| DerDeedee | 15.12.2012 20:33 |
Hallo Ryder,
danke, dass Du mir helfen willst, mein Trojaner-Problem zu lösen!
Zum zippen der Logs wurde ich übrigens beim Erstellen des Threads aufgefordert, weil der Beitrag wohl zu lang war. Wenn es Dir nützt, stelle ich die beiden Log-Dateien nochmal in einer Antwort im "Klartext" (=code) ein...
Inzwischen habe ich Deine Anweisungen befolgt: Zitat:
Schritt 1:
deinstalliere Spybot!
| Ist erledigt... Zitat:
Schritt 2:
Laufwerksemulationen abschalten mit Defogger
| defogger_disable.log: Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:43 on 15/12/2012 (Deedee privat)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Zitat:
Schritt 3:
Scan mit aswMBR[indent]
| Der "normale" Scan erfolgte bis zu "c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications... <mehr war im Fenster nicht zu lesen>, dann stürzte das Programm ab mit der Fehlemeldung "Avast! Antirootkit funktioniert nicht mehr"
Der direkt anschließende Scan mit der Einstellung (none) führte zum kompletten Absturz des Systems mit Bluescreen.
Nach Neustart des Rechners wurde der Scan mit der Einstellung (none) bis zum Ende durchgeführt.
aswMBR.txt: Code:
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-12-15 19:07:00
-----------------------------
19:07:00.585 OS Version: Windows x64 6.1.7601 Service Pack 1
19:07:00.585 Number of processors: 4 586 0x1001
19:07:00.586 ComputerName: DEEDEE-DESK UserName:
19:07:05.820 Initialize success
19:07:13.560 AVAST engine defs: 12121501
19:07:18.774 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000063
19:07:18.776 Disk 0 Vendor: ST1000DM CC4B Size: 953869MB BusType: 11
19:07:18.800 Disk 0 MBR read successfully
19:07:18.803 Disk 0 MBR scan
19:07:18.816 Disk 0 Windows 7 default MBR code
19:07:18.829 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
19:07:18.841 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 128373 MB offset 206848
19:07:18.847 Disk 0 Partition - 00 0F Extended LBA 824358 MB offset 263128635
19:07:18.877 Disk 0 Partition 3 00 12 Compaq diag NTFS 1024 MB offset 1951424512
19:07:18.914 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 200004 MB offset 263128698
19:07:18.922 Disk 0 Partition - 00 05 Extended 349994 MB offset 672737940
19:07:18.943 Disk 0 Partition 5 00 07 HPFS/NTFS NTFS 349994 MB offset 672738003
19:07:18.950 Disk 0 Partition - 00 05 Extended 109999 MB offset 1799135415
19:07:18.980 Disk 0 Partition 6 00 07 HPFS/NTFS NTFS 109999 MB offset 1389526173
19:07:18.999 Disk 0 Partition - 00 05 Extended 119993 MB offset 2741203080
19:07:19.083 Disk 0 Partition 7 00 07 HPFS/NTFS NTFS 119993 MB offset 1614805668
19:07:19.099 Disk 0 Partition - 00 05 Extended 44367 MB offset 3212228880
19:07:19.132 Disk 0 Partition 8 00 07 HPFS/NTFS NTFS 44366 MB offset 1860551973
19:07:19.174 Disk 0 scanning C:\Windows\system32\drivers
19:07:32.006 Service scanning
19:07:52.275 Modules scanning
19:07:52.291 Disk 0 trace - called modules:
19:07:52.334 ntoskrnl.exe fltsrv.sys tdrpman.sys CLASSPNP.SYS disk.sys vidsflt.sys amd_xata.sys storport.sys hal.dll amd_sata.sys
19:07:52.344 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005017060]
19:07:52.356 3 CLASSPNP.SYS[fffff8800195843f] -> nt!IofCallDriver -> [0xfffffa8004ec6b30]
19:07:52.369 5 vidsflt.sys[fffff88000ec05cd] -> nt!IofCallDriver -> [0xfffffa8003ff4ac0]
19:07:52.377 7 amd_xata.sys[fffff880010edd00] -> nt!IofCallDriver -> \Device\00000063[0xfffffa80049c9060]
19:07:52.386 Scan finished successfully
19:11:37.305 Disk 0 MBR has been saved successfully to "C:\Users\Deedee privat\Desktop\MBR.dat"
19:11:37.311 The log file has been saved successfully to "C:\Users\Deedee privat\Desktop\aswMBR.txt"
Zitat:
Schritt 4:
Scan mit dem TDSS-Killer
| TDSSKiller.2.8.15.0_15.12.2012_19.33.03_log.txt: Code:
19:33:03.0517 5200 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:33:03.0720 5200 ============================================================
19:33:03.0720 5200 Current date / time: 2012/12/15 19:33:03.0720
19:33:03.0720 5200 SystemInfo:
19:33:03.0720 5200
19:33:03.0720 5200 OS Version: 6.1.7601 ServicePack: 1.0
19:33:03.0720 5200 Product type: Workstation
19:33:03.0720 5200 ComputerName: DEEDEE-DESK
19:33:03.0720 5200 UserName: Deedee privat
19:33:03.0720 5200 Windows directory: C:\Windows
19:33:03.0720 5200 System windows directory: C:\Windows
19:33:03.0720 5200 Running under WOW64
19:33:03.0720 5200 Processor architecture: Intel x64
19:33:03.0720 5200 Number of processors: 4
19:33:03.0720 5200 Page size: 0x1000
19:33:03.0720 5200 Boot type: Normal boot
19:33:03.0720 5200 ============================================================
19:33:05.0439 5200 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:33:05.0457 5200 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:33:05.0458 5200 Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:33:05.0475 5200 Drive \Device\Harddisk6\DR6 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:33:05.0477 5200 Drive \Device\Harddisk7\DR7 - Size: 0x4A843FB000 (298.07 Gb), SectorSize: 0x200, Cylinders: 0x97FE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:33:05.0498 5200 ============================================================
19:33:05.0498 5200 \Device\Harddisk0\DR0:
19:33:05.0498 5200 MBR partitions:
19:33:05.0498 5200 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:33:05.0498 5200 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xFABA800
19:33:05.0512 5200 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xFAF067A, BlocksNum 0x186A241A
19:33:05.0525 5200 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x28192AD3, BlocksNum 0x2AB9518B
19:33:05.0536 5200 \Device\Harddisk0\DR0\Partition5: MBR, Type 0x7, StartLBA 0x52D27C9D, BlocksNum 0xD6D7DC8
19:33:05.0548 5200 \Device\Harddisk0\DR0\Partition6: MBR, Type 0x7, StartLBA 0x603FFAA4, BlocksNum 0xEA5CA42
19:33:05.0563 5200 \Device\Harddisk0\DR0\Partition7: MBR, Type 0x7, StartLBA 0x6EE5C525, BlocksNum 0x56A77D9
19:33:05.0563 5200 \Device\Harddisk1\DR1:
19:33:05.0564 5200 MBR partitions:
19:33:05.0564 5200 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
19:33:05.0564 5200 \Device\Harddisk2\DR2:
19:33:05.0692 5200 MBR partitions:
19:33:05.0693 5200 \Device\Harddisk2\DR2\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982
19:33:05.0693 5200 \Device\Harddisk6\DR6:
19:33:05.0694 5200 MBR partitions:
19:33:05.0694 5200 \Device\Harddisk6\DR6\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2542D2D1
19:33:05.0694 5200 \Device\Harddisk7\DR7:
19:33:05.0696 5200 MBR partitions:
19:33:05.0696 5200 \Device\Harddisk7\DR7\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2541DB7E
19:33:05.0696 5200 ============================================================
19:33:05.0740 5200 C: <-> \Device\Harddisk0\DR0\Partition2
19:33:05.0753 5200 D: <-> \Device\Harddisk0\DR0\Partition3
19:33:05.0768 5200 E: <-> \Device\Harddisk0\DR0\Partition4
19:33:05.0785 5200 F: <-> \Device\Harddisk0\DR0\Partition5
19:33:05.0797 5200 G: <-> \Device\Harddisk0\DR0\Partition6
19:33:05.0846 5200 H: <-> \Device\Harddisk0\DR0\Partition7
19:33:05.0858 5200 N: <-> \Device\Harddisk6\DR6\Partition1
19:33:05.0858 5200 L: <-> \Device\Harddisk2\DR2\Partition1
19:33:05.0865 5200 K: <-> \Device\Harddisk7\DR7\Partition1
19:33:05.0867 5200 M: <-> \Device\Harddisk1\DR1\Partition1
19:33:05.0867 5200 ============================================================
19:33:05.0867 5200 Initialize success
19:33:05.0867 5200 ============================================================
19:33:24.0667 6856 ============================================================
19:33:24.0667 6856 Scan started
19:33:24.0667 6856 Mode: Manual; TDLFS;
19:33:24.0667 6856 ============================================================
19:33:25.0176 6856 ================ Scan system memory ========================
19:33:25.0176 6856 System memory - ok
19:33:25.0177 6856 ================ Scan services =============================
19:33:25.0628 6856 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:33:25.0645 6856 1394ohci - ok
19:33:25.0677 6856 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:33:25.0682 6856 ACPI - ok
19:33:25.0698 6856 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:33:25.0704 6856 AcpiPmi - ok
19:33:25.0755 6856 [ 5C612044C7C9786D49C6BEC1BED33232 ] AcrSch2Svc C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
19:33:25.0766 6856 AcrSch2Svc - ok
19:33:25.0804 6856 [ 62B7936F9036DD6ED36E6A7EFA805DC0 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:33:25.0806 6856 AdobeARMservice - ok
19:33:25.0863 6856 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:33:25.0882 6856 AdobeFlashPlayerUpdateSvc - ok
19:33:25.0900 6856 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:33:25.0913 6856 adp94xx - ok
19:33:25.0932 6856 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:33:25.0942 6856 adpahci - ok
19:33:25.0970 6856 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:33:25.0979 6856 adpu320 - ok
19:33:26.0003 6856 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:33:26.0010 6856 AeLookupSvc - ok
19:33:26.0036 6856 [ ABCF9C80EAACE03021BB7F450EB8993F ] afcdp C:\Windows\system32\DRIVERS\afcdp.sys
19:33:26.0046 6856 afcdp - ok
19:33:26.0107 6856 [ 1AEA25F70F12ABB494A4E35E1D717414 ] afcdpsrv C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
19:33:26.0159 6856 afcdpsrv - ok
19:33:26.0193 6856 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:33:26.0207 6856 AFD - ok
19:33:26.0220 6856 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:33:26.0226 6856 agp440 - ok
19:33:26.0238 6856 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:33:26.0239 6856 ALG - ok
19:33:26.0253 6856 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:33:26.0258 6856 aliide - ok
19:33:26.0275 6856 [ B3B263B419FC9E7B1D41E61FDAE45BD9 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
19:33:26.0277 6856 AMD External Events Utility - ok
19:33:26.0316 6856 AMD FUEL Service - ok
19:33:26.0342 6856 [ 2EF1BA6D5DC79FCE5E9216C8C2D3F193 ] amdhub30 C:\Windows\system32\DRIVERS\amdhub30.sys
19:33:26.0348 6856 amdhub30 - ok
19:33:26.0372 6856 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:33:26.0377 6856 amdide - ok
19:33:26.0405 6856 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
19:33:26.0410 6856 amdiox64 - ok
19:33:26.0441 6856 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:33:26.0446 6856 AmdK8 - ok
19:33:26.0590 6856 [ 9A6E9363F7A5E5A06629D9DDC76EE6B5 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
19:33:26.0780 6856 amdkmdag - ok
19:33:26.0815 6856 [ 957A4C13E1981B1701E600EF1E823C68 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
