Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   ungültiges Bild Teil 1 (https://www.trojaner-board.de/191646-ungueltiges-bild-teil-1-a.html)

joe120 29.06.2018 19:11
ungültiges Bild Teil 1
 
Hallo zusammen

Habe seit heute die Fehlermeldung "ungültiges Bild".

Unten sollte die Auswertung von Farbar's Recovery Scan Tool erscheinen.
Habe 2 Nachrichten erstellt mit Teil 1 und Teil 2, da mein Text mit 165.000 Zeichenzu lange ist.

Vielen Dank jetzt schon für die Hilfe.

Ciao

Joe

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
durchgeführt von joe (Administrator) auf JOE-PC (29-06-2018 19:47:59)
Gestartet von C:\Users\joe\Downloads
Geladene Profile: joe (Verfügbare Profile: joe)
Platform: Windows 10 Home Version 1803 17134.137 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Wargaming.net) C:\Games\World_of_Tanks\WargamingGameUpdater.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18591352 2018-03-19] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM\...\Run: [{C12EDCD9-A219-4778-A5FC-0D0F1F219F12}] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{C12EDCD9-A219-4778-A5FC-0D0F1F219F12}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{C12EDCD9-A219-47 (Der Dateneintrag hat 36 mehr Zeichen).
HKLM-x32\...\Run: [Jomantha] => C:\Program Files (x86)\n52te\razerhid.exe [163840 2007-12-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58584 2017-05-30] (Raptr, Inc)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
Winlogon\Notify\igfxcui: c:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\Run: [EPSON BX525WD Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGAU.EXE [224768 2010-01-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3139936 2018-06-25] (Wargaming.net)
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe [2111488 2016-06-06] (TODO: <Company name>)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU TweakII\LiveUpdate.exe [2447288 2016-05-24] (TODO: <Company name>)
Startup: C:\Users\joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BdBkpFolder [2018-06-29] ()
GroupPolicy\User: Beschränkung ? <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9d775b44-4b3b-4b36-b55a-25b920ae7bbc}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {A16D581D-DE96-40C4-8531-47CBE8AB102D} URL =
SearchScopes: HKU\S-1-5-21-3928304018-1280945314-2601330756-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-3928304018-1280945314-2601330756-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-06-17] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-04-30] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-24] (Oracle Corporation)
BHO-x32: Soda PDF Desktop Helper -> {A2792EEC-6618-4C4C-8ECF-B51ECB5DC2A1} -> C:\Program Files (x86)\Soda PDF Desktop\creator-ie-helper.dll [2017-03-23] (LULU Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-24] (Oracle Corporation)
Toolbar: HKLM-x32 - Soda PDF Desktop Toolbar - {D53D09FE-B1AC-4EE8-AE26-FD43D8B4B62F} - C:\Program Files (x86)\Soda PDF Desktop\creator-ie-plugin.dll [2017-03-23] (LULU Software)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-01] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-01] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-01] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-06-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\nalj22wh.default-1453466735708 [2018-06-29]
FF Homepage: Mozilla\Firefox\Profiles\nalj22wh.default-1453466735708 -> about:home
FF NetworkProxy: Mozilla\Firefox\Profiles\nalj22wh.default-1453466735708 -> type", 0
FF Extension: (AdBlocker Ultimate) - C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\nalj22wh.default-1453466735708\Extensions\adblockultimate@adblockultimate.net.xpi [2018-02-20]
FF Extension: (Adblock Plus) - C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\nalj22wh.default-1453466735708\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-05-16]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-15] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-15] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF Plugin-x32: Soda PDF Desktop -> C:\Program Files (x86)\Soda PDF Desktop\np-previewer.dll [2017-03-23] (LULU Software)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.facebook.com/
CHR Profile: C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default [2018-03-28]
CHR Extension: (Präsentationen) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Adblock Plus) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-10-15]
CHR Extension: (Tabellen) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (Bitdefender Wallet) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2017-05-31]
CHR Extension: (Google Docs Offline) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-15]
CHR Extension: (Chrome Media Router) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S4 ASGT; C:\Windows\SysWOW64\ASGT.exe [48640 2016-05-27] () [Datei ist nicht signiert]
S4 ASLED; C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ASLED.exe [49664 2016-06-14] (TODO: <Company name>) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8654504 2018-06-12] (Microsoft Corporation)
S4 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [488000 2017-07-23] (GOG.com)
S4 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8163392 2017-07-23] (GOG.com)
S4 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] ()
S4 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [202872 2018-03-19] (Logitech Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-24] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-06-24] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2146704 2017-04-22] (Electronic Arts)
S4 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3115928 2017-04-22] (Electronic Arts)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1275776 2018-05-16] (Bitdefender)
S4 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2702184 2017-03-23] (LULU Software)
S4 Soda PDF Desktop Creator; C:\Program Files\Soda PDF Desktop\creator-ws.exe [755048 2017-03-23] (LULU Software)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-29] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-06-29] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152184 2018-06-29] (Malwarebytes)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-07-26] (Huawei Technologies Co., Ltd.)
R3 JmtFltr; C:\WINDOWS\system32\drivers\JmtFltr.sys [46464 2007-09-29] ()
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-08-18] (Logitech Inc.)
R3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [190696 2018-06-29] (Malwarebytes)
S3 NdisCap; C:\WINDOWS\System32\drivers\ndiscap.sys [53760 2018-04-12] () [Datei ist nicht signiert]
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_485c1c3102021986\nvlddmkm.sys [17200392 2018-06-25] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-06-24] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-06-24] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-06-24] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Realtek )
R3 vhidmini; C:\WINDOWS\System32\drivers\vhidmini.sys [13952 2007-09-29] (Windows (R) Codename Longhorn DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46592 2018-06-29] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-06-29] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-29] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 MBAMFarflt; system32\DRIVERS\farflt.sys [X]
S3 MBAMProtection; \SystemRoot\system32\DRIVERS\mbam.sys [X]
S3 MBAMSwissArmy; \SystemRoot\System32\Drivers\mbamswissarmy.sys [X]
S3 MBAMWebProtection; \SystemRoot\system32\DRIVERS\mwac.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-06-29 19:35 - 2018-06-29 19:35 - 010593568 _____ (McAfee, Inc.) C:\Users\joe\Downloads\MCPR.exe
2018-06-29 19:34 - 2018-06-29 19:34 - 005660124 _____ (Swearware) C:\Users\joe\Downloads\ComboFix.exe
2018-06-29 19:27 - 2018-06-29 19:27 - 000034786 _____ C:\ProgramData\dm.uninstall.1530293237.bdinstall.bin
2018-06-29 19:27 - 2018-06-29 19:27 - 000017531 _____ C:\ProgramData\agent.uninstall.1530293229.bdinstall.bin
2018-06-29 19:14 - 2018-06-29 19:14 - 007395536 _____ (Malwarebytes) C:\Users\joe\Downloads\adwcleaner_7.2.1.exe
2018-06-29 19:13 - 2018-06-29 19:13 - 007256272 _____ (Malwarebytes) C:\Users\joe\Downloads\AdwCleaner_7.1.0.0.exe
2018-06-29 18:08 - 2018-06-29 18:12 - 000000000 ____D C:\Users\joe\AppData\Local\NVIDIA Corporation
2018-06-29 18:08 - 2018-06-29 18:08 - 000001447 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2018-06-29 18:08 - 2018-06-29 18:08 - 000000000 ____D C:\Users\joe\AppData\Local\NVIDIA
2018-06-29 18:07 - 2018-06-29 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-06-29 18:07 - 2018-06-29 18:07 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-06-29 18:07 - 2018-06-24 19:27 - 002163648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2018-06-29 18:07 - 2018-06-24 19:27 - 001311680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2018-06-29 18:07 - 2018-06-24 19:27 - 000217960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2018-06-29 18:07 - 2018-06-24 19:27 - 000178024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2018-06-29 18:07 - 2018-06-24 19:27 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2018-06-29 18:07 - 2018-06-24 17:40 - 000132032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2018-06-29 18:07 - 2018-06-24 17:31 - 002612624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2018-06-29 18:07 - 2018-06-24 17:31 - 001767360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2018-06-29 18:07 - 2018-06-24 17:31 - 000633792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2018-06-29 18:07 - 2018-06-24 17:31 - 000124200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2018-06-29 18:07 - 2018-06-24 17:31 - 000083424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2018-06-29 18:07 - 2018-06-20 12:52 - 008207422 _____ C:\WINDOWS\system32\nvcoproc.bin
2018-06-29 18:06 - 2018-06-29 18:06 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2018-06-29 18:06 - 2018-06-24 19:27 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2018-06-29 18:06 - 2018-06-24 17:31 - 005947520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2018-06-29 18:06 - 2018-06-24 17:31 - 000451144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 040346984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 035250256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 031244248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 013728120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 011273632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 004350040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 003760672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 002013784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439836.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 001563392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 001468448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439836.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 001419200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 001216872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 001092360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 000749472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 000626616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 000608512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2018-06-29 18:04 - 2018-06-25 19:25 - 000518208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 025961336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 017750344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 015165008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 004856232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 004126128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 001356816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 001347664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 001157392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 001069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 001063216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 000904720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 000814616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 000652344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2018-06-29 18:04 - 2018-06-25 19:24 - 000634760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2018-06-29 18:04 - 2018-06-24 19:27 - 001688848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2018-06-29 18:04 - 2018-06-24 19:27 - 000227928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2018-06-29 18:04 - 2018-06-24 19:27 - 000068112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2018-06-29 18:04 - 2018-06-24 19:27 - 000067432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2018-06-29 18:04 - 2018-06-24 19:27 - 000047648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2018-06-29 18:04 - 2018-06-24 19:27 - 000044271 _____ C:\WINDOWS\system32\nvinfo.pb
2018-06-29 17:58 - 2018-06-29 19:46 - 000000000 ____D C:\ProgramData\NVIDIA
2018-06-29 17:58 - 2018-06-25 19:26 - 000551840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2018-06-29 17:58 - 2018-06-25 19:26 - 000457144 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2018-06-29 17:57 - 2018-06-29 18:07 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-06-29 17:48 - 2018-06-29 17:57 - 517043648 _____ (NVIDIA Corporation) C:\Users\joe\Downloads\398.36-desktop-win10-64bit-international-whql(1).exe
2018-06-29 17:28 - 2018-06-29 19:02 - 000000000 ____D C:\Users\joe\AppData\Local\AVAST Software
2018-06-29 17:27 - 2018-06-29 17:29 - 000000000 ____D C:\Users\joe\Downloads\DDU v17.0.8.7
2018-06-29 17:27 - 2018-06-29 17:27 - 001206112 _____ (Igor Pavlov) C:\Users\joe\Downloads\DDU_v17.0.8.7.exe
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2018-06-29 17:27 - 2018-06-29 17:27 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2018-06-29 17:26 - 2018-06-29 19:02 - 000000000 ____D C:\ProgramData\AVAST Software
2018-06-29 17:25 - 2018-06-29 17:25 - 000572040 _____ C:\Users\joe\Downloads\DDU_v17.0.8.7_CB-DL-Manager.exe
2018-06-29 17:25 - 2018-06-29 17:25 - 000000000 ____D C:\Users\joe\AppData\Roaming\dlg
2018-06-29 17:21 - 2018-06-29 17:21 - 000000000 ____D C:\$Windows.~BT
2018-06-29 17:04 - 2018-06-29 17:05 - 090998600 _____ (NVIDIA Corporation) C:\Users\joe\Downloads\GeForce_Experience_v3.14.0.139.exe
2018-06-29 17:01 - 2018-06-29 17:01 - 000059758 _____ C:\ProgramData\dm.1530284495.bdinstall.bin
2018-06-29 17:01 - 2018-06-29 17:01 - 000000000 ____D C:\Users\joe\AppData\Roaming\Bitdefender
2018-06-29 17:00 - 2018-06-29 17:00 - 000182515 _____ C:\ProgramData\cl.uninstall.1530284322.bdinstall.bin
2018-06-29 16:58 - 2018-06-29 16:58 - 000029199 _____ C:\ProgramData\agent.update.1530284284.bdinstall.bin
2018-06-29 16:54 - 2018-06-29 19:24 - 000054787 _____ C:\Users\joe\Downloads\Addition.txt
2018-06-29 16:53 - 2018-06-29 19:48 - 000019469 _____ C:\Users\joe\Downloads\FRST.txt
2018-06-29 16:53 - 2018-06-29 19:47 - 000000000 ____D C:\FRST
2018-06-29 16:53 - 2018-06-29 16:53 - 002412544 _____ (Farbar) C:\Users\joe\Downloads\FRST64.exe
2018-06-29 16:17 - 2018-06-15 19:50 - 001376576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-06-29 16:17 - 2018-06-15 19:49 - 021388856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-06-29 16:17 - 2018-06-15 19:48 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-29 16:17 - 2018-06-15 19:34 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-06-29 16:17 - 2018-06-15 19:33 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-29 16:17 - 2018-06-15 19:32 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-06-29 16:17 - 2018-06-15 19:30 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-29 16:17 - 2018-06-15 19:30 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-06-29 16:17 - 2018-06-15 19:30 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-06-29 16:17 - 2018-06-15 19:30 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-29 16:17 - 2018-06-15 17:25 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-06-29 16:17 - 2018-06-15 17:07 - 011901952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-29 16:17 - 2018-06-15 17:02 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-29 16:17 - 2018-06-15 07:21 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-29 16:17 - 2018-06-15 07:19 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-29 16:17 - 2018-06-15 07:15 - 002563960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-29 16:17 - 2018-06-15 07:12 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-29 16:17 - 2018-06-15 07:12 - 000491304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-29 16:17 - 2018-06-15 07:11 - 006817872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-29 16:17 - 2018-06-15 07:11 - 001018616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-06-29 16:17 - 2018-06-15 07:09 - 009147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-29 16:17 - 2018-06-15 07:09 - 007436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-06-29 16:17 - 2018-06-15 07:09 - 002830240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-29 16:17 - 2018-06-15 07:09 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-29 16:17 - 2018-06-15 07:09 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-29 16:17 - 2018-06-15 07:09 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-29 16:17 - 2018-06-15 07:09 - 001659296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-06-29 16:17 - 2018-06-15 07:09 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 004403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-29 16:17 - 2018-06-15 07:08 - 001288840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-29 16:17 - 2018-06-15 07:07 - 001611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-29 16:17 - 2018-06-15 07:07 - 001145696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2018-06-29 16:17 - 2018-06-15 07:04 - 002331576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-29 16:17 - 2018-06-15 07:04 - 001462824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 006572000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 006528600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 006043600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 004788504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001981384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001710240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001620872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001380192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001175056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001144120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2018-06-29 16:17 - 2018-06-15 07:03 - 001020160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-29 16:17 - 2018-06-15 06:56 - 022003712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-29 16:17 - 2018-06-15 06:53 - 025847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-29 16:17 - 2018-06-15 06:50 - 019403264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-29 16:17 - 2018-06-15 06:49 - 002962944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-29 16:17 - 2018-06-15 06:48 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-29 16:17 - 2018-06-15 06:47 - 022714368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-29 16:17 - 2018-06-15 06:46 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-29 16:17 - 2018-06-15 06:46 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-29 16:17 - 2018-06-15 06:46 - 004371456 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-29 16:17 - 2018-06-15 06:46 - 004333568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-29 16:17 - 2018-06-15 06:45 - 002548736 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-06-29 16:17 - 2018-06-15 06:45 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-29 16:17 - 2018-06-15 06:44 - 001632256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2018-06-29 16:17 - 2018-06-15 06:43 - 001626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-29 16:17 - 2018-06-15 06:42 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-29 16:17 - 2018-06-15 06:42 - 002367488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-29 16:17 - 2018-06-15 06:41 - 004561920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-29 16:17 - 2018-06-15 06:41 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-29 16:17 - 2018-06-15 06:41 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-29 16:17 - 2018-06-15 06:40 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-29 16:17 - 2018-06-15 06:40 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-29 16:17 - 2018-06-15 06:39 - 002903040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-29 16:17 - 2018-06-15 06:39 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-06-29 16:17 - 2018-06-15 06:38 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-29 16:17 - 2018-06-15 06:38 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-29 16:17 - 2018-06-15 06:38 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2018-06-29 16:17 - 2018-06-15 06:37 - 001374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-29 16:16 - 2018-06-15 19:55 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-06-29 16:16 - 2018-06-15 19:54 - 000541600 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-06-29 16:16 - 2018-06-15 19:53 - 000348256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-06-29 16:16 - 2018-06-15 19:53 - 000094104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-29 16:16 - 2018-06-15 19:48 - 000338352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2018-06-29 16:16 - 2018-06-15 19:35 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-29 16:16 - 2018-06-15 19:34 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2018-06-29 16:16 - 2018-06-15 19:34 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2018-06-29 16:16 - 2018-06-15 19:33 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2018-06-29 16:16 - 2018-06-15 19:33 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2018-06-29 16:16 - 2018-06-15 19:33 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2018-06-29 16:16 - 2018-06-15 19:32 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-06-29 16:16 - 2018-06-15 19:32 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2018-06-29 16:16 - 2018-06-15 19:31 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2018-06-29 16:16 - 2018-06-15 19:31 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-29 16:16 - 2018-06-15 19:31 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2018-06-29 16:16 - 2018-06-15 19:31 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-06-29 16:16 - 2018-06-15 19:30 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2018-06-29 16:16 - 2018-06-15 19:30 - 001004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2018-06-29 16:16 - 2018-06-15 19:30 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2018-06-29 16:16 - 2018-06-15 19:30 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-29 16:16 - 2018-06-15 19:29 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-29 16:16 - 2018-06-15 19:29 - 002051072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2018-06-29 16:16 - 2018-06-15 19:29 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2018-06-29 16:16 - 2018-06-15 19:29 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-29 16:16 - 2018-06-15 19:29 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-06-29 16:16 - 2018-06-15 19:29 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2018-06-29 16:16 - 2018-06-15 19:29 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2018-06-29 16:16 - 2018-06-15 19:28 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2018-06-29 16:16 - 2018-06-15 19:28 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2018-06-29 16:16 - 2018-06-15 19:28 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2018-06-29 16:16 - 2018-06-15 17:22 - 001026896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-06-29 16:16 - 2018-06-15 17:16 - 002206528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-29 16:16 - 2018-06-15 17:06 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-06-29 16:16 - 2018-06-15 17:06 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2018-06-29 16:16 - 2018-06-15 17:04 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2018-06-29 16:16 - 2018-06-15 17:04 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-06-29 16:16 - 2018-06-15 17:04 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-29 16:16 - 2018-06-15 17:03 - 001308160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2018-06-29 16:16 - 2018-06-15 17:03 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2018-06-29 16:16 - 2018-06-15 17:03 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-29 16:16 - 2018-06-15 17:03 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2018-06-29 16:16 - 2018-06-15 17:02 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2018-06-29 16:16 - 2018-06-15 17:02 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2018-06-29 16:16 - 2018-06-15 17:01 - 002015744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-29 16:16 - 2018-06-15 17:01 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2018-06-29 16:16 - 2018-06-15 17:01 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2018-06-29 16:16 - 2018-06-15 15:23 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-29 16:16 - 2018-06-15 15:23 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-29 16:16 - 2018-06-15 14:09 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-29 16:16 - 2018-06-15 09:11 - 000611232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-06-29 16:16 - 2018-06-15 09:10 - 000048544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-06-29 16:16 - 2018-06-15 09:03 - 000083360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-06-29 16:16 - 2018-06-15 07:24 - 000482472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-06-29 16:16 - 2018-06-15 07:21 - 000761440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-06-29 16:16 - 2018-06-15 07:19 - 000116632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2018-06-29 16:16 - 2018-06-15 07:19 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-06-29 16:16 - 2018-06-15 07:18 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-29 16:16 - 2018-06-15 07:18 - 000269248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-29 16:16 - 2018-06-15 07:18 - 000228768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-06-29 16:16 - 2018-06-15 07:16 - 000562080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-06-29 16:16 - 2018-06-15 07:16 - 000433560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-06-29 16:16 - 2018-06-15 07:15 - 002718624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-06-29 16:16 - 2018-06-15 07:15 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-06-29 16:16 - 2018-06-15 07:13 - 000510904 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-06-29 16:16 - 2018-06-15 07:13 - 000324000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-06-29 16:16 - 2018-06-15 07:12 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-29 16:16 - 2018-06-15 07:12 - 000661152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-06-29 16:16 - 2018-06-15 07:12 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-29 16:16 - 2018-06-15 07:12 - 000118872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2018-06-29 16:16 - 2018-06-15 07:11 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-29 16:16 - 2018-06-15 07:11 - 000134560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-29 16:16 - 2018-06-15 07:10 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-29 16:16 - 2018-06-15 07:10 - 001097640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-29 16:16 - 2018-06-15 07:10 - 000717208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-06-29 16:16 - 2018-06-15 07:10 - 000567176 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-29 16:16 - 2018-06-15 07:10 - 000326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-06-29 16:16 - 2018-06-15 07:10 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-29 16:16 - 2018-06-15 07:09 - 001945784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-29 16:16 - 2018-06-15 07:09 - 001742272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-06-29 16:16 - 2018-06-15 07:09 - 001112600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-29 16:16 - 2018-06-15 07:09 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-29 16:16 - 2018-06-15 07:09 - 000709848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-29 16:16 - 2018-06-15 07:09 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-29 16:16 - 2018-06-15 07:09 - 000247984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2018-06-29 16:16 - 2018-06-15 07:08 - 002062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 001921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-29 16:16 - 2018-06-15 07:08 - 001457128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-29 16:16 - 2018-06-15 07:08 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-29 16:16 - 2018-06-15 07:08 - 001150408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 001148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 001140568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-29 16:16 - 2018-06-15 07:08 - 000983008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-29 16:16 - 2018-06-15 07:08 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-29 16:16 - 2018-06-15 07:08 - 000898760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 000642088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 000604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-06-29 16:16 - 2018-06-15 07:08 - 000500552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 000413816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-29 16:16 - 2018-06-15 07:08 - 000072768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2018-06-29 16:16 - 2018-06-15 07:05 - 000550608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-29 16:16 - 2018-06-15 07:05 - 000444240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-06-29 16:16 - 2018-06-15 07:04 - 001397192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-29 16:16 - 2018-06-15 07:04 - 001251736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-06-29 16:16 - 2018-06-15 07:04 - 000719552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-06-29 16:16 - 2018-06-15 07:04 - 000281080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-06-29 16:16 - 2018-06-15 07:04 - 000105376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 002163184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 001805752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 001129640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 001011968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000988128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000770152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000472136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-29 16:16 - 2018-06-15 07:03 - 000232488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2018-06-29 16:16 - 2018-06-15 07:03 - 000129192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-06-29 16:16 - 2018-06-15 06:48 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2018-06-29 16:16 - 2018-06-15 06:47 - 001360384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-29 16:16 - 2018-06-15 06:47 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2018-06-29 16:16 - 2018-06-15 06:47 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2018-06-29 16:16 - 2018-06-15 06:47 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 001295872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2018-06-29 16:16 - 2018-06-15 06:46 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2018-06-29 16:16 - 2018-06-15 06:45 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-06-29 16:16 - 2018-06-15 06:45 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandlerPS.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2018-06-29 16:16 - 2018-06-15 06:44 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2018-06-29 16:16 - 2018-06-15 06:44 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-06-29 16:16 - 2018-06-15 06:43 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2018-06-29 16:16 - 2018-06-15 06:43 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-06-29 16:16 - 2018-06-15 06:43 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000978432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-06-29 16:16 - 2018-06-15 06:42 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-06-29 16:16 - 2018-06-15 06:42 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-06-29 16:16 - 2018-06-15 06:42 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2018-06-29 16:16 - 2018-06-15 06:42 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2018-06-29 16:16 - 2018-06-15 06:41 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000811520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-06-29 16:16 - 2018-06-15 06:41 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-06-29 16:16 - 2018-06-15 06:40 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-29 16:16 - 2018-06-15 06:40 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-29 16:16 - 2018-06-15 06:40 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2018-06-29 16:16 - 2018-06-15 06:40 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-06-29 16:16 - 2018-06-15 06:40 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 002583552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 000916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-06-29 16:16 - 2018-06-15 06:39 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-29 16:16 - 2018-06-15 06:38 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-06-29 16:16 - 2018-06-15 06:38 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-29 16:16 - 2018-06-15 06:37 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-06-29 16:16 - 2018-06-15 06:36 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
2018-06-29 16:16 - 2018-06-15 05:23 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-29 16:16 - 2018-05-20 13:53 - 000792984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-29 16:16 - 2018-05-20 13:52 - 000413080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-29 16:15 - 2018-06-15 06:45 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2018-06-29 16:15 - 2018-06-15 06:44 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2018-06-29 16:15 - 2018-06-15 06:42 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-06-29 16:15 - 2018-06-15 06:41 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-29 16:15 - 2018-06-01 07:18 - 000058524 _____ C:\WINDOWS\system32\srms.dat
2018-06-29 16:11 - 2018-06-29 17:25 - 000000000 ___HD C:\$SysReset
2018-06-29 16:00 - 2018-06-29 16:00 - 000000000 ___HD C:\$Windows.~WS
2018-06-29 15:57 - 2018-06-29 15:57 - 001540104 _____ (CHIP Digital GmbH) C:\Users\joe\Downloads\Windows 10 Refresh Tool Clean Install - CHIP-Installer.exe
2018-06-29 15:44 - 2018-06-29 15:47 - 000190696 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-06-29 15:44 - 2018-06-29 15:47 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-06-29 15:44 - 2018-06-29 15:44 - 000000000 ____D C:\Program Files\Malwarebytes
2018-06-29 15:42 - 2018-06-29 15:42 - 001540104 _____ (CHIP Digital GmbH) C:\Users\joe\Downloads\Malwarebytes Malware Scanner - CHIP-Installer.exe
2018-06-29 15:15 - 2018-06-29 18:07 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-29 18:07 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-29 15:15 - 2018-06-24 19:27 - 002495936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2018-06-29 14:59 - 2018-06-29 15:03 - 517043648 _____ (NVIDIA Corporation) C:\Users\joe\Downloads\398.36-desktop-win10-64bit-international-whql.exe
2018-06-29 14:08 - 2018-06-29 15:22 - 000000000 ____D C:\WINDOWS\Minidump
2018-06-29 13:04 - 2018-06-29 13:06 - 134767873 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_16.exe
2018-06-26 19:23 - 2018-06-26 19:23 - 001798176 _____ (CPUID, Inc. ) C:\Users\joe\Downloads\cpu-z_1.85-en.exe
2018-06-26 19:23 - 2018-06-26 19:23 - 000000914 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2018-06-26 19:23 - 2018-06-26 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-06-26 19:23 - 2018-06-26 19:23 - 000000000 ____D C:\Program Files\CPUID
2018-06-26 15:45 - 2018-06-29 19:28 - 000000000 ____D C:\Users\joe\AppData\Roaming\Opera Software
2018-06-26 15:45 - 2018-06-29 19:28 - 000000000 ____D C:\Users\joe\AppData\Local\Opera Software
2018-06-26 15:42 - 2018-06-26 15:42 - 001540104 _____ (CHIP Digital GmbH) C:\Users\joe\Downloads\Opera 64 Bit - CHIP-Installer.exe
2018-06-26 15:17 - 2018-06-26 15:19 - 135069080 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_14.exe
2018-06-24 15:28 - 2018-06-24 15:31 - 135236144 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_12.exe
2018-06-22 14:13 - 2018-06-22 14:16 - 133903804 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_11.exe
2018-06-21 15:30 - 2018-06-21 15:31 - 000000000 ____D C:\AdwCleaner
2018-06-21 15:30 - 2018-06-21 15:30 - 007372496 _____ (Malwarebytes) C:\Users\joe\Downloads\adwcleaner_7.2.0.exe
2018-06-19 19:49 - 2018-06-19 19:49 - 000000000 ____D C:\ProgramData\Packages
2018-06-19 12:25 - 2018-06-19 12:27 - 134528155 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_06.exe
2018-06-15 09:57 - 2018-06-08 21:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-15 09:57 - 2018-05-20 18:59 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-06-15 09:57 - 2018-05-20 13:34 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-15 09:57 - 2018-05-20 13:30 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-15 09:57 - 2018-05-20 13:16 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-15 09:56 - 2018-06-08 21:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-15 09:56 - 2018-06-08 21:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-15 09:56 - 2018-06-08 21:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-15 09:56 - 2018-06-08 21:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-15 09:56 - 2018-06-08 20:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-15 09:56 - 2018-06-08 20:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-15 09:56 - 2018-06-08 20:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-15 09:56 - 2018-06-08 20:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-15 09:56 - 2018-06-08 20:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-15 09:56 - 2018-06-08 20:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-15 09:56 - 2018-06-08 20:44 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2018-06-15 09:56 - 2018-06-08 20:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-15 09:56 - 2018-06-08 20:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-15 09:56 - 2018-06-08 20:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-15 09:56 - 2018-06-08 20:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-15 09:56 - 2018-06-08 20:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-15 09:56 - 2018-06-08 20:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-15 09:56 - 2018-06-08 20:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-15 09:56 - 2018-06-08 20:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-15 09:56 - 2018-06-08 20:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-15 09:56 - 2018-06-08 20:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-15 09:56 - 2018-06-08 20:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-15 09:56 - 2018-06-08 20:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-15 09:56 - 2018-06-08 20:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-15 09:56 - 2018-06-08 20:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-15 09:56 - 2018-06-08 20:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-15 09:56 - 2018-06-08 20:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-15 09:56 - 2018-06-08 19:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-15 09:56 - 2018-06-08 18:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-15 09:56 - 2018-06-08 18:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-15 09:56 - 2018-06-08 18:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-15 09:56 - 2018-06-08 18:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-15 09:56 - 2018-06-08 18:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-15 09:56 - 2018-06-08 18:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-15 09:56 - 2018-06-08 18:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-15 09:56 - 2018-06-08 18:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-15 09:56 - 2018-06-08 18:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-15 09:56 - 2018-06-08 18:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-15 09:56 - 2018-06-08 18:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-15 09:56 - 2018-06-08 18:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-15 09:56 - 2018-06-08 16:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-15 09:56 - 2018-06-08 12:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-15 09:56 - 2018-06-08 12:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-15 09:56 - 2018-06-08 12:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-15 09:56 - 2018-06-08 12:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-15 09:56 - 2018-06-08 12:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-15 09:56 - 2018-06-08 12:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-15 09:56 - 2018-06-08 12:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-15 09:56 - 2018-06-08 12:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-15 09:56 - 2018-06-08 12:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-15 09:56 - 2018-06-08 12:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-15 09:56 - 2018-06-08 11:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-15 09:56 - 2018-06-08 11:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-15 09:56 - 2018-06-08 11:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-15 09:56 - 2018-06-08 11:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-15 09:56 - 2018-06-08 11:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-15 09:56 - 2018-06-08 11:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-15 09:56 - 2018-06-08 11:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-15 09:56 - 2018-06-08 11:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-15 09:56 - 2018-06-08 11:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-15 09:56 - 2018-06-08 11:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-15 09:56 - 2018-06-08 11:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-15 09:56 - 2018-06-08 11:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-15 09:56 - 2018-06-08 11:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-15 09:56 - 2018-06-08 11:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-15 09:56 - 2018-06-08 11:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-15 09:56 - 2018-06-08 11:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-15 09:56 - 2018-06-08 11:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-15 09:56 - 2018-06-08 11:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-15 09:56 - 2018-06-08 11:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-15 09:56 - 2018-06-08 11:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-15 09:56 - 2018-06-08 11:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-15 09:56 - 2018-06-08 11:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-15 09:56 - 2018-06-08 11:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-15 09:56 - 2018-06-08 11:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-15 09:56 - 2018-06-08 11:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-15 09:56 - 2018-06-08 11:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-15 09:56 - 2018-06-08 11:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-15 09:56 - 2018-06-08 11:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-15 09:56 - 2018-06-08 11:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-15 09:56 - 2018-06-08 11:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-15 09:56 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-15 09:56 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-15 09:56 - 2018-06-08 11:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-15 09:56 - 2018-06-08 11:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-15 09:56 - 2018-06-08 11:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-15 09:56 - 2018-06-08 11:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-15 09:56 - 2018-06-08 11:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-15 09:56 - 2018-06-08 11:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-15 09:56 - 2018-06-08 10:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-15 09:56 - 2018-06-08 10:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-15 09:56 - 2018-06-08 10:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-15 09:56 - 2018-06-08 10:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-15 09:56 - 2018-06-08 10:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-15 09:56 - 2018-06-08 10:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-15 09:56 - 2018-06-08 10:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-15 09:56 - 2018-06-08 10:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-15 09:56 - 2018-06-08 10:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-15 09:56 - 2018-06-08 10:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-15 09:56 - 2018-06-08 10:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-15 09:56 - 2018-06-08 10:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-15 09:56 - 2018-06-08 10:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-15 09:56 - 2018-06-08 10:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-15 09:56 - 2018-06-08 10:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-15 09:56 - 2018-06-08 10:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 09:56 - 2018-06-08 10:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-15 09:56 - 2018-06-08 10:54 - 000842240 _____ C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-15 09:56 - 2018-06-08 10:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-15 09:56 - 2018-06-08 10:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-15 09:56 - 2018-06-08 10:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-15 09:56 - 2018-06-08 10:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-15 09:56 - 2018-06-08 10:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-15 09:56 - 2018-06-08 10:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 09:56 - 2018-06-08 10:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-15 09:56 - 2018-06-06 20:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-15 09:56 - 2018-06-06 06:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-15 09:56 - 2018-06-02 01:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-15 09:56 - 2018-06-02 00:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-15 09:56 - 2018-05-25 05:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-15 09:56 - 2018-05-20 21:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-06-15 09:56 - 2018-05-20 21:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-06-15 09:56 - 2018-05-20 21:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-15 09:56 - 2018-05-20 21:26 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-06-15 09:56 - 2018-05-20 21:23 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-06-15 09:56 - 2018-05-20 21:23 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-06-15 09:56 - 2018-05-20 21:23 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-06-15 09:56 - 2018-05-20 21:22 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-06-15 09:56 - 2018-05-20 21:22 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-06-15 09:56 - 2018-05-20 21:22 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-06-15 09:56 - 2018-05-20 21:22 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-06-15 09:56 - 2018-05-20 20:15 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-15 09:56 - 2018-05-20 20:14 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-15 09:56 - 2018-05-20 20:02 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-15 09:56 - 2018-05-20 20:00 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-06-15 09:56 - 2018-05-20 19:59 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-15 09:56 - 2018-05-20 19:59 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-15 09:56 - 2018-05-20 18:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-15 09:56 - 2018-05-20 18:35 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-15 09:56 - 2018-05-20 18:34 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-15 09:56 - 2018-05-20 16:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-15 09:56 - 2018-05-20 14:33 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-06-15 09:56 - 2018-05-20 13:53 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-15 09:56 - 2018-05-20 13:53 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-15 09:56 - 2018-05-20 13:53 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-06-15 09:56 - 2018-05-20 13:53 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-06-15 09:56 - 2018-05-20 13:53 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-06-15 09:56 - 2018-05-20 13:52 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-15 09:56 - 2018-05-20 13:52 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-06-15 09:56 - 2018-05-20 13:52 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-06-15 09:56 - 2018-05-20 13:52 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-06-15 09:56 - 2018-05-20 13:34 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-15 09:56 - 2018-05-20 13:33 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-15 09:56 - 2018-05-20 13:33 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-15 09:56 - 2018-05-20 13:32 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-15 09:56 - 2018-05-20 13:32 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-15 09:56 - 2018-05-20 13:32 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-15 09:56 - 2018-05-20 13:32 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-15 09:56 - 2018-05-20 13:31 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-15 09:56 - 2018-05-20 13:28 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-15 09:56 - 2018-05-20 13:28 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-15 09:56 - 2018-05-20 13:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-06-15 09:56 - 2018-05-20 13:27 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-06-15 09:56 - 2018-05-20 13:27 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-15 09:56 - 2018-05-20 13:26 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-06-15 09:56 - 2018-05-20 13:26 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-15 09:56 - 2018-05-20 13:26 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-06-15 09:56 - 2018-05-20 13:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-06-15 09:56 - 2018-05-20 13:26 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-15 09:56 - 2018-05-20 13:26 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-06-15 09:56 - 2018-05-20 13:25 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-06-15 09:56 - 2018-05-20 13:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-06-15 09:56 - 2018-05-20 13:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-06-15 09:56 - 2018-05-20 13:24 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-15 09:56 - 2018-05-20 13:23 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-15 09:56 - 2018-05-20 13:23 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-06-15 09:56 - 2018-05-20 13:23 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-06-15 09:56 - 2018-05-20 13:21 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-06-15 09:56 - 2018-05-20 13:21 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-06-15 09:56 - 2018-05-20 13:21 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-06-15 09:56 - 2018-05-20 13:21 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-15 09:56 - 2018-05-20 13:17 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-06-15 09:56 - 2018-05-20 13:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-15 09:56 - 2018-05-20 13:16 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-15 09:56 - 2018-05-20 13:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-06-15 09:56 - 2018-05-20 13:15 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-15 09:56 - 2018-05-20 13:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-15 09:56 - 2018-05-20 13:14 - 000167936 _____ C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-15 09:56 - 2018-05-20 13:13 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-15 09:56 - 2018-05-20 13:13 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-15 09:56 - 2018-05-20 13:12 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-15 09:56 - 2018-05-20 13:11 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-15 09:56 - 2018-05-20 13:11 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-15 09:56 - 2018-05-20 10:26 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-06-15 09:56 - 2018-05-18 19:08 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-15 09:49 - 2018-06-15 09:54 - 131412080 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.2.1_03.exe
2018-06-07 06:44 - 2018-06-07 06:46 - 135271893 _____ (Aslain ) C:\Users\joe\Downloads\Aslains_WoT_Modpack_Installer_v.1.0.1.1_18.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-06-29 19:45 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-29 19:45 - 2016-11-18 12:54 - 000000000 ____D C:\Users\joe\AppData\LocalLow\Mozilla
2018-06-29 19:44 - 2018-05-25 07:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-29 19:44 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-29 19:44 - 2013-12-22 09:40 - 000000000 ____D C:\Users\joe\Documents\Outlook-Dateien
2018-06-29 19:44 - 2013-11-12 18:23 - 000000000 ____D C:\Program Files\Bitdefender
2018-06-29 19:37 - 2018-05-25 07:36 - 000004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D10E23CC-CCB0-4629-8252-C0687EFF1F5A}
2018-06-29 19:31 - 2013-11-14 18:54 - 000000000 ____D C:\Program Files (x86)\Steam
2018-06-29 19:29 - 2017-02-12 08:34 - 000000000 ____D C:\Users\joe\AppData\Local\Ubisoft Game Launcher
2018-06-29 19:27 - 2016-05-30 19:59 - 000000000 ____D C:\Program Files\CyberLink
2018-06-29 19:27 - 2013-08-03 17:19 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-06-29 19:26 - 2018-05-25 07:26 - 001922604 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-29 19:26 - 2018-04-12 18:13 - 000818948 _____ C:\WINDOWS\system32\perfh007.dat
2018-06-29 19:26 - 2018-04-12 18:13 - 000182032 _____ C:\WINDOWS\system32\perfc007.dat
2018-06-29 19:26 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-29 19:15 - 2016-05-11 19:32 - 000000000 ____D C:\Users\joe\AppData\Roaming\WhatsApp
2018-06-29 19:04 - 2016-04-05 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2018-06-29 19:04 - 2016-04-05 16:00 - 000000000 ____D C:\Program Files (x86)\Raptr Inc
2018-06-29 19:02 - 2018-05-25 07:24 - 000450040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-29 19:01 - 2018-05-25 07:36 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-06-29 19:01 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-06-29 18:40 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-29 18:40 - 2017-10-22 00:05 - 000000000 ___RD C:\Users\joe\3D Objects
2018-06-29 18:40 - 2017-05-04 14:09 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-29 18:35 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-29 18:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-29 18:34 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-29 18:08 - 2017-05-04 14:00 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-06-29 18:07 - 2017-05-04 16:11 - 000000000 ____D C:\temp
2018-06-29 18:07 - 2017-05-04 14:00 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-06-29 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help
2018-06-29 17:27 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-06-29 17:03 - 2013-08-03 17:54 - 000548000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-06-29 16:59 - 2013-11-12 23:15 - 001541774 _____ C:\bdlog.txt
2018-06-29 16:59 - 2013-11-12 18:23 - 000000000 ____D C:\ProgramData\Bitdefender
2018-06-29 16:59 - 2013-11-12 18:22 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2018-06-29 16:58 - 2016-11-12 16:50 - 000000000 ____D C:\Program Files\Bitdefender Agent
2018-06-29 16:01 - 2017-05-03 18:37 - 000000000 ____D C:\Windows10Upgrade
2018-06-29 16:00 - 2018-05-17 08:51 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-29 15:47 - 2016-05-11 19:32 - 000000000 ____D C:\Users\joe\AppData\Local\WhatsApp
2018-06-29 15:37 - 2018-04-11 23:04 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2018-06-29 15:31 - 2018-05-25 07:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-29 15:24 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-06-29 15:22 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2018-06-29 15:22 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2018-06-29 14:50 - 2013-08-29 07:43 - 000000000 ____D C:\Users\joe\AppData\Local\ElevatedDiagnostics
2018-06-29 14:39 - 2013-08-13 18:00 - 000000000 ____D C:\Users\joe\AppData\Roaming\TS3Client
2018-06-29 14:15 - 2016-12-13 18:12 - 000000022 _____ C:\WINDOWS\GPU-Z.INI
2018-06-29 14:12 - 2014-07-27 16:10 - 000000000 ____D C:\ProgramData\AAV
2018-06-29 13:41 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-29 13:41 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-29 13:14 - 2017-04-27 22:17 - 000000880 _____ C:\Users\joe\Desktop\Aslains WoT Logs Archiver.lnk
2018-06-29 12:57 - 2017-05-04 14:00 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2018-06-28 15:57 - 2016-05-11 19:32 - 000002291 _____ C:\Users\joe\Desktop\WhatsApp.lnk
2018-06-28 15:57 - 2016-05-11 19:32 - 000000000 ____D C:\Users\joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2018-06-28 15:55 - 2016-05-11 19:32 - 000000000 ____D C:\Users\joe\AppData\Local\SquirrelTemp
2018-06-25 20:07 - 2017-03-24 12:27 - 000002345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-25 20:07 - 2017-03-24 12:27 - 000002304 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-24 15:28 - 2018-05-25 07:36 - 000003356 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3928304018-1280945314-2601330756-1000
2018-06-24 15:28 - 2018-05-25 07:31 - 000002417 _____ C:\Users\joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-24 15:28 - 2016-05-26 09:34 - 000000000 ___RD C:\Users\joe\OneDrive
2018-06-21 14:16 - 2018-05-25 07:36 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2018-06-18 17:05 - 2018-05-25 07:31 - 000000000 ____D C:\Users\joe
2018-06-17 20:41 - 2018-05-25 07:51 - 000000000 ____D C:\Users\joe\AppData\Local\D3DSCache
2018-06-17 20:04 - 2013-08-04 00:46 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2018-06-17 09:29 - 2013-08-28 18:27 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-16 05:45 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-16 05:45 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-16 05:43 - 2017-03-28 15:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-06-16 05:43 - 2013-12-06 09:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-15 10:03 - 2013-08-06 23:20 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-15 09:59 - 2017-10-11 20:24 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-15 09:59 - 2013-08-04 08:07 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-15 09:45 - 2018-05-25 07:36 - 000004620 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-06-15 09:45 - 2018-05-25 07:36 - 000004428 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-06-15 09:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-06-15 09:45 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-06-07 09:55 - 2013-12-06 09:51 - 000001284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-05 23:04 - 2018-05-25 09:36 - 000000000 ____D C:\Users\joe\AppData\Local\PlaceholderTileLogoFolder
2018-06-05 20:34 - 2017-10-21 23:59 - 000000000 ____D C:\Users\joe\AppData\Local\Packages
2018-06-04 23:02 - 2016-09-21 07:19 - 000000000 ____D C:\Users\joe\Desktop\NH
2018-05-30 16:08 - 2017-01-17 22:45 - 000000000 ____D C:\Users\joe\AppData\Local\CrashDumps

