Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Verdacht auf ZeroAccess Rootkit (https://www.trojaner-board.de/133865-verdacht-zeroaccess-rootkit.html)

Metzger79 18.04.2013 01:12
Verdacht auf ZeroAccess Rootkit
 
Hallo,

aufgrund einiger diverser Scans (alle mit unterschiedlichem Ergebnis) wollte Ich nur mal höflich anklopfen ob man aus dem log-file von Gmer vielleicht schon was rauslesen kann ohne gleich eine aufwändige reinigungsaktion zu starten.

Bedanke mich schon mal im voraus für eure Mühe !

Danke

ryder 18.04.2013 09:09
!! Hinweis an Mitlesende !!
Dieses Thema und die Anweisungen sind nur für diesen speziellen Fall gedacht.
Sie könnten andere Computer schwer beschädigen. Öffnet bitte euer eigenes Thema.


:hallo:

Ich werde dir bei deinem Problem helfen. Die Bereinigung funktioniert nur, wenn du dich an die folgenden Regeln hälst:
Bitte lesen:
Regeln für die Bereinigung
  • Illegal genutzte Software
    Beim ersten Anzeichen wird der Support ohne Diskussion eingestellt. Also sorge bitte vorher dafür, dass hier nichts mehr auftaucht.
  • Keine Garantie
    Wir werden uns Mühe geben, aber einen 100% sicheren und sauberen Computer bekommst du nicht zurück. Der einzig sichere Weg ist die Formatierung mit Neuaufsetzen.
  • Keine Alleingänge
    Die Bereinigung funktioniert nur, wenn du genau das machst, was ich anweise. Installiere/deinstalliere keine Software, führe keine Scans durch, die ich dir nicht angewiesen habe. Poste dein Thema in keinem anderen Forum und folge nicht den Anweisungen anderer Helfer. Du raubst damit allen Beteiligten nur Zeit.
  • Aufmerksam lesen und nachfragen
    Lies jede Anleitung genau durch. Bei Unklarheiten bitte vorher nachfragen. Arbeite die Schritte in der Reihenfolge ab und antworte dann erst nach dem letzten Schritt oder wenn du eine Frage hast.
  • Richtig antworten
    • Nachdem du alle Schritte abgearbeitet hast gibst du mir bitte zu jedem Schritt eine Rückmeldung (Logfile oder Antwort) und das gesammelt in einer Antwort.
    • Mache deinen Namen nur dann unkenntlich, wenn es wirklich sein muss.
    • Logfiles bitte zwischen Code-Tags platzieren (im Antwortfenster das #-Symbol anklicken) sieht dann so aus:
      [CODE] (Logfile) [/CODE]
    • Hinweis in eigener Sache: Angehängte oder gezippte Logfiles erschweren mir die Arbeit massiv! Mache das also nur, wenn das Logfile zu groß ist, um es direkt zu posten.
  • Keine privaten Nachrichten
    Ich sehe es, wenn du geantwortet hast, du mußt mich nicht benachrichtigen. Schicke mir nur dann eine PM wenn ich drei Tage nicht geantwortet habe und nur dann.
  • Wie läuft die Bereinigung ab?
    Ganz grob: Analyse > Bereinigung > Kontrolle mit Updates > Fertig. Ob fertig oder nicht werde ich dir ganz deutlich mitteilen, du brauchst nicht nachzufragen.



Schritt 1: (Erinnerung: Antworte mir erst, wenn du alle Schritte abgearbeitet hast!)
Laufwerksemulationen abschalten mit Defogger
Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop und starte es:
  • Klicke nun auf den Disable Button, um die Treiber gewisser Emulatoren zu deaktivieren.
  • Defogger wird dich fragen "Defogger will forcefully ... Continue?" bestätige dies mit Ja.
  • Wenn der Scan beendet wurde (Finished), klicke auf OK.
  • Defogger fordert gegebenfalls zum Neustart auf. Bestätige dies mit OK.
Poste bitte die defogger_disable.txt von deinem Desktop.
Klicke den Re-enable Button nicht ohne Anweisung.

Schritt 2:
Scan mit aswMBR
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).


Schritt 3:
Scan mit dem TDSS-Killer

Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen.
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Schritt 4:

Scan mit DDS+ (mit attach)
Downloade dir bitte DDS (von sUBs) und speichere die Datei auf deinem Desktop.

dds.com
  • Schließe alle laufenden Programme und starte DDS mit Doppelklick.
  • Der Desktop wird verschwinden, das ist normal.
  • Stelle folgendes ein:

    [X] dds.txt
    [X] attach.txt

  • Ändere keine Einstellung ohne Anweisung.
  • Klicke auf Start.
  • Es werden 2 Logfiles auf deinem Desktop erstellt.
    • dds.txt
    • attach.txt
  • Poste die beiden Logfile hier, möglichst in CODE-Tags.
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Metzger79 18.04.2013 15:03
Ok,

also hier erstmal die log von defogger:

Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:55 on 18/04/2013 (Martin³)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

ryder 18.04.2013 15:06
Dann lies bitte erstmal meine Regeln.

Metzger79 18.04.2013 15:16
So, hier die aswMBR log


Code:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-18 16:05:04
-----------------------------
16:05:04.737    OS Version: Windows x64 6.1.7601 Service Pack 1
16:05:04.737    Number of processors: 4 586 0x1707
16:05:04.738    ComputerName: MARTIN-PC  UserName: Martin³
16:05:05.250    Initialize success
16:05:39.382    AVAST engine defs: 13041800
16:05:51.011    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
16:05:51.013    Disk 0 Vendor: SAMSUNG_HD103UJ 1AA01109 Size: 953869MB BusType: 3
16:05:51.095    Disk 0 MBR read successfully
16:05:51.097    Disk 0 MBR scan
16:05:51.103    Disk 0 Windows 7 default MBR code
16:05:51.106    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS        49999 MB offset 63
16:05:51.130    Disk 0 Partition 2 00    07    HPFS/NTFS            903868 MB offset 102398310
16:05:51.183    Disk 0 scanning C:\Windows\system32\drivers
16:06:00.978    Service scanning
16:06:03.029    Service bdfwfpf C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys **LOCKED** 5
16:06:16.410    Modules scanning
16:06:16.418    Disk 0 trace - called modules:
16:06:16.431    xNtKrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
16:06:16.437    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004720060]
16:06:16.442    3 CLASSPNP.SYS[fffff8800120143f] -> nt!IofCallDriver -> [0xfffffa80044b7520]
16:06:16.447    5 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa80044b3680]
16:06:16.717    AVAST engine scan C:\Windows
16:06:17.928    AVAST engine scan C:\Windows\system32
16:08:15.056    AVAST engine scan C:\Windows\system32\drivers
16:08:23.376    AVAST engine scan C:\Users\Martin³
16:14:28.516    AVAST engine scan C:\ProgramData
16:14:48.927    Scan finished successfully
16:14:58.821    Disk 0 MBR has been saved successfully to "C:\Users\Martin³\Desktop\MBR.dat"
16:14:58.826    The log file has been saved successfully to "C:\Users\Martin³\Desktop\aswMBR.txt"
hier die tdss log