19:33:26.0831 6856 amdkmdap - ok
19:33:26.0850 6856 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
19:33:26.0852 6856 AmdPPM - ok
19:33:26.0876 6856 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:33:26.0887 6856 amdsata - ok
19:33:26.0902 6856 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
19:33:26.0913 6856 amdsbs - ok
19:33:26.0930 6856 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:33:26.0941 6856 amdxata - ok
19:33:26.0972 6856 [ 541A6C49C792ED71FB3EFF8C815CFE60 ] amdxhc C:\Windows\system32\DRIVERS\amdxhc.sys
19:33:26.0983 6856 amdxhc - ok
19:33:27.0002 6856 [ A1434F35B7B171CB697D74D33F7D029F ] amd_sata C:\Windows\system32\drivers\amd_sata.sys
19:33:27.0003 6856 amd_sata - ok
19:33:27.0010 6856 [ E9B5A82FA268BB2D1B012030D5F4E096 ] amd_xata C:\Windows\system32\drivers\amd_xata.sys
19:33:27.0016 6856 amd_xata - ok
19:33:27.0042 6856 [ E3C6DAE5493E9B07EE98711D04D863FF ] ampa C:\Windows\system32\ampa.sys
19:33:27.0047 6856 ampa - ok
19:33:27.0080 6856 [ A5569C4429D1C5494049FBFE2B2D20FF ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
19:33:27.0081 6856 AntiVirSchedulerService - ok
19:33:27.0105 6856 [ CB7EA00A4E70DF6828EBB68633D000D2 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
19:33:27.0106 6856 AntiVirService - ok
19:33:27.0185 6856 [ 59D01FA91962C9C1E9B4022B2D3B46DB ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
19:33:27.0197 6856 AppHostSvc - ok
19:33:27.0219 6856 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:33:27.0229 6856 AppID - ok
19:33:27.0249 6856 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:33:27.0255 6856 AppIDSvc - ok
19:33:27.0268 6856 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
19:33:27.0275 6856 Appinfo - ok
19:33:27.0291 6856 APXACC - ok
19:33:27.0304 6856 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
19:33:27.0311 6856 arc - ok
19:33:27.0319 6856 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:33:27.0326 6856 arcsas - ok
19:33:27.0439 6856 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:33:27.0456 6856 aspnet_state - ok
19:33:27.0475 6856 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:33:27.0482 6856 AsyncMac - ok
19:33:27.0508 6856 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:33:27.0517 6856 atapi - ok
19:33:27.0549 6856 [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
19:33:27.0557 6856 AtiHDAudioService - ok
19:33:27.0587 6856 atillk64 - ok
19:33:27.0610 6856 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:33:27.0629 6856 AudioEndpointBuilder - ok
19:33:27.0638 6856 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:33:27.0644 6856 AudioSrv - ok
19:33:27.0700 6856 [ 58AEE8F9E26595ADEB6F008FBB0D6174 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
19:33:27.0712 6856 avgntflt - ok
19:33:27.0730 6856 [ 37D3D3D28B107BCBC1C0137FF31AE480 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
19:33:27.0740 6856 avipbb - ok
19:33:27.0760 6856 [ CD0E732347BF09717E0BDDC0C66699AB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
19:33:27.0767 6856 avkmgr - ok
19:33:27.0807 6856 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:33:27.0809 6856 AxInstSV - ok
19:33:27.0827 6856 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
19:33:27.0842 6856 b06bdrv - ok
19:33:27.0884 6856 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:33:27.0897 6856 b57nd60a - ok
19:33:27.0906 6856 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:33:27.0908 6856 BDESVC - ok
19:33:27.0921 6856 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:33:27.0925 6856 Beep - ok
19:33:27.0956 6856 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:33:27.0969 6856 BFE - ok
19:33:27.0994 6856 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:33:28.0002 6856 BITS - ok
19:33:28.0008 6856 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:33:28.0013 6856 blbdrive - ok
19:33:28.0028 6856 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:33:28.0033 6856 bowser - ok
19:33:28.0043 6856 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
19:33:28.0047 6856 BrFiltLo - ok
19:33:28.0056 6856 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
19:33:28.0059 6856 BrFiltUp - ok
19:33:28.0071 6856 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:33:28.0077 6856 Browser - ok
19:33:28.0094 6856 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:33:28.0103 6856 Brserid - ok
19:33:28.0116 6856 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:33:28.0121 6856 BrSerWdm - ok
19:33:28.0132 6856 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:33:28.0135 6856 BrUsbMdm - ok
19:33:28.0139 6856 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:33:28.0142 6856 BrUsbSer - ok
19:33:28.0165 6856 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:33:28.0171 6856 BTHMODEM - ok
19:33:28.0182 6856 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:33:28.0183 6856 bthserv - ok
19:33:28.0189 6856 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:33:28.0194 6856 cdfs - ok
19:33:28.0221 6856 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:33:28.0228 6856 cdrom - ok
19:33:28.0249 6856 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:33:28.0254 6856 CertPropSvc - ok
19:33:28.0263 6856 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
19:33:28.0267 6856 circlass - ok
19:33:28.0282 6856 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:33:28.0286 6856 CLFS - ok
19:33:28.0320 6856 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:33:28.0333 6856 clr_optimization_v2.0.50727_32 - ok
19:33:28.0363 6856 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:33:28.0370 6856 clr_optimization_v2.0.50727_64 - ok
19:33:28.0417 6856 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:33:28.0457 6856 clr_optimization_v4.0.30319_32 - ok
19:33:28.0470 6856 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:33:28.0473 6856 clr_optimization_v4.0.30319_64 - ok
19:33:28.0486 6856 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
19:33:28.0493 6856 CmBatt - ok
19:33:28.0502 6856 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:33:28.0507 6856 cmdide - ok
19:33:28.0535 6856 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
19:33:28.0549 6856 CNG - ok
19:33:28.0557 6856 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
19:33:28.0562 6856 Compbatt - ok
19:33:28.0577 6856 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
19:33:28.0582 6856 CompositeBus - ok
19:33:28.0586 6856 COMSysApp - ok
19:33:28.0596 6856 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:33:28.0602 6856 crcdisk - ok
19:33:28.0624 6856 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:33:28.0634 6856 CryptSvc - ok
19:33:28.0693 6856 [ 7F5CD87CA5BDB4D83F992D8C77201483 ] CyberLink PowerDVD 10 MS Monitor Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
19:33:28.0694 6856 CyberLink PowerDVD 10 MS Monitor Service - ok
19:33:28.0708 6856 [ 9FAF58E876A3B1DB3030A0A5805F2D86 ] CyberLink PowerDVD 10 MS Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
19:33:28.0711 6856 CyberLink PowerDVD 10 MS Service - ok
19:33:28.0740 6856 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:33:28.0749 6856 DcomLaunch - ok
19:33:28.0762 6856 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:33:28.0767 6856 defragsvc - ok
19:33:28.0780 6856 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:33:28.0788 6856 DfsC - ok
19:33:28.0832 6856 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:33:28.0848 6856 Dhcp - ok
19:33:28.0858 6856 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:33:28.0864 6856 discache - ok
19:33:28.0885 6856 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
19:33:28.0894 6856 Disk - ok
19:33:28.0916 6856 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:33:28.0929 6856 Dnscache - ok
19:33:28.0945 6856 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:33:28.0949 6856 dot3svc - ok
19:33:28.0960 6856 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:33:28.0963 6856 DPS - ok
19:33:28.0987 6856 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:33:28.0990 6856 drmkaud - ok
19:33:29.0011 6856 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:33:29.0025 6856 DXGKrnl - ok
19:33:29.0040 6856 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:33:29.0041 6856 EapHost - ok
19:33:29.0083 6856 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
19:33:29.0135 6856 ebdrv - ok
19:33:29.0162 6856 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:33:29.0166 6856 EFS - ok
19:33:29.0186 6856 [ 9387A484D31209D7FC3F795A787294DB ] ElbyCDFL C:\Windows\system32\Drivers\ElbyCDFL.sys
19:33:29.0191 6856 ElbyCDFL - ok
19:33:29.0215 6856 [ A05FC7ECA0966EBB70E4D17B855A853B ] ElbyCDIO C:\Windows\system32\Drivers\ElbyCDIO.sys
19:33:29.0220 6856 ElbyCDIO - ok
19:33:29.0238 6856 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:33:29.0248 6856 elxstor - ok
19:33:29.0258 6856 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:33:29.0262 6856 ErrDev - ok
19:33:29.0280 6856 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:33:29.0284 6856 EventSystem - ok
19:33:29.0302 6856 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:33:29.0308 6856 exfat - ok
19:33:29.0324 6856 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:33:29.0332 6856 fastfat - ok
19:33:29.0347 6856 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
19:33:29.0352 6856 fdc - ok
19:33:29.0362 6856 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:33:29.0365 6856 fdPHost - ok
19:33:29.0368 6856 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:33:29.0369 6856 FDResPub - ok
19:33:29.0382 6856 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:33:29.0388 6856 FileInfo - ok
19:33:29.0397 6856 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:33:29.0402 6856 Filetrace - ok
19:33:29.0413 6856 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
19:33:29.0417 6856 flpydisk - ok
19:33:29.0434 6856 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:33:29.0445 6856 FltMgr - ok
19:33:29.0465 6856 [ F0CC1A9106F9FB0F704F6ED95622B43E ] fltsrv C:\Windows\system32\DRIVERS\fltsrv.sys
19:33:29.0471 6856 fltsrv - ok
19:33:29.0503 6856 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
19:33:29.0516 6856 FontCache - ok
19:33:29.0554 6856 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:33:29.0556 6856 FontCache3.0.0.0 - ok
19:33:29.0571 6856 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:33:29.0580 6856 FsDepends - ok
19:33:29.0599 6856 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:33:29.0607 6856 Fs_Rec - ok
