22DB7130570FE7211FC96A806AC9D1D69D187899C93785CB2 ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys 15:20:50.0382 0x0778 WacomPen - ok 15:20:50.0399 0x0778 [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService C:\WINDOWS\system32\WalletService.dll 15:20:50.0438 0x0778 WalletService - ok 15:20:50.0446 0x0778 [ 85E187443F68F285DB78BD2279AE3701, FAC03A162CF07FCC6BDB4E45F5EDF16D48BE10D95F73A74E9BADA62EC7F24B53 ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:20:50.0468 0x0778 wanarp - ok 15:20:50.0475 0x0778 [ 85E187443F68F285DB78BD2279AE3701, FAC03A162CF07FCC6BDB4E45F5EDF16D48BE10D95F73A74E9BADA62EC7F24B53 ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys 15:20:50.0496 0x0778 wanarpv6 - ok 15:20:50.0504 0x0778 [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc C:\WINDOWS\System32\Windows.WARP.JITService.dll 15:20:50.0525 0x0778 WarpJITSvc - ok 15:20:50.0546 0x0778 [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] WAS C:\WINDOWS\system32\inetsrv\iisw3adm.dll 15:20:50.0584 0x0778 WAS - ok 15:20:50.0627 0x0778 [ 6E235F75DF84C387388D23D697D6540B, 7113DD02243E9368EF3265CF5A7F991F9B4D69CAB70B1A446062F8DD714AFC8E ] wbengine C:\WINDOWS\system32\wbengine.exe 15:20:50.0719 0x0778 wbengine - ok 15:20:50.0751 0x0778 [ 4A9F35F16FDC5FEED34E10F02697CA1F, 71FF0EE5CB33A2B65BC56DC4381D4C6834685C8DB2B9FEB741B149DD5029F0F3 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll 15:20:50.0819 0x0778 WbioSrvc - ok 15:20:50.0831 0x0778 [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys 15:20:50.0849 0x0778 wcifs - ok 15:20:50.0879 0x0778 [ C479E8EC94A23112B7EF14D5F1DF83CE, 0F40594FF9C329090A9980F31795C90850C2D2F819236ABD680D27C98FE9BC97 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll 15:20:50.0943 0x0778 Wcmsvc - ok 15:20:50.0962 0x0778 [ B797B163EDCA46B5244F4E083BE7A7E7, 18D977A8015380A87EC9962273B90806145186A69F3455B3445A0FE1FE431219 ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll 15:20:51.0007 0x0778 wcncsvc - ok 15:20:51.0016 0x0778 [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys 15:20:51.0042 0x0778 wcnfs - ok 15:20:51.0050 0x0778 [ CD8A7398D8E0710CD3AA316A4427C56B, 81CA3256BACBEBC24380B6C4A5C4385C0F7D2BFFFDB4F990670A1EDBEB00B34D ] WdBoot C:\WINDOWS\system32\drivers\wd\WdBoot.sys 15:20:51.0081 0x0778 WdBoot - ok 15:20:51.0111 0x0778 [ 152926023B401D1F5F8852929572F5C3, 61D0FDB0E3A4D16FFA6852174B3824F6294502E331BB0831BCF99F049B09C328 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys 15:20:51.0150 0x0778 Wdf01000 - ok 15:20:51.0166 0x0778 [ 58B452788C0051C6C6E62F188EFEE438, C2EC7D28415B1A06A21BE1290848784D1676D0E1E9BEEFD1FF233F248B5F8C9A ] WdFilter C:\WINDOWS\system32\drivers\wd\WdFilter.sys 15:20:51.0212 0x0778 WdFilter - ok 15:20:51.0221 0x0778 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll 15:20:51.0247 0x0778 WdiServiceHost - ok 15:20:51.0255 0x0778 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll 15:20:51.0280 0x0778 WdiSystemHost - ok 15:20:51.0306 0x0778 [ 5DDA2C4B9AAED51E73DD6D580406F07A, 5C103E442ED4A9CC3C4E81D6C4E6BEE2FD14E4DBE57EC46DA0EF4C539D42756B ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys 15:20:51.0376 0x0778 wdiwifi - ok 15:20:51.0384 0x0778 [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys 15:20:51.0398 0x0778 WdmCompanionFilter - ok 15:20:51.0406 0x0778 [ 65081A53DB730D2347AD66AF7187795A, 3F91C9846D02956AF7B54F121CF3663E8682A6974F9696A35DAAE67697BD53EA ] WdNisDrv C:\WINDOWS\system32\drivers\wd\WdNisDrv.sys 15:20:51.0418 0x0778 WdNisDrv - ok 15:20:51.0520 0x0778 [ 