Code:
16:18:29.0029 1764  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
16:18:29.0380 1764  ============================================================
16:18:29.0380 1764  Current date / time: 2013/04/18 16:18:29.0380
16:18:29.0380 1764  SystemInfo:
16:18:29.0380 1764 
16:18:29.0380 1764  OS Version: 6.1.7601 ServicePack: 1.0
16:18:29.0380 1764  Product type: Workstation
16:18:29.0380 1764  ComputerName: MARTIN-PC
16:18:29.0380 1764  UserName: Martin³
16:18:29.0381 1764  Windows directory: C:\Windows
16:18:29.0381 1764  System windows directory: C:\Windows
16:18:29.0381 1764  Running under WOW64
16:18:29.0381 1764  Processor architecture: Intel x64
16:18:29.0381 1764  Number of processors: 4
16:18:29.0381 1764  Page size: 0x1000
16:18:29.0381 1764  Boot type: Normal boot
16:18:29.0381 1764  ============================================================
16:18:30.0441 1764  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:18:30.0481 1764  ============================================================
16:18:30.0481 1764  \Device\Harddisk0\DR0:
16:18:30.0481 1764  MBR partitions:
16:18:30.0481 1764  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
16:18:30.0481 1764  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A7966, BlocksNum 0x6E55E05B
16:18:30.0481 1764  ============================================================
16:18:30.0489 1764  C: <-> \Device\Harddisk0\DR0\Partition1
16:18:30.0501 1764  D: <-> \Device\Harddisk0\DR0\Partition2
16:18:30.0501 1764  ============================================================
16:18:30.0502 1764  Initialize success
16:18:30.0502 1764  ============================================================
16:18:43.0552 1472  ============================================================
16:18:43.0553 1472  Scan started
16:18:43.0553 1472  Mode: Manual; SigCheck; TDLFS;
16:18:43.0553 1472  ============================================================
16:18:44.0262 1472  ================ Scan system memory ========================
16:18:44.0262 1472  System memory - ok
16:18:44.0263 1472  ================ Scan services =============================
16:18:44.0366 1472  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
16:18:44.0453 1472  1394ohci - ok
16:18:44.0478 1472  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
16:18:44.0498 1472  ACPI - ok
16:18:44.0509 1472  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
16:18:44.0555 1472  AcpiPmi - ok
16:18:44.0566 1472  ADIHdAudAddService - ok
16:18:44.0627 1472  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:18:44.0643 1472  AdobeARMservice - ok
16:18:44.0704 1472  [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:18:44.0723 1472  AdobeFlashPlayerUpdateSvc - ok
16:18:44.0743 1472  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
16:18:44.0766 1472  adp94xx - ok
16:18:44.0785 1472  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\drivers\adpahci.sys
16:18:44.0810 1472  adpahci - ok
16:18:44.0821 1472  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
16:18:44.0838 1472  adpu320 - ok
16:18:44.0858 1472  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
16:18:44.0954 1472  AeLookupSvc - ok
16:18:44.0990 1472  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
16:18:45.0040 1472  AFD - ok
16:18:45.0051 1472  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
16:18:45.0067 1472  agp440 - ok
16:18:45.0081 1472  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
16:18:45.0105 1472  ALG - ok
16:18:45.0122 1472  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
16:18:45.0136 1472  aliide - ok
16:18:45.0145 1472  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
16:18:45.0159 1472  amdide - ok
16:18:45.0173 1472  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
16:18:45.0195 1472  AmdK8 - ok
16:18:45.0205 1472  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
16:18:45.0230 1472  AmdPPM - ok
16:18:45.0256 1472  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
16:18:45.0272 1472  amdsata - ok
16:18:45.0290 1472  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
16:18:45.0308 1472  amdsbs - ok
16:18:45.0322 1472  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
16:18:45.0336 1472  amdxata - ok
16:18:45.0359 1472  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
16:18:45.0405 1472  AppID - ok
16:18:45.0426 1472  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
16:18:45.0466 1472  AppIDSvc - ok
16:18:45.0480 1472  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
16:18:45.0535 1472  Appinfo - ok
16:18:45.0552 1472  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt        C:\Windows\System32\appmgmts.dll
16:18:45.0583 1472  AppMgmt - ok
16:18:45.0597 1472  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\drivers\arc.sys
16:18:45.0613 1472  arc - ok
16:18:45.0640 1472  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys
16:18:45.0655 1472  arcsas - ok
16:18:45.0713 1472  [ 68726474C69B738EAC3A62E06B33ADDC ] AsIO            C:\Windows\syswow64\drivers\AsIO.sys
16:18:45.0742 1472  AsIO - ok
16:18:45.0768 1472  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
16:18:45.0821 1472  AsyncMac - ok
16:18:45.0833 1472  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
16:18:45.0847 1472  atapi - ok
16:18:45.0913 1472  [ 96ABF88241F90FF647E55C934C55C2F1 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
16:18:45.0981 1472  athr ( UnsignedFile.Multi.Generic ) - warning
16:18:45.0981 1472  athr - detected UnsignedFile.Multi.Generic (1)
16:18:46.0020 1472  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
16:18:46.0079 1472  AudioEndpointBuilder - ok
16:18:46.0089 1472  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
16:18:46.0128 1472  AudioSrv - ok
16:18:46.0171 1472  [ E7433C0C2505D8DEE6CA2A446C355595 ] avc3            C:\Windows\system32\DRIVERS\avc3.sys
16:18:46.0195 1472  avc3 - ok
16:18:46.0227 1472  [ 6DC4CCA415BBF2FC629BEB532AA0E6CD ] avckf          C:\Windows\system32\DRIVERS\avckf.sys
16:18:46.0243 1472  avckf - ok
16:18:46.0269 1472  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
16:18:46.0320 1472  AxInstSV - ok
16:18:46.0339 1472  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
16:18:46.0381 1472  b06bdrv - ok
16:18:46.0401 1472  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
16:18:46.0439 1472  b57nd60a - ok
16:18:46.0452 1472  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
16:18:46.0484 1472  BDESVC - ok
16:18:46.0546 1472  [ EC80614A72BC7039D2B22E3DD6C15895 ] bdfwfpf        C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys
16:18:46.0560 1472  bdfwfpf - ok
16:18:46.0571 1472  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
16:18:46.0606 1472  Beep - ok
16:18:46.0642 1472  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
16:18:46.0695 1472  BFE - ok
16:18:46.0727 1472  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
16:18:46.0784 1472  BITS - ok
16:18:46.0807 1472  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
16:18:46.0836 1472  blbdrive - ok
16:18:46.0851 1472  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
16:18:46.0884 1472  bowser - ok
16:18:46.0888 1472  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
16:18:46.0911 1472  BrFiltLo - ok
16:18:46.0914 1472  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
16:18:46.0938 1472  BrFiltUp - ok
16:18:46.0955 1472  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
16:18:46.0994 1472  Browser - ok
16:18:47.0006 1472  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
16:18:47.0037 1472  Brserid - ok
16:18:47.0049 1472  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
16:18:47.0091 1472  BrSerWdm - ok
16:18:47.0109 1472  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
16:18:47.0148 1472  BrUsbMdm - ok
16:18:47.0190 1472  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
16:18:47.0229 1472  BrUsbSer - ok
16:18:47.0234 1472  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
16:18:47.0253 1472  BTHMODEM - ok
16:18:47.0269 1472  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
16:18:47.0305 1472  bthserv - ok
16:18:47.0321 1472  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
16:18:47.0357 1472  cdfs - ok
16:18:47.0371 1472  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
16:18:47.0387 1472  cdrom - ok
16:18:47.0402 1472  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
16:18:47.0447 1472  CertPropSvc - ok
16:18:47.0469 1472  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys
16:18:47.0487 1472  circlass - ok
16:18:47.0505 1472  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
16:18:47.0525 1472  CLFS - ok
16:18:47.0580 1472  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:18:47.0607 1472  clr_optimization_v2.0.50727_32 - ok
16:18:47.0636 1472  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:18:47.0653 1472  clr_optimization_v2.0.50727_64 - ok
16:18:47.0697 1472  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:18:47.0721 1472  clr_optimization_v4.0.30319_32 - ok
16:18:47.0745 1472  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:18:47.0759 1472  clr_optimization_v4.0.30319_64 - ok
16:18:47.0766 1472  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
16:18:47.0781 1472  CmBatt - ok
16:18:47.0791 1472  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
16:18:47.0805 1472  cmdide - ok
16:18:47.0828 1472  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG            C:\Windows\system32\Drivers\cng.sys
16:18:47.0874 1472  CNG - ok
16:18:47.0892 1472  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
16:18:47.0906 1472  Compbatt - ok
16:18:47.0915 1472  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
16:18:47.0943 1472  CompositeBus - ok
16:18:47.0947 1472  COMSysApp - ok
16:18:47.0957 1472  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
16:18:47.0971 1472  crcdisk - ok
16:18:47.0990 1472  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
16:18:48.0026 1472  CryptSvc - ok
