Trojaner-Board - Win7: verzögerte Eingabe mit Tastatur

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Win7: verzögerte Eingabe mit Tastatur (https://www.trojaner-board.de/168923-win7-verzoegerte-eingabe-tastatur.html)

Win7: verzögerte Eingabe mit Tastatur

Hallo,
seit gestern habe ich das Problem, dass - sobald ich schneller als 1-Taste/Sekunde nutze - alle weiteren Eingaben verzögert angenommen werden, im Internet las ich dann dass es womöglich ein Virus sein könnte, welchen ich wohl ohne Hilfe nicht beseitigt kriege.^^
Die Treiber der Tastatur sind auf dem neusten Stand.
Die "Anschlagverzögerung" unter Systemsteuerung->Tastatur ist nicht aktiviert.

Hier noch die ganzen Logs:

defogger_disable.log

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 22:25 on 22/07/2015 (Tobias)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.

HKCU:DAEMON Tools Lite -> Removed
 

Checking for services/drivers...
 
 

-=E.O.F=-

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015

Ran by Tobias (administrator) on SHORTY on 22-07-2015 22:27:39

Running from C:\Users\Tobias\Downloads

Loaded Profiles: Tobias (Available Profiles: Tobias)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Opera)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(tzuk) C:\Program Files\Sandboxie\SbieSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe

(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe

() C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(tzuk) C:\Program Files\Sandboxie\SbieCtrl.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(Akamai Technologies, Inc.) C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

(Oracle Corporation) C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySQLNotifier.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe

(Oracle Corporation) C:\Program Files\Java\jre1.8.0_25\bin\javaw.exe

(Oracle Corporation) C:\Program Files\Java\jre1.8.0_25\bin\javaw.exe

(Akamai Technologies, Inc.) C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.59\opera.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)

HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)

HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-22] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-07-14] (LogMeIn Inc.)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2895552 2015-07-21] (Valve Corporation)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-11-22] (AMD)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632472 2015-05-01] (Electronic Arts)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [570600 2010-02-03] (tzuk)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [MySQL Notifier] => C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySqlNotifier.exe [771584 2013-11-25] (Oracle Corporation)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [7247416 2015-07-20] (GOG.com)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [FowlsHack 3.11.jar] => C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar [3153941 2015-07-21] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-11-18]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar [2015-07-21] ()

Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSIAfterburner.exe - Verknüpfung.lnk [2014-09-14]

ShortcutTarget: MSIAfterburner.exe - Verknüpfung.lnk -> C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe ()

Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RTSS.exe - Verknüpfung (2).lnk [2014-09-14]

ShortcutTarget: RTSS.exe - Verknüpfung (2).lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ()

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:50555;https=127.0.0.1:50555

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-12-21] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-21] (Oracle Corporation)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-21] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-21] (Oracle Corporation)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{1AAE6C60-9682-408E-8065-50CE28305203}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{26D490BE-3C36-493D-8B5A-EBE66A6A26CF}: [DhcpNameServer] 192.168.42.129
 

FireFox:

========

FF ProfilePath: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482

FF NewTab: about:blank

FF Homepage: about:blank

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-21] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [2014-10-08] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-963087113-2255471196-3066817158-1000: @Google.com/GoogleEarthPlugin -> C:\Users\Tobias\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll [2012-04-14] (Google)

FF Extension: Video DownloadHelper - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-04-10]

FF Extension: Adblock Plus - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-10]
 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://myhome.vi-view.com/?type=hp&ts=1419790202&from=cor&uid=WDCXWD10EURX-73C57Y0_WD-WCC4J025544855448"

CHR Profile: C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-22]

CHR Extension: (Google Drive) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-22]

CHR Extension: (YouTube) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-22]

CHR Extension: (Google Search) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-22]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-15]

CHR Extension: (Google Wallet) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-22]

CHR Extension: (Gmail) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-22]
 

Opera: 

=======

OPR Extension: (Adblock Plus) - C:\Users\Tobias\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-07-05]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-22] (Advanced Micro Devices, Inc.) [File not signed]

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-10] ()

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [235744 2015-04-18] (EasyAntiCheat Ltd)

S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1718840 2015-07-20] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6871608 2015-07-20] (GOG.com)

R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-07-14] (LogMeIn, Inc.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)

R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)

R2 MySQL55; C:\ProgramData\MySQL\MySQL Server 5.5\my.ini [9513 2014-08-08] () [File not signed]

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)

R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3542000 2015-01-21] (INCA Internet Co., Ltd.)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-05-01] (Electronic Arts)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-11-16] ()

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [94440 2010-02-03] (tzuk)

S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5419792 2014-11-28] (TeamViewer GmbH)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-09-07] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-17] (Disc Soft Ltd)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-09-07] ()

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13480 2014-06-10] ()

R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)

R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)

R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)

R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [134760 2010-02-03] (tzuk)

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S1 MpKsla6ad0bc4; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B149F4F2-207D-49BA-9414-44E807678A5A}\MpKsla6ad0bc4.sys [X]

S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-22 22:27 - 2015-07-22 22:28 - 00019773 _____ C:\Users\Tobias\Downloads\FRST.txt

2015-07-22 22:27 - 2015-07-22 22:27 - 02135552 _____ (Farbar) C:\Users\Tobias\Downloads\FRST64.exe

2015-07-22 22:27 - 2015-07-22 22:27 - 00000000 ____D C:\FRST

2015-07-22 22:25 - 2015-07-22 22:25 - 00050477 _____ C:\Users\Tobias\Downloads\Defogger.exe

2015-07-22 22:25 - 2015-07-22 22:25 - 00000544 _____ C:\Users\Tobias\Downloads\defogger_disable.log

2015-07-22 22:25 - 2015-07-22 22:25 - 00000168 _____ C:\Users\Tobias\defogger_reenable

2015-07-22 18:12 - 2015-07-22 18:15 - 00000112 _____ C:\Windows\setupact.log

2015-07-22 18:12 - 2015-07-22 18:12 - 00284392 _____ C:\Windows\system32\FNTCACHE.DAT

2015-07-22 18:12 - 2015-07-22 18:12 - 00061920 _____ C:\Users\Tobias\AppData\Local\GDIPFONTCACHEV1.DAT

2015-07-22 18:12 - 2015-07-22 18:12 - 00000000 _____ C:\Windows\setuperr.log

2015-07-22 10:19 - 2015-07-22 10:19 - 00000000 ____D C:\Users\Tobias\AppData\Local\CEF

2015-07-21 22:52 - 2015-07-21 22:52 - 05401092 _____ C:\Users\Tobias\Desktop\ts3_recording_15_07_21_22_52_24.wav

2015-07-21 20:49 - 2015-07-22 22:00 - 00000000 ____D C:\Users\Tobias\osc_files

2015-07-21 19:50 - 2015-07-21 19:50 - 00000222 _____ C:\Users\Tobias\Desktop\Unturned.url

2015-07-21 11:45 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-07-21 11:45 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-07-21 11:45 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-07-21 11:45 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-07-16 12:11 - 2015-07-17 15:14 - 00000000 ____D C:\Users\Tobias\AppData\Local\Warframe

2015-07-15 13:38 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-07-15 13:38 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-07-15 13:38 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-07-15 13:38 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-07-15 13:38 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-07-15 13:38 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-07-15 13:38 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-07-15 13:38 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-07-15 13:38 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-07-15 13:38 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-07-15 13:38 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-07-15 13:38 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-07-15 13:38 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-07-15 13:38 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-07-15 13:38 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-07-15 13:38 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-07-15 13:38 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-07-15 13:38 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-07-15 13:38 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-07-15 13:38 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-07-15 13:38 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-07-15 13:38 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-07-15 13:38 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-07-15 13:38 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-07-15 13:38 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-07-15 13:38 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-07-15 13:38 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-07-15 13:38 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-07-15 13:38 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-07-15 13:38 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-07-15 13:38 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-07-15 13:38 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-07-15 13:38 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-07-15 13:38 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-07-15 13:38 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-07-15 13:38 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-07-15 13:38 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-07-15 13:38 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-07-15 13:38 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-07-15 13:38 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-07-15 13:38 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-07-15 13:38 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-07-15 13:38 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-07-15 13:38 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-07-15 13:38 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-07-15 13:38 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-07-15 13:38 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-07-15 13:38 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-07-15 13:38 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-07-15 13:38 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-07-15 13:38 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-07-15 13:38 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-07-15 13:38 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-07-15 13:38 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-07-15 13:38 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-07-15 13:38 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-07-15 13:38 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-07-15 13:38 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-07-15 13:38 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-07-15 13:38 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-07-15 13:38 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-07-15 13:38 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-07-15 13:38 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-07-15 13:38 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll

2015-07-15 13:38 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll

2015-07-15 13:37 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-07-15 13:37 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-07-15 13:37 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-07-15 13:37 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-07-15 13:37 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-07-15 13:37 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-07-15 13:37 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-07-15 13:37 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-07-15 13:37 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-07-15 13:37 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-07-15 13:37 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-07-15 13:37 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-07-15 13:37 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-07-15 13:37 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-07-15 13:37 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-07-15 13:37 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-07-15 13:37 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-07-15 13:37 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-07-15 13:37 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-07-15 13:37 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-07-15 13:37 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-07-15 13:37 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-07-15 13:37 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-07-15 13:37 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-07-15 13:37 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-07-15 13:37 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2015-07-15 13:37 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

2015-07-15 13:17 - 2015-07-15 13:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-07-15 13:17 - 2015-07-15 13:17 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2015-07-09 16:17 - 2015-07-09 16:17 - 00000000 ____D C:\ProgramData\X360CE

2015-07-09 16:13 - 2015-07-09 16:13 - 00000000 ____D C:\Users\Tobias\Documents\NBGI

2015-07-09 16:13 - 2015-07-09 16:13 - 00000000 ____D C:\Users\Tobias\AppData\Local\NBGI

2015-07-05 10:33 - 2015-07-05 10:33 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-22 22:25 - 2014-05-17 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-07-22 22:25 - 2014-05-17 20:21 - 00000000 ____D C:\Users\Tobias

2015-07-22 22:06 - 2014-05-17 21:08 - 00000000 ____D C:\Program Files (x86)\Steam

2015-07-22 22:02 - 2014-08-22 16:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-07-22 22:02 - 2014-08-22 16:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-07-22 21:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-07-22 21:35 - 2014-05-17 20:16 - 01105306 _____ C:\Windows\WindowsUpdate.log

2015-07-22 18:25 - 2009-07-14 06:45 - 00025856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-07-22 18:25 - 2009-07-14 06:45 - 00025856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-07-22 18:16 - 2014-11-09 13:31 - 00000000 ____D C:\Users\Tobias\AppData\Local\LogMeIn Hamachi

2015-07-22 18:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-07-22 17:57 - 2014-10-31 20:10 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Notepad++

2015-07-22 17:54 - 2014-06-17 20:50 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\DAEMON Tools Lite

2015-07-22 17:52 - 2015-05-22 19:31 - 00000000 ____D C:\Windows\Minidump

2015-07-22 10:20 - 2015-05-16 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2015-07-21 23:34 - 2014-11-07 15:51 - 00000000 ____D C:\Users\Tobias\AppData\Local\Arma 3

2015-07-21 22:53 - 2014-05-23 19:20 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\vlc

2015-07-21 21:10 - 2014-05-19 19:30 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\.minecraft

2015-07-20 00:34 - 2015-06-18 17:27 - 00000705 _____ C:\Users\Tobias\Downloads\Schulden.txt

2015-07-18 00:48 - 2014-08-22 16:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-07-17 16:59 - 2014-10-03 19:52 - 00000140 _____ C:\Users\Tobias\AppData\default.pls

2015-07-17 16:54 - 2014-09-08 14:43 - 00000000 ____D C:\Users\Tobias\Desktop\Alles

2015-07-17 16:53 - 2015-02-18 20:34 - 00001981 _____ C:\Users\Tobias\Desktop\Schule.txt

2015-07-15 21:57 - 2014-08-22 16:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-15 21:57 - 2014-08-22 16:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-15 17:07 - 2014-05-17 20:55 - 00000000 ____D C:\Windows\system32\MRT

2015-07-15 14:25 - 2014-05-17 21:00 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-07-15 14:25 - 2014-05-17 21:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-07-15 14:25 - 2014-05-17 21:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-07-15 13:17 - 2014-07-13 09:32 - 00003340 _____ C:\Windows\Sandboxie.ini

2015-07-14 16:18 - 2014-12-26 06:58 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2015-07-14 11:44 - 2014-12-02 18:05 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-07-10 14:54 - 2014-05-19 15:49 - 00000000 ____D C:\Users\Tobias\AppData\Local\Paint.NET

2015-07-09 16:52 - 2014-09-07 12:20 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server

2015-07-05 12:08 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-07-05 10:33 - 2014-06-12 13:16 - 00000000 ____D C:\Users\Tobias\Documents\My Games

2015-07-03 08:43 - 2014-05-17 20:55 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-06-30 14:40 - 2014-10-03 15:31 - 00000000 ____D C:\Users\Tobias\AppData\Local\Ahead

2015-06-24 18:54 - 2014-05-19 19:30 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\.technic
 

==================== Files in the root of some directories =======
 

2014-05-17 20:59 - 2014-05-17 20:59 - 1746032 _____ (AnyProtect.com) C:\Users\Tobias\AppData\Local\nsf9CE7.tmp
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-07-22 21:30
 

==================== End of log ============================

--- --- ---

Addition.txt
[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015

Ran by Tobias at 2015-07-22 22:28:31

Running from C:\Users\Tobias\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-963087113-2255471196-3066817158-500 - Administrator - Disabled)

Gast (S-1-5-21-963087113-2255471196-3066817158-501 - Limited - Disabled)

Tobias (S-1-5-21-963087113-2255471196-3066817158-1000 - Administrator - Enabled) => C:\Users\Tobias
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)

Adobe Flash Player 18 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

Adobe Update Management Tool (HKLM-x32\...\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 7.1 - PainteR)

Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden

Akamai NetSession Interface (HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

AMD Catalyst Install Manager (HKLM\...\{82DC611C-A1EE-D784-4449-6E46E2EBD9F6}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)

Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)

Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )

BEAST Cabal version 1.2 (HKLM-x32\...\{6BD03D82-F6B9-4EEF-A9DB-6F59E71101BE}_is1) (Version: 1.2 - Beast Gaming, Inc.)

Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)

CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)

Cheat Engine 6.0 (HKLM-x32\...\Cheat Engine 6.0_is1) (Version:  - Dark Byte)

Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)

CodeBlocks (HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\CodeBlocks) (Version: 13.12 - The Code::Blocks Team)

ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version:  - DownloadHelper)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)

DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

DayZ Commander (HKLM-x32\...\{7B2CA5E9-763C-4FCE-81EE-13E81ABFE908}) (Version: 0.92.115 - Dotjosh Studios)

Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)

DmC Devil May Cry (HKLM-x32\...\Steam App 220440) (Version:  - Ninja Theory)

Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)

Elsword (HKLM-x32\...\Elsword_de_is1) (Version:  - Gameforge)

Empire Earth II SP Demo (HKLM-x32\...\{15B4652F-38E8-4252-8374-EFE88AA2FDA7}) (Version: 1.0 - Sierra)

Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{4705DBFD-9D5E-4D23-817C-8CA7359B7BDE}) (Version: 11.1.20810.00 - Microsoft Corporation)

Erforderliche Komponenten für SSDT  (HKLM-x32\...\{70D065C3-77E5-45E9-A75C-EEB2E84EA869}) (Version: 11.0.2100.60 - Microsoft Corporation)

Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)

FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version:  - Square Enix)

FINAL FANTASY VIII (HKLM-x32\...\Steam App 39150) (Version:  - SQUARE ENIX)

FormatFactory 3.3.4.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.4.0 - Format Factory)

Gameforge Live 2.0.7 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.7 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

Goat Simulator (HKLM-x32\...\Steam App 265930) (Version:  - Coffee Stain Studios)

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)

Google Earth (HKLM-x32\...\{28E82311-8616-11E1-BEB0-B8AC6F97B88E}) (Version: 6.2.2.6613 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden

Grand Theft Auto V (HKLM-x32\...\Grand Theft Auto V_is1) (Version: 1.0 - Релиз от R.G. Steamgames)

Hacker Evolution (HKLM-x32\...\Steam App 70100) (Version:  - exosyphen studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)

HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden

Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Logitech Gaming Software 8.55 (HKLM\...\Logitech Gaming Software) (Version: 8.55.137 - Logitech Inc.)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.377 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.377 - LogMeIn, Inc.) Hidden

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 RC (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50861 - Microsoft Corporation)

Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)

Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)

Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{EF18EF0F-96D3-4A6B-9600-2197F1720A15}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{6B7B7E62-9F56-4C87-8664-0E20F2CAB03B}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{D4DA7C91-A59F-4C72-BAC4-DF7C76AB1CB8}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{55FABD1D-8BE6-4A1A-958D-52B15F1DFEF0}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{28C7A4BB-3966-4373-8376-C11F38290630}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM-x32\...\{4C0B27C3-3E8F-4BD2-80FF-6E9E48EBD6D8}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (HKLM\...\{64A5D39C-95CD-4B8B-B2FA-6C713133B57F}) (Version: 11.0.2100.60 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5C2B3F57-A149-4BFC-92DB-5AF59A707750}) (Version: 4.3.16 - Screaming Bee)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 36.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0 (x86 de)) (Version: 36.0 - Mozilla)

MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MySQL Connector C++ 1.1.3 (HKLM\...\{5C7A1ED6-DC5F-4017-B363-3E80644B4BD0}) (Version: 1.1.3 - Oracle and/or its affiliates)

MySQL Connector J (HKLM-x32\...\{E8528562-D612-4331-8A5B-57532D89716B}) (Version: 5.1.31 - Oracle Corporation)

MySQL Connector Net 6.8.3 (HKLM-x32\...\{38157422-F952-42F7-88AA-CC16A63CD109}) (Version: 6.8.3 - Oracle)

MySQL Connector/C 6.1 (HKLM\...\{4E2AAB30-1E42-4ACA-B1A9-3AE8629D0C89}) (Version: 6.1.5 - Oracle Corporation)

MySQL Connector/ODBC 5.3 (HKLM\...\{A1991404-2634-47E1-BC45-8F3B5014B1D1}) (Version: 5.3.4 - Oracle Corporation)

MySQL Documents 5.5 (HKLM-x32\...\{3C65A1C5-98FC-4AD2-B8E8-981A8EDA8644}) (Version: 5.5.39 - Oracle Corporation)

MySQL Examples and Samples 5.5 (HKLM-x32\...\{BEC05C4A-D3BF-4639-8656-A1C52E29AA40}) (Version: 5.5.39 - Oracle Corporation)

MySQL Installer (HKLM-x32\...\{0F0C1C8A-E978-4332-B4AD-889CEA08CFBE}) (Version: 1.3.7.0 - Oracle Corporation)

MySQL Notifier 1.1.5 (HKLM-x32\...\{DB02F4B3-3FC4-4FED-B2A2-7CDCF88D87D3}) (Version: 1.1.5 - Oracle)

MySQL Server 5.5 (HKLM\...\{CFCF9CE7-0D8E-4430-9AF4-B6696A067BDB}) (Version: 5.5.39 - Oracle Corporation)

MySQL Utilities (HKLM-x32\...\{AD74E509-A826-4C30-93C3-73E2DFE271F2}) (Version: 1.4.3 - Oracle Corporation)

MySQL Workbench 6.1 CE (HKLM-x32\...\{AD95295B-0279-43B6-A873-F12A1D1CD146}) (Version: 6.1.7 - Oracle Corporation)

Nero 7 Ultra Edition (HKLM-x32\...\{CF097717-F174-4144-954A-FBC4BF301031}) (Version: 7.02.9753 - Nero AG)

Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 1.1.1 - Nexon)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)

O&O SafeErase Professional (HKLM\...\{D8B51D1B-5AF5-4B87-9009-7219E906667F}) (Version: 8.0.64 - O&O Software GmbH)

Oblivion - Construction Set (HKLM-x32\...\{23D683DD-93C6-48E6-B84E-78B57778F126}) (Version: 1.00.0000 - Bethesda Softworks)

Oblivion (HKLM-x32\...\{35CB6715-41F8-4F99-8881-6FC75BF054B0}) (Version: 1.00.0000 - Bethesda Softworks)

Opera Stable 30.0.1835.59 (HKLM-x32\...\Opera 30.0.1835.59) (Version: 30.0.1835.59 - Opera Software)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)

Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version:  - Ndemic Creations)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)

PremiumSoft Navicat Lite 10.0 (HKLM-x32\...\PremiumSoft Navicat Lite_is1) (Version:  - PremiumSoft CyberTech Ltd.)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)

Resource Builder 3.0.3.25 (HKLM-x32\...\{E01C4F76-D759-4B2D-A617-53188FF290E6}_is1) (Version: 3.0.3.25 - SiComponents)

Risen (HKLM-x32\...\{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}) (Version: 1.00.0000 - Deep Silver)

Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)

RivaTuner Statistics Server 6.1.2 (HKLM-x32\...\RTSS) (Version: 6.1.2 - Unwinder)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)

RPG Maker VX Ace (HKLM-x32\...\RPGVXAce_E_is1) (Version: 1.02 - Enterbrain)

RPG MAKER VX Ace RTP (HKLM-x32\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain)

Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)

Sandboxie 3.44 (64-bit) (HKLM\...\Sandboxie) (Version:  - )

Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)

SixaxisDriver 0.91 (HKLM-x32\...\GameSaike SixaxisDriver_is1) (Version:  - xPAD, Inc.)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2326.4 - Hi-Rez Studios)

Sniper Ghost Warrior 2 (HKLM-x32\...\Steam App 34870) (Version:  - City Interactive)

Source SDK (HKLM-x32\...\Steam App 211) (Version:  - Valve)

Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Steamless Counter Strike Source Pack (HKLM-x32\...\Steamless Counter Strike Source Pack) (Version: 1.0 - Steamless)

TeamSpeak 3 Client (HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36244 - TeamViewer)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

The Book of Legends (HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\The Book of Legends) (Version:  - )

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.7.0 - GOG.com)

Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)

Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)

Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)

VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)

Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)

WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

World of Guns: Gun Disassembly (HKLM-x32\...\Steam App 262410) (Version:  - Noble Empire Corp.)

YTD Video Downloader 4.8.9 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.9 - GreenTree Applications SRL) <==== ATTENTION
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== Restore Points =========================
 

21-07-2015 14:05:28 Windows Update
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {2224DC1E-67A1-4812-B550-46884E8AB535} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-22] (Google Inc.)

Task: {3ADEEAA0-ADEA-48D2-9785-EB6F961A5A99} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)

Task: {7BECA0C0-5B0E-4D2C-96DD-1E0C290E15E8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {898244E1-302B-4BB2-9E0A-911BB22B4F34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)

Task: {8C63CD91-BF69-41E5-8101-A0ABE6070709} - System32\Tasks\Opera scheduled Autoupdate 1400353225 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-10] (Opera Software)

Task: {B81C12E9-BA9E-492E-981F-287B8BFE900C} - System32\Tasks\MySQLNotifierTask => C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySQLNotifier.exe [2013-11-25] (Oracle Corporation)

Task: {E2E5477B-C08B-4FDF-A6BC-62189E70ACD7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-22] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (Whitelisted) ==============
 

2013-11-22 10:39 - 2013-11-22 10:39 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll

2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll

2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll

2014-07-19 08:43 - 2014-07-19 08:43 - 09708032 _____ () C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe

2014-05-29 23:53 - 2014-11-16 11:58 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-07-28 20:29 - 2014-07-28 20:29 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2014-07-28 20:32 - 2014-07-28 20:32 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2014-07-28 20:29 - 2014-07-28 20:29 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2014-07-28 20:31 - 2014-07-28 20:31 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2013-11-22 10:39 - 2013-11-22 10:39 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00566272 _____ () C:\Program Files (x86)\GalaxyClient\PocoUtil.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00415744 _____ () C:\Program Files (x86)\GalaxyClient\PocoJSON.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 01784320 _____ () C:\Program Files (x86)\GalaxyClient\PocoFoundation.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 00412672 _____ () C:\Program Files (x86)\GalaxyClient\pcre.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 00094208 _____ () C:\Program Files (x86)\GalaxyClient\zlib.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00515584 _____ () C:\Program Files (x86)\GalaxyClient\PocoXML.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 00139776 _____ () C:\Program Files (x86)\GalaxyClient\expat.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 01202176 _____ () C:\Program Files (x86)\GalaxyClient\PocoNet.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 02577408 _____ () C:\Program Files (x86)\GalaxyClient\PocoData.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00477184 _____ () C:\Program Files (x86)\GalaxyClient\PocoDataSQLite.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00649728 _____ () C:\Program Files (x86)\GalaxyClient\sqlite.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00340480 _____ () C:\Program Files (x86)\GalaxyClient\PocoZip.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00332288 _____ () C:\Program Files (x86)\GalaxyClient\PocoNetSSL.dll

2015-05-16 22:03 - 2015-05-16 22:09 - 00172032 _____ () C:\Program Files (x86)\GalaxyClient\PocoCrypto.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 41299456 _____ () C:\Program Files (x86)\GalaxyClient\libcef.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 00107520 _____ () C:\Program Files (x86)\GalaxyClient\ZLIB1.dll

2015-05-16 22:03 - 2015-04-09 15:52 - 00888832 _____ () C:\Program Files (x86)\GalaxyClient\ffmpegsumo.dll

2015-06-15 15:00 - 2015-06-10 11:45 - 01649272 _____ () C:\Program Files (x86)\Opera\30.0.1835.59\libglesv2.dll

2015-06-15 15:00 - 2015-06-10 11:45 - 00081016 _____ () C:\Program Files (x86)\Opera\30.0.1835.59\libegl.dll

2015-07-15 14:25 - 2015-07-15 14:25 - 16307888 _____ () C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_209.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [{6B8F8251-5F0F-441E-976C-0B7080E285A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{6EBD684C-5352-4E76-9402-0032913DFAAF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{275CEC09-6D52-4794-9009-9B695DE7AFB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{00757D2B-B705-47B7-8A9F-D33F7627441D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{F797E22D-9F06-4329-A002-8BADB476E799}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{CC6101CD-A28D-497E-B396-26C09F3BFCF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{D105C4B9-55C5-40E8-8395-617A570EF257}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe

FirewallRules: [{AC309539-3559-4C73-8F24-836BFD0B2D90}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rust\rust.exe

FirewallRules: [{C3302775-93C0-45CD-AE74-891EDB89868D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{BF02EE26-9F3C-4CA3-A0D6-F2D2B4588EEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe

FirewallRules: [{B8AB5752-DC07-4D06-A7B3-F2FC161E323B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe

FirewallRules: [{D1061F1C-B936-4E09-83C2-DADD7E0F8B89}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe

FirewallRules: [{6A4571D2-8E80-4804-8035-8316FAC1BE08}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe

FirewallRules: [{0EB6774D-DF89-4203-B8DF-55E13F0864C2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WOG\disasm.exe

FirewallRules: [{3A089B5B-9A3D-43E0-9B07-A592034BA7B3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WOG\disasm.exe

FirewallRules: [{B7F6F5EE-EE60-441B-B331-3C08B8171FF3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe

FirewallRules: [{66C45CC4-1AB0-46AE-B5E8-CCC6F9D10FD5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe

FirewallRules: [{EED68842-52C7-4FF6-B318-66606B9F1ADD}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe

FirewallRules: [{7C640503-26D3-4476-862E-3A9DCE829CFA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe

FirewallRules: [{495B04A6-E0A3-4D9B-9C7C-887AF8598FE6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe

FirewallRules: [{2849682F-C823-4FEA-A41A-BF9A20E380C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY VIII\FF8_Launcher.exe

FirewallRules: [{22BFBD06-BBF8-4907-AD3A-4CB5AD62AB07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY VIII\FF8_Launcher.exe

FirewallRules: [{9E440E45-363C-49EB-A118-7AD4E3BE51F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe

FirewallRules: [{CC98BCAB-BD5E-4F5D-841A-FDDCB02B4686}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe

FirewallRules: [{D74B7756-9316-42B8-A526-FF3970A3FFC5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{A4E9F447-C6BC-49AD-8710-4E4F3D6D0A28}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [TCP Query User{2178BB79-AA3E-4CF0-B451-17317EAFCA43}C:\users\tobias\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tobias\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{CA3D97B8-DC13-4829-9198-3F04D553061B}C:\users\tobias\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\tobias\appdata\local\akamai\netsession_win.exe

