TDSS Code:
20:57:35.0839 0x2674 TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
20:57:35.0839 0x2674 UEFI system
20:57:54.0464 0x2674 ============================================================
20:57:54.0464 0x2674 Current date / time: 2017/04/21 20:57:54.0464
20:57:54.0464 0x2674 SystemInfo:
20:57:54.0464 0x2674
20:57:54.0464 0x2674 OS Version: 10.0.14393 ServicePack: 0.0
20:57:54.0464 0x2674 Product type: Workstation
20:57:54.0464 0x2674 ComputerName: LENOVO-PC
20:57:54.0464 0x2674 UserName: Manja
20:57:54.0464 0x2674 Windows directory: C:\WINDOWS
20:57:54.0464 0x2674 System windows directory: C:\WINDOWS
20:57:54.0464 0x2674 Running under WOW64
20:57:54.0464 0x2674 Processor architecture: Intel x64
20:57:54.0464 0x2674 Number of processors: 4
20:57:54.0464 0x2674 Page size: 0x1000
20:57:54.0464 0x2674 Boot type: Normal boot
20:57:54.0464 0x2674 CodeIntegrityOptions = 0x00000001
20:57:54.0464 0x2674 ============================================================
20:58:02.0229 0x2674 KLMD registered as C:\WINDOWS\system32\drivers\04160760.sys
20:58:02.0229 0x2674 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.953, osProperties = 0x19
20:58:03.0229 0x2674 System UUID: {4F31EA09-3837-F40B-F169-B5FDCF9CF545}
20:58:04.0511 0x2674 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:58:04.0589 0x2674 ============================================================
20:58:04.0589 0x2674 \Device\Harddisk0\DR0:
20:58:04.0604 0x2674 GPT partitions:
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {BF6A7184-8544-45FB-A78B-BBC875CD61C8}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1F4000
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {3C4D5381-1FEE-49F4-BD08-A2842BEBD1A1}, Name: EFI system partition, StartLBA 0x1F4800, BlocksNum 0x82000
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {BFBFAFE7-A34F-448A-9A5B-6213EB736C22}, UniqueGUID: {37B2536D-FC21-4E94-B713-58F446803292}, Name: Basic data partition, StartLBA 0x276800, BlocksNum 0x1F4000
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {628B78F7-34B0-491A-9D29-C48630E2AD30}, Name: Microsoft reserved partition, StartLBA 0x46A800, BlocksNum 0x40000
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {F6046E4B-531D-47E6-B859-17E7D4316F7C}, Name: Basic data partition, StartLBA 0x4AA800, BlocksNum 0x6F70D800
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {1039B095-4DDE-40DA-8D93-4306C7407A22}, Name: Basic data partition, StartLBA 0x6FBB8000, BlocksNum 0x3200000
20:58:04.0604 0x2674 \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {2ABF23B6-FA2C-428F-BC39-6BEC8C606C7E}, Name: Basic data partition, StartLBA 0x72DB8000, BlocksNum 0x194E800
20:58:04.0604 0x2674 MBR partitions:
20:58:04.0604 0x2674 ============================================================
20:58:04.0745 0x2674 C: <-> \Device\Harddisk0\DR0\Partition5
20:58:04.0933 0x2674 D: <-> \Device\Harddisk0\DR0\Partition6
20:58:04.0933 0x2674 ============================================================
20:58:04.0933 0x2674 Initialize success
20:58:04.0933 0x2674 ============================================================
20:59:17.0063 0x1c98 ============================================================
20:59:17.0063 0x1c98 Scan started
20:59:17.0063 0x1c98 Mode: Manual; SigCheck; TDLFS;
20:59:17.0063 0x1c98 ============================================================
20:59:17.0063 0x1c98 KSN ping started
20:59:43.0657 0x1c98 KSN ping finished: true
20:59:56.0767 0x1c98 ================ Scan system memory ========================
20:59:56.0767 0x1c98 System memory - ok
20:59:56.0767 0x1c98 ================ Scan services =============================
20:59:57.0173 0x1c98 1394ohci - ok
20:59:57.0189 0x1c98 3ware - ok
20:59:57.0220 0x1c98 ACPI - ok
20:59:57.0251 0x1c98 AcpiDev - ok
20:59:57.0267 0x1c98 acpiex - ok
20:59:57.0267 0x1c98 acpipagr - ok
20:59:57.0329 0x1c98 AcpiPmi - ok
20:59:57.0345 0x1c98 acpitime - ok
20:59:57.0392 0x1c98 [ AF7A18603B0B82DFA5B420456FAF2201, 64AD831433778BB0B0B1615EEA7682960ED5815A091A9EFEE95A862EFBDE6D69 ] ACPIVPC C:\WINDOWS\System32\drivers\AcpiVpc.sys
20:59:57.0923 0x1c98 ACPIVPC - ok
20:59:58.0126 0x1c98 [ 671133C0AC2D8B40B7574F69059653E9, A36CC49A0C829A5C4D6CF273791071213F5FFB57DC7022D523CFB731374FF63C ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:59:58.0157 0x1c98 AdobeARMservice - ok
20:59:58.0220 0x1c98 ADP80XX - ok
20:59:58.0423 0x1c98 [ 0D0E5281784C2C526BA43C2ECD374288, BE4B16E08A96A24BEB904A2216A538340FD91A11E0CAB43BF8788C35DAD2D2B5 ] Afc C:\WINDOWS\syswow64\drivers\Afc.sys
20:59:58.0454 0x1c98 Afc - ok
20:59:58.0470 0x1c98 AFD - ok
20:59:58.0517 0x1c98 ahcache - ok
20:59:58.0532 0x1c98 AJRouter - ok
20:59:58.0548 0x1c98 ALG - ok
20:59:58.0642 0x1c98 [ 0990E6809D6C56C6DA85FE0EF20280EA, CC18608EB12DFB055C3AFCA2BB44FEDEE451F3F8CFEB87141F8EAD53F6BF6DD5 ] AMD External Events Utility C:\WINDOWS\system32\atiesrxx.exe
20:59:58.0689 0x1c98 AMD External Events Utility - ok
20:59:58.0720 0x1c98 AmdK8 - ok
20:59:58.0720 0x1c98 amdkmdag - ok
20:59:58.0861 0x1c98 [ 29C00798F093C2F54628F7C54DA77001, 8C85D9936103E19C60C8DE4DE98EA7F722BD3676911D873007FF2D152A456ED7 ] amdkmdap C:\WINDOWS\system32\DRIVERS\atikmpag.sys
20:59:58.0954 0x1c98 amdkmdap - ok
20:59:59.0001 0x1c98 [ 8A375CB3B6D1A56A2AEEE72A5F1D0926, 03D6EA77B141675B719E66DA09D1DACC7137B19F9918C303DD6870B3F36ADEBB ] amdkmpfd C:\WINDOWS\system32\drivers\amdkmpfd.sys
20:59:59.0032 0x1c98 amdkmpfd - ok
20:59:59.0048 0x1c98 AmdPPM - ok
20:59:59.0048 0x1c98 amdsata - ok
20:59:59.0064 0x1c98 amdsbs - ok
20:59:59.0064 0x1c98 amdxata - ok
20:59:59.0345 0x1c98 [ E6CEE7C270AD1CAE17EA910C85211BAE, 1DEB7185CEDC5918C20353C13AA0398D739A318729700F057B13821FF0FF5C97 ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
20:59:59.0392 0x1c98 AntiVirMailService - ok
20:59:59.0423 0x1c98 [ 9658B76971381D9053E48E896256D5EB, 48C763BAF349E663D0E41657779BF5D1106A7C3E7F8C898185DC5D1998C0CDAF ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
20:59:59.0470 0x1c98 AntiVirSchedulerService - ok
20:59:59.0517 0x1c98 [ 9658B76971381D9053E48E896256D5EB, 48C763BAF349E663D0E41657779BF5D1106A7C3E7F8C898185DC5D1998C0CDAF ] AntiVirService C:\Program Files (x86)\Avira\Antivirus\avguard.exe
20:59:59.0564 0x1c98 AntiVirService - ok
20:59:59.0736 0x1c98 [ B62E24EEC8C4B6E8A173CAD069B5033A, 719F7C51D615591E70D549552AC66343526902007480278C0E56AA7E1F406F96 ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
20:59:59.0782 0x1c98 AntiVirWebService - ok
20:59:59.0798 0x1c98 AppID - ok
20:59:59.0814 0x1c98 AppIDSvc - ok
20:59:59.0829 0x1c98 Appinfo - ok
20:59:59.0861 0x1c98 applockerfltr - ok
20:59:59.0907 0x1c98 AppReadiness - ok
20:59:59.0923 0x1c98 AppXSvc - ok
20:59:59.0939 0x1c98 arcsas - ok
20:59:59.0954 0x1c98 AsyncMac - ok
21:00:00.0017 0x1c98 atapi - ok
21:00:00.0048 0x1c98 athr - ok
21:00:00.0079 0x1c98 AudioEndpointBuilder - ok
21:00:00.0095 0x1c98 Audiosrv - ok
21:00:00.0173 0x1c98 [ 11F3AAFB5D279AFBCBB0AD9FF76A24F8, 06C5FA1BD64EB54691629363DD0771394F81E4EB216E489D5169395736E80D99 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
21:00:00.0236 0x1c98 avgntflt - ok
21:00:00.0298 0x1c98 [ F8520E88246641E51108922944FB34A6, 326DCB8114439FB1F75E9DB6E5F7818654FAAC4CD957B80DEE17B850676A737F ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
21:00:00.0345 0x1c98 avipbb - ok
21:00:00.0517 0x1c98 [ 586FCB1EEC849C06A8DDDDAB276AF113, E193FA64A86C27B2B7AA43E74A196BCBF79A9644F94C96E84E6CC76A405193B6 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
21:00:00.0548 0x1c98 Avira.ServiceHost - ok
21:00:00.0579 0x1c98 [ 2CBA09A7983B1D39531B768BCED08C20, B40968DFE1A648CCB9260033E1EA57B5D496274A335B000354156B0DB740EDE0 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