16:18:48.0043 1472  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC            C:\Windows\system32\drivers\csc.sys
16:18:48.0079 1472  CSC - ok
16:18:48.0113 1472  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
16:18:48.0152 1472  CscService - ok
16:18:48.0182 1472  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
16:18:48.0226 1472  DcomLaunch - ok
16:18:48.0251 1472  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
16:18:48.0291 1472  defragsvc - ok
16:18:48.0301 1472  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
16:18:48.0344 1472  DfsC - ok
16:18:48.0363 1472  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
16:18:48.0405 1472  Dhcp - ok
16:18:48.0420 1472  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
16:18:48.0465 1472  discache - ok
16:18:48.0502 1472  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys
16:18:48.0519 1472  Disk - ok
16:18:48.0524 1472  [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc          C:\Windows\system32\drivers\dmvsc.sys
16:18:48.0555 1472  dmvsc - ok
16:18:48.0560 1472  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
16:18:48.0608 1472  Dnscache - ok
16:18:48.0627 1472  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
16:18:48.0669 1472  dot3svc - ok
16:18:48.0685 1472  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
16:18:48.0724 1472  DPS - ok
16:18:48.0738 1472  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
16:18:48.0765 1472  drmkaud - ok
16:18:48.0787 1472  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
16:18:48.0818 1472  DXGKrnl - ok
16:18:48.0833 1472  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
16:18:48.0880 1472  EapHost - ok
16:18:48.0947 1472  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\drivers\evbda.sys
16:18:49.0010 1472  ebdrv - ok
16:18:49.0034 1472  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
16:18:49.0050 1472  EFS - ok
16:18:49.0098 1472  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
16:18:49.0150 1472  ehRecvr - ok
16:18:49.0160 1472  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
16:18:49.0187 1472  ehSched - ok
16:18:49.0213 1472  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
16:18:49.0236 1472  elxstor - ok
16:18:49.0252 1472  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
16:18:49.0270 1472  ErrDev - ok
16:18:49.0297 1472  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
16:18:49.0349 1472  EventSystem - ok
16:18:49.0362 1472  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
16:18:49.0399 1472  exfat - ok
16:18:49.0418 1472  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
16:18:49.0463 1472  fastfat - ok
16:18:49.0483 1472  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
16:18:49.0515 1472  Fax - ok
16:18:49.0519 1472  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\drivers\fdc.sys
16:18:49.0534 1472  fdc - ok
16:18:49.0547 1472  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
16:18:49.0587 1472  fdPHost - ok
16:18:49.0598 1472  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
16:18:49.0645 1472  FDResPub - ok
16:18:49.0657 1472  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
16:18:49.0672 1472  FileInfo - ok
16:18:49.0682 1472  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
16:18:49.0723 1472  Filetrace - ok
16:18:49.0737 1472  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
16:18:49.0752 1472  flpydisk - ok
16:18:49.0770 1472  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
16:18:49.0788 1472  FltMgr - ok
16:18:49.0841 1472  [ C4C183E6551084039EC862DA1C945E3D ] FontCache      C:\Windows\system32\FntCache.dll
16:18:49.0892 1472  FontCache - ok
16:18:49.0934 1472  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:18:49.0949 1472  FontCache3.0.0.0 - ok
16:18:49.0960 1472  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
16:18:49.0974 1472  FsDepends - ok
16:18:49.0987 1472  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
16:18:50.0000 1472  Fs_Rec - ok
16:18:50.0035 1472  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
16:18:50.0057 1472  fvevol - ok
16:18:50.0070 1472  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
16:18:50.0085 1472  gagp30kx - ok
16:18:50.0112 1472  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
16:18:50.0121 1472  GEARAspiWDM - ok
16:18:50.0149 1472  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
16:18:50.0193 1472  gpsvc - ok
16:18:50.0230 1472  [ DB8A82239139348D6666434128D6F5DC ] gzflt          C:\Windows\system32\DRIVERS\gzflt.sys
16:18:50.0242 1472  gzflt - ok
16:18:50.0268 1472  [ F89F5A375BB5046EDC1E09640CB72724 ] gzserv          C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
16:18:50.0281 1472  gzserv - ok
16:18:50.0292 1472  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
16:18:50.0334 1472  hcw85cir - ok
16:18:50.0359 1472  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
16:18:50.0393 1472  HdAudAddService - ok
16:18:50.0415 1472  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
16:18:50.0440 1472  HDAudBus - ok
16:18:50.0451 1472  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
16:18:50.0466 1472  HidBatt - ok
16:18:50.0470 1472  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
16:18:50.0488 1472  HidBth - ok
16:18:50.0496 1472  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\drivers\hidir.sys
16:18:50.0513 1472  HidIr - ok
16:18:50.0529 1472  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
16:18:50.0564 1472  hidserv - ok
16:18:50.0594 1472  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
16:18:50.0608 1472  HidUsb - ok
16:18:50.0625 1472  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
16:18:50.0672 1472  hkmsvc - ok
16:18:50.0684 1472  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
16:18:50.0710 1472  HomeGroupListener - ok
16:18:50.0730 1472  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
16:18:50.0751 1472  HomeGroupProvider - ok
16:18:50.0771 1472  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
16:18:50.0786 1472  HpSAMD - ok
16:18:50.0808 1472  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
16:18:50.0861 1472  HTTP - ok
16:18:50.0876 1472  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
16:18:50.0889 1472  hwpolicy - ok
16:18:50.0900 1472  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
16:18:50.0915 1472  i8042prt - ok
16:18:50.0947 1472  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
16:18:50.0967 1472  iaStorV - ok
16:18:51.0011 1472  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:18:51.0038 1472  idsvc - ok
16:18:51.0214 1472  [ A87261EF1546325B559374F5689CF5BC ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
16:18:51.0325 1472  igfx - ok
16:18:51.0341 1472  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
16:18:51.0355 1472  iirsp - ok
16:18:51.0386 1472  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
16:18:51.0437 1472  IKEEXT - ok
16:18:51.0445 1472  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
16:18:51.0459 1472  intelide - ok
16:18:51.0475 1472  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
16:18:51.0500 1472  intelppm - ok
16:18:51.0524 1472  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
16:18:51.0565 1472  IPBusEnum - ok
16:18:51.0576 1472  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:18:51.0616 1472  IpFilterDriver - ok
16:18:51.0651 1472  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
16:18:51.0684 1472  iphlpsvc - ok
16:18:51.0695 1472  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
16:18:51.0714 1472  IPMIDRV - ok
16:18:51.0724 1472  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
16:18:51.0768 1472  IPNAT - ok
16:18:51.0809 1472  [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
16:18:51.0833 1472  iPod Service - ok
16:18:51.0843 1472  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
16:18:51.0873 1472  IRENUM - ok
16:18:51.0876 1472  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
16:18:51.0891 1472  isapnp - ok
16:18:51.0910 1472  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
16:18:51.0929 1472  iScsiPrt - ok
16:18:51.0956 1472  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
16:18:51.0970 1472  kbdclass - ok
16:18:51.0978 1472  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
16:18:51.0993 1472  kbdhid - ok
16:18:52.0003 1472  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
16:18:52.0017 1472  KeyIso - ok
16:18:52.0045 1472  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
16:18:52.0059 1472  KSecDD - ok
16:18:52.0076 1472  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
16:18:52.0089 1472  KSecPkg - ok
16:18:52.0098 1472  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
16:18:52.0133 1472  ksthunk - ok
16:18:52.0156 1472  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
16:18:52.0195 1472  KtmRm - ok
16:18:52.0223 1472  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
16:18:52.0281 1472  LanmanServer - ok
16:18:52.0301 1472  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
16:18:52.0337 1472  LanmanWorkstation - ok
16:18:52.0363 1472  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
16:18:52.0410 1472  lltdio - ok
16:18:52.0421 1472  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
16:18:52.0469 1472  lltdsvc - ok
16:18:52.0477 1472  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
16:18:52.0518 1472  lmhosts - ok
16:18:52.0541 1472  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
16:18:52.0557 1472  LSI_FC - ok
16:18:52.0568 1472  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
16:18:52.0584 1472  LSI_SAS - ok
16:18:52.0597 1472  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
16:18:52.0612 1472  LSI_SAS2 - ok
16:18:52.0633 1472  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
16:18:52.0649 1472  LSI_SCSI - ok
16:18:52.0661 1472  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
16:18:52.0706 1472  luafv - ok