FirewallRules: [{A59BDBE5-B658-4763-98EB-83ED4527F764}] => (Allow) LPort=3306

FirewallRules: [TCP Query User{D88D7A89-3413-4B83-9037-0F96D7E7CD91}C:\users\tobias\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\tobias\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{FCD0218F-6EEB-4E57-9830-5759600DFB77}C:\users\tobias\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\tobias\appdata\local\akamai\netsession_win.exe

FirewallRules: [{87F12455-27F4-40E2-8A6A-60E3F3455729}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FFE5D743-3206-4E95-87C9-DE637A8653CB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{8AFF4DEC-448E-4061-BD0C-D5EA9228D7AA}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe

FirewallRules: [{9A878A49-ADEC-46C6-A2A4-E8874B5C4B64}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe

FirewallRules: [{D9DF95D0-740F-4E8F-8635-96649B6B61CA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{141D309F-FA70-401E-81F4-CD03A457F2BA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{5B2925DC-17E5-4ED2-9279-65E8174266E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Risen 2\system\Risen2.exe

FirewallRules: [{82C776B4-9FBA-44AA-9099-A0576E08CFF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Risen 2\system\Risen2.exe

FirewallRules: [{6A9C06EA-E71E-4655-9836-7BF845A03875}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DmC Devil May Cry\Binaries\Win32\DMC-DevilMayCry.exe

FirewallRules: [{A3D589E2-A973-45B8-A184-232BFE1DED2D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DmC Devil May Cry\Binaries\Win32\DMC-DevilMayCry.exe

FirewallRules: [{DE4331BE-E39B-411C-B1A6-878A08FAB128}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{8A03910F-FFEC-45D4-8930-CE5BA9109DC4}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe

FirewallRules: [{5B184E28-0098-4BF0-9A48-944DFE52A988}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{65516538-0EC2-4399-B278-89B6991160E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{F54E1E47-FC7B-4174-879F-9E5E73939E31}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{349AB589-2F40-4AEE-9CF8-23B5EF9C298E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{3DA22C44-6BF6-42C6-A7DE-499E343FE37F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp_server.exe

FirewallRules: [{190F7F4E-07C4-41D7-8031-4C2DE3F14F3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp_server.exe

FirewallRules: [TCP Query User{CDDDBDA6-556C-4690-BD47-D1D6C501D21B}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{02D4E5AF-095F-4967-AFF2-671E205D7819}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{204E1BA0-929F-45FB-81F3-189097260D8C}] => (Allow) C:\ProgramData\NexonUS\NGM\NGM.exe

FirewallRules: [{0DC60872-1206-47BE-8F70-AC98B2489B25}] => (Allow) C:\ProgramData\NexonUS\NGM\NGM.exe

FirewallRules: [{30A4142F-F0C5-41EC-80D3-175D4F7163E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{A0B79E2C-1740-4928-A145-B246FA9F5571}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [TCP Query User{D0B876B9-366E-4BA9-8727-BA4BB96C830B}E:\games\neuer ordner\prototype 2\prototype2.exe] => (Block) E:\games\neuer ordner\prototype 2\prototype2.exe

FirewallRules: [UDP Query User{8A319EE3-BF6F-4722-BFDD-FDF0214A7759}E:\games\neuer ordner\prototype 2\prototype2.exe] => (Block) E:\games\neuer ordner\prototype 2\prototype2.exe

FirewallRules: [{6051EC27-6306-4862-8E98-F17C88C50890}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe

FirewallRules: [{5ECD3536-A331-4355-9848-AF212FCBAFD5}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe

FirewallRules: [{F6D1D646-DA22-4F33-BE2D-8AD8C258C412}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D728FBFF-FCB7-4F63-BC53-478A64575115}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{BEE7DD2C-B1EF-4204-9C8A-C47B7E3F156A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{522A5F3C-8CAF-489F-A58D-9573ACB95FDD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{BD5EE42A-26AA-43D4-B6A9-E8C8605CDFBC}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{24558B80-D6A2-4175-B692-8677E620B18F}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe

FirewallRules: [{D169530D-EB11-4BE3-AF6F-691C2E852001}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{D7258B15-C4B8-467F-8B68-BFAA939F02EF}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe

FirewallRules: [{908DB5BF-CC30-4B71-A6D3-D92A6A0A0EDC}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{04C1EFFC-5939-4C3B-B620-44E47A815B5D}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Updater.exe

FirewallRules: [{8BC3EBF1-41F6-4393-AF2B-6B70DCA9F212}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{0F332226-015D-43F5-8097-533E97568C69}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 3\bin\FC3Editor.exe

FirewallRules: [{A7AC1378-1FAB-4A9D-8159-E529E2B5F1D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{D4A93F09-3846-44EB-99A1-B653417C4918}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{394CF886-69AB-449E-B066-CB518B933DCF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{7DFC703A-771A-4BCC-B617-E4759B18B175}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{F0FC442C-088F-4BFE-AC2D-381330F86AE1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{449D9032-F10D-43D1-9127-D2DFE83C5B86}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{1FE752CE-098A-4BF4-A9DA-9EB8A27B70E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{918B8038-C9A5-4BB8-AF37-A90DCEC779BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{F95F21D9-032B-4463-AB81-90238ECDF833}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe

FirewallRules: [{28306304-58BC-43E5-9D73-3455766CC41B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe

FirewallRules: [TCP Query User{2190030D-735C-44FC-B345-ADCE264B6E93}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{67E7BAE2-9C33-4014-9351-237EBE034A1C}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{5E1A3E5F-D114-4225-BF30-43B3A4B7C013}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe

FirewallRules: [UDP Query User{54BC1426-3579-44B6-8041-98FD42DF3A5C}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe

FirewallRules: [{F39DD6FE-C564-4185-A461-2D7CCB02A79E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{AA76C8FF-8597-4B6A-AC2C-E5429B9019C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{505BA206-6F55-41D3-A713-02E8A7E24A55}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{EF68927D-A7BC-4500-AA0F-1904C54374FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{69894ADC-7C78-4F8C-BE6B-75CF59842B38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{DFBADBEF-762B-4D2B-B1E5-F6C845C7E449}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{97DC1E89-3F2B-4EFD-8AF0-FA3182C50802}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{CB47B156-19F9-4FD8-802D-FE25EE3E4AE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{DED0BCFA-1414-4293-A3A9-FC0E6CA2B72B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe

FirewallRules: [{EBD3FF3E-9A3D-4E67-A6D3-C4B1BB500419}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe

FirewallRules: [{8CAF87C9-CD52-45BA-A070-C34AF074219E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe

FirewallRules: [{9536EC1B-03FD-4391-9FA1-5B850575DAAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe

FirewallRules: [{B2B97E24-6C18-4684-BA89-884D5D63754C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{F6E52DFB-B3FC-40C6-93B9-8009463D9DD1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{4BC34D6A-BA04-45C7-864B-6537E48DA3BD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolution.exe

FirewallRules: [{84678D76-4C25-4850-BF2C-F2C171472A65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolution.exe

FirewallRules: [{4433EC1C-5152-483C-8182-EEFCCDCAC566}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolutionModEditor.exe

FirewallRules: [{083DA650-D9A1-400F-A660-B408983DEC49}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolutionModEditor.exe

FirewallRules: [{E6978F23-A297-4D3D-B154-75D84A168028}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{30DB0405-34E3-4393-BBC5-F8446483665B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D8B914F2-4C03-4432-92A7-44ABC4ACF0E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe

FirewallRules: [{ADEFCB44-C649-42BB-B1D3-E8A3C810A1A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe

FirewallRules: [{352218E8-3D1D-45E6-A400-F53D04FF60EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Launcher.exe

FirewallRules: [{A53974B7-BD71-4A65-A4B9-A5DCE080ACEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Launcher.exe

FirewallRules: [{7609AAD5-3D89-46F5-BB57-164D75636D41}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{D21F136F-46A7-41CC-89FA-E90533ED06F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{061EB32B-4E35-40C7-9E55-DD7EFD3A1897}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{2AAA2478-7CB0-453D-B45E-E7811BB9EBB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{C34A72F1-0D8B-4C2F-A53D-3DFAF19578A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe

FirewallRules: [{3579B257-6B0B-4FBF-AF98-7FBC70F77A37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe

FirewallRules: [{7851A510-80EA-41AD-980E-A78769E2B791}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [{F7CACB37-E8BF-4AC1-A0C3-62875781170F}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Elsword\data\x2.exe

FirewallRules: [{723B9256-DC88-4EEF-BCAB-210239BA6782}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Elsword\data\x2.exe

FirewallRules: [{F502394A-EE5A-4564-BF15-EEE5D715A02C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{9D51F7E5-09D6-4350-A40F-5DDE1E303FFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{00B47EF2-AD7B-41D5-A8B5-B3D034EB7263}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe

FirewallRules: [{4F1B30BC-1246-45E3-A841-15729F0EC6A6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe

FirewallRules: [{41E6671A-337A-48B5-8BD6-7B6CF4F0C73B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{483DA608-C53A-4B31-B8A0-D0B3A37EE586}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{84F75871-3D30-4CF6-8AB1-C2AE43F19EEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{0AB7DABE-40A7-420E-B998-28CDB630A081}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{B6DA37EE-B090-45F0-A440-6FC7E1295D1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{CF54AD32-14B6-4BF1-A992-3F995ECA1D4C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe

FirewallRules: [{210828CF-DB49-49E0-AB7B-C2BE02657D6A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe

FirewallRules: [{800AD78E-B82E-4AEA-8CB4-CFD1F278F77F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{B735135E-E9D5-4EA1-8E27-90C5505296B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{7FE1832F-C1D9-49F8-B943-3CD829DE9966}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{E75EE0DD-152E-4D64-B0EB-B7582EE5B356}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{F9DC07B5-5592-4CDF-A14B-38B1F066DBBE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe

FirewallRules: [{6A9FD1BE-33F9-4C35-AE62-94EA543BA83B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe

FirewallRules: [TCP Query User{598B9423-E358-44E6-A06D-90B981AEFF47}C:\users\tobias\desktop\alles\games\yulina v1.2 - official client\yulina2.exe] => (Allow) C:\users\tobias\desktop\alles\games\yulina v1.2 - official client\yulina2.exe

FirewallRules: [UDP Query User{C4470C5A-D2C9-4798-B9FE-C2637CD7DB7B}C:\users\tobias\desktop\alles\games\yulina v1.2 - official client\yulina2.exe] => (Allow) C:\users\tobias\desktop\alles\games\yulina v1.2 - official client\yulina2.exe

FirewallRules: [{92ACC1DA-5201-4FED-A27E-10BB87216EBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe

FirewallRules: [{93429B9A-C90B-461B-B6DC-DBCE9933E2D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
 

==================== Faulty Device Manager Devices =============
 

Name: Programmable Root Enumerator

Description: Programming Support

Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}

Manufacturer: Mad Catz

Service: SaiNtBus

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: MpKsla6ad0bc4

Description: MpKsla6ad0bc4

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: MpKsla6ad0bc4

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/22/2015 06:16:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 05:39:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 05:18:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 10:50:28 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 10:16:37 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/21/2015 05:38:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/21/2015 01:02:40 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm hl2.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1adc
 

Startzeit: 01d0c3a434c819f0
 

Endzeit: 31
 

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
 

Berichts-ID: ff590d5b-2f97-11e5-adaa-ac220b4cc23e
 

Error: (07/21/2015 11:37:33 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/20/2015 09:31:44 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/20/2015 01:08:19 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (07/22/2015 06:30:16 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 115.6.0.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (07/22/2015 06:29:46 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.201.2348.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (07/22/2015 06:29:46 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.201.2348.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (07/22/2015 06:29:03 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.201.2348.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT59
 

        Aktualisierungsphase: 4.8.0204.00
 

        Quellpfad: 4.8.0204.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (07/22/2015 06:16:22 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (07/22/2015 06:13:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Server" wurde mit folgendem Fehler beendet: 

%%1062
 

Error: (07/22/2015 06:13:21 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147024846.
 

Error: (07/22/2015 06:13:21 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)

Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147942450.
 

Error: (07/22/2015 06:05:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/22/2015 06:04:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office:

=========================

Error: (07/22/2015 06:16:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 05:39:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 05:18:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 10:50:28 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/22/2015 10:16:37 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/21/2015 05:38:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/21/2015 01:02:40 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: hl2.exe0.0.0.01adc01d0c3a434c819f031C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exeff590d5b-2f97-11e5-adaa-ac220b4cc23e
 

Error: (07/21/2015 11:37:33 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/20/2015 09:31:44 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/20/2015 01:08:19 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Processor: AMD FX(tm)-8350 Eight-Core Processor 

Percentage of memory in use: 25%

Total physical RAM: 16284.96 MB

Available physical RAM: 12124.86 MB

Total Virtual: 32568.11 MB

Available Virtual: 26551.33 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:315.94 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DFD25D27)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End of log ============================

--- --- ---

Über Hilfe würde ich mich extrem freuen, da ich doch ein wenig Schiss um meiner Accounts habe.^^

Dankeschön im Voraus,
Shortyoo|Tobi

Anmerkung: die Gmer.txt war wohl zu lang - wusste jetzt nicht was ich machen soll :/
Anmerkung2: Sobald ich schnell schreibe und dazu noch eine Taste (Str, Alt) drücke, kommt dieser Windows-Fehler-Ton, dieser dumpfe über die Lautsprecher, dazu "laggt" dann kurzzeitig der ganze Computer (etwa 3-5 Sekunden, je nach dem wie lange ich die besagte Taste drückte).

hi,

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

YTD Video Downloader 4.8.9
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

mbar: - Anmerkung: Führte ich zweimal aus, da beim ersten mal was gefunden wurde:
Nr 1:

Code:

Malwarebytes Anti-Rootkit BETA 1.09.1.1004

www.malwarebytes.org
 

Database version:

  main:    v2015.07.22.07

  rootkit: v2015.07.22.01
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.17914

Tobias :: SHORTY [administrator]
 

23.07.2015 07:20:28

mbar-log-2015-07-23 (07-20-28).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 385649

Time elapsed: 28 minute(s), 6 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 1

C:\Users\Tobias\Desktop\NavanBethrax NostaleMultiHack v. 1.1.1 [Public].exe (HackTool.Agent) -> Delete on reboot. [5976f6eee0aa5fd710d9481dc63faf51]
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Nr2:

Code:

Malwarebytes Anti-Rootkit BETA 1.09.1.1004

www.malwarebytes.org
 

Database version:

  main:    v2015.07.23.04

  rootkit: v2015.07.22.01
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.17914

Tobias :: SHORTY [administrator]
 

23.07.2015 17:45:01

mbar-log-2015-07-23 (17-45-01).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 385720

Time elapsed: 29 minute(s), 34 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

TDSSKiller:

Code:

18:30:35.0726 0x14ec  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04

18:30:40.0299 0x14ec  ============================================================

18:30:40.0299 0x14ec  Current date / time: 2015/07/23 18:30:40.0299

18:30:40.0299 0x14ec  SystemInfo:

18:30:40.0299 0x14ec  

18:30:40.0299 0x14ec  OS Version: 6.1.7601 ServicePack: 1.0

18:30:40.0299 0x14ec  Product type: Workstation

18:30:40.0299 0x14ec  ComputerName: SHORTY

18:30:40.0300 0x14ec  UserName: Tobias

18:30:40.0300 0x14ec  Windows directory: C:\Windows

18:30:40.0300 0x14ec  System windows directory: C:\Windows

18:30:40.0300 0x14ec  Running under WOW64

18:30:40.0300 0x14ec  Processor architecture: Intel x64

18:30:40.0300 0x14ec  Number of processors: 8

18:30:40.0300 0x14ec  Page size: 0x1000

18:30:40.0300 0x14ec  Boot type: Normal boot

18:30:40.0300 0x14ec  ============================================================

18:30:43.0203 0x14ec  KLMD registered as C:\Windows\system32\drivers\53960003.sys

18:30:43.0735 0x14ec  System UUID: {22B5A011-CA6F-8C77-C87B-41E78AF8AA98}

18:30:44.0430 0x14ec  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

18:30:44.0435 0x14ec  ============================================================

18:30:44.0435 0x14ec  \Device\Harddisk0\DR0:

18:30:44.0435 0x14ec  MBR partitions:

18:30:44.0435 0x14ec  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

18:30:44.0435 0x14ec  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800

18:30:44.0435 0x14ec  ============================================================

18:30:44.0474 0x14ec  C: <-> \Device\Harddisk0\DR0\Partition2

18:30:44.0474 0x14ec  ============================================================

18:30:44.0474 0x14ec  Initialize success

18:30:44.0474 0x14ec  ============================================================

18:31:19.0398 0x1b90  ============================================================

18:31:19.0398 0x1b90  Scan started

18:31:19.0398 0x1b90  Mode: Manual; SigCheck; TDLFS; 

18:31:19.0398 0x1b90  ============================================================

18:31:19.0398 0x1b90  KSN ping started

18:31:33.0108 0x1b90  KSN ping finished: true

18:31:35.0198 0x1b90  ================ Scan system memory ========================

18:31:35.0198 0x1b90  Scan was interrupted by user!

18:31:35.0228 0x1b90  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.8.204.0 ), 0x61000 ( enabled : updated )

18:31:35.0232 0x1b90  Win FW state via NFP2: enabled

18:31:37.0920 0x1b90  ============================================================

18:31:37.0920 0x1b90  Scan finished

18:31:37.0920 0x1b90  ============================================================

18:31:37.0937 0x14cc  Detected object count: 0

18:31:37.0937 0x14cc  Actual detected object count: 0

18:34:16.0117 0x193c  ============================================================

18:34:16.0117 0x193c  Scan started

18:34:16.0117 0x193c  Mode: Manual; SigCheck; TDLFS; 

18:34:16.0117 0x193c  ============================================================

18:34:16.0117 0x193c  KSN ping started

18:34:29.0828 0x193c  KSN ping finished: true

18:34:31.0443 0x193c  ================ Scan system memory ========================

18:34:31.0443 0x193c  System memory - ok

18:34:31.0444 0x193c  ================ Scan services =============================

18:34:31.0689 0x193c  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

18:34:31.0755 0x193c  1394ohci - ok

18:34:31.0775 0x193c  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

18:34:31.0793 0x193c  ACPI - ok

18:34:31.0812 0x193c  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

18:34:31.0850 0x193c  AcpiPmi - ok

18:34:32.0019 0x193c  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

18:34:32.0041 0x193c  AdobeARMservice - ok

18:34:32.0296 0x193c  [ 011BD8A49AF856E8A8EE32652D1CFC05, 7E45CD5ED185DFCA94069640C19D3079879FD1F3069873D0302ACC372F756F90 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

18:34:32.0317 0x193c  AdobeFlashPlayerUpdateSvc - ok

18:34:32.0349 0x193c  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

18:34:32.0370 0x193c  adp94xx - ok

18:34:32.0412 0x193c  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys

18:34:32.0437 0x193c  adpahci - ok

18:34:32.0469 0x193c  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

18:34:32.0480 0x193c  adpu320 - ok

18:34:32.0511 0x193c  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

18:34:32.0561 0x193c  AeLookupSvc - ok

18:34:32.0635 0x193c  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys

18:34:32.0662 0x193c  AFD - ok

18:34:32.0675 0x193c  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

18:34:32.0682 0x193c  agp440 - ok

18:34:32.0703 0x193c  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

18:34:32.0740 0x193c  ALG - ok

18:34:32.0772 0x193c  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

18:34:32.0779 0x193c  aliide - ok

18:34:32.0842 0x193c  [ 30B0236674498756CA3F7D74832DC58B, 15A48442215AE059D06CE5589ED76706E2C53A378135918484ADD4E98B83E21A ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

18:34:32.0888 0x193c  AMD External Events Utility - ok

18:34:32.0983 0x193c  AMD FUEL Service - ok

18:34:32.0989 0x193c  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

18:34:33.0005 0x193c  amdide - ok

18:34:33.0011 0x193c  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

18:34:33.0026 0x193c  AmdK8 - ok

18:34:33.0378 0x193c  [ 210E4B64FEC9DC5173B98E4475E8F7BE, 586923C511472F0F39E238D1E66CD258C7FBC58DB526DB63DAF545342959FAC9 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

18:34:33.0612 0x193c  amdkmdag - ok

18:34:33.0674 0x193c  [ B5951DDF517FE999848EE607C2C880BA, 281EB29FCF39ABB25FF09013C3DAA182A745247F46B5F6252AAE6EB301C60E60 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

18:34:33.0692 0x193c  amdkmdap - ok

18:34:33.0710 0x193c  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

18:34:33.0718 0x193c  AmdPPM - ok

18:34:33.0740 0x193c  [ 6EC6D772EAE38DC17C14AED9B178D24B, B4FB936B31B1265B8CC6B426C64965C34D0CCF1638E645ACD65E88F4AFFC57A6 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

18:34:33.0749 0x193c  amdsata - ok

18:34:33.0770 0x193c  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

18:34:33.0780 0x193c  amdsbs - ok

18:34:33.0807 0x193c  [ 1142A21DB581A84EA5597B03A26EBAA0, F94EB140D0CD068760D7EB081FF75154C75DAC75E5E24B6DE4E4F9CE65A70343 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

18:34:33.0822 0x193c  amdxata - ok

18:34:33.0833 0x193c  [ E8CCB797DAF80779C768BD3A9FC8FCAF, 781BD878CA34D8B6D2FE238439CD173E95449260428859BEA92866D41B1284F4 ] AODDriver4.2.0  C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys

18:34:33.0845 0x193c  AODDriver4.2.0 - ok

18:34:33.0895 0x193c  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys

18:34:33.0921 0x193c  AppID - ok

18:34:33.0962 0x193c  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

18:34:33.0994 0x193c  AppIDSvc - ok

18:34:34.0040 0x193c  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll

18:34:34.0064 0x193c  Appinfo - ok

18:34:34.0079 0x193c  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys

18:34:34.0088 0x193c  arc - ok

18:34:34.0108 0x193c  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys

18:34:34.0116 0x193c  arcsas - ok

18:34:34.0149 0x193c  [ 22842362DF890F5492F85AA60916A697, EC01380B1C9BF4CFBA018FC314563F0785280172A2A9B51D50F088E7101951EF ] asmthub3        C:\Windows\system32\DRIVERS\asmthub3.sys

18:34:34.0184 0x193c  asmthub3 - ok

18:34:34.0227 0x193c  [ 08E2D77766CC05E75A0707207D9FC684, 6CF3B12B2B3375B715A3EBC66EF148CEA2248D448A3A37875B7B1BC7CDA40FDD ] asmtxhci        C:\Windows\system32\DRIVERS\asmtxhci.sys

18:34:34.0259 0x193c  asmtxhci - ok

18:34:34.0385 0x193c  [ 041672BAC20B34EAEDEB033129655DD8, 14264732F0CACF5732C7652C411F0A1C3B4A4417C31DD289C8AFF170BE683E5A ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

18:34:34.0410 0x193c  aspnet_state - ok

18:34:34.0457 0x193c  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

18:34:34.0487 0x193c  AsyncMac - ok

18:34:34.0490 0x193c  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

18:34:34.0498 0x193c  atapi - ok

18:34:34.0522 0x193c  [ 770A3B0D78232B0C1054495392A1FBA3, 733BB08BAFE42E848F3A3CDFD80A2C37DB829CAD2E18B3D6299FDEE6EF30C9CD ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

18:34:34.0532 0x193c  AtiHDAudioService - ok

18:34:34.0569 0x193c  [ FC0E8778C000291CAF60EB88C011E931, 09BCCA3DE01021AEF76DFB46F01D21BA6FF409E816FA7547E5C3DFBF3A615ED2 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys

18:34:34.0581 0x193c  atksgt - ok

18:34:34.0620 0x193c  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

18:34:34.0645 0x193c  AudioEndpointBuilder - ok

18:34:34.0675 0x193c  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll

18:34:34.0695 0x193c  AudioSrv - ok

18:34:34.0739 0x193c  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

18:34:34.0792 0x193c  AxInstSV - ok

18:34:34.0822 0x193c  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

18:34:34.0839 0x193c  b06bdrv - ok

18:34:34.0897 0x193c  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

18:34:34.0933 0x193c  b57nd60a - ok

18:34:34.0955 0x193c  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

18:34:34.0967 0x193c  BDESVC - ok

18:34:34.0988 0x193c  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

18:34:35.0045 0x193c  Beep - ok

18:34:35.0178 0x193c  [ C88B130365524EC69F6B8E0D31D7561D, 5D3797C93420477F4509C037511D497448EFDA7D567E15CB623FB5EEE9209146 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe

18:34:35.0204 0x193c  BEService - ok

18:34:35.0279 0x193c  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

18:34:35.0311 0x193c  BFE - ok

18:34:35.0372 0x193c  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

18:34:35.0442 0x193c  BITS - ok

18:34:35.0459 0x193c  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

18:34:35.0468 0x193c  blbdrive - ok

18:34:35.0508 0x193c  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

18:34:35.0517 0x193c  bowser - ok

18:34:35.0555 0x193c  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

18:34:35.0598 0x193c  BrFiltLo - ok

18:34:35.0613 0x193c  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

18:34:35.0648 0x193c  BrFiltUp - ok

18:34:35.0697 0x193c  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

18:34:35.0738 0x193c  Browser - ok

18:34:35.0750 0x193c  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

18:34:35.0770 0x193c  Brserid - ok

18:34:35.0777 0x193c  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

18:34:35.0790 0x193c  BrSerWdm - ok

18:34:35.0792 0x193c  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

18:34:35.0802 0x193c  BrUsbMdm - ok

18:34:35.0808 0x193c  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

18:34:35.0816 0x193c  BrUsbSer - ok

18:34:35.0834 0x193c  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

18:34:35.0856 0x193c  BTHMODEM - ok

18:34:35.0873 0x193c  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

18:34:35.0905 0x193c  bthserv - ok

18:34:35.0919 0x193c  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

18:34:35.0955 0x193c  cdfs - ok

18:34:36.0017 0x193c  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

18:34:36.0060 0x193c  cdrom - ok

18:34:36.0088 0x193c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

18:34:36.0146 0x193c  CertPropSvc - ok

18:34:36.0162 0x193c  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys

18:34:36.0181 0x193c  circlass - ok

18:34:36.0233 0x193c  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys

18:34:36.0252 0x193c  CLFS - ok

18:34:36.0359 0x193c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

18:34:36.0380 0x193c  clr_optimization_v2.0.50727_32 - ok

18:34:36.0460 0x193c  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

18:34:36.0481 0x193c  clr_optimization_v2.0.50727_64 - ok

18:34:36.0585 0x193c  [ 397C2677C25CBE213F3270245A401624, 8121E37108DE7A0402DC5111EBF452F91893B63EECE3AAD9EACF61C40D3FC182 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

18:34:36.0606 0x193c  clr_optimization_v4.0.30319_32 - ok

18:34:36.0637 0x193c  [ 29139759FCC4E4E0531ABE2EA82CE646, CFF7B2F4A9B37D343BE18DC40161DC03FA9DB308CAE9E0B3DF1FCDC3EBAC0C08 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

18:34:36.0662 0x193c  clr_optimization_v4.0.30319_64 - ok

18:34:36.0685 0x193c  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

18:34:36.0696 0x193c  CmBatt - ok

18:34:36.0711 0x193c  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

18:34:36.0720 0x193c  cmdide - ok

18:34:36.0777 0x193c  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys

18:34:36.0809 0x193c  CNG - ok

18:34:36.0856 0x193c  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

18:34:36.0873 0x193c  Compbatt - ok

18:34:36.0901 0x193c  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

18:34:36.0930 0x193c  CompositeBus - ok

18:34:36.0940 0x193c  COMSysApp - ok

18:34:36.0958 0x193c  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

18:34:36.0971 0x193c  crcdisk - ok

18:34:37.0008 0x193c  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll

18:34:37.0040 0x193c  CryptSvc - ok

18:34:37.0086 0x193c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

18:34:37.0128 0x193c  DcomLaunch - ok

18:34:37.0163 0x193c  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

18:34:37.0201 0x193c  defragsvc - ok

18:34:37.0227 0x193c  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

18:34:37.0294 0x193c  DfsC - ok

18:34:37.0319 0x193c  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

18:34:37.0371 0x193c  Dhcp - ok

18:34:37.0381 0x193c  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

18:34:37.0421 0x193c  discache - ok

18:34:37.0446 0x193c  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys

18:34:37.0454 0x193c  Disk - ok

18:34:37.0487 0x193c  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

18:34:37.0518 0x193c  Dnscache - ok

18:34:37.0538 0x193c  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

18:34:37.0563 0x193c  dot3svc - ok

18:34:37.0582 0x193c  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

18:34:37.0658 0x193c  DPS - ok

18:34:37.0690 0x193c  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

18:34:37.0700 0x193c  drmkaud - ok

18:34:37.0752 0x193c  [ 33F90B202E9DD9B7D489EB59310FDC34, 6ECF6669433E090E9CF6B1875AF18D2C06F8CDB3901D58BF89C3E2202574ABBD ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys

18:34:37.0774 0x193c  dtsoftbus01 - ok

18:34:37.0828 0x193c  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

18:34:37.0851 0x193c  DXGKrnl - ok

18:34:37.0880 0x193c  EagleX64 - ok

18:34:37.0913 0x193c  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

18:34:37.0954 0x193c  EapHost - ok

18:34:37.0978 0x193c  EasyAntiCheat - ok

18:34:38.0082 0x193c  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

18:34:38.0148 0x193c  ebdrv - ok

18:34:38.0187 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] EFS             C:\Windows\System32\lsass.exe

18:34:38.0222 0x193c  EFS - ok

18:34:38.0332 0x193c  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

18:34:38.0359 0x193c  ehRecvr - ok

18:34:38.0400 0x193c  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

18:34:38.0430 0x193c  ehSched - ok

18:34:38.0476 0x193c  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

18:34:38.0494 0x193c  elxstor - ok

18:34:38.0506 0x193c  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

18:34:38.0521 0x193c  ErrDev - ok

18:34:38.0550 0x193c  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

18:34:38.0580 0x193c  EventSystem - ok

18:34:38.0615 0x193c  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

18:34:38.0640 0x193c  exfat - ok

18:34:38.0651 0x193c  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

18:34:38.0705 0x193c  fastfat - ok

18:34:38.0733 0x193c  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

18:34:38.0760 0x193c  Fax - ok

18:34:38.0773 0x193c  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys

18:34:38.0781 0x193c  fdc - ok

18:34:38.0802 0x193c  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

18:34:38.0824 0x193c  fdPHost - ok

18:34:38.0828 0x193c  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

18:34:38.0850 0x193c  FDResPub - ok

18:34:38.0854 0x193c  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

18:34:38.0862 0x193c  FileInfo - ok

18:34:38.0875 0x193c  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

18:34:38.0908 0x193c  Filetrace - ok

18:34:38.0917 0x193c  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

18:34:38.0936 0x193c  flpydisk - ok

18:34:38.0948 0x193c  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

18:34:38.0960 0x193c  FltMgr - ok

18:34:39.0040 0x193c  [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache       C:\Windows\system32\FntCache.dll

18:34:39.0081 0x193c  FontCache - ok

18:34:39.0156 0x193c  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

18:34:39.0164 0x193c  FontCache3.0.0.0 - ok

18:34:39.0185 0x193c  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

18:34:39.0194 0x193c  FsDepends - ok

18:34:39.0211 0x193c  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

18:34:39.0220 0x193c  Fs_Rec - ok

18:34:39.0256 0x193c  [ 1F7B25B858FA27015169FE95E54108ED, 72DD12E924AA7273B3E4BDD2A2C581DECE304C8EF3D44EA79ABB032F3F95DCE5 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

18:34:39.0269 0x193c  fvevol - ok

18:34:39.0296 0x193c  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

18:34:39.0304 0x193c  gagp30kx - ok

18:34:39.0463 0x193c  [ 7037D548B726108F9420B9F345573DC4, 659202CD4F8E789B47D9E7281312DD87B4718A615EC8B5C7F143E84AC7B9ACA3 ] GalaxyClientService C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe

18:34:39.0501 0x193c  GalaxyClientService - ok

18:34:39.0805 0x193c  [ 7747954B78DEED16169FC816108FE995, 677A09A5702884A138C83739487AF23EF6E4C8F79875997D26417E823D692293 ] GalaxyCommunication C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe

18:34:39.0930 0x193c  GalaxyCommunication - ok

18:34:39.0974 0x193c  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

18:34:40.0019 0x193c  gpsvc - ok

18:34:40.0095 0x193c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

18:34:40.0112 0x193c  gupdate - ok

18:34:40.0135 0x193c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

18:34:40.0142 0x193c  gupdatem - ok

18:34:40.0199 0x193c  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys

18:34:40.0215 0x193c  hamachi - ok

18:34:40.0343 0x193c  [ 3FF6FCC221F5128BE77B13BF523F2614, CAB9E7CDEA2EF36E986F2B690C1F19084B30E7F2C28E22A87BA9DBECDAD31F96 ] Hamachi2Svc     C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

18:34:40.0392 0x193c  Hamachi2Svc - ok

18:34:40.0413 0x193c  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

18:34:40.0428 0x193c  hcw85cir - ok

18:34:40.0484 0x193c  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

18:34:40.0518 0x193c  HdAudAddService - ok

18:34:40.0535 0x193c  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

18:34:40.0551 0x193c  HDAudBus - ok

18:34:40.0554 0x193c  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

18:34:40.0569 0x193c  HidBatt - ok

18:34:40.0573 0x193c  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

18:34:40.0584 0x193c  HidBth - ok

18:34:40.0587 0x193c  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys

18:34:40.0606 0x193c  HidIr - ok

18:34:40.0623 0x193c  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

18:34:40.0646 0x193c  hidserv - ok

18:34:40.0670 0x193c  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

18:34:40.0678 0x193c  HidUsb - ok

18:34:40.0752 0x193c  [ C193FE8507607B2917A6F9B554132559, 962B065219D305B2DE1B4816D234438FBF8F6A79D45389683A21657733C14D5B ] HiPatchService  C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

18:34:40.0758 0x193c  HiPatchService - detected UnsignedFile.Multi.Generic ( 1 )

18:34:43.0705 0x193c  HiPatchService ( UnsignedFile.Multi.Generic ) - warning

18:34:43.0705 0x193c  Force sending object to P2P due to detect: HiPatchService

18:34:46.0476 0x193c  Object send P2P result: true

18:34:49.0205 0x193c  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

18:34:49.0250 0x193c  hkmsvc - ok

18:34:49.0274 0x193c  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

18:34:49.0310 0x193c  HomeGroupListener - ok

18:34:49.0329 0x193c  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

18:34:49.0340 0x193c  HomeGroupProvider - ok

18:34:49.0392 0x193c  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

18:34:49.0412 0x193c  HpSAMD - ok

18:34:49.0448 0x193c  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

18:34:49.0469 0x193c  HTTP - ok

18:34:49.0485 0x193c  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

18:34:49.0493 0x193c  hwpolicy - ok

18:34:49.0514 0x193c  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

18:34:49.0525 0x193c  i8042prt - ok

18:34:49.0555 0x193c  [ 3DF4395A7CF8B7A72A5F4606366B8C2D, 483588B8FC6E05488ED631C4E1CFC398553FEBFA2CD2BB527B4DF12D19774F80 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

18:34:49.0570 0x193c  iaStorV - ok

18:34:49.0680 0x193c  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

18:34:49.0705 0x193c  idsvc - ok

18:34:49.0709 0x193c  IEEtwCollectorService - ok

18:34:49.0723 0x193c  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

18:34:49.0731 0x193c  iirsp - ok

18:34:49.0801 0x193c  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

18:34:49.0847 0x193c  IKEEXT - ok

18:34:49.0865 0x193c  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

18:34:49.0872 0x193c  intelide - ok

18:34:49.0903 0x193c  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys

18:34:49.0912 0x193c  intelppm - ok

18:34:49.0959 0x193c  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

18:34:50.0018 0x193c  IPBusEnum - ok

18:34:50.0022 0x193c  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

18:34:50.0048 0x193c  IpFilterDriver - ok

18:34:50.0066 0x193c  [ A34A587FFFD45FA649FBA6D03784D257, C9A2BCD4E2A5EB6E320092A3AFD5737ECDCDA0B83EE42314A23C4978F2974767 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

18:34:50.0097 0x193c  iphlpsvc - ok

18:34:50.0101 0x193c  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

18:34:50.0110 0x193c  IPMIDRV - ok

18:34:50.0129 0x193c  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

18:34:50.0152 0x193c  IPNAT - ok

18:34:50.0177 0x193c  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

18:34:50.0192 0x193c  IRENUM - ok

18:34:50.0195 0x193c  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

18:34:50.0202 0x193c  isapnp - ok

18:34:50.0228 0x193c  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

18:34:50.0239 0x193c  iScsiPrt - ok

18:34:50.0271 0x193c  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

18:34:50.0279 0x193c  kbdclass - ok

18:34:50.0292 0x193c  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

18:34:50.0300 0x193c  kbdhid - ok

18:34:50.0343 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] KeyIso          C:\Windows\system32\lsass.exe

18:34:50.0364 0x193c  KeyIso - ok

18:34:50.0407 0x193c  [ C0A6C3D6E02B61B5D100FE17306C276F, F57C7BCC39B30F1DF739D07B76BA18EB68D12D8D1BD13B6AC8DC712C29119495 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

18:34:50.0429 0x193c  KSecDD - ok

18:34:50.0486 0x193c  [ 7A7328E427694CC7244235C3BC299F80, 7FC2E1F3F93B3334C3A8961CA58B4F38524650F6D8DA9FFA1FB43E1A2B86B710 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

18:34:50.0497 0x193c  KSecPkg - ok

18:34:50.0525 0x193c  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

18:34:50.0550 0x193c  ksthunk - ok

18:34:50.0585 0x193c  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

18:34:50.0629 0x193c  KtmRm - ok

18:34:50.0673 0x193c  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

18:34:50.0730 0x193c  LanmanServer - ok

18:34:50.0763 0x193c  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

18:34:50.0805 0x193c  LanmanWorkstation - ok

18:34:50.0856 0x193c  [ FA529FB35694C24BF98A9EF67C1CD9D0, 7B3C587C38CF13D514140F0A55E58997D6071D1DEFD97E274E3F490660AC6075 ] LGBusEnum       C:\Windows\system32\drivers\LGBusEnum.sys

18:34:50.0872 0x193c  LGBusEnum - ok

18:34:50.0904 0x193c  [ 94B29CE153765E768F004FB3440BE2B0, E74C01CEBDA589CDDE35CBCBAA18700E3742DD3B48A90DB3630992467FFC5024 ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys

18:34:50.0912 0x193c  LGVirHid - ok

18:34:50.0974 0x193c  [ 156AB2E56DC3CA0B582E3362E07CDED7, 7B03929273861690DC42E4C686E655BE5A1C60136AE5E739D7E62306AFD4AB9A ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys

18:34:50.0991 0x193c  lirsgt - ok

18:34:51.0028 0x193c  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

18:34:51.0096 0x193c  lltdio - ok

18:34:51.0141 0x193c  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

18:34:51.0196 0x193c  lltdsvc - ok

18:34:51.0210 0x193c  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

18:34:51.0232 0x193c  lmhosts - ok

18:34:51.0288 0x193c  [ D6BF6FD055BD719F3D62E51B90857159, A7777D18E404164B4DA531AD94D2A712D9CC6A9288795B7388037752A558E96F ] LMIGuardianSvc  C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

18:34:51.0309 0x193c  LMIGuardianSvc - ok

18:34:51.0373 0x193c  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

18:34:51.0393 0x193c  LSI_FC - ok

18:34:51.0439 0x193c  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

18:34:51.0450 0x193c  LSI_SAS - ok

18:34:51.0468 0x193c  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

18:34:51.0479 0x193c  LSI_SAS2 - ok

18:34:51.0508 0x193c  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

18:34:51.0520 0x193c  LSI_SCSI - ok

18:34:51.0536 0x193c  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

18:34:51.0582 0x193c  luafv - ok

18:34:51.0605 0x193c  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

18:34:51.0615 0x193c  Mcx2Svc - ok

18:34:51.0628 0x193c  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys

18:34:51.0635 0x193c  megasas - ok

18:34:51.0656 0x193c  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

18:34:51.0667 0x193c  MegaSR - ok

18:34:51.0693 0x193c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

18:34:51.0717 0x193c  MMCSS - ok

18:34:51.0732 0x193c  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

18:34:51.0766 0x193c  Modem - ok

18:34:51.0807 0x193c  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

18:34:51.0830 0x193c  monitor - ok

18:34:51.0892 0x193c  [ C030F9E822A057C1A7A9BB4EA3E8877E, 2CCEC87DEB972B6B0196A08D3781002929E9107137FE3A61F1626D3BEE26630A ] MotioninJoyXFilter C:\Windows\system32\DRIVERS\MijXfilt.sys

18:34:51.0931 0x193c  MotioninJoyXFilter - detected UnsignedFile.Multi.Generic ( 1 )

18:34:54.0986 0x193c  Detect skipped due to KSN trusted

18:34:54.0986 0x193c  MotioninJoyXFilter - ok

18:34:55.0014 0x193c  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

18:34:55.0029 0x193c  mouclass - ok

18:34:55.0034 0x193c  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

18:34:55.0056 0x193c  mouhid - ok

18:34:55.0087 0x193c  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

18:34:55.0096 0x193c  mountmgr - ok

18:34:55.0159 0x193c  [ 73150F67D20270FF95A021A22E64F28A, A8878DEFBE437FB453F8E9243FB5C787D07AC7415A4475388D479C10417C524F ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys

18:34:55.0182 0x193c  MpFilter - ok

18:34:55.0196 0x193c  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

18:34:55.0206 0x193c  mpio - ok

18:34:55.0276 0x193c  MpKsla6ad0bc4 - ok

18:34:55.0324 0x193c  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

18:34:55.0365 0x193c  mpsdrv - ok

18:34:55.0397 0x193c  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

18:34:55.0435 0x193c  MpsSvc - ok

18:34:55.0465 0x193c  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

18:34:55.0509 0x193c  MRxDAV - ok

18:34:55.0557 0x193c  [ 1877EB1495CFBDAB27D6A32F6DDF3818, 3818055C66AB12A335A905CFFE5D05347F15AE488861C5C183E62E8E0881DA86 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

18:34:55.0574 0x193c  mrxsmb - ok

18:34:55.0646 0x193c  [ 21AF322605D8C7F2A627C22634D1C9C9, 6B783F95D093FEFB260EA9568926BBB3CB8ED0783184DB3A18733E211933BADD ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

18:34:55.0687 0x193c  mrxsmb10 - ok

18:34:55.0712 0x193c  [ 45A03A0B6461EFBEE77E0A6AC2816EDA, CFB0C11387F2EC49FD6B69EF747962114EBA6F8B4B4DEC3627E9E969775C4D7E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

18:34:55.0746 0x193c  mrxsmb20 - ok

18:34:55.0759 0x193c  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

18:34:55.0771 0x193c  msahci - ok

18:34:55.0787 0x193c  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

18:34:55.0796 0x193c  msdsm - ok

18:34:55.0825 0x193c  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

18:34:55.0836 0x193c  MSDTC - ok

18:34:55.0866 0x193c  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

18:34:55.0888 0x193c  Msfs - ok

18:34:55.0903 0x193c  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

18:34:55.0956 0x193c  mshidkmdf - ok

18:34:55.0969 0x193c  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

18:34:55.0976 0x193c  msisadrv - ok

18:34:56.0001 0x193c  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

18:34:56.0053 0x193c  MSiSCSI - ok

18:34:56.0056 0x193c  msiserver - ok

18:34:56.0079 0x193c  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

18:34:56.0101 0x193c  MSKSSRV - ok

18:34:56.0167 0x193c  [ CE996C1821021ADF8E28E80A54E846A8, 99042E895B6C2EA80F3BA65563A12C8EBA882E3AD6A21DD8E799B0112C75DDD2 ] MsMpSvc         c:\Program Files\Microsoft Security Client\MsMpEng.exe

18:34:56.0188 0x193c  MsMpSvc - ok

18:34:56.0213 0x193c  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

18:34:56.0249 0x193c  MSPCLOCK - ok

18:34:56.0272 0x193c  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

18:34:56.0294 0x193c  MSPQM - ok

18:34:56.0309 0x193c  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

18:34:56.0322 0x193c  MsRPC - ok

18:34:56.0336 0x193c  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

18:34:56.0343 0x193c  mssmbios - ok

18:34:56.0403 0x193c  MSSQL$SQLEXPRESS - ok

18:34:56.0471 0x193c  [ 7A2A8C975356858EB38466A6B1592E8D, 97C3DFCCBE1BA92EE7E4848993D6F369D543A53344A6512C84EF03E7D737A482 ] MSSQLServerADHelper100 c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

18:34:56.0490 0x193c  MSSQLServerADHelper100 - ok

18:34:56.0513 0x193c  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

18:34:56.0534 0x193c  MSTEE - ok

18:34:56.0543 0x193c  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

18:34:56.0558 0x193c  MTConfig - ok

18:34:56.0573 0x193c  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

18:34:56.0581 0x193c  Mup - ok

18:34:56.0629 0x193c  MySQL55 - ok

18:34:56.0690 0x193c  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

18:34:56.0734 0x193c  napagent - ok

18:34:56.0774 0x193c  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

18:34:56.0811 0x193c  NativeWifiP - ok

18:34:56.0942 0x193c  [ B498A14133BD09AD0817590ACE4470AD, 14CCC922C6596C97A5CF580209C4AFB6138A8FFD3A0E60CD506810DFCBC43A1A ] NBService       C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

18:34:56.0964 0x193c  NBService - ok

18:34:57.0034 0x193c  [ 79B47FD40D9A817E932F9D26FAC0A81C, 53E260B8BFC50BA45FA73BFCF4E58C233890D0EAA9DEFDCCBB55FD3EB992FF2D ] NDIS            C:\Windows\system32\drivers\ndis.sys

18:34:57.0057 0x193c  NDIS - ok

18:34:57.0098 0x193c  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

18:34:57.0139 0x193c  NdisCap - ok

18:34:57.0160 0x193c  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

18:34:57.0182 0x193c  NdisTapi - ok

18:34:57.0209 0x193c  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

18:34:57.0250 0x193c  Ndisuio - ok

18:34:57.0289 0x193c  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

18:34:57.0342 0x193c  NdisWan - ok

18:34:57.0359 0x193c  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

18:34:57.0389 0x193c  NDProxy - ok

18:34:57.0417 0x193c  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

18:34:57.0460 0x193c  NetBIOS - ok

18:34:57.0524 0x193c  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

18:34:57.0624 0x193c  NetBT - ok

18:34:57.0652 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] Netlogon        C:\Windows\system32\lsass.exe

18:34:57.0661 0x193c  Netlogon - ok

18:34:57.0709 0x193c  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

18:34:57.0756 0x193c  Netman - ok

18:34:57.0795 0x193c  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

18:34:57.0806 0x193c  NetMsmqActivator - ok

18:34:57.0810 0x193c  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

18:34:57.0820 0x193c  NetPipeActivator - ok

18:34:57.0845 0x193c  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

18:34:57.0874 0x193c  netprofm - ok

18:34:57.0906 0x193c  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

18:34:57.0917 0x193c  NetTcpActivator - ok

18:34:57.0921 0x193c  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

18:34:57.0930 0x193c  NetTcpPortSharing - ok

18:34:57.0965 0x193c  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

18:34:57.0985 0x193c  nfrd960 - ok

18:34:58.0056 0x193c  [ 4774AD83C650001B337B92E5E5DA337B, 138ECC7F556D8A12AE58B78B68F6515BE4C00F9F062596B48B6CA6C010F13035 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys

18:34:58.0070 0x193c  NisDrv - ok

18:34:58.0106 0x193c  [ 96B7D15161A778B359E707796CCEA646, 9E4A25D9848FAECC517474EAD548E7975CBE3F41AAA964E5245E78F2A723925E ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe

18:34:58.0126 0x193c  NisSrv - ok

18:34:58.0156 0x193c  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

18:34:58.0169 0x193c  NlaSvc - ok

18:34:58.0287 0x193c  [ A328A46D87BB92CE4D8A4528E9D84787, D3245ED700151111592BA82FB675B284DA7FCE52B07A7F68352F64A402CAB37C ] NMIndexingService C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

18:34:58.0306 0x193c  NMIndexingService - ok

18:34:58.0319 0x193c  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

18:34:58.0341 0x193c  Npfs - ok

18:34:58.0360 0x193c  npggsvc - ok

18:34:58.0378 0x193c  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

18:34:58.0401 0x193c  nsi - ok

18:34:58.0405 0x193c  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

18:34:58.0446 0x193c  nsiproxy - ok

18:34:58.0502 0x193c  [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

18:34:58.0537 0x193c  Ntfs - ok

18:34:58.0554 0x193c  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

18:34:58.0576 0x193c  Null - ok

18:34:58.0610 0x193c  [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48, 7738785DE8B50D69993F4408498B812D0283FEE5C04FF5B89C20F149B44E9737 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

18:34:58.0619 0x193c  nvraid - ok

18:34:58.0624 0x193c  [ F7CD50FE7139F07E77DA8AC8033D1832, DA96F4B15C8165E6AE1D00E03A062C66CA3A3089E4FF0E9E11CE00B154DD12EC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

18:34:58.0633 0x193c  nvstor - ok

18:34:58.0647 0x193c  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

18:34:58.0655 0x193c  nv_agp - ok

18:34:58.0669 0x193c  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

18:34:58.0707 0x193c  ohci1394 - ok

18:34:58.0875 0x193c  [ D06C2368C93396C6B983CE60523BA99F, ABC90E2DC2DE577AFA37BF34630502AA209C9556DFCC1757844D95D9370FFA8C ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe

18:34:58.0913 0x193c  Origin Client Service - ok

18:34:58.0959 0x193c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

18:34:59.0008 0x193c  p2pimsvc - ok

18:34:59.0048 0x193c  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

18:34:59.0079 0x193c  p2psvc - ok

18:34:59.0083 0x193c  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys

18:34:59.0092 0x193c  Parport - ok

18:34:59.0107 0x193c  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

18:34:59.0115 0x193c  partmgr - ok

18:34:59.0137 0x193c  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll

18:34:59.0148 0x193c  PcaSvc - ok

18:34:59.0162 0x193c  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

18:34:59.0172 0x193c  pci - ok

18:34:59.0190 0x193c  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

18:34:59.0197 0x193c  pciide - ok

18:34:59.0216 0x193c  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

18:34:59.0226 0x193c  pcmcia - ok

18:34:59.0229 0x193c  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

18:34:59.0237 0x193c  pcw - ok

18:34:59.0265 0x193c  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

18:34:59.0283 0x193c  PEAUTH - ok

18:34:59.0341 0x193c  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

18:34:59.0364 0x193c  PerfHost - ok

18:34:59.0419 0x193c  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

18:34:59.0464 0x193c  pla - ok

18:34:59.0511 0x193c  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

18:34:59.0544 0x193c  PlugPlay - ok

18:34:59.0562 0x193c  PnkBstrA - ok

18:34:59.0571 0x193c  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

18:34:59.0593 0x193c  PNRPAutoReg - ok

18:34:59.0619 0x193c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

18:34:59.0632 0x193c  PNRPsvc - ok

18:34:59.0679 0x193c  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

18:34:59.0726 0x193c  PolicyAgent - ok

18:34:59.0757 0x193c  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

18:34:59.0812 0x193c  Power - ok

18:34:59.0847 0x193c  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

18:34:59.0886 0x193c  PptpMiniport - ok

18:34:59.0897 0x193c  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys

18:34:59.0914 0x193c  Processor - ok

18:34:59.0946 0x193c  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

18:34:59.0958 0x193c  ProfSvc - ok

18:34:59.0986 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] ProtectedStorage C:\Windows\system32\lsass.exe

18:34:59.0994 0x193c  ProtectedStorage - ok

18:35:00.0023 0x193c  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

18:35:00.0057 0x193c  Psched - ok

18:35:00.0134 0x193c  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

18:35:00.0169 0x193c  ql2300 - ok

18:35:00.0176 0x193c  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

18:35:00.0185 0x193c  ql40xx - ok

18:35:00.0216 0x193c  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

18:35:00.0231 0x193c  QWAVE - ok

18:35:00.0244 0x193c  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

18:35:00.0265 0x193c  QWAVEdrv - ok

18:35:00.0271 0x193c  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

18:35:00.0293 0x193c  RasAcd - ok

18:35:00.0327 0x193c  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

18:35:00.0396 0x193c  RasAgileVpn - ok

18:35:00.0427 0x193c  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

18:35:00.0454 0x193c  RasAuto - ok

18:35:00.0474 0x193c  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

18:35:00.0497 0x193c  Rasl2tp - ok

18:35:00.0512 0x193c  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

18:35:00.0559 0x193c  RasMan - ok

18:35:00.0572 0x193c  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

18:35:00.0613 0x193c  RasPppoe - ok

18:35:00.0631 0x193c  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

18:35:00.0675 0x193c  RasSstp - ok

18:35:00.0695 0x193c  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

18:35:00.0721 0x193c  rdbss - ok

18:35:00.0724 0x193c  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

18:35:00.0734 0x193c  rdpbus - ok

18:35:00.0743 0x193c  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

18:35:00.0778 0x193c  RDPCDD - ok

18:35:00.0786 0x193c  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

18:35:00.0807 0x193c  RDPENCDD - ok

18:35:00.0812 0x193c  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

18:35:00.0833 0x193c  RDPREFMP - ok

18:35:00.0863 0x193c  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

18:35:00.0874 0x193c  RDPWD - ok

18:35:00.0898 0x193c  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

18:35:00.0908 0x193c  rdyboost - ok

18:35:00.0948 0x193c  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

18:35:00.0972 0x193c  RemoteAccess - ok

18:35:01.0045 0x193c  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

18:35:01.0077 0x193c  RemoteRegistry - ok

18:35:01.0127 0x193c  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

18:35:01.0177 0x193c  RpcEptMapper - ok

18:35:01.0238 0x193c  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

18:35:01.0260 0x193c  RpcLocator - ok

18:35:01.0335 0x193c  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

18:35:01.0378 0x193c  RpcSs - ok

18:35:01.0438 0x193c  [ CD553B8633466A6D1C115812F2619F1F, B39B38DE8B97209BEABDBF062832A1BDE2303450238B9A4723829958C5C81A6B ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

18:35:01.0459 0x193c  RsFx0103 - ok

18:35:01.0478 0x193c  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

18:35:01.0501 0x193c  rspndr - ok

18:35:01.0586 0x193c  [ 3AACAA62758FA6D178043D78BA89BEBC, 862D0FF27BB086145A33B9261142838651B0D2E1403BE321145E197600EB5015 ] RTCore64        C:\Program Files (x86)\MSI Afterburner\RTCore64.sys

18:35:01.0604 0x193c  RTCore64 - ok

18:35:01.0674 0x193c  [ AC4CA62572CA516945AB92D6C9F501F4, 6CB4178DD1ED3D8224EA1F91CAA00AFBC756DCA2DFD71F399B05E511E79D5150 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

18:35:01.0697 0x193c  RTL8167 - ok

18:35:01.0747 0x193c  [ B3A62D2AEED3DE93239252A2DFFA9728, 7CDE07B59B5BEFD4A9FB295D14AABC95A8EDA807A4F357817824723C26A5C6AD ] SaiK1705        C:\Windows\system32\DRIVERS\SaiK1705.sys

18:35:01.0770 0x193c  SaiK1705 - ok

18:35:01.0805 0x193c  [ B08581EDF3290210D3366CD2D992F6C2, FF1BE97B8F37FF39B784CAB254F2460B7F7A84C45BAD5CDB06FE5C29CF293BE5 ] SaiMini         C:\Windows\system32\DRIVERS\SaiMini.sys

18:35:01.0812 0x193c  SaiMini - ok

18:35:01.0829 0x193c  [ D086C2F45D328C2F63FC6B4CD79FCB66, BF3D27D95C83D2454AE62BAFE9297E08BB58EA4C7FBFBDEE075A4FFC6085735C ] SaiNtBus        C:\Windows\system32\drivers\SaiBus.sys

18:35:01.0836 0x193c  SaiNtBus - ok

18:35:01.0881 0x193c  [ 338F85CC164C90F46B5580D94F1E740E, B677E79F41D5027769E75488B2B91C88E9D76CA51FA85BF0E6AA66013D047E04 ] SaiU1705        C:\Windows\system32\DRIVERS\SaiU1705.sys

18:35:01.0888 0x193c  SaiU1705 - ok

18:35:01.0908 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] SamSs           C:\Windows\system32\lsass.exe