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2018-01-08 19:58 - 2018-01-08 19:58 - 000002427 _____ () C:\Users\joe\AppData\Roaming\MyMicroBalanceConfig.ini
2017-05-03 17:16 - 2017-05-03 17:16 - 000000017 _____ () C:\Users\joe\AppData\Local\resmon.resmoncfg
2015-02-17 20:03 - 2015-02-17 20:03 - 000000000 _____ () C:\Users\joe\AppData\Local\{134426FE-D5F2-487F-91D9-F2AC15CA6018}

Einige Dateien in TEMP:
====================
2018-06-29 16:00 - 2018-06-29 16:00 - 018309328 _____ (Microsoft Corporation) C:\Users\joe\AppData\Local\Temp\MediaCreationTool.exe
2018-06-29 15:15 - 2018-06-24 17:40 - 000730560 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvSCPAPI64.dll
2018-06-29 17:21 - 2017-10-27 18:06 - 000370296 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvStInst.exe
2018-06-29 15:24 - 2018-06-29 15:24 - 002539520 _____ (Opera Software) C:\Users\joe\AppData\Local\Temp\Opera_installer_18062913241903010616.dll
2018-06-29 15:29 - 2018-06-29 15:29 - 002539520 _____ (Opera Software) C:\Users\joe\AppData\Local\Temp\Opera_installer_18062913291207311984.dll
2018-06-29 15:38 - 2018-06-29 15:38 - 002539520 _____ (Opera Software) C:\Users\joe\AppData\Local\Temp\Opera_installer_1806291338059156456.dll
2018-06-29 16:36 - 2018-06-29 16:36 - 002539520 _____ (Opera Software) C:\Users\joe\AppData\Local\Temp\Opera_installer_18062914360568210060.dll
2018-06-29 16:48 - 2018-06-29 16:48 - 002539520 _____ (Opera Software) C:\Users\joe\AppData\Local\Temp\Opera_installer_1806291448021568924.dll
2018-06-29 16:01 - 2018-06-29 16:01 - 006612768 _____ (Microsoft Corporation) C:\Users\joe\AppData\Local\Temp\Windows10Upgrade.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-05-25 07:24

==================== Ende von FRST.txt ============================

joe120 29.06.2018 19:12
Hier der 2. Teil

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20.06.2018
durchgeführt von joe (29-06-2018 19:49:57)
Gestartet von C:\Users\joe\Downloads
Windows 10 Home Version 1803 17134.137 (X64) (2018-05-25 05:36:22)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3928304018-1280945314-2601330756-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3928304018-1280945314-2601330756-503 - Limited - Disabled)
Gast (S-1-5-21-3928304018-1280945314-2601330756-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3928304018-1280945314-2601330756-1002 - Limited - Enabled)
joe (S-1-5-21-3928304018-1280945314-2601330756-1000 - Administrator - Enabled) => C:\Users\joe
WDAGUtilityAccount (S-1-5-21-3928304018-1280945314-2601330756-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)
Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)
Anno 1404 (HKLM-x32\...\Uplay Install 89) (Version:  - Ubisoft)
Ashampoo Photo Commander 14 (HKLM-x32\...\{0A11EA01-616B-A905-B3D2-3B7C238851DC}_is1) (Version: 14.0.6 - Ashampoo GmbH & Co. KG)
ASUS GPU TweakII (HKLM-x32\...\{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.2.8.2 - ASUSTek COMPUTER INC.) Hidden
ASUS GPU TweakII (HKLM-x32\...\InstallShield_{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.2.8.2 - ASUSTek COMPUTER INC.)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.031 - ASUSTek Computer Inc.)
AURA(GRAPHICS CARD) (HKLM-x32\...\{189E7EB4-7BE2-4A77-9140-F338207152DA}) (Version: 0.0.2.1 - )
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.21.970 - Bitdefender)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
CPUID CPU-Z 1.85 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.85 - CPUID, Inc.)
Curse Client (HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
CyberLink PhotoDirector 7 (HKLM-x32\...\{7984FCA5-1BB6-46e6-91E2-ED5C301AF11A}) (Version: 7.0.7504.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 398.36 - NVIDIA Corporation) Hidden
EPSON BX525WD Series Printer Uninstall (HKLM\...\EPSON BX525WD Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX525WD Series Printer Uninstall (HKLM\...\EPSON SX525WD Series) (Version:  - SEIKO EPSON Corporation)
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)
FileZilla Client 3.7.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HiSuite (HKLM-x32\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Logitech Gaming Software 8.98 (HKLM\...\Logitech Gaming Software) (Version: 8.98.218 - Logitech Inc.)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE  (HKLM-x32\...\{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}) (Version: 2.0.675.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{FD052FB9-FE90-4438-B355-15EDC89D8FB1}) (Version: 2.0.673.0 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.9330.2124 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\OneDriveSetup.exe) (Version: 18.091.0506.0007 - Microsoft Corporation)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM-x32\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 60.0.2 (x64 de) (HKLM\...\Mozilla Firefox 60.0.2 (x64 de)) (Version: 60.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0 - Mozilla)
n52te Editor (HKLM-x32\...\{0AC8162B-5175-41D7-B963-8307A40BD456}) (Version: 5.01 - Razer USA Ltd.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.13 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 398.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 398.36 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Grafiktreiber 398.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 398.36 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.37.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.9330.2124 - Microsoft Corporation) Hidden
OMC ModPack Client Version 1.4.7.144 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.4.7.144 - Odem Mortis)
Origin (HKLM-x32\...\Origin) (Version: 10.4.8.36918 - Electronic Arts, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.10-r123135-release - Raptr, Inc)
RarZilla Free Unrar (HKLM-x32\...\RarZilla Free Unrar) (Version: 7 - Philipp Winterberg)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (HKLM-x32\...\{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
Soda PDF Desktop (HKLM-x32\...\SodaDesktop) (Version: 9.1.13.32527 - LULU Software)
Soda PDF Desktop Asian Fonts Pack (HKLM\...\{5F6367B4-01D5-49B3-BDDE-57DEC193B11D}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Convert Module (HKLM\...\{1E41EF6F-EDCD-41FA-8221-48B1BC58B61D}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Create Module (HKLM\...\{5034E38F-CF0F-4886-B774-DF168A7BA5C0}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Edit Module (HKLM\...\{A40CDD7A-2708-4591-BD85-075BA6BAB453}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Forms Module (HKLM\...\{BE9C0706-9862-4DD0-BFE9-93951C197D8D}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Insert Module (HKLM\...\{1A11B1AA-C1DA-4D51-85D2-B378BA07951C}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop OCR Module (HKLM\...\{A5FBED78-28E5-4652-98DA-EDD1302760D8}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Review Module (HKLM\...\{3F07016A-5061-4E3E-A62B-34362F9C3C63}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop Secure Module (HKLM\...\{AF5B847F-6E87-4E8A-AEB8-33ACA3DE25C5}) (Version: 9.1.17.32812 - LULU Software) Hidden
Soda PDF Desktop View Module (HKLM\...\{1210F4F8-B9D8-4956-BADD-FE9D74CB89BF}) (Version: 9.1.17.32812 - LULU Software) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer-Ratgeber 2017-2018 (HKLM-x32\...\{09578E80-CE8C-47E6-A055-8C49C616541F}) (Version: 18.05.1 - Wolters Kluwer Deutschland GmbH)
SteuerSparErklärung 2014 (HKLM-x32\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.14.99 - Akademische Arbeitsgemeinschaft)
SteuerSparErklärung 2015 (HKLM-x32\...\{312C0E08-8F94-4536-AAF6-3413F784AC5F}) (Version: 20.38.173 - Akademische Arbeitsgemeinschaft)
SteuerSparErklärung 2018 (HKLM-x32\...\{A1D1FDBD-02F9-49B6-9EB2-2DC6B1D37E16}) (Version: 23.29.44 - Wolters Kluwer Deutschland GmbH)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version:  - Ubisoft)
Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22391 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
World of Tanks (HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)
XSplit Gamecaster (HKLM-x32\...\{8915913F-E4AF-46C5-B4EF-3535D83BFFDE}) (Version: 2.5.1507.3018 - SplitmediaLabs)
XVM Version 7.6.0 (HKLM-x32\...\{2865cd27-6b8b-4413-8272-cd968f316050}_is1) (Version: 7.6.0 - XVM team)
zebNet® Windows Keyfinder 6.0.0.0 (HKLM\...\{BA76A2F4-88E2-4232-BAB9-DA12DDFD03CC}) (Version: 6.0.0.0 - zebNet® Ltd)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3928304018-1280945314-2601330756-1000_Classes\CLSID\{b6dafa5d-7899-4523-9050-a078e7224b86}\InprocServer32 -> c:\windows\system32\dfshim.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [SodaPDFDesktop_ManagerExt] -> {526A2ADD-BD9B-40E5-9D45-75EF6313FCE4} => C:\Program Files\Soda PDF Desktop\context-menu.dll [2017-03-23] (LULU Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> Keine Datei
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-06-24] (NVIDIA Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01FD1E78-4944-4D3F-AE65-50CA23BE0432} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {03448E2A-51F5-4B2C-BB94-1BDD92F46F80} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {082F9710-F794-4DB4-92F0-28DBA14F7270} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1752F6A0-97C9-4C99-AB38-968D678E2919} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {22575CF1-D978-4BA8-85B6-12BE53917542} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {23E3DE77-1A5C-4461-8353-28894C940D90} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-06-17] (Microsoft Corporation)
Task: {25C79337-730C-4D4F-8064-1BCD30909040} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-06-24] (NVIDIA Corporation)
Task: {276F32D9-D85F-4D5E-8DAA-18C78997DED8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {31DE0B7D-0A91-45D0-90F8-F7DB0083F1FB} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-15] (Adobe Systems Incorporated)
Task: {333AA284-EBBF-4D0B-86F7-957841AE1E37} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {340B1AEF-4458-4D39-BDB5-23116046E988} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {359485D2-C7CC-48C5-BA53-2728A5C99075} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2018-06-29] (AVAST Software)
Task: {37C9E244-348A-44AE-A8DE-FE4ED05DFF05} - System32\Tasks\{CB291986-0F06-48C1-B5E1-EBDC59DDC40B} => C:\Windows\system32\pcalua.exe -a D:\setup.exe -d D:\
Task: {3BE1557C-D8CB-4233-A8D7-7D763AB897CF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3C194BF7-800B-4B38-A773-4E7265E6D79E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-12] (Microsoft Corporation)
Task: {425CF9F4-8C64-4C80-A784-DFD94F5FED9F} - System32\Tasks\{E62C88A9-26E5-4E94-9FFA-7642D1991DC9} => C:\Program Files (x86)\THQ\Titan Quest\Titan Quest.exe
Task: {4A00EB37-B975-42AD-BC1B-9ABD652E179C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4A1A7C21-35D4-4F71-9F9A-6D7977CEDD48} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4CDA2C8F-265D-4BBB-9995-6570E5F6B31F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {51C088A2-8FFF-4C75-8976-96020FB48D28} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-06-17] (Microsoft Corporation)
Task: {52FD3202-ECBB-454F-A3D0-C568023CFB7E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {53352F8E-B2FC-489D-B6C2-7FFC1A368EB8} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-17] (Microsoft Corporation)
Task: {55790A73-D375-4F75-81EC-937843C64A3F} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {59648645-72B7-478E-9664-1033F7C78E4A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {642974D2-816E-4BCE-B702-AC4F2BB61010} - System32\Tasks\S-1-5-21-3928304018-1280945314-2601330756-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {6BAE1AF3-AC5F-43EF-B46E-43B081AA3ECA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6F674575-0299-49F0-9168-792D9BC61FC3} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-06-24] (NVIDIA Corporation)
Task: {71419C0B-6CEA-49D7-A41F-97E3A2976264} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {75B07CC2-EE13-4B5D-A47D-941800B6612D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-06-24] (NVIDIA Corporation)
Task: {777DBD85-8D01-43DB-AE75-0797DFB13B19} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2013-07-17] ()
Task: {7EB6A67F-D9B7-403F-8B90-1F9291D53592} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {81199958-4DBF-4211-A4CE-E29C7777E3B7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-15] (Adobe Systems Incorporated)
Task: {83A67CAC-A655-489F-A9FE-9D0197741CC2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {87B56A60-0456-4A00-8222-DD20DDAC242F} - System32\Tasks\{DF6F6ACA-E510-406D-8DE6-99565E1A3604} => C:\Windows\system32\pcalua.exe -a C:\Users\joe\Downloads\serioussam.exe -d C:\Users\joe\Downloads
Task: {89ACA4B6-9E71-44A8-88F7-720446A8D188} - System32\Tasks\{08035843-711E-4C90-AA61-64D37879264D} => C:\Games\World_of_Tanks\WoTLauncher.exe [2018-06-25] (Wargaming.net)
Task: {8EEAD1B2-7D84-4A2A-A478-C866A601E394} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-05-18] ()
Task: {9441F9C0-290E-43CD-8B08-40CCAA190324} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {96BA3FC1-D3A9-491B-B5B6-3CF0960DF1AD} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9AB93BBE-0A18-472A-90BC-9CC22880A277} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-11-08] ()
Task: {ACF08923-9211-4B92-8FA8-1F5E2EE7549F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-17] (Microsoft Corporation)
Task: {B30A006C-DE92-480D-B9CC-ECEE272DF2F8} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-06-24] (NVIDIA Corporation)
Task: {BAE27222-F937-4342-B16D-817E33A9E982} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {BF54F475-89E5-4A14-8193-E533D2EF756B} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C0996AC4-56F7-4528-9C60-382CEB257E40} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-06-24] (NVIDIA Corporation)
Task: {C23D1361-3BAA-4FFC-85E1-B11B7AA24C0A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-12] (Microsoft Corporation)
Task: {C303F556-65FE-4E97-A6CF-D3B254F6D4D0} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-06-24] (NVIDIA Corporation)
Task: {C398E758-D3BB-43B7-9ECB-032F947B7B6B} - System32\Tasks\{BB1F2463-F8A3-4856-862D-803900F10840} => C:\Windows\system32\pcalua.exe -a C:\Users\joe\Downloads\epson374744eu.exe -d C:\Users\joe\Downloads
Task: {C9B3061D-32C6-40CD-B494-444531423F5C} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-05-16] (Bitdefender)
Task: {CDF5758E-9A6D-4189-A5A1-AFAABEB6AE71} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-06-24] (NVIDIA Corporation)
Task: {D06EC125-4748-441B-9A1E-99C79D974A03} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {D18A98BC-F390-4862-8886-3DDFAD247543} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-24] (Google Inc.)
Task: {DA7B491B-91A1-4CAA-A227-B57C1E9C6A06} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DA85370D-8F23-4973-8611-C74D13CA1334} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-24] (Google Inc.)
Task: {DF4890FB-E1AF-4ACE-81C4-7B3E75DACC00} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E0DB267A-E479-4F0D-868B-880A710BEC23} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {E2B747C0-3E12-45C5-AE70-BC896FBE726C} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E3D2B45B-4639-4F54-86B9-8D7DCB594320} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {F33DA213-5C1E-4FED-9B36-CC789B7E29B9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-29] (Microsoft Corporation)
Task: {F524BB0E-4FA6-448D-965E-151A5108FFBA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F563B61B-A0A2-41BC-926F-37C215D8B18C} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-06-17] (Microsoft Corporation)
Task: {F73E2B7A-EEE9-4ECA-B1D3-427E4B9D1505} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {FE7608BF-05F6-415C-A4DE-81382DBC68CC} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FF0A0ED2-A3FA-4D00-A289-C8350175E3FC} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-06-24] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2018-06-29 18:07 - 2018-06-24 19:27 - 001314752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-11-24 18:48 - 2012-11-08 08:38 - 000044608 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
2013-11-24 18:48 - 2013-07-17 17:03 - 000037880 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-06-15 09:56 - 2018-06-08 10:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-05-23 08:41 - 2018-05-23 08:42 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-05-23 08:41 - 2018-05-23 08:42 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-05-23 08:41 - 2018-05-23 08:42 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-05-23 08:41 - 2018-05-23 08:42 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll
2018-05-23 08:41 - 2018-05-23 08:42 - 000654848 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-06-26 21:54 - 2018-06-26 21:54 - 027126784 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-06-26 21:54 - 2018-06-26 21:54 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-06-26 21:54 - 2018-06-26 21:54 - 006735872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 13:42 - 2017-09-26 13:42 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-26 21:54 - 2018-06-26 21:54 - 009360384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntPlat.dll
2017-03-09 01:16 - 2017-03-09 01:16 - 000112264 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-11-24 18:48 - 2012-07-05 15:56 - 000052800 _____ () C:\Program Files (x86)\Hardcopy\hardcopy_05.dll
2018-06-29 18:07 - 2018-06-24 19:27 - 001032640 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\joe\Downloads\NDP46-KB3045557-x86-x64-AllOS-ENU.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\Nexus Mod Manager-0.63.9.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\Silverlight_x64.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\UplayInstaller.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\Windows10Upgrade24074(1).exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\Windows10Upgrade24074.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\windows_keyfinder.exe:BDU [0]
AlternateDataStreams: C:\Users\joe\Downloads\WOTStatistics_2512.exe:BDU [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-11-30 17:56 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: AAV UpdateService => 2
MSCONFIG\Services: AdobeARMservice => 3
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: ASGT => 2
MSCONFIG\Services: ASLED => 2
MSCONFIG\Services: bdredline => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: DevMgmtService => 2
MSCONFIG\Services: EPSON_EB_RPCV4_04 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_04 => 2
MSCONFIG\Services: GalaxyClientService => 3
MSCONFIG\Services: GalaxyCommunication => 3
MSCONFIG\Services: gupdate => 3
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HuaweiHiSuiteService64.exe => 2
MSCONFIG\Services: LogiRegistryService => 2
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvContainerLocalSystem => 2
MSCONFIG\Services: NvContainerNetworkService => 3
MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: NvTelemetryContainer => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: Origin Web Helper Service => 2
MSCONFIG\Services: PlaysService => 2
MSCONFIG\Services: ProductAgentService => 2
MSCONFIG\Services: Soda PDF Desktop => 3
MSCONFIG\Services: Soda PDF Desktop Creator => 2
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\startupreg: Bitdefender-Geldbörse =>
MSCONFIG\startupreg: Bitdefender-Geldbörse-Agent =>
MSCONFIG\startupreg: Bitdefender-Geldbörse-Anwendungs-Agent =>
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: PDFPrint =>
MSCONFIG\startupreg: Spotify Web Helper =>
MSCONFIG\startupreg: StartCCC =>
MSCONFIG\startupreg: World of Tanks => "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
HKLM\...\StartupApproved\Run32: => "Jomantha"
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\StartupApproved\Run: => "World of Tanks"
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\StartupApproved\Run: => "EPSON BX525WD Series"
HKU\S-1-5-21-3928304018-1280945314-2601330756-1000\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{3305FAAD-8762-4F96-928C-B6C62576F63B}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe
FirewallRules: [{F9192910-E399-41A0-8A7C-C59F69467D70}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe
FirewallRules: [{87B87498-70B2-4D69-95FA-738D09AD3AEF}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{A202BE90-026C-4468-AB2C-53DF40A39476}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe
FirewallRules: [{C8420053-9741-404D-9C1E-0649F3BA6151}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{DCC3AF3A-27E1-4AB8-97F2-F8DF14DAECDB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{31D45E9B-6D9E-4CFE-9DAF-990740332CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\X Rebirth\XRebirth.exe
FirewallRules: [{6FDA2408-07F4-4B4F-884E-7E29ECBB2B2F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\X Rebirth\XRebirth.exe
FirewallRules: [{135766DD-9831-4293-B052-4D57D830DC89}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{01075C0E-14B5-4742-8FAA-6BD4D20CE2A1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C91729FE-9EFA-44AD-9390-4EFEA6E386CA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D8168602-A351-4AA0-ABAB-8F61E9FFB34D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C62F1566-974C-411D-96E9-42AB7E56FFCF}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry Primal\bin\FCPrimal.exe
FirewallRules: [{DEFC260C-1F4E-4651-8862-40EA7FEE5DAE}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{90B6C456-B7A7-4C02-B0D8-8793A5B20488}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{5188A305-D0B9-4CA1-B035-5B1C15365DAB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{2E40CB74-14C3-4106-807B-142504131539}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\tools\AddonWeb.exe
FirewallRules: [{8E224C97-0EEF-42DF-97A9-AA2510FCFE58}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\tools\AddonWeb.exe
FirewallRules: [{785FE3B2-EC1C-4D3E-8ADC-ABBD13D8F10E}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\tools\Anno4Web.exe
FirewallRules: [{6053F8C1-88C8-4BF3-AB3E-BBFC92EADF87}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\tools\Anno4Web.exe
FirewallRules: [{896A9FC6-3A88-4B7D-BDEC-AF5A848A4407}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\Addon.exe
FirewallRules: [{2B0444BF-C840-42FD-A0D6-47A0797C7A01}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\Addon.exe
FirewallRules: [{47109052-E491-4A23-AFF8-604BD05A0E2A}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\Anno4.exe
FirewallRules: [{AFEEC8DF-E619-4C68-BCD5-D93DE8B77E7B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1404\Anno4.exe
FirewallRules: [{F0CBDCEA-3770-439B-BC1D-49C42B85FABB}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's The Division\TheDivision.exe
FirewallRules: [{32947741-995E-4A13-9506-6CD898C1287D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F819069F-58AF-486D-A39B-27541F19A499}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4FB19BA8-B377-4B5A-B5CA-98AC88048922}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7640240E-AE70-492B-8DB1-1CE170F4907D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{BC8DFDB9-F405-4AFB-82B9-123A25AA5798}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B1EFF809-DE88-497F-B3D2-C48A391059CC}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{0E8D04E6-A2DA-446A-A3AD-A6FD24D84FAE}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{CF634453-1C9C-40AB-9135-A885BA8EDB04}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{9D9DB6F8-89A4-4B5D-B514-1B8C275DE8EF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{29F278B5-CB78-4C73-8022-2A5A0A8576DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{7C74354E-8F2C-4DC7-BB4F-5A44CB0402DA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{C139A4FC-1C00-4DB6-8D07-4EBC9E8EC026}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{90FA6A99-92F1-4B68-9B35-45CDF00A348F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/29/2018 07:28:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Aktueller Status: DoSnapshotSet