16:18:52.0716 1472  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
16:18:52.0733 1472  Mcx2Svc - ok
16:18:52.0744 1472  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\drivers\megasas.sys
16:18:52.0758 1472  megasas - ok
16:18:52.0773 1472  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
16:18:52.0792 1472  MegaSR - ok
16:18:52.0812 1472  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
16:18:52.0852 1472  MMCSS - ok
16:18:52.0864 1472  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
16:18:52.0909 1472  Modem - ok
16:18:52.0928 1472  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
16:18:52.0956 1472  monitor - ok
16:18:52.0972 1472  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
16:18:52.0987 1472  mouclass - ok
16:18:53.0000 1472  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
16:18:53.0024 1472  mouhid - ok
16:18:53.0037 1472  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
16:18:53.0052 1472  mountmgr - ok
16:18:53.0120 1472  [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:18:53.0137 1472  MozillaMaintenance - ok
16:18:53.0149 1472  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
16:18:53.0169 1472  mpio - ok
16:18:53.0184 1472  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
16:18:53.0224 1472  mpsdrv - ok
16:18:53.0248 1472  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
16:18:53.0294 1472  MpsSvc - ok
16:18:53.0305 1472  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
16:18:53.0332 1472  MRxDAV - ok
16:18:53.0349 1472  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
16:18:53.0378 1472  mrxsmb - ok
16:18:53.0395 1472  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:18:53.0412 1472  mrxsmb10 - ok
16:18:53.0423 1472  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:18:53.0438 1472  mrxsmb20 - ok
16:18:53.0449 1472  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
16:18:53.0465 1472  msahci - ok
16:18:53.0480 1472  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
16:18:53.0496 1472  msdsm - ok
16:18:53.0509 1472  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
16:18:53.0538 1472  MSDTC - ok
16:18:53.0552 1472  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
16:18:53.0587 1472  Msfs - ok
16:18:53.0599 1472  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
16:18:53.0633 1472  mshidkmdf - ok
16:18:53.0649 1472  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
16:18:53.0663 1472  msisadrv - ok
16:18:53.0694 1472  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
16:18:53.0731 1472  MSiSCSI - ok
16:18:53.0735 1472  msiserver - ok
16:18:53.0748 1472  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
16:18:53.0790 1472  MSKSSRV - ok
16:18:53.0795 1472  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
16:18:53.0835 1472  MSPCLOCK - ok
16:18:53.0839 1472  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
16:18:53.0874 1472  MSPQM - ok
16:18:53.0894 1472  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
16:18:53.0914 1472  MsRPC - ok
16:18:53.0928 1472  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
16:18:53.0942 1472  mssmbios - ok
16:18:53.0950 1472  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
16:18:53.0984 1472  MSTEE - ok
16:18:53.0993 1472  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
16:18:54.0008 1472  MTConfig - ok
16:18:54.0036 1472  [ 2219A3D695405E7BA2186BA6B9EDE14A ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
16:18:54.0045 1472  MTsensor - ok
16:18:54.0055 1472  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
16:18:54.0070 1472  Mup - ok
16:18:54.0096 1472  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
16:18:54.0149 1472  napagent - ok
16:18:54.0174 1472  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
16:18:54.0201 1472  NativeWifiP - ok
16:18:54.0247 1472  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
16:18:54.0276 1472  NDIS - ok
16:18:54.0291 1472  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
16:18:54.0326 1472  NdisCap - ok
16:18:54.0340 1472  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
16:18:54.0374 1472  NdisTapi - ok
16:18:54.0382 1472  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
16:18:54.0417 1472  Ndisuio - ok
16:18:54.0430 1472  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
16:18:54.0469 1472  NdisWan - ok
16:18:54.0479 1472  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
16:18:54.0513 1472  NDProxy - ok
16:18:54.0520 1472  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
16:18:54.0561 1472  NetBIOS - ok
16:18:54.0580 1472  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
16:18:54.0617 1472  NetBT - ok
16:18:54.0623 1472  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
16:18:54.0638 1472  Netlogon - ok
16:18:54.0669 1472  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
16:18:54.0718 1472  Netman - ok
16:18:54.0737 1472  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
16:18:54.0786 1472  netprofm - ok
16:18:54.0807 1472  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:18:54.0825 1472  NetTcpPortSharing - ok
16:18:54.0838 1472  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
16:18:54.0853 1472  nfrd960 - ok
16:18:54.0874 1472  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
16:18:54.0895 1472  NlaSvc - ok
16:18:54.0906 1472  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
16:18:54.0941 1472  Npfs - ok
16:18:54.0957 1472  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
16:18:55.0003 1472  nsi - ok
16:18:55.0011 1472  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
16:18:55.0058 1472  nsiproxy - ok
16:18:55.0107 1472  [ B8965FB53551B5455630A4B804D0791F ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
16:18:55.0150 1472  Ntfs - ok
16:18:55.0163 1472  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
16:18:55.0206 1472  Null - ok
16:18:55.0243 1472  [ 1F07B814C0BB5AABA703ABFF1F31F2E8 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
16:18:55.0256 1472  NVHDA - ok
16:18:55.0450 1472  [ FCBA1C22727939E7CFF9EB08FE9692AB ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
16:18:55.0659 1472  nvlddmkm - ok
16:18:55.0686 1472  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
16:18:55.0703 1472  nvraid - ok
16:18:55.0716 1472  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
16:18:55.0733 1472  nvstor - ok
16:18:55.0775 1472  [ 10C232F6CFFD51D2332898AE7AE0FF23 ] nvsvc          C:\Windows\system32\nvvsvc.exe
16:18:55.0801 1472  nvsvc - ok
16:18:55.0861 1472  [ FB660F80BDC4F13D594996976AFAECD9 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
16:18:55.0899 1472  nvUpdatusService - ok
16:18:55.0923 1472  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
16:18:55.0939 1472  nv_agp - ok
16:18:55.0963 1472  [ 99997F53195106DF03A29DEF2E7CC3BF ] oem-drv64      C:\Windows\system32\DRIVERS\oem-drv64.sys
16:18:55.0968 1472  oem-drv64 ( UnsignedFile.Multi.Generic ) - warning
16:18:55.0968 1472  oem-drv64 - detected UnsignedFile.Multi.Generic (1)
16:18:55.0985 1472  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
16:18:56.0005 1472  ohci1394 - ok
16:18:56.0067 1472  [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:18:56.0081 1472  ose - ok
16:18:56.0106 1472  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
16:18:56.0138 1472  p2pimsvc - ok
16:18:56.0157 1472  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
16:18:56.0179 1472  p2psvc - ok
16:18:56.0189 1472  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\drivers\parport.sys
16:18:56.0217 1472  Parport - ok
16:18:56.0235 1472  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
16:18:56.0248 1472  partmgr - ok
16:18:56.0263 1472  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
16:18:56.0294 1472  PcaSvc - ok
16:18:56.0312 1472  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
16:18:56.0328 1472  pci - ok
16:18:56.0340 1472  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
16:18:56.0354 1472  pciide - ok
16:18:56.0369 1472  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
16:18:56.0387 1472  pcmcia - ok
16:18:56.0403 1472  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
16:18:56.0417 1472  pcw - ok
16:18:56.0435 1472  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
16:18:56.0485 1472  PEAUTH - ok
16:18:56.0512 1472  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
16:18:56.0554 1472  PeerDistSvc - ok
16:18:56.0602 1472  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
16:18:56.0630 1472  PerfHost - ok
16:18:56.0667 1472  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
16:18:56.0725 1472  pla - ok
16:18:56.0761 1472  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
16:18:56.0801 1472  PlugPlay - ok
16:18:56.0810 1472  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
16:18:56.0834 1472  PNRPAutoReg - ok
16:18:56.0843 1472  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
16:18:56.0861 1472  PNRPsvc - ok
16:18:56.0888 1472  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
16:18:56.0942 1472  PolicyAgent - ok
16:18:56.0964 1472  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
16:18:57.0001 1472  Power - ok
16:18:57.0022 1472  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
16:18:57.0057 1472  PptpMiniport - ok
16:18:57.0070 1472  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\drivers\processr.sys
16:18:57.0086 1472  Processor - ok
16:18:57.0122 1472  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
16:18:57.0149 1472  ProfSvc - ok
16:18:57.0161 1472  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
16:18:57.0175 1472  ProtectedStorage - ok
16:18:57.0196 1472  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
16:18:57.0243 1472  Psched - ok
16:18:57.0405 1472  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
16:18:57.0463 1472  ql2300 - ok
16:18:57.0487 1472  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
16:18:57.0503 1472  ql40xx - ok
16:18:57.0524 1472  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