18:35:01.0916 0x193c  SamSs - ok

18:35:02.0013 0x193c  [ FA5734EB1E9B2E6652EB13DCA8B72BED, E4EE53B72181344755BBEF597979CC03D9C0D6E4423DB24F9F9FD5C54CDBEA94 ] SbieDrv         C:\Program Files\Sandboxie\SbieDrv.sys

18:35:02.0038 0x193c  SbieDrv - ok

18:35:02.0078 0x193c  [ 3F618BFF452B64521740437CCC88A1E3, B9384A0F94D0D588DFF3745771DE03B8CC17156CB978A6B98F5F80A7C2DFD9B3 ] SbieSvc         C:\Program Files\Sandboxie\SbieSvc.exe

18:35:02.0087 0x193c  SbieSvc - ok

18:35:02.0100 0x193c  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

18:35:02.0110 0x193c  sbp2port - ok

18:35:02.0131 0x193c  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

18:35:02.0161 0x193c  SCardSvr - ok

18:35:02.0172 0x193c  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

18:35:02.0193 0x193c  scfilter - ok

18:35:02.0224 0x193c  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll

18:35:02.0264 0x193c  Schedule - ok

18:35:02.0296 0x193c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

18:35:02.0363 0x193c  SCPolicySvc - ok

18:35:02.0429 0x193c  [ 8B56BDCE6A303DDE63D63440D1CF9AD1, 66A4356C29D00A1B8A95975C073AE4E6D2A90CBF3B143FE9B83B96BEC0805D46 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys

18:35:02.0446 0x193c  ScreamBAudioSvc - ok

18:35:02.0468 0x193c  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

18:35:02.0483 0x193c  SDRSVC - ok

18:35:02.0511 0x193c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

18:35:02.0547 0x193c  secdrv - ok

18:35:02.0563 0x193c  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

18:35:02.0591 0x193c  seclogon - ok

18:35:02.0610 0x193c  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

18:35:02.0644 0x193c  SENS - ok

18:35:02.0672 0x193c  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

18:35:02.0681 0x193c  SensrSvc - ok

18:35:02.0698 0x193c  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

18:35:02.0706 0x193c  Serenum - ok

18:35:02.0718 0x193c  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

18:35:02.0727 0x193c  Serial - ok

18:35:02.0747 0x193c  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys

18:35:02.0776 0x193c  sermouse - ok

18:35:02.0795 0x193c  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

18:35:02.0825 0x193c  SessionEnv - ok

18:35:02.0828 0x193c  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

18:35:02.0838 0x193c  sffdisk - ok

18:35:02.0840 0x193c  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

18:35:02.0849 0x193c  sffp_mmc - ok

18:35:02.0871 0x193c  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

18:35:02.0880 0x193c  sffp_sd - ok

18:35:02.0883 0x193c  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

18:35:02.0891 0x193c  sfloppy - ok

18:35:02.0916 0x193c  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

18:35:02.0959 0x193c  SharedAccess - ok

18:35:02.0981 0x193c  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

18:35:03.0074 0x193c  ShellHWDetection - ok

18:35:03.0172 0x193c  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

18:35:03.0188 0x193c  SiSRaid2 - ok

18:35:03.0249 0x193c  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

18:35:03.0270 0x193c  SiSRaid4 - ok

18:35:03.0393 0x193c  [ 050A4112B00BCA2E13314CDE48C1DEEE, 86C679CD494DEEB984372BF954EFBB8982AC7995FBF89FCF83BC228991D1B825 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

18:35:03.0417 0x193c  SkypeUpdate - ok

18:35:03.0427 0x193c  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

18:35:03.0458 0x193c  Smb - ok

18:35:03.0489 0x193c  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

18:35:03.0520 0x193c  SNMPTRAP - ok

18:35:03.0539 0x193c  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

18:35:03.0557 0x193c  spldr - ok

18:35:03.0580 0x193c  [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler         C:\Windows\System32\spoolsv.exe

18:35:03.0613 0x193c  Spooler - ok

18:35:03.0695 0x193c  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

18:35:03.0778 0x193c  sppsvc - ok

18:35:03.0787 0x193c  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

18:35:03.0810 0x193c  sppuinotify - ok

18:35:03.0905 0x193c  [ 12E6D95CDE974B131DEFAA44BAB8B056, 3FEF55D97915BDB222E3A60B50D53BBD8D9C0FDFF85EDC025B8EFD33E575E596 ] SQLAgent$SQLEXPRESS c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

18:35:03.0923 0x193c  SQLAgent$SQLEXPRESS - ok

18:35:04.0021 0x193c  [ B54B48F6D92423440C264E91225C5FF1, 7484D90CE309555E1FB54F011A2980D8491354223111B7AA16D1D2473570DC19 ] SQLBrowser      c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

18:35:04.0039 0x193c  SQLBrowser - ok

18:35:04.0113 0x193c  [ EAD5300C93946B0250A309E2BF2BE4CF, 6B9131D94ED31F838B1820EE67F068C4741B69D5C655587C89C9477986BD270F ] SQLWriter       c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

18:35:04.0140 0x193c  SQLWriter - ok

18:35:04.0176 0x193c  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

18:35:04.0193 0x193c  srv - ok

18:35:04.0209 0x193c  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

18:35:04.0237 0x193c  srv2 - ok

18:35:04.0269 0x193c  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

18:35:04.0301 0x193c  srvnet - ok

18:35:04.0327 0x193c  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

18:35:04.0383 0x193c  SSDPSRV - ok

18:35:04.0429 0x193c  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

18:35:04.0453 0x193c  SstpSvc - ok

18:35:04.0488 0x193c  [ 914CE17FE3E542ACFE5ACD6646E2DFDB, B2F443C07686E75A06DD49645C544D792F438EEC8ACE715818775E60FFEFA720 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

18:35:04.0508 0x193c  Steam Client Service - ok

18:35:04.0533 0x193c  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

18:35:04.0540 0x193c  stexstor - ok

18:35:04.0613 0x193c  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

18:35:04.0639 0x193c  stisvc - ok

18:35:04.0648 0x193c  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

18:35:04.0655 0x193c  swenum - ok

18:35:04.0687 0x193c  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

18:35:04.0719 0x193c  swprv - ok

18:35:04.0768 0x193c  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll

18:35:04.0821 0x193c  SysMain - ok

18:35:04.0830 0x193c  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

18:35:04.0843 0x193c  TabletInputService - ok

18:35:04.0859 0x193c  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

18:35:04.0886 0x193c  TapiSrv - ok

18:35:04.0890 0x193c  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

18:35:04.0915 0x193c  TBS - ok

18:35:04.0974 0x193c  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

18:35:05.0017 0x193c  Tcpip - ok

18:35:05.0132 0x193c  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

18:35:05.0172 0x193c  TCPIP6 - ok

18:35:05.0186 0x193c  [ DF687E3D8836BFB04FCC0615BF15A519, 7C5B1E72673B4299DFC21E869F0FBB28198CA54DF4F4AF7080005F2D82467784 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

18:35:05.0208 0x193c  tcpipreg - ok

18:35:05.0220 0x193c  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

18:35:05.0228 0x193c  TDPIPE - ok

18:35:05.0259 0x193c  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

18:35:05.0276 0x193c  TDTCP - ok

18:35:05.0296 0x193c  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

18:35:05.0334 0x193c  tdx - ok

18:35:05.0554 0x193c  [ 6EC042A004268B3EA2FB96D939303095, 0E889FB317AF484DA4A8529C5569350C69F4587C2B455C0F559E8061ECC2247B ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

18:35:05.0655 0x193c  TeamViewer - ok

18:35:05.0670 0x193c  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

18:35:05.0678 0x193c  TermDD - ok

18:35:05.0715 0x193c  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

18:35:05.0748 0x193c  TermService - ok

18:35:05.0767 0x193c  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

18:35:05.0814 0x193c  Themes - ok

18:35:05.0843 0x193c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

18:35:05.0875 0x193c  THREADORDER - ok

18:35:05.0896 0x193c  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

18:35:05.0921 0x193c  TrkWks - ok

18:35:05.0960 0x193c  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

18:35:06.0013 0x193c  TrustedInstaller - ok

18:35:06.0042 0x193c  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

18:35:06.0063 0x193c  tssecsrv - ok

18:35:06.0083 0x193c  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

18:35:06.0105 0x193c  TsUsbFlt - ok

18:35:06.0110 0x193c  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

18:35:06.0122 0x193c  TsUsbGD - ok

18:35:06.0150 0x193c  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

18:35:06.0172 0x193c  tunnel - ok

18:35:06.0176 0x193c  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

18:35:06.0184 0x193c  uagp35 - ok

18:35:06.0206 0x193c  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

18:35:06.0249 0x193c  udfs - ok

18:35:06.0257 0x193c  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

18:35:06.0267 0x193c  UI0Detect - ok

18:35:06.0271 0x193c  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

18:35:06.0279 0x193c  uliagpkx - ok

18:35:06.0300 0x193c  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

18:35:06.0309 0x193c  umbus - ok

18:35:06.0320 0x193c  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys

18:35:06.0328 0x193c  UmPass - ok

18:35:06.0384 0x193c  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

18:35:06.0429 0x193c  upnphost - ok

18:35:06.0458 0x193c  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

18:35:06.0467 0x193c  usbccgp - ok

18:35:06.0499 0x193c  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

18:35:06.0525 0x193c  usbcir - ok

18:35:06.0549 0x193c  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

18:35:06.0570 0x193c  usbehci - ok

18:35:06.0582 0x193c  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

18:35:06.0597 0x193c  usbhub - ok

18:35:06.0602 0x193c  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

18:35:06.0625 0x193c  usbohci - ok

18:35:06.0634 0x193c  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys

18:35:06.0644 0x193c  usbprint - ok

18:35:06.0659 0x193c  [ D76510CFA0FC09023077F22C2F979D86, 5662281C6D515423255D3C262EA368DBAFC250235E535FBFA3E59D3487695439 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

18:35:06.0668 0x193c  USBSTOR - ok

18:35:06.0682 0x193c  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

18:35:06.0700 0x193c  usbuhci - ok

18:35:06.0751 0x193c  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

18:35:06.0794 0x193c  usb_rndisx - ok

18:35:06.0816 0x193c  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

18:35:06.0859 0x193c  UxSms - ok

18:35:06.0885 0x193c  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] VaultSvc        C:\Windows\system32\lsass.exe

18:35:06.0893 0x193c  VaultSvc - ok

18:35:06.0912 0x193c  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

18:35:06.0920 0x193c  vdrvroot - ok

18:35:06.0940 0x193c  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

18:35:06.0985 0x193c  vds - ok

18:35:06.0990 0x193c  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

18:35:06.0999 0x193c  vga - ok

18:35:07.0002 0x193c  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

18:35:07.0024 0x193c  VgaSave - ok

18:35:07.0046 0x193c  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

18:35:07.0057 0x193c  vhdmp - ok

18:35:07.0074 0x193c  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

18:35:07.0081 0x193c  viaide - ok

18:35:07.0136 0x193c  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

18:35:07.0153 0x193c  volmgr - ok

18:35:07.0180 0x193c  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

18:35:07.0197 0x193c  volmgrx - ok

18:35:07.0227 0x193c  [ DF8126BD41180351A093A3AD2FC8903B, AEFF4AA89CDDAAAD43CDE17C6B6EB2A397A0AC1651CBD51B889161EC2BC6527A ] volsnap         C:\Windows\system32\drivers\volsnap.sys

18:35:07.0239 0x193c  volsnap - ok

18:35:07.0278 0x193c  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

18:35:07.0287 0x193c  vsmraid - ok

18:35:07.0318 0x193c  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

18:35:07.0367 0x193c  VSS - ok

18:35:07.0399 0x193c  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

18:35:07.0409 0x193c  vwifibus - ok

18:35:07.0427 0x193c  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

18:35:07.0456 0x193c  W32Time - ok

18:35:07.0471 0x193c  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

18:35:07.0479 0x193c  WacomPen - ok

18:35:07.0545 0x193c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

18:35:07.0589 0x193c  WANARP - ok

18:35:07.0645 0x193c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

18:35:07.0683 0x193c  Wanarpv6 - ok

18:35:07.0712 0x193c  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

18:35:07.0782 0x193c  wbengine - ok

18:35:07.0809 0x193c  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

18:35:07.0826 0x193c  WbioSrvc - ok

18:35:07.0850 0x193c  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

18:35:07.0868 0x193c  wcncsvc - ok

18:35:07.0872 0x193c  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

18:35:07.0891 0x193c  WcsPlugInService - ok

18:35:07.0908 0x193c  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys

18:35:07.0915 0x193c  Wd - ok

18:35:07.0974 0x193c  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

18:35:08.0001 0x193c  Wdf01000 - ok

18:35:08.0026 0x193c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll

18:35:08.0096 0x193c  WdiServiceHost - ok

18:35:08.0102 0x193c  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll

18:35:08.0120 0x193c  WdiSystemHost - ok

18:35:08.0142 0x193c  [ 3DB6D04E1C64272F8B14EB8BC4616280, 9138642B1C19F895D4ECFD930160C80FBF15813CE63BBF4C899842C300FD3026 ] WebClient       C:\Windows\System32\webclnt.dll

18:35:08.0158 0x193c  WebClient - ok

18:35:08.0174 0x193c  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

18:35:08.0226 0x193c  Wecsvc - ok

18:35:08.0236 0x193c  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

18:35:08.0264 0x193c  wercplsupport - ok

18:35:08.0274 0x193c  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

18:35:08.0301 0x193c  WerSvc - ok

18:35:08.0338 0x193c  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

18:35:08.0380 0x193c  WfpLwf - ok

18:35:08.0449 0x193c  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

18:35:08.0465 0x193c  WIMMount - ok

18:35:08.0486 0x193c  WinDefend - ok

18:35:08.0501 0x193c  WinHttpAutoProxySvc - ok

18:35:08.0582 0x193c  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

18:35:08.0621 0x193c  Winmgmt - ok

18:35:08.0685 0x193c  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll

18:35:08.0742 0x193c  WinRM - ok

18:35:08.0802 0x193c  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

18:35:08.0813 0x193c  WinUsb - ok

18:35:08.0878 0x193c  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

18:35:08.0909 0x193c  Wlansvc - ok

18:35:08.0913 0x193c  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

18:35:08.0921 0x193c  WmiAcpi - ok

18:35:08.0949 0x193c  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

18:35:08.0960 0x193c  wmiApSrv - ok

18:35:08.0976 0x193c  WMPNetworkSvc - ok

18:35:09.0005 0x193c  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

18:35:09.0076 0x193c  WPCSvc - ok

18:35:09.0098 0x193c  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

18:35:09.0114 0x193c  WPDBusEnum - ok

18:35:09.0129 0x193c  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

18:35:09.0151 0x193c  ws2ifsl - ok

18:35:09.0167 0x193c  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

18:35:09.0201 0x193c  wscsvc - ok

18:35:09.0276 0x193c  [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys

18:35:09.0307 0x193c  WSDPrintDevice - ok

18:35:09.0312 0x193c  WSearch - ok

18:35:09.0413 0x193c  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll

18:35:09.0467 0x193c  wuauserv - ok

18:35:09.0490 0x193c  [ D3381DC54C34D79B22CEE0D65BA91B7C, 70DC4ADCA4C0C28BB133287511E329D1B6B9B97F96CDE5B1D2F1F59FE1A965D9 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

18:35:09.0513 0x193c  WudfPf - ok

18:35:09.0531 0x193c  [ CF8D590BE3373029D57AF80914190682, FB9641777E90A58C063FBE95F081DC6D2F4770827DE19108A9DC3E3D6B17B4BF ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

18:35:09.0554 0x193c  WUDFRd - ok

18:35:09.0602 0x193c  [ 7A95C95B6C4CF292D689106BCAE49543, 9029F489E1E817CE12839B8C6656E46190497D445DC3F43C20CF96E5E6BD0691 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

18:35:09.0642 0x193c  wudfsvc - ok

18:35:09.0664 0x193c  [ 9A3452B3C2A46C073166C5CF49FAD1AE, D6F95F51D8E37BA4CF403965EC08CCFEEA9EEFDBFC7752432EAEC19925BDA115 ] WwanSvc         C:\Windows\System32\wwansvc.dll

18:35:09.0680 0x193c  WwanSvc - ok

18:35:09.0771 0x193c  X6va028 - ok

18:35:09.0821 0x193c  [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys

18:35:09.0840 0x193c  xusb21 - ok

18:35:09.0887 0x193c  ================ Scan global ===============================

18:35:09.0912 0x193c  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

18:35:09.0951 0x193c  [ A171AC55EE4B4EE35C18EF0977017A72, E0E3E3B1C3708C30C7292CA09E41CA6C49EB850699126C6D2C0383A72C0097A6 ] C:\Windows\system32\winsrv.dll

18:35:09.0967 0x193c  [ A171AC55EE4B4EE35C18EF0977017A72, E0E3E3B1C3708C30C7292CA09E41CA6C49EB850699126C6D2C0383A72C0097A6 ] C:\Windows\system32\winsrv.dll

18:35:09.0997 0x193c  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

18:35:10.0035 0x193c  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

18:35:10.0046 0x193c  [ Global ] - ok

18:35:10.0046 0x193c  ================ Scan MBR ==================================

18:35:10.0052 0x193c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

18:35:11.0674 0x193c  \Device\Harddisk0\DR0 - ok

18:35:11.0675 0x193c  ================ Scan VBR ==================================

18:35:11.0680 0x193c  [ F6C6A6BE284CA0D59A7CCE9F3CD4B832 ] \Device\Harddisk0\DR0\Partition1

18:35:11.0742 0x193c  \Device\Harddisk0\DR0\Partition1 - ok

18:35:11.0773 0x193c  [ 81B60C4085DA7A9F8FC1FDC18C0CCA19 ] \Device\Harddisk0\DR0\Partition2

18:35:11.0843 0x193c  \Device\Harddisk0\DR0\Partition2 - ok

18:35:11.0844 0x193c  ================ Scan generic autorun ======================

18:35:11.0963 0x193c  [ 35BA4E6632BA690EA6421C1E03537D0E, 99D6B4DB12ABE3A7F44AB1B2D626978E85231185AE280D9516986027BC8385CB ] c:\Program Files\Microsoft Security Client\msseces.exe

18:35:11.0998 0x193c  MSC - ok

18:35:12.0080 0x193c  [ B2B879C0BA746CBB6A97212D8B5908B9, 6B38EB19064746EF42B6DABE754361377D6A460FD8E4C6B619EF4DD659F7357B ] C:\Program Files\SmartTechnology\Software\ProfilerU.exe

18:35:12.0098 0x193c  ProfilerU - detected UnsignedFile.Multi.Generic ( 1 )

18:35:14.0875 0x193c  Detect skipped due to KSN trusted

18:35:14.0876 0x193c  ProfilerU - ok

18:35:14.0906 0x193c  [ 3371D09E5A75889B1CFAF8C05CAFC3B8, 1CAA518BDFB69062355CD10611076E3DF9196DEB7C49EA11F0F2ADDA3DA1F79F ] C:\Program Files\SmartTechnology\Software\SaiMfd.exe

18:35:14.0944 0x193c  SaiMfd - detected UnsignedFile.Multi.Generic ( 1 )

18:35:17.0630 0x193c  Detect skipped due to KSN trusted

18:35:17.0630 0x193c  SaiMfd - ok

18:35:17.0935 0x193c  [ 95671F4BE988BC043F5828BB7E02CBD0, 7B7572CB569161C44BD63AAF9DEF2C806974576AE9ABFF94ED5A950EFFB3D222 ] C:\Program Files\Logitech Gaming Software\LCore.exe

18:35:18.0120 0x193c  Launch LCore - ok

18:35:18.0252 0x193c  [ C0E8E47500C524AAD99E9CB74567074F, 824491E84E7D86E4453C46BD807184E469990E3F481084F92FE3AB690700EA4D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe

18:35:18.0282 0x193c  StartCCC - ok

18:35:18.0403 0x193c  [ 80086ED442941DE2CA18CB6DAE8C1422, F7BE958F2E8E17970C238E3806F4A742B12DA09EB21093BD6371CF4B580C5BE4 ] C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe

18:35:18.0442 0x193c  Aeria Ignite - ok

18:35:18.0638 0x193c  [ 29A4BD2A63017D4E4F5081598A8A19AB, F0DBF54D10CB87925DA24A966BE9C8B83A0AF7CD19926E0AFFAE760D27563147 ] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

18:35:18.0736 0x193c  LogMeIn Hamachi Ui - ok

18:35:18.0848 0x193c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

18:35:18.0907 0x193c  Sidebar - ok

18:35:18.0928 0x193c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

18:35:18.0948 0x193c  mctadmin - ok

18:35:18.0993 0x193c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

18:35:19.0020 0x193c  Sidebar - ok

18:35:19.0025 0x193c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

18:35:19.0037 0x193c  mctadmin - ok

18:35:19.0128 0x193c  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe

18:35:19.0163 0x193c  Sidebar - ok

18:35:19.0321 0x193c  [ AA12056CF4286DAA1D0FD6D592E4F980, 7C1A324371B4D18293A00F157EB732B4F932DF6B41F4CCDDCA2F6A26B9F4B999 ] C:\Program Files (x86)\Steam\steam.exe

18:35:19.0374 0x193c  Steam - ok

18:35:19.0408 0x193c  [ 8BDBB441D80EDCF1B361BF8D1C8B5B2D, 74C54B03C94646A8E7283EBBD194946FF83F7E5016E5759D6BB3AAC1295D79EF ] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

18:35:19.0439 0x193c  HydraVisionDesktopManager - detected UnsignedFile.Multi.Generic ( 1 )

18:35:22.0102 0x193c  Detect skipped due to KSN trusted

18:35:22.0102 0x193c  HydraVisionDesktopManager - ok

18:35:22.0273 0x193c  [ 05EF48203CC819B57F8665217FB6DDF5, D34DA867FA4F6B8BF5BCF5C9DE5E5CC315632CFA8A4056567DEF431CEE524A8E ] C:\Program Files (x86)\Origin\Origin.exe

18:35:22.0338 0x193c  EADM - ok

18:35:22.0415 0x193c  [ E3033B674E7941CA6491AC1B853316D9, 5B9E0445DA0AB728877BDB73C4FA2A5AD05CF6E5DECB88F3A761A0259C34C2F6 ] C:\Program Files\Sandboxie\SbieCtrl.exe

18:35:22.0437 0x193c  SandboxieControl - ok

18:35:22.0694 0x193c  [ D6E2ED7F1F7BE7CCB8676491BF950B57, CBF07EE746F2C27ACC532E83ADC43FBE954DC3C598C4333F13B1A7615AEA9AD5 ] C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

18:35:22.0778 0x193c  Akamai NetSession Interface - ok

18:35:22.0867 0x193c  [ DE6928F6623EEAD69AFFF62E26676C85, D42B6164158AE5B57DE2E26CEA9BD581E9E59FA1BE30A93772AE1951857CACCE ] C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySqlNotifier.exe

18:35:22.0888 0x193c  MySQL Notifier - detected UnsignedFile.Multi.Generic ( 1 )

18:35:25.0570 0x193c  Detect skipped due to KSN trusted

18:35:25.0570 0x193c  MySQL Notifier - ok

18:35:25.0691 0x193c  [ 86F0D0B3A07C142C81DAB47E8495A822, DA214C967FFE0B3E2BBCE99E7330DBB74EB0BB7F21833FE689277109B0FF92B5 ] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

18:35:25.0698 0x193c  BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - ok

18:35:25.0922 0x193c  [ 36C55F2645D61F15457D23B56F0149DA, 410DDEA347DD8AA58838560CC01AABD3F7D40A6879482AADD09BC4A82E26D48D ] C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe

18:35:26.0050 0x193c  GalaxyClient - ok

18:35:26.0506 0x193c  [ 921490A18BB698DE4158708822DB12BB, 93614F68186A8782ADE3FEF20AA9EF4EA0885776086C31323AB621BC3A6D81B0 ] C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar

18:35:26.0684 0x193c  FowlsHack 3.11.jar - detected UnsignedFile.Multi.Generic ( 1 )

18:35:29.0353 0x193c  FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - warning

18:35:44.0977 0x193c  Waiting for KSN requests completion. In queue: 2

18:35:45.0987 0x193c  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.8.204.0 ), 0x61000 ( enabled : updated )

18:35:45.0992 0x193c  Win FW state via NFP2: enabled

18:35:48.0686 0x193c  ============================================================

18:35:48.0686 0x193c  Scan finished

18:35:48.0686 0x193c  ============================================================

18:35:48.0696 0x0a98  Detected object count: 2

18:35:48.0696 0x0a98  Actual detected object count: 2

18:36:21.0598 0x0a98  HiPatchService ( UnsignedFile.Multi.Generic ) - skipped by user

18:36:21.0598 0x0a98  HiPatchService ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:36:21.0600 0x0a98  FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - skipped by user

18:36:21.0600 0x0a98  FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:36:25.0193 0x0c38  Deinitialize success

Nehme an dass es dieses "FowlsHack" sein wird :aufsmaul:

Danke im Voraus,
Shortyoo|Tobi

Zitat:

C:\Users\Tobias\Desktop\NavanBethrax NostaleMultiHack v. 1.1.1 [Public].exe

Was soll das denn?

Zitat:

18:36:21.0600 0x0a98 FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - skipped by user
18:36:21.0600 0x0a98 FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - User select action: Skip

Starte TDSSkiller.exe mit Doppelklick.
Vista und Win7 User mit Rechtsklick "als Administrator starten"

Drücke auf Start Scan.
Mache während dem Scan nichts am Rechner
Gehe sicher das Cure ( default ) angehackt ist !
Drücke Continue --> Reboot.

TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern ( Meistens C:\ )
Als Beispiel: C:\TDSSKiller.<version_date_time>log.txt

Poste den Inhalt bitte hier in deinen Thread.

Zitat:

C:\Users\Tobias\Desktop\NavanBethrax NostaleMultiHack v. 1.1.1 [Public].exe

Was soll das denn?

Hmm :D

Zitat:

Starte TDSSkiller.exe mit Doppelklick.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Drücke auf Start Scan.
Mache während dem Scan nichts am Rechner
Gehe sicher das Cure ( default ) angehackt ist !
Drücke Continue --> Reboot.

Die "Cure" Funktion ist bei mir nicht verfügbar, nur "Skip", "Delete" und "Continue".

Delete. Und lösch den ganzen Crack und Hack-KRam, sonst gibt es keinen weitren SUpport.

Zitat:

Delete. Und lösch den ganzen Crack und Hack-KRam, sonst gibt es keinen weitren SUpport.

Ist doch alles runter?

Code:

20:13:20.0061 0x1be8  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04

20:13:22.0414 0x1be8  ============================================================

20:13:22.0415 0x1be8  Current date / time: 2015/07/23 20:13:22.0414

20:13:22.0415 0x1be8  SystemInfo:

20:13:22.0415 0x1be8  

20:13:22.0415 0x1be8  OS Version: 6.1.7601 ServicePack: 1.0

20:13:22.0415 0x1be8  Product type: Workstation

20:13:22.0415 0x1be8  ComputerName: SHORTY

20:13:22.0415 0x1be8  UserName: Tobias

20:13:22.0415 0x1be8  Windows directory: C:\Windows

20:13:22.0415 0x1be8  System windows directory: C:\Windows

20:13:22.0415 0x1be8  Running under WOW64

20:13:22.0415 0x1be8  Processor architecture: Intel x64

20:13:22.0415 0x1be8  Number of processors: 8

20:13:22.0415 0x1be8  Page size: 0x1000

20:13:22.0415 0x1be8  Boot type: Normal boot

20:13:22.0416 0x1be8  ============================================================

20:13:24.0419 0x1be8  KLMD registered as C:\Windows\system32\drivers\36349419.sys

20:13:24.0802 0x1be8  System UUID: {22B5A011-CA6F-8C77-C87B-41E78AF8AA98}

20:13:25.0278 0x1be8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

20:13:25.0283 0x1be8  ============================================================

20:13:25.0283 0x1be8  \Device\Harddisk0\DR0:

20:13:25.0283 0x1be8  MBR partitions:

20:13:25.0283 0x1be8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

20:13:25.0283 0x1be8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800

20:13:25.0283 0x1be8  ============================================================

20:13:25.0356 0x1be8  C: <-> \Device\Harddisk0\DR0\Partition2

20:13:25.0356 0x1be8  ============================================================

20:13:25.0356 0x1be8  Initialize success

20:13:25.0356 0x1be8  ============================================================

20:13:30.0893 0x197c  ============================================================

20:13:30.0894 0x197c  Scan started

20:13:30.0894 0x197c  Mode: Manual; SigCheck; TDLFS; 

20:13:30.0894 0x197c  ============================================================

20:13:30.0894 0x197c  KSN ping started

20:13:44.0566 0x197c  KSN ping finished: true

20:13:47.0014 0x197c  ================ Scan system memory ========================

20:13:47.0014 0x197c  Scan was interrupted by user!

