Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   newtab incredibar in Google-Chrome (https://www.trojaner-board.de/133689-newtab-incredibar-google-chrome.html)

Chaintz 13.04.2013 20:32
newtab incredibar in Google-Chrome
 
Guten abend,

seit drei Tagen habe ich in Google-Chrome das newtab-incredibar Problem. Ich habe das Progrramm deinstalliert und die übrigen Tips zur Entfernung eingehalten. Jedoch wird incredibar nicht mehr in den Erweiterungseinstellungen von Chrome angezeigt, erscheint aber beim Öffnen des Browsers trotzdem.

IE und Firefox habe ich freibekommen.

Anbei meine Logs wie erbeten.

Herzlichen Dank im Voraus.

cosinus 15.04.2013 20:51
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner?
Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs posten!

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Chaintz 16.04.2013 00:23
Eigentlich nur diesen einen hier. Wie gesagt, das Prolem taucht nur im Chrome auf, die üblichen Löschmethoden habe ich schon genutzt. Hier mein Malwarebytes log. Mein Bitdefender findet gar nichts, was ich seltsam finde, da das Prolem jünger ist als der Virenscanner.
Code:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.04.11.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16540
Andreas :: ANDREAS-PC [Administrator]

11.04.2013 10:17:25
mbam-log-2013-04-11 (10-17-25).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 239495
Laufzeit: 6 Minute(n), 41 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKLM\SYSTEM\CurrentControlSet\Services\IBUpdaterService (PUP.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 16.04.2013 09:23
Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Die Logs der aufgegebenen Tools wie zB Malwarebytes sind immer zu posten - egal ob ein Fund dabei war oder nicht!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Bitte die drei Tools MBAR / aswMBR / TDSSkiller nun ausführen und die Logs in CODE-Tags posten


MBAR (Malwarebytes Anti-Rootkit)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers


aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Chaintz 16.04.2013 13:20
TDSS-Log:
Code:

14:13:47.0287 3116  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
14:13:47.0515 3116  ============================================================
14:13:47.0515 3116  Current date / time: 2013/04/16 14:13:47.0515
14:13:47.0515 3116  SystemInfo:
14:13:47.0515 3116 
14:13:47.0515 3116  OS Version: 6.1.7601 ServicePack: 1.0
14:13:47.0515 3116  Product type: Workstation
14:13:47.0515 3116  ComputerName: ANDREAS-PC
14:13:47.0515 3116  UserName: Andreas
14:13:47.0515 3116  Windows directory: C:\Windows
14:13:47.0515 3116  System windows directory: C:\Windows
14:13:47.0515 3116  Running under WOW64
14:13:47.0515 3116  Processor architecture: Intel x64
14:13:47.0515 3116  Number of processors: 4
14:13:47.0515 3116  Page size: 0x1000
14:13:47.0515 3116  Boot type: Normal boot
14:13:47.0515 3116  ============================================================
14:13:47.0955 3116  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:13:47.0955 3116  Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:13:47.0966 3116  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:13:47.0999 3116  ============================================================
14:13:47.0999 3116  \Device\Harddisk0\DR0:
14:13:47.0999 3116  MBR partitions:
14:13:47.0999 3116  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:13:47.0999 3116  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
14:13:47.0999 3116  \Device\Harddisk1\DR1:
14:13:47.0999 3116  MBR partitions:
14:13:47.0999 3116  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x7DC5000
14:13:47.0999 3116  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x91C5800, BlocksNum 0x13FFF800
14:13:47.0999 3116  \Device\Harddisk2\DR2:
14:13:47.0999 3116  MBR partitions:
14:13:47.0999 3116  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
14:13:47.0999 3116  ============================================================
14:13:48.0046 3116  C: <-> \Device\Harddisk0\DR0\Partition2
14:13:48.0728 3116  E: <-> \Device\Harddisk1\DR1\Partition1
14:13:48.0773 3116  F: <-> \Device\Harddisk1\DR1\Partition2
14:13:48.0796 3116  H: <-> \Device\Harddisk2\DR2\Partition1
14:13:48.0796 3116  ============================================================
14:13:48.0796 3116  Initialize success
14:13:48.0796 3116  ============================================================
14:13:56.0464 6648  ============================================================
14:13:56.0464 6648  Scan started
14:13:56.0464 6648  Mode: Manual; SigCheck; TDLFS;
14:13:56.0464 6648  ============================================================
14:13:57.0210 6648  ================ Scan system memory ========================
14:13:57.0210 6648  System memory - ok
14:13:57.0210 6648  ================ Scan services =============================
14:13:57.0298 6648  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
14:13:57.0388 6648  1394ohci - ok
14:13:57.0423 6648  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:13:57.0437 6648  ACPI - ok
14:13:57.0468 6648  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
14:13:57.0537 6648  AcpiPmi - ok
14:13:57.0589 6648  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:13:57.0611 6648  AdobeARMservice - ok
14:13:57.0667 6648  [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:13:57.0677 6648  AdobeFlashPlayerUpdateSvc - ok
14:13:57.0703 6648  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
14:13:57.0716 6648  adp94xx - ok
14:13:57.0732 6648  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
14:13:57.0744 6648  adpahci - ok
14:13:57.0753 6648  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
14:13:57.0765 6648  adpu320 - ok
14:13:57.0783 6648  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
14:13:57.0871 6648  AeLookupSvc - ok
14:13:57.0908 6648  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
14:13:57.0966 6648  AFD - ok
14:13:57.0988 6648  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
14:13:57.0996 6648  agp440 - ok
14:13:58.0013 6648  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
14:13:58.0044 6648  ALG - ok
14:13:58.0052 6648  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:13:58.0060 6648  aliide - ok
14:13:58.0150 6648  ALSysIO - ok
14:13:58.0183 6648  [ AE0E45F075749287F182716FA7E047A4 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
14:13:58.0246 6648  AMD External Events Utility - ok
14:13:58.0289 6648  AMD FUEL Service - ok
14:13:58.0300 6648  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
14:13:58.0310 6648  amdide - ok
14:13:58.0318 6648  [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64        C:\Windows\system32\DRIVERS\amdiox64.sys
14:13:58.0330 6648  amdiox64 - ok
14:13:58.0337 6648  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
14:13:58.0365 6648  AmdK8 - ok
14:13:58.0540 6648  [ 81659E0AF25910FA34B9148E135A5C06 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
14:13:58.0689 6648  amdkmdag - ok
14:13:58.0732 6648  [ C9380A676A7046AF287D54FB7E9FEA61 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
14:13:58.0771 6648  amdkmdap - ok
14:13:58.0792 6648  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
14:13:58.0822 6648  AmdPPM - ok
14:13:58.0831 6648  [ 12A5062C06E03FF70DB47800F91C7A13 ] amdsata        C:\Windows\system32\DRIVERS\amdsata.sys
14:13:58.0839 6648  amdsata - ok
14:13:58.0859 6648  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
14:13:58.0869 6648  amdsbs - ok
14:13:58.0894 6648  [ 8A7F289B45CEACAC761E14D5FAC59EB9 ] amdxata        C:\Windows\system32\DRIVERS\amdxata.sys
14:13:58.0902 6648  amdxata - ok
14:13:58.0927 6648  [ 352476C98EF3952563A14F767491BBA9 ] amd_sata        C:\Windows\system32\DRIVERS\amd_sata.sys
14:13:58.0937 6648  amd_sata - ok
14:13:58.0953 6648  [ F4805C309FE48D6939147FE5CCDB1AD4 ] amd_xata        C:\Windows\system32\DRIVERS\amd_xata.sys
14:13:58.0962 6648  amd_xata - ok
14:13:58.0982 6648  [ 5A528A540B1AEE8B1C77ED65094E8CDF ] AODDriver4.01  C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
14:13:58.0992 6648  AODDriver4.01 - ok
14:13:59.0027 6648  [ 5A528A540B1AEE8B1C77ED65094E8CDF ] AODDriver4.2    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
14:13:59.0037 6648  AODDriver4.2 - ok
14:13:59.0068 6648  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
14:13:59.0167 6648  AppID - ok
14:13:59.0205 6648  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:13:59.0240 6648  AppIDSvc - ok
14:13:59.0253 6648  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
14:13:59.0277 6648  Appinfo - ok
14:13:59.0298 6648  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\DRIVERS\arc.sys
14:13:59.0308 6648  arc - ok
14:13:59.0322 6648  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
14:13:59.0330 6648  arcsas - ok
14:13:59.0425 6648  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:13:59.0435 6648  aspnet_state - ok
14:13:59.0449 6648  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:13:59.0478 6648  AsyncMac - ok
14:13:59.0511 6648  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
14:13:59.0521 6648  atapi - ok
14:13:59.0556 6648  [ ED3A041014FBBFDC23D6C04F9C7A5D79 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
14:13:59.0581 6648  AtiHDAudioService - ok
14:13:59.0591 6648  [ FB7602C5C508BE281368AAE0B61B51C6 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
14:13:59.0603 6648  AtiHdmiService - ok
14:13:59.0749 6648  [ 81659E0AF25910FA34B9148E135A5C06 ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
14:13:59.0847 6648  atikmdag - ok
14:13:59.0869 6648  [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie        C:\Windows\system32\DRIVERS\AtiPcie.sys
14:13:59.0878 6648  AtiPcie - ok
14:13:59.0896 6648  [ FC0E8778C000291CAF60EB88C011E931 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
14:13:59.0910 6648  atksgt - ok
14:13:59.0949 6648  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:13:59.0984 6648  AudioEndpointBuilder - ok
14:13:59.0992 6648  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
14:14:00.0019 6648  AudioSrv - ok
14:14:00.0060 6648  [ 84E8D636FAD30B14F279523DDFCD83BE ] avc3            C:\Windows\system32\DRIVERS\avc3.sys
14:14:00.0080 6648  avc3 - ok
14:14:00.0089 6648  [ 3B9549FEF98AB1768A1D6A919F355B70 ] avchv          C:\Windows\system32\DRIVERS\avchv.sys
14:14:00.0103 6648  avchv - ok
14:14:00.0115 6648  [ B725A236D9206A308BCA0943F6506B8E ] avckf          C:\Windows\system32\DRIVERS\avckf.sys
14:14:00.0132 6648  avckf - ok
14:14:00.0167 6648  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:14:00.0224 6648  AxInstSV - ok
14:14:00.0249 6648  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbda.sys
14:14:00.0269 6648  b06bdrv - ok
14:14:00.0287 6648  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
14:14:00.0312 6648  b57nd60a - ok
14:14:00.0371 6648  [ EBD3B67D51F58F45FBDA2BDE853322AA ] BdDesktopParental C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe
14:14:00.0408 6648  BdDesktopParental - ok
14:14:00.0429 6648  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
14:14:00.0472 6648  BDESVC - ok
14:14:00.0527 6648  [ 9920B815BC3B3F2D69071842DD18D422 ] BdfNdisf        c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys
14:14:00.0539 6648  BdfNdisf - ok
14:14:00.0554 6648  [ 4CE4B0098FC315C237FA8867F07886C4 ] bdfwfpf        C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys
14:14:00.0564 6648  bdfwfpf - ok
14:14:00.0583 6648  [ E311541A584A29C0D91DD73730B1DCBE ] BDSandBox      C:\Windows\system32\drivers\bdsandbox.sys