21:00:00.0595 0x1c98 avkmgr - ok
21:00:00.0626 0x1c98 [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject C:\WINDOWS\system32\drivers\avmeject.sys
21:00:00.0673 0x1c98 avmeject - ok
21:00:00.0720 0x1c98 [ 8D18C6406FF8DC39028177E1E5675182, 44985DEE74F235567FB849350256F342BCE26EF66439D761FA3F6EDA22882092 ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys
21:00:00.0767 0x1c98 avnetflt - ok
21:00:00.0907 0x1c98 [ D50D54178CA7BF63BD60ABEC8E7772CC, 19EFE0808C2660A22DD69158FEC30F8CB83167D832C3EBE12C99261C6FB79ADF ] avusbflt C:\WINDOWS\system32\Drivers\avusbflt.sys
21:00:00.0939 0x1c98 avusbflt - ok
21:00:00.0970 0x1c98 AxInstSV - ok
21:00:00.0986 0x1c98 b06bdrv - ok
21:00:01.0017 0x1c98 BasicDisplay - ok
21:00:01.0032 0x1c98 BasicRender - ok
21:00:01.0079 0x1c98 [ E68481BE45ADDF4E2A6790BB653610A4, 1F868D19C2CF206CAB36E990E5DC20782DB69FC51944CDFD494A09333E35F026 ] bcbtums C:\WINDOWS\system32\drivers\bcbtums.sys
21:00:01.0157 0x1c98 bcbtums - ok
21:00:01.0986 0x1c98 [ 85081187E02D743CDC8E2B8728281734, AB1BB7BB4A1C4446754D5A77D4DE25B042AEA95870092FE951C8C4CCDA8FCD15 ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys
21:00:02.0345 0x1c98 BCM43XX - ok
21:00:02.0564 0x1c98 [ 02123BE5D4D5CA48E93AC914EC936DC4, 1F5EBE116590726D0F601D487F26C7FC550F62144A0F9A64022E3DC2C940F17E ] BcmBtRSupport C:\WINDOWS\system32\BtwRSupportService.exe
21:00:02.0626 0x1c98 BcmBtRSupport - ok
21:00:02.0657 0x1c98 bcmfn - ok
21:00:02.0673 0x1c98 bcmfn2 - ok
21:00:03.0376 0x1c98 [ 85081187E02D743CDC8E2B8728281734, AB1BB7BB4A1C4446754D5A77D4DE25B042AEA95870092FE951C8C4CCDA8FCD15 ] BCMWL63A C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys
21:00:03.0579 0x1c98 BCMWL63A - ok
21:00:03.0611 0x1c98 BDESVC - ok
21:00:03.0626 0x1c98 Beep - ok
21:00:03.0657 0x1c98 BFE - ok
21:00:03.0689 0x1c98 BITS - ok
21:00:03.0689 0x1c98 bowser - ok
21:00:03.0720 0x1c98 BrokerInfrastructure - ok
21:00:03.0751 0x1c98 Browser - ok
21:00:03.0767 0x1c98 BthA2DP - ok
21:00:03.0829 0x1c98 BthAvrcpTg - ok
21:00:03.0829 0x1c98 BthEnum - ok
21:00:03.0892 0x1c98 BthHFAud - ok
21:00:03.0907 0x1c98 BthHFEnum - ok
21:00:03.0923 0x1c98 bthhfhid - ok
21:00:03.0939 0x1c98 BthHFSrv - ok
21:00:03.0970 0x1c98 BthLEEnum - ok
21:00:03.0986 0x1c98 BTHMODEM - ok
21:00:04.0001 0x1c98 BthPan - ok
21:00:04.0017 0x1c98 BTHPORT - ok
21:00:04.0017 0x1c98 bthserv - ok
21:00:04.0017 0x1c98 BTHUSB - ok
21:00:04.0111 0x1c98 [ 93995198BCBA40C99994B4CF3ABCE964, 38A9422D9202FC1BA4104186BBA60CE55FD7A7239DB2CDE12B8D727F00F977AF ] btwampfl C:\WINDOWS\system32\DRIVERS\btwampfl.sys
21:00:04.0329 0x1c98 btwampfl - ok
21:00:04.0376 0x1c98 buttonconverter - ok
21:00:04.0392 0x1c98 CapImg - ok
21:00:04.0407 0x1c98 cdfs - ok
21:00:04.0439 0x1c98 CDPSvc - ok
21:00:04.0439 0x1c98 CDPUserSvc - ok
21:00:04.0626 0x1c98 cdrom - ok
21:00:04.0704 0x1c98 CertPropSvc - ok
21:00:04.0892 0x1c98 [ 59B4AB79011957DD3B83F0C2E63741BD, 5DE68785D701DBA0F98452B7D5CC407BEECD51685F39516157733CED2EF2FA19 ] chip1click C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
21:00:05.0282 0x1c98 chip1click - detected UnsignedFile.Multi.Generic ( 1 )
21:00:05.0970 0x1c98 Detect skipped due to KSN trusted
21:00:05.0970 0x1c98 chip1click - ok
21:00:05.0986 0x1c98 cht4iscsi - ok
21:00:06.0017 0x1c98 cht4vbd - ok
21:00:06.0079 0x1c98 circlass - ok
21:00:06.0111 0x1c98 CLFS - ok
21:00:06.0767 0x1c98 [ 209D07A9F54C2211C4C1E387EC971C97, 02112545E31E617602ED527E9191BD819413FB3732EAD16699E0C5795F8C58B2 ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
21:00:06.0829 0x1c98 ClickToRunSvc - ok
21:00:06.0845 0x1c98 ClipSVC - ok
21:00:06.0861 0x1c98 clreg - ok
21:00:06.0907 0x1c98 CmBatt - ok
21:00:06.0939 0x1c98 CNG - ok
21:00:06.0970 0x1c98 cnghwassist - ok
21:00:07.0095 0x1c98 [ A0E8F4630E62D7616F0186B07ED3B66B, 9EF5FCA42FF7ECA59EDE736908D37CF53421EED830FAA8EBBD461CE7939EA09C ] CnxtHdAudService C:\WINDOWS\system32\drivers\CHDRT64.sys
21:00:07.0126 0x1c98 CnxtHdAudService - ok
21:00:07.0282 0x1c98 CompositeBus - ok
21:00:07.0298 0x1c98 COMSysApp - ok
21:00:07.0329 0x1c98 condrv - ok
21:00:07.0345 0x1c98 CoreMessagingRegistrar - ok
21:00:07.0501 0x1c98 [ 2EF1127FFCB66C5D41A98A734B021FE1, 4587DF6F67BAD40BDC07B9670CF15EBC86337A2B8AFAE73F89827076886F8B1A ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
21:00:09.0064 0x1c98 cphs - ok
21:00:09.0079 0x1c98 CryptSvc - ok
21:00:09.0142 0x1c98 [ 4E6337DE03F36BCE168110E6B59F6A5B, 2DB940EBBA971B3801E273B80D8CBD975040A8B87908E7E0733E4DBB0EFC2611 ] CxAudMsg C:\WINDOWS\system32\CxAudMsg64.exe
21:00:09.0157 0x1c98 CxAudMsg - ok
21:00:09.0173 0x1c98 dam - ok
21:00:09.0204 0x1c98 DcomLaunch - ok
21:00:09.0236 0x1c98 DcpSvc - ok
21:00:09.0267 0x1c98 defragsvc - ok
21:00:09.0282 0x1c98 DeviceAssociationService - ok
21:00:09.0298 0x1c98 DeviceInstall - ok
21:00:09.0345 0x1c98 DevQueryBroker - ok
21:00:09.0361 0x1c98 Dfsc - ok
21:00:09.0439 0x1c98 [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys
21:00:09.0861 0x1c98 dg_ssudbus - ok
21:00:09.0954 0x1c98 Dhcp - ok
21:00:10.0048 0x1c98 diagnosticshub.standardcollector.service - ok
21:00:10.0079 0x1c98 DiagTrack - ok
21:00:10.0126 0x1c98 disk - ok
21:00:10.0173 0x1c98 DmEnrollmentSvc - ok
21:00:10.0220 0x1c98 dmvsc - ok
21:00:10.0251 0x1c98 dmwappushservice - ok
21:00:10.0282 0x1c98 Dnscache - ok
21:00:10.0314 0x1c98 dot3svc - ok
21:00:10.0345 0x1c98 DPS - ok
21:00:10.0408 0x1c98 drmkaud - ok
21:00:10.0470 0x1c98 DsmSvc - ok
21:00:10.0486 0x1c98 DsSvc - ok
21:00:10.0517 0x1c98 DXGKrnl - ok
21:00:10.0532 0x1c98 EapHost - ok
21:00:10.0564 0x1c98 ebdrv - ok
21:00:10.0595 0x1c98 EFS - ok
21:00:10.0611 0x1c98 EhStorClass - ok
21:00:10.0657 0x1c98 EhStorTcgDrv - ok
21:00:10.0689 0x1c98 embeddedmode - ok
21:00:10.0704 0x1c98 EntAppSvc - ok
21:00:10.0814 0x1c98 [ 20ECD0A490A121CB34F553FAD1DBBD39, 17C9DA33E78FBC7582B0AA53C611929B80FBBE1343B84A179D515B51C964D218 ] EpsonScanSvc C:\WINDOWS\system32\EscSvc64.exe
21:00:10.0829 0x1c98 EpsonScanSvc - ok
21:00:11.0017 0x1c98 [ A7E8186E04F38E836C19AC147F8B2ED0, 329639595F02060C215A6334FCE1651FB9B9B5679BA9052A487B57265608D162 ] EPSON_PM_RPCV4_05 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
21:00:11.0032 0x1c98 EPSON_PM_RPCV4_05 - ok
21:00:11.0032 0x1c98 ErrDev - ok
21:00:11.0283 0x1c98 [ 8842ED1E87D7662F249B5B63501E693B, A6D71351C2F32295926664875369C0BF93C59541B023884BDAC684E1EA94487A ] ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
21:00:11.0361 0x1c98 ESRV_SVC_QUEENCREEK - ok
21:00:11.0595 0x1c98 [ 6BD85B39B7B23F03B24CF641ED29147B, 850F21750BB39E5239B1584E1117844CAAAF6A5C58E79366552309F917675CE5 ] ETD C:\WINDOWS\system32\DRIVERS\ETD.sys
21:00:11.0657 0x1c98 ETD - ok
21:00:11.0736 0x1c98 [ 8916EACF1256E1C5A3AF81FD39C747E7, FF28FB95E9F9287C1005CF0D9EB84F7CA3D137689862860C9848398504E1EFFF ] ETDService C:\Program Files\Elantech\ETDService.exe
21:00:11.0767 0x1c98 ETDService - ok
21:00:11.0829 0x1c98 EventSystem - ok
21:00:11.0861 0x1c98 exfat - ok
21:00:11.0892 0x1c98 fastfat - ok
21:00:11.0908 0x1c98 Fax - ok
21:00:11.0939 0x1c98 fdc - ok
21:00:11.0970 0x1c98 fdPHost - ok
21:00:11.0970 0x1c98 FDResPub - ok
21:00:12.0048 0x1c98 fhsvc - ok
21:00:12.0111 0x1c98 FileCrypt - ok
21:00:12.0126 0x1c98 FileInfo - ok
21:00:12.0142 0x1c98 Filetrace - ok
21:00:12.0157 0x1c98 flpydisk - ok
21:00:12.0173 0x1c98 FltMgr - ok
21:00:12.0204 0x1c98 FontCache - ok
21:00:12.0314 0x1c98 FontCache3.0.0.0 - ok
21:00:12.0329 0x1c98 FrameServer - ok
21:00:12.0345 0x1c98 FsDepends - ok
21:00:12.0361 0x1c98 Fs_Rec - ok
21:00:12.0376 0x1c98 fvevol - ok