Error: (06/29/2018 07:28:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (06/29/2018 07:28:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (06/29/2018 07:04:52 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: JOE-PC)
Description: httphttp-2147467263

Error: (06/29/2018 06:33:38 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Aktueller Status: DoSnapshotSet

Error: (06/29/2018 06:33:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (06/29/2018 06:33:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (06/29/2018 05:57:48 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
  Asynchroner Vorgang wird ausgeführt

Kontext:
  Aktueller Status: DoSnapshotSet


Systemfehler:
=============
Error: (06/29/2018 07:46:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID
Windows.SecurityCenter.WscBrokerManager
 und der APPID
Nicht verfügbar
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/29/2018 07:44:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (06/29/2018 07:21:49 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID
Windows.SecurityCenter.WscBrokerManager
 und der APPID
Nicht verfügbar
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/29/2018 07:19:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (06/29/2018 07:19:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/29/2018 07:19:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office-Klick-und-Los-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/29/2018 07:19:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/29/2018 07:19:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


Windows Defender:
===================================
Date: 2018-06-29 14:56:06.193
Description:
Fehler von Windows Defender Antivirus beim Aktualisieren von Signaturen.
Neue Signaturversion:
Vorherige Signaturversion: 1.263.48.0
Updatequelle: Microsoft Update-Server
Signaturtyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
Vorherige Modulversion: 1.1.14600.4
Fehlercode: 0x80240017
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".

CodeIntegrity:
===================================

Date: 2018-06-29 18:03:25.446
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:25.423
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:25.397
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:25.302
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:25.289
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:25.276
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:23.843
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

Date: 2018-06-29 18:03:23.647
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 30%
Installierter physikalischer RAM: 8104.66 MB
Verfügbarer physikalischer RAM: 5596.19 MB
Summe virtueller Speicher: 16296.66 MB
Verfügbarer virtueller Speicher: 11954.72 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.91 GB) (Free:32.89 GB) NTFS
Drive e: (Volume) (Fixed) (Total:465.76 GB) (Free:460.35 GB) NTFS

\\?\Volume{440e5ab7-fc4e-11e2-8c18-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{2ee73344-0000-0000-0000-d0803b000000}\ () (Fixed) (Total:0.46 GB) (Free:0.06 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 2EE73344)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=471 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 6CB9F175)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 29.06.2018 20:53
Zitat:
Habe seit heute die Fehlermeldung "ungültiges Bild".
Ja und? Mit der Meldung allein kann man wenig anfangen, das ist ja nun eine dürftige Beschreibung...

joe120 30.06.2018 06:40
Hallo

Da der Fehler "ungültiges Bild" in euren Forenbeiträgen immer auf das gleicher rausgelaufen ist, wollte ich so wenig wie möglich schreiben. Desweiteren wird auch immer schön betont, wie genau man sich an die Erstellung von Beiträgen halten soll, damit ihr mit der Beantwortung so wenig wie möglich Arbeit habt. Sorry, dass ich da jetzt falsch lag ......

Das Fenster mit der Meldung "ungültiges Bild" erscheint bei:
1. Starten des Rechners
2. Öffnen von Programmen (World Of Tanks)

Weitere Infos:
Das Fenster geht nach mehrmaligen Anklicken weg (so um die 3-4x).
Excel, PhotoDirector, CCleaner usw. scheint nicht betroffen zu sein.
Habe meinen Bitdefender gelöscht, damit es wie so oft beschrieben keine Probleme mit dem FRST gibt.
Habe gerade gemerkt, dass sich Bilder (jpg) nicht mehr öffnen lassen. --> Fehlermeldung: die App wurde nicht gestartet.
Wenn dies bleibt, werde ich hier einen neuen Forenbeitrag schreiben.

Ich danke euch für die Arbeit, die ihr hier leistet. Die wenigsten würden ihre Freizeit dafür opfern. Für viele ist das schon selbstverständilich, dass einem kostenlos geholfen wird.

Ciao

Joe

cosinus 30.06.2018 13:34
Schädlinge suchen mit Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