14:14:00.0593 6648  BDSandBox - ok
14:14:00.0605 6648  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:14:00.0634 6648  Beep - ok
14:14:00.0669 6648  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
14:14:00.0710 6648  BFE - ok
14:14:00.0755 6648  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
14:14:00.0792 6648  BITS - ok
14:14:00.0802 6648  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:14:00.0822 6648  blbdrive - ok
14:14:00.0859 6648  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:14:00.0921 6648  bowser - ok
14:14:00.0935 6648  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:14:00.0984 6648  BrFiltLo - ok
14:14:00.0994 6648  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:14:01.0011 6648  BrFiltUp - ok
14:14:01.0040 6648  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
14:14:01.0070 6648  Browser - ok
14:14:01.0083 6648  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
14:14:01.0128 6648  Brserid - ok
14:14:01.0130 6648  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:14:01.0158 6648  BrSerWdm - ok
14:14:01.0171 6648  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:14:01.0201 6648  BrUsbMdm - ok
14:14:01.0205 6648  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:14:01.0222 6648  BrUsbSer - ok
14:14:01.0224 6648  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
14:14:01.0244 6648  BTHMODEM - ok
14:14:01.0263 6648  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
14:14:01.0292 6648  bthserv - ok
14:14:01.0322 6648  [ 3862E463B01E20326325DDDDDFBB3372 ] busenum        C:\Windows\system32\DRIVERS\SteelBus64.sys
14:14:01.0355 6648  busenum - ok
14:14:01.0367 6648  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:14:01.0402 6648  cdfs - ok
14:14:01.0435 6648  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
14:14:01.0455 6648  cdrom - ok
14:14:01.0468 6648  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
14:14:01.0509 6648  CertPropSvc - ok
14:14:01.0519 6648  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
14:14:01.0537 6648  circlass - ok
14:14:01.0556 6648  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
14:14:01.0570 6648  CLFS - ok
14:14:01.0609 6648  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:14:01.0617 6648  clr_optimization_v2.0.50727_32 - ok
14:14:01.0636 6648  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:14:01.0644 6648  clr_optimization_v2.0.50727_64 - ok
14:14:01.0687 6648  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:14:01.0695 6648  clr_optimization_v4.0.30319_32 - ok
14:14:01.0703 6648  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:14:01.0710 6648  clr_optimization_v4.0.30319_64 - ok
14:14:01.0732 6648  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
14:14:01.0742 6648  CmBatt - ok
14:14:01.0779 6648  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:14:01.0787 6648  cmdide - ok
14:14:01.0818 6648  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG            C:\Windows\system32\Drivers\cng.sys
14:14:01.0853 6648  CNG - ok
14:14:01.0865 6648  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
14:14:01.0873 6648  Compbatt - ok
14:14:01.0882 6648  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
14:14:01.0904 6648  CompositeBus - ok
14:14:01.0906 6648  COMSysApp - ok
14:14:01.0915 6648  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
14:14:01.0925 6648  crcdisk - ok
14:14:01.0962 6648  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:14:01.0999 6648  CryptSvc - ok
14:14:02.0037 6648  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:14:02.0076 6648  DcomLaunch - ok
14:14:02.0103 6648  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
14:14:02.0136 6648  defragsvc - ok
14:14:02.0169 6648  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:14:02.0210 6648  DfsC - ok
14:14:02.0240 6648  [ 2D589A2C024B2FB238535DB9F7B3597D ] DgiVecp        C:\Windows\system32\Drivers\DgiVecp.sys
14:14:02.0248 6648  DgiVecp - ok
14:14:02.0257 6648  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:14:02.0292 6648  Dhcp - ok
14:14:02.0302 6648  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
14:14:02.0330 6648  discache - ok
14:14:02.0341 6648  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
14:14:02.0351 6648  Disk - ok
14:14:02.0367 6648  [ FD3F25ECC3836A350D5EEC0FC58E1D48 ] DiskSec        C:\Windows\system32\drivers\DiskSec.sys
14:14:02.0376 6648  DiskSec - ok
14:14:02.0390 6648  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:14:02.0443 6648  Dnscache - ok
14:14:02.0460 6648  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
14:14:02.0498 6648  dot3svc - ok
14:14:02.0501 6648  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
14:14:02.0529 6648  DPS - ok
14:14:02.0546 6648  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
14:14:02.0556 6648  drmkaud - ok
14:14:02.0593 6648  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
14:14:02.0615 6648  DXGKrnl - ok
14:14:02.0628 6648  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
14:14:02.0664 6648  EapHost - ok
14:14:02.0728 6648  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\DRIVERS\evbda.sys
14:14:02.0783 6648  ebdrv - ok
14:14:02.0814 6648  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
14:14:02.0865 6648  EFS - ok
14:14:02.0915 6648  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
14:14:02.0953 6648  ehRecvr - ok
14:14:02.0962 6648  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
14:14:02.0992 6648  ehSched - ok
14:14:03.0015 6648  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
14:14:03.0031 6648  elxstor - ok
14:14:03.0056 6648  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:14:03.0072 6648  ErrDev - ok
14:14:03.0101 6648  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
14:14:03.0134 6648  EventSystem - ok
14:14:03.0160 6648  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
14:14:03.0199 6648  exfat - ok
14:14:03.0210 6648  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
14:14:03.0246 6648  fastfat - ok
14:14:03.0287 6648  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
14:14:03.0331 6648  Fax - ok
14:14:03.0339 6648  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
14:14:03.0355 6648  fdc - ok
14:14:03.0361 6648  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
14:14:03.0390 6648  fdPHost - ok
14:14:03.0392 6648  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
14:14:03.0423 6648  FDResPub - ok
14:14:03.0429 6648  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:14:03.0439 6648  FileInfo - ok
14:14:03.0441 6648  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
14:14:03.0472 6648  Filetrace - ok
14:14:03.0484 6648  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
14:14:03.0494 6648  flpydisk - ok
14:14:03.0505 6648  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:14:03.0517 6648  FltMgr - ok
14:14:03.0562 6648  [ C4C183E6551084039EC862DA1C945E3D ] FontCache      C:\Windows\system32\FntCache.dll
14:14:03.0605 6648  FontCache - ok
14:14:03.0650 6648  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:14:03.0656 6648  FontCache3.0.0.0 - ok
14:14:03.0706 6648  [ 565619F1B6DA86E3C7BA75A1E60ECFCD ] Freemake Improver C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
14:14:03.0730 6648  Freemake Improver ( UnsignedFile.Multi.Generic ) - warning
14:14:03.0730 6648  Freemake Improver - detected UnsignedFile.Multi.Generic (1)
14:14:03.0738 6648  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
14:14:03.0746 6648  FsDepends - ok
14:14:03.0777 6648  [ DC0DCE4EC2C5D2CF6472F9FD6AA9A7DC ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
14:14:03.0787 6648  fssfltr - ok
14:14:03.0867 6648  [ 40CDFAD174B3D5E80F95DDA003C0B97F ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
14:14:03.0902 6648  fsssvc - ok
14:14:03.0929 6648  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:14:03.0939 6648  Fs_Rec - ok
14:14:03.0978 6648  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:14:03.0992 6648  fvevol - ok
14:14:03.0996 6648  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
14:14:04.0003 6648  gagp30kx - ok
14:14:04.0050 6648  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
14:14:04.0091 6648  gpsvc - ok
14:14:04.0109 6648  [ DB8A82239139348D6666434128D6F5DC ] gzflt          C:\Windows\system32\DRIVERS\gzflt.sys
14:14:04.0121 6648  gzflt - ok
14:14:04.0142 6648  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:14:04.0179 6648  hcw85cir - ok
14:14:04.0216 6648  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:14:04.0230 6648  HdAudAddService - ok
14:14:04.0240 6648  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
14:14:04.0255 6648  HDAudBus - ok
14:14:04.0269 6648  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
14:14:04.0287 6648  HidBatt - ok
14:14:04.0296 6648  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
14:14:04.0308 6648  HidBth - ok
14:14:04.0310 6648  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
14:14:04.0330 6648  HidIr - ok
14:14:04.0347 6648  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
14:14:04.0380 6648  hidserv - ok
14:14:04.0412 6648  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
14:14:04.0425 6648  HidUsb - ok
14:14:04.0458 6648  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:14:04.0492 6648  hkmsvc - ok