19:33:29.0622 6856 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:33:29.0639 6856 fvevol - ok
19:33:29.0655 6856 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:33:29.0662 6856 gagp30kx - ok
19:33:29.0678 6856 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:33:29.0691 6856 gpsvc - ok
19:33:29.0700 6856 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:33:29.0705 6856 hcw85cir - ok
19:33:29.0738 6856 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:33:29.0748 6856 HdAudAddService - ok
19:33:29.0766 6856 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:33:29.0767 6856 HDAudBus - ok
19:33:29.0782 6856 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
19:33:29.0786 6856 HidBatt - ok
19:33:29.0800 6856 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:33:29.0806 6856 HidBth - ok
19:33:29.0815 6856 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
19:33:29.0819 6856 HidIr - ok
19:33:29.0824 6856 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:33:29.0828 6856 hidserv - ok
19:33:29.0853 6856 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:33:29.0858 6856 HidUsb - ok
19:33:29.0867 6856 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:33:29.0869 6856 hkmsvc - ok
19:33:29.0883 6856 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:33:29.0886 6856 HomeGroupListener - ok
19:33:29.0905 6856 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:33:29.0913 6856 HomeGroupProvider - ok
19:33:29.0925 6856 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:33:29.0931 6856 HpSAMD - ok
19:33:29.0952 6856 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:33:29.0969 6856 HTTP - ok
19:33:29.0987 6856 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:33:29.0991 6856 hwpolicy - ok
19:33:30.0013 6856 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:33:30.0019 6856 i8042prt - ok
19:33:30.0040 6856 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:33:30.0048 6856 iaStorV - ok
19:33:30.0082 6856 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:33:30.0107 6856 idsvc - ok
19:33:30.0198 6856 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
19:33:30.0292 6856 igfx - ok
19:33:30.0302 6856 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:33:30.0307 6856 iirsp - ok
19:33:30.0327 6856 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:33:30.0334 6856 IKEEXT - ok
19:33:30.0424 6856 [ 21F54139C93FC595902B58ED947D47D5 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:33:30.0521 6856 IntcAzAudAddService - ok
19:33:30.0540 6856 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:33:30.0544 6856 intelide - ok
19:33:30.0566 6856 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys
19:33:30.0572 6856 intelppm - ok
19:33:30.0581 6856 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:33:30.0582 6856 IPBusEnum - ok
19:33:30.0598 6856 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:33:30.0604 6856 IpFilterDriver - ok
19:33:30.0631 6856 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:33:30.0642 6856 iphlpsvc - ok
19:33:30.0653 6856 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:33:30.0659 6856 IPMIDRV - ok
19:33:30.0670 6856 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:33:30.0676 6856 IPNAT - ok
19:33:30.0698 6856 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:33:30.0702 6856 IRENUM - ok
19:33:30.0718 6856 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:33:30.0723 6856 isapnp - ok
19:33:30.0738 6856 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:33:30.0748 6856 iScsiPrt - ok
19:33:30.0758 6856 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:33:30.0763 6856 kbdclass - ok
19:33:30.0776 6856 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:33:30.0780 6856 kbdhid - ok
19:33:30.0787 6856 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:33:30.0789 6856 KeyIso - ok
19:33:30.0796 6856 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:33:30.0802 6856 KSecDD - ok
19:33:30.0822 6856 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:33:30.0829 6856 KSecPkg - ok
19:33:30.0842 6856 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:33:30.0845 6856 ksthunk - ok
19:33:30.0874 6856 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:33:30.0878 6856 KtmRm - ok
19:33:30.0901 6856 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:33:30.0910 6856 LanmanServer - ok
19:33:30.0917 6856 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:33:30.0920 6856 LanmanWorkstation - ok
19:33:30.0964 6856 [ 7772DFAB22611050B79504E671B06E6E ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
19:33:30.0985 6856 LBTServ - ok
19:33:31.0005 6856 [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
19:33:31.0012 6856 LHidFilt - ok
19:33:31.0039 6856 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:33:31.0045 6856 lltdio - ok
19:33:31.0058 6856 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:33:31.0063 6856 lltdsvc - ok
19:33:31.0071 6856 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:33:31.0073 6856 lmhosts - ok
19:33:31.0084 6856 [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
19:33:31.0089 6856 LMouFilt - ok
19:33:31.0106 6856 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:33:31.0112 6856 LSI_FC - ok
19:33:31.0133 6856 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:33:31.0139 6856 LSI_SAS - ok
19:33:31.0159 6856 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
19:33:31.0165 6856 LSI_SAS2 - ok
19:33:31.0196 6856 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:33:31.0203 6856 LSI_SCSI - ok
19:33:31.0218 6856 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:33:31.0219 6856 luafv - ok
19:33:31.0242 6856 [ 29C733E1DE824670DC9315CFC9BDBCD3 ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
19:33:31.0247 6856 LUsbFilt - ok
19:33:31.0260 6856 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
19:33:31.0264 6856 megasas - ok
19:33:31.0274 6856 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
19:33:31.0282 6856 MegaSR - ok
19:33:31.0301 6856 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:33:31.0302 6856 MMCSS - ok
19:33:31.0310 6856 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:33:31.0314 6856 Modem - ok
19:33:31.0337 6856 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:33:31.0337 6856 monitor - ok
19:33:31.0361 6856 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:33:31.0370 6856 mouclass - ok
19:33:31.0390 6856 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:33:31.0397 6856 mouhid - ok
19:33:31.0411 6856 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:33:31.0422 6856 mountmgr - ok
19:33:31.0440 6856 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:33:31.0455 6856 mpio - ok
19:33:31.0471 6856 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:33:31.0477 6856 mpsdrv - ok
19:33:31.0499 6856 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:33:31.0508 6856 MpsSvc - ok
19:33:31.0519 6856 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:33:31.0527 6856 MRxDAV - ok
19:33:31.0544 6856 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:33:31.0550 6856 mrxsmb - ok
19:33:31.0571 6856 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:33:31.0579 6856 mrxsmb10 - ok
19:33:31.0597 6856 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:33:31.0603 6856 mrxsmb20 - ok
19:33:31.0611 6856 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:33:31.0615 6856 msahci - ok
19:33:31.0619 6856 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:33:31.0626 6856 msdsm - ok
19:33:31.0640 6856 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:33:31.0648 6856 MSDTC - ok
19:33:31.0665 6856 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:33:31.0669 6856 Msfs - ok
19:33:31.0679 6856 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:33:31.0682 6856 mshidkmdf - ok
19:33:31.0685 6856 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:33:31.0689 6856 msisadrv - ok
19:33:31.0704 6856 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:33:31.0706 6856 MSiSCSI - ok
19:33:31.0709 6856 msiserver - ok
19:33:31.0724 6856 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:33:31.0727 6856 MSKSSRV - ok
19:33:31.0737 6856 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:33:31.0740 6856 MSPCLOCK - ok
19:33:31.0748 6856 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:33:31.0751 6856 MSPQM - ok
19:33:31.0763 6856 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:33:31.0772 6856 MsRPC - ok
19:33:31.0779 6856 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:33:31.0780 6856 mssmbios - ok
19:33:31.0793 6856 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:33:31.0796 6856 MSTEE - ok
19:33:31.0808 6856 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
19:33:31.0811 6856 MTConfig - ok
19:33:31.0831 6856 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:33:31.0836 6856 Mup - ok
19:33:31.0863 6856 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:33:31.0867 6856 napagent - ok
19:33:31.0894 6856 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:33:31.0904 6856 NativeWifiP - ok
19:33:31.0934 6856 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:33:31.0942 6856 NDIS - ok
19:33:31.0959 6856 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:33:31.0964 6856 NdisCap - ok
19:33:31.0982 6856 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:33:31.0987 6856 NdisTapi - ok
19:33:32.0011 6856 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:33:32.0016 6856 Ndisuio - ok
19:33:32.0032 6856 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:33:32.0040 6856 NdisWan - ok
19:33:32.0052 6856 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:33:32.0057 6856 NDProxy - ok
19:33:32.0079 6856 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:33:32.0083 6856 NetBIOS - ok
19:33:32.0095 6856 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:33:32.0104 6856 NetBT - ok
19:33:32.0112 6856 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:33:32.0114 6856 Netlogon - ok
19:33:32.0147 6856 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:33:32.0152 6856 Netman - ok
19:33:32.0164 6856 [ 3E5A36127E201DDF663176B66828FAFE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:33:32.0165 6856 NetMsmqActivator - ok
19:33:32.0169 6856 [ 3E5A36127E201DDF663176B66828FAFE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:33:32.0170 6856 NetPipeActivator - ok
19:33:32.0185 6856 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:33:32.0190 6856 netprofm - ok
19:33:32.0193 6856 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:33:32.0194 6856 NetTcpActivator - ok
19:33:32.0197 6856 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:33:32.0198 6856 NetTcpPortSharing - ok