20:13:47.0046 0x197c  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.8.204.0 ), 0x61000 ( enabled : updated )

20:13:47.0049 0x197c  Win FW state via NFP2: enabled

20:13:49.0738 0x197c  ============================================================

20:13:49.0738 0x197c  Scan finished

20:13:49.0738 0x197c  ============================================================

20:13:49.0747 0x1018  Detected object count: 0

20:13:49.0747 0x1018  Actual detected object count: 0

20:14:21.0293 0x0fdc  ============================================================

20:14:21.0293 0x0fdc  Scan started

20:14:21.0294 0x0fdc  Mode: Manual; SigCheck; TDLFS; 

20:14:21.0294 0x0fdc  ============================================================

20:14:21.0294 0x0fdc  KSN ping started

20:14:24.0032 0x0fdc  KSN ping finished: true

20:14:25.0163 0x0fdc  ================ Scan system memory ========================

20:14:25.0163 0x0fdc  System memory - ok

20:14:25.0164 0x0fdc  ================ Scan services =============================

20:14:25.0404 0x0fdc  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

20:14:25.0444 0x0fdc  1394ohci - ok

20:14:25.0461 0x0fdc  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

20:14:25.0474 0x0fdc  ACPI - ok

20:14:25.0488 0x0fdc  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

20:14:25.0497 0x0fdc  AcpiPmi - ok

20:14:25.0618 0x0fdc  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

20:14:25.0630 0x0fdc  AdobeARMservice - ok

20:14:25.0765 0x0fdc  [ 011BD8A49AF856E8A8EE32652D1CFC05, 7E45CD5ED185DFCA94069640C19D3079879FD1F3069873D0302ACC372F756F90 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

20:14:25.0786 0x0fdc  AdobeFlashPlayerUpdateSvc - ok

20:14:25.0837 0x0fdc  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

20:14:25.0858 0x0fdc  adp94xx - ok

20:14:25.0896 0x0fdc  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys

20:14:25.0924 0x0fdc  adpahci - ok

20:14:25.0956 0x0fdc  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

20:14:25.0966 0x0fdc  adpu320 - ok

20:14:25.0998 0x0fdc  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

20:14:26.0021 0x0fdc  AeLookupSvc - ok

20:14:26.0077 0x0fdc  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys

20:14:26.0093 0x0fdc  AFD - ok

20:14:26.0107 0x0fdc  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

20:14:26.0115 0x0fdc  agp440 - ok

20:14:26.0136 0x0fdc  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

20:14:26.0145 0x0fdc  ALG - ok

20:14:26.0171 0x0fdc  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

20:14:26.0178 0x0fdc  aliide - ok

20:14:26.0241 0x0fdc  [ 30B0236674498756CA3F7D74832DC58B, 15A48442215AE059D06CE5589ED76706E2C53A378135918484ADD4E98B83E21A ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

20:14:26.0270 0x0fdc  AMD External Events Utility - ok

20:14:26.0370 0x0fdc  AMD FUEL Service - ok

20:14:26.0377 0x0fdc  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

20:14:26.0396 0x0fdc  amdide - ok

20:14:26.0402 0x0fdc  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

20:14:26.0412 0x0fdc  AmdK8 - ok

20:14:26.0723 0x0fdc  [ 210E4B64FEC9DC5173B98E4475E8F7BE, 586923C511472F0F39E238D1E66CD258C7FBC58DB526DB63DAF545342959FAC9 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

20:14:26.0962 0x0fdc  amdkmdag - ok

20:14:27.0039 0x0fdc  [ B5951DDF517FE999848EE607C2C880BA, 281EB29FCF39ABB25FF09013C3DAA182A745247F46B5F6252AAE6EB301C60E60 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

20:14:27.0058 0x0fdc  amdkmdap - ok

20:14:27.0099 0x0fdc  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

20:14:27.0121 0x0fdc  AmdPPM - ok

20:14:27.0151 0x0fdc  [ 6EC6D772EAE38DC17C14AED9B178D24B, B4FB936B31B1265B8CC6B426C64965C34D0CCF1638E645ACD65E88F4AFFC57A6 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

20:14:27.0160 0x0fdc  amdsata - ok

20:14:27.0191 0x0fdc  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

20:14:27.0203 0x0fdc  amdsbs - ok

20:14:27.0228 0x0fdc  [ 1142A21DB581A84EA5597B03A26EBAA0, F94EB140D0CD068760D7EB081FF75154C75DAC75E5E24B6DE4E4F9CE65A70343 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

20:14:27.0236 0x0fdc  amdxata - ok

20:14:27.0242 0x0fdc  [ E8CCB797DAF80779C768BD3A9FC8FCAF, 781BD878CA34D8B6D2FE238439CD173E95449260428859BEA92866D41B1284F4 ] AODDriver4.2.0  C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys

20:14:27.0250 0x0fdc  AODDriver4.2.0 - ok

20:14:27.0306 0x0fdc  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys

20:14:27.0329 0x0fdc  AppID - ok

20:14:27.0350 0x0fdc  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

20:14:27.0358 0x0fdc  AppIDSvc - ok

20:14:27.0419 0x0fdc  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll

20:14:27.0442 0x0fdc  Appinfo - ok

20:14:27.0477 0x0fdc  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys

20:14:27.0497 0x0fdc  arc - ok

20:14:27.0518 0x0fdc  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys

20:14:27.0529 0x0fdc  arcsas - ok

20:14:27.0549 0x0fdc  [ 22842362DF890F5492F85AA60916A697, EC01380B1C9BF4CFBA018FC314563F0785280172A2A9B51D50F088E7101951EF ] asmthub3        C:\Windows\system32\DRIVERS\asmthub3.sys

20:14:27.0564 0x0fdc  asmthub3 - ok

20:14:27.0594 0x0fdc  [ 08E2D77766CC05E75A0707207D9FC684, 6CF3B12B2B3375B715A3EBC66EF148CEA2248D448A3A37875B7B1BC7CDA40FDD ] asmtxhci        C:\Windows\system32\DRIVERS\asmtxhci.sys

20:14:27.0609 0x0fdc  asmtxhci - ok

20:14:27.0728 0x0fdc  [ 041672BAC20B34EAEDEB033129655DD8, 14264732F0CACF5732C7652C411F0A1C3B4A4417C31DD289C8AFF170BE683E5A ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

20:14:27.0751 0x0fdc  aspnet_state - ok

20:14:27.0800 0x0fdc  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

20:14:27.0830 0x0fdc  AsyncMac - ok

20:14:27.0833 0x0fdc  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

20:14:27.0842 0x0fdc  atapi - ok

20:14:27.0865 0x0fdc  [ 770A3B0D78232B0C1054495392A1FBA3, 733BB08BAFE42E848F3A3CDFD80A2C37DB829CAD2E18B3D6299FDEE6EF30C9CD ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

20:14:27.0874 0x0fdc  AtiHDAudioService - ok

20:14:27.0913 0x0fdc  [ FC0E8778C000291CAF60EB88C011E931, 09BCCA3DE01021AEF76DFB46F01D21BA6FF409E816FA7547E5C3DFBF3A615ED2 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys

20:14:27.0925 0x0fdc  atksgt - ok

20:14:27.0990 0x0fdc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

20:14:28.0010 0x0fdc  AudioEndpointBuilder - ok

20:14:28.0030 0x0fdc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll

20:14:28.0049 0x0fdc  AudioSrv - ok

20:14:28.0085 0x0fdc  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

20:14:28.0113 0x0fdc  AxInstSV - ok

20:14:28.0140 0x0fdc  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

20:14:28.0155 0x0fdc  b06bdrv - ok

20:14:28.0219 0x0fdc  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

20:14:28.0241 0x0fdc  b57nd60a - ok

20:14:28.0300 0x0fdc  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

20:14:28.0322 0x0fdc  BDESVC - ok

20:14:28.0364 0x0fdc  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

20:14:28.0389 0x0fdc  Beep - ok

20:14:28.0515 0x0fdc  [ C88B130365524EC69F6B8E0D31D7561D, 5D3797C93420477F4509C037511D497448EFDA7D567E15CB623FB5EEE9209146 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe

20:14:28.0547 0x0fdc  BEService - ok

20:14:28.0621 0x0fdc  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

20:14:28.0640 0x0fdc  BFE - ok

20:14:28.0686 0x0fdc  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

20:14:28.0722 0x0fdc  BITS - ok

20:14:28.0736 0x0fdc  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

20:14:28.0744 0x0fdc  blbdrive - ok

20:14:28.0773 0x0fdc  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

20:14:28.0782 0x0fdc  bowser - ok

20:14:28.0798 0x0fdc  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

20:14:28.0807 0x0fdc  BrFiltLo - ok

20:14:28.0823 0x0fdc  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

20:14:28.0832 0x0fdc  BrFiltUp - ok

20:14:28.0870 0x0fdc  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

20:14:28.0880 0x0fdc  Browser - ok

20:14:28.0888 0x0fdc  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

20:14:28.0901 0x0fdc  Brserid - ok

20:14:28.0909 0x0fdc  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

20:14:28.0919 0x0fdc  BrSerWdm - ok

20:14:28.0922 0x0fdc  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

20:14:28.0931 0x0fdc  BrUsbMdm - ok

20:14:28.0940 0x0fdc  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

20:14:28.0947 0x0fdc  BrUsbSer - ok

20:14:28.0959 0x0fdc  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

20:14:28.0969 0x0fdc  BTHMODEM - ok

20:14:28.0982 0x0fdc  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

20:14:29.0005 0x0fdc  bthserv - ok

20:14:29.0040 0x0fdc  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

20:14:29.0062 0x0fdc  cdfs - ok

20:14:29.0149 0x0fdc  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

20:14:29.0170 0x0fdc  cdrom - ok

20:14:29.0198 0x0fdc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

20:14:29.0229 0x0fdc  CertPropSvc - ok

20:14:29.0249 0x0fdc  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys

20:14:29.0259 0x0fdc  circlass - ok

20:14:29.0301 0x0fdc  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys

20:14:29.0314 0x0fdc  CLFS - ok

20:14:29.0391 0x0fdc  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

20:14:29.0408 0x0fdc  clr_optimization_v2.0.50727_32 - ok

20:14:29.0491 0x0fdc  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

20:14:29.0506 0x0fdc  clr_optimization_v2.0.50727_64 - ok

20:14:29.0606 0x0fdc  [ 397C2677C25CBE213F3270245A401624, 8121E37108DE7A0402DC5111EBF452F91893B63EECE3AAD9EACF61C40D3FC182 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

20:14:29.0621 0x0fdc  clr_optimization_v4.0.30319_32 - ok

20:14:29.0636 0x0fdc  [ 29139759FCC4E4E0531ABE2EA82CE646, CFF7B2F4A9B37D343BE18DC40161DC03FA9DB308CAE9E0B3DF1FCDC3EBAC0C08 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

20:14:29.0647 0x0fdc  clr_optimization_v4.0.30319_64 - ok

20:14:29.0673 0x0fdc  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

20:14:29.0681 0x0fdc  CmBatt - ok

20:14:29.0687 0x0fdc  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

20:14:29.0694 0x0fdc  cmdide - ok

20:14:29.0720 0x0fdc  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys

20:14:29.0739 0x0fdc  CNG - ok

20:14:29.0754 0x0fdc  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

20:14:29.0761 0x0fdc  Compbatt - ok

20:14:29.0777 0x0fdc  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

20:14:29.0787 0x0fdc  CompositeBus - ok

20:14:29.0804 0x0fdc  COMSysApp - ok

20:14:29.0812 0x0fdc  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

20:14:29.0819 0x0fdc  crcdisk - ok

20:14:29.0849 0x0fdc  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll

20:14:29.0860 0x0fdc  CryptSvc - ok

20:14:29.0918 0x0fdc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

20:14:29.0962 0x0fdc  DcomLaunch - ok

20:14:30.0014 0x0fdc  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

20:14:30.0050 0x0fdc  defragsvc - ok

20:14:30.0070 0x0fdc  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

20:14:30.0093 0x0fdc  DfsC - ok

20:14:30.0156 0x0fdc  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

20:14:30.0199 0x0fdc  Dhcp - ok

20:14:30.0213 0x0fdc  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

20:14:30.0235 0x0fdc  discache - ok

20:14:30.0291 0x0fdc  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys

20:14:30.0306 0x0fdc  Disk - ok

20:14:30.0331 0x0fdc  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

20:14:30.0350 0x0fdc  Dnscache - ok

20:14:30.0370 0x0fdc  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

20:14:30.0396 0x0fdc  dot3svc - ok

20:14:30.0425 0x0fdc  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

20:14:30.0455 0x0fdc  DPS - ok

20:14:30.0534 0x0fdc  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

20:14:30.0543 0x0fdc  drmkaud - ok

20:14:30.0566 0x0fdc  [ 33F90B202E9DD9B7D489EB59310FDC34, 6ECF6669433E090E9CF6B1875AF18D2C06F8CDB3901D58BF89C3E2202574ABBD ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys

20:14:30.0581 0x0fdc  dtsoftbus01 - ok

20:14:30.0656 0x0fdc  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

20:14:30.0681 0x0fdc  DXGKrnl - ok

20:14:30.0725 0x0fdc  EagleX64 - ok

20:14:30.0756 0x0fdc  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

20:14:30.0797 0x0fdc  EapHost - ok

20:14:30.0845 0x0fdc  EasyAntiCheat - ok

20:14:30.0970 0x0fdc  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

20:14:31.0035 0x0fdc  ebdrv - ok

20:14:31.0074 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] EFS             C:\Windows\System32\lsass.exe

20:14:31.0083 0x0fdc  EFS - ok

20:14:31.0198 0x0fdc  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

20:14:31.0226 0x0fdc  ehRecvr - ok

20:14:31.0243 0x0fdc  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

20:14:31.0252 0x0fdc  ehSched - ok

20:14:31.0309 0x0fdc  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

20:14:31.0331 0x0fdc  elxstor - ok

20:14:31.0349 0x0fdc  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

20:14:31.0357 0x0fdc  ErrDev - ok

20:14:31.0382 0x0fdc  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

20:14:31.0411 0x0fdc  EventSystem - ok

20:14:31.0435 0x0fdc  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

20:14:31.0460 0x0fdc  exfat - ok

20:14:31.0471 0x0fdc  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

20:14:31.0496 0x0fdc  fastfat - ok

20:14:31.0531 0x0fdc  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

20:14:31.0551 0x0fdc  Fax - ok

20:14:31.0572 0x0fdc  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys

20:14:31.0580 0x0fdc  fdc - ok

20:14:31.0623 0x0fdc  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

20:14:31.0663 0x0fdc  fdPHost - ok

20:14:31.0671 0x0fdc  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

20:14:31.0695 0x0fdc  FDResPub - ok

20:14:31.0699 0x0fdc  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

20:14:31.0707 0x0fdc  FileInfo - ok

20:14:31.0718 0x0fdc  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

20:14:31.0740 0x0fdc  Filetrace - ok

20:14:31.0748 0x0fdc  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

20:14:31.0756 0x0fdc  flpydisk - ok

20:14:31.0769 0x0fdc  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

20:14:31.0781 0x0fdc  FltMgr - ok

20:14:31.0866 0x0fdc  [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache       C:\Windows\system32\FntCache.dll

20:14:31.0897 0x0fdc  FontCache - ok

20:14:31.0978 0x0fdc  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

20:14:31.0996 0x0fdc  FontCache3.0.0.0 - ok

20:14:32.0017 0x0fdc  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

20:14:32.0027 0x0fdc  FsDepends - ok

20:14:32.0043 0x0fdc  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

20:14:32.0053 0x0fdc  Fs_Rec - ok

20:14:32.0068 0x0fdc  [ 1F7B25B858FA27015169FE95E54108ED, 72DD12E924AA7273B3E4BDD2A2C581DECE304C8EF3D44EA79ABB032F3F95DCE5 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

20:14:32.0081 0x0fdc  fvevol - ok

20:14:32.0106 0x0fdc  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

20:14:32.0113 0x0fdc  gagp30kx - ok

20:14:32.0251 0x0fdc  [ 7037D548B726108F9420B9F345573DC4, 659202CD4F8E789B47D9E7281312DD87B4718A615EC8B5C7F143E84AC7B9ACA3 ] GalaxyClientService C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe

20:14:32.0287 0x0fdc  GalaxyClientService - ok

20:14:32.0632 0x0fdc  [ 7747954B78DEED16169FC816108FE995, 677A09A5702884A138C83739487AF23EF6E4C8F79875997D26417E823D692293 ] GalaxyCommunication C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe

20:14:32.0758 0x0fdc  GalaxyCommunication - ok

20:14:32.0795 0x0fdc  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

20:14:32.0829 0x0fdc  gpsvc - ok

20:14:32.0905 0x0fdc  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

20:14:32.0917 0x0fdc  gupdate - ok

20:14:32.0935 0x0fdc  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

20:14:32.0945 0x0fdc  gupdatem - ok

20:14:32.0962 0x0fdc  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys

20:14:32.0971 0x0fdc  hamachi - ok

20:14:33.0114 0x0fdc  [ 3FF6FCC221F5128BE77B13BF523F2614, CAB9E7CDEA2EF36E986F2B690C1F19084B30E7F2C28E22A87BA9DBECDAD31F96 ] Hamachi2Svc     C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

20:14:33.0164 0x0fdc  Hamachi2Svc - ok

20:14:33.0189 0x0fdc  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

20:14:33.0197 0x0fdc  hcw85cir - ok

20:14:33.0253 0x0fdc  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

20:14:33.0278 0x0fdc  HdAudAddService - ok

20:14:33.0289 0x0fdc  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

20:14:33.0300 0x0fdc  HDAudBus - ok

20:14:33.0303 0x0fdc  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

20:14:33.0311 0x0fdc  HidBatt - ok

20:14:33.0315 0x0fdc  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

20:14:33.0325 0x0fdc  HidBth - ok

20:14:33.0329 0x0fdc  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys

20:14:33.0339 0x0fdc  HidIr - ok

20:14:33.0344 0x0fdc  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

20:14:33.0366 0x0fdc  hidserv - ok

20:14:33.0385 0x0fdc  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

20:14:33.0385 0x0fdc  HidUsb - ok

20:14:33.0473 0x0fdc  [ C193FE8507607B2917A6F9B554132559, 962B065219D305B2DE1B4816D234438FBF8F6A79D45389683A21657733C14D5B ] HiPatchService  C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

20:14:33.0479 0x0fdc  HiPatchService - detected UnsignedFile.Multi.Generic ( 1 )

20:14:36.0260 0x0fdc  HiPatchService ( UnsignedFile.Multi.Generic ) - warning

20:14:38.0982 0x0fdc  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

20:14:39.0022 0x0fdc  hkmsvc - ok

20:14:39.0050 0x0fdc  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

20:14:39.0062 0x0fdc  HomeGroupListener - ok

20:14:39.0099 0x0fdc  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

20:14:39.0122 0x0fdc  HomeGroupProvider - ok

20:14:39.0157 0x0fdc  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

20:14:39.0179 0x0fdc  HpSAMD - ok

20:14:39.0213 0x0fdc  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

20:14:39.0233 0x0fdc  HTTP - ok

20:14:39.0239 0x0fdc  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

20:14:39.0246 0x0fdc  hwpolicy - ok

20:14:39.0257 0x0fdc  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

20:14:39.0267 0x0fdc  i8042prt - ok

20:14:39.0287 0x0fdc  [ 3DF4395A7CF8B7A72A5F4606366B8C2D, 483588B8FC6E05488ED631C4E1CFC398553FEBFA2CD2BB527B4DF12D19774F80 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

20:14:39.0301 0x0fdc  iaStorV - ok

20:14:39.0401 0x0fdc  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

20:14:39.0428 0x0fdc  idsvc - ok

20:14:39.0431 0x0fdc  IEEtwCollectorService - ok

20:14:39.0455 0x0fdc  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

20:14:39.0462 0x0fdc  iirsp - ok

20:14:39.0503 0x0fdc  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

20:14:39.0525 0x0fdc  IKEEXT - ok

20:14:39.0542 0x0fdc  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

20:14:39.0549 0x0fdc  intelide - ok

20:14:39.0568 0x0fdc  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys

20:14:39.0577 0x0fdc  intelppm - ok

20:14:39.0611 0x0fdc  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

20:14:39.0634 0x0fdc  IPBusEnum - ok

20:14:39.0654 0x0fdc  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

20:14:39.0676 0x0fdc  IpFilterDriver - ok

20:14:39.0698 0x0fdc  [ A34A587FFFD45FA649FBA6D03784D257, C9A2BCD4E2A5EB6E320092A3AFD5737ECDCDA0B83EE42314A23C4978F2974767 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

20:14:39.0729 0x0fdc  iphlpsvc - ok

20:14:39.0734 0x0fdc  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

20:14:39.0743 0x0fdc  IPMIDRV - ok

20:14:39.0747 0x0fdc  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

20:14:39.0770 0x0fdc  IPNAT - ok

20:14:39.0798 0x0fdc  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

20:14:39.0809 0x0fdc  IRENUM - ok

20:14:39.0812 0x0fdc  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

20:14:39.0819 0x0fdc  isapnp - ok

20:14:39.0838 0x0fdc  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

20:14:39.0849 0x0fdc  iScsiPrt - ok

20:14:39.0881 0x0fdc  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

20:14:39.0889 0x0fdc  kbdclass - ok

20:14:39.0902 0x0fdc  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

20:14:39.0910 0x0fdc  kbdhid - ok

20:14:39.0941 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] KeyIso          C:\Windows\system32\lsass.exe

20:14:39.0949 0x0fdc  KeyIso - ok

20:14:39.0994 0x0fdc  [ C0A6C3D6E02B61B5D100FE17306C276F, F57C7BCC39B30F1DF739D07B76BA18EB68D12D8D1BD13B6AC8DC712C29119495 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

20:14:40.0017 0x0fdc  KSecDD - ok

20:14:40.0074 0x0fdc  [ 7A7328E427694CC7244235C3BC299F80, 7FC2E1F3F93B3334C3A8961CA58B4F38524650F6D8DA9FFA1FB43E1A2B86B710 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

20:14:40.0085 0x0fdc  KSecPkg - ok

20:14:40.0113 0x0fdc  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

20:14:40.0139 0x0fdc  ksthunk - ok

20:14:40.0202 0x0fdc  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

20:14:40.0242 0x0fdc  KtmRm - ok

20:14:40.0269 0x0fdc  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

20:14:40.0295 0x0fdc  LanmanServer - ok

20:14:40.0315 0x0fdc  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

20:14:40.0339 0x0fdc  LanmanWorkstation - ok

20:14:40.0388 0x0fdc  [ FA529FB35694C24BF98A9EF67C1CD9D0, 7B3C587C38CF13D514140F0A55E58997D6071D1DEFD97E274E3F490660AC6075 ] LGBusEnum       C:\Windows\system32\drivers\LGBusEnum.sys

20:14:40.0404 0x0fdc  LGBusEnum - ok

20:14:40.0436 0x0fdc  [ 94B29CE153765E768F004FB3440BE2B0, E74C01CEBDA589CDDE35CBCBAA18700E3742DD3B48A90DB3630992467FFC5024 ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys

20:14:40.0443 0x0fdc  LGVirHid - ok

20:14:40.0517 0x0fdc  [ 156AB2E56DC3CA0B582E3362E07CDED7, 7B03929273861690DC42E4C686E655BE5A1C60136AE5E739D7E62306AFD4AB9A ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys

20:14:40.0533 0x0fdc  lirsgt - ok

20:14:40.0572 0x0fdc  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

20:14:40.0602 0x0fdc  lltdio - ok

20:14:40.0650 0x0fdc  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

20:14:40.0677 0x0fdc  lltdsvc - ok

20:14:40.0732 0x0fdc  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

20:14:40.0768 0x0fdc  lmhosts - ok

20:14:40.0821 0x0fdc  [ D6BF6FD055BD719F3D62E51B90857159, A7777D18E404164B4DA531AD94D2A712D9CC6A9288795B7388037752A558E96F ] LMIGuardianSvc  C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

20:14:40.0835 0x0fdc  LMIGuardianSvc - ok

20:14:40.0891 0x0fdc  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

20:14:40.0900 0x0fdc  LSI_FC - ok

20:14:40.0915 0x0fdc  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

20:14:40.0923 0x0fdc  LSI_SAS - ok

20:14:40.0934 0x0fdc  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

20:14:40.0941 0x0fdc  LSI_SAS2 - ok

20:14:40.0962 0x0fdc  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

20:14:40.0971 0x0fdc  LSI_SCSI - ok

20:14:40.0990 0x0fdc  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

20:14:41.0013 0x0fdc  luafv - ok

20:14:41.0072 0x0fdc  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

20:14:41.0099 0x0fdc  Mcx2Svc - ok

20:14:41.0105 0x0fdc  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys

20:14:41.0113 0x0fdc  megasas - ok

20:14:41.0133 0x0fdc  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

20:14:41.0147 0x0fdc  MegaSR - ok

20:14:41.0170 0x0fdc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

20:14:41.0193 0x0fdc  MMCSS - ok

20:14:41.0209 0x0fdc  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

20:14:41.0231 0x0fdc  Modem - ok

20:14:41.0240 0x0fdc  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

20:14:41.0249 0x0fdc  monitor - ok

20:14:41.0313 0x0fdc  [ C030F9E822A057C1A7A9BB4EA3E8877E, 2CCEC87DEB972B6B0196A08D3781002929E9107137FE3A61F1626D3BEE26630A ] MotioninJoyXFilter C:\Windows\system32\DRIVERS\MijXfilt.sys

20:14:41.0335 0x0fdc  MotioninJoyXFilter - detected UnsignedFile.Multi.Generic ( 1 )

20:14:44.0020 0x0fdc  Detect skipped due to KSN trusted

20:14:44.0020 0x0fdc  MotioninJoyXFilter - ok

20:14:44.0028 0x0fdc  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

20:14:44.0044 0x0fdc  mouclass - ok

20:14:44.0047 0x0fdc  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

20:14:44.0058 0x0fdc  mouhid - ok

20:14:44.0086 0x0fdc  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

20:14:44.0097 0x0fdc  mountmgr - ok

20:14:44.0158 0x0fdc  [ 73150F67D20270FF95A021A22E64F28A, A8878DEFBE437FB453F8E9243FB5C787D07AC7415A4475388D479C10417C524F ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys

20:14:44.0182 0x0fdc  MpFilter - ok

20:14:44.0205 0x0fdc  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

20:14:44.0215 0x0fdc  mpio - ok

20:14:44.0281 0x0fdc  MpKsla6ad0bc4 - ok

20:14:44.0344 0x0fdc  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

20:14:44.0378 0x0fdc  mpsdrv - ok

20:14:44.0405 0x0fdc  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

20:14:44.0441 0x0fdc  MpsSvc - ok

20:14:44.0464 0x0fdc  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

20:14:44.0474 0x0fdc  MRxDAV - ok

20:14:44.0525 0x0fdc  [ 1877EB1495CFBDAB27D6A32F6DDF3818, 3818055C66AB12A335A905CFFE5D05347F15AE488861C5C183E62E8E0881DA86 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

20:14:44.0550 0x0fdc  mrxsmb - ok

20:14:44.0618 0x0fdc  [ 21AF322605D8C7F2A627C22634D1C9C9, 6B783F95D093FEFB260EA9568926BBB3CB8ED0783184DB3A18733E211933BADD ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

20:14:44.0647 0x0fdc  mrxsmb10 - ok

20:14:44.0666 0x0fdc  [ 45A03A0B6461EFBEE77E0A6AC2816EDA, CFB0C11387F2EC49FD6B69EF747962114EBA6F8B4B4DEC3627E9E969775C4D7E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