71C846A2F98CFC9F2E426890523AC276, ECA5BF57913D4B0E4B20CB729BD0FF5DC76DDDF839D5A9841B9E3B62D760C679 ] WdNisSvc C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe 15:20:51.0634 0x0778 WdNisSvc - ok 15:20:51.0652 0x0778 [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient C:\WINDOWS\System32\webclnt.dll 15:20:51.0681 0x0778 WebClient - ok 15:20:51.0692 0x0778 [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll 15:20:51.0721 0x0778 Wecsvc - ok 15:20:51.0729 0x0778 [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll 15:20:51.0752 0x0778 WEPHOSTSVC - ok 15:20:51.0761 0x0778 [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll 15:20:51.0787 0x0778 wercplsupport - ok 15:20:51.0798 0x0778 [ 5DDB06B07A60E7AEA69837931373C159, 4E0A3260058B19F414B5053701C4723C27735818212AB3D297F896BF4C39E536 ] WerSvc C:\WINDOWS\System32\WerSvc.dll 15:20:51.0832 0x0778 WerSvc - ok 15:20:51.0855 0x0778 [ 690537B9569F770ED81CE9C19FD7358A, FF780EBCD8C0B91E99BB2451F08D7826130781136E08FCB4571C3DD0C01B616F ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll 15:20:51.0901 0x0778 WFDSConMgrSvc - ok 15:20:51.0913 0x0778 [ EB0B154F12F78DE232F38EF61BCDEEA2, D4BC28969C94F9A3906339B42FC3638E8BFF575C28C709461D48A84821A89A21 ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys 15:20:51.0931 0x0778 WFPLWFS - ok 15:20:51.0939 0x0778 [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll 15:20:51.0963 0x0778 WiaRpc - ok 15:20:51.0971 0x0778 [ 3AE28A996C9EB8A6F2AC12BC55035126, E54227B97F42800D445241EA638EFE86A7FEC664E96A0FA38BC48DDF7DA182AD ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys 15:20:51.0985 0x0778 WIMMount - ok 15:20:51.0992 0x0778 [ DD752ECFDEC95581A00D62A8B00591EC, ADE71487979EF52B585ACEB3314A2DB5A8032E18FAB766AE773694DF25DEE3F4 ] WinDefend C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe 15:20:52.0006 0x0778 WinDefend - ok 15:20:52.0022 0x0778 [ 2BB82BABE32D41F430D290239ABC0E87, 2D519F0B86F7B87B7028E404821EDE8B7BDA18288EF32CF81C25B9C1E629FFB1 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys 15:20:52.0055 0x0778 WindowsTrustedRT - ok 15:20:52.0062 0x0778 [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys 15:20:52.0075 0x0778 WindowsTrustedRTProxy - ok 15:20:52.0106 0x0778 [ 939AA47A32AFE2BC17EB39FB2ED1DDC2, 7BBE6FE475FF7971EBB59682872003059AC9B27D51898BA4C094C70534E057B6 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll 15:20:52.0151 0x0778 WinHttpAutoProxySvc - ok 15:20:52.0159 0x0778 [ 762D8D839C44C5A0BE0449AA84034522, E6602D0FDB501081DF165CE904DA0FEC75F3FE29C3B07B44DED6268612742F9C ] WinMad C:\WINDOWS\System32\drivers\winmad.sys 15:20:52.0174 0x0778 WinMad - ok 15:20:52.0189 0x0778 [ 72D83880FEF0C788C5F305F330744208, 3126C2907170BBA47421D61CD6ED04DA3A3FCC66B4DBFCB4E3B56001B3BF6045 ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 15:20:52.0220 0x0778 Winmgmt - ok 15:20:52.0232 0x0778 [ 80086471CD4D8BF61C757E8EDFDB01DD, EDB58B6C634B3189929867DE4D47764CD35E4E0ED6BBDE98DC1372E9058EA99E ] WinNat C:\WINDOWS\system32\drivers\winnat.sys 15:20:52.0265 0x0778 WinNat - ok 15:20:52.0334 0x0778 [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM C:\WINDOWS\system32\WsmSvc.dll 15:20:52.0472 0x0778 WinRM - ok 15:20:52.0492 0x0778 [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS 15:20:52.0514 0x0778 WINUSB - ok 15:20:52.0522 0x0778 [ D2D6DB37E06608A5AF5B68D8E677B219, C7AAFEE7AAF76A4DCFF4FD2EE7232501832A57E3EE92CE20FA4A5D22F03FBE45 ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys 15:20:52.0537 0x0778 WinVerbs - ok 15:20:52.0565 0x0778 [ 08BEB7851B4B8AA07325C23A657233F1, 