21:00:12.0611 0x1c98 [ 0D2843C3C676B852D0B01CEA1E1DAE6C, 2F2751E09725D52008865F08A08F9989BCC4BA07FBC11B3BEF4332DC463CFC63 ] fwlanusb5_nv2 C:\WINDOWS\system32\DRIVERS\fwlanusb5_nv2.sys
21:00:12.0657 0x1c98 fwlanusb5_nv2 - ok
21:00:12.0704 0x1c98 gencounter - ok
21:00:12.0767 0x1c98 genericusbfn - ok
21:00:12.0783 0x1c98 GPIOClx0101 - ok
21:00:12.0814 0x1c98 gpsvc - ok
21:00:12.0861 0x1c98 GpuEnergyDrv - ok
21:00:12.0892 0x1c98 HDAudBus - ok
21:00:12.0939 0x1c98 HidBatt - ok
21:00:12.0970 0x1c98 HidBth - ok
21:00:12.0986 0x1c98 hidi2c - ok
21:00:13.0001 0x1c98 hidinterrupt - ok
21:00:13.0001 0x1c98 HidIr - ok
21:00:13.0064 0x1c98 hidserv - ok
21:00:13.0079 0x1c98 HidUsb - ok
21:00:13.0095 0x1c98 HomeGroupListener - ok
21:00:13.0173 0x1c98 HomeGroupProvider - ok
21:00:13.0236 0x1c98 HpSAMD - ok
21:00:13.0251 0x1c98 HTTP - ok
21:00:13.0298 0x1c98 HvHost - ok
21:00:13.0361 0x1c98 hvservice - ok
21:00:13.0376 0x1c98 hwpolicy - ok
21:00:13.0392 0x1c98 hyperkbd - ok
21:00:13.0423 0x1c98 i8042prt - ok
21:00:13.0454 0x1c98 iagpio - ok
21:00:13.0470 0x1c98 iai2c - ok
21:00:13.0501 0x1c98 iaLPSS2i_GPIO2 - ok
21:00:13.0517 0x1c98 iaLPSS2i_I2C - ok
21:00:13.0548 0x1c98 iaLPSSi_GPIO - ok
21:00:13.0548 0x1c98 iaLPSSi_I2C - ok
21:00:13.0736 0x1c98 [ 71341219FBB4BAB7F2462C4267DAB594, 0C6B684781D27F423D20186A40D7513DD6ABC38AD286D013791B37CBF5477A55 ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys
21:00:13.0767 0x1c98 iaStorA - ok
21:00:13.0783 0x1c98 iaStorAV - ok
21:00:13.0892 0x1c98 [ B64E1D5BABD095C13A382838F9DCC77F, D8FF4E1BBA7EF5EE136CC5892C72E0774D0AAE40CD9EB3368A698DA6C078BBAA ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:00:13.0907 0x1c98 IAStorDataMgrSvc - ok
21:00:13.0923 0x1c98 iaStorV - ok
21:00:13.0954 0x1c98 ibbus - ok
21:00:14.0001 0x1c98 icssvc - ok
21:00:15.0345 0x1c98 [ 197FC03D62EEBCBCB8866B7EC0E1A6F0, 4197CBDAED113D13256C20FD2058E72C60EB2C28AE60EF6C3B3A0969CD7B2764 ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
21:00:15.0611 0x1c98 igfx - ok
21:00:15.0751 0x1c98 [ 34CB407D6FCAB16C8C1A1C97C72D15AC, 4EBC135F8ECB9756F62C0918CB811420FAC36AAE78667D318B9F4BF01862ECBD ] igfxCUIService2.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
21:00:15.0798 0x1c98 igfxCUIService2.0.0.0 - ok
21:00:15.0829 0x1c98 IKEEXT - ok
21:00:15.0861 0x1c98 IndirectKmd - ok
21:00:15.0908 0x1c98 [ DB65573521AB51941F4FA799D0968136, 418F5E3FE725B7B114F3DAEBDCEBCE7F4AD8ECAAFF572C02BA9ACCE86D55BFD8 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
21:00:15.0954 0x1c98 intaud_WaveExtensible - ok
21:00:16.0079 0x1c98 [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
21:00:16.0111 0x1c98 IntcDAud - ok
21:00:16.0314 0x1c98 [ 0DB1E3F6189C628675F855C0EB510419, 989F539E82105019D2D81255369B96DC65826CD2A421DA09809155B26F69C555 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:00:16.0408 0x1c98 Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
21:00:17.0673 0x1c98 Detect skipped due to KSN trusted
21:00:17.0673 0x1c98 Intel(R) Capability Licensing Service Interface - ok
21:00:17.0892 0x1c98 [ 492AAF2FF66F437F0E796574B116EFC3, 6BF21C61ED05705DD58203952A750D1AB4D4B62F3A2B640BBBD9B85D1ECC3E5C ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
21:00:17.0923 0x1c98 Intel(R) Capability Licensing Service TCP IP Interface - ok
21:00:17.0986 0x1c98 intelide - ok
21:00:18.0017 0x1c98 intelpep - ok
21:00:18.0048 0x1c98 intelppm - ok
21:00:18.0064 0x1c98 iorate - ok
21:00:18.0064 0x1c98 IpFilterDriver - ok
21:00:18.0126 0x1c98 iphlpsvc - ok
21:00:18.0142 0x1c98 IPMIDRV - ok
21:00:18.0158 0x1c98 IPNAT - ok
21:00:18.0173 0x1c98 irda - ok
21:00:18.0173 0x1c98 IRENUM - ok
21:00:18.0189 0x1c98 irmon - ok
21:00:18.0220 0x1c98 isapnp - ok
21:00:18.0251 0x1c98 iScsiPrt - ok
21:00:18.0548 0x1c98 [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:00:18.0579 0x1c98 jhi_service - ok
21:00:18.0658 0x1c98 kbdclass - ok
21:00:18.0673 0x1c98 kbdhid - ok
21:00:18.0704 0x1c98 kdnic - ok
21:00:18.0704 0x1c98 KeyIso - ok
21:00:18.0720 0x1c98 KSecDD - ok
21:00:18.0751 0x1c98 KSecPkg - ok
21:00:18.0767 0x1c98 ksthunk - ok
21:00:18.0798 0x1c98 KtmRm - ok
21:00:18.0845 0x1c98 [ 4E5EA006CFFB96E0BAFC767D659AAB9A, A24A334955FB98D0903971454FADAC639D535BD32BB48964BD95019C7F6C454E ] L1C C:\WINDOWS\System32\drivers\L1C63x64.sys
21:00:18.0876 0x1c98 L1C - ok
21:00:18.0892 0x1c98 LanmanServer - ok
21:00:18.0892 0x1c98 LanmanWorkstation - ok
21:00:18.0939 0x1c98 lfsvc - ok
21:00:18.0970 0x1c98 LicenseManager - ok
21:00:18.0970 0x1c98 lltdio - ok
21:00:18.0986 0x1c98 lltdsvc - ok
21:00:19.0017 0x1c98 lmhosts - ok
21:00:19.0236 0x1c98 [ 4799AAD825F79C187FBA948D299386E7, 4E3618CF59B81825CF3E2AEC070CC57E3869BFF7543BB151530F02A3947A22F8 ] LSC.Services.SystemService C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
21:00:19.0298 0x1c98 LSC.Services.SystemService - ok
21:00:19.0345 0x1c98 LSI_SAS - ok
21:00:19.0361 0x1c98 LSI_SAS2i - ok
21:00:19.0392 0x1c98 LSI_SAS3i - ok
21:00:19.0408 0x1c98 LSI_SSS - ok
21:00:19.0439 0x1c98 LSM - ok
21:00:19.0439 0x1c98 luafv - ok
21:00:19.0470 0x1c98 MapsBroker - ok
21:00:19.0501 0x1c98 megasas - ok
21:00:19.0564 0x1c98 megasas2i - ok
21:00:19.0579 0x1c98 megasr - ok
21:00:19.0626 0x1c98 [ 18B9AD128EC84E8D16A83F70CF36594F, 199DF15D68E2A079794E5DD325162C1A68A65EF26EEF5A6C6154281DDE57279A ] MEIx64 C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
21:00:19.0673 0x1c98 MEIx64 - ok
21:00:19.0736 0x1c98 MessagingService - ok
21:00:19.0767 0x1c98 mlx4_bus - ok
21:00:19.0783 0x1c98 MMCSS - ok
21:00:19.0829 0x1c98 Modem - ok
21:00:19.0876 0x1c98 monitor - ok
21:00:19.0908 0x1c98 mouclass - ok
21:00:19.0908 0x1c98 mouhid - ok
21:00:19.0908 0x1c98 mountmgr - ok
21:00:20.0001 0x1c98 [ 2419641B6E64F4F76D369110969DA77C, 6E3FBCA61089BFFA0B214CD8AFF35E8F85FD3240BBA75B05FA4E98B2453AEF55 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:00:20.0048 0x1c98 MozillaMaintenance - ok
21:00:20.0048 0x1c98 mpsdrv - ok
21:00:20.0064 0x1c98 MpsSvc - ok
21:00:20.0095 0x1c98 MRxDAV - ok
21:00:20.0126 0x1c98 mrxsmb - ok
21:00:20.0142 0x1c98 mrxsmb10 - ok
21:00:20.0158 0x1c98 mrxsmb20 - ok
21:00:20.0189 0x1c98 MsBridge - ok
21:00:20.0204 0x1c98 MSDTC - ok
21:00:20.0220 0x1c98 Msfs - ok
21:00:20.0283 0x1c98 msgpiowin32 - ok
21:00:20.0298 0x1c98 mshidkmdf - ok
21:00:20.0314 0x1c98 mshidumdf - ok
21:00:20.0329 0x1c98 msisadrv - ok
21:00:20.0392 0x1c98 MSiSCSI - ok
21:00:20.0408 0x1c98 msiserver - ok
21:00:20.0423 0x1c98 MSKSSRV - ok
21:00:20.0439 0x1c98 MsLldp - ok
21:00:20.0470 0x1c98 MSPCLOCK - ok
21:00:20.0486 0x1c98 MSPQM - ok
21:00:20.0501 0x1c98 MsRPC - ok
21:00:20.0533 0x1c98 mssmbios - ok
21:00:20.0548 0x1c98 MSTEE - ok
21:00:20.0579 0x1c98 MTConfig - ok
21:00:20.0579 0x1c98 Mup - ok
21:00:20.0595 0x1c98 mvumis - ok
21:00:20.0611 0x1c98 NativeWifiP - ok
21:00:20.0642 0x1c98 NcaSvc - ok
21:00:20.0658 0x1c98 NcbService - ok
21:00:20.0689 0x1c98 NcdAutoSetup - ok
21:00:20.0704 0x1c98 ndfltr - ok
21:00:20.0736 0x1c98 NDIS - ok
21:00:20.0736 0x1c98 NdisCap - ok
21:00:20.0814 0x1c98 NdisImPlatform - ok
21:00:20.0829 0x1c98 NdisTapi - ok
21:00:20.0829 0x1c98 Ndisuio - ok
21:00:20.0845 0x1c98 NdisVirtualBus - ok
21:00:20.0861 0x1c98 NdisWan - ok
21:00:20.0861 0x1c98 ndiswanlegacy - ok
21:00:20.0876 0x1c98 ndproxy - ok
21:00:20.0892 0x1c98 Ndu - ok
21:00:20.0908 0x1c98 NetAdapterCx - ok
21:00:20.0908 0x1c98 NetBIOS - ok
21:00:20.0923 0x1c98 NetBT - ok
21:00:20.0923 0x1c98 Netlogon - ok
21:00:20.0939 0x1c98 Netman - ok
21:00:20.0986 0x1c98 netprofm - ok
21:00:21.0017 0x1c98 NetSetupSvc - ok
21:00:21.0158 0x1c98 NetTcpPortSharing - ok
21:00:21.0204 0x1c98 NgcCtnrSvc - ok
21:00:21.0236 0x1c98 NgcSvc - ok