19:33:32.0220 6856 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:33:32.0225 6856 nfrd960 - ok
19:33:32.0253 6856 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:33:32.0257 6856 NlaSvc - ok
19:33:32.0268 6856 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:33:32.0273 6856 Npfs - ok
19:33:32.0277 6856 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:33:32.0281 6856 nsi - ok
19:33:32.0284 6856 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:33:32.0287 6856 nsiproxy - ok
19:33:32.0317 6856 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:33:32.0347 6856 Ntfs - ok
19:33:32.0357 6856 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:33:32.0361 6856 Null - ok
19:33:32.0389 6856 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys
19:33:32.0398 6856 NVENETFD - ok
19:33:32.0553 6856 [ DD81FBC57AB9134CDDC5CE90880BFD80 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:33:32.0735 6856 nvlddmkm - ok
19:33:32.0760 6856 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:33:32.0767 6856 nvraid - ok
19:33:32.0775 6856 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:33:32.0782 6856 nvstor - ok
19:33:32.0793 6856 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:33:32.0800 6856 nv_agp - ok
19:33:32.0809 6856 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:33:32.0814 6856 ohci1394 - ok
19:33:32.0858 6856 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:33:32.0873 6856 ose - ok
19:33:32.0974 6856 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:33:33.0094 6856 osppsvc - ok
19:33:33.0111 6856 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:33:33.0121 6856 p2pimsvc - ok
19:33:33.0137 6856 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:33:33.0150 6856 p2psvc - ok
19:33:33.0166 6856 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
19:33:33.0172 6856 Parport - ok
19:33:33.0195 6856 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:33:33.0201 6856 partmgr - ok
19:33:33.0210 6856 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:33:33.0213 6856 PcaSvc - ok
19:33:33.0227 6856 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:33:33.0229 6856 pci - ok
19:33:33.0239 6856 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:33:33.0244 6856 pciide - ok
19:33:33.0262 6856 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:33:33.0271 6856 pcmcia - ok
19:33:33.0286 6856 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:33:33.0291 6856 pcw - ok
19:33:33.0308 6856 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:33:33.0323 6856 PEAUTH - ok
19:33:33.0368 6856 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:33:33.0378 6856 PerfHost - ok
19:33:33.0418 6856 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:33:33.0443 6856 pla - ok
19:33:33.0470 6856 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:33:33.0475 6856 PlugPlay - ok
19:33:33.0512 6856 [ 2B85237F904C5BDF7AD386F0EDE19BD3 ] PMEM C:\Windows\SysWOW64\drivers\pmemnt.sys
19:33:33.0517 6856 PMEM - ok
19:33:33.0534 6856 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:33:33.0546 6856 PNRPAutoReg - ok
19:33:33.0563 6856 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:33:33.0570 6856 PNRPsvc - ok
19:33:33.0597 6856 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:33:33.0622 6856 PolicyAgent - ok
19:33:33.0639 6856 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:33:33.0649 6856 Power - ok
19:33:33.0670 6856 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:33:33.0678 6856 PptpMiniport - ok
19:33:33.0689 6856 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
19:33:33.0697 6856 Processor - ok
19:33:33.0724 6856 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:33:33.0738 6856 ProfSvc - ok
19:33:33.0746 6856 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:33:33.0748 6856 ProtectedStorage - ok
19:33:33.0768 6856 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:33:33.0770 6856 Psched - ok
19:33:33.0803 6856 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:33:33.0840 6856 ql2300 - ok
19:33:33.0856 6856 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:33:33.0865 6856 ql40xx - ok
19:33:33.0887 6856 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:33:33.0890 6856 QWAVE - ok
19:33:33.0902 6856 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:33:33.0907 6856 QWAVEdrv - ok
19:33:33.0910 6856 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:33:33.0913 6856 RasAcd - ok
19:33:33.0952 6856 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:33:33.0957 6856 RasAgileVpn - ok
19:33:33.0969 6856 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:33:33.0971 6856 RasAuto - ok
19:33:33.0990 6856 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:33:33.0996 6856 Rasl2tp - ok
19:33:34.0009 6856 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:33:34.0014 6856 RasMan - ok
19:33:34.0038 6856 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:33:34.0044 6856 RasPppoe - ok
19:33:34.0061 6856 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:33:34.0067 6856 RasSstp - ok
19:33:34.0081 6856 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:33:34.0090 6856 rdbss - ok
19:33:34.0105 6856 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
19:33:34.0110 6856 rdpbus - ok
19:33:34.0124 6856 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:33:34.0127 6856 RDPCDD - ok
19:33:34.0140 6856 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:33:34.0143 6856 RDPENCDD - ok
19:33:34.0148 6856 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:33:34.0151 6856 RDPREFMP - ok
19:33:34.0181 6856 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:33:34.0185 6856 RdpVideoMiniport - ok
19:33:34.0201 6856 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:33:34.0210 6856 RDPWD - ok
19:33:34.0222 6856 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:33:34.0231 6856 rdyboost - ok
19:33:34.0235 6856 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:33:34.0237 6856 RemoteAccess - ok
19:33:34.0266 6856 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:33:34.0275 6856 RemoteRegistry - ok
19:33:34.0289 6856 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:33:34.0294 6856 RpcEptMapper - ok
19:33:34.0298 6856 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:33:34.0302 6856 RpcLocator - ok
19:33:34.0313 6856 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:33:34.0317 6856 RpcSs - ok
19:33:34.0330 6856 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:33:34.0336 6856 rspndr - ok
19:33:34.0362 6856 [ 39A719875F572241C585A629EE62EB14 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
19:33:34.0372 6856 RTL8167 - ok
19:33:34.0395 6856 [ B3F36B4B3F192EA87DDC119F3A0B3E45 ] RTL8192su C:\Windows\system32\DRIVERS\RTL8192su.sys
19:33:34.0407 6856 RTL8192su - ok
19:33:34.0437 6856 [ AE722FD346B75B776CA75F297347EE8A ] s125bus C:\Windows\system32\DRIVERS\s125bus.sys
19:33:34.0442 6856 s125bus - ok
19:33:34.0461 6856 [ 651362AADC145D0028DF288182989136 ] s125mdfl C:\Windows\system32\DRIVERS\s125mdfl.sys
19:33:34.0465 6856 s125mdfl - ok
19:33:34.0483 6856 [ 0744248B0EE7C0F652882AE3B67E6429 ] s125mdm C:\Windows\system32\DRIVERS\s125mdm.sys
19:33:34.0489 6856 s125mdm - ok
19:33:34.0505 6856 [ 51C6262AD6DD5DA12543F623B0EE2EBF ] s125mgmt C:\Windows\system32\DRIVERS\s125mgmt.sys
19:33:34.0511 6856 s125mgmt - ok
19:33:34.0539 6856 [ 5A5B9B10A9545A832B436884A1D1A848 ] s125obex C:\Windows\system32\DRIVERS\s125obex.sys
19:33:34.0545 6856 s125obex - ok
19:33:34.0548 6856 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:33:34.0550 6856 SamSs - ok
19:33:34.0564 6856 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:33:34.0570 6856 sbp2port - ok
19:33:34.0592 6856 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:33:34.0595 6856 SCardSvr - ok
19:33:34.0605 6856 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:33:34.0610 6856 scfilter - ok
19:33:34.0629 6856 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:33:34.0637 6856 Schedule - ok
19:33:34.0657 6856 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:33:34.0658 6856 SCPolicySvc - ok
19:33:34.0671 6856 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:33:34.0682 6856 SDRSVC - ok
19:33:34.0695 6856 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:33:34.0699 6856 secdrv - ok
19:33:34.0709 6856 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:33:34.0715 6856 seclogon - ok
19:33:34.0729 6856 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:33:34.0731 6856 SENS - ok
19:33:34.0749 6856 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:33:34.0755 6856 SensrSvc - ok
19:33:34.0771 6856 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
19:33:34.0775 6856 Serenum - ok
19:33:34.0792 6856 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
19:33:34.0798 6856 Serial - ok
19:33:34.0805 6856 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:33:34.0810 6856 sermouse - ok
19:33:34.0825 6856 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:33:34.0832 6856 SessionEnv - ok
19:33:34.0839 6856 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:33:34.0842 6856 sffdisk - ok
19:33:34.0848 6856 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:33:34.0851 6856 sffp_mmc - ok
19:33:34.0856 6856 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:33:34.0860 6856 sffp_sd - ok
19:33:34.0873 6856 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
19:33:34.0877 6856 sfloppy - ok
19:33:34.0902 6856 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:33:34.0906 6856 SharedAccess - ok
19:33:34.0920 6856 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:33:34.0924 6856 ShellHWDetection - ok
19:33:34.0944 6856 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
19:33:34.0950 6856 SiSRaid2 - ok
19:33:34.0961 6856 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:33:34.0967 6856 SiSRaid4 - ok
19:33:34.0986 6856 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:33:34.0992 6856 Smb - ok
19:33:35.0025 6856 [ FDB6E127DF739D4911319F0C8D339CAF ] snapman C:\Windows\system32\DRIVERS\snapman.sys
19:33:35.0033 6856 snapman - ok
19:33:35.0048 6856 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:33:35.0054 6856 SNMPTRAP - ok
19:33:35.0057 6856 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:33:35.0061 6856 spldr - ok
19:33:35.0097 6856 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:33:35.0108 6856 Spooler - ok
19:33:35.0154 6856 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:33:35.0195 6856 sppsvc - ok
19:33:35.0204 6856 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:33:35.0210 6856 sppuinotify - ok