joe120 30.06.2018 13:46
Teil 1

Code:
14:40:21.0563 0x0ac0  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
14:40:37.0166 0x0ac0  ============================================================
14:40:37.0166 0x0ac0  Current date / time: 2018/06/30 14:40:37.0166
14:40:37.0166 0x0ac0  SystemInfo:
14:40:37.0166 0x0ac0 
14:40:37.0166 0x0ac0  OS Version: 10.0.17134 ServicePack: 0.0
14:40:37.0166 0x0ac0  Product type: Workstation
14:40:37.0166 0x0ac0  ComputerName: JOE-PC
14:40:37.0166 0x0ac0  UserName: joe
14:40:37.0166 0x0ac0  Windows directory: C:\WINDOWS
14:40:37.0166 0x0ac0  System windows directory: C:\WINDOWS
14:40:37.0166 0x0ac0  Running under WOW64
14:40:37.0166 0x0ac0  Processor architecture: Intel x64
14:40:37.0166 0x0ac0  Number of processors: 4
14:40:37.0166 0x0ac0  Page size: 0x1000
14:40:37.0166 0x0ac0  Boot type: Normal boot
14:40:37.0166 0x0ac0  CodeIntegrityOptions = 0x00000001
14:40:37.0166 0x0ac0  ============================================================
14:40:37.0260 0x0ac0  KLMD registered as C:\WINDOWS\system32\drivers\14016699.sys
14:40:37.0260 0x0ac0  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19
14:40:37.0323 0x0ac0  System UUID: {7155406B-D9E9-D81E-1230-03430034EFFC}
14:40:37.0698 0x0ac0  Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:40:37.0698 0x0ac0  Drive \Device\Harddisk1\DR1 - Size: 0x7470AFDE00 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:40:37.0698 0x0ac0  ============================================================
14:40:37.0698 0x0ac0  \Device\Harddisk0\DR0:
14:40:37.0698 0x0ac0  MBR partitions:
14:40:37.0698 0x0ac0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:40:37.0698 0x0ac0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1DBD387D
14:40:37.0698 0x0ac0  \Device\Harddisk1\DR1:
14:40:37.0698 0x0ac0  MBR partitions:
14:40:37.0698 0x0ac0  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A384000
14:40:37.0698 0x0ac0  ============================================================
14:40:37.0698 0x0ac0  C: <-> \Device\Harddisk0\DR0\Partition2
14:40:37.0713 0x0ac0  E: <-> \Device\Harddisk1\DR1\Partition1
14:40:37.0713 0x0ac0  ============================================================
14:40:37.0713 0x0ac0  Initialize success
14:40:37.0713 0x0ac0  ============================================================
14:41:35.0098 0x03c4  ============================================================
14:41:35.0098 0x03c4  Scan started
14:41:35.0098 0x03c4  Mode: Manual; SigCheck; TDLFS;
14:41:35.0098 0x03c4  ============================================================
14:41:35.0098 0x03c4  KSN ping started
14:41:35.0223 0x03c4  KSN ping finished: true
14:41:35.0473 0x03c4  ================ Scan system memory ========================
14:41:35.0473 0x03c4  System memory - ok
14:41:35.0473 0x03c4  ================ Scan services =============================
14:41:35.0535 0x03c4  [ 4B45A2D37CCE3CC0F161B7C7286081A6, DF4EBAA12E083AE45411AABD3EDE916E2CC6963FBA664861AC9B2351B5E042DC ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
14:41:35.0614 0x03c4  1394ohci - ok
14:41:35.0629 0x03c4  [ F5E5BA493B7C497F1F769942E2EA4CE2, 4AD54DA24142BCE49FB64CFF2CB28764FAA93827E7DB02925090B68F8C73B1FB ] 3ware          C:\WINDOWS\system32\drivers\3ware.sys
14:41:35.0645 0x03c4  3ware - ok
14:41:35.0660 0x03c4  [ 7EEB488346FBFA3731276C3EE8A8FD9E, 97D2E49C2E615E38E8176F1C1551BF452CC6A00787FF90845EFF27A4E6E20B1F ] AAV UpdateService C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
14:41:35.0660 0x03c4  AAV UpdateService - ok
14:41:35.0676 0x03c4  [ CA51BB1B81F97E896E116C839B92D9D8, 09F73D8FB93EA524D3C9A9C264F62340560DC7042589597A318626A0A198F91F ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
14:41:35.0707 0x03c4  ACPI - ok
14:41:35.0707 0x03c4  [ 75795E4B19BB3ED8D3C25A17CD15DC30, 22A13064E0B472A0A2258D61A889B73EE3F537DA7796CCE39DF973AFA8FA1567 ] AcpiDev        C:\WINDOWS\System32\drivers\AcpiDev.sys
14:41:35.0739 0x03c4  AcpiDev - ok
14:41:35.0739 0x03c4  [ DDA0FC1400A24988A7D3E746AEDF2C0F, 3A703A204FDE46C67017C274CA1F50F591D909EE182A82697E89442D4A5569CE ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
14:41:35.0754 0x03c4  acpiex - ok
14:41:35.0754 0x03c4  [ 1F2EC25DA23D1DF3ADA12FE5A26D321C, B165D72949E43F04312C95BF0FF5C25CFE5CA0CDF43415E01AB2B1550D06C737 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
14:41:35.0770 0x03c4  acpipagr - ok
14:41:35.0785 0x03c4  [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi        C:\WINDOWS\System32\drivers\acpipmi.sys
14:41:35.0801 0x03c4  AcpiPmi - ok
14:41:35.0801 0x03c4  [ 0FC8673FAFC7D78C1CDC000F892CAC64, 33FB109ABD18FBF4DA5047BAA9FAF63E88D5BA1826442DB02F9130DAD11D15F2 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
14:41:35.0817 0x03c4  acpitime - ok
14:41:35.0817 0x03c4  [ CA805DA983594B01F3554464B2E5158F, AC311C5D59AA1FA2B1B3CDB9CCEABEC85878BF6CA6106253186909AA9EB3C1BA ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:41:35.0832 0x03c4  AdobeARMservice - ok
14:41:35.0864 0x03c4  [ ACD04A8C728DF3EF24079FBC8376DB5C, FA0A26E42F0B2CBBE998CE6FC15F94D6EFE3C9DBABB97DD61294C3FB2C1C5F77 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:41:35.0879 0x03c4  AdobeFlashPlayerUpdateSvc - ok
14:41:35.0895 0x03c4  [ A3D4CF2F3A433BE18CD4AD3E6665DC63, 9D62A7E2DDA15B2E75490CCB9C8E10A41030F496A93631EDED5F1003DF368290 ] ADP80XX        C:\WINDOWS\system32\drivers\ADP80XX.SYS
14:41:35.0942 0x03c4  ADP80XX - ok
14:41:35.0957 0x03c4  [ 4DCCC3E02A22ED4A4ADB11386F226071, 40BB183049DE3ADCC7A5B1B269620C8534291BB7A956157434C857DE249559EE ] AFD            C:\WINDOWS\system32\drivers\afd.sys
14:41:35.0973 0x03c4  AFD - ok
14:41:35.0989 0x03c4  [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix          C:\WINDOWS\system32\drivers\afunix.sys
14:41:36.0004 0x03c4  afunix - ok
14:41:36.0020 0x03c4  [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache        C:\WINDOWS\system32\DRIVERS\ahcache.sys
14:41:36.0035 0x03c4  ahcache - ok
14:41:36.0051 0x03c4  [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter        C:\WINDOWS\System32\AJRouter.dll
14:41:36.0067 0x03c4  AJRouter - ok
14:41:36.0067 0x03c4  [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG            C:\WINDOWS\System32\alg.exe
14:41:36.0098 0x03c4  ALG - ok
14:41:36.0098 0x03c4  [ 6DF48AD26E6285FB137F11328B64A376, 76FF9A753C262065E819E862E7950127472C5E6AB7E97B57977C6DCE6180760A ] AmdK8          C:\WINDOWS\System32\drivers\amdk8.sys
14:41:36.0129 0x03c4  AmdK8 - ok
14:41:36.0129 0x03c4  [ D8804032BCDE4077A6D8D431D12AC6CC, F017A3FEAB2919A9662A9BFEF31AE7B7EC19F1136C9D0DC6C48A415B540A8062 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
14:41:36.0145 0x03c4  AmdPPM - ok
14:41:36.0160 0x03c4  [ A88F5E24B65228FB25F2051B3408A0E4, C124B486839EA15D6806EB51E91EBF99401CD7D226541320A7A4934A8477DCEF ] amdsata        C:\WINDOWS\system32\drivers\amdsata.sys
14:41:36.0160 0x03c4  amdsata - ok
14:41:36.0176 0x03c4  [ AECD39E51DABC2BF045B2857F02FA2BD, 83E2AC3200B6EA1586E4E0204D81CEAF303D7C9EBE7E5D1273A41A4EC1390E56 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
14:41:36.0192 0x03c4  amdsbs - ok
14:41:36.0192 0x03c4  [ B4CC9943230CAEB05B46CC30C220E141, 013716E6911136EB0916A1D592198DD7953800549DA0C885093D2BA3CC9BA2A7 ] amdxata        C:\WINDOWS\system32\drivers\amdxata.sys
14:41:36.0207 0x03c4  amdxata - ok
14:41:36.0207 0x03c4  [ 2CCB04097E143C7F82333863343C838C, E6A79EDDF03317BEF9B25C9FA658DF6A588DC06A9AF66338ADE31D5D29E4FB3C ] AppHostSvc      C:\WINDOWS\system32\inetsrv\apphostsvc.dll
14:41:36.0239 0x03c4  AppHostSvc - ok
14:41:36.0239 0x03c4  [ E4A18157BF5D8D714C05169A8A8D604C, 45D8CB25A9967D634F8331070BDFB3DF4ACB6295CF1520F9AAE8753D3BF4018A ] AppID          C:\WINDOWS\system32\drivers\appid.sys
14:41:36.0254 0x03c4  AppID - ok
14:41:36.0270 0x03c4  [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
14:41:36.0285 0x03c4  AppIDSvc - ok
14:41:36.0285 0x03c4  [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo        C:\WINDOWS\System32\appinfo.dll
14:41:36.0317 0x03c4  Appinfo - ok
14:41:36.0317 0x03c4  [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr  C:\WINDOWS\system32\drivers\applockerfltr.sys
14:41:36.0348 0x03c4  applockerfltr - ok
14:41:36.0348 0x03c4  [ 636575088044E7271088BB8CFA382B45, DCD2CAD626E66AF98D31B9339A4A92FD94E99F335B48649529AC327B7AF52B9A ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
14:41:36.0395 0x03c4  AppReadiness - ok
14:41:36.0457 0x03c4  [ 44F886F2595D02C41DE59C16F3B75E4D, 0BDE5BF6422C632054E02E40B62006E65A41EBEAF5F9F1E3457AFF054FF76252 ] AppXSvc        C:\WINDOWS\system32\appxdeploymentserver.dll
14:41:36.0582 0x03c4  AppXSvc - ok
14:41:36.0582 0x03c4  [ 013E057DF3D13A4462AD912D7732E7E0, 7C89AD5799091D17EAED682058559DBAE882D0E18C347B5AECE7BCCFD0E2D21C ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
14:41:36.0598 0x03c4  arcsas - ok
14:41:36.0598 0x03c4  [ B20C6A8F9BBA9697B9E50421CB1C4061, 218FD007325FD593F9B9739594EA9F975960205680813A3940A89707E2335707 ] ASGT            C:\Windows\SysWOW64\ASGT.exe
14:41:37.0754 0x03c4  ASGT - detected UnsignedFile.Multi.Generic ( 1 )
14:41:37.0848 0x03c4  Detect skipped due to KSN trusted
14:41:37.0848 0x03c4  ASGT - ok
14:41:37.0864 0x03c4  [ 973E3675AD8E585F2ACDF4D5B2689689, E7B8CAE1EB35AAC20D54054D7B61EEED8A0263C3BD6BE92B9D4AC2FDF54E6CBA ] ASLED          C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ASLED.exe
14:41:39.0004 0x03c4  ASLED - detected UnsignedFile.Multi.Generic ( 1 )
14:41:39.0098 0x03c4  Detect skipped due to KSN trusted
14:41:39.0098 0x03c4  ASLED - ok
14:41:39.0129 0x03c4  [ 9EDC7F9BB19D3F12EB05437BD5687C8A, 182772D576C3C8A9CFDADE7F75A14DD0639C0DF5C3C345F158C2DE51708A2F76 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:41:39.0145 0x03c4  aspnet_state - ok
14:41:39.0145 0x03c4  [ B25ACCD9BE5F5798E9DD8FFB04D7BE4C, 87577AD2E4A47518B8101C67F1025CB3CD2ABBA678774A5926192FCD56EF1350 ] AsyncMac        C:\WINDOWS\System32\drivers\asyncmac.sys
14:41:39.0176 0x03c4  AsyncMac - ok
14:41:39.0176 0x03c4  [ 90AB4ED8EBD72A1C096A40CC35404B91, C343466D439552D154BBD1A5F9D391CDD3FA298A712594EA27C3049E3516D1AF ] atapi          C:\WINDOWS\system32\drivers\atapi.sys
14:41:39.0192 0x03c4  atapi - ok
14:41:39.0207 0x03c4  [ 49C40F52EB06F9E9C8A14436F97AAEB8, F98E04CD9674C99BA1D1C63177AA81C628D505AED1DE4110500FC33A5C494864 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
14:41:39.0239 0x03c4  AudioEndpointBuilder - ok
14:41:39.0270 0x03c4  [ 50DE2E82D65B6006360660D085E80B8B, C279E90A975D71E193048BA324C99685CFF977A0D3B171B6BDFBDEF7FF7A084B ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
14:41:39.0348 0x03c4  Audiosrv - ok
14:41:39.0348 0x03c4  [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
14:41:39.0364 0x03c4  AxInstSV - ok
14:41:39.0379 0x03c4  [ F10E4C9444A9FC6DCBAB2C42F6999FA1, 4238B6DD49CBADFE2C737AC1B211AE045F458DDF1693EE54608455C1ECE1BCCA ] b06bdrv        C:\WINDOWS\system32\drivers\bxvbda.sys
14:41:39.0410 0x03c4  b06bdrv - ok
14:41:39.0410 0x03c4  [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam            C:\WINDOWS\system32\drivers\bam.sys
14:41:39.0426 0x03c4  bam - ok
14:41:39.0426 0x03c4  [ FA4973E379E872C61D0CF4E39F807833, 3320FAB0CF16BB1ABBBA222CC31D20B5AC7A4259DE4323B109A8F2FECC28C8A4 ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
14:41:39.0442 0x03c4  BasicDisplay - ok
14:41:39.0442 0x03c4  [ F024B80EA0076A318598DAB795F9C3D0, 6225A5FCD2B750A0E4FFFCCB1CDF49BAA7809A4B4AD7AB625A585CF4971CDE25 ] BasicRender    C:\WINDOWS\System32\drivers\BasicRender.sys
14:41:39.0457 0x03c4  BasicRender - ok
14:41:39.0489 0x03c4  [ 8AA419C4290F2E91A3DAD92E7B0061CB, 689216383EC7C1984EE774F6BB5CE37F847658558A9C3F696F6D9ECA966B3031 ] BcastDVRUserService C:\WINDOWS\System32\BcastDVRUserService.dll
14:41:39.0551 0x03c4  BcastDVRUserService - ok
14:41:39.0551 0x03c4  [ 739D089777D2B66DBE7201E5EA4BA2D7, 9AD12E18A042C5B8EFB19297BC2E7BD1FEF75A138FEFB64C6BF0261FD3E53AB1 ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
14:41:39.0567 0x03c4  bcmfn2 - ok
14:41:39.0582 0x03c4  [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
14:41:39.0614 0x03c4  BDESVC - ok
14:41:39.0614 0x03c4  [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
14:41:39.0645 0x03c4  Beep - ok
14:41:39.0660 0x03c4  [ 0B9B6D7A2F31FBD63301D19B1B08238E, 7EF63C87FB2B9E0971B633BC86F99B12F8BBE188D53E0B105E44766A0657A67E ] BFE            C:\WINDOWS\System32\bfe.dll
14:41:39.0692 0x03c4  BFE - ok
14:41:39.0707 0x03c4  [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt        C:\WINDOWS\system32\drivers\bindflt.sys
14:41:39.0723 0x03c4  bindflt - ok
14:41:39.0738 0x03c4  [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS            C:\WINDOWS\System32\qmgr.dll
14:41:39.0801 0x03c4  BITS - ok
14:41:39.0817 0x03c4  [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll
14:41:39.0848 0x03c4  BluetoothUserService - ok
14:41:39.0863 0x03c4  [ 00C33AC3096BB64BACD5554A55025F8F, E13669966AA69A9C18E8932491F722F595666163DA2C6695C8F415AD55836B53 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
14:41:39.0879 0x03c4  bowser - ok
14:41:39.0895 0x03c4  [ 0E1A0E81EF4B33FFDE8EDA46EE38F0D4, F92E7FC14264F58EF79A10025D8375B7455A339B556AEE72A32FFE29278FAF23 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
14:41:39.0942 0x03c4  BrokerInfrastructure - ok
14:41:39.0957 0x03c4  [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService    C:\WINDOWS\System32\BTAGService.dll
14:41:39.0988 0x03c4  BTAGService - ok
14:41:40.0004 0x03c4  [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc    C:\WINDOWS\System32\BthAvctpSvc.dll
14:41:40.0020 0x03c4  BthAvctpSvc - ok
14:41:40.0035 0x03c4  [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum      C:\WINDOWS\System32\drivers\bthhfenum.sys
14:41:40.0051 0x03c4  BthHFEnum - ok
14:41:40.0051 0x03c4  [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
14:41:40.0082 0x03c4  BTHMODEM - ok
14:41:40.0082 0x03c4  [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv        C:\WINDOWS\system32\bthserv.dll
14:41:40.0113 0x03c4  bthserv - ok
14:41:40.0113 0x03c4  [ E3786BEBB7E4003DE324A18069DDA081, 4DDA70CCB011D74811BA51686E6ED9A404EBE549AE6B3CE0DDBCB83D09E8AABA ] bttflt          C:\WINDOWS\system32\drivers\bttflt.sys
14:41:40.0129 0x03c4  bttflt - ok
14:41:40.0129 0x03c4  [ 03C13BB635635B9152DBF49AA07B728C, F6141576EB54EFE5E329762EC548C7D256EFB57C42A46BB3426B779413F0C975 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
14:41:40.0145 0x03c4  buttonconverter - ok
14:41:40.0145 0x03c4  [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD            C:\WINDOWS\System32\drivers\CAD.sys
14:41:40.0160 0x03c4  CAD - ok
14:41:40.0176 0x03c4  [ B405F59CF690653105600F85C9B576B9, BEB313DF7D343B2A421EF76E908FCDB64C62AB2ABB7A3188F48A6CACA9644D97 ] camsvc          C:\WINDOWS\system32\CapabilityAccessManager.dll
14:41:40.0192 0x03c4  camsvc - ok
14:41:40.0207 0x03c4  [ 407B33DE151A3DFCF564AC4270E44B1D, 8B1419FEDDCEF9F9F239B4C1A629F4F2748FC09CF3E38CA01D8D6D1D32252346 ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys
14:41:40.0223 0x03c4  CapImg - ok
14:41:40.0223 0x03c4  [ D3CBC6DE5955D014407C7BD1FFE80F00, 9D185AED383FCBF16EE63192452DE888D8485D7BD9C0257BF92A68C42120A1B8 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
14:41:40.0254 0x03c4  cdfs - ok
14:41:40.0270 0x03c4  [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll
14:41:40.0301 0x03c4  CDPSvc - ok
14:41:40.0317 0x03c4  [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll
14:41:40.0348 0x03c4  CDPUserSvc - ok
14:41:40.0348 0x03c4  [ 6834DBBA2A1DBA5B9B6360D0B9A3CBB5, 637331058347D94FBDEE0D47E56723C98BDBBE8E044A225CCE7B3592AA562021 ] cdrom          C:\WINDOWS\System32\drivers\cdrom.sys
14:41:40.0395 0x03c4  cdrom - ok
14:41:40.0395 0x03c4  [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc    C:\WINDOWS\System32\certprop.dll
14:41:40.0426 0x03c4  CertPropSvc - ok
14:41:40.0426 0x03c4  [ 4A08B239F92B319AD31E3916D27AD4B9, 948772689F14090E9E096CF7423CE5D994E3F9964775AD5B2F78C37A987EE980 ] cht4iscsi      C:\WINDOWS\system32\drivers\cht4sx64.sys
14:41:40.0442 0x03c4  cht4iscsi - ok
14:41:40.0488 0x03c4  [ C8EA9376E4D284F9DF24B27AC6E3AB85, DAD3B00A37797E7C80E0C359BA735B65BBBE5DC25480910737D86D2711A6FF8C ] cht4vbd        C:\WINDOWS\System32\drivers\cht4vx64.sys
14:41:40.0535 0x03c4  cht4vbd - ok
14:41:40.0535 0x03c4  [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
14:41:40.0551 0x03c4  circlass - ok
14:41:40.0567 0x03c4  [ 5619FC2A3AE4F43D4B20D95472ED948E, A5D530FB6AC493FC01489A1D32C311F7D28F0D7B49C950E71F4ADF4FBA302689 ] CldFlt          C:\WINDOWS\system32\drivers\cldflt.sys
14:41:40.0598 0x03c4  CldFlt - ok
14:41:40.0613 0x03c4  [ DB26170CF6555B9AFF76CFA067ABCF90, A066E89267783A5E54A36D1CF193916218BE2E1D177F0ACA82E2B86211629806 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
14:41:40.0629 0x03c4  CLFS - ok
14:41:40.0801 0x03c4  [ 8570AFC4CB419FB88AFE5DE94E15F77B, 178BDEF2F5DBF07432A16B051D7CFA57D27B3F0066D7FA6C32C881E848DB9F34 ] ClickToRunSvc  C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
14:41:41.0020 0x03c4  ClickToRunSvc - ok
14:41:41.0051 0x03c4  [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC        C:\WINDOWS\System32\ClipSVC.dll
14:41:41.0082 0x03c4  ClipSVC - ok
14:41:41.0098 0x03c4  [ 66CBF6F8FE6F436B315D7FEAF5D2BB40, 0F6AE6412EF73C74EF0EB1866E8CD85AACE4373D5C24F3D0121F5A7420E5A03B ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
14:41:41.0113 0x03c4  CmBatt - ok
14:41:41.0129 0x03c4  [ 5501C33DB55D2828859CB90C1AB26F17, A2004968A9510A1EB109F1F019BB7823385FA41BC773B31015610B5A4A205197 ] CNG            C:\WINDOWS\system32\Drivers\cng.sys
14:41:41.0160 0x03c4  CNG - ok
14:41:41.0160 0x03c4  [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist    C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
14:41:41.0176 0x03c4  cnghwassist - ok
14:41:41.0192 0x03c4  [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys
14:41:41.0207 0x03c4  CompositeBus - ok
14:41:41.0223 0x03c4  COMSysApp - ok
14:41:41.0223 0x03c4  [ 3799A9DFB162D9AAD6AC12CB8185FD19, 942F2777049166EC43F93177F0084EA08B06CE9107AF55337124FE25CCB158C4 ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
14:41:41.0238 0x03c4  condrv - ok
14:41:41.0263 0x03c4  [ 4D6B318F23C33D2A64787B23F2450D6B, 440A1BE060BF572D2D64502012665C629622E2DE4F3EC97E464A2AA988289B79 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
14:41:41.0298 0x03c4  CoreMessagingRegistrar - ok
14:41:41.0314 0x03c4  [ 5D19617245C798A0EED86D4D36B8C6E8, 90AB9125B1A56134489E81CE5AEE1F2C7005BE505E52603B1A884A2B8C3C4735 ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
14:41:41.0345 0x03c4  cphs - ok
14:41:41.0345 0x03c4  [ 6C6073B45D65887A6035F1A8D073274A, F002B25E05D0894CD12BA3D046E11D4AD6F0BCE8796618B0EE54851223A65C15 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
14:41:41.0369 0x03c4  CryptSvc - ok
14:41:41.0385 0x03c4  [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam            C:\WINDOWS\system32\drivers\dam.sys
14:41:41.0400 0x03c4  dam - ok
14:41:41.0416 0x03c4  [ 107661923943E9DC06ED2713AC5F7753, 2B311E9BD635F1CEB222EF798C5523447AAF63E2331377804884572D7512F299 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
14:41:41.0478 0x03c4  DcomLaunch - ok
14:41:41.0495 0x03c4  [ 7ECF8E55CAF04A8F7F7498C55A6EDAC5, F6E033A10338AD8746E1538B12B1B470E8F97210E4564893568D0C7EB165D794 ] defragsvc      C:\WINDOWS\System32\defragsvc.dll
14:41:41.0518 0x03c4  defragsvc - ok
14:41:41.0534 0x03c4  [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll
14:41:41.0565 0x03c4  DeviceAssociationService - ok
14:41:41.0565 0x03c4  [ DBD6E8A5C358AAA3B4900EFD5CF94CC8, C8261CBE358562B3F31ADA0567723E0118A8687DFC8939FABC65E61C38BFE20B ] DeviceInstall  C:\WINDOWS\system32\umpnpmgr.dll
14:41:41.0596 0x03c4  DeviceInstall - ok
14:41:41.0596 0x03c4  [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll
14:41:41.0643 0x03c4  DevicePickerUserSvc - ok
14:41:41.0659 0x03c4  [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll
14:41:41.0705 0x03c4  DevicesFlowUserSvc - ok
14:41:41.0705 0x03c4  [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll
14:41:41.0737 0x03c4  DevQueryBroker - ok
14:41:41.0737 0x03c4  [ 8A1C10410FDA4287A76EC5A64371E221, 66CE271DDAD9CD82D2DF220247D91CCB906FA4B5508ABE0DC4A56D1C0C008BCA ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
14:41:41.0768 0x03c4  Dfsc - ok
14:41:41.0768 0x03c4  [ 51D1F76C6EC94B0773D276C91B06A781, DF3E512D1FFA1E7AA75D4CEDD5D5AB8DAA13BE5C8427B6A4F064FDCF455C9589 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
14:41:41.0799 0x03c4  Dhcp - ok
14:41:41.0799 0x03c4  [ FF05980EEE93D2B4AB1284BF21D7F12B, 026C8489CC9232605B87F02E3276B81DB23A6B64BB66C01F0FD6E7D266ECD17C ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
14:41:41.0830 0x03c4  diagnosticshub.standardcollector.service - ok
14:41:41.0830 0x03c4  [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc        C:\WINDOWS\system32\DiagSvc.dll
14:41:41.0862 0x03c4  diagsvc - ok
14:41:41.0909 0x03c4  [ E74FCFD1499A4F816A99D35E297CCE63, 9C6D75200A8D0932CA77F68D78F11B89B0A45441ABB1662BE69567FE13138D19 ] DiagTrack      C:\WINDOWS\system32\diagtrack.dll
14:41:42.0034 0x03c4  DiagTrack - ok
14:41:42.0034 0x03c4  [ A79FCB89805FA9EA9F48B671A4591D4E, 13CA8B9CB35DF9F8EFFF8E6ECC0F65E4F179FA9BEF4B68F3382CA4A6BF14FA54 ] Disk            C:\WINDOWS\system32\drivers\disk.sys
14:41:42.0049 0x03c4  Disk - ok
14:41:42.0065 0x03c4  [ EAA267FAABDBE6194985DC6A0AC96664, 604908384B503AD7E14F15776C1B3DC58A278149145C2811B5B5300EA597A50C ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
14:41:42.0112 0x03c4  DmEnrollmentSvc - ok
14:41:42.0112 0x03c4  [ F69D7A5D7EDEE16B85F08040836FB09C, 944730FA6CA6ED0ECA85848A2F00EE1E647F7DD4CC37E557A812ECE8A92B3999 ] dmvsc          C:\WINDOWS\System32\drivers\dmvsc.sys
14:41:42.0127 0x03c4  dmvsc - ok
14:41:42.0143 0x03c4  [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
14:41:42.0163 0x03c4  dmwappushservice - ok
14:41:42.0163 0x03c4  [ E65844BC31FE3687A745C2E48C845CBC, 826845A9FC00E4D68CDE5FA5C293DF6D41DB0E8D15B43647A1335F0A79AFD4D6 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
14:41:42.0196 0x03c4  Dnscache - ok
14:41:42.0196 0x03c4  [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc        C:\WINDOWS\System32\dot3svc.dll
14:41:42.0229 0x03c4  dot3svc - ok
14:41:42.0229 0x03c4  [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS            C:\WINDOWS\system32\dps.dll
14:41:42.0264 0x03c4  DPS - ok
14:41:42.0264 0x03c4  [ AD1BEFBF96C0273925EDC9282557D984, E23B1B043E9EE25054DCEFB10C1C69009DCB1E12675DAE60B00A646735B03D99 ] drmkaud        C:\WINDOWS\System32\drivers\drmkaud.sys
14:41:42.0280 0x03c4  drmkaud - ok
14:41:42.0280 0x03c4  [ E7D1636EEA6F9A941573CA426F214054, 7730C82E808C80BAFB59A6AD140B11C2269A62F2396783CB063E58D8EA624BDD ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
14:41:42.0314 0x03c4  DsmSvc - ok
14:41:42.0314 0x03c4  [ 4323DDFF8CB51FD74B241810CFA6CDBB, D9CDE22055C6D139DC3E21C3D92112704426D60F5EF83E3E338B68D885BD3D30 ] DsSvc          C:\WINDOWS\System32\DsSvc.dll
14:41:42.0333 0x03c4  DsSvc - ok
14:41:42.0348 0x03c4  [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc        C:\WINDOWS\System32\dusmsvc.dll
14:41:42.0377 0x03c4  DusmSvc - ok
14:41:42.0428 0x03c4  [ 8FF323926AAF82B04CCE7DD4FAA17990, 2856B00864240408021E930209BEBADF37A71B254449EE2C746449F61B0787E9 ] DXGKrnl        C:\WINDOWS\System32\drivers\dxgkrnl.sys
14:41:42.0499 0x03c4  DXGKrnl - ok
14:41:42.0499 0x03c4  [ 7E9A1608894297B133AF5EE18E404208, 9E2E4B4F6133375DB8E490337594BEFB86BA964223FB272A23ADD02FA8065253 ] Eaphost        C:\WINDOWS\System32\eapsvc.dll
14:41:42.0533 0x03c4  Eaphost - ok
14:41:42.0595 0x03c4  [ 75CA88887850A74DDAAAF92500B6D9B9, 1C413719D0E659E20C66B0762B2FC708E55536961A1D9F21906ADBE9CF431489 ] ebdrv          C:\WINDOWS\system32\drivers\evbda.sys
14:41:42.0678 0x03c4  ebdrv - ok
14:41:42.0695 0x03c4  [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] EFS            C:\WINDOWS\System32\lsass.exe
14:41:42.0710 0x03c4  EFS - ok
14:41:42.0710 0x03c4  [ 7E838D857FC55535710C316441459C38, C4673014D3ED3E68E02DB5BE6DB53E45B1E4A3CE2B04B15BFD507AF703A60134 ] EhStorClass    C:\WINDOWS\system32\drivers\EhStorClass.sys
14:41:42.0726 0x03c4  EhStorClass - ok
14:41:42.0726 0x03c4  [ 49023DD6F646B8C70AE1C105415F3E2B, 16EC2920A2CB71C17BFA7A0E22EDAE1C0E7004C986BEBCA9435F6FDB5D8E64CF ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
14:41:42.0741 0x03c4  EhStorTcgDrv - ok
14:41:42.0741 0x03c4  [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll
14:41:42.0777 0x03c4  embeddedmode - ok
14:41:42.0777 0x03c4  [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc      C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
14:41:42.0812 0x03c4  EntAppSvc - ok
14:41:42.0812 0x03c4  [ 7DB097F4F6786307168C0DDDEC43A565, 963C0D3D88FB4BF9C2FBCB296B03603E2F8AA8B4E8976162842863B7538C1A9F ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
14:41:42.0860 0x03c4  EPSON_EB_RPCV4_04 - ok
14:41:42.0876 0x03c4  [ 258AA65A0862E19B7DE6981FDA3758AD, C090F19BEDC2CFB0B5265BCE48BD52102E06CBC15EEFE4CDB747D44F2E42D545 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
14:41:42.0907 0x03c4  EPSON_PM_RPCV4_04 - ok
14:41:42.0923 0x03c4  [ 1DF19D7A941CB06F8EADF89FA0BF59AD, 0A8891AD73AF277B764FA5CF163E6BC29DFFA0E35388A941AE27E001289C0A4A ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
14:41:42.0939 0x03c4  ErrDev - ok
14:41:42.0939 0x03c4  [ 1E01F509048BEF78831AC89401B172BD, 34558F56D9AEA8527B84B2BE2A752D181A5D825622EB4B90D454F6D4F971BFED ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae64.sys
14:41:42.0954 0x03c4  ESProtectionDriver - ok
14:41:42.0970 0x03c4  [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem    C:\WINDOWS\system32\es.dll
14:41:43.0001 0x03c4  EventSystem - ok
14:41:43.0001 0x03c4  [ 0BF32186C3EC11315C33CC29EA8DD86C, 82B43762A5BC9C0AB7B5D1F96DC47B34700924B598070A7CCB30C92EB5EE1599 ] ew_usbccgpfilter C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys
14:41:43.0032 0x03c4  ew_usbccgpfilter - ok
14:41:43.0048 0x03c4  [ B2858C386B99A68C3E3F0DFAB935C232, D278EA60AED4C3769B827BF2DEE584135FFDCF9E1380B982A7AEFB531848F4A2 ] exfat          C:\WINDOWS\system32\drivers\exfat.sys
14:41:43.0064 0x03c4  exfat - ok
14:41:43.0079 0x03c4  [ CE38CED74D85849BB2C9894DCA712615, 087B9EA66C06F8AA185F78E482DCA128B0554B716A1740033FC624414AA1B237 ] fastfat        C:\WINDOWS\system32\drivers\fastfat.sys
14:41:43.0095 0x03c4  fastfat - ok
14:41:43.0110 0x03c4  [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax            C:\WINDOWS\system32\fxssvc.exe
14:41:43.0157 0x03c4  Fax - ok
14:41:43.0157 0x03c4  [ 6701B9973DE98578A491721B4BDE0926, 48D07092E6B44CAA529559DF620BDAA4DFCC16430DBA8178B461E556AC526DE1 ] fdc            C:\WINDOWS\System32\drivers\fdc.sys
14:41:43.0173 0x03c4  fdc - ok
14:41:43.0173 0x03c4  [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost        C:\WINDOWS\system32\fdPHost.dll
14:41:43.0204 0x03c4  fdPHost - ok
14:41:43.0204 0x03c4  [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
14:41:43.0220 0x03c4  FDResPub - ok
14:41:43.0235 0x03c4  [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc          C:\WINDOWS\system32\fhsvc.dll
14:41:43.0251 0x03c4  fhsvc - ok
14:41:43.0251 0x03c4  [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt      C:\WINDOWS\system32\drivers\filecrypt.sys
14:41:43.0267 0x03c4  FileCrypt - ok
14:41:43.0282 0x03c4  [ A0AF205465482EE0FC6261782629566B, E0C0E9EB327F4DEEDF3E32EB5573A74436829078331A8EA1B795438892EE81B8 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
14:41:43.0282 0x03c4  FileInfo - ok
14:41:43.0298 0x03c4  [ 01D83D284E6B37902DB3C4D4DB0649E0, 4376F872575013DE87CA8173FABAD367FFF907086864C106A4C82933EF9DA308 ] Filetrace      C:\WINDOWS\system32\drivers\filetrace.sys
14:41:43.0314 0x03c4  Filetrace - ok
14:41:43.0314 0x03c4  [ CE9CB1DB00B5007ABFFF0717E748E919, 314E1FA6B0CD9416894EED93ADF3DCB273FF37F6E56EF64C9E7B55E174EB3226 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
14:41:43.0329 0x03c4  flpydisk - ok
14:41:43.0345 0x03c4  [ C5374BA2CAE89DE7269EC61A969EF5D5, 520D7A4C50A9FFF308599C6EADDCADD3D9E398718786D82F02F7EE5C30E7D6A2 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
14:41:43.0360 0x03c4  FltMgr - ok
14:41:43.0392 0x03c4  [ 8F528FD267C55ABE2A156C5F6EA6B867, 540A852F250783553E042FC31D3F2D695DADA4777FF31F1BA8B60E3407333277 ] FontCache      C:\WINDOWS\system32\FntCache.dll
14:41:43.0464 0x03c4  FontCache - ok
14:41:43.0479 0x03c4  [ CE9456F925ADA70ED5A4158F103F9A26, 89753CCCB2E8B1553F077B8F13C63FBEC2EABE7093A6B847477542483347C827 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:41:43.0495 0x03c4  FontCache3.0.0.0 - ok
14:41:43.0499 0x03c4  [ B6BC6E6731FB1E02F0B3C73A87E1C35E, D9CA56006C1D995568A557E53DCCD7802D152CADE535BDB5DBBFC66F3F2EE236 ] FrameServer    C:\WINDOWS\system32\FrameServer.dll
14:41:43.0548 0x03c4  FrameServer - ok
14:41:43.0548 0x03c4  [ 835F9C7193B6F9A796DE76897DC56968, 62D6CF40CD6B798E79FF3274DB156DAB17724EDEEC85F6602F3C0EDCDD2DBA11 ] FsDepends      C:\WINDOWS\system32\drivers\FsDepends.sys
14:41:43.0563 0x03c4  FsDepends - ok
14:41:43.0563 0x03c4  [ A01BA0506E07F316483E99D7AD9B6E75, B2CFB3AAE0E49C539C743A7F416CFC0DE2E0CFC2D5AE685F8B1BECBDB95C4308 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:41:43.0578 0x03c4  Fs_Rec - ok
14:41:43.0595 0x03c4  [ F00AA662A862BA1B5B0BB9FBDFAE2DFC, 1DBEA358E58370C1BD8D5797382FD22A19E92BA171AB70868359CF921F324CA7 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
14:41:43.0626 0x03c4  fvevol - ok
14:41:43.0629 0x03c4  [ 06771B5D1C17035665ED8FC7EA1036C6, 6E984EBA99337C9F0FED6766ECAED22486A9D550E003BD25EB28AFB56469D37B ] GalaxyClientService C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe
14:41:43.0661 0x03c4  GalaxyClientService - ok
14:41:43.0812 0x03c4  [ 44202F8F7484A27CC9CBB7CA9F0B5A6A, 51C7E6B67829E3790D2D3BCD76CE1A1E7B355B49DB3F4EB83A43221160023046 ] GalaxyCommunication C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
14:41:43.0989 0x03c4  GalaxyCommunication - ok
14:41:43.0989 0x03c4  [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
14:41:44.0005 0x03c4  gencounter - ok
14:41:44.0021 0x03c4  [ EA5EE5EF9765A9157B346DF671952F18, FD0A8DBA6EA3E47D454B877CEC74B7B6BEC8B7A98BE37E9E1110D867009D9EA1 ] genericusbfn    C:\WINDOWS\System32\drivers\genericusbfn.sys
14:41:44.0036 0x03c4  genericusbfn - ok
14:41:44.0036 0x03c4  [ 6BE6550F1A32796A11EBC58BBC72C44D, 99DC4058EC1B3BF316F1470BF1208F0A2FC72A508BCC9E7548D91BB0FF04376A ] GPIOClx0101    C:\WINDOWS\system32\Drivers\msgpioclx.sys
14:41:44.0052 0x03c4  GPIOClx0101 - ok
14:41:44.0083 0x03c4  [ 3FC2377994D9D63FC128B6C48B22B68F, B47D6BE6FF596A23BBDB7261B1CA9CA67CD138CBF89AEA7A68882E62C0087561 ] gpsvc          C:\WINDOWS\System32\gpsvc.dll
14:41:44.0130 0x03c4  gpsvc - ok
14:41:44.0146 0x03c4  [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys
14:41:44.0161 0x03c4  GpuEnergyDrv - ok
14:41:44.0161 0x03c4  [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll
14:41:44.0177 0x03c4  GraphicsPerfSvc - ok
14:41:44.0192 0x03c4  [ 2D8BBF6C7241AAD9EDE7708EBB7B43A4, 51AF8150C6CF738AF14F502E6BDAD1035773DD45980770E06393814B75259EF8 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:41:44.0192 0x03c4  gupdate - ok
14:41:44.0208 0x03c4  [ 2D8BBF6C7241AAD9EDE7708EBB7B43A4, 51AF8150C6CF738AF14F502E6BDAD1035773DD45980770E06393814B75259EF8 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:41:44.0208 0x03c4  gupdatem - ok
14:41:44.0224 0x03c4  [ 99FB3BA9180CDD9E71A6DDCB07F91140, 28A2DD9B44AD2A20CBAAC7F62F701D9B46B1A89373131AFD2B39B42DB87A407B ] HdAudAddService C:\WINDOWS\System32\drivers\HdAudio.sys
14:41:44.0255 0x03c4  HdAudAddService - ok
14:41:44.0271 0x03c4  [ DED74127C7A2266715C0B8EA2EE75214, 999507BECB4BAAC61317D98311962D446844CAC6271BFFE181F6CD6DFE221465 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
14:41:44.0286 0x03c4  HDAudBus - ok
14:41:44.0286 0x03c4  [ 95888B85956AF97320D1F5C354632957, C0218271A17897D4682192AB431658523EC87CB13551B2BDA40576BF766BB26C ] HidBatt        C:\WINDOWS\System32\drivers\HidBatt.sys
14:41:44.0302 0x03c4  HidBatt - ok
14:41:44.0302 0x03c4  [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
14:41:44.0317 0x03c4  HidBth - ok
14:41:44.0333 0x03c4  [ 6D767FEB02DF712F783BEEFF09E06431, AB64C61E5729FB27BF9564CA8308D895CFFB992CE8606FDC31EFF01BB1FF8FFE ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
14:41:44.0349 0x03c4  hidi2c - ok
14:41:44.0349 0x03c4  [ 542AB7A14235C5227A9307ACF1636F0B, E54C4C4511727F4E70CB1C9259C56D4AC62E70BAB2F42E9AB402C1DF4AF3FA25 ] hidinterrupt    C:\WINDOWS\System32\drivers\hidinterrupt.sys
14:41:44.0364 0x03c4  hidinterrupt - ok
14:41:44.0364 0x03c4  [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr          C:\WINDOWS\System32\drivers\hidir.sys
14:41:44.0380 0x03c4  HidIr - ok
14:41:44.0380 0x03c4  [ 3030F19C6A73367D6D5EEDD157F5D01A, B1F13C2AE334C8CDF15BD96B70E92A81487308D841196A29AE3D1164CDAF9AA2 ] hidserv        C:\WINDOWS\system32\hidserv.dll
14:41:44.0411 0x03c4  hidserv - ok
14:41:44.0411 0x03c4  [ 6E3FB2047B8AE72E1B5F1C00A5F3E475, A5F791BECA43925D410751C114BCF2FC4A46D7A44BE80B02CD3259C6E271FF31 ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
14:41:44.0427 0x03c4  HidUsb - ok
14:41:44.0442 0x03c4  [ 621B1FFB2E4E4745484EA01B013BF1D2, 6F6761922EF931DB95D6597A5884DEB3CC127FB9D763A5A27369F7881DE64B8D ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
14:41:44.0442 0x03c4  HpSAMD - ok
14:41:44.0474 0x03c4  [ 744428491FA6BB37EC8070886C49CB12, 04F47EA973051B93F9FB6673725D728A9F717EB889CB513C2ED259F3392D2D36 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
14:41:44.0505 0x03c4  HTTP - ok
14:41:44.0505 0x03c4  [ E548929868BDFD3FC13B46D99605B764, 737C8A1210442533735F10BD80AFBB3E890D0CC9068F2406CA5C577C7C58B97C ] HuaweiHiSuiteService64.exe C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
14:41:44.0614 0x03c4  HuaweiHiSuiteService64.exe - ok
14:41:44.0630 0x03c4  [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash        C:\WINDOWS\System32\drivers\hvcrash.sys
14:41:44.0630 0x03c4  hvcrash - ok
14:41:44.0646 0x03c4  [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll
14:41:44.0661 0x03c4  HvHost - ok
14:41:44.0661 0x03c4  [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice      C:\WINDOWS\system32\drivers\hvservice.sys