6D7A4D194D342A5BC3EE9738765B2F5D6B75165954CA6B0D9CD4B40B262C300E ] wisvc C:\WINDOWS\system32\flightsettings.dll 15:20:52.0625 0x0778 wisvc - ok 15:20:52.0697 0x0778 [ 2490E373EC18869BA4FE435CFDE3ADEE, 5A3A9D11B426E5F13040758A1BE2284851C3E653E49340C1C75CF9EC3CE418B7 ] WlanSvc C:\WINDOWS\System32\wlansvc.dll 15:20:52.0835 0x0778 WlanSvc - ok 15:20:52.0845 0x0778 [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 15:20:52.0856 0x0778 wlcrasvc - ok 15:20:52.0916 0x0778 [ 28A32E1F7A46A833DE104EF43E389F5F, 5A88C409DD9CC74ED6CEBEB5DFC8DDADFAB9D1CBDFD4EB78D7CBB6D55749C235 ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll 15:20:53.0040 0x0778 wlidsvc - ok 15:20:53.0082 0x0778 [ 6DF8049EC9A5AEFE99F753162D9681D4, A97FFC784617D0B45ECB7AB86AF363E6E9EC86D6E27EA90C8016DAEA27DD8183 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll 15:20:53.0157 0x0778 wlpasvc - ok 15:20:53.0168 0x0778 [ EAEF2A087812BB7110C744446AB731D5, F5571D3C47564DFB6182DC43CC28124892323B60C3F389599DFEC94D227B4A86 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys 15:20:53.0184 0x0778 WmiAcpi - ok 15:20:53.0199 0x0778 [ ABAC310F5E01CBA9B33AE694F99D0977, 700CDC85479CDBF765FB1A6A389DC991FC4D2A77851A81FF80BEED921250DBF6 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe 15:20:53.0225 0x0778 wmiApSrv - ok 15:20:53.0230 0x0778 WMPNetworkSvc - ok 15:20:53.0243 0x0778 [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof C:\WINDOWS\system32\drivers\Wof.sys 15:20:53.0262 0x0778 Wof - ok 15:20:53.0325 0x0778 [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll 15:20:53.0411 0x0778 workfolderssvc - ok 15:20:53.0457 0x0778 [ 58DA02D34C964C00AF9140C07CCFF8F0, 6A02F326251A790F76E59737E20CB6C38190F671766E56CE6C7FB33D1A4588B9 ] WpcMonSvc C:\WINDOWS\System32\WpcDesktopMonSvc.dll 15:20:53.0537 0x0778 WpcMonSvc - ok 15:20:53.0549 0x0778 [ 7412ECE8BD5590881FA9780B68BD70C5, 52329B5BF78E2F5792369FE5A72CF4E3E216D4F0670507D10F3DB8383FA5E0BC ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll 15:20:53.0581 0x0778 WPDBusEnum - ok 15:20:53.0589 0x0778 [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys 15:20:53.0602 0x0778 WpdUpFltr - ok 15:20:53.0616 0x0778 [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService C:\WINDOWS\system32\WpnService.dll 15:20:53.0649 0x0778 WpnService - ok 15:20:53.0658 0x0778 [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll 15:20:53.0683 0x0778 WpnUserService - ok 15:20:53.0694 0x0778 [ C1C2E769FCD3B00A59FF876FB2AD4336, B4D9065268A8B3C509E9160E6F30C20F80D14876C9F6C1057245F09CEB6B0F36 ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys 15:20:53.0715 0x0778 ws2ifsl - ok 15:20:53.0729 0x0778 [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc C:\WINDOWS\System32\wscsvc.dll 15:20:53.0760 0x0778 wscsvc - ok 15:20:53.0769 0x0778 [ A3317B8C6765C18F3BD9FE9DD352B05D, 8312D05F32909933FA692B893D5F6E1DC2E5908C8E590D4B6A51EA724DF4744C ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys 15:20:53.0785 0x0778 WSDPrintDevice - ok 15:20:53.0793 0x0778 [ 3C15A5AC47B1CA4D9A9F8680E224996F, F95EC4E4E5FDFF1D68179205430AAD01A0124DBD682FAFF6270B99B4AACC793F ] WSDScan C:\WINDOWS\system32\DRIVERS\WSDScan.sys 15:20:53.0818 0x0778 WSDScan - ok 15:20:53.0824 0x0778 WSearch - ok 15:20:53.0903 0x0778 [ B362A15BA8DA57E0FC63A72E65AD62AC, 26CB06F5A4A90C5411F3A5B8211F1E42B8FFA100DF4E32160F5885F5AF31432A ] wuauserv C:\WINDOWS\system32\wuaueng.dll 15:20:54.0051 0x0778 wuauserv - ok 15:20:54.0064 0x0778 [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys 15:20:54.0087 0x0778 