14:14:04.0511 6648  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:14:04.0548 6648  HomeGroupListener - ok
14:14:04.0583 6648  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:14:04.0603 6648  HomeGroupProvider - ok
14:14:04.0615 6648  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:14:04.0624 6648  HpSAMD - ok
14:14:04.0662 6648  [ F47CEC45FB85791D4AB237563AD0FA8F ] HTCAND64        C:\Windows\system32\Drivers\ANDROIDUSB.sys
14:14:04.0667 6648  HTCAND64 ( UnsignedFile.Multi.Generic ) - warning
14:14:04.0667 6648  HTCAND64 - detected UnsignedFile.Multi.Generic (1)
14:14:04.0712 6648  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:14:04.0753 6648  HTTP - ok
14:14:04.0787 6648  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:14:04.0794 6648  hwpolicy - ok
14:14:04.0810 6648  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
14:14:04.0820 6648  i8042prt - ok
14:14:04.0849 6648  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
14:14:04.0863 6648  iaStorV - ok
14:14:04.0890 6648  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:14:04.0910 6648  idsvc - ok
14:14:04.0923 6648  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
14:14:04.0931 6648  iirsp - ok
14:14:04.0953 6648  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
14:14:04.0992 6648  IKEEXT - ok
14:14:05.0003 6648  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
14:14:05.0011 6648  intelide - ok
14:14:05.0015 6648  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:14:05.0033 6648  intelppm - ok
14:14:05.0056 6648  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
14:14:05.0091 6648  IPBusEnum - ok
14:14:05.0123 6648  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:14:05.0148 6648  IpFilterDriver - ok
14:14:05.0181 6648  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:14:05.0222 6648  iphlpsvc - ok
14:14:05.0240 6648  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
14:14:05.0269 6648  IPMIDRV - ok
14:14:05.0281 6648  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
14:14:05.0310 6648  IPNAT - ok
14:14:05.0326 6648  [ 05360B1EA5A2ABF620D1D96EBD8BD8F1 ] irda            C:\Windows\system32\DRIVERS\irda.sys
14:14:05.0369 6648  irda - ok
14:14:05.0382 6648  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:14:05.0400 6648  IRENUM - ok
14:14:05.0402 6648  [ 3848384AB383F0A8F506C4370635C1F9 ] Irmon          C:\Windows\System32\irmon.dll
14:14:05.0427 6648  Irmon - ok
14:14:05.0449 6648  [ D2CA12736624BA636F8357DC3EF0757E ] irsir          C:\Windows\system32\DRIVERS\irsir.sys
14:14:05.0470 6648  irsir - ok
14:14:05.0505 6648  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:14:05.0515 6648  isapnp - ok
14:14:05.0523 6648  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:14:05.0535 6648  iScsiPrt - ok
14:14:05.0548 6648  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
14:14:05.0558 6648  kbdclass - ok
14:14:05.0564 6648  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
14:14:05.0583 6648  kbdhid - ok
14:14:05.0595 6648  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
14:14:05.0605 6648  KeyIso - ok
14:14:05.0644 6648  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:14:05.0652 6648  KSecDD - ok
14:14:05.0685 6648  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
14:14:05.0695 6648  KSecPkg - ok
14:14:05.0703 6648  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
14:14:05.0734 6648  ksthunk - ok
14:14:05.0759 6648  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
14:14:05.0794 6648  KtmRm - ok
14:14:05.0826 6648  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
14:14:05.0859 6648  LanmanServer - ok
14:14:05.0886 6648  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:14:05.0917 6648  LanmanWorkstation - ok
14:14:05.0939 6648  [ 83BA097ACAAD0B00505634A62D90F93A ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
14:14:05.0949 6648  lirsgt - ok
14:14:05.0962 6648  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:14:05.0992 6648  lltdio - ok
14:14:06.0011 6648  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
14:14:06.0046 6648  lltdsvc - ok
14:14:06.0048 6648  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
14:14:06.0074 6648  lmhosts - ok
14:14:06.0089 6648  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
14:14:06.0099 6648  LSI_FC - ok
14:14:06.0111 6648  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
14:14:06.0119 6648  LSI_SAS - ok
14:14:06.0123 6648  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:14:06.0132 6648  LSI_SAS2 - ok
14:14:06.0144 6648  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:14:06.0154 6648  LSI_SCSI - ok
14:14:06.0158 6648  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
14:14:06.0191 6648  luafv - ok
14:14:06.0261 6648  [ C34FFE3582B34C2E7282A991C8455DFE ] MAGIX StartUp Analyze Service C:\Program Files (x86)\MAGIX\PC_Check_Tuning_2012\MXSAS.exe
14:14:06.0283 6648  MAGIX StartUp Analyze Service - ok
14:14:06.0314 6648  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
14:14:06.0333 6648  Mcx2Svc - ok
14:14:06.0378 6648  [ F46894302FD39AF95B42F7E29EDC2443 ] MEADOWS        C:\Windows\system32\drivers\MEADOWS.sys
14:14:06.0396 6648  MEADOWS - ok
14:14:06.0398 6648  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
14:14:06.0408 6648  megasas - ok
14:14:06.0421 6648  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
14:14:06.0433 6648  MegaSR - ok
14:14:06.0449 6648  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
14:14:06.0478 6648  MMCSS - ok
14:14:06.0494 6648  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
14:14:06.0525 6648  Modem - ok
14:14:06.0533 6648  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
14:14:06.0552 6648  monitor - ok
14:14:06.0583 6648  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
14:14:06.0593 6648  mouclass - ok
14:14:06.0599 6648  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:14:06.0615 6648  mouhid - ok
14:14:06.0648 6648  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:14:06.0658 6648  mountmgr - ok
14:14:06.0701 6648  [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:14:06.0720 6648  MozillaMaintenance - ok
14:14:06.0738 6648  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:14:06.0748 6648  mpio - ok
14:14:06.0763 6648  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:14:06.0787 6648  mpsdrv - ok
14:14:06.0830 6648  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:14:06.0871 6648  MpsSvc - ok
14:14:06.0908 6648  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:14:06.0921 6648  MRxDAV - ok
14:14:06.0941 6648  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:14:06.0982 6648  mrxsmb - ok
14:14:07.0021 6648  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:14:07.0044 6648  mrxsmb10 - ok
14:14:07.0060 6648  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:14:07.0081 6648  mrxsmb20 - ok
14:14:07.0095 6648  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
14:14:07.0105 6648  msahci - ok
14:14:07.0134 6648  [ 41FB1D61DF09C36CCAB0B04EEC66F6D5 ] MSCamSvc        C:\Program Files\Microsoft LifeCam\MSCamS64.exe
14:14:07.0146 6648  MSCamSvc - ok
14:14:07.0177 6648  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
14:14:07.0187 6648  msdsm - ok
14:14:07.0199 6648  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
14:14:07.0214 6648  MSDTC - ok
14:14:07.0220 6648  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:14:07.0246 6648  Msfs - ok
14:14:07.0253 6648  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
14:14:07.0281 6648  mshidkmdf - ok
14:14:07.0314 6648  [ BB590070D606AE6F008341FC9A7B2AD7 ] MSHUSBVideo    C:\Windows\system32\Drivers\nx6000.sys
14:14:07.0322 6648  MSHUSBVideo - ok
14:14:07.0359 6648  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:14:07.0369 6648  msisadrv - ok
14:14:07.0396 6648  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
14:14:07.0441 6648  MSiSCSI - ok
14:14:07.0445 6648  msiserver - ok
14:14:07.0476 6648  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
14:14:07.0505 6648  MSKSSRV - ok
14:14:07.0521 6648  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:14:07.0550 6648  MSPCLOCK - ok
14:14:07.0564 6648  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
14:14:07.0597 6648  MSPQM - ok
14:14:07.0634 6648  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
14:14:07.0646 6648  MsRPC - ok
14:14:07.0683 6648  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
14:14:07.0693 6648  mssmbios - ok
14:14:07.0701 6648  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
14:14:07.0734 6648  MSTEE - ok
14:14:07.0748 6648  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
14:14:07.0763 6648  MTConfig - ok
14:14:07.0771 6648  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
14:14:07.0779 6648  Mup - ok
14:14:07.0816 6648  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
14:14:07.0847 6648  napagent - ok
14:14:07.0880 6648  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
14:14:07.0906 6648  NativeWifiP - ok
14:14:07.0949 6648  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:14:07.0970 6648  NDIS - ok
14:14:07.0982 6648  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
14:14:08.0007 6648  NdisCap - ok
14:14:08.0019 6648  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:14:08.0054 6648  NdisTapi - ok
14:14:08.0089 6648  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
14:14:08.0113 6648  Ndisuio - ok