14:41:44.0677 0x03c4  hvservice - ok
14:41:44.0677 0x03c4  [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101      C:\WINDOWS\system32\Drivers\mshwnclx.sys
14:41:44.0692 0x03c4  HwNClx0101 - ok
14:41:44.0692 0x03c4  [ FE36689912DEC37D45B7A6C6414046FE, 3AE4E52B4ECD50ABEF67DCD1E30E409908F53624D9854BDD472352E8B280F19D ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
14:41:44.0708 0x03c4  hwpolicy - ok
14:41:44.0708 0x03c4  [ A1133368F47D514D73DD7FB4C4FD2B75, 6019DABCAB9E2941D76EC62F4352FA76DDCD964671C490730BF725CA2234CA3D ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
14:41:44.0724 0x03c4  hyperkbd - ok
14:41:44.0724 0x03c4  [ B68252C53556FFB52CCE18FF30FACA99, 0463FB8661A9EF338EFBBE43EE76C63DE170510D0E9B612D62009D7D85669365 ] HyperVideo      C:\WINDOWS\System32\drivers\HyperVideo.sys
14:41:44.0755 0x03c4  HyperVideo - ok
14:41:44.0755 0x03c4  [ DA179667B8CEC22E4ECBBF4210DC0E35, 70CDB592E1775919B9AB1810A7BA18FE4851FBD493E4772741F36FC11A4CA47E ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
14:41:44.0771 0x03c4  i8042prt - ok
14:41:44.0771 0x03c4  [ B5EC43755E62591197DE5CBBDAA9FEB7, 1B4E0EAB677B09A050925879ECDA311404270DCF020AAD390692427198C73C9F ] iagpio          C:\WINDOWS\System32\drivers\iagpio.sys
14:41:44.0802 0x03c4  iagpio - ok
14:41:44.0802 0x03c4  [ D8CA23F9C5FEF44296FDE1E005C06EC0, 0D7B03EF9E19B9B2A28C3318560488B3F9573CF364A533A9B4A2CD0A7FFA4F84 ] iai2c          C:\WINDOWS\System32\drivers\iai2c.sys
14:41:44.0817 0x03c4  iai2c - ok
14:41:44.0833 0x03c4  [ 7B769C9D19C013F94874C4B15D59A005, 53A15F0480AEC43B5A01CFB17360188885B6ECBFFF6E566D27E5B6D4C7737243 ] iaLPSS2i_GPIO2  C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
14:41:44.0849 0x03c4  iaLPSS2i_GPIO2 - ok
14:41:44.0849 0x03c4  [ E0F1B3A2A70FABE3BE1C9140BB55E607, 34E5B055619F3A26B7BB6054EA49D40B7D6DAFE234F57F358FE7C8EE83E10618 ] iaLPSS2i_GPIO2_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys
14:41:44.0864 0x03c4  iaLPSS2i_GPIO2_BXT_P - ok
14:41:44.0880 0x03c4  [ 89A869BCC0588A3009ECB875B09ECD39, 5ECC2C6E661B326511682D8EA1C82F942C63835890687285FEF455C5C9DC2476 ] iaLPSS2i_I2C    C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
14:41:44.0896 0x03c4  iaLPSS2i_I2C - ok
14:41:44.0896 0x03c4  [ 2E693DF3C02A0859DB8DE25772751100, 3EFFDA44B247E04258429ADC85E88E23F926FD487A3A85BF879E6E5802197B3F ] iaLPSS2i_I2C_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys
14:41:44.0911 0x03c4  iaLPSS2i_I2C_BXT_P - ok
14:41:44.0927 0x03c4  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
14:41:44.0927 0x03c4  iaLPSSi_GPIO - ok
14:41:44.0942 0x03c4  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C    C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
14:41:44.0958 0x03c4  iaLPSSi_I2C - ok
14:41:44.0974 0x03c4  [ 26405FA714257E449581DE5D6E6200E6, 1C3055AF6BB53308B7E6268A11929881263767619FF524674C51C03B7990C0A8 ] iaStorAVC      C:\WINDOWS\system32\drivers\iaStorAVC.sys
14:41:45.0005 0x03c4  iaStorAVC - ok
14:41:45.0021 0x03c4  [ 11AC0355FE52CC8813EE6864DE7531E4, 4D77C451C230395E03B3DB592B1BDCDB8B2142961906A25F0FD070D3A8B670EB ] iaStorV        C:\WINDOWS\system32\drivers\iaStorV.sys
14:41:45.0036 0x03c4  iaStorV - ok
14:41:45.0052 0x03c4  [ 62CD9FA7394BCDF7784CCEFC9D00C9AA, 2A09A921EBD998EC45470675FC8D803EAE5F9E2E16B9313591987AA574835CFE ] ibbus          C:\WINDOWS\System32\drivers\ibbus.sys
14:41:45.0067 0x03c4  ibbus - ok
14:41:45.0083 0x03c4  [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc          C:\WINDOWS\System32\tetheringservice.dll
14:41:45.0114 0x03c4  icssvc - ok
14:41:45.0192 0x03c4  [ 226EAECA4F21F899E3F0C95297678A0B, DC18AAE3F1505C9BECB75218F4CCCD8DC6E1C6258EDA9A57B57028246EF346FA ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
14:41:45.0333 0x03c4  igfx - ok
14:41:45.0364 0x03c4  [ 25793D173BD83ACF8B248C97ABC3B860, 0133EEB7C08E02F3C732FA89381920E5C4BB0CD2190E49C19619FAB43C68708A ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
14:41:45.0411 0x03c4  IKEEXT - ok
14:41:45.0411 0x03c4  [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd    C:\WINDOWS\System32\drivers\IndirectKmd.sys
14:41:45.0427 0x03c4  IndirectKmd - ok
14:41:45.0458 0x03c4  [ 310C18A371002983E7BF25BEB0333480, 2A251FDD552F2757059B49441BD6AC683FAEB254D828A792EA382B0D4070F1F8 ] InstallService  C:\WINDOWS\system32\InstallService.dll
14:41:45.0521 0x03c4  InstallService - ok
14:41:45.0567 0x03c4  [ 718A4008EE5DA174400396B27509EF82, 01F563AFF8156B3B72FB0ED1F25F6F451157FE0C4C5671072FD62FD1ED7F73AA ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
14:41:45.0630 0x03c4  IntcAzAudAddService - ok
14:41:45.0646 0x03c4  [ F1B552F7ACDF6E3E4DDDB76118CAFDE3, C4047BAAECF6FA3B73EB684F53C7F81A08AA39F42F8DC7C31BF35DFA93B7C647 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
14:41:45.0661 0x03c4  intelide - ok
14:41:45.0661 0x03c4  [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
14:41:45.0677 0x03c4  intelpep - ok
14:41:45.0692 0x03c4  [ 2CEF9DEB97B2CA327175EE8AD5F195A1, 1D6A3B47A844A235B73F8DC2BF872A943FE980480480843EDD5935307C115B3E ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
14:41:45.0708 0x03c4  intelppm - ok
14:41:45.0708 0x03c4  [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys
14:41:45.0724 0x03c4  iorate - ok
14:41:45.0724 0x03c4  [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:41:45.0755 0x03c4  IpFilterDriver - ok
14:41:45.0771 0x03c4  [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
14:41:45.0802 0x03c4  iphlpsvc - ok
14:41:45.0802 0x03c4  [ 5C58142E0F1F8AA379748CC123BA7527, 1D6D42F2595DF3C0EE8FEF751F13119951A2D040D2B22A7F0CBD6083B49F8A37 ] IPMIDRV        C:\WINDOWS\System32\drivers\IPMIDrv.sys
14:41:45.0817 0x03c4  IPMIDRV - ok
14:41:45.0833 0x03c4  [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT          C:\WINDOWS\system32\drivers\ipnat.sys
14:41:45.0849 0x03c4  IPNAT - ok
14:41:45.0849 0x03c4  [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT            C:\WINDOWS\System32\drivers\ipt.sys
14:41:45.0880 0x03c4  IPT - ok
14:41:45.0880 0x03c4  [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc    C:\WINDOWS\System32\IpxlatCfg.dll
14:41:45.0896 0x03c4  IpxlatCfgSvc - ok
14:41:45.0896 0x03c4  [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda            C:\WINDOWS\system32\drivers\irda.sys
14:41:45.0927 0x03c4  irda - ok
14:41:45.0927 0x03c4  [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
14:41:45.0942 0x03c4  IRENUM - ok
14:41:45.0942 0x03c4  [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon          C:\WINDOWS\System32\irmon.dll
14:41:45.0958 0x03c4  irmon - ok
14:41:45.0958 0x03c4  [ 38A6EC08D0067DECF7B5BA4C871B846C, 0FAB8EACA2BB4A0BF3895B6BB7CA9BCF74447CF640535A57998C6A4A35EAC030 ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
14:41:45.0974 0x03c4  isapnp - ok
14:41:45.0989 0x03c4  [ 5529131AAB75E07D9295B19E20C54DAE, C2F2C7D33945C13DDC5EF540581772CEF73EFB23F19E6BCDBB6A99D8C96A302B ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
14:41:46.0005 0x03c4  iScsiPrt - ok
14:41:46.0005 0x03c4  [ C35FD802C800F3CBB4FD426D5A542A22, B2325956DB68222C5FBB43DFA0BF5EEC073470010E13997F2A5635CC89D66872 ] ItSas35i        C:\WINDOWS\system32\drivers\ItSas35i.sys
14:41:46.0021 0x03c4  ItSas35i - ok
14:41:46.0036 0x03c4  [ 112809CE3919156C484C5BBE61EEEE25, 53C25ACD631A9757596CDF8DEF564E4A027786C566AE1DBA2CAA15ED17BC834B ] JmtFltr        C:\WINDOWS\system32\drivers\JmtFltr.sys
14:41:46.0052 0x03c4  JmtFltr - ok
14:41:46.0067 0x03c4  [ 17F3B012B28F27E7B813A7B037A3D790, DADE75BB016438B7E0A11A1CF1FFA596C27246EF7F4E04D96366029C9F65F0C5 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
14:41:46.0083 0x03c4  kbdclass - ok
14:41:46.0083 0x03c4  [ 843B4BBD15DD0340C5C293CD419D4A76, F6D17CCE13697669DA4EF1F83E394F5496C437496E0E09307F8B615DE3216CC5 ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
14:41:46.0099 0x03c4  kbdhid - ok
14:41:46.0099 0x03c4  [ 5BBB86F3F1700E0ACE1DF10F0EF7B227, 348FE61522F8C24F407F87D2966F62BD816DF27CD824AC103699CA66EE799640 ] kdnic          C:\WINDOWS\System32\drivers\kdnic.sys
14:41:46.0114 0x03c4  kdnic - ok
14:41:46.0130 0x03c4  [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] KeyIso          C:\WINDOWS\system32\lsass.exe
14:41:46.0146 0x03c4  KeyIso - ok
14:41:46.0146 0x03c4  [ D54931F61470509C2DEBF6B99F9C314F, D054A3E8EC01AF0175B7764E98E0C764F5CD446C89E156FE4035D032CC30B026 ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
14:41:46.0161 0x03c4  KSecDD - ok
14:41:46.0161 0x03c4  [ 3EDB01A28D23898492878460C28E8A91, 07B7C55366FF02A7B580E0698454A811455206D0F435E3B20682930742E93DE6 ] KSecPkg        C:\WINDOWS\system32\Drivers\ksecpkg.sys
14:41:46.0177 0x03c4  KSecPkg - ok
14:41:46.0177 0x03c4  [ 10F2EBC1F1C4549C355781715DE47B66, 9D23CBA56245532D88396DF99C62A26E71A7EEEF7CD8BA98FFF9FD2804DDF946 ] ksthunk        C:\WINDOWS\system32\drivers\ksthunk.sys
14:41:46.0208 0x03c4  ksthunk - ok
14:41:46.0208 0x03c4  [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm          C:\WINDOWS\system32\msdtckrm.dll
14:41:46.0239 0x03c4  KtmRm - ok
14:41:46.0239 0x03c4  [ 081D030BC669BDEDC68B8FE81A67E6A7, B5C1FA89ACAE1683A524CD14E2D7D6C3C1FAE0ABCD330841D493FC6DB0843798 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
14:41:46.0271 0x03c4  LanmanServer - ok
14:41:46.0286 0x03c4  [ 514E8BD07F42D95667F54777D57403D0, 3D024A18F7AC70A846FAB3255AA1048F8DD1DC4301F1B70B647B71F5E7A1AA24 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
14:41:46.0317 0x03c4  LanmanWorkstation - ok
14:41:46.0317 0x03c4  [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc          C:\WINDOWS\System32\lfsvc.dll
14:41:46.0333 0x03c4  lfsvc - ok
14:41:46.0333 0x03c4  [ A6F294B38F3DFB67D6B6E1D1E60A402A, 11C51B35DB2A3510258F3B722C12326BF068360CFA1E81FF552BA0BD19DE38E8 ] LGBusEnum      C:\WINDOWS\system32\drivers\LGBusEnum.sys
14:41:46.0349 0x03c4  LGBusEnum - ok
14:41:46.0349 0x03c4  [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp      C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys
14:41:46.0364 0x03c4  LGCoreTemp - ok
14:41:46.0364 0x03c4  [ 2A9F60E6531F42B31874618743037719, BFD61AD03ADEF69421ECB07820EDB79D425048EC01A65A0D1E8A4527699196DC ] LGJoyXlCore    C:\WINDOWS\system32\drivers\LGJoyXlCore.sys
14:41:46.0380 0x03c4  LGJoyXlCore - ok
14:41:46.0380 0x03c4  [ 94AF1384A67B9FCF5651E70BC9D4C526, 9C025F7BBB5BBE9DAF3DEF2F6385CE77C8F413912C4D16930814F6D19B62B367 ] LGSHidFilt      C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys
14:41:46.0396 0x03c4  LGSHidFilt - ok
14:41:46.0396 0x03c4  [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll
14:41:46.0411 0x03c4  LicenseManager - ok
14:41:46.0427 0x03c4  [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys
14:41:46.0442 0x03c4  lltdio - ok
14:41:46.0442 0x03c4  [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc        C:\WINDOWS\System32\lltdsvc.dll
14:41:46.0474 0x03c4  lltdsvc - ok
14:41:46.0474 0x03c4  [ BD35F484DA59014D091736F8F10BFB42, 7004408EEE281BA707248369910483928A15F3304F4A8F594EA2E04D43929926 ] lmhosts        C:\WINDOWS\System32\lmhsvc.dll
14:41:46.0505 0x03c4  lmhosts - ok
14:41:46.0505 0x03c4  [ 9378E017895D43543B06B01151488E0E, 504EED53D2875C76335FF51CDFBB5DB545D5437F8888251B6CAD125A01D97BBA ] LogiRegistryService C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
14:41:46.0521 0x03c4  LogiRegistryService - ok
14:41:46.0521 0x03c4  [ 48380096385DB46E43D85CD92B9500DB, D93F4FDAA5A665E09004F7676E821AEAD0ED059F0E006FF73F02BB8FF1C0F9FC ] LSI_SAS        C:\WINDOWS\system32\drivers\lsi_sas.sys
14:41:46.0536 0x03c4  LSI_SAS - ok
14:41:46.0552 0x03c4  [ F708223E5829510DF0D5AF209D11C8B8, DE82ACC6D04092C22BA4E63CF527814467870A10B93D7E9B061DBA23CEF9424B ] LSI_SAS2i      C:\WINDOWS\system32\drivers\lsi_sas2i.sys
14:41:46.0567 0x03c4  LSI_SAS2i - ok
14:41:46.0567 0x03c4  [ B91BCC8F670F128A4BB826ACF2C2B9D5, D905232E3E49EA6CACE04CDB241D12CA9E84F106D15340C921B980610C1080FB ] LSI_SAS3i      C:\WINDOWS\system32\drivers\lsi_sas3i.sys
14:41:46.0583 0x03c4  LSI_SAS3i - ok
14:41:46.0583 0x03c4  [ FA31CDF977CD31AF9AEAAA422966ACC1, 705761786930A2534CD1B797F5F16F56F58647192175F5D19E13642A89462CAA ] LSI_SSS        C:\WINDOWS\system32\drivers\lsi_sss.sys
14:41:46.0599 0x03c4  LSI_SSS - ok
14:41:46.0614 0x03c4  [ 52B6D805C60127F0456DF019775F5740, 3005C49349072EDD68DBFC6DBF884FC75E060920EA3FA90A60C39F5A83939595 ] LSM            C:\WINDOWS\System32\lsm.dll
14:41:46.0646 0x03c4  LSM - ok
14:41:46.0661 0x03c4  [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv          C:\WINDOWS\system32\drivers\luafv.sys
14:41:46.0677 0x03c4  luafv - ok
14:41:46.0677 0x03c4  [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc          C:\WINDOWS\System32\LanguageOverlayServer.dll
14:41:46.0708 0x03c4  LxpSvc - ok
14:41:46.0708 0x03c4  [ 1C1FF36E51F73989FB4DD2DBAFAE11EC, B5C0B169BFEF5FD769745F924B3F30C960A555F8B0C0C7315B273435D9F246D5 ] MapsBroker      C:\WINDOWS\System32\moshost.dll
14:41:46.0724 0x03c4  MapsBroker - ok
14:41:46.0739 0x03c4  [ BD3D311802427608403C5E73A8D6137D, C85DCB557E931E302AF90270731C3F5AA820CDF14D7DBACA95284FD9E4BF5F3D ] mausbhost      C:\WINDOWS\System32\drivers\mausbhost.sys
14:41:46.0771 0x03c4  mausbhost - ok
14:41:46.0771 0x03c4  [ 61C2D9790943D8E3AD05AE35E4A313EF, 96BBA5333F4AEEE41FAD28124DD448CFECD8111F931758CAB60FCB1DAA05E239 ] mausbip        C:\WINDOWS\System32\drivers\mausbip.sys
14:41:46.0786 0x03c4  mausbip - ok
14:41:46.0786 0x03c4  [ 0B4A62420642B842DF8656DBFF663B0C, ACB7961ECA32A50FCBD51B194488DDF40E610C2384EDFD06235AE427BCB80C96 ] MBAMChameleon  C:\WINDOWS\System32\Drivers\MbamChameleon.sys
14:41:46.0802 0x03c4  MBAMChameleon - ok
14:41:46.0802 0x03c4  MBAMFarflt - ok
14:41:46.0817 0x03c4  MBAMProtection - ok
14:41:46.0817 0x03c4  MBAMSwissArmy - ok
14:41:46.0817 0x03c4  MBAMWebProtection - ok
14:41:46.0817 0x03c4  [ 8FF2D95CBA49B405C5DE27039FF0BF35, 03BF7FC7F1C2C76EDB583BA342EA1C325DB8058517744EF2A78529D3938F4DC1 ] MBfilt          C:\WINDOWS\system32\drivers\MBfilt64.sys
14:41:46.0833 0x03c4  MBfilt - ok
14:41:46.0833 0x03c4  [ 61BCE12529E96E6F0335A2A8DEB83C61, BFDD1E52736311CF53AE9C778C664D37B5B711B544BC41BDFB137F7A9789AD2A ] megasas        C:\WINDOWS\system32\drivers\megasas.sys
14:41:46.0849 0x03c4  megasas - ok
14:41:46.0849 0x03c4  [ CA22763F12783A9C81C512ED747CECDD, 8D2403364D5479D89479FA0C23BB9511A4360F51504F78AA1675220CDCD21398 ] megasas2i      C:\WINDOWS\system32\drivers\MegaSas2i.sys
14:41:46.0864 0x03c4  megasas2i - ok
14:41:46.0864 0x03c4  [ FDB06D857FC43D654547BBB31D039DB4, 4CBE0F0FBDD88A5DB4F333466BB4E1C886E0742D41B4ED418587B40C4F59B307 ] megasas35i      C:\WINDOWS\system32\drivers\megasas35i.sys
14:41:46.0880 0x03c4  megasas35i - ok
14:41:46.0896 0x03c4  [ 230361AF74DDB91705284E024A22DF4F, 82F13E3E4A8B3CB6AE65C1C9F878702D16D101B0DCC79B9FF8368F9B87E0F285 ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
14:41:46.0927 0x03c4  megasr - ok
14:41:46.0927 0x03c4  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\WINDOWS\System32\drivers\HECIx64.sys
14:41:46.0942 0x03c4  MEIx64 - ok
14:41:46.0942 0x03c4  [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll
14:41:46.0958 0x03c4  MessagingService - ok
14:41:46.0974 0x03c4  [ A8931C3820D5F392D89176E0628E766E, 0F035833B1CBABDF9E5142F3E5EB6413DC7DDBF3A0562170018A8EBA20992CA4 ] mlx4_bus        C:\WINDOWS\System32\drivers\mlx4_bus.sys
14:41:47.0005 0x03c4  mlx4_bus - ok
14:41:47.0020 0x03c4  [ EB4D7C9354CB88DE4B085EA3EEA5BC76, DD842967ED5A9232AF34E68548C98F9760487D5626C9628A44598A97B28F24D3 ] MMCSS          C:\WINDOWS\system32\drivers\mmcss.sys
14:41:47.0036 0x03c4  MMCSS - ok
14:41:47.0036 0x03c4  [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem          C:\WINDOWS\system32\drivers\modem.sys
14:41:47.0052 0x03c4  Modem - ok
14:41:47.0052 0x03c4  [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor        C:\WINDOWS\System32\drivers\monitor.sys
14:41:47.0083 0x03c4  monitor - ok
14:41:47.0083 0x03c4  [ 66C9CCC6A100ACF7A4514BD3091CE566, 1423EC39D4203D717B79BF2E5F4A89A0541CCEA2162351A670EA46AA69A0859D ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
14:41:47.0099 0x03c4  mouclass - ok
14:41:47.0099 0x03c4  [ 6BE61DAF4CDC0E13940096EAC4A9F490, 954DA0C9FE3881030EC0B9A428C2C2BBC86353EC9421009AC48FDC047315160F ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
14:41:47.0114 0x03c4  mouhid - ok
14:41:47.0130 0x03c4  [ 2CFB54C638F75E39FBB22723401A8A56, 5E4B1107534AF4ADCD031FC4931B6819B8371720A3D68B5C9788C2AB34DA2C21 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
14:41:47.0130 0x03c4  mountmgr - ok
14:41:47.0145 0x03c4  [ 84F6B333A2AD8B81955F4F846BA89A39, 0457F2110D584BBEE926189126F7BDC54BD2663A7B0BA2EC89DEEC0CCDA9F2DC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:41:47.0161 0x03c4  MozillaMaintenance - ok
14:41:47.0161 0x03c4  [ 11B4962A359DCE5F80C4D5F9E492EE93, C7FB9C5604624D6A54B184C48F57BACC7660B5A7FF14B2E2C2DC5FC249C11DA6 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
14:41:47.0192 0x03c4  mpsdrv - ok
14:41:47.0208 0x03c4  [ 9C7CE5CF0CDB6F41FDB96EF03754D283, A9A8B755EAF20C13FA32240FF71134020F21EF1EB7F033F385AA1F7FDB3CEF14 ] mpssvc          C:\WINDOWS\system32\mpssvc.dll
14:41:47.0255 0x03c4  mpssvc - ok
14:41:47.0270 0x03c4  [ FE4CB8E6B4852BFEC3754A454290353C, 215208FC8196C42C9FC37E81F84FD3AA883F44DCA098A7AFCBE98116F64B8A48 ] MQAC            C:\WINDOWS\system32\drivers\mqac.sys
14:41:47.0302 0x03c4  MQAC - ok
14:41:47.0302 0x03c4  [ C12373EC998C6F17C0FE2D6C3CBB9C04, 5F41757D6774B2DCADB340430B26C2C1BA93D7A47948DA92023622B66BB7B482 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
14:41:47.0333 0x03c4  MRxDAV - ok
14:41:47.0349 0x03c4  [ 3C0FA2ED75875481D00F3D77B1A3E336, 031E1A6F826CEDB44D9FAAA1615872087B822F7A4E0731D3023AEF1CFCD10A2F ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:41:47.0364 0x03c4  mrxsmb - ok
14:41:47.0380 0x03c4  [ 42FE3D84EFE835443151DC2A50D05643, 3582EA0CAA2A02AA9A6FDECF9DE0F962BF10FB1C2E7E804A3F0D62C4A4C365B1 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
14:41:47.0395 0x03c4  mrxsmb20 - ok
14:41:47.0395 0x03c4  [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys
14:41:47.0411 0x03c4  MsBridge - ok
14:41:47.0427 0x03c4  [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC          C:\WINDOWS\System32\msdtc.exe
14:41:47.0442 0x03c4  MSDTC - ok
14:41:47.0458 0x03c4  [ 128E1D8C23F690DF1DD7AFDB214DB6ED, 9A04B77E91956B76B2FA2FE5F192C794E0C1DA708AE99B64B3B3D39902452E39 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
14:41:47.0474 0x03c4  Msfs - ok
14:41:47.0474 0x03c4  [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32    C:\WINDOWS\System32\drivers\msgpiowin32.sys
14:41:47.0489 0x03c4  msgpiowin32 - ok
14:41:47.0489 0x03c4  [ D727DEA75E316C80793C7098225D3F56, F6E7F01DDDED03E29BE64796873875A4CC7215B3C8152192A465EE2E76FFC8A1 ] mshidkmdf      C:\WINDOWS\System32\drivers\mshidkmdf.sys
14:41:47.0505 0x03c4  mshidkmdf - ok
14:41:47.0505 0x03c4  [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf      C:\WINDOWS\System32\drivers\mshidumdf.sys
14:41:47.0520 0x03c4  mshidumdf - ok
14:41:47.0520 0x03c4  [ 8E42D6B92CB4567467E29F58F2E31715, F1EEB6811526C079EF8C3702A535B23FA14C5A33CA2B14C9A65BAE136568B724 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
14:41:47.0536 0x03c4  msisadrv - ok
14:41:47.0552 0x03c4  [ C9930B9F2ABF42C732202813951A9A26, FFCE4E4FEC9F8393C75828C1D5CC380A666D4606891789D3A6923CE6701D5D99 ] MSiSCSI        C:\WINDOWS\system32\iscsiexe.dll
14:41:47.0567 0x03c4  MSiSCSI - ok
14:41:47.0567 0x03c4  msiserver - ok
14:41:47.0583 0x03c4  [ 2F3B9A23F8DEE9C3AD58CB3D966D83DD, C030A6376B392AA2D9CB8FF16196A4F71F4E7A3E32124B4B30D714D75B6583B2 ] MSKSSRV        C:\WINDOWS\System32\drivers\MSKSSRV.sys
14:41:47.0599 0x03c4  MSKSSRV - ok
14:41:47.0599 0x03c4  [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys
14:41:47.0630 0x03c4  MsLldp - ok
14:41:47.0630 0x03c4  [ 5048B167703E801A1C631B07532A3942, F195D27C540F8A26130E6FA948B622E2ADE3973CCDE8EB37089A32D3816F07F7 ] MSMQ            C:\WINDOWS\system32\mqsvc.exe
14:41:47.0645 0x03c4  MSMQ - ok
14:41:47.0645 0x03c4  [ 83364A92271339D8042C9DD5FD938A84, 23B9A90411DEF1ABA0A9EBFA6CC39F7EA2BFABD578F3783AD398551816AFEC2A ] MSPCLOCK        C:\WINDOWS\System32\drivers\MSPCLOCK.sys
14:41:47.0661 0x03c4  MSPCLOCK - ok
14:41:47.0677 0x03c4  [ AE5A4B89CDFF544B6481970BFD48A056, 6BE9ABE33305387AA61B29AB075C2C72CCFC01A7E86C573B6BE9B4A0FFA9D3EC ] MSPQM          C:\WINDOWS\System32\drivers\MSPQM.sys
14:41:47.0692 0x03c4  MSPQM - ok
14:41:47.0692 0x03c4  [ 999433544A4136A9B879C98049821EE6, 757B1EEE1BE010E06140D3F99F755F482782940D829BD7E00877775D9263C534 ] MsRPC          C:\WINDOWS\system32\drivers\MsRPC.sys
14:41:47.0724 0x03c4  MsRPC - ok
14:41:47.0724 0x03c4  [ 4566CB65F176CE5CD8FCA487D2E3A64B, C058E431ED6D3F83A6C923648A79664A61A25F8797DA83C4AE25B491CC195F30 ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
14:41:47.0739 0x03c4  mssmbios - ok
14:41:47.0739 0x03c4  [ 8A11E03B32840C0B73C14D16794F1A8A, A003C44F5234522454E285D388E506B7880CCE5FCE5622618F97C2DFFC6EA9DB ] MSTEE          C:\WINDOWS\System32\drivers\MSTEE.sys
14:41:47.0755 0x03c4  MSTEE - ok
14:41:47.0755 0x03c4  [ 794285C4F166B8108292E63FEA3C41E3, 69BB7DDB7D6F3D21395432384FB06E114B2C343664CD62A5DE1A95FBC0F5AEDD ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
14:41:47.0770 0x03c4  MTConfig - ok
14:41:47.0786 0x03c4  [ EEB9D3E90B83546864211D63C1A0A74A, E67118F7B91A192B50C9C2DC159B4276BBD8BF9CC935ABADA459E4DF4191066A ] Mup            C:\WINDOWS\system32\Drivers\mup.sys
14:41:47.0786 0x03c4  Mup - ok
14:41:47.0802 0x03c4  [ 69CECA6726FAD321F5643B16A1FF3934, 8F43BEC668DD0A1D65D3B545B78AF4324AE36DCC3524B7CF3385FE2B19CB6B07 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
14:41:47.0817 0x03c4  mvumis - ok
14:41:47.0817 0x03c4  [ B66E5DDF484DE03D61B83118E45D5E11, ECADFC9178CC957498F54F22758F4944C23CE692653DA1862061C9382AE8FD23 ] NativeWifiP    C:\WINDOWS\system32\DRIVERS\nwifi.sys
14:41:47.0849 0x03c4  NativeWifiP - ok
14:41:47.0864 0x03c4  [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll
14:41:47.0911 0x03c4  NaturalAuthentication - ok
14:41:47.0927 0x03c4  [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
14:41:47.0942 0x03c4  NcaSvc - ok
14:41:47.0958 0x03c4  [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService      C:\WINDOWS\System32\ncbservice.dll
14:41:47.0989 0x03c4  NcbService - ok
14:41:47.0989 0x03c4  [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
14:41:48.0005 0x03c4  NcdAutoSetup - ok
14:41:48.0020 0x03c4  [ AB9EB3CADF4D415B598487397476A23A, EA48BC5CCD9814F6CA50485818BA150A1066D462306764C197935A926DF0565E ] ndfltr          C:\WINDOWS\System32\drivers\ndfltr.sys
14:41:48.0020 0x03c4  ndfltr - ok
14:41:48.0052 0x03c4  [ 5269DDC879DF5FEA2B7DB91AA4726CCA, 14B0A7A03A1A49D7018F8E82A8B95BEDCBF444535B4FF4A38157FC4FD61FA72B ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
14:41:48.0099 0x03c4  NDIS - ok
14:41:48.0099 0x03c4  [ 90AA2827F0831C314C9C74B0902D9925, F8FF97C8A90760E49E2B5B4558852C458B8F16FDF372F1CDBD66B1113F64459E ] NdisCap        C:\WINDOWS\system32\drivers\ndiscap.sys
14:41:48.0130 0x03c4  NdisCap - detected UnsignedFile.Multi.Generic ( 1 )
14:41:48.0302 0x03c4  NdisCap ( UnsignedFile.Multi.Generic ) - warning
14:41:48.0474 0x03c4  [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys
14:41:48.0520 0x03c4  NdisImPlatform - ok
14:41:48.0520 0x03c4  [ 4C8BBD7EE829CE9BFB8E21134AC477E0, ED8E0D603AFFA4BD7C7057B7B10FEB811B89CB8C6D66EC8212AC24062D58CEDB ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:41:48.0552 0x03c4  NdisTapi - ok
14:41:48.0552 0x03c4  [ 76DB7B344F90A29A16CB6B7C67B87CF6, 921E6AF5B22CF3A9E153F6A6F5E3FFE64BE49959AD705F865D2734B0F8A07517 ] Ndisuio        C:\WINDOWS\system32\drivers\ndisuio.sys
14:41:48.0567 0x03c4  Ndisuio - ok
14:41:48.0567 0x03c4  [ A76D79B71300EB3FEDD3D12D4C6F1D76, 9B20C3716DDD9EECCDDFA2C4F1A9ACA512B612A8CDFC8C22B2F867280AE51A3B ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
14:41:48.0583 0x03c4  NdisVirtualBus - ok
14:41:48.0599 0x03c4  [ DA9896F6ED9EAFDAC19177ADF99DD932, A89EA83567059A59058C0330951B292C1FD98A829276618703570293C73E2FFE ] NdisWan        C:\WINDOWS\System32\drivers\ndiswan.sys
14:41:48.0614 0x03c4  NdisWan - ok
14:41:48.0630 0x03c4  [ DA9896F6ED9EAFDAC19177ADF99DD932, A89EA83567059A59058C0330951B292C1FD98A829276618703570293C73E2FFE ] ndiswanlegacy  C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:41:48.0645 0x03c4  ndiswanlegacy - ok
14:41:48.0645 0x03c4  [ 934E4A5CFD9CB891CD338052FA3467C6, 0D7C1709E6C818E2DA969220C888BF3A28D0952E73322EDDFF66AFEEB03A3103 ] ndproxy        C:\WINDOWS\system32\DRIVERS\NDProxy.sys
14:41:48.0677 0x03c4  ndproxy - ok
14:41:48.0677 0x03c4  [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu            C:\WINDOWS\system32\drivers\Ndu.sys
14:41:48.0692 0x03c4  Ndu - ok
14:41:48.0708 0x03c4  [ A704515CF3038668E9E2CA66E31A0700, 0F5A75AC5FF8E021D15D89ACE4C4D215825D931097E1BB633F46177E36F40157 ] NetAdapterCx    C:\WINDOWS\system32\drivers\NetAdapterCx.sys
14:41:48.0724 0x03c4  NetAdapterCx - ok
14:41:48.0724 0x03c4  [ DD09E3115DF2CDB36FED21E67149EB91, F2FAD5091F456E593FB25843026C5F2440D3605E5355F5FEFBFEF5E9E70DDED6 ] NetBIOS        C:\WINDOWS\system32\drivers\netbios.sys
14:41:48.0739 0x03c4  NetBIOS - ok
14:41:48.0755 0x03c4  [ 045A018E0BA5F9B75C5928A31C0E822C, 4285B752D5D1BC601B43537064DCE385F52A46D13E7988088B3BF2E2ADF3E2F2 ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
14:41:48.0770 0x03c4  NetBT - ok
14:41:48.0770 0x03c4  [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] Netlogon        C:\WINDOWS\system32\lsass.exe
14:41:48.0786 0x03c4  Netlogon - ok
14:41:48.0802 0x03c4  [ C3D07481FDD607F9B66B2CF1D8E26EF0, 5B20EAE39884B103F83A36E9AA55BA8932432344C7BADB11D8B827C07C7999E4 ] Netman          C:\WINDOWS\System32\netman.dll
14:41:48.0817 0x03c4  Netman - ok
14:41:48.0833 0x03c4  [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:41:48.0849 0x03c4  NetMsmqActivator - ok
14:41:48.0849 0x03c4  [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:41:48.0864 0x03c4  NetPipeActivator - ok
14:41:48.0880 0x03c4  [ E9931F57F05696CBF53A086449D97BF6, 986C99033AA10A258F0CC42727B14C5812BC76AB535CDF54FCA1B038C4BF9546 ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
14:41:48.0911 0x03c4  netprofm - ok
14:41:48.0911 0x03c4  [ C8B1AF912319FEF251288BDD27E9576D, 0A8C2CDE353C23F076F6ED8609F3074116179B3C8BF7700324250689FDB2331C ] NetSetupSvc    C:\WINDOWS\System32\NetSetupSvc.dll
14:41:48.0942 0x03c4  NetSetupSvc - ok
14:41:48.0942 0x03c4  [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:41:48.0958 0x03c4  NetTcpActivator - ok
14:41:48.0974 0x03c4  [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:41:48.0974 0x03c4  NetTcpPortSharing - ok
14:41:48.0989 0x03c4  [ DA8548D75434CE421BF921BAAC0916D9, 3A7E1D5EC02D6D4FD3321A1B8ADB20E99DD556E2D5FE1C98633F06EE6A023A23 ] netvsc          C:\WINDOWS\System32\drivers\netvsc.sys
14:41:49.0005 0x03c4  netvsc - ok
14:41:49.0020 0x03c4  [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll
14:41:49.0052 0x03c4  NgcCtnrSvc - ok
14:41:49.0067 0x03c4  [ DB3589FF79F06EC1967EBA56C7249E3C, C3F1B4687F2AAE869C8566B38DCFE507F8E7201A2241BD5342AAC22A2370D5E4 ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll
14:41:49.0114 0x03c4  NgcSvc - ok
14:41:49.0130 0x03c4  [ BF69FF80C3975B1D1E9428A689A16CB1, 670016D59D2169B44E2EF4CBDE281A34C4E868D2465362B09FA2DBFA393A2804 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
14:41:49.0145 0x03c4  NlaSvc - ok
14:41:49.0161 0x03c4  [ 7190932DB00BE83B57C01B5EAC4D746B, A3C7C87874620E042EFCDF64332450ACEDD4FAB7F6C1B2DE97A1C6EDA2DA3055 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
14:41:49.0177 0x03c4  Npfs - ok
14:41:49.0177 0x03c4  [ 218DB396170D77BB94F69B526CC51B8F, 6AACC3C38E22061A210918771D3B087903CB7024AFBD013827864C02CD75A3F9 ] npsvctrig      C:\WINDOWS\System32\drivers\npsvctrig.sys
14:41:49.0192 0x03c4  npsvctrig - ok
14:41:49.0208 0x03c4  [ 457DAC0D0978F5391E0742ADCB4C2E28, AD53F2FC597E90AFF0795655A36192BA803AD1E737C86FD216CD39E2EC4F9C36 ] nsi            C:\WINDOWS\system32\nsisvc.dll
14:41:49.0224 0x03c4  nsi - ok
14:41:49.0224 0x03c4  [ A4952889D7C5804F17ABB9F454A371C2, 0FCE2AD4F705805D95993337915607F74CE2AA9EC92919DDE3D2569D6B9B5C13 ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
14:41:49.0239 0x03c4  nsiproxy - ok
14:41:49.0286 0x03c4  [ B892BC212736F0D60D878A28CEC2E2D2, 7E3463A6393BF93BE1204E5834C4A450AE0CF33AAD46FEFC0D94370D7D39A3DF ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
14:41:49.0349 0x03c4  Ntfs - ok
14:41:49.0349 0x03c4  [ C029E5408EEE26C3B4E5BA5D29738DB8, 8463A19A690304DC757E7698FCB59902B6305A0E9C48BF2FB2DF24C1EFA4A6EC ] Null            C:\WINDOWS\system32\drivers\Null.sys
14:41:49.0364 0x03c4  Null - ok
14:41:49.0380 0x03c4  [ 189E5FCB96ABFEA84239A16062256EE4, F3233B1B14363CD4CD032F43368FD10A42C0BE665F4B13A7E253C327C2B832DB ] nvdimm          C:\WINDOWS\System32\drivers\nvdimm.sys
14:41:49.0395 0x03c4  nvdimm - ok
14:41:49.0411 0x03c4  [ 4FD4739B359C2923965FE99B03AFD090, 02D52056A7605B9413747B41CBA2A904FAB025250FE64DFCD435606EF898A73D ] NVHDA          C:\WINDOWS\system32\drivers\nvhda64v.sys
14:41:49.0427 0x03c4  NVHDA - ok
14:41:49.0739 0x03c4  [ EABD1586205A5F09D8EDF48D4D996561, 5D0F06BED2D4194994E00F86594964F631FFA883F24FB38673D0F51EA7BAB867 ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_485c1c3102021986\nvlddmkm.sys
14:41:50.0114 0x03c4  nvlddmkm - ok
14:41:50.0130 0x03c4  [ 1F50ED95984009BF3634D6BD1A16FA5B, 650A25B2419331D95B1E4C26DE253AC3500374EDEFC5DB55CD5D5884A26783F0 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
14:41:50.0145 0x03c4  nvraid - ok
14:41:50.0161 0x03c4  [ D6C14906B78F235461EEF96A886830D4, 5D0EDE46EB9965C494B994F7071696C91C0C01352D1B000501E7B55F54F11952 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
14:41:50.0177 0x03c4  nvstor - ok
14:41:50.0177 0x03c4  [ 7385C1EFD810BA2EB672104A30F83716, B0A0CD58C4CB65275863FC09FA83219B85724E2D876DBBD940A36C62D4A800CC ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
14:41:50.0192 0x03c4  NvStreamKms - ok
14:41:50.0208 0x03c4  [ B9C4F5C232CA493B848ACE1C5FECCB07, 732C3956C3912F15C8C67406979EA8775C184C8D70DFA44930DB9F9D28689B5D ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
14:41:50.0224 0x03c4  NvTelemetryContainer - ok
14:41:50.0224 0x03c4  [ 1DD1FEA987D9881C07581C10666B1240, 980D03898FBDD79B9B6DB360CE41A6469D7C305CA885A4A2562C8F524F8B4298 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
14:41:50.0239 0x03c4  nvvad_WaveExtensible - ok
14:41:50.0239 0x03c4  [ E880D79F0EF4C349D734274AD8A7DFC0, 0EF3C81E35A1DA82355FA1BD8BD4D57EF8FD687343A72066E32B30EBC6A49475 ] nvvhci          C:\WINDOWS\System32\drivers\nvvhci.sys
14:41:50.0255 0x03c4  nvvhci - ok
14:41:50.0270 0x03c4  [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll
14:41:50.0302 0x03c4  OneSyncSvc - ok
14:41:50.0333 0x03c4  [ 7E8FD10C966FAFA81F42FDA338A740C4, 13D8303032CCE54661986FC922B2F79AB2D2E0B216FF22B5B02AEEEF56B6C652 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
14:41:50.0395 0x03c4  Origin Client Service - ok
14:41:50.0442 0x03c4  [ 1FE03ADECF9EDD9EE7F81FCA7610D001, F36C064C876CC6668417F79B5B250186596FD6D2DAD5C148E84072B6FA8F7A41 ] Origin Web Helper Service C:\Program Files (x86)\Origin\OriginWebHelperService.exe
14:41:50.0520 0x03c4  Origin Web Helper Service - ok
14:41:50.0536 0x03c4  [ B30B1233B50837D06E8068F4744B6EDA, 6C96108E9E7F29DF4872B2E41112CDFC933A51E1EE301BA81F7FBD8FBD2BEF2D ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:41:50.0536 0x03c4  ose - ok
14:41:50.0552 0x03c4  [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
14:41:50.0583 0x03c4  p2pimsvc - ok
14:41:50.0599 0x03c4  [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
14:41:50.0630 0x03c4  p2psvc - ok
14:41:50.0630 0x03c4  [ 13B175715A4391E4E5D2AB2EBC8CDBB5, 12BA91A586C5A31FBECEB2D4842E52F79EDD3E2AD4DB169C902B9A120AEC0201 ] Parport        C:\WINDOWS\System32\drivers\parport.sys
14:41:50.0645 0x03c4  Parport - ok
14:41:50.0661 0x03c4  [ 428B9FAFB0EE6EF66EAAB7B49A96487A, 90892AC924B529B86B42D011B2B2F0556E204650C890FDACABD8051AD6EDB631 ] partmgr        C:\WINDOWS\system32\drivers\partmgr.sys
14:41:50.0661 0x03c4  partmgr - ok
14:41:50.0677 0x03c4  [ 8B4697BC25D193DEFE9B98F8C3D49BFF, A3A6ED2B55AD11931708FF9A84437B7EA9A9E37CA29100DD6C002853223D79C0 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
14:41:50.0708 0x03c4  PcaSvc - ok
14:41:50.0724 0x03c4  [ 7B6C0AFE5029A791F23B03EB13194797, E175EF1248ABD178A3C54D2CA910D2F3B7B1AB07A79CB88A383307EC1876C7A0 ] pci            C:\WINDOWS\system32\drivers\pci.sys
14:41:50.0739 0x03c4  pci - ok
14:41:50.0739 0x03c4  [ C447CDA030A3415711E4E940D2E9B399, 292888AE9D44013D8B12BB1D8803988EFF64957DE682B64FDC82E100646390DA ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
14:41:50.0755 0x03c4  pciide - ok
14:41:50.0755 0x03c4  [ 753174DF234EA8BBF732986D5F78FCE7, 6BE93B24DA2161DAE5ECBE393729BD4661F04CD0CDEBEBF6D92E9E212FA89D71 ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
14:41:50.0770 0x03c4  pcmcia - ok
14:41:50.0786 0x03c4  [ 1D05B6DE437515281CD91A16C16529E6, 0FC581E40AF55D916CF428ECF4387C1E909C3361426F1D9F723F9497C9B025D8 ] pcw            C:\WINDOWS\system32\drivers\pcw.sys
14:41:50.0802 0x03c4  pcw - ok
14:41:50.0802 0x03c4  [ F5F1A092463D6E46E71CC709A65403D1, 9EEB499D54842667B4ECF1036E28926C8AD20515333373D2965C57BC2C7EAD4C ] pdc            C:\WINDOWS\system32\drivers\pdc.sys
14:41:50.0817 0x03c4  pdc - ok
14:41:50.0833 0x03c4  [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
14:41:50.0864 0x03c4  PEAUTH - ok
14:41:50.0864 0x03c4  [ CD9BA1C279BE0E92E971C2B45A7F3D9B, EC6546868718771EE45D07E9E856E5F33DD4339C1115E4479D7DEF4394D141D0 ] percsas2i      C:\WINDOWS\system32\drivers\percsas2i.sys
14:41:50.0880 0x03c4  percsas2i - ok
14:41:50.0895 0x03c4  [ 6D5EA79E82A48B181E18C2C39416E8C8, 4F5EF24FFFABB82B1E9D98DE3275508D458589F729C4976FDB3C2EC51549D414 ] percsas3i      C:\WINDOWS\system32\drivers\percsas3i.sys
14:41:50.0895 0x03c4  percsas3i - ok
14:41:50.0930 0x03c4  [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
14:41:50.0964 0x03c4  PerfHost - ok
14:41:50.0980 0x03c4  [ 1206779B445417A29B33FCC7230CD28C, FCC61CF4F27F0585F267D37324CBCDE2DE20C3EB34E87256F59997F0984C8EDE ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll

joe120 30.06.2018 13:48
Teil 2

Code:
14:41:51.0026 0x03c4  PhoneSvc - ok
14:41:51.0026 0x03c4  [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
14:41:51.0058 0x03c4  PimIndexMaintenanceSvc - ok
14:41:51.0089 0x03c4  [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla            C:\WINDOWS\system32\pla.dll
14:41:51.0151 0x03c4  pla - ok
14:41:51.0167 0x03c4  [ DBD6E8A5C358AAA3B4900EFD5CF94CC8, C8261CBE358562B3F31ADA0567723E0118A8687DFC8939FABC65E61C38BFE20B ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
14:41:51.0183 0x03c4  PlugPlay - ok
14:41:51.0183 0x03c4  [ E8BE4041A69023B6A4D1096EE8436347, 133BAA21852D077EA600F0A09C112F6511ACB792757472891E71185E94135D5B ] pmem            C:\WINDOWS\System32\drivers\pmem.sys
14:41:51.0198 0x03c4  pmem - ok
14:41:51.0214 0x03c4  [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM          C:\WINDOWS\System32\drivers\pnpmem.sys
14:41:51.0214 0x03c4  PNPMEM - ok
14:41:51.0230 0x03c4  [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg    C:\WINDOWS\system32\pnrpauto.dll
14:41:51.0245 0x03c4  PNRPAutoReg - ok
14:41:51.0245 0x03c4  [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc        C:\WINDOWS\system32\pnrpsvc.dll
14:41:51.0276 0x03c4  PNRPsvc - ok
14:41:51.0292 0x03c4  [ 9744ADAF8DD679D64A33D828FABA39E1, AE820E529697A2F308E6A24127B3D4A7F02C406DA46A6CB65243EC3F6B400950 ] PolicyAgent    C:\WINDOWS\System32\ipsecsvc.dll
14:41:51.0323 0x03c4  PolicyAgent - ok
14:41:51.0323 0x03c4  [ F39D3876C731BB01BFE8F574188837C8, 51CB5E89397D6A150A05BDD53CC9B90B419A040BE1828C2E7BBD6684FE371588 ] Power          C:\WINDOWS\system32\umpo.dll
14:41:51.0355 0x03c4  Power - ok
14:41:51.0355 0x03c4  [ 1FB09FD846D5030B82EB345E9970A105, 871D38DD966EDD919B2E0C51125E1834A15A0222E2452605988BFD7E7B37C5C1 ] PptpMiniport    C:\WINDOWS\System32\drivers\raspptp.sys
14:41:51.0370 0x03c4  PptpMiniport - ok
14:41:51.0448 0x03c4  [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify    C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
14:41:51.0573 0x03c4  PrintNotify - ok
14:41:51.0573 0x03c4  [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll
14:41:51.0605 0x03c4  PrintWorkflowUserSvc - ok
14:41:51.0605 0x03c4  [ E0E55CDA29C80A9520FCFC78D7F8A73D, 9DE15A73643D71183E568F8F4DD8776D935786BE46F15BFE2DFD607378FC9E58 ] Processor      C:\WINDOWS\System32\drivers\processr.sys
14:41:51.0620 0x03c4  Processor - ok
14:41:51.0651 0x03c4  [ 2FFBADAE8E9BDB3ED9EEAC115FF2C81D, E965445CB6FCACBB805CEFEBB137BEFFCA29075A1A9FDBC4736D8A789E594363 ] ProductAgentService C:\Program Files\Bitdefender Agent\ProductAgentService.exe
14:41:51.0683 0x03c4  ProductAgentService - ok
14:41:51.0698 0x03c4  [ C974AC54A9D34AF4899E98ECC1784E03, C71B76743AAF1E8490204F7B8204C4B98BD2BFDEE159EEA42A28A23300D3B87C ] ProfSvc        C:\WINDOWS\system32\profsvc.dll
14:41:51.0730 0x03c4  ProfSvc - ok
14:41:51.0730 0x03c4  [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys
14:41:51.0745 0x03c4  Psched - ok
14:41:51.0761 0x03c4  [ 29F12CD3F77B65C7E37F8517395B13D2, 690517756A21B3DE4CF4A027AA712FC62DB6F5F2E89B4D2DE220A29C4A36878B ] PushToInstall  C:\WINDOWS\system32\PushToInstall.dll
14:41:51.0776 0x03c4  PushToInstall - ok
14:41:51.0792 0x03c4  [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE          C:\WINDOWS\system32\qwave.dll
14:41:51.0823 0x03c4  QWAVE - ok
14:41:51.0823 0x03c4  [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
14:41:51.0839 0x03c4  QWAVEdrv - ok
14:41:51.0839 0x03c4  [ 0FFABEB2D06CD74DDE0BCA510EEAEEBC, 8598F39D312754C92A3776104D596F0C0312712D934B9994B2711F95FA6FE0AE ] Ramdisk        C:\WINDOWS\system32\DRIVERS\ramdisk.sys
14:41:51.0855 0x03c4  Ramdisk - ok
14:41:51.0855 0x03c4  [ B834761352403111D0113284D8736025, 444D05D5F4CED956AFE48CA29CD59420BDB2B14336D19BE2A28612A851EACF4E ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:41:51.0870 0x03c4  RasAcd - ok
14:41:51.0886 0x03c4  [ FA99CE309B66586A0AA6EF9CFF7BC467, 4684EB05828C2153FE94468E7A9A75D8C81F90E700B437C5990BC9451AD39AC7 ] RasAgileVpn    C:\WINDOWS\System32\drivers\AgileVpn.sys
14:41:51.0901 0x03c4  RasAgileVpn - ok
14:41:51.0901 0x03c4  [ C7CCE345D0010B3B9AC5067578436BFE, 4473E7D0492B7F0214576861A6AD90363D7F826B5E0DE15A56E93DA94BBF19E7 ] RasAuto        C:\WINDOWS\System32\rasauto.dll
14:41:51.0933 0x03c4  RasAuto - ok
14:41:51.0933 0x03c4  [ 775ED7E51B58CF9EB415A1DBA540DACF, A3035A8A299D35B7A24A347FB8A2DB6B5892FD2A181D90F64CCD4806EA154395 ] Rasl2tp        C:\WINDOWS\System32\drivers\rasl2tp.sys
14:41:51.0948 0x03c4  Rasl2tp - ok
14:41:51.0964 0x03c4  [ 032D13E37743DA2559E586D5BBDCB895, 16ED38F376826363B0122EF0F6AC33921E3C4F0F3C2DB30BB6211078078C7196 ] RasMan          C:\WINDOWS\System32\rasmans.dll
14:41:52.0026 0x03c4  RasMan - ok
14:41:52.0026 0x03c4  [ E2433A620ABF4083157944E4692C500D, 126CA9F9D38FB4FA312A82FEA24C13D0693407384B1BCD55A0CBEFA8E52E1D8A ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:41:52.0042 0x03c4  RasPppoe - ok
14:41:52.0042 0x03c4  [ EE5D1D51FA74ECCE57CF2DB8F6A417D8, CC295366C60CAECA7CC32903E3A983635B55A5F5FD6E6BC4FEFE997B8154345C ] RasSstp        C:\WINDOWS\System32\drivers\rassstp.sys
14:41:52.0073 0x03c4  RasSstp - ok
14:41:52.0073 0x03c4  [ 5F7027A2F16AFF56DA68D996FAFDAAD8, E1DC1CC818E7ED8B107386CD55EFF38B663FD3F9A2ACDD0919F5AF3591638D1F ] rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:41:52.0105 0x03c4  rdbss - ok
14:41:52.0105 0x03c4  [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
14:41:52.0120 0x03c4  rdpbus - ok
14:41:52.0136 0x03c4  [ 3DE4216324BE32FC3AF7667AE2406EE5, B2E3C47983C58B32E07E251FF729670B5D481249EEDFD3A3EFB0F8734673F1F6 ] RDPDR          C:\WINDOWS\system32\drivers\rdpdr.sys
14:41:52.0167 0x03c4  RDPDR - ok
14:41:52.0167 0x03c4  [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
14:41:52.0183 0x03c4  RdpVideoMiniport - ok
14:41:52.0198 0x03c4  [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
14:41:52.0214 0x03c4  rdyboost - ok
14:41:52.0245 0x03c4  [ 3DCB3FAFE46B9FE41C9065EBBED97724, AEB08C8C1E6AB6181A5F2B540F913B59A1256AF0E6D5355C4AC7DDBA0BF0F20B ] ReFS            C:\WINDOWS\system32\drivers\ReFS.sys
14:41:52.0292 0x03c4  ReFS - ok
14:41:52.0323 0x03c4  [ B76350D40A46DBA17205F8373528FD83, A599A9B1297B5D70632A9EF23E9771BA646672A1B0E323144EDE906CCA172EB7 ] ReFSv1          C:\WINDOWS\system32\drivers\ReFSv1.sys
14:41:52.0355 0x03c4  ReFSv1 - ok
14:41:52.0370 0x03c4  [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
14:41:52.0401 0x03c4  RemoteAccess - ok
14:41:52.0401 0x03c4  [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
14:41:52.0433 0x03c4  RemoteRegistry - ok
14:41:52.0448 0x03c4  [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo      C:\WINDOWS\system32\RDXService.dll
14:41:52.0480 0x03c4  RetailDemo - ok
14:41:52.0495 0x03c4  [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy        C:\WINDOWS\System32\drivers\rhproxy.sys
14:41:52.0511 0x03c4  rhproxy - ok
14:41:52.0511 0x03c4  [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc          C:\WINDOWS\System32\RMapi.dll
14:41:52.0542 0x03c4  RmSvc - ok
14:41:52.0542 0x03c4  [ 3CD63AE6A9A1DE4CD5831AE15221C861, CB8B5FDA48D9D4E5A9F26F67859105E2769AF82B2CA1B0B35D9BFBA611445CC0 ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
14:41:52.0558 0x03c4  RpcEptMapper - ok
14:41:52.0558 0x03c4  [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator      C:\WINDOWS\system32\locator.exe
14:41:52.0589 0x03c4  RpcLocator - ok
14:41:52.0605 0x03c4  [ 107661923943E9DC06ED2713AC5F7753, 2B311E9BD635F1CEB222EF798C5523447AAF63E2331377804884572D7512F299 ] RpcSs          C:\WINDOWS\system32\rpcss.dll
14:41:52.0651 0x03c4  RpcSs - ok
14:41:52.0651 0x03c4  [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys
14:41:52.0683 0x03c4  rspndr - ok
14:41:52.0683 0x03c4  [ AB7C0639DF052528C2CB06D0EAE115EC, 5D709DE453FBC3DD880859D2B11BCB780FEA8C0618AA47622C85BD414EC540BE ] rt640x64        C:\WINDOWS\System32\drivers\rt640x64.sys
14:41:52.0730 0x03c4  rt640x64 - ok
14:41:52.0730 0x03c4  [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap          C:\WINDOWS\System32\drivers\vms3cap.sys
14:41:52.0745 0x03c4  s3cap - ok
14:41:52.0745 0x03c4  [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] SamSs          C:\WINDOWS\system32\lsass.exe
14:41:52.0761 0x03c4  SamSs - ok
14:41:52.0761 0x03c4  [ 04C51BBD8C9F54E5F2C5D831B03B11E3, 15AD9F224CBBCAFB117574F03C6F1C02639928A95BC4533453EBAFB20F7AE671 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
14:41:52.0776 0x03c4  sbp2port - ok
14:41:52.0792 0x03c4  [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
14:41:52.0808 0x03c4  SCardSvr - ok
14:41:52.0823 0x03c4  [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
14:41:52.0839 0x03c4  ScDeviceEnum - ok
14:41:52.0855 0x03c4  [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
14:41:52.0870 0x03c4  scfilter - ok
14:41:52.0886 0x03c4  [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
14:41:52.0933 0x03c4  Schedule - ok
14:41:52.0948 0x03c4  [ 6538E939E55B589AA4F5BC22D35A6B36, 262BB2C6499B1B033E07CD0B8CB9C41122EE9DE52B34F664999B667E1C7CDB0D ] scmbus          C:\WINDOWS\system32\drivers\scmbus.sys
14:41:52.0964 0x03c4  scmbus - ok
14:41:52.0964 0x03c4  [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc    C:\WINDOWS\System32\certprop.dll
14:41:52.0980 0x03c4  SCPolicySvc - ok
14:41:52.0995 0x03c4  [ 495273177E87B0C34D7E431E9254FA23, 61116DA77622F5A0E931F5033C1B870A22AD3438C056FD1F320F857908E4124B ] sdbus          C:\WINDOWS\System32\drivers\sdbus.sys
14:41:53.0011 0x03c4  sdbus - ok
14:41:53.0011 0x03c4  [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd          C:\WINDOWS\System32\drivers\SDFRd.sys
14:41:53.0026 0x03c4  SDFRd - ok
14:41:53.0042 0x03c4  [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
14:41:53.0058 0x03c4  SDRSVC - ok
14:41:53.0073 0x03c4  [ F80D6C03FEA2F7DEE14023B7229DA8C2, B62AFCFCDE9C1BA0A5D80BAAC3D3D95546DB2E532C04C765FF85B27D1CBD5B8D ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
14:41:53.0073 0x03c4  sdstor - ok
14:41:53.0089 0x03c4  [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon        C:\WINDOWS\system32\seclogon.dll
14:41:53.0105 0x03c4  seclogon - ok
14:41:53.0120 0x03c4  [ 927AEFF824C08AD5E22BB27E4A1D50AA, C951AD571A726FA2F6C8DA2CEE528BD5A642780FD128F829E50869BBE8577A16 ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe
14:41:53.0151 0x03c4  SecurityHealthService - ok
14:41:53.0183 0x03c4  [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc        C:\WINDOWS\system32\SEMgrSvc.dll
14:41:53.0230 0x03c4  SEMgrSvc - ok
14:41:53.0230 0x03c4  [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS            C:\WINDOWS\System32\sens.dll
14:41:53.0261 0x03c4  SENS - ok
14:41:53.0276 0x03c4  [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
14:41:53.0339 0x03c4  SensorDataService - ok
14:41:53.0355 0x03c4  [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService  C:\WINDOWS\system32\SensorService.dll
14:41:53.0401 0x03c4  SensorService - ok
14:41:53.0417 0x03c4  [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
14:41:53.0448 0x03c4  SensrSvc - ok
14:41:53.0448 0x03c4  [ C5CF2941AA9E417B3A224601255C002E, 31E2988E13D9BB3630980E8B71AE5FB244EFB15970623C1FE76B7ACA25A4A2F2 ] SerCx          C:\WINDOWS\system32\drivers\SerCx.sys
14:41:53.0464 0x03c4  SerCx - ok
14:41:53.0464 0x03c4  [ B9C113BD9FCA4F3E23F03708A7DA07CC, 0A070BDDA956B1869D58A173B56ABA011E1F7A3C5D258343D0AEDC1EC87F4B53 ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
14:41:53.0480 0x03c4  SerCx2 - ok
14:41:53.0480 0x03c4  [ 1845736FA47A1DFBBB642FE21095B4E0, 057E8750E8695F6B72A33BBF1C5CFCCD6BFC992E6B99A487A07F5A4921004791 ] Serenum        C:\WINDOWS\System32\drivers\serenum.sys
14:41:53.0495 0x03c4  Serenum - ok
14:41:53.0511 0x03c4  [ F1BABF50469041797ED9928C31318832, 1A8C75F4696D4D2AA47EA33BC96069A394466953EBC3CFB2B3D6B961B8B5875A ] Serial          C:\WINDOWS\System32\drivers\serial.sys
14:41:53.0526 0x03c4  Serial - ok
14:41:53.0526 0x03c4  [ 340116988930B07629A2D0C2B380A365, EBAAC3DF2E8DABFB477340E79FC8E3A8B74340C389D73E51D64A97A332664113 ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
14:41:53.0542 0x03c4  sermouse - ok
14:41:53.0558 0x03c4  [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
14:41:53.0589 0x03c4  SessionEnv - ok
14:41:53.0605 0x03c4  [ 77FF0A5BA023D8E8C82EACCD54EA5C78, A4A88A550419C347E369DDD29D4EB5C1BC4D980FBA9C655DF787A166FCA2497D ] sfloppy        C:\WINDOWS\System32\drivers\sfloppy.sys
14:41:53.0620 0x03c4  sfloppy - ok
14:41:53.0620 0x03c4  [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent      C:\WINDOWS\system32\drivers\SgrmAgent.sys
14:41:53.0636 0x03c4  SgrmAgent - ok
14:41:53.0636 0x03c4  [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker      C:\WINDOWS\system32\SgrmBroker.exe
14:41:53.0651 0x03c4  SgrmBroker - ok
14:41:53.0667 0x03c4  [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
14:41:53.0714 0x03c4  SharedAccess - ok
14:41:53.0730 0x03c4  [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll
14:41:53.0761 0x03c4  SharedRealitySvc - ok
14:41:53.0776 0x03c4  [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:41:53.0823 0x03c4  ShellHWDetection - ok
14:41:53.0823 0x03c4  [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
14:41:53.0855 0x03c4  shpamsvc - ok
14:41:53.0855 0x03c4  [ 1443CF919C2A3207CE7724E0A31686A2, 3F0ECC565F67638A57A23BF69C399AD638DA9F81F1660CF3E027DC057E990EA4 ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
14:41:53.0870 0x03c4  SiSRaid2 - ok
14:41:53.0870 0x03c4  [ C0B1EAD6CC127CAE4E84EBF54105B3B8, 86F5C937D9DC61F262FF00B45249162F4087B6A1CA0FC24EF7950E4E77FEF26B ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
14:41:53.0886 0x03c4  SiSRaid4 - ok
14:41:53.0886 0x03c4  [ B7C6144293CFAD2DEDCD022C44735DC2, 75F26A8F43EED45764D50B2CCE44C453BFBBD0FA56B6AF1F2B4B8B3665C3961E ] smphost        C:\WINDOWS\System32\smphost.dll
14:41:53.0901 0x03c4  smphost - ok
14:41:53.0917 0x03c4  [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter      C:\WINDOWS\system32\SmsRouterSvc.dll
14:41:53.0948 0x03c4  SmsRouter - ok
14:41:53.0964 0x03c4  [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
14:41:53.0980 0x03c4  SNMPTRAP - ok
14:41:54.0026 0x03c4  [ 9BCC1B7588AEC92E65644844D52C9EA6, 8C8AB967A0BB55281844F7072DDAC95A6D34EC3F41788943065797228A9194AC ] Soda PDF Desktop C:\Program Files\Soda PDF Desktop\ws.exe
14:41:54.0120 0x03c4  Soda PDF Desktop - ok
14:41:54.0136 0x03c4  [ 90357052C2E44AEF1E7A883D83165A45, 62543B40705256601FA5665B15268DA943384B71561532EA0CB8AB6CD8102605 ] Soda PDF Desktop Creator C:\Program Files\Soda PDF Desktop\creator-ws.exe
14:41:54.0183 0x03c4  Soda PDF Desktop Creator - ok
14:41:54.0198 0x03c4  [ 5E70A578D27BCC7E37E16055669F2836, 7713A750902E1B9BA70C9F9EE8977E7C591AAE80D155657370E63FA2CEDACCAC ] spaceport      C:\WINDOWS\system32\drivers\spaceport.sys
14:41:54.0214 0x03c4  spaceport - ok
14:41:54.0229 0x03c4  [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys
14:41:54.0245 0x03c4  SpatialGraphFilter - ok
14:41:54.0245 0x03c4  [ D05EB2BB52EC6B665D1631EC33241B80, 29598FC180020515254A9FAE7BE8077549C656EDB425059691007EEC0F9346F9 ] SpbCx          C:\WINDOWS\system32\drivers\SpbCx.sys
14:41:54.0261 0x03c4  SpbCx - ok
14:41:54.0276 0x03c4  [ 52A4B8C04C345434C974B9A949521BAE, 5FAA7E1BECD6FA28E4BA53E9B3301328B6E8516867BD7D76202A73B8CD530BC5 ] spectrum        C:\WINDOWS\system32\spectrum.exe
14:41:54.0323 0x03c4  spectrum - ok
14:41:54.0339 0x03c4  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\WINDOWS\syswow64\speedfan.sys
14:41:54.0354 0x03c4  speedfan - ok
14:41:54.0370 0x03c4  [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler        C:\WINDOWS\System32\spoolsv.exe
14:41:54.0401 0x03c4  Spooler - ok
14:41:54.0495 0x03c4  [ 95EBCA251177AD13238FF0DC15C3202C, A7AAB09BAA42562D3638664FEE899B47BF93AEFC94EC112E9E433A3F093909A8 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
14:41:54.0604 0x03c4  sppsvc - ok
14:41:54.0620 0x03c4  [ 3EB4023AC700182D84CB6761D3727394, 6993C127F4AD8B899E6A285EDB849807F522D9B0A0018E5436114F527EC8B1F1 ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
14:41:54.0667 0x03c4  srv2 - ok
14:41:54.0667 0x03c4  [ 93DF24D0C33F2894429D4180145CBDA7, 763F05818AD5F348887C297FA14FB77B6F54B9A5C3C1D70CF2B7B0692961950C ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
14:41:54.0698 0x03c4  srvnet - ok
14:41:54.0698 0x03c4  [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
14:41:54.0729 0x03c4  SSDPSRV - ok
14:41:54.0745 0x03c4  [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent      C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
14:41:54.0776 0x03c4  ssh-agent - ok
14:41:54.0776 0x03c4  [ C7DF51E24DD853E7E2D3C0BCDCE57D6C, D1BFDC89F00C5B8388EB233290B6D540C246D0267B1C192C51645004A8CD8C62 ] SstpSvc        C:\WINDOWS\system32\sstpsvc.dll
14:41:54.0808 0x03c4  SstpSvc - ok
14:41:54.0823 0x03c4  [ 7DB9E612A2742ACEAB080B882E83141C, FFD1FA36E732F55223F3F4B5F845331DBB3073B023C2C5BF51A0E7680DEE7FA7 ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
14:41:54.0854 0x03c4  ss_conn_service - ok
14:41:54.0933 0x03c4  [ B9E4174DFBDCA9979A92D17C2E67890E, 1717A6B7CADDDFCA8879B293C29617E194437E049308BCEDF3D07007C41FE39F ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
14:41:55.0058 0x03c4  StateRepository - ok
14:41:55.0104 0x03c4  [ FC2739DA7506D75D9AF420B6F63C2D9C, 2B99B55082CDED0BF3D38347E844A8AF5CFF79DDB39FF00F360C16BBDB6323B0 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
14:41:55.0136 0x03c4  Steam Client Service - ok
14:41:55.0151 0x03c4  [ DA82903F26AE12034CC5229F61098948, E7B5CA27C864BE95EC109D0692F44BE9F5F56AB6173AB1811F4E83A3EB5F26CA ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
14:41:55.0167 0x03c4  stexstor - ok
14:41:55.0167 0x03c4  [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc          C:\WINDOWS\System32\wiaservc.dll
14:41:55.0214 0x03c4  stisvc - ok
14:41:55.0214 0x03c4  [ F2D1983C7BEF5E3AB8978A7796C59A75, 39B2005F7CCEC95D2F67AE5F69C3768FEFA04AABC0723BAD8A986A036AF0629B ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
14:41:55.0229 0x03c4  storahci - ok
14:41:55.0229 0x03c4  [ 76C9E2AA3400C22FC7091AD2F2999F95, 0015CF42CBA603448DFD85909D5047D5F9BE9153972C3832B1CF4B92A6BF0D01 ] storflt        C:\WINDOWS\system32\drivers\vmstorfl.sys
14:41:55.0245 0x03c4  storflt - ok
14:41:55.0261 0x03c4  [ 701078F20919BD635EA25F691880F651, 6D56027007EF92A72C20B9B8024FDD96E03E2B8746F39D57BD1F7CAD2FC80DB2 ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
14:41:55.0276 0x03c4  stornvme - ok
14:41:55.0276 0x03c4  [ 47CE4211A40C2C023A8138E18757F3D2, D684D2A7DECC23418A685358EA9B4F6EB3A68C690D5ED8E82F4B4639DF022775 ] storqosflt      C:\WINDOWS\system32\drivers\storqosflt.sys
14:41:55.0292 0x03c4  storqosflt - ok
14:41:55.0323 0x03c4  [ DEA7BB6D3724F2FD9E61ED085E69DFA7, 5047F184894E79C31739D3C9632E43E8D2ABD70AA674DE82D6D2D0FDA137BF3F ] StorSvc        C:\WINDOWS\system32\storsvc.dll
14:41:55.0370 0x03c4  StorSvc - ok
14:41:55.0370 0x03c4  [ 25D7B79F80F3C2CD97D797C14D470165, 5425F98A66741BB2BC7BDC8B21C3AF859A503596D983010883BF5BE4FD999D9D ] storufs        C:\WINDOWS\system32\drivers\storufs.sys
14:41:55.0386 0x03c4  storufs - ok
14:41:55.0386 0x03c4  [ 1FC7B7BE58A29DF27F5E6F6C2F061FA3, D8CD6D1BD0ACA4B851DBC85F898CB5DA8715C5AB3D62D7B0D6BBFEADC0382A8E ] storvsc        C:\WINDOWS\system32\drivers\storvsc.sys
14:41:55.0401 0x03c4  storvsc - ok
14:41:55.0401 0x03c4  [ 0B154B033AD7F9215DED11E0CFC80A25, 383D7BF361D75A3B78E4C8E3F616E487FA6172F860AE364B1AC73F75BE38944F ] svsvc          C:\WINDOWS\system32\svsvc.dll
14:41:55.0433 0x03c4  svsvc - ok
14:41:55.0448 0x03c4  [ 54255DF324C621A97220EBFA832237D2, 27BAB2018BE66C67D6C2BBAA8E849E89B4150B8C81E7350DB0A1D14BEEB965D9 ] swenum          C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys
14:41:55.0464 0x03c4  swenum - ok
14:41:55.0479 0x03c4  [ B3C113C9B784A4D296C7A7BA515F74BF, 0D20281B8AA9ED6C89E10122F3A153C2E21464686E5A3D2F907224584E6B5BCF ] swprv          C:\WINDOWS\System32\swprv.dll
14:41:55.0511 0x03c4  swprv - ok
14:41:55.0511 0x03c4  [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys
14:41:55.0526 0x03c4  Synth3dVsc - ok
14:41:55.0558 0x03c4  [ 62492FAAC26223E8A21E79A2331A3F10, 164C2650EAD344B6DFF95B8275436231E7994B7F06ACB3DA19054849BED61FD2 ] SysMain        C:\WINDOWS\system32\sysmain.dll
14:41:55.0589 0x03c4  SysMain - ok
14:41:55.0604 0x03c4  [ 607143646829B70F7C60F4CF499AD41D, 00746AA3D0ECE27BC04FCAB4955A199C5E040F850D0129865EC8F03DD202EF7A ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
14:41:55.0636 0x03c4  SystemEventsBroker - ok
14:41:55.0636 0x03c4  [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
14:41:55.0667 0x03c4  TabletInputService - ok
14:41:55.0667 0x03c4  [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
14:41:55.0698 0x03c4  TapiSrv - ok
14:41:55.0745 0x03c4  [ 25D436DFEEF7EDAD08F1594C68A93500, B4B10450EF935C6F5B004A91457FFA583B1AF6F23D91784911B719E523280FE7 ] Tcpip          C:\WINDOWS\system32\drivers\tcpip.sys
14:41:55.0823 0x03c4  Tcpip - ok
14:41:55.0870 0x03c4  [ 25D436DFEEF7EDAD08F1594C68A93500, B4B10450EF935C6F5B004A91457FFA583B1AF6F23D91784911B719E523280FE7 ] Tcpip6          C:\WINDOWS\system32\drivers\tcpip.sys
14:41:55.0933 0x03c4  Tcpip6 - ok
14:41:55.0948 0x03c4  [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
14:41:55.0964 0x03c4  tcpipreg - ok
14:41:55.0979 0x03c4  [ 16071C42E21CE3378FA449322FB9AB1D, 44CA7FD91275546492EEF0A59261E2B1C924613515D45EFD2EF0442023B2CBE5 ] tdx            C:\WINDOWS\system32\DRIVERS\tdx.sys
14:41:55.0995 0x03c4  tdx - ok
14:41:55.0995 0x03c4  [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
14:41:56.0011 0x03c4  terminpt - ok
14:41:56.0026 0x03c4  [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService    C:\WINDOWS\System32\termsrv.dll
14:41:56.0073 0x03c4  TermService - ok
14:41:56.0089 0x03c4  [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes          C:\WINDOWS\system32\themeservice.dll
14:41:56.0104 0x03c4  Themes - ok
14:41:56.0120 0x03c4  [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
14:41:56.0136 0x03c4  TieringEngineService - ok
14:41:56.0151 0x03c4  [ 8BF5E2FD72E939CF68D617E273034793, EE27D070E1C4EFE902BE173C5561F5601499F835762278CC1E5987886BD8A4D1 ] TimeBrokerSvc  C:\WINDOWS\System32\TimeBrokerServer.dll
14:41:56.0167 0x03c4  TimeBrokerSvc - ok
14:41:56.0198 0x03c4  [ 9D380FB0FE000DF1C22C2E31C4DA3163, 2E1C4ED49513E495403918062B760C51EE5C9A16063AE2D148B4326A4BC373F4 ] TokenBroker    C:\WINDOWS\System32\TokenBroker.dll
14:41:56.0261 0x03c4  TokenBroker - ok
14:41:56.0276 0x03c4  [ BF705C64C1522646BF00E72393DC5D6F, 9D60CB5DFBD400C59C33C5221040FBBFE1A18870E75E176A6BC7D352783B56A7 ] TPM            C:\WINDOWS\System32\drivers\tpm.sys
14:41:56.0292 0x03c4  TPM - ok
14:41:56.0292 0x03c4  [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
14:41:56.0308 0x03c4  TrkWks - ok
14:41:56.0323 0x03c4  [ 4578046C54A954C917BB393B70BA0AEB, 2DFE9DE656B415CF7D81F583F33A20A74CD54C07DB8C3196AA2102431F42F74F ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
14:41:56.0339 0x03c4  TrustedInstaller - ok
14:41:56.0354 0x03c4  [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
14:41:56.0370 0x03c4  TsUsbFlt - ok
14:41:56.0370 0x03c4  [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD        C:\WINDOWS\System32\drivers\TsUsbGD.sys
14:41:56.0386 0x03c4  TsUsbGD - ok
14:41:56.0401 0x03c4  [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel          C:\WINDOWS\system32\drivers\tunnel.sys
14:41:56.0417 0x03c4  tunnel - ok
14:41:56.0417 0x03c4  [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll
14:41:56.0448 0x03c4  tzautoupdate - ok
14:41:56.0448 0x03c4  [ BDFACE024EFF2398214797143AD76C87, EF9B6CB1F6EAE4786BBDE1E0946BECC5BD2AA493FC32A8F779A757BA57238EC9 ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
14:41:56.0464 0x03c4  UASPStor - ok
14:41:56.0464 0x03c4  [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101      C:\WINDOWS\system32\Drivers\UcmCx.sys
14:41:56.0495 0x03c4  UcmCx0101 - ok
14:41:56.0495 0x03c4  [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
14:41:56.0511 0x03c4  UcmTcpciCx0101 - ok
14:41:56.0526 0x03c4  [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi        C:\WINDOWS\System32\drivers\UcmUcsi.sys
14:41:56.0542 0x03c4  UcmUcsi - ok
14:41:56.0542 0x03c4  [ EE62D07172014C8BBE7C80A3AAF56E8F, C93DFEB0179129AE95968BA1E1E68D71504D1288FE1A1106EB9A2EAA04AEE8E1 ] Ucx01000        C:\WINDOWS\system32\drivers\ucx01000.sys
14:41:56.0558 0x03c4  Ucx01000 - ok
14:41:56.0573 0x03c4  [ 12E2B6B642360E66396502B62B048694, C9AC86BF767ED4ACE0F58BA3720369A2758BA154AFFE10CAAD5A2C4C259BA50A ] UdeCx          C:\WINDOWS\system32\drivers\udecx.sys
14:41:56.0589 0x03c4  UdeCx - ok
14:41:56.0589 0x03c4  [ 6A442723D4D05D9F15D24C9942CDA00D, 4A60D6CF7214A3891877AC6E5A49AE49D056567162D6355C0D893510F0241DA7 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
14:41:56.0620 0x03c4  udfs - ok
14:41:56.0620 0x03c4  [ D30AF38971B6670C222250AC2CBB6227, 52C1C7AC29D06C701DA0E2772294CED0C1790EC7FCBD5074238B54BEB951E9D0 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
14:41:56.0636 0x03c4  UEFI - ok
14:41:56.0636 0x03c4  [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys
14:41:56.0667 0x03c4  Ufx01000 - ok
14:41:56.0667 0x03c4  [ 78B5C069C9AA1463ACC833FD7E2A3BD5, A44BAB6AB5E071537BD37A26DAF6D0D69BBFFFF686C183BFAAB04286DD3B81BB ] UfxChipidea    C:\WINDOWS\System32\drivers\UfxChipidea.sys
14:41:56.0683 0x03c4  UfxChipidea - ok
14:41:56.0683 0x03c4  [ 533BF4F456A1C6E7581E8C0A4EC59300, E5AE7EB4A8E6CE410F465C48F102797806172B5881C2CF570A9851CCDFE656FD ] ufxsynopsys    C:\WINDOWS\System32\drivers\ufxsynopsys.sys
14:41:56.0698 0x03c4  ufxsynopsys - ok
14:41:56.0714 0x03c4  [ 360FEE6F687D98EFFE46A5433FE6182E, 1A35569DC29F45F78D705BCEDE850CAF86FD27D6253977497EB3B000CAAE0B27 ] umbus          C:\WINDOWS\System32\drivers\umbus.sys
14:41:56.0729 0x03c4  umbus - ok
14:41:56.0729 0x03c4  [ F6F1A9D91F684AA02951B96EE8127DAE, 351139331041BC123C9FEE3A5CE4965AFC4CDCA488080338D98C5EB85D5843D4 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
14:41:56.0745 0x03c4  UmPass - ok
14:41:56.0762 0x03c4  [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
14:41:56.0778 0x03c4  UmRdpService - ok
14:41:56.0809 0x03c4  [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc    C:\WINDOWS\System32\unistore.dll
14:41:56.0871 0x03c4  UnistoreSvc - ok
14:41:56.0871 0x03c4  [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost        C:\WINDOWS\System32\upnphost.dll
14:41:56.0918 0x03c4  upnphost - ok
14:41:56.0918 0x03c4  [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea    C:\WINDOWS\System32\drivers\urschipidea.sys
14:41:56.0934 0x03c4  UrsChipidea - ok
14:41:56.0934 0x03c4  [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys
14:41:56.0949 0x03c4  UrsCx01000 - ok
14:41:56.0949 0x03c4  [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys    C:\WINDOWS\System32\drivers\urssynopsys.sys
14:41:56.0965 0x03c4  UrsSynopsys - ok
14:41:56.0965 0x03c4  [ C7AD46F101A681B0F4D7F15534A5FF04, 20380A613A3E476A6282BC642534328AC35E24A03D34D6A2DF1C5468912C72D7 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
14:41:56.0981 0x03c4  usbaudio - ok