WudfPf - ok 15:20:54.0100 0x0778 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys 15:20:54.0128 0x0778 WUDFRd - ok 15:20:54.0142 0x0778 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 15:20:54.0169 0x0778 WUDFWpdFs - ok 15:20:54.0180 0x0778 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdMtp C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 15:20:54.0207 0x0778 WUDFWpdMtp - ok 15:20:54.0253 0x0778 [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc C:\WINDOWS\System32\wwansvc.dll 15:20:54.0350 0x0778 WwanSvc - ok 15:20:54.0361 0x0778 [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm C:\WINDOWS\system32\xbgmsvc.exe 15:20:54.0381 0x0778 xbgm - ok 15:20:54.0415 0x0778 [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll 15:20:54.0485 0x0778 XblAuthManager - ok 15:20:54.0527 0x0778 [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll 15:20:54.0604 0x0778 XblGameSave - ok 15:20:54.0620 0x0778 [ 93352403D9E6B71C275996690672488F, A012D907679B29988D18C71928BDF528506DC05A2DEF01F472B7F0CC043A0340 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys 15:20:54.0667 0x0778 xboxgip - ok 15:20:54.0675 0x0778 [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll 15:20:54.0699 0x0778 XboxGipSvc - ok 15:20:54.0733 0x0778 [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll 15:20:54.0802 0x0778 XboxNetApiSvc - ok 15:20:54.0812 0x0778 [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys 15:20:54.0833 0x0778 xinputhid - ok 15:20:54.0895 0x0778 [ AD46DA660E559BD08E6A2951A2B02D45, D75B2EEF00E6906E1F0197594BBC30228F2F2CEC29C6463FF4C649408E1C30A6 ] XperiaCompanionService C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe 15:20:55.0013 0x0778 XperiaCompanionService - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:55.0058 0x0778 Detect skipped due to KSN trusted 15:20:55.0059 0x0778 XperiaCompanionService - ok 15:20:55.0074 0x0778 [ E9C0D4DFF1F4E0F4B4534114E2185DCD, 823EE97F1EAFA80E3D3692EC5CD79E8F0C7AD8222AC96DA009EBE9F709555BF8 ] ykinw8 C:\WINDOWS\System32\drivers\ykinx64.sys 15:20:55.0103 0x0778 ykinw8 - ok 15:20:55.0105 0x0778 ================ Scan global =============================== 15:20:55.0112 0x0778 [ 44D259E3B8F950D123CBE21893CEF1AB, 94FEA350B54D1581FF07D078D25A27FE3C9F815E24D299A0504FB1153E68A903 ] C:\WINDOWS\system32\basesrv.dll 15:20:55.0121 0x0778 [ 1C346B5D7E5336246604A9FCFCB092BC, BD0C56C943A8F23CA9CD1CE1FE4F9D2183F752B469A72D14B713301A867AE776 ] C:\WINDOWS\system32\winsrv.dll 15:20:55.0131 0x0778 [ FE8D1AB6D6711BE791A01C17EDEBD0D6, EECE3A16DFA0BE1BB1E7B882D33FB926C90A1DCA89805DD3514FABF7C9F05253 ] C:\WINDOWS\system32\sxssrv.dll 15:20:55.0153 0x0778 [ 2FC61B2CF84792516D543CA94139A92C, BE42E4A901D6AC8885882D2CD9372A64023794428E0AC8CC87EE3121DD5DC402 ] C:\WINDOWS\system32\services.exe 15:20:55.0171 0x0778 [ Global ] - ok 15:20:55.0172 0x0778 ================ Scan MBR ================================== 15:20:55.0175 0x0778 [ B1F7D7F6E4FBE98E578562A22A94D02C ] \Device\Harddisk0\DR0 15:20:55.0638 0x0778 \Device\Harddisk0\DR0 - ok 15:20:55.0643 0x0778 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1 15:20:56.0072 0x0778 \Device\Harddisk1\DR1 - ok 15:20:56.0081 0x0778 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2 15:20:56.0666 0x0778 \Device\Harddisk2\DR2 - ok 15:20:56.0668 0x0778 ================ Scan VBR ================================== 15:20:56.0675 0x0778 [ 78D1E0E226696AA1A45CCEB8BEF9DFC9 ] \Device\Harddisk0\DR0\Partition1 15:20:56.0678 0x0778 \Device\Harddisk0\DR0\Partition1 - ok 15:20:56.0686 0x0778 [ A83B30EF4851C5939D412A5EACC1A3DB ] \Device\Harddisk0\DR0\Partition2 15:20:56.0690 0x0778 \Device\Harddisk0\DR0\Partition2 - ok 15:20:56.0696 0x0778 [ 3B25C3C2D3DFD867FAA003BD8DFDF694 ] \Device\Harddisk1\DR1\Partition1 15:20:56.0698 0x0778 \Device\Harddisk1\DR1\Partition1 - ok 15:20:56.0703 0x0778 [ 39408BDCA31391BFC29DCAC3A63163F4 ] \Device\Harddisk2\DR2\Partition1 15:20:56.0708 0x0778 \Device\Harddisk2\DR2\Partition1 - ok 15:20:56.0713 0x0778 [ 4CB96EDCDCEDE032D00A4F67D38A8099 ] \Device\Harddisk2\DR2\Partition2 15:20:56.0716 0x0778 \Device\Harddisk2\DR2\Partition2 - ok 15:20:56.0717 0x0778 ================ Scan generic autorun ====================== 15:20:56.0718 0x0778 SecurityHealth - ok 15:20:56.0720 0x0778 SynTPEnh - ok 15:20:57.0140 0x0778 [ 88FC2108F110C7B91A44D9865D63B67E, BE019F1B2A580A6EE90FE1CBBCE16AF0507C9C9B22FA323CD32917572D65B7BC ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 15:20:57.0635 0x0778 RtHDVCpl - ok 15:20:57.0677 0x0778 [ 223AD0CA4092AEFFE0D0DE25502A3DB6, D7A0E5639D329C8245515712125C7C489645B70A06A4F6D1DBE06BA7BD3C96DC ] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe 15:20:57.0706 0x0778 CanonSolutionMenu - ok 15:20:57.0715 0x0778 [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe 15:20:57.0729 0x0778 UpdateLBPShortCut - ok 15:20:57.0737 0x0778 [ 54FA8528EDA1B6B34615F4EA3FCB35E6, B078821475D6FDED19579A487484D0752DC6E1AA0D1ACA71353C743B00291C61 ] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe 15:20:57.0747 0x0778 CLMLServer - ok 15:20:57.0757 0x0778 [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe 15:20:57.0770 0x0778 UpdateP2GoShortCut - ok 15:20:57.0783 0x0778 [ AAD52179D4A526AD4A705B87C6E4F72A, 0015F316DD2E73D5D2434DAC7CAB47050B21BF8CAE23482302A0E1982EF8A3BD ] C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe 15:20:57.0797 0x0778 UpdatePDRShortCut - ok 15:20:57.0804 0x0778 [ 28FD28A29C637C9AFEFE0A26E27C6DFE, A490ADCD7BC9863B6E8773CADFDE6CA58A0743CD64C39D14AF380B18ABDEC003 ] C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe 15:20:57.0813 0x0778 RemoteControl8 - ok 15:20:57.0819 0x0778 [ F8270CFD51F9D6BF42140FA4071C83FE, B7AAF6B13C01CB6B94DEABBDD40249A6D298DD4BCBE2921D8E332F88ED3B754A ] C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe 15:20:57.0833 0x0778 PDVD8LanguageShortcut - ok 15:20:57.0846 0x0778 [ 9ACFD9D5E12D849B28C78FED6D620EB3, 203D1EECFB44BA7D3936AAA2280B1D88207BA7655AB735C17BF9F3AAF3D8A803 ] C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe 15:20:57.0866 0x0778 UpdatePPShortCut - ok 15:20:57.0880 0x0778 [ 82A3031F7FAA61CB5E040B0D98A104AF, 5EB990BACE18112658208F517EE2E635DBD00A06380DD9DAB253556C980DEA99 ] C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe 15:20:57.0896 0x0778 UpdatePSTShortCut - ok 15:20:57.0908 0x0778 [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe 15:20:57.0923 0x0778 UCam_Menu - ok 15:20:57.0932 0x0778 [ 9BA6A10AB2043A3B5CA742456FDD4B25, 8E627C5E72307DDC4C3C558791CC07E742A183215A324A788F46DE42E3248B5D ] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe 15:20:57.0944 0x0778 IJNetworkScanUtility - ok 15:20:57.0949 0x0778 [ 545676F48851A5C65A38CAE5B5518C95, F7CD893B8198AA22347CB96A61C258217FA0A1B1CC1733784B5FD84A7B208264 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 15:20:57.0958 0x0778 APSDaemon - ok 15:20:57.0970 0x0778 [ 90F3260640FA377A2208AE5BA2701A67, 323A52508ACD92D11FA66467C54A2F319F0D57C82E48E49CF9CCA74FEA835288 ] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe 15:20:57.0986 0x0778 KiesTrayAgent - ok 15:20:58.0002 0x0778 [ E952CCBDB1A3870CD883DDEA36F6ED8F, 7D4FA5B4FC40173DCA65D0CFCBC180A02CB91651F0F30FDBCE893B74FA735979 ] C:\Program Files (x86)\Steganos Password Manager 15\passwordmanagercom.exe 15:20:58.0023 0x0778 SPM15 Chrome Autofill Relay - ok 15:20:58.0031 0x0778 [ 110D77493B4386E2F811F942AD03BFCB, 4C8AADA2DE742BE7FD8421FDC37D267136DCA7BE1C51FD23E654DE78733A063E ] C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe 15:20:58.0042 0x0778 UIExec - ok 15:20:58.0136 0x0778 [ 18B91718AC6D70A7D7A6AF99AC2A4AC5, 07D2D95FD3A4324EF437A4956504474A2532470C610DB6A2881248A66731D4F5 ] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe 15:20:58.0251 0x0778 Dropbox - ok 15:20:58.0291 0x0778 [ 6001F7750D4CAA170862D38FEE8BC46F, 14E8886EBDE90D7E37B97E6200F55DEEFE252BB25FC8DB039842B56BFCD524F1 ] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE 15:20:58.0337 0x0778 CanonQuickMenu - ok 15:20:58.0353 0x0778 [ 247FD3171B3E08CFCC8ACB540818CA15, 7F1195A40187C04CEE532B258421A3422AACA16BE54FD55F12966DC00FDBDCC4 ] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe 15:20:58.0373 0x0778 IJNetworkScannerSelectorEX - ok 15:20:58.0380 0x0778 [ 5361EEAAFA5037E539094BEC9C7F740B, 260796658EC18257CF1C50C715CCDABDF7CB33C2770AC33B82A2C14A9AB47B5F ] C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosHotKeyService.exe 15:20:58.0390 0x0778 Steganos HotKeys - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:58.0433 0x0778 Detect skipped due to KSN trusted 15:20:58.0433 0x0778 Steganos HotKeys - ok 15:20:58.0469 0x0778 [ C6ED48C64D4706635722829F8C071C00, 917A4F985729E37789B6846010967FB48C316D46E733070B3FBD41EC0AE56525 ] C:\Program Files (x86)\Steganos Privacy Suite 17\passwordmanagercom.exe 15:20:58.0518 0x0778 SSS17 Chrome Autofill Relay - ok 15:20:58.0548 0x0778 [ 5B9E99AD21B1C67C1BB25BE3FBFC95FB, B3B74EC7968188532B438798D39FE144A9343C574FA8CF318EF2BE2E9D2D922D ] C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosBrowserMonitor.exe 15:20:58.0585 0x0778 SSS17 Browser Monitor - ok 15:20:58.0682 0x0778 [ AE647836554F815E39149DBB8C265FD4, 64D04FEE2B245B5562931F0D411EACDFF46B8D5E07DEBF6523874E4302E5863B ] C:\Program Files (x86)\Steganos Privacy Suite 17\Notifier.exe 15:20:58.0802 0x0778 SSS17 Notifier - ok 15:20:58.0811 0x0778 [ BFBEA39213287BECA28BD6E056074694, B8BDAE14532317C3B451DEB46AFB3E21AFA2116B806D97240362F20E92F1A152 ] C:\Program Files (x86)\Steganos Privacy Suite 17\fredirstarter.exe 15:20:58.0818 0x0778 SSS17 File Redirection Starter - detected UnsignedFile.Multi.Generic ( 1 ) 15:20:58.0851 0x0778 Detect skipped due to KSN trusted 15:20:58.0851 0x0778 SSS17 File Redirection Starter - ok 15:20:58.0858 0x0778 [ 2DA1C87EF7F76BD2EA9C21402408DD1F, F6D9CA7E53B57E93BD6D6FE9ACD2A7DA2892986C4A69A6E65D99AC1188942166 ] C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe 15:20:58.0872 0x0778 DSATray - ok 15:20:59.0412 0x0778 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 15:21:00.0018 0x0778 OneDriveSetup - ok 15:21:00.0057 0x0778 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe 15:21:00.0106 0x0778 WAB Migrate - ok 15:21:00.0619 0x0778 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 15:21:01.0135 0x0778 OneDriveSetup - ok 15:21:01.0176 0x0778 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe 15:21:01.0212 0x0778 WAB Migrate - ok 15:21:01.0260 0x0778 [ 2261FC3573534BD28EFF1B4C69339D70, 0AB4A132FBA1EC88FDC9145DB34D8A9ED40D4BB579FDE2C21F2846730993295E ] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe 15:21:01.0311 0x0778 rfxsrvtray - ok 15:21:01.0458 0x0778 [ 20616E7A9E9A1D231FD232FC3ACAE46D, 