14:14:08.0130 6648  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
14:14:08.0169 6648  NdisWan - ok
14:14:08.0199 6648  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
14:14:08.0232 6648  NDProxy - ok
14:14:08.0240 6648  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
14:14:08.0267 6648  NetBIOS - ok
14:14:08.0285 6648  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
14:14:08.0318 6648  NetBT - ok
14:14:08.0328 6648  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
14:14:08.0337 6648  Netlogon - ok
14:14:08.0359 6648  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
14:14:08.0388 6648  Netman - ok
14:14:08.0429 6648  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:14:08.0437 6648  NetMsmqActivator - ok
14:14:08.0441 6648  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:14:08.0449 6648  NetPipeActivator - ok
14:14:08.0464 6648  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
14:14:08.0498 6648  netprofm - ok
14:14:08.0501 6648  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:14:08.0511 6648  NetTcpActivator - ok
14:14:08.0513 6648  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:14:08.0523 6648  NetTcpPortSharing - ok
14:14:08.0546 6648  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
14:14:08.0554 6648  nfrd960 - ok
14:14:08.0587 6648  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:14:08.0605 6648  NlaSvc - ok
14:14:08.0611 6648  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:14:08.0634 6648  Npfs - ok
14:14:08.0656 6648  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
14:14:08.0685 6648  nsi - ok
14:14:08.0689 6648  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:14:08.0720 6648  nsiproxy - ok
14:14:08.0769 6648  [ B8965FB53551B5455630A4B804D0791F ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:14:08.0800 6648  Ntfs - ok
14:14:08.0812 6648  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
14:14:08.0841 6648  Null - ok
14:14:08.0855 6648  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:14:08.0865 6648  nvraid - ok
14:14:08.0882 6648  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:14:08.0892 6648  nvstor - ok
14:14:08.0914 6648  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:14:08.0923 6648  nv_agp - ok
14:14:08.0970 6648  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:14:08.0984 6648  odserv - ok
14:14:09.0048 6648  [ E0506331F0454C347B28B2AE4BD14636 ] OfficeSvc      C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
14:14:09.0083 6648  OfficeSvc - ok
14:14:09.0087 6648  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:14:09.0097 6648  ohci1394 - ok
14:14:09.0206 6648  [ 17B5D3C6E063729BFA725CAF78BC4710 ] OODefragAgent  C:\Program Files\OO Software\Defrag\oodag.exe
14:14:09.0259 6648  OODefragAgent - ok
14:14:09.0294 6648  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:14:09.0314 6648  ose - ok
14:14:09.0415 6648  [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:14:09.0513 6648  osppsvc - ok
14:14:09.0539 6648  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:14:09.0566 6648  p2pimsvc - ok
14:14:09.0574 6648  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
14:14:09.0587 6648  p2psvc - ok
14:14:09.0611 6648  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
14:14:09.0621 6648  Parport - ok
14:14:09.0660 6648  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
14:14:09.0669 6648  partmgr - ok
14:14:09.0683 6648  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:14:09.0701 6648  PcaSvc - ok
14:14:09.0722 6648  [ BC0018C2D29F655188A0ED3FA94FDB24 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
14:14:09.0773 6648  pccsmcfd - ok
14:14:09.0794 6648  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
14:14:09.0806 6648  pci - ok
14:14:09.0810 6648  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
14:14:09.0818 6648  pciide - ok
14:14:09.0824 6648  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
14:14:09.0835 6648  pcmcia - ok
14:14:09.0839 6648  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
14:14:09.0847 6648  pcw - ok
14:14:09.0871 6648  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:14:09.0919 6648  PEAUTH - ok
14:14:09.0968 6648  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
14:14:10.0011 6648  PerfHost - ok
14:14:10.0068 6648  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
14:14:10.0113 6648  pla - ok
14:14:10.0156 6648  [ AB168D5CF1CD69F9FA6F09C828FEA660 ] PlantronicsGC  C:\Windows\system32\drivers\PLTGC.sys
14:14:10.0206 6648  PlantronicsGC - ok
14:14:10.0246 6648  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:14:10.0289 6648  PlugPlay - ok
14:14:10.0290 6648  PnkBstrA - ok
14:14:10.0304 6648  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
14:14:10.0326 6648  PNRPAutoReg - ok
14:14:10.0341 6648  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
14:14:10.0353 6648  PNRPsvc - ok
14:14:10.0390 6648  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
14:14:10.0417 6648  PolicyAgent - ok
14:14:10.0439 6648  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
14:14:10.0470 6648  Power - ok
14:14:10.0499 6648  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:14:10.0523 6648  PptpMiniport - ok
14:14:10.0548 6648  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\DRIVERS\processr.sys
14:14:10.0558 6648  Processor - ok
14:14:10.0591 6648  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
14:14:10.0626 6648  ProfSvc - ok
14:14:10.0638 6648  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:14:10.0648 6648  ProtectedStorage - ok
14:14:10.0679 6648  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:14:10.0710 6648  Psched - ok
14:14:10.0738 6648  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
14:14:10.0767 6648  ql2300 - ok
14:14:10.0771 6648  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
14:14:10.0783 6648  ql40xx - ok
14:14:10.0796 6648  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
14:14:10.0812 6648  QWAVE - ok
14:14:10.0830 6648  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:14:10.0861 6648  QWAVEdrv - ok
14:14:10.0882 6648  [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr        C:\Windows\WindowsMobile\rapimgr.dll
14:14:10.0894 6648  RapiMgr - ok
14:14:10.0908 6648  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:14:10.0935 6648  RasAcd - ok
14:14:10.0958 6648  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
14:14:10.0982 6648  RasAgileVpn - ok
14:14:10.0988 6648  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
14:14:11.0013 6648  RasAuto - ok
14:14:11.0031 6648  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
14:14:11.0066 6648  Rasl2tp - ok
14:14:11.0101 6648  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
14:14:11.0130 6648  RasMan - ok
14:14:11.0136 6648  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:14:11.0160 6648  RasPppoe - ok
14:14:11.0165 6648  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
14:14:11.0189 6648  RasSstp - ok
14:14:11.0206 6648  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
14:14:11.0240 6648  rdbss - ok
14:14:11.0253 6648  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:14:11.0277 6648  rdpbus - ok
14:14:11.0281 6648  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:14:11.0304 6648  RDPCDD - ok
14:14:11.0310 6648  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:14:11.0337 6648  RDPENCDD - ok
14:14:11.0343 6648  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:14:11.0367 6648  RDPREFMP - ok
14:14:11.0398 6648  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
14:14:11.0437 6648  RDPWD - ok
14:14:11.0470 6648  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:14:11.0480 6648  rdyboost - ok
14:14:11.0511 6648  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:14:11.0540 6648  RemoteAccess - ok
14:14:11.0556 6648  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
14:14:11.0589 6648  RemoteRegistry - ok
14:14:11.0603 6648  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:14:11.0640 6648  RpcEptMapper - ok
14:14:11.0650 6648  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
14:14:11.0660 6648  RpcLocator - ok
14:14:11.0701 6648  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
14:14:11.0728 6648  RpcSs - ok
14:14:11.0744 6648  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:14:11.0775 6648  rspndr - ok
14:14:11.0800 6648  [ F65F171165FBB613F7AA3CC78E8CAB42 ] RTL8167        C:\Windows\system32\DRIVERS\Rt64win7.sys
14:14:11.0841 6648  RTL8167 - ok
14:14:11.0871 6648  [ 92EEA5F44DBFD36D794660A4E1F8DAC5 ] SAlphamHid      C:\Windows\system32\DRIVERS\SAlpham64.sys
14:14:11.0896 6648  SAlphamHid - ok
14:14:11.0904 6648  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
14:14:11.0914 6648  SamSs - ok
14:14:11.0966 6648  [ E382F5DB58A759B3E821BAC853DC15DB ] Samsung Network Fax Server C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
14:14:12.0017 6648  Samsung Network Fax Server ( UnsignedFile.Multi.Generic ) - warning
14:14:12.0017 6648  Samsung Network Fax Server - detected UnsignedFile.Multi.Generic (1)
14:14:12.0054 6648  [ B136E29C89CD7234DEC1A4104E5D30CC ] Samsung UPD Service2 C:\Windows\System32\SUPDSvc2.exe
14:14:12.0072 6648  Samsung UPD Service2 ( UnsignedFile.Multi.Generic ) - warning
14:14:12.0072 6648  Samsung UPD Service2 - detected UnsignedFile.Multi.Generic (1)
14:14:12.0103 6648  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:14:12.0111 6648  sbp2port - ok