14:41:56.0996 0x03c4  [ B7211393225AB05324C52BA47B31FEB4, 3FFB7F1C1CA5001B95026D30ECD1991747DDAFFBE3B4929CAEDFA90E169A28AE ] usbccgp        C:\WINDOWS\System32\drivers\usbccgp.sys
14:41:57.0012 0x03c4  usbccgp - ok
14:41:57.0012 0x03c4  [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
14:41:57.0028 0x03c4  usbcir - ok
14:41:57.0043 0x03c4  [ 4269DE1EB8029D55B3BB3A8A330FCF90, 5D9081A07F91AF704D27EEE60516D6E1E0A106D1656CEF0C5C50E51C23E17F61 ] usbehci        C:\WINDOWS\System32\drivers\usbehci.sys
14:41:57.0059 0x03c4  usbehci - ok
14:41:57.0074 0x03c4  [ D67AABAE0C9EBAC9BBA2E20E0AF52EF1, FE51895BB81E5320F66C433378469092D39F325D310543AFE28A5603FA9B4F08 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
14:41:57.0090 0x03c4  usbhub - ok
14:41:57.0106 0x03c4  [ D1F6348F41DFCE25AA918E38F02E80FD, 1ED0F3358D0C245C7160F3E9B5A5C5927488BE69468C51E5F329801EE844A476 ] USBHUB3        C:\WINDOWS\System32\drivers\UsbHub3.sys
14:41:57.0137 0x03c4  USBHUB3 - ok
14:41:57.0137 0x03c4  [ A547E7B1B3FB2228259AA85AC7E82698, AB18BBE30A2D149A0E10621DC8497A72DFB841B09F4E4B47FED21843C0F88D92 ] usbohci        C:\WINDOWS\System32\drivers\usbohci.sys
14:41:57.0153 0x03c4  usbohci - ok
14:41:57.0153 0x03c4  [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
14:41:57.0168 0x03c4  usbprint - ok
14:41:57.0184 0x03c4  [ 555DE99E30E6A6EF37137F8325B30068, B78B44883A3E524DFEC13B72AFFDF06FD446EFB12061593D8247C0B92D558B8A ] usbscan        C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:41:57.0199 0x03c4  usbscan - ok
14:41:57.0215 0x03c4  [ 45A9E57185B79420EFEA5A4AED655809, 91D4BDBBAF1D06C404AC926357C3F20D780CF5C858B223930D69CFB17D81F3D3 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
14:41:57.0231 0x03c4  usbser - ok
14:41:57.0231 0x03c4  [ CEF7527514EC49EBE0C760D784643EF0, 2A4E49C5C906339C31F0A646E53773297F4B4CEAFD94CE653C37556AE243E104 ] USBSTOR        C:\WINDOWS\System32\drivers\USBSTOR.SYS
14:41:57.0246 0x03c4  USBSTOR - ok
14:41:57.0246 0x03c4  [ A4124036C4FD2B94C6157C4588EEB4E3, 595C8BFB5E63AEA2F7DF2745F7C7CE45938B091470C921E3064E766A0E12851F ] usbuhci        C:\WINDOWS\System32\drivers\usbuhci.sys
14:41:57.0278 0x03c4  usbuhci - ok
14:41:57.0278 0x03c4  [ 9F4CCFCD4B4C6008C940510E43D54AEC, CD6082E95EBA618490A2A97E258875440B3440E721B21E81608804B90DEF0D20 ] USBXHCI        C:\WINDOWS\System32\drivers\USBXHCI.SYS
14:41:57.0309 0x03c4  USBXHCI - ok
14:41:57.0340 0x03c4  [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc    C:\WINDOWS\System32\userdataservice.dll
14:41:57.0403 0x03c4  UserDataSvc - ok
14:41:57.0418 0x03c4  [ B8D1D74FEF1F190BA4DA7E7A72D5D9CE, F467F39EE09DDC7750BF42C3FF317E0DC324897589268B4C7B63F8E176445820 ] UserManager    C:\WINDOWS\System32\usermgr.dll
14:41:57.0465 0x03c4  UserManager - ok
14:41:57.0496 0x03c4  [ C6C17BECA29DB0D6F6FF6D45EB65FF80, EAF77B7A92E1C86E046C1570521F2389B804AADDB52C860DC2124340378FF26B ] UsoSvc          C:\WINDOWS\system32\usocore.dll
14:41:57.0559 0x03c4  UsoSvc - ok
14:41:57.0574 0x03c4  [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc          C:\WINDOWS\System32\vac.dll
14:41:57.0590 0x03c4  VacSvc - ok
14:41:57.0606 0x03c4  [ 317340CD278A374BCEF6A30194557227, 593DA57CDD02F4CC3A5125CE5707C222DD922F2936D16492BA21AC6C345EC6B0 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
14:41:57.0606 0x03c4  VaultSvc - ok
14:41:57.0621 0x03c4  [ 8DCB7E5A9497C030484E5AD9E541B85C, 1170E5C190E2B6F2966076EFF11B8476CC03D924F43144C2936E11314A89ACA6 ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
14:41:57.0629 0x03c4  vdrvroot - ok
14:41:57.0645 0x03c4  [ 4940B49502323905B66039D0D1AB4613, 963BFD563B5A79F0AE81EB9708E85901A545545D4F25FCF37A17295EE9EDA514 ] vds            C:\WINDOWS\System32\vds.exe
14:41:57.0679 0x03c4  vds - ok
14:41:57.0696 0x03c4  [ 5C25C1A89650C95D15F7988D71487B08, EC42E586309B46CF51EC5DC00362ABA82A503545292CACE7B3D23BB0F5E687B9 ] VerifierExt    C:\WINDOWS\system32\drivers\VerifierExt.sys
14:41:57.0711 0x03c4  VerifierExt - ok
14:41:57.0730 0x03c4  [ E8E5F722A699EF037891D735CB588F8D, 66D0C76C668DBD5BCE2B30B1936486EC21455BE293203C41B8E3B031ED012A22 ] vhdmp          C:\WINDOWS\System32\drivers\vhdmp.sys
14:41:57.0761 0x03c4  vhdmp - ok
14:41:57.0763 0x03c4  [ 209A34F4BE17B0A56328C86F8CCC5577, 58F8A57233FC7DD220A6EF64FD48C2A5756B21AB30644FF6919847D13FF44F16 ] vhf            C:\WINDOWS\System32\drivers\vhf.sys
14:41:57.0779 0x03c4  vhf - ok
14:41:57.0779 0x03c4  [ 52290E2E0BFAE61D622AA8B9B3A4CB4E, 7716D49D2A3580F828C64B18BD1554828062DF7EDFCD8D3D29E43BB020E6C350 ] vhidmini        C:\WINDOWS\System32\drivers\vhidmini.sys
14:41:57.0811 0x03c4  vhidmini - ok
14:41:57.0811 0x03c4  [ 44F4ED5D8FC0CFA7C3755D44C575D994, CB52418888916D185C74992BDD7A26E13A1C60F83E5FF664A3DE00424C1C4BC6 ] vmbus          C:\WINDOWS\system32\drivers\vmbus.sys
14:41:57.0832 0x03c4  vmbus - ok
14:41:57.0832 0x03c4  [ E2D57FB1A62F0BB7F70570806A09CE2B, DCF1699488D913C9E94E2C74CD8606BDAFF69B995B2E3B7DE7F2E9C4D2E6ECF2 ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
14:41:57.0847 0x03c4  VMBusHID - ok
14:41:57.0863 0x03c4  [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid          C:\WINDOWS\System32\drivers\vmgid.sys
14:41:57.0883 0x03c4  vmgid - ok
14:41:57.0883 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
14:41:57.0915 0x03c4  vmicguestinterface - ok
14:41:57.0929 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat  C:\WINDOWS\System32\icsvc.dll
14:41:57.0946 0x03c4  vmicheartbeat - ok
14:41:57.0946 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
14:41:57.0979 0x03c4  vmickvpexchange - ok
14:41:57.0979 0x03c4  [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv        C:\WINDOWS\System32\icsvcext.dll
14:41:58.0011 0x03c4  vmicrdv - ok
14:41:58.0031 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll
14:41:58.0046 0x03c4  vmicshutdown - ok
14:41:58.0062 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll
14:41:58.0081 0x03c4  vmictimesync - ok
14:41:58.0081 0x03c4  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession  C:\WINDOWS\System32\icsvc.dll
14:41:58.0100 0x03c4  vmicvmsession - ok
14:41:58.0116 0x03c4  [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss        C:\WINDOWS\System32\icsvcext.dll
14:41:58.0131 0x03c4  vmicvss - ok
14:41:58.0147 0x03c4  [ 708410755721F94FC8939673893C2E2B, C8516DDE667614545DA076A9D034A7941D3E03953CB41576A979199363AB7A99 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
14:41:58.0163 0x03c4  volmgr - ok
14:41:58.0163 0x03c4  [ 1514506CA7462A64DC38C48108DDBB45, DEE5D7B79962D9EB6D92FCF870CA1B06FE68CE6AE25F82A5B449445C99E76D2A ] volmgrx        C:\WINDOWS\system32\drivers\volmgrx.sys
14:41:58.0194 0x03c4  volmgrx - ok
14:41:58.0194 0x03c4  [ F0EE4E6028CCA58BEA9A04E7BEAB7DB4, 628D0E3D60256B914E46C26BCE8F512DFE0409C34EA603EB0A20C80EB469A4D2 ] volsnap        C:\WINDOWS\system32\drivers\volsnap.sys
14:41:58.0225 0x03c4  volsnap - ok
14:41:58.0225 0x03c4  [ 77FD1607F2C371ABD241EC7699C58884, A6FE00D76C615DC641A667EB9B6824C992ED752A31A89AE3FE43BAE5462F3EB7 ] volume          C:\WINDOWS\system32\drivers\volume.sys
14:41:58.0241 0x03c4  volume - ok
14:41:58.0241 0x03c4  [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
14:41:58.0256 0x03c4  vpci - ok
14:41:58.0256 0x03c4  [ ED0B3436E1DE601C6C8EB86789AC8BAB, 0CD186B09903A1D3748A3258D8B84557F3674DA04FEB8EFA24AE81FFE376265C ] vsmraid        C:\WINDOWS\system32\drivers\vsmraid.sys
14:41:58.0272 0x03c4  vsmraid - ok
14:41:58.0303 0x03c4  [ C7053D974A35EAB81F153FF33C883613, 9D89DC644971F93931D0E59D42ADE0A4AB49A5490709B46FCBBC309041C5432D ] VSS            C:\WINDOWS\system32\vssvc.exe
14:41:58.0366 0x03c4  VSS - ok
14:41:58.0381 0x03c4  [ 3D706FBED35DF3B17809C6714F31F9B0, BBC337479DEB628721E651FC165EA01D986E31950189F1A81534922667101487 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
14:41:58.0397 0x03c4  VSTXRAID - ok
14:41:58.0413 0x03c4  [ 0B11DBB8173AD374D67893D54EBEE9F3, AB8B6FC81244729157E59D062FCC234FD7E818804D94AA6B7BF81E01B7922395 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
14:41:58.0428 0x03c4  vwifibus - ok
14:41:58.0428 0x03c4  [ 95540F74893235C189409C98643D7A77, 4F041301C95F55C8448C3CC5825ED9E631E770BA35BEC8498A0ABB3563584AAE ] vwififlt        C:\WINDOWS\system32\drivers\vwififlt.sys
14:41:58.0444 0x03c4  vwififlt - ok
14:41:58.0460 0x03c4  [ 4F904ADE8BECDFB48CBA3F44FC0676A1, 2C3D619E9AD0D0DAEC0D170795FD6E5B7FE3FC667C947660320A9BC671B55736 ] W32Time        C:\WINDOWS\system32\w32time.dll
14:41:58.0491 0x03c4  W32Time - ok
14:41:58.0506 0x03c4  [ 244BA3FE721EAF5377634A4A39EB323D, A009894399149AC3442462DDB44C31E5E7012B43489E8458D48E30485763D0B9 ] w3logsvc        C:\WINDOWS\system32\inetsrv\w3logsvc.dll
14:41:58.0538 0x03c4  w3logsvc - ok
14:41:58.0553 0x03c4  [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc    C:\WINDOWS\System32\WaaSMedicSvc.dll
14:41:58.0585 0x03c4  WaaSMedicSvc - ok
14:41:58.0585 0x03c4  [ 87A01F65BD16C9FCCDD1B65F56CB93B0, E84B46DB67F2FCB22DB7130570FE7211FC96A806AC9D1D69D187899C93785CB2 ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
14:41:58.0600 0x03c4  WacomPen - ok
14:41:58.0616 0x03c4  [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService  C:\WINDOWS\system32\WalletService.dll
14:41:58.0647 0x03c4  WalletService - ok
14:41:58.0647 0x03c4  [ 85E187443F68F285DB78BD2279AE3701, FAC03A162CF07FCC6BDB4E45F5EDF16D48BE10D95F73A74E9BADA62EC7F24B53 ] wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:41:58.0663 0x03c4  wanarp - ok
14:41:58.0678 0x03c4  [ 85E187443F68F285DB78BD2279AE3701, FAC03A162CF07FCC6BDB4E45F5EDF16D48BE10D95F73A74E9BADA62EC7F24B53 ] wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:41:58.0694 0x03c4  wanarpv6 - ok
14:41:58.0694 0x03c4  [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc      C:\WINDOWS\System32\Windows.WARP.JITService.dll
14:41:58.0710 0x03c4  WarpJITSvc - ok
14:41:58.0725 0x03c4  [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] WAS            C:\WINDOWS\system32\inetsrv\iisw3adm.dll
14:41:58.0756 0x03c4  WAS - ok
14:41:58.0788 0x03c4  [ 6E235F75DF84C387388D23D697D6540B, 7113DD02243E9368EF3265CF5A7F991F9B4D69CAB70B1A446062F8DD714AFC8E ] wbengine        C:\WINDOWS\system32\wbengine.exe
14:41:58.0850 0x03c4  wbengine - ok
14:41:58.0881 0x03c4  [ 4A9F35F16FDC5FEED34E10F02697CA1F, 71FF0EE5CB33A2B65BC56DC4381D4C6834685C8DB2B9FEB741B149DD5029F0F3 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
14:41:58.0928 0x03c4  WbioSrvc - ok
14:41:58.0928 0x03c4  [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs          C:\WINDOWS\system32\drivers\wcifs.sys
14:41:58.0944 0x03c4  wcifs - ok
14:41:58.0960 0x03c4  [ 24E96C02CBCCFFDE8D5CB9E7509DE374, E889050EF966ACF7BEACAC8782D28F7BB484E70025A6A40162EFAECF3D396FD4 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
14:41:59.0022 0x03c4  Wcmsvc - ok
14:41:59.0038 0x03c4  [ B797B163EDCA46B5244F4E083BE7A7E7, 18D977A8015380A87EC9962273B90806145186A69F3455B3445A0FE1FE431219 ] wcncsvc        C:\WINDOWS\System32\wcncsvc.dll
14:41:59.0069 0x03c4  wcncsvc - ok
14:41:59.0069 0x03c4  [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs          C:\WINDOWS\system32\drivers\wcnfs.sys
14:41:59.0085 0x03c4  wcnfs - ok
14:41:59.0100 0x03c4  [ CD8A7398D8E0710CD3AA316A4427C56B, 81CA3256BACBEBC24380B6C4A5C4385C0F7D2BFFFDB4F990670A1EDBEB00B34D ] WdBoot          C:\WINDOWS\system32\drivers\wd\WdBoot.sys
14:41:59.0116 0x03c4  WdBoot - ok
14:41:59.0131 0x03c4  [ 152926023B401D1F5F8852929572F5C3, 61D0FDB0E3A4D16FFA6852174B3824F6294502E331BB0831BCF99F049B09C328 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
14:41:59.0163 0x03c4  Wdf01000 - ok
14:41:59.0178 0x03c4  [ 58B452788C0051C6C6E62F188EFEE438, C2EC7D28415B1A06A21BE1290848784D1676D0E1E9BEEFD1FF233F248B5F8C9A ] WdFilter        C:\WINDOWS\system32\drivers\wd\WdFilter.sys
14:41:59.0194 0x03c4  WdFilter - ok
14:41:59.0194 0x03c4  [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
14:41:59.0225 0x03c4  WdiServiceHost - ok
14:41:59.0225 0x03c4  [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost  C:\WINDOWS\system32\wdi.dll
14:41:59.0241 0x03c4  WdiSystemHost - ok
14:41:59.0272 0x03c4  [ 5DDA2C4B9AAED51E73DD6D580406F07A, 5C103E442ED4A9CC3C4E81D6C4E6BEE2FD14E4DBE57EC46DA0EF4C539D42756B ] wdiwifi        C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
14:41:59.0319 0x03c4  wdiwifi - ok
14:41:59.0319 0x03c4  [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys
14:41:59.0335 0x03c4  WdmCompanionFilter - ok
14:41:59.0335 0x03c4  [ 65081A53DB730D2347AD66AF7187795A, 3F91C9846D02956AF7B54F121CF3663E8682A6974F9696A35DAAE67697BD53EA ] WdNisDrv        C:\WINDOWS\system32\drivers\wd\WdNisDrv.sys
14:41:59.0350 0x03c4  WdNisDrv - ok
14:41:59.0413 0x03c4  [ 71C846A2F98CFC9F2E426890523AC276, ECA5BF57913D4B0E4B20CB729BD0FF5DC76DDDF839D5A9841B9E3B62D760C679 ] WdNisSvc        C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe
14:41:59.0506 0x03c4  WdNisSvc - ok
14:41:59.0522 0x03c4  [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient      C:\WINDOWS\System32\webclnt.dll
14:41:59.0538 0x03c4  WebClient - ok
14:41:59.0553 0x03c4  [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
14:41:59.0569 0x03c4  Wecsvc - ok
14:41:59.0585 0x03c4  [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
14:41:59.0600 0x03c4  WEPHOSTSVC - ok
14:41:59.0600 0x03c4  [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport  C:\WINDOWS\System32\wercplsupport.dll
14:41:59.0631 0x03c4  wercplsupport - ok
14:41:59.0631 0x03c4  [ 5DDB06B07A60E7AEA69837931373C159, 4E0A3260058B19F414B5053701C4723C27735818212AB3D297F896BF4C39E536 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
14:41:59.0663 0x03c4  WerSvc - ok
14:41:59.0678 0x03c4  [ 0427A785512BB39BEA530DC5367A9A03, 8ED29AE0FDB65D4E1D8CD3FA1783D74EF7B01AB30DD1090C917A74AC88FD4C3E ] WFDSConMgrSvc  C:\WINDOWS\System32\wfdsconmgrsvc.dll
14:41:59.0710 0x03c4  WFDSConMgrSvc - ok
14:41:59.0725 0x03c4  [ EB0B154F12F78DE232F38EF61BCDEEA2, D4BC28969C94F9A3906339B42FC3638E8BFF575C28C709461D48A84821A89A21 ] WFPLWFS        C:\WINDOWS\system32\drivers\wfplwfs.sys
14:41:59.0725 0x03c4  WFPLWFS - ok
14:41:59.0741 0x03c4  [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
14:41:59.0756 0x03c4  WiaRpc - ok
14:41:59.0756 0x03c4  [ 3AE28A996C9EB8A6F2AC12BC55035126, E54227B97F42800D445241EA638EFE86A7FEC664E96A0FA38BC48DDF7DA182AD ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
14:41:59.0772 0x03c4  WIMMount - ok
14:41:59.0788 0x03c4  [ DD752ECFDEC95581A00D62A8B00591EC, ADE71487979EF52B585ACEB3314A2DB5A8032E18FAB766AE773694DF25DEE3F4 ] WinDefend      C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe
14:41:59.0788 0x03c4  WinDefend - ok
14:41:59.0803 0x03c4  [ 2BB82BABE32D41F430D290239ABC0E87, 2D519F0B86F7B87B7028E404821EDE8B7BDA18288EF32CF81C25B9C1E629FFB1 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
14:41:59.0834 0x03c4  WindowsTrustedRT - ok
14:41:59.0834 0x03c4  [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
14:41:59.0850 0x03c4  WindowsTrustedRTProxy - ok
14:41:59.0866 0x03c4  [ 939AA47A32AFE2BC17EB39FB2ED1DDC2, 7BBE6FE475FF7971EBB59682872003059AC9B27D51898BA4C094C70534E057B6 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
14:41:59.0897 0x03c4  WinHttpAutoProxySvc - ok
14:41:59.0913 0x03c4  [ 762D8D839C44C5A0BE0449AA84034522, E6602D0FDB501081DF165CE904DA0FEC75F3FE29C3B07B44DED6268612742F9C ] WinMad          C:\WINDOWS\System32\drivers\winmad.sys
14:41:59.0913 0x03c4  WinMad - ok
14:41:59.0928 0x03c4  [ 72D83880FEF0C788C5F305F330744208, 3126C2907170BBA47421D61CD6ED04DA3A3FCC66B4DBFCB4E3B56001B3BF6045 ] Winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
14:41:59.0959 0x03c4  Winmgmt - ok
14:41:59.0959 0x03c4  [ 48194110C410B335AC985D9194275A1C, 1CE64B9DD2DB4CCB3916AA4F4C5F8C71C647ABF7845D284019725761138B8A8B ] WinNat          C:\WINDOWS\system32\drivers\winnat.sys
14:41:59.0991 0x03c4  WinNat - ok
14:42:00.0038 0x03c4  [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM          C:\WINDOWS\system32\WsmSvc.dll
14:42:00.0131 0x03c4  WinRM - ok
14:42:00.0147 0x03c4  [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS
14:42:00.0163 0x03c4  WINUSB - ok
14:42:00.0163 0x03c4  [ D2D6DB37E06608A5AF5B68D8E677B219, C7AAFEE7AAF76A4DCFF4FD2EE7232501832A57E3EE92CE20FA4A5D22F03FBE45 ] WinVerbs        C:\WINDOWS\System32\drivers\winverbs.sys
14:42:00.0178 0x03c4  WinVerbs - ok
14:42:00.0209 0x03c4  [ 08BEB7851B4B8AA07325C23A657233F1, 6D7A4D194D342A5BC3EE9738765B2F5D6B75165954CA6B0D9CD4B40B262C300E ] wisvc          C:\WINDOWS\system32\flightsettings.dll
14:42:00.0241 0x03c4  wisvc - ok
14:42:00.0288 0x03c4  [ 2490E373EC18869BA4FE435CFDE3ADEE, 5A3A9D11B426E5F13040758A1BE2284851C3E653E49340C1C75CF9EC3CE418B7 ] WlanSvc        C:\WINDOWS\System32\wlansvc.dll
14:42:00.0381 0x03c4  WlanSvc - ok
14:42:00.0428 0x03c4  [ 28A32E1F7A46A833DE104EF43E389F5F, 5A88C409DD9CC74ED6CEBEB5DFC8DDADFAB9D1CBDFD4EB78D7CBB6D55749C235 ] wlidsvc        C:\WINDOWS\system32\wlidsvc.dll
14:42:00.0522 0x03c4  wlidsvc - ok
14:42:00.0553 0x03c4  [ 59F6A50CD336D0ADD22E3F1FC0D73957, A62469B30325965735FE76AE7D83E5D829AE09D7F0996CC0B42604E68426B088 ] wlpasvc        C:\WINDOWS\System32\lpasvc.dll
14:42:00.0600 0x03c4  wlpasvc - ok
14:42:00.0616 0x03c4  [ EAEF2A087812BB7110C744446AB731D5, F5571D3C47564DFB6182DC43CC28124892323B60C3F389599DFEC94D227B4A86 ] WmiAcpi        C:\WINDOWS\System32\drivers\wmiacpi.sys
14:42:00.0631 0x03c4  WmiAcpi - ok
14:42:00.0631 0x03c4  [ ABAC310F5E01CBA9B33AE694F99D0977, 700CDC85479CDBF765FB1A6A389DC991FC4D2A77851A81FF80BEED921250DBF6 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
14:42:00.0663 0x03c4  wmiApSrv - ok
14:42:00.0663 0x03c4  WMPNetworkSvc - ok
14:42:00.0663 0x03c4  [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof            C:\WINDOWS\system32\drivers\Wof.sys
14:42:00.0678 0x03c4  Wof - ok
14:42:00.0725 0x03c4  [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
14:42:00.0803 0x03c4  workfolderssvc - ok
14:42:00.0834 0x03c4  [ 58DA02D34C964C00AF9140C07CCFF8F0, 6A02F326251A790F76E59737E20CB6C38190F671766E56CE6C7FB33D1A4588B9 ] WpcMonSvc      C:\WINDOWS\System32\WpcDesktopMonSvc.dll
14:42:00.0881 0x03c4  WpcMonSvc - ok
14:42:00.0897 0x03c4  [ 7412ECE8BD5590881FA9780B68BD70C5, 52329B5BF78E2F5792369FE5A72CF4E3E216D4F0670507D10F3DB8383FA5E0BC ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
14:42:00.0913 0x03c4  WPDBusEnum - ok
14:42:00.0928 0x03c4  [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr      C:\WINDOWS\system32\drivers\WpdUpFltr.sys
14:42:00.0928 0x03c4  WpdUpFltr - ok
14:42:00.0944 0x03c4  [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService      C:\WINDOWS\system32\WpnService.dll
14:42:00.0975 0x03c4  WpnService - ok
14:42:00.0975 0x03c4  [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll
14:42:00.0991 0x03c4  WpnUserService - ok
14:42:01.0006 0x03c4  [ C1C2E769FCD3B00A59FF876FB2AD4336, B4D9065268A8B3C509E9160E6F30C20F80D14876C9F6C1057245F09CEB6B0F36 ] ws2ifsl        C:\WINDOWS\system32\drivers\ws2ifsl.sys
14:42:01.0022 0x03c4  ws2ifsl - ok
14:42:01.0038 0x03c4  [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
14:42:01.0053 0x03c4  wscsvc - ok
14:42:01.0069 0x03c4  WSearch - ok
14:42:01.0116 0x03c4  [ 63C79AD0202728F4608757340B7D602B, 68CEF28372BD23149AE7E33BE83AB8FD49FB615F60E238C15B3E46D46D5CEB3E ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
14:42:01.0225 0x03c4  wuauserv - ok
14:42:01.0225 0x03c4  [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
14:42:01.0256 0x03c4  WudfPf - ok
14:42:01.0256 0x03c4  [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd          C:\WINDOWS\system32\drivers\WudfRd.sys
14:42:01.0288 0x03c4  WUDFRd - ok
14:42:01.0288 0x03c4  [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdFs      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
14:42:01.0319 0x03c4  WUDFWpdFs - ok
14:42:01.0319 0x03c4  [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
14:42:01.0350 0x03c4  WUDFWpdMtp - ok
14:42:01.0381 0x03c4  [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc        C:\WINDOWS\System32\wwansvc.dll
14:42:01.0444 0x03c4  WwanSvc - ok
14:42:01.0444 0x03c4  [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm            C:\WINDOWS\system32\xbgmsvc.exe
14:42:01.0459 0x03c4  xbgm - ok
14:42:01.0491 0x03c4  [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll
14:42:01.0538 0x03c4  XblAuthManager - ok
14:42:01.0569 0x03c4  [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave    C:\WINDOWS\System32\XblGameSave.dll
14:42:01.0631 0x03c4  XblGameSave - ok
14:42:01.0631 0x03c4  [ 93352403D9E6B71C275996690672488F, A012D907679B29988D18C71928BDF528506DC05A2DEF01F472B7F0CC043A0340 ] xboxgip        C:\WINDOWS\System32\drivers\xboxgip.sys
14:42:01.0663 0x03c4  xboxgip - ok
14:42:01.0678 0x03c4  [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc      C:\WINDOWS\System32\XboxGipSvc.dll
14:42:01.0695 0x03c4  XboxGipSvc - ok
14:42:01.0711 0x03c4  [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc  C:\WINDOWS\system32\XboxNetApiSvc.dll
14:42:01.0773 0x03c4  XboxNetApiSvc - ok
14:42:01.0773 0x03c4  [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid      C:\WINDOWS\System32\drivers\xinputhid.sys
14:42:01.0789 0x03c4  xinputhid - ok
14:42:01.0805 0x03c4  ================ Scan global ===============================
14:42:01.0805 0x03c4  [ 44D259E3B8F950D123CBE21893CEF1AB, 94FEA350B54D1581FF07D078D25A27FE3C9F815E24D299A0504FB1153E68A903 ] C:\WINDOWS\system32\basesrv.dll
14:42:01.0805 0x03c4  [ 1C346B5D7E5336246604A9FCFCB092BC, BD0C56C943A8F23CA9CD1CE1FE4F9D2183F752B469A72D14B713301A867AE776 ] C:\WINDOWS\system32\winsrv.dll
14:42:01.0820 0x03c4  [ FE8D1AB6D6711BE791A01C17EDEBD0D6, EECE3A16DFA0BE1BB1E7B882D33FB926C90A1DCA89805DD3514FABF7C9F05253 ] C:\WINDOWS\system32\sxssrv.dll
14:42:01.0820 0x03c4  [ E2F4C75AFA20E742DE1B70372F15DCD7, 6AF120D627E26274D001A01E5CB9B165318B14B9FA8F1C8C59BF069DA1114618 ] C:\WINDOWS\system32\services.exe
14:42:01.0836 0x03c4  [ Global ] - ok
14:42:01.0836 0x03c4  ================ Scan MBR ==================================
14:42:01.0836 0x03c4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:42:01.0914 0x03c4  \Device\Harddisk0\DR0 - ok
14:42:01.0914 0x03c4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
14:42:02.0883 0x03c4  \Device\Harddisk1\DR1 - ok
14:42:02.0898 0x03c4  ================ Scan VBR ==================================
14:42:02.0898 0x03c4  [ 1431A600F1725E408007B58564790F39 ] \Device\Harddisk0\DR0\Partition1
14:42:02.0898 0x03c4  \Device\Harddisk0\DR0\Partition1 - ok
14:42:02.0898 0x03c4  [ CFB2371CBFEB6FFF3D1311D1601C57D3 ] \Device\Harddisk0\DR0\Partition2
14:42:02.0898 0x03c4  \Device\Harddisk0\DR0\Partition2 - ok
14:42:02.0898 0x03c4  [ 62B302BE8A0649AD2BFB9F15C58CDACB ] \Device\Harddisk1\DR1\Partition1
14:42:02.0914 0x03c4  \Device\Harddisk1\DR1\Partition1 - ok
14:42:02.0914 0x03c4  ================ Scan generic autorun ======================
14:42:02.0914 0x03c4  SecurityHealth - ok
14:42:03.0258 0x03c4  [ E5136BBA373FBE36B32F137351B58025, C4EA4B1E3B5B0ADD94F8CE3D1E0D5276C7FF5AEDD5858D3DA3E4C2902B7A6B0F ] C:\Program Files\Logitech Gaming Software\LCore.exe
14:42:03.0586 0x03c4  Launch LCore - ok
14:42:03.0601 0x03c4  [ 3402BBBC16E909985C4F184EB247E9BD, 715806A02C33060C3A20AA1387AC656D92A217115123A2BA16DBE4B37C31880F ] C:\WINDOWS\system32\igfxtray.exe
14:42:03.0617 0x03c4  IgfxTray - ok
14:42:03.0617 0x03c4  [ 22BF0CCB64AAE89004355E924E0AD463, BA8FA7DCFAD8396C7A2DB583FF6118361F959040837215FD5198D8D0A4D7E9B6 ] C:\WINDOWS\system32\hkcmd.exe
14:42:03.0633 0x03c4  HotKeysCmds - ok
14:42:03.0648 0x03c4  [ FDA7C3D4227097EC5B45BF9E769B5427, C8A41A3EA957A64CECD17B6E5AFAE2775541C0838CE27FD759031B84180FBFA0 ] C:\WINDOWS\system32\igfxpers.exe
14:42:03.0664 0x03c4  Persistence - ok
14:42:03.0867 0x03c4  [ 023FAC742820932580B68DB91E0D7B6A, 9B2AF05CBA9BB153A2EE959BA9911A93E9C75CFDF8E040D8E3D86CB9BD505091 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
14:42:04.0070 0x03c4  RTHDVCPL - ok
14:42:04.0086 0x03c4  {C12EDCD9-A219-4778-A5FC-0D0F1F219F12} - ok
14:42:04.0086 0x03c4  [ 1218D5AC7989E4F54C98249C03F276EF, D21C05CE7D8B4615208DAF49EB171E03B491A5AC39577B2163F70C0A677A55C2 ] C:\Program Files (x86)\n52te\razerhid.exe
14:42:04.0180 0x03c4  Jomantha - detected UnsignedFile.Multi.Generic ( 1 )
14:42:04.0273 0x03c4  Detect skipped due to KSN trusted
14:42:04.0273 0x03c4  Jomantha - ok
14:42:04.0305 0x03c4  [ 7021BCD337B4A88CF3A63AA4F0C5D05D, BBAE4E28F58F5DFD5A7737676E004CEAB67FDC5EE56BE9A467F94ADEB4DBDDDA ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
14:42:04.0320 0x03c4  SunJavaUpdateSched - ok
14:42:04.0694 0x03c4  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:42:05.0137 0x03c4  OneDriveSetup - ok
14:42:05.0169 0x03c4  [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
14:42:05.0215 0x03c4  WAB Migrate - ok
14:42:05.0581 0x03c4  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:42:05.0964 0x03c4  OneDriveSetup - ok
14:42:05.0981 0x03c4  [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
14:42:06.0017 0x03c4  WAB Migrate - ok
14:42:06.0049 0x03c4  [ D1EA9D021F70BAFC3330618EE1E1DD6A, DFA000ED22BC88B124E084153EA60B576AB77FEE304C3D7C49C4C6A6AED5102E ] C:\Users\joe\AppData\Local\Microsoft\OneDrive\OneDrive.exe
14:42:06.0081 0x03c4  OneDrive - ok
14:42:06.0097 0x03c4  [ 6D9C544ECF1D56AFDA3C03C19E75FE8B, 8FD676300ED596EDCB33F334709245424613CAB30868A2866785A47CBF689199 ] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGAU.EXE
14:42:06.0148 0x03c4  EPSON BX525WD Series - ok
14:42:06.0314 0x03c4  [ 2269768074F6A93E454BA384ED9652E2, 3BB698018941471327A3031CC0F4011D69EBA03B00E9E6F2D99922639DCCDA59 ] C:\Program Files\CCleaner\CCleaner64.exe
14:42:06.0513 0x03c4  CCleaner Monitoring - ok
14:42:06.0565 0x03c4  [ D5011B586EAF3A160BA9360F766AA166, 0826DD2D672C6D2EB572DD49889EA70760A23C66451D493EDA0B2A9AFF91958E ] C:\Games\World_of_Tanks\WargamingGameUpdater.exe
14:42:07.0524 0x03c4  World of Tanks - ok
14:42:07.0524 0x03c4  Waiting for KSN requests completion. In queue: 279
14:42:08.0571 0x03c4  AV detected via SS2: Windows Defender, windowsdefender:// (  ), 0x61100 ( enabled : updated )
14:42:08.0571 0x03c4  Win FW state via NFP2: enabled ( trusted )
14:42:08.0681 0x03c4  ============================================================
14:42:08.0681 0x03c4  Scan finished
14:42:08.0681 0x03c4  ============================================================
14:42:08.0681 0x0190  Detected object count: 1
14:42:08.0681 0x0190  Actual detected object count: 1
14:42:55.0126 0x0190  NdisCap ( UnsignedFile.Multi.Generic ) - skipped by user
14:42:55.0126 0x0190  NdisCap ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 30.06.2018 13:51
Zitat:
14:41:48.0099 0x03c4 [ 90AA2827F0831C314C9C74B0902D9925, F8FF97C8A90760E49E2B5B4558852C458B8F16FDF372F1CDBD66B1113F64459E ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
14:41:48.0130 0x03c4 NdisCap - detected UnsignedFile.Multi.Generic ( 1 )
14:41:48.0302 0x03c4 NdisCap ( UnsignedFile.Multi.Generic ) - warning
Ist ja interessant, nichtmal bei Virustotal findet man diese Datei.
Bitte diese Datei bei Virustotal auswerten lassen und den Ergebnislink posten. Falls Du die Datei nicht siehst, musst Du sie evtl. vorher sichtbar machen.
Wenn die Datei schon ausgewertet sein sollte, bitte eine weitere Auswertung starten.