16:18:57.0547 1472  QWAVE - ok
16:18:57.0558 1472  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
16:18:57.0583 1472  QWAVEdrv - ok
16:18:57.0597 1472  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
16:18:57.0633 1472  RasAcd - ok
16:18:57.0652 1472  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
16:18:57.0696 1472  RasAgileVpn - ok
16:18:57.0706 1472  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
16:18:57.0752 1472  RasAuto - ok
16:18:57.0768 1472  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
16:18:57.0808 1472  Rasl2tp - ok
16:18:57.0819 1472  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
16:18:57.0858 1472  RasMan - ok
16:18:57.0869 1472  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
16:18:57.0917 1472  RasPppoe - ok
16:18:57.0927 1472  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
16:18:57.0963 1472  RasSstp - ok
16:18:57.0977 1472  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
16:18:58.0023 1472  rdbss - ok
16:18:58.0032 1472  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
16:18:58.0049 1472  rdpbus - ok
16:18:58.0059 1472  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
16:18:58.0093 1472  RDPCDD - ok
16:18:58.0110 1472  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
16:18:58.0135 1472  RDPDR - ok
16:18:58.0148 1472  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
16:18:58.0192 1472  RDPENCDD - ok
16:18:58.0203 1472  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
16:18:58.0238 1472  RDPREFMP - ok
16:18:58.0263 1472  [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
16:18:58.0294 1472  RdpVideoMiniport - ok
16:18:58.0320 1472  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
16:18:58.0345 1472  RDPWD - ok
16:18:58.0364 1472  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
16:18:58.0380 1472  rdyboost - ok
16:18:58.0393 1472  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
16:18:58.0430 1472  RemoteAccess - ok
16:18:58.0446 1472  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
16:18:58.0494 1472  RemoteRegistry - ok
16:18:58.0508 1472  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
16:18:58.0552 1472  RpcEptMapper - ok
16:18:58.0569 1472  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
16:18:58.0585 1472  RpcLocator - ok
16:18:58.0607 1472  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
16:18:58.0646 1472  RpcSs - ok
16:18:58.0656 1472  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
16:18:58.0691 1472  rspndr - ok
16:18:58.0703 1472  [ E60C0A09F997826C7627B244195AB581 ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
16:18:58.0725 1472  s3cap - ok
16:18:58.0768 1472  [ 2DCA3C6FAAD8CD097C2261B3BD06A5EA ] SafeBox        C:\Program Files\Bitdefender\Safebox\SafeBoxService.exe
16:18:58.0780 1472  SafeBox - ok
16:18:58.0787 1472  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
16:18:58.0803 1472  SamSs - ok
16:18:58.0826 1472  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys
16:18:58.0841 1472  sbp2port - ok
16:18:58.0862 1472  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
16:18:58.0900 1472  SCardSvr - ok
16:18:58.0914 1472  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
16:18:58.0958 1472  scfilter - ok
16:18:58.0985 1472  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
16:18:59.0049 1472  Schedule - ok
16:18:59.0063 1472  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
16:18:59.0097 1472  SCPolicySvc - ok
16:18:59.0112 1472  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
16:18:59.0154 1472  SDRSVC - ok
16:18:59.0166 1472  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
16:18:59.0211 1472  secdrv - ok
16:18:59.0225 1472  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
16:18:59.0260 1472  seclogon - ok
16:18:59.0274 1472  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
16:18:59.0310 1472  SENS - ok
16:18:59.0314 1472  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
16:18:59.0349 1472  SensrSvc - ok
16:18:59.0361 1472  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\drivers\serenum.sys
16:18:59.0388 1472  Serenum - ok
16:18:59.0397 1472  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\drivers\serial.sys
16:18:59.0419 1472  Serial - ok
16:18:59.0433 1472  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
16:18:59.0455 1472  sermouse - ok
16:18:59.0471 1472  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
16:18:59.0517 1472  SessionEnv - ok
16:18:59.0525 1472  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
16:18:59.0542 1472  sffdisk - ok
16:18:59.0548 1472  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
16:18:59.0572 1472  sffp_mmc - ok
16:18:59.0575 1472  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
16:18:59.0597 1472  sffp_sd - ok
16:18:59.0600 1472  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
16:18:59.0617 1472  sfloppy - ok
16:18:59.0641 1472  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
16:18:59.0687 1472  SharedAccess - ok
16:18:59.0707 1472  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
16:18:59.0745 1472  ShellHWDetection - ok
16:18:59.0761 1472  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
16:18:59.0776 1472  SiSRaid2 - ok
16:18:59.0785 1472  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
16:18:59.0801 1472  SiSRaid4 - ok
16:18:59.0815 1472  [ 544788D536087DAF32B846F10D8392F5 ] SLEE_17_DRIVER  C:\Windows\Sleen1764.sys
16:18:59.0827 1472  SLEE_17_DRIVER - ok
16:18:59.0845 1472  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
16:18:59.0893 1472  Smb - ok
16:18:59.0906 1472  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
16:18:59.0922 1472  SNMPTRAP - ok
16:18:59.0940 1472  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
16:18:59.0953 1472  spldr - ok
16:18:59.0978 1472  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
16:18:59.0998 1472  Spooler - ok
16:19:00.0063 1472  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
16:19:00.0133 1472  sppsvc - ok
16:19:00.0156 1472  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
16:19:00.0192 1472  sppuinotify - ok
16:19:00.0222 1472  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
16:19:00.0254 1472  srv - ok
16:19:00.0273 1472  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
16:19:00.0297 1472  srv2 - ok
16:19:00.0315 1472  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
16:19:00.0331 1472  srvnet - ok
16:19:00.0348 1472  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
16:19:00.0385 1472  SSDPSRV - ok
16:19:00.0392 1472  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
16:19:00.0428 1472  SstpSvc - ok
16:19:00.0431 1472  Steganos Volatile Disk - ok
16:19:00.0445 1472  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys
16:19:00.0459 1472  stexstor - ok
16:19:00.0480 1472  [ 70D9E406A1170A801B0D9CCECF9D6914 ] STGMFEngine64  C:\Windows\system32\drivers\STGMFEngine64.sys
16:19:00.0492 1472  STGMFEngine64 - ok
16:19:00.0526 1472  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
16:19:00.0567 1472  stisvc - ok
16:19:00.0576 1472  [ 7785DC213270D2FC066538DAF94087E7 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
16:19:00.0591 1472  storflt - ok
16:19:00.0595 1472  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
16:19:00.0609 1472  storvsc - ok
16:19:00.0617 1472  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
16:19:00.0631 1472  swenum - ok
16:19:00.0647 1472  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
16:19:00.0690 1472  swprv - ok
16:19:00.0699 1472  [ C3A39C4079305480972D29C44B868C78 ] Synth3dVsc      C:\Windows\system32\drivers\Synth3dVsc.sys
16:19:00.0714 1472  Synth3dVsc - ok
16:19:00.0750 1472  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
16:19:00.0800 1472  SysMain - ok
16:19:00.0817 1472  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
16:19:00.0838 1472  TabletInputService - ok
16:19:00.0852 1472  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
16:19:00.0900 1472  TapiSrv - ok
16:19:00.0904 1472  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
16:19:00.0941 1472  TBS - ok
16:19:00.0992 1472  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
16:19:01.0037 1472  Tcpip - ok
16:19:01.0067 1472  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
16:19:01.0104 1472  TCPIP6 - ok
16:19:01.0127 1472  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
16:19:01.0140 1472  tcpipreg - ok
16:19:01.0145 1472  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
16:19:01.0175 1472  TDPIPE - ok
16:19:01.0191 1472  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
16:19:01.0210 1472  TDTCP - ok
16:19:01.0235 1472  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
16:19:01.0269 1472  tdx - ok
16:19:01.0280 1472  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
16:19:01.0295 1472  TermDD - ok
16:19:01.0299 1472  [ 2B5BDFF688EC9871D7EC5837833374E9 ] terminpt        C:\Windows\system32\drivers\terminpt.sys
16:19:01.0326 1472  terminpt - ok
16:19:01.0342 1472  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
16:19:01.0396 1472  TermService - ok
16:19:01.0404 1472  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
16:19:01.0424 1472  Themes - ok
16:19:01.0437 1472  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
16:19:01.0473 1472  THREADORDER - ok
16:19:01.0486 1472  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
16:19:01.0526 1472  TrkWks - ok
16:19:01.0579 1472  [ B66EE1D68197DFB9AA24F961E68ACDCC ] trufos          C:\Windows\system32\DRIVERS\trufos.sys
16:19:01.0594 1472  trufos - ok
16:19:01.0632 1472  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
16:19:01.0668 1472  TrustedInstaller - ok
16:19:01.0678 1472  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
16:19:01.0719 1472  tssecsrv - ok
16:19:01.0733 1472  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
16:19:01.0753 1472  TsUsbFlt - ok
16:19:01.0768 1472  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