19:33:35.0223 6856 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:33:35.0234 6856 srv - ok
19:33:35.0248 6856 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:33:35.0261 6856 srv2 - ok
19:33:35.0277 6856 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:33:35.0284 6856 srvnet - ok
19:33:35.0298 6856 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:33:35.0306 6856 SSDPSRV - ok
19:33:35.0313 6856 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:33:35.0315 6856 SstpSvc - ok
19:33:35.0328 6856 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
19:33:35.0332 6856 stexstor - ok
19:33:35.0353 6856 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:33:35.0359 6856 stisvc - ok
19:33:35.0367 6856 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:33:35.0370 6856 swenum - ok
19:33:35.0384 6856 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:33:35.0390 6856 swprv - ok
19:33:35.0519 6856 [ A214C8AA6A6C06C9DBAB1310E38DAB4A ] syncagentsrv C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
19:33:35.0591 6856 syncagentsrv - ok
19:33:35.0626 6856 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:33:35.0650 6856 SysMain - ok
19:33:35.0663 6856 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:33:35.0665 6856 TabletInputService - ok
19:33:35.0681 6856 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:33:35.0685 6856 TapiSrv - ok
19:33:35.0691 6856 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:33:35.0693 6856 TBS - ok
19:33:35.0736 6856 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:33:35.0775 6856 Tcpip - ok
19:33:35.0811 6856 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:33:35.0826 6856 TCPIP6 - ok
19:33:35.0843 6856 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:33:35.0848 6856 tcpipreg - ok
19:33:35.0861 6856 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:33:35.0864 6856 TDPIPE - ok
19:33:35.0885 6856 [ 843DAFC2CD4ED5D57FA40FD2000C6296 ] tdrpman C:\Windows\system32\DRIVERS\tdrpman.sys
19:33:35.0905 6856 tdrpman - ok
19:33:35.0921 6856 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:33:35.0925 6856 TDTCP - ok
19:33:35.0937 6856 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:33:35.0942 6856 tdx - ok
19:33:36.0062 6856 [ C9B9373A0A430C11F0213E359D0772B2 ] TeamViewer7 D:\Tools\Internet\TeamViewer\TeamViewer_Service.exe
19:33:36.0081 6856 TeamViewer7 - ok
19:33:36.0098 6856 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:33:36.0103 6856 TermDD - ok
19:33:36.0122 6856 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:33:36.0129 6856 TermService - ok
19:33:36.0133 6856 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:33:36.0135 6856 Themes - ok
19:33:36.0160 6856 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:33:36.0162 6856 THREADORDER - ok
19:33:36.0181 6856 [ 31C9790525705B292F3B30F6676873CD ] tib_mounter C:\Windows\system32\DRIVERS\tib_mounter.sys
19:33:36.0202 6856 tib_mounter - ok
19:33:36.0210 6856 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:33:36.0213 6856 TrkWks - ok
19:33:36.0250 6856 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:33:36.0251 6856 TrustedInstaller - ok
19:33:36.0261 6856 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:33:36.0265 6856 tssecsrv - ok
19:33:36.0292 6856 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:33:36.0297 6856 TsUsbFlt - ok
19:33:36.0317 6856 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
19:33:36.0322 6856 TsUsbGD - ok
19:33:36.0349 6856 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:33:36.0350 6856 tunnel - ok
19:33:36.0360 6856 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:33:36.0365 6856 uagp35 - ok
19:33:36.0382 6856 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:33:36.0392 6856 udfs - ok
19:33:36.0402 6856 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:33:36.0410 6856 UI0Detect - ok
19:33:36.0424 6856 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:33:36.0429 6856 uliagpkx - ok
19:33:36.0440 6856 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:33:36.0445 6856 umbus - ok
19:33:36.0457 6856 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
19:33:36.0461 6856 UmPass - ok
19:33:36.0474 6856 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:33:36.0479 6856 upnphost - ok
19:33:36.0492 6856 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:33:36.0497 6856 usbccgp - ok
19:33:36.0517 6856 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:33:36.0524 6856 usbcir - ok
19:33:36.0544 6856 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:33:36.0548 6856 usbehci - ok
19:33:36.0568 6856 [ 33A58C5630200E17B51C8D73DD64181B ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
19:33:36.0572 6856 usbfilter - ok
19:33:36.0594 6856 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:33:36.0604 6856 usbhub - ok
19:33:36.0613 6856 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
19:33:36.0617 6856 usbohci - ok
19:33:36.0627 6856 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
19:33:36.0632 6856 usbprint - ok
19:33:36.0656 6856 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:33:36.0661 6856 USBSTOR - ok
19:33:36.0675 6856 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:33:36.0679 6856 usbuhci - ok
19:33:36.0688 6856 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:33:36.0691 6856 UxSms - ok
19:33:36.0697 6856 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:33:36.0698 6856 VaultSvc - ok
19:33:36.0752 6856 [ FD911873C0BB6945FA38C16E9A2B58F9 ] VClone C:\Windows\system32\DRIVERS\VClone.sys
19:33:36.0756 6856 VClone - ok
19:33:36.0766 6856 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:33:36.0770 6856 vdrvroot - ok
19:33:36.0789 6856 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:33:36.0795 6856 vds - ok
19:33:36.0809 6856 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:33:36.0814 6856 vga - ok
19:33:36.0822 6856 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:33:36.0826 6856 VgaSave - ok
19:33:36.0842 6856 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:33:36.0851 6856 vhdmp - ok
19:33:36.0865 6856 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:33:36.0869 6856 viaide - ok
19:33:36.0896 6856 [ 927CBC96C4635F235301411E530FB56E ] vididr C:\Windows\system32\DRIVERS\vididr.sys
19:33:36.0904 6856 vididr - ok
19:33:36.0923 6856 [ 88B4E5C396003BCF479CA4D9BE851D57 ] vidsflt C:\Windows\system32\DRIVERS\vidsflt.sys
19:33:36.0929 6856 vidsflt - ok
19:33:36.0939 6856 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:33:36.0945 6856 volmgr - ok
19:33:36.0959 6856 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:33:36.0971 6856 volmgrx - ok
19:33:36.0982 6856 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:33:36.0989 6856 volsnap - ok
19:33:37.0003 6856 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:33:37.0009 6856 vsmraid - ok
19:33:37.0038 6856 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:33:37.0062 6856 VSS - ok
19:33:37.0075 6856 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
19:33:37.0079 6856 vwifibus - ok
19:33:37.0102 6856 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
19:33:37.0107 6856 vwififlt - ok
19:33:37.0125 6856 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:33:37.0130 6856 W32Time - ok
19:33:37.0180 6856 [ B32009DB1972E7F2C227499289C4384A ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll
19:33:37.0200 6856 W3SVC - ok
19:33:37.0205 6856 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:33:37.0210 6856 WacomPen - ok
19:33:37.0221 6856 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:33:37.0227 6856 WANARP - ok
19:33:37.0231 6856 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:33:37.0232 6856 Wanarpv6 - ok
19:33:37.0238 6856 [ B32009DB1972E7F2C227499289C4384A ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
19:33:37.0241 6856 WAS - ok
19:33:37.0271 6856 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
19:33:37.0314 6856 WatAdminSvc - ok
19:33:37.0345 6856 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:33:37.0373 6856 wbengine - ok
19:33:37.0392 6856 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:33:37.0396 6856 WbioSrvc - ok
19:33:37.0413 6856 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:33:37.0417 6856 wcncsvc - ok
19:33:37.0423 6856 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:33:37.0425 6856 WcsPlugInService - ok
19:33:37.0436 6856 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
19:33:37.0441 6856 Wd - ok
19:33:37.0463 6856 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:33:37.0479 6856 Wdf01000 - ok
19:33:37.0491 6856 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:33:37.0498 6856 WdiServiceHost - ok
19:33:37.0501 6856 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:33:37.0503 6856 WdiSystemHost - ok
19:33:37.0513 6856 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:33:37.0517 6856 WebClient - ok
19:33:37.0541 6856 [ D5BA7D43FA2EF656BF7E98A188391E40 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:33:37.0545 6856 Wecsvc - ok
19:33:37.0557 6856 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:33:37.0562 6856 wercplsupport - ok
19:33:37.0576 6856 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:33:37.0578 6856 WerSvc - ok
19:33:37.0584 6856 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:33:37.0587 6856 WfpLwf - ok
19:33:37.0602 6856 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:33:37.0606 6856 WIMMount - ok
19:33:37.0628 6856 WinDefend - ok
19:33:37.0644 6856 WinHttpAutoProxySvc - ok
19:33:37.0681 6856 [ 136760C1E9697BAF4ECDEAE5590A0806 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:33:37.0697 6856 Winmgmt - ok
19:33:37.0767 6856 [ 3BB6B401A780BF434C8F58137DE10BF7 ] WinRM C:\Windows\system32\WsmSvc.dll
19:33:37.0798 6856 WinRM - ok
19:33:37.0851 6856 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:33:37.0857 6856 WinUsb - ok
19:33:37.0877 6856 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:33:37.0885 6856 Wlansvc - ok
19:33:37.0958 6856 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
19:33:37.0969 6856 wlcrasvc - ok
19:33:38.0023 6856 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:33:38.0056 6856 wlidsvc - ok
19:33:38.0077 6856 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:33:38.0081 6856 WmiAcpi - ok
19:33:38.0093 6856 [ 4DF841632B62A7CF19A79A05046A8AB1 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:33:38.0101 6856 wmiApSrv - ok
19:33:38.0112 6856 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:33:38.0117 6856 WPCSvc - ok
19:33:38.0128 6856 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:33:38.0130 6856 WPDBusEnum - ok