joe120 30.06.2018 15:52
oha, dauert aber ganz schön lange das Auswerten.
Läuft seit 10 Minuten.
Läuft seit 40 Minuten.
Läuft seit 60 Minuten.

https://www.virustotal.com/#/file/f8ff97c8a90760e49e2b5b4558852c458b8f16fdf372f1cdbd66b1113f64459e/detection

cosinus 01.07.2018 12:32
Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

joe120 01.07.2018 17:33
Hallo

Es wurde nichts gefunden und es hat auch kein Neustart stattgefunden.

Code:
Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2018.07.01.04
  rootkit: v2018.07.01.04

Windows 10 x64 NTFS
Internet Explorer 11.112.17134.0
joe :: JOE-PC [administrator]

01.07.2018 18:16:56
mbar-log-2018-07-01 (18-16-56).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 216666
Time elapsed: 10 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Langsam mache ich mir wirklich Sorgen.

Ciao

Joe

cosinus 01.07.2018 18:46
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.x

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Einstellungen, scrolle nach unten und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • Tracing Schlüssel löschen
    • Prefetch-Dateien löschen
    • Proxy wiederherstellen
    • IE-Policies wiederherstellen
    • Chrome-Policies wiederherstellen
    • Winsock wiederherstellen
  • Klicke nun auf Dashboard, dann auf Jetzt scannen und warte bis der Suchlauf abgeschlossen ist.
  • Klicke nun auf Bereinigen & Reparieren und bestätige mit Jetzt bereinigen.
  • WICHTIG:
    Sollte AdwCleaner nichts finden, klicke auf Grundlegende Reparatur ausführen und anschließend auf Jetzt bereinigen.
  • Nach dem Neustart öffnet sich AdwCleaner automatisch. Klicke auf Log-Datei ansehen.
  • Poste mir deren Inhalt der Log-Datei mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt. (xx = fortlaufende Nummer).

joe120 01.07.2018 19:07
Code:
# -------------------------------
# Malwarebytes AdwCleaner 7.2.1.0
# -------------------------------
# Build:    06-26-2018
# Database: 2018-06-29.1
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    07-01-2018
# Duration: 00:00:00
# OS:      Windows 10 Home
# Cleaned:  0
# Failed:  0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1242 octets] - [01/07/2018 20:04:29]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

cosinus 01.07.2018 19:56
Da sind überhaupt keine Schädlinge, nichtmal Junkware war da...

joe120 02.07.2018 16:38
bleibt mir da noch irgendwas übrig, abgesehen von einer Neuinstallation?

hallo zusammen

Problem ist gelöst.
Habe nochmal ganz genau nachgedacht, was an dem Tag los war, als die Fehler aufgetreten sind.

Ich habe Opera installiert und dabei wieder übersehen, das blöde Avira nicht zu installieren.
Habe es dann deinstalliert und dachte, damit wäre es erledigt.
Leider war dem nicht so. habe mir dann heute den Avira registry cleaner runtergeladen und versucht, hiermit alles zu löschen.
Leider bleiben einige Daten übrig, weil sie nur im abgesicherten Modus zu deinstallieren gehen. Sage nur Onlinekonto und lokales Konto --> nerv.

Nachdem ich ein lokales Konto erstellt habe und damit auch im abgesicherten Modus ein Passwort eingeben konnte, wurde der Rest aus der Registry bereinigt und mein System bringt keine Fehler mehr.

Adios und Danke für alles. War sehr interessant, was so alles am PC schief gehen kann :-)
ps: wie kann man dieses Thema schließen oder macht das einer der Moderatoren hier ??

Ciao

Joe


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:59 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131