16:19:01.0783 1472  TsUsbGD - ok
16:19:01.0788 1472  [ E1748D04AE40118B62BC18AC86032192 ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
16:19:01.0817 1472  tsusbhub - ok
16:19:01.0844 1472  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
16:19:01.0888 1472  tunnel - ok
16:19:01.0892 1472  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
16:19:01.0908 1472  uagp35 - ok
16:19:01.0920 1472  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
16:19:01.0969 1472  udfs - ok
16:19:01.0984 1472  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
16:19:02.0013 1472  UI0Detect - ok
16:19:02.0039 1472  [ 90EB009FB4EBFD70B51A771876CAA160 ] ui11rdr        C:\Windows\system32\DRIVERS\ui11rdr.sys
16:19:02.0052 1472  ui11rdr - ok
16:19:02.0066 1472  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
16:19:02.0082 1472  uliagpkx - ok
16:19:02.0098 1472  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
16:19:02.0126 1472  umbus - ok
16:19:02.0135 1472  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
16:19:02.0161 1472  UmPass - ok
16:19:02.0171 1472  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
16:19:02.0197 1472  UmRdpService - ok
16:19:02.0211 1472  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
16:19:02.0257 1472  upnphost - ok
16:19:02.0271 1472  [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
16:19:02.0300 1472  USBAAPL64 - ok
16:19:02.0327 1472  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
16:19:02.0350 1472  usbccgp - ok
16:19:02.0374 1472  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
16:19:02.0393 1472  usbcir - ok
16:19:02.0406 1472  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
16:19:02.0420 1472  usbehci - ok
16:19:02.0442 1472  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
16:19:02.0480 1472  usbhub - ok
16:19:02.0489 1472  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
16:19:02.0514 1472  usbohci - ok
16:19:02.0535 1472  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
16:19:02.0565 1472  usbprint - ok
16:19:02.0576 1472  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:19:02.0616 1472  USBSTOR - ok
16:19:02.0628 1472  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\DRIVERS\usbuhci.sys
16:19:02.0651 1472  usbuhci - ok
16:19:02.0662 1472  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
16:19:02.0693 1472  usbvideo - ok
16:19:02.0705 1472  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
16:19:02.0751 1472  UxSms - ok
16:19:02.0760 1472  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
16:19:02.0775 1472  VaultSvc - ok
16:19:02.0796 1472  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
16:19:02.0811 1472  vdrvroot - ok
16:19:02.0836 1472  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
16:19:02.0886 1472  vds - ok
16:19:02.0904 1472  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
16:19:02.0922 1472  vga - ok
16:19:02.0925 1472  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
16:19:02.0960 1472  VgaSave - ok
16:19:02.0963 1472  VGPU - ok
16:19:02.0982 1472  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
16:19:03.0000 1472  vhdmp - ok
16:19:03.0010 1472  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
16:19:03.0024 1472  viaide - ok
16:19:03.0034 1472  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus          C:\Windows\system32\drivers\vmbus.sys
16:19:03.0052 1472  vmbus - ok
16:19:03.0060 1472  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
16:19:03.0075 1472  VMBusHID - ok
16:19:03.0098 1472  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
16:19:03.0112 1472  volmgr - ok
16:19:03.0131 1472  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
16:19:03.0152 1472  volmgrx - ok
16:19:03.0167 1472  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
16:19:03.0185 1472  volsnap - ok
16:19:03.0203 1472  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
16:19:03.0220 1472  vsmraid - ok
16:19:03.0253 1472  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
16:19:03.0301 1472  VSS - ok
16:19:03.0310 1472  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
16:19:03.0335 1472  vwifibus - ok
16:19:03.0347 1472  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
16:19:03.0367 1472  vwififlt - ok
16:19:03.0385 1472  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
16:19:03.0424 1472  W32Time - ok
16:19:03.0433 1472  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
16:19:03.0453 1472  WacomPen - ok
16:19:03.0463 1472  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
16:19:03.0498 1472  WANARP - ok
16:19:03.0501 1472  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
16:19:03.0535 1472  Wanarpv6 - ok
16:19:03.0589 1472  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
16:19:03.0625 1472  WatAdminSvc - ok
16:19:03.0660 1472  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
16:19:03.0715 1472  wbengine - ok
16:19:03.0728 1472  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
16:19:03.0750 1472  WbioSrvc - ok
16:19:03.0773 1472  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
16:19:03.0810 1472  wcncsvc - ok
16:19:03.0823 1472  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
16:19:03.0850 1472  WcsPlugInService - ok
16:19:03.0859 1472  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys
16:19:03.0873 1472  Wd - ok
16:19:03.0909 1472  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
16:19:03.0935 1472  Wdf01000 - ok
16:19:03.0951 1472  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
16:19:04.0016 1472  WdiServiceHost - ok
16:19:04.0019 1472  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
16:19:04.0039 1472  WdiSystemHost - ok
16:19:04.0055 1472  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
16:19:04.0082 1472  WebClient - ok
16:19:04.0093 1472  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
16:19:04.0142 1472  Wecsvc - ok
16:19:04.0156 1472  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
16:19:04.0192 1472  wercplsupport - ok
16:19:04.0208 1472  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
16:19:04.0245 1472  WerSvc - ok
16:19:04.0262 1472  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
16:19:04.0296 1472  WfpLwf - ok
16:19:04.0308 1472  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
16:19:04.0323 1472  WIMMount - ok
16:19:04.0339 1472  WinDefend - ok
16:19:04.0350 1472  WinHttpAutoProxySvc - ok
16:19:04.0402 1472  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
16:19:04.0444 1472  Winmgmt - ok
16:19:04.0499 1472  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
16:19:04.0564 1472  WinRM - ok
16:19:04.0605 1472  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
16:19:04.0631 1472  WinUsb - ok
16:19:04.0662 1472  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
16:19:04.0701 1472  Wlansvc - ok
16:19:04.0731 1472  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
16:19:04.0750 1472  WmiAcpi - ok
16:19:04.0770 1472  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
16:19:04.0798 1472  wmiApSrv - ok
16:19:04.0815 1472  WMPNetworkSvc - ok
16:19:04.0826 1472  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
16:19:04.0849 1472  WPCSvc - ok
16:19:04.0859 1472  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
16:19:04.0876 1472  WPDBusEnum - ok
16:19:04.0887 1472  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
16:19:04.0921 1472  ws2ifsl - ok
16:19:04.0934 1472  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
16:19:04.0966 1472  wscsvc - ok
16:19:04.0969 1472  WSearch - ok
16:19:05.0025 1472  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
16:19:05.0080 1472  wuauserv - ok
16:19:05.0105 1472  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
16:19:05.0128 1472  WudfPf - ok
16:19:05.0144 1472  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
16:19:05.0168 1472  WUDFRd - ok
16:19:05.0181 1472  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
16:19:05.0204 1472  wudfsvc - ok
16:19:05.0217 1472  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
16:19:05.0241 1472  WwanSvc - ok
16:19:05.0264 1472  [ 64F88AF327AA74E03658AE32B48CCB8B ] yukonw7        C:\Windows\system32\DRIVERS\yk62x64.sys
16:19:05.0295 1472  yukonw7 - ok
16:19:05.0299 1472  ================ Scan global ===============================
16:19:05.0319 1472  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
16:19:05.0351 1472  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
16:19:05.0358 1472  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
16:19:05.0367 1472  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
16:19:05.0388 1472  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
16:19:05.0390 1472  [Global] - ok
16:19:05.0391 1472  ================ Scan MBR ==================================
16:19:05.0398 1472  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:19:05.0644 1472  \Device\Harddisk0\DR0 - ok
16:19:05.0644 1472  ================ Scan VBR ==================================
16:19:05.0647 1472  [ 76911A79AAFDF0F04457A27FD6114104 ] \Device\Harddisk0\DR0\Partition1
16:19:05.0648 1472  \Device\Harddisk0\DR0\Partition1 - ok
16:19:05.0674 1472  [ F191EB97725DAFB1C67499629A759879 ] \Device\Harddisk0\DR0\Partition2
16:19:05.0675 1472  \Device\Harddisk0\DR0\Partition2 - ok
16:19:05.0675 1472  ============================================================
16:19:05.0675 1472  Scan finished
16:19:05.0675 1472  ============================================================
16:19:05.0685 3192  Detected object count: 2
16:19:05.0685 3192  Actual detected object count: 2
16:19:33.0135 3192  athr ( UnsignedFile.Multi.Generic ) - skipped by user
16:19:33.0135 3192  athr ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:19:33.0135 3192  oem-drv64 ( UnsignedFile.Multi.Generic ) - skipped by user
16:19:33.0136 3192  oem-drv64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:19:41.0841 4072  Deinitialize success
die dds attach log