21:00:21.0361 0x1c98 [ 9B214FF571749C9055EEDFCE52A81F90, F1D0BD4DF34B6F5532B1756E50C6317D63DD71AB577D1F8CBA74A7A225456EB0 ] NitroDriverReadSpool8 C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
21:00:21.0408 0x1c98 NitroDriverReadSpool8 - ok
21:00:21.0408 0x1c98 NlaSvc - ok
21:00:22.0220 0x1c98 [ BF15D119A19F8FD8B71F1E22C1BDA579, D24EFD135DB598DF2858AE8CDBEF92B439AE47F2880DD6E45D52ABD1E4FA5394 ] nlsX86cc C:\WINDOWS\SysWOW64\NLSSRV32.EXE
21:00:22.0892 0x1c98 nlsX86cc - ok
21:00:22.0908 0x1c98 Npfs - ok
21:00:22.0954 0x1c98 npsvctrig - ok
21:00:22.0986 0x1c98 nsi - ok
21:00:22.0986 0x1c98 nsiproxy - ok
21:00:23.0001 0x1c98 NTFS - ok
21:00:23.0033 0x1c98 Null - ok
21:00:23.0080 0x1c98 nvraid - ok
21:00:23.0080 0x1c98 nvstor - ok
21:00:23.0142 0x1c98 OneSyncSvc - ok
21:00:23.0298 0x1c98 [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:00:23.0329 0x1c98 ose - ok
21:00:23.0345 0x1c98 p2pimsvc - ok
21:00:23.0345 0x1c98 p2psvc - ok
21:00:23.0361 0x1c98 Parport - ok
21:00:23.0376 0x1c98 partmgr - ok
21:00:23.0423 0x1c98 PcaSvc - ok
21:00:23.0439 0x1c98 pci - ok
21:00:23.0470 0x1c98 pciide - ok
21:00:23.0486 0x1c98 pcmcia - ok
21:00:23.0501 0x1c98 pcw - ok
21:00:23.0517 0x1c98 pdc - ok
21:00:23.0533 0x1c98 PEAUTH - ok
21:00:23.0548 0x1c98 percsas2i - ok
21:00:23.0564 0x1c98 percsas3i - ok
21:00:23.0595 0x1c98 PerfHost - ok
21:00:23.0642 0x1c98 PhoneSvc - ok
21:00:23.0689 0x1c98 PimIndexMaintenanceSvc - ok
21:00:23.0736 0x1c98 pla - ok
21:00:23.0736 0x1c98 PlugPlay - ok
21:00:23.0751 0x1c98 PNRPAutoReg - ok
21:00:23.0751 0x1c98 PNRPsvc - ok
21:00:23.0767 0x1c98 PolicyAgent - ok
21:00:23.0767 0x1c98 Power - ok
21:00:23.0798 0x1c98 PptpMiniport - ok
21:00:24.0439 0x1c98 [ 77ABF70C71922873BC160933571B3F83, 7FCFBB4B42E7A92FCF11388CD5B600EA79A7C134F13A8A88CF8DCD3DB96C3F5A ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
21:00:24.0908 0x1c98 PrintNotify - ok
21:00:24.0955 0x1c98 Processor - ok
21:00:24.0986 0x1c98 ProfSvc - ok
21:00:24.0986 0x1c98 Psched - ok
21:00:25.0017 0x1c98 QWAVE - ok
21:00:25.0048 0x1c98 QWAVEdrv - ok
21:00:25.0080 0x1c98 RasAcd - ok
21:00:25.0158 0x1c98 RasAgileVpn - ok
21:00:25.0189 0x1c98 RasAuto - ok
21:00:25.0220 0x1c98 Rasl2tp - ok
21:00:25.0236 0x1c98 RasMan - ok
21:00:25.0251 0x1c98 RasPppoe - ok
21:00:25.0251 0x1c98 RasSstp - ok
21:00:25.0267 0x1c98 rdbss - ok
21:00:25.0298 0x1c98 rdpbus - ok
21:00:25.0314 0x1c98 RDPDR - ok
21:00:25.0345 0x1c98 RdpVideoMiniport - ok
21:00:25.0345 0x1c98 rdyboost - ok
21:00:25.0392 0x1c98 ReFSv1 - ok
21:00:25.0423 0x1c98 RemoteAccess - ok
21:00:25.0455 0x1c98 RemoteRegistry - ok
21:00:25.0501 0x1c98 RetailDemo - ok
21:00:25.0533 0x1c98 RFCOMM - ok
21:00:25.0736 0x1c98 [ FBA61BB4C484A01A655AFB18FF86C417, D53B2110CB09D0A909C4E330C468351BFE076BB056CCDDCB8ADA2FB91E96352E ] RichVideo64 C:\Program Files\CyberLink\Shared files\RichVideo64.exe
21:00:25.0767 0x1c98 RichVideo64 - ok
21:00:25.0783 0x1c98 RmSvc - ok
21:00:25.0814 0x1c98 RpcEptMapper - ok
21:00:25.0845 0x1c98 RpcLocator - ok
21:00:25.0861 0x1c98 RpcSs - ok
21:00:25.0876 0x1c98 rspndr - ok
21:00:26.0001 0x1c98 [ 05E8543E0D8C07535944FC0CB15E0DA0, 8E076E7582C95E9251CB03D2F1F7FBA1E31ACAE21E16224C9ACDCC1489165A86 ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
21:00:26.0017 0x1c98 RTSUER - ok
21:00:26.0423 0x1c98 [ FF8B926ABA5BDA6562D7106E8A92BE7B, 887007E4D3F90CF6228B21D75E5B89818C18A7F2E2DB66C85039E6ECB5A16A15 ] rtsuvc C:\WINDOWS\system32\DRIVERS\rtsuvc.sys
21:00:26.0501 0x1c98 rtsuvc - ok
21:00:26.0548 0x1c98 s3cap - ok
21:00:26.0580 0x1c98 SamSs - ok
21:00:26.0580 0x1c98 SAService - ok
21:00:26.0642 0x1c98 sbp2port - ok
21:00:26.0720 0x1c98 SCardSvr - ok
21:00:26.0751 0x1c98 ScDeviceEnum - ok
21:00:26.0798 0x1c98 scfilter - ok
21:00:26.0814 0x1c98 Schedule - ok
21:00:26.0829 0x1c98 scmbus - ok
21:00:26.0876 0x1c98 scmdisk0101 - ok
21:00:26.0923 0x1c98 SCPolicySvc - ok
21:00:26.0955 0x1c98 sdbus - ok
21:00:27.0001 0x1c98 SDRSVC - ok
21:00:27.0048 0x1c98 sdstor - ok
21:00:27.0064 0x1c98 seclogon - ok
21:00:27.0142 0x1c98 [ 07F83829E7429E60298440CD1E601A6A, 9F1229CD8DD9092C27A01F5D56E3C0D59C2BB9F0139ABF042E56F343637FDA33 ] semav6msr64 C:\WINDOWS\system32\drivers\semav6msr64.sys
21:00:27.0189 0x1c98 semav6msr64 - ok
21:00:27.0204 0x1c98 SENS - ok
21:00:27.0236 0x1c98 SensorDataService - ok
21:00:27.0267 0x1c98 SensorService - ok
21:00:27.0298 0x1c98 SensrSvc - ok
21:00:27.0314 0x1c98 SerCx - ok
21:00:27.0330 0x1c98 SerCx2 - ok
21:00:27.0345 0x1c98 Serenum - ok
21:00:27.0376 0x1c98 Serial - ok
21:00:27.0408 0x1c98 sermouse - ok
21:00:27.0439 0x1c98 SessionEnv - ok
21:00:27.0454 0x1c98 sfloppy - ok
21:00:27.0501 0x1c98 SharedAccess - ok
21:00:27.0626 0x1c98 ShellHWDetection - ok
21:00:27.0658 0x1c98 shpamsvc - ok
21:00:27.0673 0x1c98 SiSRaid2 - ok
21:00:27.0689 0x1c98 SiSRaid4 - ok
21:00:27.0814 0x1c98 [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:00:27.0861 0x1c98 SkypeUpdate - ok
21:00:27.0923 0x1c98 smphost - ok
21:00:27.0986 0x1c98 [ 6CFE5AB2A11DC8FD80B4CE74364C39BC, E271867F4944CFA1E3ED25061C190D00B808198E20153E56D22D63871019F315 ] smsbda C:\WINDOWS\system32\drivers\smsbda.sys
21:00:28.0048 0x1c98 smsbda - ok
21:00:28.0142 0x1c98 SmsRouter - ok
21:00:28.0173 0x1c98 SNMPTRAP - ok
21:00:28.0251 0x1c98 [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
21:00:28.0361 0x1c98 Sony PC Companion - detected UnsignedFile.Multi.Generic ( 1 )
21:00:28.0923 0x1c98 Detect skipped due to KSN trusted
21:00:28.0923 0x1c98 Sony PC Companion - ok
21:00:28.0970 0x1c98 spaceport - ok
21:00:28.0986 0x1c98 SpbCx - ok
21:00:29.0017 0x1c98 Spooler - ok
21:00:29.0048 0x1c98 sppsvc - ok
21:00:29.0064 0x1c98 srv - ok
21:00:29.0080 0x1c98 srv2 - ok
21:00:29.0095 0x1c98 srvnet - ok
21:00:29.0189 0x1c98 SSDPSRV - ok
21:00:29.0220 0x1c98 SstpSvc - ok
21:00:29.0314 0x1c98 [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
21:00:29.0392 0x1c98 ssudmdm - ok
21:00:29.0423 0x1c98 StateRepository - ok
21:00:29.0455 0x1c98 stexstor - ok
21:00:29.0517 0x1c98 stisvc - ok
21:00:29.0533 0x1c98 storahci - ok
21:00:29.0580 0x1c98 storflt - ok
21:00:29.0595 0x1c98 stornvme - ok
21:00:29.0642 0x1c98 storqosflt - ok
21:00:29.0673 0x1c98 StorSvc - ok
21:00:29.0689 0x1c98 storufs - ok
21:00:29.0705 0x1c98 storvsc - ok
21:00:29.0830 0x1c98 [ 26B2BB5733F69B0A8306BAC37551F90A, 60F1A0C23727144B53F1C64348907AAD611F991C0A8C9F93AC8194210634420B ] SUService C:\Program Files (x86)\Lenovo\System Update\SUService.exe
21:00:29.0861 0x1c98 SUService - ok
21:00:29.0892 0x1c98 svsvc - ok
21:00:29.0892 0x1c98 swenum - ok
21:00:29.0908 0x1c98 swprv - ok
21:00:29.0955 0x1c98 Synth3dVsc - ok
21:00:29.0986 0x1c98 SysMain - ok
21:00:30.0033 0x1c98 SystemEventsBroker - ok
21:00:30.0189 0x1c98 [ 48D2B8AA8C2F1C3360EC33554EC4E6D2, 0F66A9CBED9E70DA3CED6E009795000D41259AD345E3BD3C2EA2F2969588BB04 ] SystemUsageReportSvc_QUEENCREEK C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
21:00:30.0236 0x1c98 SystemUsageReportSvc_QUEENCREEK - ok
21:00:30.0267 0x1c98 TabletInputService - ok
21:00:30.0267 0x1c98 TapiSrv - ok
21:00:30.0298 0x1c98 Tcpip - ok
21:00:30.0298 0x1c98 Tcpip6 - ok
21:00:30.0345 0x1c98 tcpipreg - ok
21:00:30.0361 0x1c98 tdx - ok
21:00:30.0376 0x1c98 terminpt - ok
21:00:30.0408 0x1c98 TermService - ok
21:00:30.0439 0x1c98 Themes - ok
21:00:30.0455 0x1c98 TieringEngineService - ok
21:00:30.0470 0x1c98 tiledatamodelsvc - ok
21:00:30.0501 0x1c98 TimeBrokerSvc - ok
21:00:30.0517 0x1c98 TPM - ok
21:00:30.0533 0x1c98 TrkWks - ok
21:00:30.0580 0x1c98 TrustedInstaller - ok
21:00:30.0580 0x1c98 tsusbflt - ok
21:00:30.0626 0x1c98 TsUsbGD - ok
21:00:30.0626 0x1c98 tunnel - ok
21:00:30.0658 0x1c98 tzautoupdate - ok
21:00:30.0705 0x1c98 UASPStor - ok
21:00:30.0705 0x1c98 UcmCx0101 - ok
21:00:30.0720 0x1c98 UcmTcpciCx0101 - ok