20:14:44.0676 0x0fdc  mrxsmb20 - ok

20:14:44.0680 0x0fdc  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

20:14:44.0688 0x0fdc  msahci - ok

20:14:44.0720 0x0fdc  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

20:14:44.0729 0x0fdc  msdsm - ok

20:14:44.0758 0x0fdc  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

20:14:44.0768 0x0fdc  MSDTC - ok

20:14:44.0799 0x0fdc  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

20:14:44.0820 0x0fdc  Msfs - ok

20:14:44.0836 0x0fdc  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

20:14:44.0857 0x0fdc  mshidkmdf - ok

20:14:44.0869 0x0fdc  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

20:14:44.0876 0x0fdc  msisadrv - ok

20:14:44.0916 0x0fdc  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

20:14:44.0955 0x0fdc  MSiSCSI - ok

20:14:44.0957 0x0fdc  msiserver - ok

20:14:44.0979 0x0fdc  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

20:14:45.0000 0x0fdc  MSKSSRV - ok

20:14:45.0066 0x0fdc  [ CE996C1821021ADF8E28E80A54E846A8, 99042E895B6C2EA80F3BA65563A12C8EBA882E3AD6A21DD8E799B0112C75DDD2 ] MsMpSvc         c:\Program Files\Microsoft Security Client\MsMpEng.exe

20:14:45.0088 0x0fdc  MsMpSvc - ok

20:14:45.0146 0x0fdc  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

20:14:45.0187 0x0fdc  MSPCLOCK - ok

20:14:45.0216 0x0fdc  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

20:14:45.0237 0x0fdc  MSPQM - ok

20:14:45.0253 0x0fdc  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

20:14:45.0266 0x0fdc  MsRPC - ok

20:14:45.0280 0x0fdc  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

20:14:45.0287 0x0fdc  mssmbios - ok

20:14:45.0347 0x0fdc  MSSQL$SQLEXPRESS - ok

20:14:45.0415 0x0fdc  [ 7A2A8C975356858EB38466A6B1592E8D, 97C3DFCCBE1BA92EE7E4848993D6F369D543A53344A6512C84EF03E7D737A482 ] MSSQLServerADHelper100 c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

20:14:45.0430 0x0fdc  MSSQLServerADHelper100 - ok

20:14:45.0457 0x0fdc  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

20:14:45.0489 0x0fdc  MSTEE - ok

20:14:45.0531 0x0fdc  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

20:14:45.0539 0x0fdc  MTConfig - ok

20:14:45.0552 0x0fdc  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

20:14:45.0571 0x0fdc  Mup - ok

20:14:45.0661 0x0fdc  MySQL55 - ok

20:14:45.0716 0x0fdc  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

20:14:45.0761 0x0fdc  napagent - ok

20:14:45.0845 0x0fdc  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

20:14:45.0872 0x0fdc  NativeWifiP - ok

20:14:46.0013 0x0fdc  [ B498A14133BD09AD0817590ACE4470AD, 14CCC922C6596C97A5CF580209C4AFB6138A8FFD3A0E60CD506810DFCBC43A1A ] NBService       C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

20:14:46.0034 0x0fdc  NBService - ok

20:14:46.0074 0x0fdc  [ 79B47FD40D9A817E932F9D26FAC0A81C, 53E260B8BFC50BA45FA73BFCF4E58C233890D0EAA9DEFDCCBB55FD3EB992FF2D ] NDIS            C:\Windows\system32\drivers\ndis.sys

20:14:46.0097 0x0fdc  NDIS - ok

20:14:46.0130 0x0fdc  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

20:14:46.0151 0x0fdc  NdisCap - ok

20:14:46.0170 0x0fdc  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

20:14:46.0192 0x0fdc  NdisTapi - ok

20:14:46.0208 0x0fdc  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

20:14:46.0230 0x0fdc  Ndisuio - ok

20:14:46.0281 0x0fdc  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

20:14:46.0330 0x0fdc  NdisWan - ok

20:14:46.0336 0x0fdc  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

20:14:46.0359 0x0fdc  NDProxy - ok

20:14:46.0383 0x0fdc  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

20:14:46.0405 0x0fdc  NetBIOS - ok

20:14:46.0417 0x0fdc  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

20:14:46.0441 0x0fdc  NetBT - ok

20:14:46.0463 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] Netlogon        C:\Windows\system32\lsass.exe

20:14:46.0471 0x0fdc  Netlogon - ok

20:14:46.0528 0x0fdc  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

20:14:46.0570 0x0fdc  Netman - ok

20:14:46.0606 0x0fdc  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

20:14:46.0616 0x0fdc  NetMsmqActivator - ok

20:14:46.0620 0x0fdc  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

20:14:46.0630 0x0fdc  NetPipeActivator - ok

20:14:46.0655 0x0fdc  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

20:14:46.0670 0x0fdc  netprofm - ok

20:14:46.0719 0x0fdc  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

20:14:46.0742 0x0fdc  NetTcpActivator - ok

20:14:46.0746 0x0fdc  [ 9A7D3A1AA5C830744FF6C44BB55A347A, 42D3281893DB4C0DDA6A7BDA92D3CCE23968D0E3CF880777B8DBBFD955629B08 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

20:14:46.0756 0x0fdc  NetTcpPortSharing - ok

20:14:46.0786 0x0fdc  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

20:14:46.0793 0x0fdc  nfrd960 - ok

20:14:46.0869 0x0fdc  [ 4774AD83C650001B337B92E5E5DA337B, 138ECC7F556D8A12AE58B78B68F6515BE4C00F9F062596B48B6CA6C010F13035 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys

20:14:46.0893 0x0fdc  NisDrv - ok

20:14:46.0927 0x0fdc  [ 96B7D15161A778B359E707796CCEA646, 9E4A25D9848FAECC517474EAD548E7975CBE3F41AAA964E5245E78F2A723925E ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe

20:14:46.0944 0x0fdc  NisSrv - ok

20:14:46.0967 0x0fdc  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

20:14:46.0980 0x0fdc  NlaSvc - ok

20:14:47.0098 0x0fdc  [ A328A46D87BB92CE4D8A4528E9D84787, D3245ED700151111592BA82FB675B284DA7FCE52B07A7F68352F64A402CAB37C ] NMIndexingService C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

20:14:47.0116 0x0fdc  NMIndexingService - ok

20:14:47.0130 0x0fdc  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

20:14:47.0152 0x0fdc  Npfs - ok

20:14:47.0171 0x0fdc  npggsvc - ok

20:14:47.0188 0x0fdc  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

20:14:47.0211 0x0fdc  nsi - ok

20:14:47.0216 0x0fdc  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

20:14:47.0237 0x0fdc  nsiproxy - ok

20:14:47.0321 0x0fdc  [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

20:14:47.0357 0x0fdc  Ntfs - ok

20:14:47.0365 0x0fdc  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

20:14:47.0386 0x0fdc  Null - ok

20:14:47.0420 0x0fdc  [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48, 7738785DE8B50D69993F4408498B812D0283FEE5C04FF5B89C20F149B44E9737 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

20:14:47.0430 0x0fdc  nvraid - ok

20:14:47.0435 0x0fdc  [ F7CD50FE7139F07E77DA8AC8033D1832, DA96F4B15C8165E6AE1D00E03A062C66CA3A3089E4FF0E9E11CE00B154DD12EC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

20:14:47.0444 0x0fdc  nvstor - ok

20:14:47.0516 0x0fdc  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

20:14:47.0540 0x0fdc  nv_agp - ok

20:14:47.0557 0x0fdc  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

20:14:47.0567 0x0fdc  ohci1394 - ok

20:14:47.0744 0x0fdc  [ D06C2368C93396C6B983CE60523BA99F, ABC90E2DC2DE577AFA37BF34630502AA209C9556DFCC1757844D95D9370FFA8C ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe

20:14:47.0783 0x0fdc  Origin Client Service - ok

20:14:47.0818 0x0fdc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

20:14:47.0832 0x0fdc  p2pimsvc - ok

20:14:47.0864 0x0fdc  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

20:14:47.0880 0x0fdc  p2psvc - ok

20:14:47.0884 0x0fdc  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys

20:14:47.0894 0x0fdc  Parport - ok

20:14:47.0906 0x0fdc  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

20:14:47.0914 0x0fdc  partmgr - ok

20:14:47.0936 0x0fdc  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll

20:14:47.0948 0x0fdc  PcaSvc - ok

20:14:47.0962 0x0fdc  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

20:14:47.0972 0x0fdc  pci - ok

20:14:47.0990 0x0fdc  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

20:14:47.0997 0x0fdc  pciide - ok

20:14:48.0015 0x0fdc  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

20:14:48.0026 0x0fdc  pcmcia - ok

20:14:48.0047 0x0fdc  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

20:14:48.0055 0x0fdc  pcw - ok

20:14:48.0122 0x0fdc  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

20:14:48.0148 0x0fdc  PEAUTH - ok

20:14:48.0207 0x0fdc  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

20:14:48.0225 0x0fdc  PerfHost - ok

20:14:48.0305 0x0fdc  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

20:14:48.0351 0x0fdc  pla - ok

20:14:48.0627 0x0fdc  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

20:14:48.0649 0x0fdc  PlugPlay - ok

20:14:48.0719 0x0fdc  PnkBstrA - ok

20:14:48.0738 0x0fdc  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

20:14:48.0755 0x0fdc  PNRPAutoReg - ok

20:14:48.0776 0x0fdc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

20:14:48.0790 0x0fdc  PNRPsvc - ok

20:14:48.0827 0x0fdc  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

20:14:48.0856 0x0fdc  PolicyAgent - ok

20:14:48.0941 0x0fdc  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

20:14:48.0992 0x0fdc  Power - ok

20:14:49.0013 0x0fdc  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

20:14:49.0038 0x0fdc  PptpMiniport - ok

20:14:49.0052 0x0fdc  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys

20:14:49.0061 0x0fdc  Processor - ok

20:14:49.0090 0x0fdc  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

20:14:49.0102 0x0fdc  ProfSvc - ok

20:14:49.0130 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] ProtectedStorage C:\Windows\system32\lsass.exe

20:14:49.0138 0x0fdc  ProtectedStorage - ok

20:14:49.0167 0x0fdc  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

20:14:49.0190 0x0fdc  Psched - ok

20:14:49.0269 0x0fdc  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

20:14:49.0302 0x0fdc  ql2300 - ok

20:14:49.0309 0x0fdc  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

20:14:49.0318 0x0fdc  ql40xx - ok

20:14:49.0387 0x0fdc  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

20:14:49.0418 0x0fdc  QWAVE - ok

20:14:49.0432 0x0fdc  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

20:14:49.0445 0x0fdc  QWAVEdrv - ok

20:14:49.0460 0x0fdc  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

20:14:49.0481 0x0fdc  RasAcd - ok

20:14:49.0516 0x0fdc  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

20:14:49.0538 0x0fdc  RasAgileVpn - ok

20:14:49.0548 0x0fdc  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

20:14:49.0572 0x0fdc  RasAuto - ok

20:14:49.0584 0x0fdc  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

20:14:49.0607 0x0fdc  Rasl2tp - ok

20:14:49.0623 0x0fdc  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

20:14:49.0650 0x0fdc  RasMan - ok

20:14:49.0660 0x0fdc  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

20:14:49.0683 0x0fdc  RasPppoe - ok

20:14:49.0708 0x0fdc  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

20:14:49.0731 0x0fdc  RasSstp - ok

20:14:49.0750 0x0fdc  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

20:14:49.0775 0x0fdc  rdbss - ok

20:14:49.0778 0x0fdc  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

20:14:49.0788 0x0fdc  rdpbus - ok

20:14:49.0798 0x0fdc  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

20:14:49.0820 0x0fdc  RDPCDD - ok

20:14:49.0830 0x0fdc  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

20:14:49.0851 0x0fdc  RDPENCDD - ok

20:14:49.0855 0x0fdc  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

20:14:49.0876 0x0fdc  RDPREFMP - ok

20:14:49.0907 0x0fdc  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

20:14:49.0917 0x0fdc  RDPWD - ok

20:14:49.0941 0x0fdc  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

20:14:49.0952 0x0fdc  rdyboost - ok

20:14:49.0983 0x0fdc  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

20:14:50.0023 0x0fdc  RemoteAccess - ok

20:14:50.0033 0x0fdc  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

20:14:50.0057 0x0fdc  RemoteRegistry - ok

20:14:50.0069 0x0fdc  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

20:14:50.0092 0x0fdc  RpcEptMapper - ok

20:14:50.0115 0x0fdc  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

20:14:50.0123 0x0fdc  RpcLocator - ok

20:14:50.0144 0x0fdc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

20:14:50.0175 0x0fdc  RpcSs - ok

20:14:50.0219 0x0fdc  [ CD553B8633466A6D1C115812F2619F1F, B39B38DE8B97209BEABDBF062832A1BDE2303450238B9A4723829958C5C81A6B ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

20:14:50.0249 0x0fdc  RsFx0103 - ok

20:14:50.0266 0x0fdc  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

20:14:50.0289 0x0fdc  rspndr - ok

20:14:50.0374 0x0fdc  [ 3AACAA62758FA6D178043D78BA89BEBC, 862D0FF27BB086145A33B9261142838651B0D2E1403BE321145E197600EB5015 ] RTCore64        C:\Program Files (x86)\MSI Afterburner\RTCore64.sys

20:14:50.0393 0x0fdc  RTCore64 - ok

20:14:50.0472 0x0fdc  [ AC4CA62572CA516945AB92D6C9F501F4, 6CB4178DD1ED3D8224EA1F91CAA00AFBC756DCA2DFD71F399B05E511E79D5150 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

20:14:50.0502 0x0fdc  RTL8167 - ok

20:14:50.0530 0x0fdc  [ B3A62D2AEED3DE93239252A2DFFA9728, 7CDE07B59B5BEFD4A9FB295D14AABC95A8EDA807A4F357817824723C26A5C6AD ] SaiK1705        C:\Windows\system32\DRIVERS\SaiK1705.sys

20:14:50.0540 0x0fdc  SaiK1705 - ok

20:14:50.0583 0x0fdc  [ B08581EDF3290210D3366CD2D992F6C2, FF1BE97B8F37FF39B784CAB254F2460B7F7A84C45BAD5CDB06FE5C29CF293BE5 ] SaiMini         C:\Windows\system32\DRIVERS\SaiMini.sys

20:14:50.0600 0x0fdc  SaiMini - ok

20:14:50.0628 0x0fdc  [ D086C2F45D328C2F63FC6B4CD79FCB66, BF3D27D95C83D2454AE62BAFE9297E08BB58EA4C7FBFBDEE075A4FFC6085735C ] SaiNtBus        C:\Windows\system32\drivers\SaiBus.sys

20:14:50.0636 0x0fdc  SaiNtBus - ok

20:14:50.0681 0x0fdc  [ 338F85CC164C90F46B5580D94F1E740E, B677E79F41D5027769E75488B2B91C88E9D76CA51FA85BF0E6AA66013D047E04 ] SaiU1705        C:\Windows\system32\DRIVERS\SaiU1705.sys

20:14:50.0689 0x0fdc  SaiU1705 - ok

20:14:50.0707 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] SamSs           C:\Windows\system32\lsass.exe

20:14:50.0716 0x0fdc  SamSs - ok

20:14:50.0813 0x0fdc  [ FA5734EB1E9B2E6652EB13DCA8B72BED, E4EE53B72181344755BBEF597979CC03D9C0D6E4423DB24F9F9FD5C54CDBEA94 ] SbieDrv         C:\Program Files\Sandboxie\SbieDrv.sys

20:14:50.0832 0x0fdc  SbieDrv - ok

20:14:50.0879 0x0fdc  [ 3F618BFF452B64521740437CCC88A1E3, B9384A0F94D0D588DFF3745771DE03B8CC17156CB978A6B98F5F80A7C2DFD9B3 ] SbieSvc         C:\Program Files\Sandboxie\SbieSvc.exe

20:14:50.0899 0x0fdc  SbieSvc - ok

20:14:50.0947 0x0fdc  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

20:14:50.0969 0x0fdc  sbp2port - ok

20:14:51.0055 0x0fdc  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

20:14:51.0083 0x0fdc  SCardSvr - ok

20:14:51.0105 0x0fdc  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

20:14:51.0130 0x0fdc  scfilter - ok

20:14:51.0179 0x0fdc  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll

20:14:51.0220 0x0fdc  Schedule - ok

20:14:51.0276 0x0fdc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

20:14:51.0314 0x0fdc  SCPolicySvc - ok

20:14:51.0395 0x0fdc  [ 8B56BDCE6A303DDE63D63440D1CF9AD1, 66A4356C29D00A1B8A95975C073AE4E6D2A90CBF3B143FE9B83B96BEC0805D46 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys

20:14:51.0412 0x0fdc  ScreamBAudioSvc - ok

20:14:51.0434 0x0fdc  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

20:14:51.0446 0x0fdc  SDRSVC - ok

20:14:51.0488 0x0fdc  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

20:14:51.0525 0x0fdc  secdrv - ok

20:14:51.0540 0x0fdc  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

20:14:51.0562 0x0fdc  seclogon - ok

20:14:51.0576 0x0fdc  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

20:14:51.0599 0x0fdc  SENS - ok

20:14:51.0627 0x0fdc  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

20:14:51.0647 0x0fdc  SensrSvc - ok

20:14:51.0667 0x0fdc  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

20:14:51.0688 0x0fdc  Serenum - ok

20:14:51.0707 0x0fdc  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

20:14:51.0719 0x0fdc  Serial - ok

20:14:51.0735 0x0fdc  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys

20:14:51.0746 0x0fdc  sermouse - ok

20:14:51.0761 0x0fdc  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

20:14:51.0789 0x0fdc  SessionEnv - ok

20:14:51.0792 0x0fdc  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

20:14:51.0801 0x0fdc  sffdisk - ok

20:14:51.0804 0x0fdc  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

20:14:51.0813 0x0fdc  sffp_mmc - ok

20:14:51.0826 0x0fdc  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

20:14:51.0835 0x0fdc  sffp_sd - ok

20:14:51.0838 0x0fdc  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

20:14:51.0845 0x0fdc  sfloppy - ok

20:14:51.0871 0x0fdc  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

20:14:51.0898 0x0fdc  SharedAccess - ok

20:14:51.0958 0x0fdc  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

20:14:51.0986 0x0fdc  ShellHWDetection - ok

20:14:52.0004 0x0fdc  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

20:14:52.0012 0x0fdc  SiSRaid2 - ok

20:14:52.0024 0x0fdc  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

20:14:52.0032 0x0fdc  SiSRaid4 - ok

20:14:52.0076 0x0fdc  [ 050A4112B00BCA2E13314CDE48C1DEEE, 86C679CD494DEEB984372BF954EFBB8982AC7995FBF89FCF83BC228991D1B825 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

20:14:52.0089 0x0fdc  SkypeUpdate - ok

20:14:52.0104 0x0fdc  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

20:14:52.0127 0x0fdc  Smb - ok

20:14:52.0144 0x0fdc  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

20:14:52.0153 0x0fdc  SNMPTRAP - ok

20:14:52.0156 0x0fdc  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

20:14:52.0163 0x0fdc  spldr - ok

20:14:52.0189 0x0fdc  [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler         C:\Windows\System32\spoolsv.exe

20:14:52.0220 0x0fdc  Spooler - ok

20:14:52.0325 0x0fdc  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

20:14:52.0407 0x0fdc  sppsvc - ok

20:14:52.0417 0x0fdc  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

20:14:52.0440 0x0fdc  sppuinotify - ok

20:14:52.0531 0x0fdc  [ 12E6D95CDE974B131DEFAA44BAB8B056, 3FEF55D97915BDB222E3A60B50D53BBD8D9C0FDFF85EDC025B8EFD33E575E596 ] SQLAgent$SQLEXPRESS c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

20:14:52.0549 0x0fdc  SQLAgent$SQLEXPRESS - ok

20:14:52.0620 0x0fdc  [ B54B48F6D92423440C264E91225C5FF1, 7484D90CE309555E1FB54F011A2980D8491354223111B7AA16D1D2473570DC19 ] SQLBrowser      c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

20:14:52.0634 0x0fdc  SQLBrowser - ok

20:14:52.0711 0x0fdc  [ EAD5300C93946B0250A309E2BF2BE4CF, 6B9131D94ED31F838B1820EE67F068C4741B69D5C655587C89C9477986BD270F ] SQLWriter       c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

20:14:52.0739 0x0fdc  SQLWriter - ok

20:14:52.0763 0x0fdc  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

20:14:52.0778 0x0fdc  srv - ok

20:14:52.0797 0x0fdc  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

20:14:52.0811 0x0fdc  srv2 - ok

20:14:52.0835 0x0fdc  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

20:14:52.0844 0x0fdc  srvnet - ok

20:14:52.0871 0x0fdc  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

20:14:52.0896 0x0fdc  SSDPSRV - ok

20:14:52.0906 0x0fdc  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

20:14:52.0930 0x0fdc  SstpSvc - ok

20:14:52.0965 0x0fdc  [ 914CE17FE3E542ACFE5ACD6646E2DFDB, B2F443C07686E75A06DD49645C544D792F438EEC8ACE715818775E60FFEFA720 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

20:14:52.0985 0x0fdc  Steam Client Service - ok

20:14:53.0032 0x0fdc  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

20:14:53.0040 0x0fdc  stexstor - ok

20:14:53.0076 0x0fdc  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

20:14:53.0098 0x0fdc  stisvc - ok

20:14:53.0136 0x0fdc  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

20:14:53.0155 0x0fdc  swenum - ok

20:14:53.0189 0x0fdc  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

20:14:53.0229 0x0fdc  swprv - ok

20:14:53.0279 0x0fdc  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll

20:14:53.0321 0x0fdc  SysMain - ok

20:14:53.0341 0x0fdc  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

20:14:53.0354 0x0fdc  TabletInputService - ok

20:14:53.0369 0x0fdc  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

20:14:53.0396 0x0fdc  TapiSrv - ok

20:14:53.0400 0x0fdc  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

20:14:53.0423 0x0fdc  TBS - ok

20:14:53.0504 0x0fdc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

20:14:53.0543 0x0fdc  Tcpip - ok

20:14:53.0641 0x0fdc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

20:14:53.0681 0x0fdc  TCPIP6 - ok

20:14:53.0708 0x0fdc  [ DF687E3D8836BFB04FCC0615BF15A519, 7C5B1E72673B4299DFC21E869F0FBB28198CA54DF4F4AF7080005F2D82467784 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

20:14:53.0729 0x0fdc  tcpipreg - ok

20:14:53.0764 0x0fdc  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

20:14:53.0784 0x0fdc  TDPIPE - ok

20:14:53.0881 0x0fdc  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

20:14:53.0901 0x0fdc  TDTCP - ok

20:14:53.0918 0x0fdc  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

20:14:53.0943 0x0fdc  tdx - ok

20:14:54.0145 0x0fdc  [ 6EC042A004268B3EA2FB96D939303095, 0E889FB317AF484DA4A8529C5569350C69F4587C2B455C0F559E8061ECC2247B ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

20:14:54.0246 0x0fdc  TeamViewer - ok

20:14:54.0281 0x0fdc  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

20:14:54.0289 0x0fdc  TermDD - ok

20:14:54.0325 0x0fdc  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

20:14:54.0345 0x0fdc  TermService - ok

20:14:54.0367 0x0fdc  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

20:14:54.0379 0x0fdc  Themes - ok

20:14:54.0397 0x0fdc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

20:14:54.0420 0x0fdc  THREADORDER - ok

20:14:54.0440 0x0fdc  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

20:14:54.0466 0x0fdc  TrkWks - ok

20:14:54.0504 0x0fdc  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

20:14:54.0528 0x0fdc  TrustedInstaller - ok

20:14:54.0553 0x0fdc  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

20:14:54.0561 0x0fdc  tssecsrv - ok

20:14:54.0591 0x0fdc  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

20:14:54.0599 0x0fdc  TsUsbFlt - ok

20:14:54.0602 0x0fdc  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

20:14:54.0609 0x0fdc  TsUsbGD - ok

20:14:54.0638 0x0fdc  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

20:14:54.0661 0x0fdc  tunnel - ok

20:14:54.0665 0x0fdc  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

20:14:54.0672 0x0fdc  uagp35 - ok

20:14:54.0695 0x0fdc  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

20:14:54.0720 0x0fdc  udfs - ok

20:14:54.0735 0x0fdc  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

20:14:54.0744 0x0fdc  UI0Detect - ok

20:14:54.0757 0x0fdc  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

20:14:54.0764 0x0fdc  uliagpkx - ok

20:14:54.0788 0x0fdc  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

20:14:54.0797 0x0fdc  umbus - ok

20:14:54.0800 0x0fdc  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys

20:14:54.0807 0x0fdc  UmPass - ok

20:14:54.0831 0x0fdc  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

20:14:54.0859 0x0fdc  upnphost - ok

20:14:54.0880 0x0fdc  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

20:14:54.0889 0x0fdc  usbccgp - ok

20:14:54.0921 0x0fdc  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

20:14:54.0930 0x0fdc  usbcir - ok

20:14:54.0958 0x0fdc  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

20:14:54.0980 0x0fdc  usbehci - ok

20:14:55.0016 0x0fdc  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

20:14:55.0032 0x0fdc  usbhub - ok

20:14:55.0046 0x0fdc  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

20:14:55.0055 0x0fdc  usbohci - ok

20:14:55.0112 0x0fdc  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys

20:14:55.0138 0x0fdc  usbprint - ok

20:14:55.0160 0x0fdc  [ D76510CFA0FC09023077F22C2F979D86, 5662281C6D515423255D3C262EA368DBAFC250235E535FBFA3E59D3487695439 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

20:14:55.0177 0x0fdc  USBSTOR - ok

20:14:55.0192 0x0fdc  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

20:14:55.0205 0x0fdc  usbuhci - ok

20:14:55.0250 0x0fdc  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

20:14:55.0264 0x0fdc  usb_rndisx - ok

20:14:55.0293 0x0fdc  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

20:14:55.0335 0x0fdc  UxSms - ok

20:14:55.0363 0x0fdc  [ 97D879A884E7CDFED51AD63348A35254, 256566B7039B640FFB72C2ED7F1F42E46FFC820637A8959A64F5F08DB2A06A3F ] VaultSvc        C:\Windows\system32\lsass.exe

20:14:55.0377 0x0fdc  VaultSvc - ok

20:14:55.0401 0x0fdc  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

20:14:55.0414 0x0fdc  vdrvroot - ok

20:14:55.0449 0x0fdc  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

20:14:55.0488 0x0fdc  vds - ok

20:14:55.0493 0x0fdc  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

20:14:55.0502 0x0fdc  vga - ok

20:14:55.0505 0x0fdc  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

20:14:55.0527 0x0fdc  VgaSave - ok

20:14:55.0545 0x0fdc  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

20:14:55.0556 0x0fdc  vhdmp - ok

20:14:55.0574 0x0fdc  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

20:14:55.0581 0x0fdc  viaide - ok

20:14:55.0602 0x0fdc  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

20:14:55.0610 0x0fdc  volmgr - ok

20:14:55.0621 0x0fdc  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

20:14:55.0634 0x0fdc  volmgrx - ok

20:14:55.0660 0x0fdc  [ DF8126BD41180351A093A3AD2FC8903B, AEFF4AA89CDDAAAD43CDE17C6B6EB2A397A0AC1651CBD51B889161EC2BC6527A ] volsnap         C:\Windows\system32\drivers\volsnap.sys

20:14:55.0672 0x0fdc  volsnap - ok

20:14:55.0710 0x0fdc  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

20:14:55.0720 0x0fdc  vsmraid - ok

20:14:55.0751 0x0fdc  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

20:14:55.0801 0x0fdc  VSS - ok

20:14:55.0832 0x0fdc  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

20:14:55.0842 0x0fdc  vwifibus - ok

20:14:55.0860 0x0fdc  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

20:14:55.0888 0x0fdc  W32Time - ok

20:14:55.0933 0x0fdc  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

20:14:55.0954 0x0fdc  WacomPen - ok

20:14:55.0998 0x0fdc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

20:14:56.0029 0x0fdc  WANARP - ok

20:14:56.0077 0x0fdc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

20:14:56.0118 0x0fdc  Wanarpv6 - ok

20:14:56.0157 0x0fdc  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

20:14:56.0192 0x0fdc  wbengine - ok

20:14:56.0208 0x0fdc  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

20:14:56.0225 0x0fdc  WbioSrvc - ok

20:14:56.0250 0x0fdc  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

20:14:56.0269 0x0fdc  wcncsvc - ok

20:14:56.0273 0x0fdc  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

20:14:56.0284 0x0fdc  WcsPlugInService - ok

20:14:56.0296 0x0fdc  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys

20:14:56.0305 0x0fdc  Wd - ok

20:14:56.0346 0x0fdc  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

20:14:56.0367 0x0fdc  Wdf01000 - ok

20:14:56.0392 0x0fdc  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll

20:14:56.0405 0x0fdc  WdiServiceHost - ok

20:14:56.0409 0x0fdc  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll

20:14:56.0422 0x0fdc  WdiSystemHost - ok

20:14:56.0442 0x0fdc  [ 3DB6D04E1C64272F8B14EB8BC4616280, 9138642B1C19F895D4ECFD930160C80FBF15813CE63BBF4C899842C300FD3026 ] WebClient       C:\Windows\System32\webclnt.dll