[CODE].
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.DDS Logfile:
Code:
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 26.09.2012 00:16:56
System Uptime: 18.04.2013 09:59:36 (7 hours ago)
.
Motherboard: ASUSTeK Computer INC. |  | Maximus Formula
Processor: Intel(R) Core(TM)2 Quad  CPU  Q9300  @ 2.50GHz | LGA775 | 2497/333mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 49 GiB total, 8,385 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e96b-e325-11ce-bfc1-08002be10318}
Description: Standardtastatur (PS/2)
Device ID: ACPI\PNP0303\4&23F9C1E3&0
Manufacturer: (Standardtastaturen)
Name: Standardtastatur (PS/2)
PNP Device ID: ACPI\PNP0303\4&23F9C1E3&0
Service: i8042prt
.
==== System Restore Points ===================
.
RP168: 10.04.2013 22:08:52 - Windows Update
RP169: 18.04.2013 11:22:55 - Geplanter Prüfpunkt
RP170: 18.04.2013 15:53:06 - CleanUp
RP171: 18.04.2013 16:01:00 - Windows Live Essentials
RP172: 18.04.2013 16:01:08 - WLSetup
.
==== Installed Programs ======================
.
1&1 Upload-Manager
7-Zip 9.20 (x64 edition)
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.02) - Deutsch
Apple Software Update
Bitdefender Antivirus Free Edition
Bitdefender Safebox
CCleaner
Diablo III
DVD Profiler Version 3.8.2
iTunes
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft Camera Codec Pack
Microsoft Filter Pack 2.0
Microsoft Office Excel Viewer
Microsoft Office PowerPoint Viewer 2007 (German)
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft SkyDrive
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 20.0.1 (x86 de)
Mozilla Maintenance Service
NVIDIA Grafiktreiber 311.06
NVIDIA HD-Audiotreiber 1.3.18.0
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX-Systemsoftware 9.12.1031
NVIDIA Systemsteuerung 311.06
NVIDIA Update 1.11.3
NVIDIA Update Components
QuickTime
Recuva
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Steganos Privacy Suite 12
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
VC80CRTRedist - 8.0.50727.6195
Yahoo! Messenger
.
==== End Of File ===========================
hier die dds log