017D06196BFE0B1D71D4BAA5BDD716E8320C8F64882B512540DA8739B4CD0C4A ] C:\Users\Oliver\AppData\Local\Amazon Music\Amazon Music Helper.exe 15:21:01.0630 0x0778 Amazon Music - ok 15:21:01.0645 0x0778 [ 243C0BA28FFD8252DD5C2259C956A4C2, 92176538FC190669CE7560627409555989E2D474D2923E7BDAD057F98AF4EE93 ] C:\Program Files\FolderSize\FolderSize.exe 15:21:01.0658 0x0778 Folder Size - detected UnsignedFile.Multi.Generic ( 1 ) 15:21:01.0716 0x0778 Detect skipped due to KSN trusted 15:21:01.0716 0x0778 Folder Size - ok 15:21:01.0783 0x0778 [ FA9A5C429858E4AD0173878CF9898D49, BBCADF15B2DD4B5FA7ADC61BA69F45B2608D93F691FF67E9857932C3ABF332CE ] C:\Program Files (x86)\Samsung\Kies\Kies.exe 15:21:01.0837 0x0778 KiesPreload - ok 15:21:01.0894 0x0778 [ 7BEF501E729D74419523560FDBD7B84A, BCFB1DA2322CADF671687BB275D01188969B46266D51766208FC91C374529DE8 ] C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe 15:21:01.0995 0x0778 XperiaCompanionAgent - detected UnsignedFile.Multi.Generic ( 1 ) 15:21:02.0041 0x0778 Detect skipped due to KSN trusted 15:21:02.0041 0x0778 XperiaCompanionAgent - ok 15:21:02.0087 0x0778 [ C94E551F8E9DF47CAFF7DDDAE81CE902, CB8113693A07775791891DC4902F5A28508E3A0C2746F9E3390B9C6B44CD199E ] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe 15:21:02.0146 0x0778 vidnotifier.exe - ok 15:21:02.0174 0x0778 [ C0A3DA8F5318EB371EA2C2279A04A369, 0892B840C5BD6C79E9BBA027011AB0F53FF0D6A34A0D2CF0B91E4D8745386C86 ] C:\Program Files (x86)\Touchpad Blocker\TouchpadBlocker.exe 15:21:02.0216 0x0778 TouchpadBlocker.exe - detected UnsignedFile.Multi.Generic ( 1 ) 15:21:02.0258 0x0778 Detect skipped due to KSN trusted 15:21:02.0258 0x0778 TouchpadBlocker.exe - ok 15:21:02.0763 0x0778 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 15:21:03.0282 0x0778 OneDriveSetup - ok 15:21:03.0310 0x0778 [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 15:21:03.0319 0x0778 swg - ok 15:21:03.0337 0x0778 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe 15:21:03.0373 0x0778 WAB Migrate - ok 15:21:03.0869 0x0778 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 15:21:04.0392 0x0778 OneDriveSetup - ok 15:21:04.0465 0x0778 [ 2261FC3573534BD28EFF1B4C69339D70, 0AB4A132FBA1EC88FDC9145DB34D8A9ED40D4BB579FDE2C21F2846730993295E ] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe 15:21:04.0517 0x0778 RfxSrvTray - ok 15:21:04.0525 0x0778 [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 15:21:04.0533 0x0778 swg - ok 15:21:04.0549 0x0778 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe 15:21:04.0586 0x0778 WAB Migrate - ok 15:21:05.0076 0x0778 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 15:21:05.0596 0x0778 OneDriveSetup - ok 15:21:05.0636 0x0778 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe 15:21:05.0672 0x0778 WAB Migrate - ok 15:21:05.0674 0x0778 Waiting for KSN requests completion. In queue: 35 15:21:06.0714 0x0778 AV detected via SS2: Windows Defender, windowsdefender:// ( ), 0x61100 ( enabled : updated ) 15:21:06.0724 0x0778 Win FW state via NFP2: enabled ( trusted ) 15:21:06.0833 0x0778 ============================================================ 15:21:06.0833 0x0778 Scan finished 15:21:06.0833 0x0778 ============================================================ 15:21:06.0860 0x2bf0 Detected object count: 0 15:21:06.0860 0x2bf0 Actual detected object count: 0 |
28.07.2018, 20:11 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum Absturz Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! adwCleaner v7.x Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).