20:14:56.0458 0x0fdc  WebClient - ok

20:14:56.0484 0x0fdc  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

20:14:56.0511 0x0fdc  Wecsvc - ok

20:14:56.0560 0x0fdc  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

20:14:56.0598 0x0fdc  wercplsupport - ok

20:14:56.0629 0x0fdc  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

20:14:56.0652 0x0fdc  WerSvc - ok

20:14:56.0659 0x0fdc  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

20:14:56.0681 0x0fdc  WfpLwf - ok

20:14:56.0692 0x0fdc  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

20:14:56.0699 0x0fdc  WIMMount - ok

20:14:56.0718 0x0fdc  WinDefend - ok

20:14:56.0734 0x0fdc  WinHttpAutoProxySvc - ok

20:14:56.0817 0x0fdc  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

20:14:56.0858 0x0fdc  Winmgmt - ok

20:14:56.0975 0x0fdc  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll

20:14:57.0032 0x0fdc  WinRM - ok

20:14:57.0092 0x0fdc  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

20:14:57.0118 0x0fdc  WinUsb - ok

20:14:57.0191 0x0fdc  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

20:14:57.0226 0x0fdc  Wlansvc - ok

20:14:57.0231 0x0fdc  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

20:14:57.0238 0x0fdc  WmiAcpi - ok

20:14:57.0259 0x0fdc  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

20:14:57.0271 0x0fdc  wmiApSrv - ok

20:14:57.0286 0x0fdc  WMPNetworkSvc - ok

20:14:57.0316 0x0fdc  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

20:14:57.0324 0x0fdc  WPCSvc - ok

20:14:57.0342 0x0fdc  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

20:14:57.0353 0x0fdc  WPDBusEnum - ok

20:14:57.0406 0x0fdc  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

20:14:57.0450 0x0fdc  ws2ifsl - ok

20:14:57.0467 0x0fdc  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

20:14:57.0480 0x0fdc  wscsvc - ok

20:14:57.0520 0x0fdc  [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys

20:14:57.0541 0x0fdc  WSDPrintDevice - ok

20:14:57.0545 0x0fdc  WSearch - ok

20:14:57.0633 0x0fdc  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll

20:14:57.0686 0x0fdc  wuauserv - ok

20:14:57.0712 0x0fdc  [ D3381DC54C34D79B22CEE0D65BA91B7C, 70DC4ADCA4C0C28BB133287511E329D1B6B9B97F96CDE5B1D2F1F59FE1A965D9 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

20:14:57.0734 0x0fdc  WudfPf - ok

20:14:57.0753 0x0fdc  [ CF8D590BE3373029D57AF80914190682, FB9641777E90A58C063FBE95F081DC6D2F4770827DE19108A9DC3E3D6B17B4BF ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

20:14:57.0776 0x0fdc  WUDFRd - ok

20:14:57.0789 0x0fdc  [ 7A95C95B6C4CF292D689106BCAE49543, 9029F489E1E817CE12839B8C6656E46190497D445DC3F43C20CF96E5E6BD0691 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

20:14:57.0812 0x0fdc  wudfsvc - ok

20:14:57.0830 0x0fdc  [ 9A3452B3C2A46C073166C5CF49FAD1AE, D6F95F51D8E37BA4CF403965EC08CCFEEA9EEFDBFC7752432EAEC19925BDA115 ] WwanSvc         C:\Windows\System32\wwansvc.dll

20:14:57.0846 0x0fdc  WwanSvc - ok

20:14:57.0959 0x0fdc  X6va028 - ok

20:14:58.0010 0x0fdc  [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys

20:14:58.0031 0x0fdc  xusb21 - ok

20:14:58.0060 0x0fdc  ================ Scan global ===============================

20:14:58.0089 0x0fdc  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

20:14:58.0131 0x0fdc  [ A171AC55EE4B4EE35C18EF0977017A72, E0E3E3B1C3708C30C7292CA09E41CA6C49EB850699126C6D2C0383A72C0097A6 ] C:\Windows\system32\winsrv.dll

20:14:58.0150 0x0fdc  [ A171AC55EE4B4EE35C18EF0977017A72, E0E3E3B1C3708C30C7292CA09E41CA6C49EB850699126C6D2C0383A72C0097A6 ] C:\Windows\system32\winsrv.dll

20:14:58.0174 0x0fdc  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

20:14:58.0217 0x0fdc  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

20:14:58.0230 0x0fdc  [ Global ] - ok

20:14:58.0231 0x0fdc  ================ Scan MBR ==================================

20:14:58.0241 0x0fdc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

20:15:00.0351 0x0fdc  \Device\Harddisk0\DR0 - ok

20:15:00.0352 0x0fdc  ================ Scan VBR ==================================

20:15:00.0357 0x0fdc  [ F6C6A6BE284CA0D59A7CCE9F3CD4B832 ] \Device\Harddisk0\DR0\Partition1

20:15:00.0420 0x0fdc  \Device\Harddisk0\DR0\Partition1 - ok

20:15:00.0451 0x0fdc  [ 81B60C4085DA7A9F8FC1FDC18C0CCA19 ] \Device\Harddisk0\DR0\Partition2

20:15:00.0521 0x0fdc  \Device\Harddisk0\DR0\Partition2 - ok

20:15:00.0522 0x0fdc  ================ Scan generic autorun ======================

20:15:00.0639 0x0fdc  [ 35BA4E6632BA690EA6421C1E03537D0E, 99D6B4DB12ABE3A7F44AB1B2D626978E85231185AE280D9516986027BC8385CB ] c:\Program Files\Microsoft Security Client\msseces.exe

20:15:00.0674 0x0fdc  MSC - ok

20:15:00.0755 0x0fdc  [ B2B879C0BA746CBB6A97212D8B5908B9, 6B38EB19064746EF42B6DABE754361377D6A460FD8E4C6B619EF4DD659F7357B ] C:\Program Files\SmartTechnology\Software\ProfilerU.exe

20:15:00.0774 0x0fdc  ProfilerU - detected UnsignedFile.Multi.Generic ( 1 )

20:15:03.0467 0x0fdc  Detect skipped due to KSN trusted

20:15:03.0467 0x0fdc  ProfilerU - ok

20:15:03.0505 0x0fdc  [ 3371D09E5A75889B1CFAF8C05CAFC3B8, 1CAA518BDFB69062355CD10611076E3DF9196DEB7C49EA11F0F2ADDA3DA1F79F ] C:\Program Files\SmartTechnology\Software\SaiMfd.exe

20:15:03.0517 0x0fdc  SaiMfd - detected UnsignedFile.Multi.Generic ( 1 )

20:15:06.0214 0x0fdc  Detect skipped due to KSN trusted

20:15:06.0214 0x0fdc  SaiMfd - ok

20:15:06.0518 0x0fdc  [ 95671F4BE988BC043F5828BB7E02CBD0, 7B7572CB569161C44BD63AAF9DEF2C806974576AE9ABFF94ED5A950EFFB3D222 ] C:\Program Files\Logitech Gaming Software\LCore.exe

20:15:06.0701 0x0fdc  Launch LCore - ok

20:15:06.0820 0x0fdc  [ C0E8E47500C524AAD99E9CB74567074F, 824491E84E7D86E4453C46BD807184E469990E3F481084F92FE3AB690700EA4D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe

20:15:06.0847 0x0fdc  StartCCC - ok

20:15:06.0963 0x0fdc  [ 80086ED442941DE2CA18CB6DAE8C1422, F7BE958F2E8E17970C238E3806F4A742B12DA09EB21093BD6371CF4B580C5BE4 ] C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe

20:15:07.0000 0x0fdc  Aeria Ignite - ok

20:15:07.0192 0x0fdc  [ 29A4BD2A63017D4E4F5081598A8A19AB, F0DBF54D10CB87925DA24A966BE9C8B83A0AF7CD19926E0AFFAE760D27563147 ] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

20:15:07.0289 0x0fdc  LogMeIn Hamachi Ui - ok

20:15:07.0381 0x0fdc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

20:15:07.0408 0x0fdc  Sidebar - ok

20:15:07.0437 0x0fdc  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

20:15:07.0450 0x0fdc  mctadmin - ok

20:15:07.0492 0x0fdc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

20:15:07.0520 0x0fdc  Sidebar - ok

20:15:07.0525 0x0fdc  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

20:15:07.0538 0x0fdc  mctadmin - ok

20:15:07.0629 0x0fdc  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe

20:15:07.0661 0x0fdc  Sidebar - ok

20:15:07.0818 0x0fdc  [ AA12056CF4286DAA1D0FD6D592E4F980, 7C1A324371B4D18293A00F157EB732B4F932DF6B41F4CCDDCA2F6A26B9F4B999 ] C:\Program Files (x86)\Steam\steam.exe

20:15:07.0871 0x0fdc  Steam - ok

20:15:07.0907 0x0fdc  [ 8BDBB441D80EDCF1B361BF8D1C8B5B2D, 74C54B03C94646A8E7283EBBD194946FF83F7E5016E5759D6BB3AAC1295D79EF ] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

20:15:07.0917 0x0fdc  HydraVisionDesktopManager - detected UnsignedFile.Multi.Generic ( 1 )

20:15:10.0600 0x0fdc  Detect skipped due to KSN trusted

20:15:10.0600 0x0fdc  HydraVisionDesktopManager - ok

20:15:10.0765 0x0fdc  [ 05EF48203CC819B57F8665217FB6DDF5, D34DA867FA4F6B8BF5BCF5C9DE5E5CC315632CFA8A4056567DEF431CEE524A8E ] C:\Program Files (x86)\Origin\Origin.exe

20:15:10.0830 0x0fdc  EADM - ok

20:15:10.0920 0x0fdc  [ E3033B674E7941CA6491AC1B853316D9, 5B9E0445DA0AB728877BDB73C4FA2A5AD05CF6E5DECB88F3A761A0259C34C2F6 ] C:\Program Files\Sandboxie\SbieCtrl.exe

20:15:10.0935 0x0fdc  SandboxieControl - ok

20:15:11.0157 0x0fdc  [ D6E2ED7F1F7BE7CCB8676491BF950B57, CBF07EE746F2C27ACC532E83ADC43FBE954DC3C598C4333F13B1A7615AEA9AD5 ] C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

20:15:11.0290 0x0fdc  Akamai NetSession Interface - ok

20:15:11.0404 0x0fdc  [ DE6928F6623EEAD69AFFF62E26676C85, D42B6164158AE5B57DE2E26CEA9BD581E9E59FA1BE30A93772AE1951857CACCE ] C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySqlNotifier.exe

20:15:11.0432 0x0fdc  MySQL Notifier - detected UnsignedFile.Multi.Generic ( 1 )

20:15:14.0291 0x0fdc  Detect skipped due to KSN trusted

20:15:14.0291 0x0fdc  MySQL Notifier - ok

20:15:14.0416 0x0fdc  [ 86F0D0B3A07C142C81DAB47E8495A822, DA214C967FFE0B3E2BBCE99E7330DBB74EB0BB7F21833FE689277109B0FF92B5 ] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

20:15:14.0433 0x0fdc  BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - ok

20:15:14.0635 0x0fdc  [ 36C55F2645D61F15457D23B56F0149DA, 410DDEA347DD8AA58838560CC01AABD3F7D40A6879482AADD09BC4A82E26D48D ] C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe

20:15:14.0761 0x0fdc  GalaxyClient - ok

20:15:15.0272 0x0fdc  [ 921490A18BB698DE4158708822DB12BB, 93614F68186A8782ADE3FEF20AA9EF4EA0885776086C31323AB621BC3A6D81B0 ] C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar

20:15:15.0332 0x0fdc  FowlsHack 3.11.jar - detected UnsignedFile.Multi.Generic ( 1 )

20:15:18.0189 0x0fdc  FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - warning

20:15:20.0896 0x0fdc  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.8.204.0 ), 0x61000 ( enabled : updated )

20:15:20.0901 0x0fdc  Win FW state via NFP2: enabled

20:15:23.0597 0x0fdc  ============================================================

20:15:23.0597 0x0fdc  Scan finished

20:15:23.0597 0x0fdc  ============================================================

20:15:23.0607 0x1134  Detected object count: 2

20:15:23.0607 0x1134  Actual detected object count: 2

20:18:29.0542 0x1134  C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe - copied to quarantine

20:18:29.0569 0x1134  HKLM\SYSTEM\ControlSet001\services\HiPatchService - will be deleted on reboot

20:18:29.0602 0x1134  HKLM\SYSTEM\ControlSet002\services\HiPatchService - will be deleted on reboot

20:18:29.0782 0x1134  C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe - will be deleted on reboot

20:18:29.0782 0x1134  HiPatchService ( UnsignedFile.Multi.Generic ) - User select action: Delete 

20:18:30.0174 0x1134  C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar - copied to quarantine

20:18:30.0181 0x1134  HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Software\Microsoft\Windows\CurrentVersion\Run:FowlsHack 3.11.jar - will be deleted on reboot

20:18:30.0182 0x1134  C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FowlsHack 3.11.jar - will be deleted on reboot

20:18:30.0182 0x1134  FowlsHack 3.11.jar ( UnsignedFile.Multi.Generic ) - User select action: Delete 

20:18:30.0982 0x1134  KLMD registered as C:\Windows\system32\drivers\83014472.sys

20:18:34.0364 0x055c  Deinitialize success

Muss jetzt noch irgendwas gemacht werden, oder war das alles?

Danke im Voraus,
Shorty

Wir sind noch nicht fertig :)

Zitat:

Ist doch alles runter?

Das war eher ein Hinweis. WIrd nun während der Bereinigung noch so Kram gefunden ist der Support beendet ;)

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Code:

ComboFix 15-07-23.01 - Tobias 26.07.2015  17:24:50.1.8 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.16285.13607 [GMT 2:00]

ausgeführt von:: c:\users\Tobias\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\install.exe

c:\programdata\ntuser.pol

c:\users\Tobias\AppData\Local\nsf9CE7.tmp

c:\windows\msdownld.tmp

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-06-26 bis 2015-07-26  ))))))))))))))))))))))))))))))

.

.

2015-07-26 15:33 . 2015-07-26 15:33        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-07-25 12:47 . 2015-07-15 01:12        12222168        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E07F87E1-E64D-4EBF-B8CB-87B74863087D}\mpengine.dll

2015-07-24 08:55 . 2015-07-15 01:12        12222168        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2015-07-23 18:18 . 2015-07-23 18:26        --------        d-----w-        C:\TDSSKiller_Quarantine

2015-07-23 05:20 . 2015-07-23 05:20        --------        d-----w-        c:\programdata\Malwarebytes

2015-07-23 05:20 . 2015-07-23 16:29        --------        d-----w-        c:\programdata\Malwarebytes' Anti-Malware (portable)

2015-07-23 05:20 . 2015-07-23 15:44        136408        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys

2015-07-23 05:19 . 2015-07-23 15:42        107736        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys

2015-07-23 05:08 . 2015-07-23 05:08        --------        d-----w-        c:\program files (x86)\VS Revo Group

2015-07-22 20:27 . 2015-07-22 20:28        --------        d-----w-        C:\FRST

2015-07-22 08:19 . 2015-07-22 08:19        --------        d-----w-        c:\users\Tobias\AppData\Local\CEF

2015-07-21 18:49 . 2015-07-23 18:00        --------        d-----w-        c:\users\Tobias\osc_files

2015-07-21 09:45 . 2015-07-15 03:19        41984        ----a-w-        c:\windows\system32\lpk.dll

2015-07-21 09:45 . 2015-07-15 03:19        46080        ----a-w-        c:\windows\system32\atmlib.dll

2015-07-21 09:45 . 2015-07-15 02:55        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2015-07-21 09:45 . 2015-07-15 01:59        372224        ----a-w-        c:\windows\system32\atmfd.dll

2015-07-21 09:45 . 2015-07-15 01:52        299008        ----a-w-        c:\windows\SysWow64\atmfd.dll

2015-07-21 09:45 . 2015-07-15 03:19        100864        ----a-w-        c:\windows\system32\fontsub.dll

2015-07-21 09:45 . 2015-07-15 03:19        14336        ----a-w-        c:\windows\system32\dciman32.dll

2015-07-21 09:45 . 2015-07-15 02:55        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll

2015-07-21 09:45 . 2015-07-15 02:55        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll

2015-07-21 09:45 . 2015-07-15 02:54        25600        ----a-w-        c:\windows\SysWow64\lpk.dll

2015-07-16 10:11 . 2015-07-17 13:14        --------        d-----w-        c:\users\Tobias\AppData\Local\Warframe

2015-07-15 19:58 . 2015-07-02 10:56        1190000        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{024B5650-9783-410F-9CCE-BB33B45285B2}\gapaengine.dll

2015-07-15 11:37 . 2015-07-04 18:07        2087424        ----a-w-        c:\windows\system32\ole32.dll

2015-07-15 11:17 . 2015-07-15 11:17        --------        d-----w-        c:\program files (x86)\LogMeIn Hamachi

2015-07-09 14:17 . 2015-07-09 14:17        --------        d-----w-        c:\programdata\X360CE

2015-07-09 14:13 . 2015-07-09 14:13        --------        d-----w-        c:\users\Tobias\AppData\Local\NBGI

2015-07-05 08:33 . 2015-07-05 08:33        --------        d-----w-        c:\program files (x86)\Microsoft XNA

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-07-15 12:25 . 2014-05-17 19:00        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2015-07-15 12:25 . 2014-05-17 19:00        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2015-07-14 09:44 . 2014-12-02 16:05        33856        ---ha-w-        c:\windows\system32\hamachi.sys

2015-07-05 10:08 . 2010-11-21 03:27        300704        ------w-        c:\windows\system32\MpSigStub.exe

2015-07-03 06:43 . 2014-05-17 18:55        130333168        ----a-w-        c:\windows\system32\MRT.exe

2015-07-02 10:56 . 2014-05-21 17:28        1190000        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2015-05-09 03:27 . 2015-06-10 12:57        243712        ----a-w-        c:\windows\system32\wow64.dll

2015-05-09 03:27 . 2015-06-10 12:57        215040        ----a-w-        c:\windows\system32\winsrv.dll

2015-05-09 03:27 . 2015-06-10 12:57        362496        ----a-w-        c:\windows\system32\wow64win.dll

2015-05-09 03:27 . 2015-06-10 12:57        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2015-05-09 03:26 . 2015-06-10 12:57        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2015-05-09 03:26 . 2015-06-10 12:57        424960        ----a-w-        c:\windows\system32\KernelBase.dll

2015-05-09 03:26 . 2015-06-10 12:57        1162752        ----a-w-        c:\windows\system32\kernel32.dll

2015-05-09 03:25 . 2015-06-10 12:57        338432        ----a-w-        c:\windows\system32\conhost.exe

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-05-09 03:20 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-05-09 03:13 . 2015-06-10 12:57        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2015-05-09 03:13 . 2015-06-10 12:57        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2015-05-09 03:13 . 2015-06-10 12:57        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2015-05-09 03:12 . 2015-06-10 12:57        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2015-05-09 03:12 . 2015-06-10 12:57        274944        ----a-w-        c:\windows\SysWow64\KernelBase.dll

2015-05-09 03:08 . 2015-06-10 12:57        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        5120        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

2015-05-09 03:08 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

2015-05-09 02:01 . 2015-06-10 12:57        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2015-05-09 02:01 . 2015-06-10 12:57        2048        ----a-w-        c:\windows\SysWow64\user.exe

2015-05-09 01:59 . 2015-06-10 12:57        6144        ---ha-w-        c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2015-05-09 01:59 . 2015-06-10 12:57        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2015-05-09 01:59 . 2015-06-10 12:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2015-05-09 01:59 . 2015-06-10 12:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2015-05-01 13:17 . 2015-05-13 18:57        124112        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-05-01 13:16 . 2015-05-13 18:57        102608        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

2015-04-29 18:22 . 2015-06-10 12:57        14635008        ----a-w-        c:\windows\system32\wmp.dll

2015-04-29 18:21 . 2015-06-10 12:57        5120        ----a-w-        c:\windows\system32\msdxm.ocx

2015-04-29 18:21 . 2015-06-10 12:57        5120        ----a-w-        c:\windows\system32\dxmasf.dll

2015-04-29 18:21 . 2015-06-10 12:57        9728        ----a-w-        c:\windows\system32\spwmp.dll

2015-04-29 18:19 . 2015-06-10 12:57        12625920        ----a-w-        c:\windows\system32\wmploc.DLL

2015-04-29 18:07 . 2015-06-10 12:57        4096        ----a-w-        c:\windows\SysWow64\msdxm.ocx

2015-04-29 18:07 . 2015-06-10 12:57        4096        ----a-w-        c:\windows\SysWow64\dxmasf.dll

2015-04-29 18:07 . 2015-06-10 12:57        8192        ----a-w-        c:\windows\SysWow64\spwmp.dll

2015-04-29 18:05 . 2015-06-10 12:57        12625408        ----a-w-        c:\windows\SysWow64\wmploc.DLL

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-07-23 2895552]

"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2013-11-22 389120]

"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-05-01 3632472]

"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2010-02-03 570600]

"Akamai NetSession Interface"="c:\users\Tobias\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]

"MySQL Notifier"="c:\program files (x86)\MySQL\MySQL Notifier 1.1.5\MySqlNotifier.exe" [2013-11-25 771584]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

"GalaxyClient"="c:\program files (x86)\GalaxyClient\GalaxyClient.exe" [2015-07-20 7247416]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-11-22 766208]

"Aeria Ignite"="c:\program files (x86)\Aeria Games\Ignite\aeriaignite.exe" [2013-06-06 1925656]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-07-14 5579624]

.

c:\users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

MSIAfterburner.exe - Verknüpfung.lnk - c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-6-10 465064]

RTSS.exe - Verknüpfung (2).lnk - c:\program files (x86)\RivaTuner Statistics Server\RTSS.exe [2014-6-5 188928]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE -b -l [2001-2-13 83360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer2"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

R1 MpKsla6ad0bc4;MpKsla6ad0bc4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B149F4F2-207D-49BA-9414-44E807678A5A}\MpKsla6ad0bc4.sys;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B149F4F2-207D-49BA-9414-44E807678A5A}\MpKsla6ad0bc4.sys [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]

R3 GalaxyClientService;GalaxyClientService;c:\program files (x86)\GalaxyClient\GalaxyClientService.exe;c:\program files (x86)\GalaxyClient\GalaxyClientService.exe [x]

R3 GalaxyCommunication;GalaxyCommunication;c:\programdata\GOG.com\Galaxy\redists\GalaxyCommunication.exe;c:\programdata\GOG.com\Galaxy\redists\GalaxyCommunication.exe [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]

R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]

R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]

R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 X6va028;X6va028;c:\windows\SysWOW64\Drivers\X6va028;c:\windows\SysWOW64\Drivers\X6va028 [x]

R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]

R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]

R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]

S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]

S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]

S2 MySQL55;MySQL55;c:\program files\MySQL\MySQL Server 5.5\bin\mysqld --defaults-file=c:\programdata\MySQL\MySQL Server 5.5\my.ini MySQL55;c:\program files\MySQL\MySQL Server 5.5\bin\mysqld --defaults-file=c:\programdata\MySQL\MySQL Server 5.5\my.ini MySQL55 [x]

S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]

S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]

S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 SaiK1705;SaiK1705;c:\windows\system32\DRIVERS\SaiK1705.sys;c:\windows\SYSNATIVE\DRIVERS\SaiK1705.sys [x]

S3 SaiU1705;SaiU1705;c:\windows\system32\DRIVERS\SaiU1705.sys;c:\windows\SYSNATIVE\DRIVERS\SaiU1705.sys [x]

S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-07-25 13:03        995144        ----a-w-        c:\program files (x86)\Google\Chrome\Application\44.0.2403.107\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-07-26 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-17 12:25]

.

2015-07-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-22 14:15]

.

2015-07-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-22 14:15]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 1337000]

"SaiMfd"="c:\program files\SmartTechnology\Software\SaiMfd.exe" [2013-04-16 158208]

"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2014-07-28 10801944]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = about:blank

mDefault_Search_URL = hxxp://www.google.com

mDefault_Page_URL = about:blank

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.google.com

uInternet Settings,ProxyOverride = <local>

IE: Client auf Monitor & öffnen1 - c:\windows\web\AOpenClient.htm

IE: Client auf Monitor & öffnen2 - c:\windows\web\AOpenClient.htm

Trusted Zone: aeriagames.com

FF - ProfilePath - c:\users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482\

FF - prefs.js: browser.startup.homepage - about:blank

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

SafeBoot-31368793.sys

SafeBoot-68860471.sys

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL55]

"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.5\bin\mysqld\" --defaults-file=\"c:\programdata\MySQL\MySQL Server 5.5\my.ini\" MySQL55"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va028]

"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va028"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]

"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_209_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_209_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_209_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_209_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_209.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.18"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_209.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_209.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_209.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]

"OOSE08.00.00.01PRO"="DC4B4BB687965DFB944A5478BB53F208B1542504C1CB3D77A2BAE9E444AB4C7AC70AF3CC4B159696CE7764845A3A32849C246FB7AE451A5F46ACA584F294859AA007D5E09DBBCD52D1B6F950CE66666A864CB76741F4607522B3EB9FCF7F067593D84BFC0718FA65241311034667F619EE6B3C77730F0C664E26DCF6BDE7FBA371A9F75D708B1D74F02DED74D32455E379B501FC201F1DD288EBDD7F819F963533383FF2A9C8B41C87B6153470D672146FF34D43098495513003175D45488B2AF0564A61E3D948E9DAF65280F58B44E43C03ABC753F0FE684B7C73EEFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA9C6AECB7A5D1407A9C6AECB7A5D14078EDD5E5BE2F6E667BA7FD869164D679470B4DD40FDD8A1CEB74E62F11D909573B6258AF03493A70FF7126AB26671B1827F907AFC2CD209D03DE5285C07D08B73111B63D6CE0EBDFA5A4649018E307C0B9DA0DA5268973617B5EEC05997F5BDFA17BEA531752AA36020E61B549776AE6FFCE90C3576794DD71D154BAAAD88AF9F2EFD23ADBE45DECEB7497E68F195EC5DB6C7A18CBFE2357C52556A8548A72B27211CAE6FE152B60B74951C6C30F721B645663235CD4E99259B8448128E033C0E1BB3230CBFD7B80C0C499C818716F90F0848D87FD24CE6A221C70EEDC7603283AEADDA8CD7EF38001AB32C40550169B142C2B3AE210153FD6E9B6D2AE119A1EAD14BB8EFD1C8C6481BFA7E33175A279B1C8065FA3026D4EE744C98CB6C9AE2DB5C20A0A8F62441767397C85A705BAAFE207E94901E06A5E5877F47CB9DE491220E14FA1BB358C1D5E6D5C3A7A7CEB3C03E8F6C8FA802C784DFA936184D0F8D3D856334239CD02C6223D62E02A792C4F9C9581B8BB40E7A221A17A41079C2FB604A9B3D0EE58BA3CAB410C8447F1BA37879D1538D4933C7C736E55589C1BA4573C5A20B1D6A1A11F50EC8D9BEE2EFD9BEE94CCC8F938CF9359A0890CC6C491491C330150727A2237A051F2B3327AA35019A68408463CB215D8C4623986255598AF54FD9763EDFCA275503895AC7FCC8296D1BEDCDACB38E65BAB9D99CAE564962F260D78875A13C7A9C39C65C65A86B55ABAE1745061D5AA834518BFD84D95CCE34171650B74671A9DDDB3A5BBF0536D67E4183B5ABF45F36EE510E56B602CD3E95F91CD192C7A61DFE56BAE8C0FD873277447D5FFD3A3E4FC04EBC32BF839E4DDA66F589B6AF5E714A69A80BF09201A2087DD3778203D76B69357892BB2813D1A68B35E37A9A5D776F2B64BE01D48994898658A4DD75553507C2256DEBCBB2D1046DED43593CAB34FE0352F142EECAA9B6CEE2835ECF20899D8BA82AB5E14A095F6239FD6F5A965EEFAD5E082D99B3382E164E2472E0E8FC17757027206DE8E70C1933DC"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2015-07-26  17:36:48

ComboFix-quarantined-files.txt  2015-07-26 15:36

.