14:14:12.0136 6648  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:14:12.0165 6648  SCardSvr - ok
14:14:12.0205 6648  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:14:12.0234 6648  scfilter - ok
14:14:12.0271 6648  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
14:14:12.0316 6648  Schedule - ok
14:14:12.0351 6648  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
14:14:12.0374 6648  SCPolicySvc - ok
14:14:12.0394 6648  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:14:12.0441 6648  SDRSVC - ok
14:14:12.0456 6648  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:14:12.0488 6648  secdrv - ok
14:14:12.0503 6648  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
14:14:12.0542 6648  seclogon - ok
14:14:12.0566 6648  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
14:14:12.0595 6648  SENS - ok
14:14:12.0599 6648  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:14:12.0617 6648  SensrSvc - ok
14:14:12.0630 6648  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
14:14:12.0640 6648  Serenum - ok
14:14:12.0650 6648  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:14:12.0665 6648  Serial - ok
14:14:12.0699 6648  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
14:14:12.0708 6648  sermouse - ok
14:14:12.0759 6648  [ 8C1F87F5FDD92229D1754B98F073913F ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
14:14:12.0792 6648  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
14:14:12.0792 6648  ServiceLayer - detected UnsignedFile.Multi.Generic (1)
14:14:12.0837 6648  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
14:14:12.0871 6648  SessionEnv - ok
14:14:12.0902 6648  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
14:14:12.0941 6648  sffdisk - ok
14:14:12.0953 6648  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:14:12.0968 6648  sffp_mmc - ok
14:14:12.0980 6648  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
14:14:12.0999 6648  sffp_sd - ok
14:14:13.0003 6648  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
14:14:13.0015 6648  sfloppy - ok
14:14:13.0040 6648  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:14:13.0076 6648  SharedAccess - ok
14:14:13.0130 6648  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:14:13.0158 6648  ShellHWDetection - ok
14:14:13.0162 6648  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:14:13.0171 6648  SiSRaid2 - ok
14:14:13.0175 6648  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
14:14:13.0185 6648  SiSRaid4 - ok
14:14:13.0292 6648  [ 388AE59FE75F1B959DFA0900923C61BB ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
14:14:13.0361 6648  Skype C2C Service - ok
14:14:13.0404 6648  [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
14:14:13.0437 6648  SkypeUpdate - ok
14:14:13.0451 6648  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
14:14:13.0484 6648  Smb - ok
14:14:13.0509 6648  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:14:13.0527 6648  SNMPTRAP - ok
14:14:13.0542 6648  [ 12583AF6CBE0050651EAF2723B3AD7B3 ] speedfan        C:\Windows\syswow64\speedfan.sys
14:14:13.0552 6648  speedfan - ok
14:14:13.0572 6648  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
14:14:13.0581 6648  spldr - ok
14:14:13.0617 6648  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
14:14:13.0658 6648  Spooler - ok
14:14:13.0740 6648  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
14:14:13.0804 6648  sppsvc - ok
14:14:13.0818 6648  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
14:14:13.0849 6648  sppuinotify - ok
14:14:13.0882 6648  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
14:14:13.0947 6648  srv - ok
14:14:13.0962 6648  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:14:13.0988 6648  srv2 - ok
14:14:13.0994 6648  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:14:14.0017 6648  srvnet - ok
14:14:14.0044 6648  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
14:14:14.0078 6648  SSDPSRV - ok
14:14:14.0109 6648  [ 0211AB46B73A2623B86C1CFCB30579AB ] SSPORT          C:\Windows\system32\Drivers\SSPORT.sys
14:14:14.0119 6648  SSPORT - ok
14:14:14.0130 6648  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
14:14:14.0156 6648  SstpSvc - ok
14:14:14.0191 6648  [ EF806D212D34B0E173BAEB3564D53E37 ] ss_bbus        C:\Windows\system32\DRIVERS\ss_bbus.sys
14:14:14.0201 6648  ss_bbus - ok
14:14:14.0216 6648  [ 08B1B34ABEBEB6AC2DEA06900C56411E ] ss_bmdfl        C:\Windows\system32\DRIVERS\ss_bmdfl.sys
14:14:14.0224 6648  ss_bmdfl - ok
14:14:14.0248 6648  [ 71A9DA6BEAA4CB54DFB827FB78600A5D ] ss_bmdm        C:\Windows\system32\DRIVERS\ss_bmdm.sys
14:14:14.0259 6648  ss_bmdm - ok
14:14:14.0263 6648  StarOpen - ok
14:14:14.0289 6648  Steam Client Service - ok
14:14:14.0296 6648  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
14:14:14.0306 6648  stexstor - ok
14:14:14.0343 6648  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
14:14:14.0371 6648  stisvc - ok
14:14:14.0400 6648  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
14:14:14.0410 6648  swenum - ok
14:14:14.0427 6648  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
14:14:14.0468 6648  swprv - ok
14:14:14.0525 6648  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
14:14:14.0562 6648  SysMain - ok
14:14:14.0591 6648  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:14:14.0607 6648  TabletInputService - ok
14:14:14.0628 6648  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
14:14:14.0673 6648  TapiSrv - ok
14:14:14.0697 6648  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
14:14:14.0730 6648  TBS - ok
14:14:14.0785 6648  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
14:14:14.0818 6648  Tcpip - ok
14:14:14.0837 6648  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:14:14.0865 6648  TCPIP6 - ok
14:14:14.0904 6648  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:14:14.0914 6648  tcpipreg - ok
14:14:14.0931 6648  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:14:14.0958 6648  TDPIPE - ok
14:14:14.0980 6648  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
14:14:15.0003 6648  TDTCP - ok
14:14:15.0042 6648  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
14:14:15.0068 6648  tdx - ok
14:14:15.0101 6648  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
14:14:15.0111 6648  TermDD - ok
14:14:15.0148 6648  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
14:14:15.0185 6648  TermService - ok
14:14:15.0195 6648  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
14:14:15.0214 6648  Themes - ok
14:14:15.0234 6648  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
14:14:15.0275 6648  THREADORDER - ok
14:14:15.0298 6648  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
14:14:15.0331 6648  TrkWks - ok
14:14:15.0357 6648  [ B66EE1D68197DFB9AA24F961E68ACDCC ] trufos          C:\Windows\system32\DRIVERS\trufos.sys
14:14:15.0371 6648  trufos - ok
14:14:15.0412 6648  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:14:15.0453 6648  TrustedInstaller - ok
14:14:15.0474 6648  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:14:15.0515 6648  tssecsrv - ok
14:14:15.0548 6648  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:14:15.0572 6648  TsUsbFlt - ok
14:14:15.0587 6648  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:14:15.0628 6648  tunnel - ok
14:14:15.0644 6648  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
14:14:15.0654 6648  uagp35 - ok
14:14:15.0665 6648  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:14:15.0695 6648  udfs - ok
14:14:15.0714 6648  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
14:14:15.0736 6648  UI0Detect - ok
14:14:15.0755 6648  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:14:15.0765 6648  uliagpkx - ok
14:14:15.0789 6648  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\drivers\umbus.sys
14:14:15.0808 6648  umbus - ok
14:14:15.0824 6648  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
14:14:15.0841 6648  UmPass - ok
14:14:15.0919 6648  [ 3B709E63B35A6949F4CFB05A6F6A180C ] UPDATESRV      C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
14:14:15.0951 6648  UPDATESRV - ok
14:14:15.0970 6648  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
14:14:16.0003 6648  upnphost - ok
14:14:16.0035 6648  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
14:14:16.0046 6648  usbaudio - ok
14:14:16.0081 6648  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
14:14:16.0097 6648  usbccgp - ok
14:14:16.0134 6648  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:14:16.0146 6648  usbcir - ok
14:14:16.0179 6648  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
14:14:16.0187 6648  usbehci - ok
14:14:16.0208 6648  [ 504901430B6E03B99EBB6BF26E0868C6 ] usbfilter      C:\Windows\system32\DRIVERS\usbfilter.sys
14:14:16.0218 6648  usbfilter - ok
14:14:16.0230 6648  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:14:16.0253 6648  usbhub - ok
14:14:16.0287 6648  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\DRIVERS\usbohci.sys
14:14:16.0308 6648  usbohci - ok
14:14:16.0312 6648  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:14:16.0330 6648  usbprint - ok
14:14:16.0341 6648  [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser          C:\Windows\system32\drivers\usbser.sys
14:14:16.0363 6648  usbser - ok
14:14:16.0406 6648  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:14:16.0451 6648  USBSTOR - ok