21:00:30.0720 0x1c98 UcmUcsi - ok
21:00:30.0736 0x1c98 Ucx01000 - ok
21:00:30.0751 0x1c98 UdeCx - ok
21:00:30.0751 0x1c98 udfs - ok
21:00:30.0767 0x1c98 UEFI - ok
21:00:30.0767 0x1c98 Ufx01000 - ok
21:00:30.0783 0x1c98 UfxChipidea - ok
21:00:30.0798 0x1c98 ufxsynopsys - ok
21:00:30.0830 0x1c98 UI0Detect - ok
21:00:30.0861 0x1c98 umbus - ok
21:00:30.0892 0x1c98 UmPass - ok
21:00:30.0908 0x1c98 UmRdpService - ok
21:00:30.0955 0x1c98 UnistoreSvc - ok
21:00:30.0986 0x1c98 upnphost - ok
21:00:31.0001 0x1c98 UrsChipidea - ok
21:00:31.0017 0x1c98 UrsCx01000 - ok
21:00:31.0017 0x1c98 UrsSynopsys - ok
21:00:31.0048 0x1c98 usbccgp - ok
21:00:31.0095 0x1c98 usbcir - ok
21:00:31.0095 0x1c98 usbehci - ok
21:00:31.0111 0x1c98 usbhub - ok
21:00:31.0126 0x1c98 USBHUB3 - ok
21:00:31.0142 0x1c98 usbohci - ok
21:00:31.0142 0x1c98 usbprint - ok
21:00:31.0158 0x1c98 usbser - ok
21:00:31.0189 0x1c98 USBSTOR - ok
21:00:31.0205 0x1c98 usbuhci - ok
21:00:31.0220 0x1c98 USBXHCI - ok
21:00:31.0220 0x1c98 usb_rndisx - ok
21:00:31.0251 0x1c98 UserDataSvc - ok
21:00:31.0267 0x1c98 UserManager - ok
21:00:31.0533 0x1c98 [ 8842ED1E87D7662F249B5B63501E693B, A6D71351C2F32295926664875369C0BF93C59541B023884BDAC684E1EA94487A ] USER_ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
21:00:31.0564 0x1c98 USER_ESRV_SVC_QUEENCREEK - ok
21:00:31.0564 0x1c98 UsoSvc - ok
21:00:31.0580 0x1c98 VaultSvc - ok
21:00:31.0580 0x1c98 vdrvroot - ok
21:00:31.0595 0x1c98 vds - ok
21:00:31.0626 0x1c98 VerifierExt - ok
21:00:31.0626 0x1c98 vhdmp - ok
21:00:31.0642 0x1c98 vhf - ok
21:00:31.0642 0x1c98 vmbus - ok
21:00:31.0673 0x1c98 VMBusHID - ok
21:00:31.0673 0x1c98 vmgid - ok
21:00:31.0689 0x1c98 vmicguestinterface - ok
21:00:31.0705 0x1c98 vmicheartbeat - ok
21:00:31.0705 0x1c98 vmickvpexchange - ok
21:00:31.0736 0x1c98 vmicrdv - ok
21:00:31.0751 0x1c98 vmicshutdown - ok
21:00:31.0751 0x1c98 vmictimesync - ok
21:00:31.0751 0x1c98 vmicvmsession - ok
21:00:31.0767 0x1c98 vmicvss - ok
21:00:31.0767 0x1c98 volmgr - ok
21:00:31.0783 0x1c98 volmgrx - ok
21:00:31.0798 0x1c98 volsnap - ok
21:00:31.0814 0x1c98 volume - ok
21:00:31.0845 0x1c98 vpci - ok
21:00:31.0861 0x1c98 vsmraid - ok
21:00:31.0876 0x1c98 VSS - ok
21:00:31.0892 0x1c98 VSTXRAID - ok
21:00:31.0923 0x1c98 vwifibus - ok
21:00:31.0923 0x1c98 vwififlt - ok
21:00:31.0923 0x1c98 vwifimp - ok
21:00:31.0939 0x1c98 W32Time - ok
21:00:31.0955 0x1c98 WacomPen - ok
21:00:32.0001 0x1c98 WalletService - ok
21:00:32.0017 0x1c98 wanarp - ok
21:00:32.0033 0x1c98 wanarpv6 - ok
21:00:32.0080 0x1c98 wbengine - ok
21:00:32.0111 0x1c98 WbioSrvc - ok
21:00:32.0111 0x1c98 wcifs - ok
21:00:32.0142 0x1c98 Wcmsvc - ok
21:00:32.0158 0x1c98 wcncsvc - ok
21:00:32.0173 0x1c98 wcnfs - ok
21:00:32.0173 0x1c98 WdBoot - ok
21:00:32.0205 0x1c98 Wdf01000 - ok
21:00:32.0205 0x1c98 WdFilter - ok
21:00:32.0330 0x1c98 WdiServiceHost - ok
21:00:32.0345 0x1c98 WdiSystemHost - ok
21:00:32.0361 0x1c98 wdiwifi - ok
21:00:32.0376 0x1c98 WdNisDrv - ok
21:00:32.0408 0x1c98 WdNisSvc - ok
21:00:32.0423 0x1c98 WebClient - ok
21:00:32.0439 0x1c98 Wecsvc - ok
21:00:32.0455 0x1c98 WEPHOSTSVC - ok
21:00:32.0501 0x1c98 wercplsupport - ok
21:00:32.0501 0x1c98 WerSvc - ok
21:00:32.0517 0x1c98 WFPLWFS - ok
21:00:32.0517 0x1c98 WiaRpc - ok
21:00:32.0548 0x1c98 WIMMount - ok
21:00:32.0548 0x1c98 WinDefend - ok
21:00:32.0580 0x1c98 WindowsTrustedRT - ok
21:00:32.0595 0x1c98 WindowsTrustedRTProxy - ok
21:00:32.0626 0x1c98 WinHttpAutoProxySvc - ok
21:00:32.0642 0x1c98 WinMad - ok
21:00:32.0798 0x1c98 Winmgmt - ok
21:00:32.0814 0x1c98 WinRM - ok
21:00:32.0861 0x1c98 WINUSB - ok
21:00:32.0876 0x1c98 WinVerbs - ok
21:00:32.0908 0x1c98 wisvc - ok
21:00:32.0955 0x1c98 WlanSvc - ok
21:00:32.0970 0x1c98 wlidsvc - ok
21:00:32.0970 0x1c98 WmiAcpi - ok
21:00:33.0017 0x1c98 wmiApSrv - ok
21:00:33.0064 0x1c98 WMPNetworkSvc - ok
21:00:33.0080 0x1c98 Wof - ok
21:00:33.0111 0x1c98 workfolderssvc - ok
21:00:33.0158 0x1c98 WPDBusEnum - ok
21:00:33.0205 0x1c98 WpdUpFltr - ok
21:00:33.0220 0x1c98 WpnService - ok
21:00:33.0236 0x1c98 WpnUserService - ok
21:00:33.0251 0x1c98 ws2ifsl - ok
21:00:33.0283 0x1c98 wscsvc - ok
21:00:33.0298 0x1c98 WSDPrintDevice - ok
21:00:33.0314 0x1c98 WSDScan - ok
21:00:33.0330 0x1c98 WSearch - ok
21:00:33.0361 0x1c98 [ 72B4E9DF6456C43C42A1419B09486045, 536BA7377B5BEA7EA46864453933111DB88DB8FB689C68915ACD7261A996E61D ] wsvd C:\WINDOWS\system32\DRIVERS\wsvd.sys
21:00:33.0705 0x1c98 wsvd - ok
21:00:33.0814 0x1c98 wuauserv - ok
21:00:33.0830 0x1c98 WudfPf - ok
21:00:33.0845 0x1c98 WUDFRd - ok
21:00:33.0876 0x1c98 wudfsvc - ok
21:00:33.0876 0x1c98 WUDFWpdFs - ok
21:00:33.0892 0x1c98 WUDFWpdMtp - ok
21:00:33.0908 0x1c98 WwanSvc - ok
21:00:33.0939 0x1c98 XblAuthManager - ok
21:00:33.0986 0x1c98 XblGameSave - ok
21:00:34.0001 0x1c98 xboxgip - ok
21:00:34.0048 0x1c98 XboxNetApiSvc - ok
21:00:34.0095 0x1c98 xinputhid - ok
21:00:34.0158 0x1c98 ================ Scan global ===============================
21:00:34.0345 0x1c98 [ Global ] - ok
21:00:34.0345 0x1c98 ================ Scan MBR ==================================
21:00:34.0376 0x1c98 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
21:00:34.0783 0x1c98 \Device\Harddisk0\DR0 - ok
21:00:34.0783 0x1c98 ================ Scan VBR ==================================
21:00:34.0814 0x1c98 [ 2E17CCD49D062E31E0B3A9684E00B350 ] \Device\Harddisk0\DR0\Partition1
21:00:34.0845 0x1c98 \Device\Harddisk0\DR0\Partition1 - ok
21:00:34.0876 0x1c98 [ C3176033020941E2EBB9159D1CDFFBA7 ] \Device\Harddisk0\DR0\Partition2
21:00:34.0892 0x1c98 \Device\Harddisk0\DR0\Partition2 - ok
21:00:34.0908 0x1c98 [ 8BAE10C7C382DC892756A9D0E473039A ] \Device\Harddisk0\DR0\Partition3
21:00:34.0908 0x1c98 \Device\Harddisk0\DR0\Partition3 - ok
21:00:34.0939 0x1c98 [ F5A529530EF5DB5350E971E33C81254D ] \Device\Harddisk0\DR0\Partition4
21:00:34.0939 0x1c98 \Device\Harddisk0\DR0\Partition4 - ok
21:00:34.0955 0x1c98 [ 5122B00C1E0E999E5CF0A458F0650CCD ] \Device\Harddisk0\DR0\Partition5
21:00:34.0970 0x1c98 \Device\Harddisk0\DR0\Partition5 - ok
21:00:35.0001 0x1c98 [ 03AD12C5EF9EE07B720AF1D09B4A77FE ] \Device\Harddisk0\DR0\Partition6
21:00:35.0048 0x1c98 \Device\Harddisk0\DR0\Partition6 - ok
21:00:35.0080 0x1c98 [ 9A20E57ED890E0C7CA48B383F2AD9784 ] \Device\Harddisk0\DR0\Partition7
21:00:35.0126 0x1c98 \Device\Harddisk0\DR0\Partition7 - ok
21:00:35.0126 0x1c98 ================ Scan generic autorun ======================
21:00:35.0298 0x1c98 [ FFBFE1175531CD582D89796835CBB598, 7DC1FEB90AFC08C829001849985C7B20CB782F05CD9C000C6C9D42D3FDB1DDF4 ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
21:00:35.0330 0x1c98 cAudioFilterAgent - ok
21:00:35.0658 0x1c98 [ 4F8B94EC4D4FFA0712CCADF8145F28D1, 6CED9332100CA71FB17930AAC4ED1798E6F3A83CEBEE0A3412EFA01F6F1A6F22 ] C:\Program Files\CONEXANT\SAII\SACpl.exe
21:00:35.0705 0x1c98 SmartAudio - ok
21:00:35.0705 0x1c98 ETDCtrl - ok
21:00:37.0751 0x1c98 [ AC2ECBAA39F816944A608926973EFDB7, 9C32F89B255B2690843EA96A331665B27A28E4EF67B16AC6D254FE593146F7D5 ] C:\WINDOWS\RTFTrack.exe
21:00:38.0001 0x1c98 RtsFT - ok
21:00:38.0095 0x1c98 [ BAD24090378CD1D9D70DD21CF21D1BFB, A5FB5F8DCF33BB252304D6DA7CB62906E5A437A561A066A647C8D199EE3C57B8 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
21:00:38.0189 0x1c98 IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
21:00:38.0564 0x1c98 Detect skipped due to KSN trusted
21:00:38.0564 0x1c98 IAStorIcon - ok
21:00:38.0673 0x1c98 [ 48EB2BD8D360E9C8D9A71968A477ADBE, 2E9D5D9790EC07279CDA6A213A90D52C764CD9338194C47DBA26C545D65853BA ] C:\WINDOWS\system32\igfxtray.exe
21:00:38.0720 0x1c98 IgfxTray - ok