Code:
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16537
Run by Martin³ at 16:21:21 on 2013-04-18
Microsoft Windows 7 Ultimate  6.1.7601.1.1252.49.1031.18.4095.2581 [GMT 2:00]
.
AV: Bitdefender Antivirus Free Edition *Enabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Bitdefender Antivirus Free Edition *Enabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\STGRAMDiskHandler64.exe
C:\Program Files\Bitdefender\Safebox\SafeBoxService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Bitdefender\Safebox\SafeBoxGUI.exe
C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation
C:\Users\Martin³\Desktop\dds+.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uProxyOverride = <local>
mWinlogon: Userinit = userinit.exe,
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - <orphaned>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
TB: Steganos Password Manager Toolbar: {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 12\SPMIEToolbar.dll
uRun: [1&1_1&1 Upload-Manager] "C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE" /hide
uRun: [SafeboxApp] C:\Program Files\Bitdefender\Safebox\SafeboxGUI.exe /silent
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\1&1UPL~1.LNK - C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: An OneNote s&enden - C:\PROGRA~1\MICROS~4\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~1\MICROS~4\Office15\EXCEL.EXE/3000
IE: {024538B9-3F39-49FF-9503-975F743210FA} - {9C65D12D-CF9D-454d-8049-61965D8C6FFF}
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 192.168.178.1
TCP: Interfaces\{26E93078-1FF8-47D8-BE23-1C285E1DD08A} : DHCPNameServer = 192.168.178.1
SSODL: WebCheck - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Martin³\AppData\Roaming\Mozilla\Firefox\Profiles\d3296w90.default\
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;C:\Windows\System32\drivers\avc3.sys [2013-4-8 705552]
R0 oem-drv64;OEM-SLP2.1 Driver (HPD64);C:\Windows\System32\drivers\oem-drv64.sys [2012-9-26 42496]
R1 bdfwfpf;bdfwfpf;C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys [2013-4-8 107080]
R1 gzflt;gzflt;C:\Windows\System32\drivers\gzflt.sys [2013-4-8 147232]
R1 SLEE_17_DRIVER;Steganos Live Encryption Engine 17 [Driver];C:\Windows\SleeN1764.sys [2010-2-17 108256]
R1 STGMFEngine64;Steganos RAM Disk Engine 64 Bit [Driver];C:\Windows\System32\drivers\STGMFEngine64.sys [2010-9-3 28576]
R1 ui11rdr;ui11rdr;C:\Windows\System32\drivers\ui11rdr.SYS [2012-9-26 199752]
R2 gzserv;Bitdefender Antivirus Free Edition;C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [2013-4-8 30240]
R2 SafeBox;SafeBox;C:\Program Files\Bitdefender\Safebox\SafeBoxService.exe [2013-4-8 75384]
R2 Steganos Volatile Disk;Steganos Volatile Disk;C:\Windows\System32\STGRAMDiskHandler64.exe --> C:\Windows\System32\STGRAMDiskHandler64.exe [?]
R3 avckf;avckf;C:\Windows\System32\drivers\avckf.sys [2013-4-8 545064]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-9-28 395264]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-21 71168]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;C:\Windows\System32\drivers\Synth3dVsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\System32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;Remote Deskotop USB Hub;C:\Windows\System32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-4-8 1255736]
S4 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S4 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
.
=============== Created Last 30 ================
.
2013-04-18 14:21:23        --------        d-----w-        C:\Users\Martin?\AppData\Local\Microsoft
2013-04-12 22:43:31        --------        d-----w-        C:\Users\Martin³\AppData\Roaming\EurekaLog
2013-04-12 22:01:04        --------        d-----w-        C:\Program Files (x86)\DVD Profiler
2013-04-10 14:33:36        3717632        ----a-w-        C:\Windows\System32\mstscax.dll
2013-04-08 17:07:48        --------        d-----w-        C:\Windows\SysWow64\Wat
2013-04-08 17:07:48        --------        d-----w-        C:\Windows\System32\Wat
2013-04-08 10:44:52        --------        d-----w-        C:\Users\Martin³\AppData\Roaming\QTTabBar
2013-04-08 10:28:54        --------        d-----w-        C:\ProgramData\Microsoft SkyDrive
2013-04-08 09:52:55        87341        ----a-w-        C:\ProgramData\1365414711.bdinstall.bin
2013-04-08 09:52:12        --------        d-----w-        C:\Users\Martin³\AppData\Roaming\Bitdefender
2013-04-08 09:52:09        --------        d-----w-        C:\Program Files (x86)\Common Files\Bitdefender
2013-04-08 09:52:05        55343        ----a-w-        C:\ProgramData\1365414711.3888.bin
2013-04-08 09:52:05        1751        ----a-w-        C:\ProgramData\1365414711.3476.bin
2013-04-08 09:51:51        3300        ----a-w-        C:\ProgramData\1365414711.3252.bin
2013-04-08 09:51:51        26947        ----a-w-        C:\ProgramData\1365414711.3384.bin
2013-04-08 09:30:07        260544        ----a-w-        C:\Windows\System32\drivers\avchv.sys
2013-04-08 09:29:15        152751        ----a-w-        C:\ProgramData\1365413263.bdinstall.bin
2013-04-08 09:28:57        705552        ----a-w-        C:\Windows\System32\drivers\avc3.sys
2013-04-08 09:28:57        545064        ----a-w-        C:\Windows\System32\drivers\avckf.sys
2013-04-08 09:28:02        --------        d-----w-        C:\Users\Martin³\AppData\Roaming\QuickScan
2013-04-08 09:28:00        --------        d-----w-        C:\Program Files\Bitdefender
2013-04-08 09:27:54        350160        ----a-w-        C:\Windows\System32\drivers\trufos.sys
2013-04-08 09:27:53        147232        ----a-w-        C:\Windows\System32\drivers\gzflt.sys
2013-04-08 09:21:13        2060        ----a-w-        C:\ProgramData\1365412871.692.bin
2013-04-08 09:21:11        26579        ----a-w-        C:\ProgramData\1365412871.3724.bin
2013-04-08 09:18:34        30425        ----a-w-        C:\ProgramData\1365412701.bdinstall.bin
2013-04-08 08:48:05        --------        d-----w-        C:\Program Files (x86)\MSECache
2013-04-08 08:43:24        --------        d-----w-        C:\Program Files (x86)\LOGIN
2013-04-08 08:43:22        --------        d-----w-        C:\ProgramData\LOGIN
2013-04-08 08:41:40        --------        d-----w-        C:\Program Files (x86)\LicenseCrawler
2013-04-08 02:22:38        5126        ----a-w-        C:\Windows\System32\PerfStringBackup.TMP
2013-04-02 15:56:46        9728        ---ha-w-        C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-02 15:43:21        19968        ----a-w-        C:\Windows\System32\drivers\usb8023.sys
2013-03-23 01:09:28        354656        ----a-w-        C:\Windows\SysWow64\DivXControlPanelApplet.cpl
.
==================== Find3M  ====================
.
2013-04-18 07:59:41        42496        ----a-w-        C:\Windows\System32\drivers\oem-drv64.sys
2013-04-11 14:42:20        71048        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-04-11 14:42:20        691592        ----a-w-        C:\Windows\SysWow64\FlashPlayerApp.exe
2013-04-02 15:56:46        9728        ---ha-w-        C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-02 10:34:28        282744        ------w-        C:\Windows\System32\MpSigStub.exe
2013-03-19 06:04:06        5550424        ----a-w-        C:\Windows\System32\ntoskrnl.exe
2013-03-19 05:46:56        43520        ----a-w-        C:\Windows\System32\csrsrv.dll
2013-03-19 05:04:13        3968856        ----a-w-        C:\Windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04:10        3913560        ----a-w-        C:\Windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47:50        6656        ----a-w-        C:\Windows\SysWow64\apisetschema.dll
2013-03-19 03:06:33        112640        ----a-w-        C:\Windows\System32\smss.exe
2013-03-02 06:04:53        1655656        ----a-w-        C:\Windows\System32\drivers\ntfs.sys
2013-03-01 03:36:04        3153408        ----a-w-        C:\Windows\System32\win32k.sys
2013-02-28 13:40:42        861088        ----a-w-        C:\Windows\SysWow64\npDeployJava1.dll
2013-02-28 13:40:42        782240        ----a-w-        C:\Windows\SysWow64\deployJava1.dll
2013-02-21 10:30:16        1766912        ----a-w-        C:\Windows\SysWow64\wininet.dll
2013-02-21 10:29:39        2877440        ----a-w-        C:\Windows\SysWow64\jscript9.dll
2013-02-21 10:29:37        61440        ----a-w-        C:\Windows\SysWow64\iesetup.dll
2013-02-21 10:29:37        109056        ----a-w-        C:\Windows\SysWow64\iesysprep.dll
2013-02-21 10:15:07        2240512        ----a-w-        C:\Windows\System32\wininet.dll
2013-02-21 10:14:09        3958784        ----a-w-        C:\Windows\System32\jscript9.dll
2013-02-21 10:14:05        67072        ----a-w-        C:\Windows\System32\iesetup.dll
2013-02-21 10:14:05        136704        ----a-w-        C:\Windows\System32\iesysprep.dll
2013-02-19 12:01:03        2706432        ----a-w-        C:\Windows\SysWow64\mshtml.tlb
2013-02-19 11:42:14        2706432        ----a-w-        C:\Windows\System32\mshtml.tlb
2013-02-19 11:10:53        71680        ----a-w-        C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-02-19 10:51:18        89600        ----a-w-        C:\Windows\System32\RegisterIEPKEYs.exe
2013-02-15 06:08:40        44032        ----a-w-        C:\Windows\System32\tsgqec.dll
2013-02-15 06:02:26        158720        ----a-w-        C:\Windows\System32\aaclient.dll
2013-02-15 04:37:10        3217408        ----a-w-        C:\Windows\SysWow64\mstscax.dll
2013-02-15 04:34:10        131584        ----a-w-        C:\Windows\SysWow64\aaclient.dll
2013-02-15 03:25:51        36864        ----a-w-        C:\Windows\SysWow64\tsgqec.dll
2013-02-12 05:45:24        135168        ----a-w-        C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45:22        350208        ----a-w-        C:\Windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45:22        308736        ----a-w-        C:\Windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45:22        111104        ----a-w-        C:\Windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48:31        474112        ----a-w-        C:\Windows\apppatch\AcSpecfc.dll
2013-02-12 04:48:26        2176512        ----a-w-        C:\Windows\apppatch\AcGenral.dll
2013-01-24 06:01:01        223752        ----a-w-        C:\Windows\System32\drivers\fvevol.sys
2013-01-18 15:00:28        6390048        ----a-w-        C:\Windows\System32\nvcpl.dll
2013-01-18 15:00:28        3460896        ----a-w-        C:\Windows\System32\nvsvc64.dll
2013-01-18 15:00:11        884512        ----a-w-        C:\Windows\System32\nvvsvc.exe
2013-01-18 15:00:11        63776        ----a-w-        C:\Windows\System32\nvshext.dll
2013-01-18 15:00:11        2953448        ----a-w-        C:\Windows\System32\nvcoproc.bin
2013-01-18 15:00:11        2558240        ----a-w-        C:\Windows\System32\nvsvcr.dll
2013-01-18 15:00:11        118560        ----a-w-        C:\Windows\System32\nvmctray.dll
.
============= FINISH: 16:21:47,50 ===============
--- --- ---

ryder 19.04.2013 19:15
Prima. Wir machen weiter.

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

ryder 21.04.2013 14:13
Hallo, benötigst Du noch weiterhin Hilfe ?

Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten.

Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist

ryder 23.04.2013 13:57
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomm ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst. Keine Logfiles einsenden, nur kurzer Hinweis, nachdem du deine Logfiles hier eingestellt hast.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:40 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55