19:33:38.0141 6856 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:33:38.0145 6856 ws2ifsl - ok
19:33:38.0149 6856 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
19:33:38.0157 6856 wscsvc - ok
19:33:38.0160 6856 WSearch - ok
19:33:38.0185 6856 [ 82E8F5AA03DF7DBDB8A33F700D5D8CDA ] wsvd C:\Windows\system32\DRIVERS\wsvd.sys
19:33:38.0192 6856 wsvd - ok
19:33:38.0241 6856 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:33:38.0274 6856 wuauserv - ok
19:33:38.0293 6856 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:33:38.0298 6856 WudfPf - ok
19:33:38.0329 6856 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:33:38.0335 6856 WUDFRd - ok
19:33:38.0359 6856 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:33:38.0362 6856 wudfsvc - ok
19:33:38.0381 6856 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
19:33:38.0385 6856 WwanSvc - ok
19:33:38.0399 6856 ================ Scan global ===============================
19:33:38.0412 6856 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:33:38.0434 6856 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
19:33:38.0440 6856 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
19:33:38.0457 6856 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:33:38.0473 6856 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:33:38.0483 6856 [Global] - ok
19:33:38.0483 6856 ================ Scan MBR ==================================
19:33:38.0491 6856 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:33:38.0672 6856 \Device\Harddisk0\DR0 - ok
19:33:38.0678 6856 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
19:33:38.0775 6856 \Device\Harddisk1\DR1 - ok
19:33:38.0780 6856 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2
19:33:39.0110 6856 \Device\Harddisk2\DR2 - ok
19:33:39.0130 6856 [ 8913823FF508CCF109DB74B636C301DA ] \Device\Harddisk6\DR6
19:33:39.0467 6856 \Device\Harddisk6\DR6 - ok
19:33:39.0482 6856 [ 4C54042F5B2569C9DDCF173120D730F9 ] \Device\Harddisk7\DR7
19:33:39.0650 6856 \Device\Harddisk7\DR7 - ok
19:33:39.0650 6856 ================ Scan VBR ==================================
19:33:39.0663 6856 [ 39ED176AD43EC4FC3EECB0CDA6F98727 ] \Device\Harddisk0\DR0\Partition1
19:33:39.0666 6856 \Device\Harddisk0\DR0\Partition1 - ok
19:33:39.0671 6856 [ 553CCDA47B9FF429A7BD3AAC9E0BB1E5 ] \Device\Harddisk0\DR0\Partition2
19:33:39.0673 6856 \Device\Harddisk0\DR0\Partition2 - ok
19:33:39.0678 6856 [ 96A51FAD45200AF1C2D605241B9FF3B3 ] \Device\Harddisk0\DR0\Partition3
19:33:39.0680 6856 \Device\Harddisk0\DR0\Partition3 - ok
19:33:39.0702 6856 [ 4E1176C0590607E75F09E5785FC4EC52 ] \Device\Harddisk0\DR0\Partition4
19:33:39.0704 6856 \Device\Harddisk0\DR0\Partition4 - ok
19:33:39.0722 6856 [ D375F572A0A86A0FFBF1D91FAEE8C68E ] \Device\Harddisk0\DR0\Partition5
19:33:39.0724 6856 \Device\Harddisk0\DR0\Partition5 - ok
19:33:39.0742 6856 [ 643838E9AA97231A3C5682ED6F14465E ] \Device\Harddisk0\DR0\Partition6
19:33:39.0744 6856 \Device\Harddisk0\DR0\Partition6 - ok
19:33:39.0757 6856 [ BF98D002768FBC093488B1CF3F4E7396 ] \Device\Harddisk0\DR0\Partition7
19:33:39.0759 6856 \Device\Harddisk0\DR0\Partition7 - ok
19:33:39.0764 6856 [ D30639A7C829E6D52C87D9F1BF7C95D2 ] \Device\Harddisk1\DR1\Partition1
19:33:39.0767 6856 \Device\Harddisk1\DR1\Partition1 - ok
19:33:39.0771 6856 [ 02A47A792DC9DD81C1E20157D901D56F ] \Device\Harddisk2\DR2\Partition1
19:33:39.0774 6856 \Device\Harddisk2\DR2\Partition1 - ok
19:33:39.0784 6856 [ 04CE441FB3BEC069BD675C630AC17549 ] \Device\Harddisk6\DR6\Partition1
19:33:39.0787 6856 \Device\Harddisk6\DR6\Partition1 - ok
19:33:39.0791 6856 [ 25142B923B2BAC9D5D8E9DCC62FD9450 ] \Device\Harddisk7\DR7\Partition1
19:33:39.0793 6856 \Device\Harddisk7\DR7\Partition1 - ok
19:33:39.0793 6856 ============================================================
19:33:39.0793 6856 Scan finished
19:33:39.0793 6856 ============================================================
19:33:39.0803 3448 Detected object count: 0
19:33:39.0803 3448 Actual detected object count: 0
19:35:40.0645 6328 Deinitialize success
Zitat:
Schritt 5:
Scan mit DDS (+ attach)
| dds.txt:
DDS Logfile:
DDS Logfile: Code:
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457
Run by Deedee privat at 19:36:11 on 2012-12-15
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3561.2128 [GMT 1:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
D:\Tools\Internet\TeamViewer\TeamViewer_Service.exe
C:\Windows\system32\svchost.exe -k iissvcs
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
D:\Tools\Tuning+Wartung\Ashampoo UnInstaller 4\UIWatcher.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Deedee privat\AppData\Roaming\Imkin\igpu.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\FreePDF_XP\fpassist.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
D:\Tools\Archiv\TrueImage\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Tools\Hardware\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Windows\splwow64.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Microsoft\Office14\URLREDIR.DLL
BHO: IEHlprObj Class: {CE7C3CF0-4B15-11D1-ABED-709549C10000} - D:\Kalender\org6\organize\iehelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
BHO: Logitech Flow Scroll: {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll
uRun: [UIWatcher] D:\Tools\Tuning+Wartung\Ashampoo UnInstaller 4\UIWatcher.exe
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [Paagat] "C:\Users\Deedee privat\AppData\Roaming\Imkin\igpu.exe"
mRun: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
mRun: [FreePDF Assistant] "C:\Program Files (x86)\FreePDF_XP\fpassist.exe"
mRun: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
mRun: [TrueImageMonitor.exe] "D:\Tools\Archiv\TrueImage\TrueImageHome\TrueImageMonitor.exe"
mRun: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "D:\Media\Player+Writer\QuickTime\QTTask.exe" -atboottime
mRun: [VirtualCloneDrive] "D:\Tools\Hardware\VirtualCloneDrive\VCDDaemon.exe" /s
mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
StartupFolder: C:\Users\DEEDEE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ADVENT~1.LNK - F:\XMAS\Flash\Adventsbaum.exe
StartupFolder: C:\Users\DEEDEE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ADVENT~2.LNK - F:\XMAS\Flash\Adventskalender.exe
StartupFolder: C:\Users\DEEDEE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ADVENT~3.LNK - F:\XMAS\Adventskranz.exe
StartupFolder: C:\Users\DEEDEE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\GEBURT~1.LNK - D:\Geburtstag\Geburtstag.exe
StartupFolder: C:\Users\DEEDEE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\X-MAST~1.LNK - F:\XMAS\X-masTreeV1-2.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: An OneNote s&enden - D:\Office\MICROS~1\Office14\ONBttnIE.dll/105
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Nach Microsoft E&xcel exportieren - D:\Office\MICROS~1\Office14\EXCEL.EXE/3000
IE: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - D:\Office\Microsoft\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - D:\Office\Microsoft\Office14\ONBttnIELinkedNotes.dll
IE: {B4E30F61-16D9-11D3-85D1-005004229569} - {85E0B172-04FA-11D1-B7DA-00A0C90348D6}
Trusted Zone: ***.de
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{FABD9C0B-EBC2-4CD7-95F4-F5880AB28FC8} : DHCPNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
x64-BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: Logitech Flow Scroll: {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll
x64-Run: [LogiScrollApp] C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
x64-Run: [MedionReminder] C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
x64-Run: [Acronis Scheduler2 Service] "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
x64-IE: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
x64-Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 amd_sata;amd_sata;C:\Windows\System32\drivers\amd_sata.sys [2012-4-25 82048]
R0 amd_xata;amd_xata;C:\Windows\System32\drivers\amd_xata.sys [2012-4-25 42624]
R0 fltsrv;Acronis Storage Filter Management;C:\Windows\System32\drivers\fltsrv.sys [2012-10-13 155272]
R0 tib_mounter;Acronis TIB Mounter;C:\Windows\System32\drivers\tib_mounter.sys [2012-10-13 1093256]
R0 vididr;Acronis Virtual Disk;C:\Windows\System32\drivers\vididr.sys [2012-10-13 228488]
R0 vidsflt;Acronis Disk Storage Filter;C:\Windows\System32\drivers\vidsflt.sys [2012-10-13 166024]
R1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2012-11-15 27800]
R2 afcdpsrv;Acronis Nonstop Backup Service;C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2012-10-13 3729400]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-7-28 239616]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-8-6 361984]
R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-11-15 84256]
R2 AntiVirService;Avira Echtzeit-Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-11-15 108320]
R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2012-11-15 98888]
R2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service;C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2011-4-13 70952]
R2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service;C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2011-4-13 312616]
R2 syncagentsrv;Acronis Sync Agent Service;C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2012-8-18 7027752]
R2 TeamViewer7;TeamViewer 7;D:\Tools\Internet\TeamViewer\TeamViewer_Service.exe [2012-10-10 2848168]
R3 afcdp;afcdp;C:\Windows\System32\drivers\afcdp.sys [2012-10-13 367200]
R3 amdhub30;AMD USB 3.0 Hub Driver;C:\Windows\System32\drivers\amdhub30.sys [2012-4-25 102528]
R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-4-25 46136]
R3 amdxhc;AMD USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\amdxhc.sys [2012-4-25 219776]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-5-14 96896]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-4-25 676968]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;C:\Windows\System32\drivers\RTL8192su.sys [2011-7-18 694888]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-10-13 56448]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 ampa;ampa;C:\Windows\System32\ampa.sys [2012-10-7 15288]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-10-30 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-10-30 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2012-10-30 30208]
S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-10-23 1255736]
S3 wsvd;wsvd;C:\Windows\System32\drivers\wsvd.sys [2010-9-23 129008]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184]
.