21:00:41.0642 0x1c98 [ E0AD9F72153A7F55702C3170FDA7876C, 839A8D0B72C3A0530ACC447532CA4CACC19E3C91CEA6B9CBB9498D36DD2DFBE6 ] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
21:00:42.0095 0x1c98 Energy Manager - ok
21:00:42.0158 0x1c98 [ F0627CE818DA58BAE771DCD4669FA343, 070CE17C9DAC01CC5AE465DFA3FDD8A44ABF97AC8101ED238C96668027B6F10B ] C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe
21:00:42.0158 0x1c98 Lenovo Utility - ok
21:00:42.0439 0x1c98 [ 233A10D4B3F6897899112E4EC60F1906, 1F7E768E57064938114DF2EFC5B219EB0D30A7D9E574924E9CED054462505AF0 ] C:\WINDOWS\WindowsMobile\wmdc.exe
21:00:42.0470 0x1c98 Windows Mobile Device Center - ok
21:00:43.0423 0x1c98 [ FE18DDEA98D90DBF850AFCA0158ABEC8, 8EC0099B560CC23DA6D26A71A202667D1A7C4BC37CE0F9F3458EA40440541D06 ] C:\Users\Administrator\Desktop\Everything\Everything.exe
21:00:43.0548 0x1c98 Everything - detected UnsignedFile.Multi.Generic ( 1 )
21:00:43.0705 0x1c98 Detect skipped due to KSN trusted
21:00:43.0705 0x1c98 Everything - ok
21:00:43.0830 0x1c98 [ 8F83160C43C61FC6775391B46B7C16BF, 648588126B2CD0B9F50F478BF4F7474137D1285061A3B22B56C1CB5B4FD3C3BF ] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe
21:00:43.0861 0x1c98 UpdateP2GShortCut - ok
21:00:44.0080 0x1c98 [ 305C1D680482E937D65D2A43448629A1, EFCA1B8FB5F932276E1CE6679EB155CF643E2B3CCCE36AF07C68C2A82473C7F6 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
21:00:44.0111 0x1c98 FUFAXRCV - ok
21:00:44.0298 0x1c98 [ 92B992307F1BF5F9DE727ACDD5A4CD4A, B6F751A990A90C5346CE5C2B11EEB8A09F582835A63D3921E70E286E45C24475 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
21:00:44.0330 0x1c98 FUFAXSTM - ok
21:00:44.0486 0x1c98 [ 4ABA86D5B0D440F33BDBDBDAEA065C42, 434E035E4748D0E4CEB08E655FF9A1739FF7E0099CCCC42122A24736DE3DE7E3 ] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
21:00:44.0533 0x1c98 EEventManager - ok
21:00:44.0595 0x1c98 [ 7D440447C6FCDEC9BBB739A048AA90CD, FA39828FD3FE9A1B57E1022B04729E7711C984E131CBE44BF1FAE73EF430D762 ] C:\WINDOWS\tsnp2std.exe
21:00:44.0673 0x1c98 tsnp2std - detected UnsignedFile.Multi.Generic ( 1 )
21:00:44.0830 0x1c98 Detect skipped due to KSN trusted
21:00:44.0830 0x1c98 tsnp2std - ok
21:00:45.0080 0x1c98 [ D9F25B1C673DEEF18A45AD2080DC9A5E, 76C4E520099F0CF3556158B6C154B68E4F954D4CA6A1851FB08979207F482200 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe
21:00:45.0095 0x1c98 StartCCC - ok
21:00:45.0330 0x1c98 [ DBD8934E3909B60DA81A91BF53B76901, 29B061C5E05097394B8B9D7C6681783DB02735CE8AAD06BCC03C08617D778039 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
21:00:45.0361 0x1c98 avgnt - ok
21:00:45.0470 0x1c98 [ 2AB57E205B61BCB095168A97B8D2AC4D, 18D9709CED7F02B694405E62ED5BA8EBE737FF59BB2D9EFBF0335C0F3BEE105B ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
21:00:45.0502 0x1c98 Avira SystrayStartTrigger - ok
21:00:46.0111 0x1c98 OneDriveSetup - ok
21:00:46.0111 0x1c98 OneDriveSetup - ok
21:00:47.0595 0x1c98 [ 103C5E01E5705A4BD468CBC902AA8EEF, 7598411CE3BA9C79CF74E64A5691D92ADA8121735495C1AB3B56F9E6CA3B0FB1 ] C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe
21:00:47.0986 0x1c98 Vidalia - detected UnsignedFile.Multi.Generic ( 1 )
21:00:48.0252 0x1c98 Vidalia ( UnsignedFile.Multi.Generic ) - warning
21:00:51.0111 0x1c98 [ 3F6B014280D8A98ACC323BB28CA5BCA7, 724FE1E949D57E982B50CC6FBBA8BCB524C42592A39ED60D37042CC2C2E73CAB ] C:\Program Files\CCleaner\CCleaner64.exe
21:00:51.0392 0x1c98 CCleaner Monitoring - ok
21:00:51.0783 0x1c98 [ 642102CCB9EF737E188D136B93AB9A1F, 9BF47F3B3DAD7938C804C951FC81AC5C1EA8BDD94AB29630D5080CE797F3CC0F ] C:\Users\Manja\AppData\Local\Microsoft\OneDrive\OneDrive.exe
21:00:51.0830 0x1c98 OneDrive - ok
21:00:52.0064 0x1c98 [ FD9A7F99A09DB266D0C1361B0ACCBD7E, 579160BDACDFE39AE5DDD7B5C2964453E89BA8D933F3FB16C6E3897EA3BDED29 ] C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe
21:00:52.0189 0x1c98 OneDrive - ok
21:00:52.0189 0x1c98 Waiting for KSN requests completion. In queue: 3
21:00:52.0330 0x0650 Object required for P2P: [ 3F6B014280D8A98ACC323BB28CA5BCA7 ] C:\Program Files\CCleaner\CCleaner64.exe
21:00:52.0689 0x0650 Object send P2P result: true
21:00:53.0220 0x1c98 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\WindowsSecurityCenter.exe ( 15.0.25.170 ), 0x41000 ( enabled : updated )
21:00:53.0267 0x1c98 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
21:00:53.0283 0x1c98 Win FW state via NFP2: enabled ( trusted )
21:00:53.0455 0x1c98 ============================================================
21:00:53.0455 0x1c98 Scan finished
21:00:53.0455 0x1c98 ============================================================
21:00:53.0470 0x045c Detected object count: 1
21:00:53.0470 0x045c Actual detected object count: 1
21:01:26.0991 0x045c Vidalia ( UnsignedFile.Multi.Generic ) - skipped by user
21:01:26.0991 0x045c Vidalia ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:02:53.0290 0x27ac ============================================================
21:02:53.0290 0x27ac Scan started
21:02:53.0290 0x27ac Mode: Manual; SigCheck; TDLFS;
21:02:53.0290 0x27ac ============================================================
21:02:53.0290 0x27ac KSN ping started
21:02:53.0290 0x27ac KSN ping finished: false
21:02:57.0906 0x27ac ================ Scan system memory ========================
21:02:57.0906 0x27ac System memory - ok
21:02:57.0906 0x27ac ================ Scan services =============================
21:02:58.0328 0x27ac 1394ohci - ok
21:02:58.0343 0x27ac 3ware - ok
21:02:58.0375 0x27ac ACPI - ok
21:02:58.0390 0x27ac AcpiDev - ok
21:02:58.0406 0x27ac acpiex - ok
21:02:58.0422 0x27ac acpipagr - ok
21:02:58.0468 0x27ac AcpiPmi - ok
21:02:58.0484 0x27ac acpitime - ok
21:02:58.0531 0x27ac [ AF7A18603B0B82DFA5B420456FAF2201, 64AD831433778BB0B0B1615EEA7682960ED5815A091A9EFEE95A862EFBDE6D69 ] ACPIVPC C:\WINDOWS\System32\drivers\AcpiVpc.sys
21:02:58.0562 0x27ac ACPIVPC - ok
21:02:58.0640 0x27ac [ 671133C0AC2D8B40B7574F69059653E9, A36CC49A0C829A5C4D6CF273791071213F5FFB57DC7022D523CFB731374FF63C ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:02:58.0672 0x27ac AdobeARMservice - ok
21:02:58.0687 0x27ac ADP80XX - ok
21:02:58.0812 0x27ac [ 0D0E5281784C2C526BA43C2ECD374288, BE4B16E08A96A24BEB904A2216A538340FD91A11E0CAB43BF8788C35DAD2D2B5 ] Afc C:\WINDOWS\syswow64\drivers\Afc.sys
21:02:58.0828 0x27ac Afc - ok
21:02:58.0859 0x27ac AFD - ok
21:02:58.0875 0x27ac ahcache - ok
21:02:58.0906 0x27ac AJRouter - ok
21:02:58.0937 0x27ac ALG - ok
21:02:59.0031 0x27ac [ 0990E6809D6C56C6DA85FE0EF20280EA, CC18608EB12DFB055C3AFCA2BB44FEDEE451F3F8CFEB87141F8EAD53F6BF6DD5 ] AMD External Events Utility C:\WINDOWS\system32\atiesrxx.exe
21:02:59.0062 0x27ac AMD External Events Utility - ok
21:02:59.0078 0x27ac AmdK8 - ok
21:02:59.0078 0x27ac amdkmdag - ok
21:02:59.0218 0x27ac [ 29C00798F093C2F54628F7C54DA77001, 8C85D9936103E19C60C8DE4DE98EA7F722BD3676911D873007FF2D152A456ED7 ] amdkmdap C:\WINDOWS\system32\DRIVERS\atikmpag.sys
21:02:59.0250 0x27ac amdkmdap - ok
21:02:59.0297 0x27ac [ 8A375CB3B6D1A56A2AEEE72A5F1D0926, 03D6EA77B141675B719E66DA09D1DACC7137B19F9918C303DD6870B3F36ADEBB ] amdkmpfd C:\WINDOWS\system32\drivers\amdkmpfd.sys
21:02:59.0312 0x27ac amdkmpfd - ok
21:02:59.0328 0x27ac AmdPPM - ok
21:02:59.0359 0x27ac amdsata - ok
21:02:59.0390 0x27ac amdsbs - ok
21:02:59.0390 0x27ac amdxata - ok
21:02:59.0609 0x27ac [ E6CEE7C270AD1CAE17EA910C85211BAE, 1DEB7185CEDC5918C20353C13AA0398D739A318729700F057B13821FF0FF5C97 ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
21:02:59.0640 0x27ac AntiVirMailService - ok
21:02:59.0734 0x27ac [ 9658B76971381D9053E48E896256D5EB, 48C763BAF349E663D0E41657779BF5D1106A7C3E7F8C898185DC5D1998C0CDAF ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