Vor Suchlauf: 21 Verzeichnis(se), 348.740.288.512 Bytes frei

Nach Suchlauf: 25 Verzeichnis(se), 348.505.464.832 Bytes frei

.

- - End Of File - - F8D2A7D7F16C79B80C6652DD98ED6511

A36C5E4F47E84449FF07ED3517B43A31

Danke im Voraus,
Shortyoo

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

mbam.txt:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Update, 28.07.2015 23:07, SYSTEM, SHORTY, Manual, IP Database, 0.0.0.0, 2015.7.24.3, 

Update, 28.07.2015 23:07, SYSTEM, SHORTY, Manual, Remediation Database, 2015.3.9.1, 2015.7.28.1, 

Update, 28.07.2015 23:07, SYSTEM, SHORTY, Manual, Domain Database, 0.0.0.0, 2015.7.24.2, 

Update, 28.07.2015 23:07, SYSTEM, SHORTY, Manual, Rootkit Database, 2015.2.25.1, 2015.7.22.1, 

Update, 28.07.2015 23:08, SYSTEM, SHORTY, Manual, Malware Database, 2015.3.9.5, 2015.7.28.6, 

Update, 28.07.2015 23:08, SYSTEM, SHORTY, Manual, program, 2.1.6.1022, 2.1.8.0, 

Error, 28.07.2015 23:09, SYSTEM, SHORTY, Update, Bad md5 or size: akadomains, 11, 

Error, 28.07.2015 23:09, SYSTEM, SHORTY, Update, Bad md5 or size: akaips, 11, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, Remediation Database, 2015.5.13.1, 2015.7.28.1, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, Domain Database, 0.0.0.0, 2015.7.24.2, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, IP Database, 0.0.0.0, 2015.7.24.3, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, Rootkit Database, 2015.6.2.1, 2015.7.22.1, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, AKA IP Database, 0.0.0.0, 2015.7.15.1, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, AKA Domain Database, 0.0.0.0, 2015.7.28.2, 

Update, 28.07.2015 23:09, SYSTEM, SHORTY, Manual, Malware Database, 2015.6.3.3, 2015.7.28.6, 
 

(end)

[S0]

Code:

# AdwCleaner v4.109 - Bericht erstellt am 01/02/2015 um 15:26:10

# Aktualisiert 24/01/2015 von Xplode

# Database : 2015-01-26.1 [Live]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Tobias - SHORTY

# Gestartet von : C:\Users\Tobias\Downloads\AdwCleaner_4.109.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

Dienst Gelöscht : IePluginServices

Dienst Gelöscht : WindowsMangerProtect

Dienst Gelöscht : {2c7e9044-6b3b-4ecc-9224-8b8c893f6fc1}w64

Dienst Gelöscht : {82adbb5d-7d8c-4f2d-9936-53071e499858}w64

Dienst Gelöscht : {8fb4e628-35c6-4275-89be-ce3462febcc4}w64

Dienst Gelöscht : {a081059f-4e06-4f49-9a1e-4b92e171ba25}w64
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\IePluginServices

Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect

Ordner Gelöscht : C:\ProgramData\ytd video downloader

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader

Ordner Gelöscht : C:\Program Files (x86)\GreenTree Applications

Ordner Gelöscht : C:\Users\Tobias\AppData\Local\globalUpdate

Ordner Gelöscht : C:\Users\Tobias\AppData\Local\SearchProtect

Ordner Gelöscht : C:\Users\Tobias\AppData\Roaming\OpenCandy

Ordner Gelöscht : C:\Users\Tobias\AppData\Roaming\Security System 2

Ordner Gelöscht : C:\Users\Tobias\AppData\Roaming\vi-view

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Windows\System32\drivers\{2c7e9044-6b3b-4ecc-9224-8b8c893f6fc1}w64.sys

Datei Gelöscht : C:\Windows\System32\drivers\{82adbb5d-7d8c-4f2d-9936-53071e499858}w64.sys

Datei Gelöscht : C:\Windows\System32\drivers\{8fb4e628-35c6-4275-89be-ce3462febcc4}w64.sys

Datei Gelöscht : C:\Windows\System32\drivers\{a081059f-4e06-4f49-9a1e-4b92e171ba25}w64.sys

Datei Gelöscht : C:\Users\Tobias\AppData\Roaming\aps.uninstall.scan.results

Datei Gelöscht : C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage

Datei Gelöscht : C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage

Datei Gelöscht : C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

Datei Gelöscht : C:\Users\Tobias\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage

Datei Gelöscht : C:\Users\Tobias\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Schlüssel Gelöscht : HKCU\Software\AnyProtect

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\GlobalUpdate

Schlüssel Gelöscht : HKCU\Software\IM

Schlüssel Gelöscht : HKCU\Software\InetStat

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\SweetIM

Schlüssel Gelöscht : HKCU\Software\Faster Light

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider

Schlüssel Gelöscht : HKLM\SOFTWARE\Cheat Engine\OpenCandy

Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp

Schlüssel Gelöscht : HKLM\SOFTWARE\SupTab

Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect

Schlüssel Gelöscht : HKLM\SOFTWARE\supWPM

Schlüssel Gelöscht : HKLM\SOFTWARE\SweetIM

Schlüssel Gelöscht : HKLM\SOFTWARE\Faster Light

Schlüssel Gelöscht : HKLM\SOFTWARE\vi-viewSoftware

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17496
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
 

-\\ Mozilla Firefox v34.0.5 (x86 de)
 
 

-\\ Google Chrome v40.0.2214.91
 
 

-\\ Opera v26.0.1656.60
 
 

*************************
 

AdwCleaner[R0].txt - [9575 octets] - [01/02/2015 15:24:41]

AdwCleaner[S0].txt - [8305 octets] - [01/02/2015 15:26:10]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8365 octets] ##########

[S1]

Code:

# AdwCleaner v4.208 - Bericht erstellt 28/07/2015 um 23:33:48

# Aktualisiert 09/07/2015 von Xplode

# Datenbank : 2015-07-26.2 [Server]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)

# Benutzername : Tobias - SHORTY

# Gestarted von : C:\Users\Tobias\Desktop\AdwCleaner_4.208.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Geplante Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:50555;hxxps=127.0.0.1:50555

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17909
 
 

-\\ Mozilla Firefox v36.0 (x86 de)
 
 

-\\ Google Chrome v44.0.2403.107
 

[C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : hxxp://myhome.vi-view.com/?type=hp&ts=1419790202&from=cor&uid=WDCXWD10EURX-73C57Y0_WD-WCC4J025544855448
 

-\\ Opera v30.0.1835.125
 
 

*************************
 

AdwCleaner[R0].txt - [9575 Bytes] - [01/02/2015 16:24:41]

AdwCleaner[R1].txt - [2097 Bytes] - [28/07/2015 23:32:46]

AdwCleaner[S0].txt - [8517 Bytes] - [01/02/2015 16:26:10]

AdwCleaner[S1].txt - [1783 Bytes] - [28/07/2015 23:33:48]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1842  Bytes] ##########

Jrt

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.5.4 (07.27.2015:1)

OS: Windows 7 Home Premium x64

Ran by Tobias on 28.07.2015 at 23:41:12,23

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Tasks
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Faster Light

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Faster Light
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] C:\ProgramData\productdata

Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
 
 
 

~~~ FireFox
 

Successfully deleted: [File] C:\Users\Tobias\AppData\Roaming\mozilla\firefox\profiles\xzfn93aj.default-1420634732482\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi

Emptied folder: C:\Users\Tobias\AppData\Roaming\mozilla\firefox\profiles\xzfn93aj.default-1420634732482\minidumps [1 files]
 
 
 

~~~ Chrome
 
 

[C:\Users\Tobias\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
 

[C:\Users\Tobias\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
 

[C:\Users\Tobias\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
 

[C:\Users\Tobias\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 28.07.2015 at 23:50:15,46

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Danke im Voraus,
Shortyoo

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

log.txt

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=c1af5582bd33fe41a9242acba9da1c3e

# end=init

# utc_time=2015-07-29 07:03:36

# local_time=2015-07-29 09:03:36 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 25037

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=c1af5582bd33fe41a9242acba9da1c3e

# end=updated

# utc_time=2015-07-29 07:16:20

# local_time=2015-07-29 09:16:20 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=c1af5582bd33fe41a9242acba9da1c3e

# engine=25037

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-07-29 10:28:34

# local_time=2015-07-30 12:28:34 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 6532515 61192908 0 0

# scanned=449221

# found=10

# cleaned=0

# scan_time=11532

sh=7FBD19A09CA5F4C2A4FB283538E0367F89DEE3EF ft=1 fh=e524ffaf1791e27c vn="Variante von Win32/ELEX.AV evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir"

sh=F0DB92E27FF763CDC3002BB2B7320F9F3478224F ft=1 fh=c71c0011edb12146 vn="Variante von Win32/ELEX.BH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir"

sh=D3E15D303D3246736E4CA19230235A87DD51C45D ft=1 fh=56f0967fde1803ad vn="Win32/Toolbar.Widgi evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\ytd video downloader\ytd_installer.exe.vir"

sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tobias\AppData\Roaming\OpenCandy\35C1E2C2877B4AE0B90ED2C4E3415CC6\sp-downloader.exe.vir"

sh=1D9AE65A97C417A8083FB38EFDB8022EAE3A9698 ft=1 fh=8dd7dc1cf3445b5c vn="Variante von Win32/Adware.Synatix.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tobias\AppData\Roaming\Security System 2\uninstaller.exe.vir"

sh=4CF9EF4D739C2F8A1F3909A2720274527EC29E1F ft=1 fh=c71c001143f2d9bd vn="Variante von Win32/ELEX.CP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tobias\AppData\Roaming\vi-view\UninstallManager.exe.vir"

sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="Variante von Win32/Hao123.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe"

sh=34D9C8AFD8EA3DC3733C57E7B1518F330874BFD5 ft=1 fh=091df187cf56bbd2 vn="Win32/AnyProtect.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Tobias\AppData\Local\nsf9CE7.tmp.vir"

sh=0BF9AA44BDD7EA7334EF666FE889A84EDE77CB45 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\TDSSKiller_Quarantine\23.07.2015_20.13.22\susp0001\file0000\tsk0000.dta"

sh=0AA495433A70EB588E5157F44909D284DB405766 ft=1 fh=fc7510d09bb476bc vn="Variante von Win32/Packed.Komodia.A verdÃ¤chtige Datei" ac=I fn="C:\Windows\SysWOW64\LavasoftTcpService.dll"

checkup.txt

Code:

h h Results of screen317's Security Check version 1.006  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Microsoft Security Essentials   

  (On Access scanning disabled!) 

 Error obtaining update status for antivirus!  
 `````````Anti-malware/Other Utilities Check:````````` 

 Java 8 Update 25  

 Java version 32-bit out of Date! 

 Adobe Flash Player 18.0.0.209  

 Adobe Reader XI  

 Mozilla Firefox (36.0) 

 Google Chrome (44.0.2403.107) 

 Google Chrome (44.0.2403.125) 
 ````````Process Check: objlist.exe by Laurent````````  

 Microsoft Security Essentials MSMpEng.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Frst:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:28-07-2015

durchgeführt von Tobias (Administrator) auf SHORTY (30-07-2015 01:32:05)

Gestartet von C:\Users\Tobias\Desktop

Geladene Profile: Tobias (Verfügbare Profile: Tobias)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Opera)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(tzuk) C:\Program Files\Sandboxie\SbieSvc.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

() C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(tzuk) C:\Program Files\Sandboxie\SbieCtrl.exe

(Akamai Technologies, Inc.) C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

(Oracle Corporation) C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySQLNotifier.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

(Akamai Technologies, Inc.) C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.125\opera.exe

(Entwell) C:\Users\Tobias\Desktop\Alles\NosTale(DE)\NostaleX.dat
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)

HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-22] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Aeria Ignite] => C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-07-14] (LogMeIn Inc.)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2895552 2015-07-24] (Valve Corporation)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-11-22] (AMD)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632472 2015-05-01] (Electronic Arts)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [570600 2010-02-03] (tzuk)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Tobias\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [MySQL Notifier] => C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.5\MySqlNotifier.exe [771584 2013-11-25] (Oracle Corporation)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [7247416 2015-07-20] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-11-18]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSIAfterburner.exe - Verknüpfung.lnk [2014-09-14]

ShortcutTarget: MSIAfterburner.exe - Verknüpfung.lnk -> C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe ()

Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RTSS.exe - Verknüpfung (2).lnk [2014-09-14]

ShortcutTarget: RTSS.exe - Verknüpfung (2).lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ()

GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-963087113-2255471196-3066817158-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-12-21] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-21] (Oracle Corporation)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-21] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-21] (Oracle Corporation)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

Tcpip\..\Interfaces\{1AAE6C60-9682-408E-8065-50CE28305203}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{26D490BE-3C36-493D-8B5A-EBE66A6A26CF}: [DhcpNameServer] 192.168.42.129
 

FireFox:

========

FF ProfilePath: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482

FF NewTab: about:blank

FF Homepage: about:blank

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-21] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-21] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [2014-10-08] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-963087113-2255471196-3066817158-1000: @Google.com/GoogleEarthPlugin -> C:\Users\Tobias\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll [2012-04-14] (Google)

FF Extension: Adblock Plus - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-10]

FF Extension: Kein Name - C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\xzfn93aj.default-1420634732482\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [nicht gefunden]
 

Chrome: 

=======

CHR Profile: C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-22]

CHR Extension: (Google Drive) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-22]

CHR Extension: (YouTube) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-22]

CHR Extension: (Google Search) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-22]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-15]

CHR Extension: (Google Wallet) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-22]

CHR Extension: (Gmail) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-22]
 

Opera: 

=======

OPR Extension: (Adblock Plus) - C:\Users\Tobias\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-07-05]
 

==================== Services (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-22] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-07-22] ()

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [235744 2015-04-18] (EasyAntiCheat Ltd)

S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1718840 2015-07-20] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6871608 2015-07-20] (GOG.com)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-07-14] (LogMeIn, Inc.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)

R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)

R2 MySQL55; C:\ProgramData\MySQL\MySQL Server 5.5\my.ini [9513 2014-08-08] () [Datei ist nicht signiert]

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)

R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3542000 2015-01-21] (INCA Internet Co., Ltd.)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-05-01] (Electronic Arts)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-11-16] ()

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [94440 2010-02-03] (tzuk)

S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5419792 2014-11-28] (TeamViewer GmbH)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-09-07] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-17] (Disc Soft Ltd)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-09-07] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)

S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13480 2014-06-10] ()

R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)

R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)

R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)

R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [134760 2010-02-03] (tzuk)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S1 MpKsla6ad0bc4; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B149F4F2-207D-49BA-9414-44E807678A5A}\MpKsla6ad0bc4.sys [X]

S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-07-30 01:29 - 2015-07-30 01:29 - 00000000 ____D C:\Users\Tobias\Desktop\FRST-OlderVersion

2015-07-30 01:28 - 2015-07-30 01:28 - 00000938 _____ C:\Users\Tobias\Desktop\checkup.txt

2015-07-30 01:24 - 2015-07-30 01:24 - 00852684 _____ C:\Users\Tobias\Desktop\SecurityCheck.exe

2015-07-29 21:03 - 2015-07-29 21:03 - 02870984 _____ (ESET) C:\Users\Tobias\Downloads\esetsmartinstaller_deu.exe

2015-07-28 23:50 - 2015-07-28 23:50 - 00001879 _____ C:\Users\Tobias\Desktop\JRT.txt

2015-07-28 23:32 - 2015-07-28 23:32 - 00001428 _____ C:\Users\Tobias\Desktop\mbam.txt

2015-07-28 23:11 - 2015-07-28 23:11 - 01798176 _____ (Malwarebytes Corporation) C:\Users\Tobias\Desktop\JRT.exe

2015-07-28 23:10 - 2015-07-28 23:10 - 02248704 _____ C:\Users\Tobias\Desktop\AdwCleaner_4.208.exe

2015-07-28 23:07 - 2015-07-28 23:08 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-07-28 23:07 - 2015-07-28 23:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-07-28 23:07 - 2015-07-28 23:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-07-28 23:07 - 2015-07-28 23:07 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Tobias\Downloads\mbam-setup-2.1.6.1022.exe

2015-07-28 23:07 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-07-28 23:07 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-07-26 17:36 - 2015-07-26 17:36 - 00030494 _____ C:\ComboFix.txt

2015-07-26 17:22 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2015-07-26 17:22 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2015-07-26 17:22 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-07-26 17:22 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-07-26 17:22 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-07-26 17:22 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2015-07-26 17:22 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2015-07-26 17:22 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2015-07-26 17:16 - 2015-07-26 17:36 - 00000000 ____D C:\Qoobox

2015-07-26 17:16 - 2015-07-26 17:35 - 00000000 ____D C:\Windows\erdnt

2015-07-26 17:11 - 2015-07-26 17:12 - 05633622 ____R (Swearware) C:\Users\Tobias\Desktop\ComboFix.exe

2015-07-24 10:43 - 2015-07-29 19:14 - 00000784 _____ C:\Windows\setupact.log

2015-07-24 10:43 - 2015-07-24 10:43 - 00061920 _____ C:\Users\Tobias\AppData\Local\GDIPFONTCACHEV1.DAT

2015-07-24 10:43 - 2015-07-24 10:43 - 00000000 _____ C:\Windows\setuperr.log

2015-07-24 10:42 - 2015-07-28 23:35 - 00001326 _____ C:\Windows\PFRO.log

2015-07-24 10:42 - 2015-07-24 10:43 - 00284392 _____ C:\Windows\system32\FNTCACHE.DAT

2015-07-23 20:18 - 2015-07-23 20:26 - 00000000 ____D C:\TDSSKiller_Quarantine

2015-07-23 17:42 - 2015-07-23 17:42 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Tobias\Desktop\tdsskiller.exe

2015-07-23 07:20 - 2015-07-28 23:09 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-07-23 07:20 - 2015-07-28 23:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-07-23 07:20 - 2015-07-23 18:29 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2015-07-23 07:19 - 2015-07-23 18:29 - 00000000 ____D C:\Users\Tobias\Desktop\mbar

2015-07-23 07:19 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-07-23 07:18 - 2015-07-23 07:19 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Tobias\Desktop\mbar-1.09.1.1004.exe

2015-07-23 07:08 - 2015-07-23 07:08 - 00001264 _____ C:\Users\Tobias\Desktop\Revo Uninstaller.lnk

2015-07-23 07:08 - 2015-07-23 07:08 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2015-07-23 07:07 - 2015-07-23 07:07 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tobias\Downloads\revosetup95.exe

2015-07-22 23:31 - 2015-07-22 23:31 - 00029622 _____ C:\Users\Tobias\Desktop\Gmer.txt

2015-07-22 22:28 - 2015-07-22 22:28 - 00380416 _____ C:\Users\Tobias\Desktop\Gmer-19357.exe

2015-07-22 22:28 - 2015-07-22 22:28 - 00062597 _____ C:\Users\Tobias\Desktop\Addition.txt

2015-07-22 22:27 - 2015-07-30 01:32 - 00019364 _____ C:\Users\Tobias\Desktop\FRST.txt

2015-07-22 22:27 - 2015-07-30 01:32 - 00000000 ____D C:\FRST

2015-07-22 22:27 - 2015-07-30 01:29 - 02169856 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe

2015-07-22 22:25 - 2015-07-22 22:25 - 00050477 _____ C:\Users\Tobias\Desktop\Defogger.exe

2015-07-22 22:25 - 2015-07-22 22:25 - 00000544 _____ C:\Users\Tobias\Desktop\defogger_disable.log

2015-07-22 22:25 - 2015-07-22 22:25 - 00000168 _____ C:\Users\Tobias\defogger_reenable

2015-07-22 10:19 - 2015-07-22 10:19 - 00000000 ____D C:\Users\Tobias\AppData\Local\CEF

2015-07-21 22:52 - 2015-07-21 22:52 - 05401092 _____ C:\Users\Tobias\Desktop\ts3_recording_15_07_21_22_52_24.wav

2015-07-21 20:49 - 2015-07-23 20:00 - 00000000 ____D C:\Users\Tobias\osc_files

2015-07-21 19:50 - 2015-07-21 19:50 - 00000222 _____ C:\Users\Tobias\Desktop\Unturned.url

2015-07-21 11:45 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-07-21 11:45 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-07-21 11:45 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-07-21 11:45 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-07-21 11:45 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-07-21 11:45 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-07-16 12:11 - 2015-07-17 15:14 - 00000000 ____D C:\Users\Tobias\AppData\Local\Warframe

2015-07-15 13:38 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-07-15 13:38 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-07-15 13:38 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-07-15 13:38 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-07-15 13:38 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-07-15 13:38 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-07-15 13:38 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-07-15 13:38 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-07-15 13:38 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-07-15 13:38 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-07-15 13:38 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-07-15 13:38 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-07-15 13:38 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-07-15 13:38 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-07-15 13:38 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-07-15 13:38 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-07-15 13:38 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-07-15 13:38 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-07-15 13:38 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-07-15 13:38 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-07-15 13:38 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-07-15 13:38 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-07-15 13:38 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-07-15 13:38 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-07-15 13:38 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-07-15 13:38 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-07-15 13:38 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-07-15 13:38 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-07-15 13:38 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-07-15 13:38 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-07-15 13:38 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-07-15 13:38 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-07-15 13:38 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-07-15 13:38 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-07-15 13:38 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-07-15 13:38 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-07-15 13:38 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-07-15 13:38 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-07-15 13:38 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-07-15 13:38 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-07-15 13:38 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-07-15 13:38 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-07-15 13:38 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-07-15 13:38 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-07-15 13:38 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-07-15 13:38 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-07-15 13:38 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-07-15 13:38 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-07-15 13:38 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-07-15 13:38 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-07-15 13:38 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-07-15 13:38 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-07-15 13:38 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-07-15 13:38 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-07-15 13:38 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-07-15 13:38 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-07-15 13:38 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-07-15 13:38 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-07-15 13:38 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-07-15 13:38 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-07-15 13:38 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-07-15 13:38 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-07-15 13:38 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-07-15 13:38 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll

2015-07-15 13:38 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll

2015-07-15 13:37 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-07-15 13:37 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-07-15 13:37 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-07-15 13:37 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-07-15 13:37 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-07-15 13:37 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-07-15 13:37 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-07-15 13:37 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-07-15 13:37 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-07-15 13:37 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-07-15 13:37 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-07-15 13:37 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-07-15 13:37 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-07-15 13:37 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-07-15 13:37 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-07-15 13:37 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-07-15 13:37 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-07-15 13:37 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-07-15 13:37 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-07-15 13:37 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-07-15 13:37 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-07-15 13:37 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-07-15 13:37 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-07-15 13:37 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-07-15 13:37 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-07-15 13:37 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-07-15 13:37 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-07-15 13:37 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-07-15 13:37 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-07-15 13:37 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2015-07-15 13:37 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

2015-07-15 13:17 - 2015-07-15 13:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-07-15 13:17 - 2015-07-15 13:17 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2015-07-09 16:17 - 2015-07-09 16:17 - 00000000 ____D C:\ProgramData\X360CE

2015-07-09 16:13 - 2015-07-09 16:13 - 00000000 ____D C:\Users\Tobias\Documents\NBGI

2015-07-09 16:13 - 2015-07-09 16:13 - 00000000 ____D C:\Users\Tobias\AppData\Local\NBGI

2015-07-05 10:33 - 2015-07-05 10:33 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-07-30 01:25 - 2014-05-17 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-07-30 01:06 - 2014-08-22 16:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-07-29 22:22 - 2014-05-17 20:16 - 01573382 _____ C:\Windows\WindowsUpdate.log

2015-07-29 22:02 - 2014-08-22 16:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-07-29 19:25 - 2009-07-14 06:45 - 00025856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-07-29 19:25 - 2009-07-14 06:45 - 00025856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-07-29 19:18 - 2015-05-16 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2015-07-29 19:17 - 2014-05-17 21:08 - 00000000 ____D C:\Program Files (x86)\Steam

2015-07-29 19:15 - 2014-11-09 13:31 - 00000000 ____D C:\Users\Tobias\AppData\Local\LogMeIn Hamachi

2015-07-29 19:14 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-07-28 23:33 - 2015-02-01 16:24 - 00000000 ____D C:\AdwCleaner

2015-07-28 22:23 - 2014-08-01 16:39 - 00003842 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1400353225

2015-07-28 22:23 - 2014-05-17 21:00 - 00000000 ____D C:\Program Files (x86)\Opera

2015-07-27 01:29 - 2014-11-07 15:51 - 00000000 ____D C:\Users\Tobias\AppData\Local\Arma 3

2015-07-26 17:36 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2015-07-26 17:33 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2015-07-26 17:30 - 2014-12-17 10:53 - 00000000 ____D C:\ProgramData\TEMP

2015-07-25 14:48 - 2014-07-13 09:32 - 00003340 _____ C:\Windows\Sandboxie.ini

2015-07-24 17:50 - 2014-05-19 19:30 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\.minecraft

2015-07-24 17:15 - 2014-10-31 20:10 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Notepad++

2015-07-24 17:15 - 2014-05-19 15:49 - 00000000 ____D C:\Users\Tobias\AppData\Local\Paint.NET

2015-07-24 10:43 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-07-23 20:19 - 2014-10-04 19:55 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2015-07-22 22:25 - 2014-05-17 20:21 - 00000000 ____D C:\Users\Tobias

2015-07-22 21:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-07-22 17:54 - 2014-06-17 20:50 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\DAEMON Tools Lite

2015-07-22 17:52 - 2015-05-22 19:31 - 00000000 ____D C:\Windows\Minidump

2015-07-21 22:53 - 2014-05-23 19:20 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\vlc

2015-07-20 00:34 - 2015-06-18 17:27 - 00000705 _____ C:\Users\Tobias\Downloads\Schulden.txt

2015-07-18 00:48 - 2014-08-22 16:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-07-17 16:59 - 2014-10-03 19:52 - 00000140 _____ C:\Users\Tobias\AppData\default.pls

2015-07-17 16:54 - 2014-09-08 14:43 - 00000000 ____D C:\Users\Tobias\Desktop\Alles

2015-07-17 16:53 - 2015-02-18 20:34 - 00001981 _____ C:\Users\Tobias\Desktop\Schule.txt

2015-07-15 21:57 - 2014-08-22 16:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-15 21:57 - 2014-08-22 16:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-15 17:07 - 2014-05-17 20:55 - 00000000 ____D C:\Windows\system32\MRT

2015-07-15 14:25 - 2014-05-17 21:00 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-07-15 14:25 - 2014-05-17 21:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-07-15 14:25 - 2014-05-17 21:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-07-14 16:18 - 2014-12-26 06:58 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2015-07-14 11:44 - 2014-12-02 18:05 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-07-09 16:52 - 2014-09-07 12:20 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server

2015-07-05 12:08 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-07-05 10:33 - 2014-06-12 13:16 - 00000000 ____D C:\Users\Tobias\Documents\My Games

2015-07-03 08:43 - 2014-05-17 20:55 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-06-30 14:40 - 2014-10-03 15:31 - 00000000 ____D C:\Users\Tobias\AppData\Local\Ahead
 

Einige Dateien in TEMP:

====================

C:\Users\Tobias\AppData\Local\Temp\Quarantine.exe

C:\Users\Tobias\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\System32\winlogon.exe => Datei ist digital signiert

C:\Windows\System32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\System32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\System32\services.exe => Datei ist digital signiert

C:\Windows\System32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\System32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\System32\rpcss.dll => Datei ist digital signiert

C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-07-24 11:09
 

==================== Ende von log ============================

Probleme sind schon nicht mehr da als ich dieses "FowlsHack" im Startmenü gelöscht hatte, danke :D

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe
 

C:\Qoobox\Quarantine\C\Users\Tobias\AppData\Local\nsf9CE7.tmp.vir
 

C:\TDSSKiller_Quarantine\23.07.2015_20.13.22\susp0001\file0000\tsk0000.dta
 

C:\Windows\SysWOW64\LavasoftTcpService.dll

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.