__________________ Logfiles bitte immer in CODE-Tags posten |
28.07.2018, 22:18 | #13 |
| Bereinigung durch ADWCleaner führt zum Absturz Gemacht, wie angegeben. Avira war ja schon entfernt, MS Defender deaktiviert. Alle AdwCleaner Dateien gelöscht bzw durch das Programm selbst entfernen lassen und v7.2.2 neu installiert. Suchlauf ergab 49 Bedrohungen Beim Bereinigen wie gehabt eine Art "moderner BlueScreen"; Absturz wegen "System Service Exception" mit automatischem Windows-Neustart. Code:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-25.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 07-28-2018 # Duration: 00:00:41 # OS: Windows 10 Home # Scanned: 41737 # Detected: 49 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.AdvancedSystemCare C:\ProgramData\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\LocalLow\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\Roaming\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver_2\AppData\Roaming\IObit\Advanced SystemCare V8 ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.AdvancedSystemCare HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 9 PUP.Optional.AdvancedSystemCare HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Advanced SystemCare PUP.Optional.AdvancedSystemCare HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} PUP.Optional.DefaultSearch.ShrtCln HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\defaultsearch.com PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\649A52D257CA5DB4EAAE8BA9EB23E467 PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\3152E1F19977892449DC968802CE8964 PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mywebsearch.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchnow.ws PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mysearchnow.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\hotbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\isearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\get-search.cc PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchresults.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearcher.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearch247.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\whatsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\resultsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\crawlermachine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\nicecodec.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\niceblowjob.info PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\fucknicepics.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\codecnice.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\ifinditall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\icanfindit.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\findit-now.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\clearask.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchengine2000.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\best-searchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\adultdatingsearchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\http602.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\you-search.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\bestcrawler.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\tangounion.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\search-web.us PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchoutlaw.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\digistreamsa.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchable-sex.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\securesurface.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\easy-search.net PUP.Optional.SafeFinder HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\startravelsnp.com PUP.Optional.SearchProtect HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchproject.net ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ########## |
28.07.2018, 22:37 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bereinigung durch ADWCleaner führt zum Absturz adwcleaner bitte zwecks Kontrolle wiederholen
__________________ Logfiles bitte immer in CODE-Tags posten |
28.07.2018, 22:42 | #15 |
| Bereinigung durch ADWCleaner führt zum Absturz Identisches Verhalten (die Einstellungen habe ich nicht erneut geprüft). Code:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-25.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 07-28-2018 # Duration: 00:00:49 # OS: Windows 10 Home # Scanned: 41737 # Detected: 49 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.AdvancedSystemCare C:\ProgramData\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\LocalLow\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver\AppData\Roaming\IObit\Advanced SystemCare V8 PUP.Optional.AdvancedSystemCare C:\Users\Oliver_2\AppData\Roaming\IObit\Advanced SystemCare V8 ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.AdvancedSystemCare HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 9 PUP.Optional.AdvancedSystemCare HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Advanced SystemCare PUP.Optional.AdvancedSystemCare HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} PUP.Optional.DefaultSearch.ShrtCln HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\defaultsearch.com PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\649A52D257CA5DB4EAAE8BA9EB23E467 PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1125036280-3562319748-3601731155-1001\Components\3152E1F19977892449DC968802CE8964 PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mywebsearch.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchnow.ws PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\mysearchnow.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\youfindall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\hotbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\isearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\get-search.cc PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchresults.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearcher.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearchbar.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\yoursearch247.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\whatsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\resultsyoursearch.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\crawlermachine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\nicecodec.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\niceblowjob.info PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\fucknicepics.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\codecnice.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\ifinditall.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\icanfindit.net PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\findit-now.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\clearask.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchengine2000.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\best-searchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\adultdatingsearchengine.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\http602.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\you-search.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\bestcrawler.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\tangounion.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\search-web.us PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchoutlaw.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\digistreamsa.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchable-sex.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\securesurface.com PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\easy-search.net PUP.Optional.SafeFinder HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\startravelsnp.com PUP.Optional.SearchProtect HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\searchproject.net ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. AdwCleaner[S00].txt - [7453 octets] - [28/07/2018 23:12:48] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ########## |
Themen zu Bereinigung durch ADWCleaner führt zum Absturz |
absturz, abständen, adwcleaner, aktuell, andere, bedrohungen, bereinige, bereinigen, bereinigung, führt, gefunde, klicke, laufe, log-datei, programm, regelmäßigen, reparieren, starte, startet, stürzt, system, umgehen, unregelmäßige, windows |