21:02:59.0765 0x27ac AntiVirSchedulerService - ok
21:02:59.0828 0x27ac [ 9658B76971381D9053E48E896256D5EB, 48C763BAF349E663D0E41657779BF5D1106A7C3E7F8C898185DC5D1998C0CDAF ] AntiVirService C:\Program Files (x86)\Avira\Antivirus\avguard.exe
21:02:59.0859 0x27ac AntiVirService - ok
21:03:00.0140 0x27ac [ B62E24EEC8C4B6E8A173CAD069B5033A, 719F7C51D615591E70D549552AC66343526902007480278C0E56AA7E1F406F96 ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
21:03:00.0172 0x27ac AntiVirWebService - ok
21:03:00.0203 0x27ac AppID - ok
21:03:00.0219 0x27ac AppIDSvc - ok
21:03:00.0234 0x27ac Appinfo - ok
21:03:00.0265 0x27ac applockerfltr - ok
21:03:00.0297 0x27ac AppReadiness - ok
21:03:00.0328 0x27ac AppXSvc - ok
21:03:00.0375 0x27ac arcsas - ok
21:03:00.0375 0x27ac AsyncMac - ok
21:03:00.0437 0x27ac atapi - ok
21:03:00.0453 0x27ac athr - ok
21:03:00.0500 0x27ac AudioEndpointBuilder - ok
21:03:00.0515 0x27ac Audiosrv - ok
21:03:00.0547 0x27ac [ 11F3AAFB5D279AFBCBB0AD9FF76A24F8, 06C5FA1BD64EB54691629363DD0771394F81E4EB216E489D5169395736E80D99 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
21:03:00.0562 0x27ac avgntflt - ok
21:03:00.0625 0x27ac [ F8520E88246641E51108922944FB34A6, 326DCB8114439FB1F75E9DB6E5F7818654FAAC4CD957B80DEE17B850676A737F ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
21:03:00.0656 0x27ac avipbb - ok
21:03:00.0828 0x27ac [ 586FCB1EEC849C06A8DDDDAB276AF113, E193FA64A86C27B2B7AA43E74A196BCBF79A9644F94C96E84E6CC76A405193B6 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
21:03:00.0875 0x27ac Avira.ServiceHost - ok
21:03:00.0890 0x27ac [ 2CBA09A7983B1D39531B768BCED08C20, B40968DFE1A648CCB9260033E1EA57B5D496274A335B000354156B0DB740EDE0 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
21:03:00.0906 0x27ac avkmgr - ok
21:03:00.0953 0x27ac [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject C:\WINDOWS\system32\drivers\avmeject.sys
21:03:00.0968 0x27ac avmeject - ok
21:03:01.0015 0x27ac [ 8D18C6406FF8DC39028177E1E5675182, 44985DEE74F235567FB849350256F342BCE26EF66439D761FA3F6EDA22882092 ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys
21:03:01.0031 0x27ac avnetflt - ok
21:03:01.0078 0x27ac [ D50D54178CA7BF63BD60ABEC8E7772CC, 19EFE0808C2660A22DD69158FEC30F8CB83167D832C3EBE12C99261C6FB79ADF ] avusbflt C:\WINDOWS\system32\Drivers\avusbflt.sys
21:03:01.0109 0x27ac avusbflt - ok
21:03:01.0125 0x27ac AxInstSV - ok
21:03:01.0172 0x27ac b06bdrv - ok
21:03:01.0203 0x27ac BasicDisplay - ok
21:03:01.0218 0x27ac BasicRender - ok
21:03:01.0328 0x27ac [ E68481BE45ADDF4E2A6790BB653610A4, 1F868D19C2CF206CAB36E990E5DC20782DB69FC51944CDFD494A09333E35F026 ] bcbtums C:\WINDOWS\system32\drivers\bcbtums.sys
21:03:01.0359 0x27ac bcbtums - ok
21:03:02.0547 0x27ac [ 85081187E02D743CDC8E2B8728281734, AB1BB7BB4A1C4446754D5A77D4DE25B042AEA95870092FE951C8C4CCDA8FCD15 ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys
21:03:02.0734 0x27ac BCM43XX - ok
21:03:03.0015 0x27ac [ 02123BE5D4D5CA48E93AC914EC936DC4, 1F5EBE116590726D0F601D487F26C7FC550F62144A0F9A64022E3DC2C940F17E ] BcmBtRSupport C:\WINDOWS\system32\BtwRSupportService.exe
21:03:03.0093 0x27ac BcmBtRSupport - ok
21:03:03.0140 0x27ac bcmfn - ok
21:03:03.0140 0x27ac bcmfn2 - ok
21:03:03.0890 0x27ac [ 85081187E02D743CDC8E2B8728281734, AB1BB7BB4A1C4446754D5A77D4DE25B042AEA95870092FE951C8C4CCDA8FCD15 ] BCMWL63A C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys
21:03:04.0094 0x27ac BCMWL63A - ok
21:03:04.0109 0x27ac BDESVC - ok
21:03:04.0172 0x27ac Beep - ok
21:03:04.0203 0x27ac BFE - ok
21:03:04.0234 0x27ac BITS - ok
21:03:04.0265 0x27ac bowser - ok
21:03:04.0281 0x27ac BrokerInfrastructure - ok
21:03:04.0312 0x27ac Browser - ok
21:03:04.0344 0x27ac BthA2DP - ok
21:03:04.0375 0x27ac BthAvrcpTg - ok
21:03:04.0375 0x27ac BthEnum - ok
21:03:04.0453 0x27ac BthHFAud - ok
21:03:04.0469 0x27ac BthHFEnum - ok
21:03:04.0484 0x27ac bthhfhid - ok
21:03:04.0500 0x27ac BthHFSrv - ok
21:03:04.0531 0x27ac BthLEEnum - ok
21:03:04.0562 0x27ac BTHMODEM - ok
21:03:04.0578 0x27ac BthPan - ok
21:03:04.0578 0x27ac BTHPORT - ok
21:03:04.0594 0x27ac bthserv - ok
21:03:04.0609 0x27ac BTHUSB - ok
21:03:04.0672 0x27ac [ 93995198BCBA40C99994B4CF3ABCE964, 38A9422D9202FC1BA4104186BBA60CE55FD7A7239DB2CDE12B8D727F00F977AF ] btwampfl C:\WINDOWS\system32\DRIVERS\btwampfl.sys
21:03:04.0703 0x27ac btwampfl - ok
21:03:04.0750 0x27ac buttonconverter - ok
21:03:04.0750 0x27ac CapImg - ok
21:03:04.0765 0x27ac cdfs - ok
21:03:04.0797 0x27ac CDPSvc - ok
21:03:04.0797 0x27ac CDPUserSvc - ok
21:03:04.0922 0x27ac cdrom - ok
21:03:04.0969 0x27ac CertPropSvc - ok
21:03:05.0078 0x27ac [ 59B4AB79011957DD3B83F0C2E63741BD, 5DE68785D701DBA0F98452B7D5CC407BEECD51685F39516157733CED2EF2FA19 ] chip1click C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
21:03:05.0094 0x27ac chip1click - detected UnsignedFile.Multi.Generic ( 1 )
21:03:05.0094 0x27ac Detect skipped due to KSN trusted
21:03:05.0094 0x27ac chip1click - ok
21:03:05.0109 0x27ac cht4iscsi - ok
21:03:05.0109 0x27ac cht4vbd - ok
21:03:05.0140 0x27ac circlass - ok
21:03:05.0172 0x27ac CLFS - ok
21:03:05.0578 0x27ac [ 209D07A9F54C2211C4C1E387EC971C97, 02112545E31E617602ED527E9191BD819413FB3732EAD16699E0C5795F8C58B2 ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
21:03:05.0640 0x27ac ClickToRunSvc - ok
21:03:05.0656 0x27ac ClipSVC - ok
21:03:05.0687 0x27ac clreg - ok
21:03:05.0719 0x27ac CmBatt - ok
21:03:05.0750 0x27ac CNG - ok
21:03:05.0781 0x27ac cnghwassist - ok
21:03:05.0937 0x27ac [ A0E8F4630E62D7616F0186B07ED3B66B, 9EF5FCA42FF7ECA59EDE736908D37CF53421EED830FAA8EBBD461CE7939EA09C ] CnxtHdAudService C:\WINDOWS\system32\drivers\CHDRT64.sys
21:03:05.0984 0x27ac CnxtHdAudService - ok
21:03:06.0062 0x27ac CompositeBus - ok
21:03:06.0078 0x27ac COMSysApp - ok
21:03:06.0094 0x27ac condrv - ok
21:03:06.0125 0x27ac CoreMessagingRegistrar - ok
21:03:06.0328 0x27ac [ 2EF1127FFCB66C5D41A98A734B021FE1, 4587DF6F67BAD40BDC07B9670CF15EBC86337A2B8AFAE73F89827076886F8B1A ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
21:03:06.0359 0x27ac cphs - ok
21:03:06.0406 0x27ac CryptSvc - ok
21:03:06.0469 0x27ac [ 4E6337DE03F36BCE168110E6B59F6A5B, 2DB940EBBA971B3801E273B80D8CBD975040A8B87908E7E0733E4DBB0EFC2611 ] CxAudMsg C:\WINDOWS\system32\CxAudMsg64.exe
21:03:06.0500 0x27ac CxAudMsg - ok
21:03:06.0515 0x27ac dam - ok
21:03:06.0531 0x27ac DcomLaunch - ok
21:03:06.0578 0x27ac DcpSvc - ok
21:03:06.0625 0x27ac defragsvc - ok
21:03:06.0656 0x27ac DeviceAssociationService - ok
21:03:06.0672 0x27ac DeviceInstall - ok
21:03:06.0734 0x27ac DevQueryBroker - ok
21:03:06.0734 0x27ac Dfsc - ok
21:03:06.0797 0x27ac [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys
21:03:06.0828 0x27ac dg_ssudbus - ok
21:03:06.0875 0x27ac Dhcp - ok
21:03:06.0984 0x27ac diagnosticshub.standardcollector.service - ok
21:03:07.0015 0x27ac DiagTrack - ok
21:03:07.0062 0x27ac disk - ok
21:03:07.0094 0x27ac DmEnrollmentSvc - ok
21:03:07.0140 0x27ac dmvsc - ok
21:03:07.0172 0x27ac dmwappushservice - ok
21:03:07.0219 0x27ac Dnscache - ok
21:03:07.0250 0x27ac dot3svc - ok
21:03:07.0265 0x27ac DPS - ok
21:03:07.0312 0x27ac drmkaud - ok
21:03:07.0344 0x27ac DsmSvc - ok
21:03:07.0375 0x27ac DsSvc - ok
21:03:07.0390 0x27ac DXGKrnl - ok
21:03:07.0406 0x27ac EapHost - ok
21:03:07.0437 0x27ac ebdrv - ok
21:03:07.0469 0x27ac EFS - ok
21:03:07.0500 0x27ac EhStorClass - ok
21:03:07.0515 0x27ac EhStorTcgDrv - ok
21:03:07.0562 0x27ac embeddedmode - ok
21:03:07.0578 0x27ac EntAppSvc - ok
21:03:07.0640 0x27ac [ 20ECD0A490A121CB34F553FAD1DBBD39, 17C9DA33E78FBC7582B0AA53C611929B80FBBE1343B84A179D515B51C964D218 ] EpsonScanSvc C:\WINDOWS\system32\EscSvc64.exe