=============== Created Last 30 ================
.
2012-12-15 12:19:59 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{16E94EC5-D127-43B2-9E38-35FB1B1DAF7D}
2012-12-15 00:19:34 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{A80A2535-A822-4464-B19D-DC50315223CA}
2012-12-14 06:26:16 9125352 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E5FBD93B-084E-4213-AB17-05A5BE626D7E}\mpengine.dll
2012-12-13 22:15:06 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2012-12-13 19:23:11 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{A311ADED-5BF0-419F-AECB-2C4E202DE88F}
2012-12-12 19:02:02 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{6A86AE9B-D55D-4963-916A-1FF004F526CD}
2012-12-12 07:01:38 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{9B37CD5E-C03E-48F6-9E75-7EA0742DD24A}
2012-12-11 22:16:08 -------- d-----w- C:\Users\Deedee privat\AppData\Local\TO-Works
2012-12-11 21:57:31 -------- d-----w- C:\Users\Deedee privat\AppData\Local\InstallShare
2012-12-11 19:36:01 -------- d-----w- C:\Windows\Migration
2012-12-11 19:08:56 424960 ----a-w- C:\Windows\System32\KernelBase.dll
2012-12-11 19:05:54 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-12-11 19:05:54 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-12-11 19:05:32 3149824 ----a-w- C:\Windows\System32\win32k.sys
2012-12-11 19:05:29 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-11 19:05:29 367616 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-11 19:05:29 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-11 19:05:29 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-11 19:05:00 478208 ----a-w- C:\Windows\System32\dpnet.dll
2012-12-11 19:05:00 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll
2012-12-11 19:01:14 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{73917388-3620-4AB7-AEAD-8724AC4CDAA6}
2012-12-10 16:43:17 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{E0C3140E-62FB-4242-BFB0-4908332458D2}
2012-12-09 23:18:05 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{CC6B474E-1270-454D-81E9-0470E60CC01F}
2012-12-09 11:22:02 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Mp3tag
2012-12-09 11:17:53 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{B7F139F7-EF39-4E1B-8491-3D0FE706FD72}
2012-12-08 22:46:25 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{D6308186-8B00-4B63-AF1F-C0E270029D0A}
2012-12-08 17:46:00 -------- d-----w- C:\tmp
2012-12-08 10:15:51 -------- d-----w- C:\ProgramData\eBay
2012-12-08 07:41:59 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{75E86770-2B75-4592-8B53-3BD1090AEB24}
2012-12-07 18:18:17 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{17248806-8A99-42A9-AC66-38C7A3E7AF99}
2012-12-06 19:10:38 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{71EF2C4C-D3E1-4617-A1E0-3B8014857F08}
2012-12-06 07:10:14 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{EDEF2496-538F-4CCF-AD1D-35CA3487F3BF}
2012-12-05 20:37:10 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Engelmann Media
2012-12-05 16:44:20 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{FF7B6982-EE72-4CB4-99ED-AB034BC5147A}
2012-12-04 19:25:35 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{FD8BCC9E-A01F-4F0F-8EF7-3C454E749D0C}
2012-12-03 23:24:38 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{8F9381ED-185A-48A7-9478-145D86ED57CE}
2012-12-03 23:19:45 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Klett
2012-12-03 11:24:12 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{0E714D11-60D4-4706-8553-4D9D9BEACDE5}
2012-12-02 15:24:07 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Onafm
2012-12-02 15:24:07 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Imkin
2012-12-02 15:24:07 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Awsia
2012-12-02 15:03:00 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Typograf
2012-12-02 10:40:34 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{0EE7C478-28E6-4C16-BB63-ABC1EEFDC6D6}
2012-12-02 02:47:22 -------- d-----w- C:\ProgramData\IDMComp
2012-12-02 02:44:51 -------- d-----w- C:\Users\Deedee privat\AppData\Local\Downloaded Installations
2012-12-01 22:40:09 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{F8FE3EF2-288A-47D3-B7FC-E3AE36E20CE7}
2012-12-01 10:39:57 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{07486A37-2DA6-4B94-A368-51F3B83D65A5}
2012-12-01 02:22:58 -------- d-----w- C:\ProgramData\Screentime
2012-12-01 02:20:21 -------- d-----w- C:\Users\Deedee privat\AppData\Local\Screentime
2012-11-30 22:39:32 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{E85DB1AA-70DD-402C-A463-D04A94E2AC80}
2012-11-29 18:20:22 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{2D4B2F5B-6C64-4DDE-A348-1BDC9EC5C941}
2012-11-29 06:17:51 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{026B2DC7-933D-48D5-99FB-2387365D49A1}
2012-11-28 16:56:40 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{F29B686F-B48E-453C-A40F-BC5042F0F94A}
2012-11-27 19:28:45 -------- d-----w- C:\ProgramData\vsosdk
2012-11-27 17:23:34 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\welschware
2012-11-27 16:04:26 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{7688CCCF-A9BB-4CB5-AA6F-B9FD1A4649CB}
2012-11-26 23:19:42 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{E3227E80-5D3F-43CD-ACD3-0CBB7F573A75}
2012-11-26 23:19:16 -------- d--h--r- C:\ESD
2012-11-26 11:19:30 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{7A366ABC-45FD-41D6-B824-3AE43A642D2B}
2012-11-26 00:39:16 -------- d-----w- C:\ProgramData\Engelmann Media
2012-11-26 00:39:16 -------- d-----w- C:\Program Files (x86)\Common Files\HDX4
2012-11-26 00:39:15 -------- d-----w- C:\Program Files (x86)\Common Files\Ogg+WebM
2012-11-26 00:25:31 34304 ----a-w- C:\Windows\System32\DfSdkBt.exe
2012-11-26 00:12:16 -------- d-----w- C:\Users\Deedee privat\AppData\Local\Abelssoft
2012-11-25 13:00:06 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{4184E97C-9456-48D9-BCAC-6946BD3DFEC9}
2012-11-25 00:59:42 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{31499518-8B59-4850-ADC7-B493666685E2}
2012-11-24 12:43:30 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{085E90C1-9E8C-42DA-B05D-1E24101F1361}
2012-11-23 20:14:39 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{77D47A2C-64BC-46D9-BEEE-47C56A774DBE}
2012-11-22 18:44:47 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{789FABF9-91C7-4BE7-956E-16A7D09D45E9}
2012-11-21 14:42:22 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{21DA7991-E49E-48C6-9D03-70D0231346F7}
2012-11-20 22:54:12 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{6D3CE54E-D481-4F38-8C78-A29AA69C7361}
2012-11-19 20:33:22 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{BD386635-7715-4A48-BCBB-C2C208E041CA}
2012-11-18 18:44:17 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{C9C52D35-AFB6-489B-96DB-8D4A4A65EBD0}
2012-11-18 00:16:53 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{1604DD72-12B6-479C-9477-74D454217E1D}
2012-11-17 12:16:41 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{F4BACE82-A14E-4555-B5A7-8BCAC028D99B}
2012-11-16 21:13:03 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{D160EB88-A312-446C-B8CB-0B1F7F8E15E6}
2012-11-15 22:35:28 -------- d-----w- C:\Users\Deedee privat\AppData\Roaming\Avira
2012-11-15 22:32:49 98888 ----a-w- C:\Windows\System32\drivers\avgntflt.sys
2012-11-15 22:32:49 27800 ----a-w- C:\Windows\System32\drivers\avkmgr.sys
2012-11-15 22:32:47 -------- d-----w- C:\ProgramData\Avira
2012-11-15 22:32:47 -------- d-----w- C:\Program Files (x86)\Avira
2012-11-15 20:01:24 -------- d-----w- C:\Users\Deedee privat\AppData\Local\{E3C017E9-5F4F-4E60-97C3-5E7A2FF1853D}
.
==================== Find3M ====================
.