14:14:16.0466 6648  [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci        C:\Windows\system32\DRIVERS\usbuhci.sys
14:14:16.0484 6648  usbuhci - ok
14:14:16.0498 6648  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
14:14:16.0517 6648  usbvideo - ok
14:14:16.0537 6648  [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx      C:\Windows\system32\drivers\usb8023x.sys
14:14:16.0566 6648  usb_rndisx - ok
14:14:16.0589 6648  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
14:14:16.0615 6648  UxSms - ok
14:14:16.0648 6648  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
14:14:16.0658 6648  VaultSvc - ok
14:14:16.0689 6648  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:14:16.0697 6648  vdrvroot - ok
14:14:16.0740 6648  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
14:14:16.0779 6648  vds - ok
14:14:16.0796 6648  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
14:14:16.0820 6648  vga - ok
14:14:16.0843 6648  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
14:14:16.0873 6648  VgaSave - ok
14:14:16.0890 6648  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
14:14:16.0902 6648  vhdmp - ok
14:14:16.0953 6648  [ E066AA9C9866C2001372486A6841108C ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys
14:14:16.0992 6648  VIAHdAudAddService - ok
14:14:17.0015 6648  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
14:14:17.0023 6648  viaide - ok
14:14:17.0054 6648  [ 1236737C7993FB462610E1A0AA92C40B ] VIAKaraokeService C:\Windows\system32\viakaraokesrv.exe
14:14:17.0064 6648  VIAKaraokeService - ok
14:14:17.0070 6648  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:14:17.0080 6648  volmgr - ok
14:14:17.0103 6648  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
14:14:17.0130 6648  volmgrx - ok
14:14:17.0165 6648  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
14:14:17.0179 6648  volsnap - ok
14:14:17.0185 6648  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
14:14:17.0195 6648  vsmraid - ok
14:14:17.0242 6648  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
14:14:17.0292 6648  VSS - ok
14:14:17.0347 6648  [ 0D2348481435EDA5E09C451C6CA408C8 ] VSSERV          C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
14:14:17.0380 6648  VSSERV - ok
14:14:17.0392 6648  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
14:14:17.0410 6648  vwifibus - ok
14:14:17.0425 6648  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
14:14:17.0462 6648  W32Time - ok
14:14:17.0478 6648  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
14:14:17.0498 6648  WacomPen - ok
14:14:17.0511 6648  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:14:17.0544 6648  WANARP - ok
14:14:17.0548 6648  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:14:17.0574 6648  Wanarpv6 - ok
14:14:17.0619 6648  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
14:14:17.0648 6648  WatAdminSvc - ok
14:14:17.0703 6648  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
14:14:17.0748 6648  wbengine - ok
14:14:17.0753 6648  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:14:17.0769 6648  WbioSrvc - ok
14:14:17.0804 6648  [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm        C:\Windows\WindowsMobile\wcescomm.dll
14:14:17.0820 6648  WcesComm - ok
14:14:17.0837 6648  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
14:14:17.0855 6648  wcncsvc - ok
14:14:17.0859 6648  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:14:17.0890 6648  WcsPlugInService - ok
14:14:17.0900 6648  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
14:14:17.0910 6648  Wd - ok
14:14:17.0953 6648  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:14:17.0972 6648  Wdf01000 - ok
14:14:17.0984 6648  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
14:14:18.0027 6648  WdiServiceHost - ok
14:14:18.0031 6648  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
14:14:18.0044 6648  WdiSystemHost - ok
14:14:18.0076 6648  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
14:14:18.0095 6648  WebClient - ok
14:14:18.0105 6648  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:14:18.0136 6648  Wecsvc - ok
14:14:18.0142 6648  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
14:14:18.0167 6648  wercplsupport - ok
14:14:18.0181 6648  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
14:14:18.0216 6648  WerSvc - ok
14:14:18.0226 6648  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:14:18.0251 6648  WfpLwf - ok
14:14:18.0263 6648  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:14:18.0271 6648  WIMMount - ok
14:14:18.0279 6648  WinDefend - ok
14:14:18.0300 6648  WinHttpAutoProxySvc - ok
14:14:18.0331 6648  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
14:14:18.0359 6648  Winmgmt - ok
14:14:18.0412 6648  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
14:14:18.0456 6648  WinRM - ok
14:14:18.0490 6648  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
14:14:18.0505 6648  WinUsb - ok
14:14:18.0531 6648  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
14:14:18.0562 6648  Wlansvc - ok
14:14:18.0589 6648  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
14:14:18.0597 6648  wlcrasvc - ok
14:14:18.0671 6648  [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:14:18.0710 6648  wlidsvc - ok
14:14:18.0746 6648  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
14:14:18.0755 6648  WmiAcpi - ok
14:14:18.0765 6648  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:14:18.0785 6648  wmiApSrv - ok
14:14:18.0798 6648  WMPNetworkSvc - ok
14:14:18.0804 6648  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:14:18.0831 6648  WPCSvc - ok
14:14:18.0863 6648  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:14:18.0874 6648  WPDBusEnum - ok
14:14:18.0884 6648  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
14:14:18.0914 6648  ws2ifsl - ok
14:14:18.0919 6648  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
14:14:18.0945 6648  wscsvc - ok
14:14:18.0949 6648  WSearch - ok
14:14:19.0027 6648  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
14:14:19.0068 6648  wuauserv - ok
14:14:19.0101 6648  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:14:19.0130 6648  WudfPf - ok
14:14:19.0142 6648  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
14:14:19.0156 6648  WUDFRd - ok
14:14:19.0181 6648  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
14:14:19.0203 6648  wudfsvc - ok
14:14:19.0214 6648  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
14:14:19.0230 6648  WwanSvc - ok
14:14:19.0244 6648  ================ Scan global ===============================
14:14:19.0283 6648  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
14:14:19.0298 6648  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
14:14:19.0304 6648  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
14:14:19.0335 6648  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
14:14:19.0357 6648  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
14:14:19.0361 6648  [Global] - ok
14:14:19.0361 6648  ================ Scan MBR ==================================
14:14:19.0367 6648  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:14:19.0499 6648  \Device\Harddisk0\DR0 - ok
14:14:19.0501 6648  [ 61A349592C4728853F4A90FF78F7628E ] \Device\Harddisk1\DR1
14:14:21.0410 6648  \Device\Harddisk1\DR1 - ok
14:14:21.0412 6648  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
14:14:21.0455 6648  \Device\Harddisk2\DR2 - ok
14:14:21.0455 6648  ================ Scan VBR ==================================
14:14:21.0456 6648  [ F6EA2BEA136A71C3739DEE815230527F ] \Device\Harddisk0\DR0\Partition1
14:14:21.0458 6648  \Device\Harddisk0\DR0\Partition1 - ok
14:14:21.0482 6648  [ 27912DC98E3E9600EAA6A22682D62C6D ] \Device\Harddisk0\DR0\Partition2
14:14:21.0482 6648  \Device\Harddisk0\DR0\Partition2 - ok
14:14:21.0511 6648  [ 993036F565D7F0186A59286CDDF66E12 ] \Device\Harddisk1\DR1\Partition1
14:14:21.0513 6648  \Device\Harddisk1\DR1\Partition1 - ok
14:14:21.0529 6648  [ FE25BA80C51D319DE11DD43B7278459B ] \Device\Harddisk1\DR1\Partition2
14:14:21.0531 6648  \Device\Harddisk1\DR1\Partition2 - ok
14:14:21.0554 6648  [ 6C20CA6BBFC84FA94D0DC73660DA780A ] \Device\Harddisk2\DR2\Partition1
14:14:21.0554 6648  \Device\Harddisk2\DR2\Partition1 - ok
14:14:21.0556 6648  ============================================================
14:14:21.0556 6648  Scan finished
14:14:21.0556 6648  ============================================================
14:14:21.0562 5092  Detected object count: 5
14:14:21.0562 5092  Actual detected object count: 5
14:14:39.0035 5092  Freemake Improver ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:39.0035 5092  Freemake Improver ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:39.0037 5092  HTCAND64 ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:39.0037 5092  HTCAND64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:39.0037 5092  Samsung Network Fax Server ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:39.0037 5092  Samsung Network Fax Server ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:39.0039 5092  Samsung UPD Service2 ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:39.0039 5092  Samsung UPD Service2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:14:39.0040 5092  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
14:14:39.0040 5092  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
MBAR-Log
Code:

Malwarebytes Anti-Rootkit BETA 1.05.0.1001
www.malwarebytes.org

Database version: v2013.04.16.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16540
Andreas :: ANDREAS-PC [administrator]

16.04.2013 13:36:06
mbar-log-2013-04-16 (13-36-06).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 32544
Time elapsed: 9 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
Bei ASWMBR bricht der Scanvorgang mit Fehlermeldung "... funktioniert nicht mehr" ab. Scan ohne AV:
Code:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-16 14:18:13
-----------------------------
14:18:13.993    OS Version: Windows x64 6.1.7601 Service Pack 1
14:18:13.993    Number of processors: 4 586 0x403
14:18:13.993    ComputerName: ANDREAS-PC  UserName: Andreas
14:18:14.783    Initialize success
14:18:27.732    AVAST engine defs: 13041600
14:18:50.579    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000005b
14:18:50.580    Disk 0 Vendor: SAMSUNG_ 1AJ1 Size: 476940MB BusType: 11
14:18:50.587    Disk 1  \Device\Harddisk1\DR1 -> \Device\0000005c
14:18:50.589    Disk 1 Vendor: SAMSUNG_ HS10 Size: 238475MB BusType: 11
14:18:50.591    Disk 2  \Device\Harddisk2\DR2 -> \Device\0000005d
14:18:50.593    Disk 2 Vendor: SAMSUNG_ 1AJ1 Size: 953869MB BusType: 11
14:18:50.747    Disk 0 MBR read successfully
14:18:50.753    Disk 0 MBR scan
14:18:50.829    Disk 0 Windows 7 default MBR code
14:18:50.885    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
14:18:50.907    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS      476838 MB offset 206848
14:18:50.978    Disk 0 scanning C:\Windows\system32\drivers
14:19:02.223    Service scanning
14:19:05.665    Service BdfNdisf c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys **LOCKED** 5
14:19:05.693    Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
14:19:22.673    Modules scanning
14:19:22.674    Disk 0 trace - called modules:
14:19:22.681    ntoskrnl.exe CLASSPNP.SYS disk.sys amd_xata.sys storport.sys hal.dll amd_sata.sys
14:19:22.683    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004ec2060]
14:19:22.683    3 CLASSPNP.SYS[fffff88001ae543f] -> nt!IofCallDriver -> [0xfffffa80049bfac0]
14:19:22.683    5 amd_xata.sys[fffff8800108fd00] -> nt!IofCallDriver -> \Device\0000005b[0xfffffa80049b59c0]
14:19:22.683    Scan finished successfully
14:20:01.656    Disk 0 MBR has been saved successfully to "C:\Users\Andreas\Desktop\MBR.dat"
14:20:01.737    The log file has been saved successfully to "C:\Users\Andreas\Desktop\aswMBR.txt"
Grüße und Dank

cosinus 16.04.2013 13:45
JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Danach eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in CODE-Tags hier in den Thread.


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:29 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19