2012-12-11 21:39:02 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-11 21:39:02 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll
2012-10-13 15:46:35 0 ----a-w- C:\Windows\ativpsrm.bin
2012-10-13 15:06:25 367200 ----a-w- C:\Windows\System32\drivers\afcdp.sys
2012-10-13 15:06:17 1340040 ----a-w- C:\Windows\System32\drivers\tdrpman.sys
2012-10-13 15:06:09 1093256 ----a-w- C:\Windows\System32\drivers\tib_mounter.sys
2012-10-13 15:05:58 228488 ----a-w- C:\Windows\System32\drivers\vididr.sys
2012-10-13 15:05:47 166024 ----a-w- C:\Windows\System32\drivers\vidsflt.sys
2012-10-13 15:05:40 340104 ----a-w- C:\Windows\System32\drivers\snapman.sys
2012-10-13 15:05:33 155272 ----a-w- C:\Windows\System32\drivers\fltsrv.sys
2012-10-13 09:13:50 18960 ----a-w- C:\Windows\System32\drivers\LNonPnP.sys
2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll
2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll
2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll
2012-10-07 19:14:39 72480 ----a-w- C:\Windows\System32\drivers\tifsfilt.sys
2012-10-04 17:46:16 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-10-04 17:46:15 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-10-04 17:46:15 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-10-04 17:45:55 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-10-04 17:43:28 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-10-04 16:47:41 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-10-04 16:47:41 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-10-04 15:21:55 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-10-04 14:46:46 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-10-04 14:46:46 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-10-04 14:46:44 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-10-04 14:46:43 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-10-04 14:41:50 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll
2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll
2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll
2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll
2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll
2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll
2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll
2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll
2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll
2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys
2012-09-25 22:47:43 78336 ----a-w- C:\Windows\SysWow64\synceng.dll
2012-09-25 22:46:17 95744 ----a-w- C:\Windows\System32\synceng.dll
2012-07-14 09:03:34 3993600 ----a-w- C:\Program Files (x86)\GUT8037.tmp
2012-05-11 13:16:16 171520 ----a-w- C:\Program Files (x86)\Common Files\dsfOggDemux2.dll
2011-04-18 21:51:20 653136 ----a-w- C:\Program Files (x86)\Common Files\MSVCR90.dll
2011-04-18 21:51:20 569680 ----a-w- C:\Program Files (x86)\Common Files\MSVCP90.dll
2011-01-12 01:00:44 30208 ----a-w- C:\Program Files (x86)\Common Files\wmpinfo.dll
2011-01-12 01:00:42 240128 ----a-w- C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll
2011-01-12 01:00:42 146944 ----a-w- C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 01:00:40 221184 ----a-w- C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 01:00:40 204800 ----a-w- C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll
2010-12-16 20:39:36 302592 ----a-w- C:\Program Files (x86)\Common Files\webmmux.dll
2010-12-16 20:39:16 701440 ----a-w- C:\Program Files (x86)\Common Files\vp8encoder.dll
2010-12-16 20:39:16 412672 ----a-w- C:\Program Files (x86)\Common Files\vp8decoder.dll
2010-12-16 20:39:14 292352 ----a-w- C:\Program Files (x86)\Common Files\webmsplit.dll
.
============= FINISH: 19:36:41,79 ===============
--- --- ---
--- --- ---
attach.txt: Code:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 13.10.2012 14:21:38
System Uptime: 15.12.2012 19:23:27 (0 hours ago)
.
Motherboard: MEDION | | MS-7800
Processor: AMD A8-5500 APU with Radeon(tm) HD Graphics | P0 | 1376/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 125 GiB total, 67,924 GiB free.
D: is FIXED (NTFS) - 195 GiB total, 147,131 GiB free.
E: is FIXED (NTFS) - 342 GiB total, 215,312 GiB free.
F: is FIXED (NTFS) - 107 GiB total, 99,271 GiB free.
G: is FIXED (NTFS) - 117 GiB total, 107,258 GiB free.
H: is FIXED (NTFS) - 43 GiB total, 38,116 GiB free.
I: is CDROM ()
J: is CDROM ()
K: is FIXED (NTFS) - 298 GiB total, 89,843 GiB free.
L: is FIXED (FAT32) - 931 GiB total, 512,761 GiB free.
M: is FIXED (NTFS) - 932 GiB total, 0,471 GiB free.
N: is FIXED (NTFS) - 298 GiB total, 60,057 GiB free.
P: is CDROM (CDFS)
X: is Removable
Y: is Removable
Z: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: AppEx Networks Accelerator LWF
Device ID: ROOT\LEGACY_APXACC\0000
Manufacturer:
Name: AppEx Networks Accelerator LWF
PNP Device ID: ROOT\LEGACY_APXACC\0000
Service: APXACC
.
==== System Restore Points ===================
.
RP55: 11.12.2012 20:19:45 - Windows Update
RP57: 13.12.2012 22:53:55 - Windows Defender Checkpoint
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.3) MUI
Adobe Shockwave Player 11.6
AllDup 3.4.12
AMD APP SDK Runtime
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Fuel
AMD Media Foundation Decoders
AMD Steady Video Plug-In
AMD System Monitor
AMD VISION Engine Control Center
AOMEI Partition Assistant Home Edition 5.1
Apple Application Support
Apple Software Update
Ashampoo Burning Studio
Ashampoo Photo Commander
Ashampoo Photo Commander 9 v.9.4.3
Ashampoo Photo Optimizer
Ashampoo Snap
Ashampoo UnInstaller 4 v.4.30
Ashampoo WinOptimizer 8 v.8.14.00
Avanquest update
Avery Wizard 4.0
Avira Free Antivirus
AWIN NotenBox 7
Canon Easy-PhotoPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool
Canon MG5300 series Benutzerregistrierung
Canon MG5300 series MP Drivers
Canon MG5300 series On-screen Manual
Canon MP Navigator EX 5.0
Canon My Printer
Canon Solution Menu EX
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CorelDRAW Graphics Suite X4
CorelDRAW Graphics Suite X4 - Capture
CorelDRAW Graphics Suite X4 - Content
CorelDRAW Graphics Suite X4 - Draw
CorelDRAW Graphics Suite X4 - Extra Content
CorelDRAW Graphics Suite X4 - Filters
CorelDRAW Graphics Suite X4 - FontNav
CorelDRAW Graphics SUite X4 - ICA
CorelDRAW Graphics Suite X4 - IPM
CorelDRAW Graphics Suite X4 - Lang BR
CorelDRAW Graphics Suite X4 - Lang CZ
CorelDRAW Graphics Suite X4 - Lang DE
CorelDRAW Graphics Suite X4 - Lang EN
CorelDRAW Graphics Suite X4 - Lang ES
CorelDRAW Graphics Suite X4 - Lang FR
CorelDRAW Graphics Suite X4 - Lang IT
CorelDRAW Graphics Suite X4 - Lang NL
CorelDRAW Graphics Suite X4 - Lang PL
CorelDRAW Graphics Suite X4 - Lang SU
CorelDRAW Graphics Suite X4 - Lang SV
CorelDRAW Graphics Suite X4 - PP
CorelDRAW Graphics Suite X4 - VBA
CorelDRAW(R) Graphics Suite X4
CorelDRAW(R) Graphics Suite X4 - Extra Content
CyberLink LabelPrint
CyberLink MediaEspresso
CyberLink PhotoDirector 2011
CyberLink Power2Go
CyberLink PowerDVD 10
CyberLink PowerDVD Copy
CyberLink PowerRecover
CyberLink WaveEditor
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DHTML Editing Component
DVD Shrink 3.2 deutsch
eReg
FastStone Image Viewer 4.6
Fotogalerija Windows Live
FreeCommander 2009.02b
FreePDF (Remove only)
Galeria de Fotografias do Windows Live
Galeria fotografii uslugi Windows Live
Galerie de photos Windows Live
Galería fotográfica de Windows Live
GalleryImages
GetDataBack for NTFS
Google Earth
GPL Ghostscript
IBM Lotus Organizer 6 - Deutsch
Java Auto Updater
Java(TM) 7 Update 3
Java(TM) 7 Update 3 (64-bit)
Junk Mail filter update
LibreOffice 3.6
LibreOffice 3.6 Help Pack (German)
Logitech Flow Scroll 4.0
Logitech SetPoint 6.32
Logitech Unifying-Software 2.10
Medion Home Cinema
Mesh Runtime
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended DEU Language Pack
Microsoft Application Error Reporting
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010
Microsoft Office Excel MUI (German) 2010
Microsoft Office Groove MUI (German) 2010
Microsoft Office InfoPath MUI (German) 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (German) 2010
Microsoft Office Outlook MUI (German) 2010
Microsoft Office PowerPoint MUI (German) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Italian) 2010
Microsoft Office Proofing (German) 2010
Microsoft Office Publisher MUI (German) 2010
Microsoft Office Shared 64-bit MUI (German) 2010
Microsoft Office Shared MUI (German) 2010
Microsoft Office Word MUI (German) 2010
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Mp3tag v2.53
MSVCRT
MSVCRT_amd64
MyKeyFinder
MyPhoneExplorer
PC Fresh
PCSUITE SHREDDER
PlayReady PC Runtime amd64
Poczta uslugi Windows Live
Podstawowe programy Windows Live
Pošta Windows Live
QuickTime
Raccolta foto di Windows Live
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
RedMon - Redirection Port Monitor
S?????? f?t???af??? t?? Windows Live
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687436) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft Visio 2010 (KB2687508) 32-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
SP2GalleryImages
Spelling Dictionaries Support For Adobe Reader X
swMSM
TeamViewer 7
True Image 2013
Turbo Lister 2
Typograf 5.1e
UltraEdit
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VideoMizer
VirtualCloneDrive
Visual Basic for Applications (R) Core
Visual Basic for Applications (R) Core - English
Visual Basic for Applications (R) Core - German
VLC media player 2.0.2
VLC media player 2.0.4
Winamp
Winamp Erkennungs-Plug-in
Windows Live
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotótár
Windows Live Fotogalerie
Windows Live Fotogalleri
Windows Live Fotograf Galerisi
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX control for remote connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Temel Parçalar
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Liven asennustyökalu
Windows Liven sähköposti
Windows Liven valokuvavalikoima
WinRAR 4.01 (32-Bit)
WinZip
WinZip Self-Extractor
WISO Mein Geld 2013 Standard
WISO Steuer-Sparbuch 2012
.
==== End Of File ===========================
Das müsste alles gewesen sein...!
Danke fürs Durchstöbern der Logs!
Gruß
DerDeedee |