21:03:07.0672 0x27ac EpsonScanSvc - ok
21:03:07.0765 0x27ac [ A7E8186E04F38E836C19AC147F8B2ED0, 329639595F02060C215A6334FCE1651FB9B9B5679BA9052A487B57265608D162 ] EPSON_PM_RPCV4_05 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
21:03:07.0797 0x27ac EPSON_PM_RPCV4_05 - ok
21:03:07.0797 0x27ac ErrDev - ok
21:03:08.0031 0x27ac [ 8842ED1E87D7662F249B5B63501E693B, A6D71351C2F32295926664875369C0BF93C59541B023884BDAC684E1EA94487A ] ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
21:03:08.0062 0x27ac ESRV_SVC_QUEENCREEK - ok
21:03:08.0109 0x27ac [ 6BD85B39B7B23F03B24CF641ED29147B, 850F21750BB39E5239B1584E1117844CAAAF6A5C58E79366552309F917675CE5 ] ETD C:\WINDOWS\system32\DRIVERS\ETD.sys
21:03:08.0125 0x27ac ETD - ok
21:03:08.0234 0x27ac [ 8916EACF1256E1C5A3AF81FD39C747E7, FF28FB95E9F9287C1005CF0D9EB84F7CA3D137689862860C9848398504E1EFFF ] ETDService C:\Program Files\Elantech\ETDService.exe
21:03:08.0265 0x27ac ETDService - ok
21:03:08.0437 0x27ac EventSystem - ok
21:03:08.0469 0x27ac exfat - ok
21:03:08.0484 0x27ac fastfat - ok
21:03:08.0500 0x27ac Fax - ok
21:03:08.0531 0x27ac fdc - ok
21:03:08.0562 0x27ac fdPHost - ok
21:03:08.0562 0x27ac FDResPub - ok
21:03:08.0640 0x27ac fhsvc - ok
21:03:08.0687 0x27ac FileCrypt - ok
21:03:08.0703 0x27ac FileInfo - ok
21:03:08.0703 0x27ac Filetrace - ok
21:03:08.0703 0x27ac flpydisk - ok
21:03:08.0719 0x27ac FltMgr - ok
21:03:08.0781 0x27ac FontCache - ok
21:03:08.0875 0x27ac FontCache3.0.0.0 - ok
21:03:08.0906 0x27ac FrameServer - ok
21:03:08.0906 0x27ac FsDepends - ok
21:03:08.0922 0x27ac Fs_Rec - ok
21:03:08.0969 0x27ac fvevol - ok
21:03:09.0094 0x27ac [ 0D2843C3C676B852D0B01CEA1E1DAE6C, 2F2751E09725D52008865F08A08F9989BCC4BA07FBC11B3BEF4332DC463CFC63 ] fwlanusb5_nv2 C:\WINDOWS\system32\DRIVERS\fwlanusb5_nv2.sys
21:03:09.0125 0x27ac fwlanusb5_nv2 - ok
21:03:09.0187 0x27ac gencounter - ok
21:03:09.0203 0x27ac genericusbfn - ok
21:03:09.0250 0x27ac GPIOClx0101 - ok
21:03:09.0265 0x27ac gpsvc - ok
21:03:09.0312 0x27ac GpuEnergyDrv - ok
21:03:09.0344 0x27ac HDAudBus - ok
21:03:09.0359 0x27ac HidBatt - ok
21:03:09.0375 0x27ac HidBth - ok
21:03:09.0375 0x27ac hidi2c - ok
21:03:09.0390 0x27ac hidinterrupt - ok
21:03:09.0406 0x27ac HidIr - ok
21:03:09.0422 0x27ac hidserv - ok
21:03:09.0453 0x27ac HidUsb - ok
21:03:09.0469 0x27ac HomeGroupListener - ok
21:03:09.0515 0x27ac HomeGroupProvider - ok
21:03:09.0547 0x27ac HpSAMD - ok
21:03:09.0578 0x27ac HTTP - ok
21:03:09.0625 0x27ac HvHost - ok
21:03:09.0687 0x27ac hvservice - ok
21:03:09.0703 0x27ac hwpolicy - ok
21:03:09.0734 0x27ac hyperkbd - ok
21:03:09.0765 0x27ac i8042prt - ok
21:03:09.0812 0x27ac iagpio - ok
21:03:09.0828 0x27ac iai2c - ok
21:03:09.0844 0x27ac iaLPSS2i_GPIO2 - ok
21:03:09.0844 0x27ac iaLPSS2i_I2C - ok
21:03:09.0890 0x27ac iaLPSSi_GPIO - ok
21:03:09.0906 0x27ac iaLPSSi_I2C - ok
21:03:10.0015 0x27ac [ 71341219FBB4BAB7F2462C4267DAB594, 0C6B684781D27F423D20186A40D7513DD6ABC38AD286D013791B37CBF5477A55 ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys
21:03:10.0062 0x27ac iaStorA - ok
21:03:10.0109 0x27ac iaStorAV - ok
21:03:10.0187 0x27ac [ B64E1D5BABD095C13A382838F9DCC77F, D8FF4E1BBA7EF5EE136CC5892C72E0774D0AAE40CD9EB3368A698DA6C078BBAA ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:03:10.0203 0x27ac IAStorDataMgrSvc - ok
21:03:10.0234 0x27ac iaStorV - ok
21:03:10.0250 0x27ac ibbus - ok
21:03:10.0312 0x27ac icssvc - ok
21:03:11.0242 0x27ac [ 197FC03D62EEBCBCB8866B7EC0E1A6F0, 4197CBDAED113D13256C20FD2058E72C60EB2C28AE60EF6C3B3A0969CD7B2764 ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
21:03:11.0367 0x27ac igfx - ok
21:03:11.0445 0x27ac [ 34CB407D6FCAB16C8C1A1C97C72D15AC, 4EBC135F8ECB9756F62C0918CB811420FAC36AAE78667D318B9F4BF01862ECBD ] igfxCUIService2.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
21:03:11.0477 0x27ac igfxCUIService2.0.0.0 - ok
21:03:11.0492 0x27ac IKEEXT - ok
21:03:11.0524 0x27ac IndirectKmd - ok
21:03:11.0586 0x27ac [ DB65573521AB51941F4FA799D0968136, 418F5E3FE725B7B114F3DAEBDCEBCE7F4AD8ECAAFF572C02BA9ACCE86D55BFD8 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
21:03:11.0602 0x27ac intaud_WaveExtensible - ok
21:03:11.0711 0x27ac [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
21:03:11.0742 0x27ac IntcDAud - ok
21:03:11.0914 0x27ac [ 0DB1E3F6189C628675F855C0EB510419, 989F539E82105019D2D81255369B96DC65826CD2A421DA09809155B26F69C555 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:03:11.0945 0x27ac Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
21:03:11.0945 0x27ac Detect skipped due to KSN trusted
21:03:11.0945 0x27ac Intel(R) Capability Licensing Service Interface - ok
21:03:12.0218 0x27ac [ 492AAF2FF66F437F0E796574B116EFC3, 6BF21C61ED05705DD58203952A750D1AB4D4B62F3A2B640BBBD9B85D1ECC3E5C ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
21:03:12.0249 0x27ac Intel(R) Capability Licensing Service TCP IP Interface - ok
21:03:12.0296 0x27ac intelide - ok
21:03:12.0327 0x27ac intelpep - ok
21:03:12.0343 0x27ac intelppm - ok
21:03:12.0374 0x27ac iorate - ok
21:03:12.0390 0x27ac IpFilterDriver - ok
21:03:12.0436 0x27ac iphlpsvc - ok
21:03:12.0468 0x27ac IPMIDRV - ok
21:03:12.0468 0x27ac IPNAT - ok
21:03:12.0499 0x27ac irda - ok
21:03:12.0515 0x27ac IRENUM - ok
21:03:12.0536 0x27ac irmon - ok
21:03:12.0552 0x27ac isapnp - ok
21:03:12.0598 0x27ac iScsiPrt - ok
21:03:12.0802 0x27ac [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:03:12.0817 0x27ac jhi_service - ok
21:03:12.0911 0x27ac kbdclass - ok
21:03:12.0958 0x27ac kbdhid - ok
21:03:12.0973 0x27ac kdnic - ok
21:03:12.0989 0x27ac KeyIso - ok
21:03:12.0989 0x27ac KSecDD - ok
21:03:13.0020 0x27ac KSecPkg - ok
21:03:13.0036 0x27ac ksthunk - ok
21:03:13.0067 0x27ac KtmRm - ok
21:03:13.0098 0x27ac [ 4E5EA006CFFB96E0BAFC767D659AAB9A, A24A334955FB98D0903971454FADAC639D535BD32BB48964BD95019C7F6C454E ] L1C C:\WINDOWS\System32\drivers\L1C63x64.sys
21:03:13.0130 0x27ac L1C - ok
21:03:13.0161 0x27ac LanmanServer - ok
21:03:13.0161 0x27ac LanmanWorkstation - ok
21:03:13.0196 0x27ac lfsvc - ok
21:03:13.0226 0x27ac LicenseManager - ok
21:03:13.0226 0x27ac lltdio - ok
21:03:13.0242 0x27ac lltdsvc - ok
21:03:13.0273 0x27ac lmhosts - ok
21:03:13.0476 0x27ac [ 4799AAD825F79C187FBA948D299386E7, 4E3618CF59B81825CF3E2AEC070CC57E3869BFF7543BB151530F02A3947A22F8 ] LSC.Services.SystemService C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
21:03:13.0492 0x27ac LSC.Services.SystemService - ok
21:03:13.0570 0x27ac LSI_SAS - ok
21:03:13.0570 0x27ac LSI_SAS2i - ok
21:03:13.0617 0x27ac LSI_SAS3i - ok
21:03:13.0648 0x27ac LSI_SSS - ok
21:03:13.0664 0x27ac LSM - ok
21:03:13.0695 0x27ac luafv - ok
21:03:13.0711 0x27ac MapsBroker - ok
21:03:13.0742 0x27ac megasas - ok
21:03:13.0780 0x27ac megasas2i - ok
21:03:13.0811 0x27ac megasr - ok
21:03:13.0858 0x27ac [ 18B9AD128EC84E8D16A83F70CF36594F, 199DF15D68E2A079794E5DD325162C1A68A65EF26EEF5A6C6154281DDE57279A ] MEIx64 C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
21:03:13.0889 0x27ac MEIx64 - ok
21:03:13.0920 0x27ac MessagingService - ok
21:03:13.0967 0x27ac mlx4_bus - ok
21:03:13.0967 0x27ac MMCSS - ok
21:03:13.0998 0x27ac Modem - ok
21:03:14.0030 0x27ac monitor - ok
21:03:14.0030 0x27ac mouclass - ok
21:03:14.0061 0x27ac mouhid - ok
21:03:14.0076 0x27ac mountmgr - ok
21:03:14.0202 0x27ac [ 2419641B6E64F4F76D369110969DA77C, 6E3FBCA61089BFFA0B214CD8AFF35E8F85FD3240BBA75B05FA4E98B2453AEF55 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:03:14.0233 0x27ac MozillaMaintenance - ok
21:03:14.0280 0x27ac mpsdrv - ok
21:03:14.0295 0x27ac MpsSvc - ok
21:03:14.0342 0x27ac MRxDAV - ok
21:03:14.0358 0x27ac mrxsmb - ok
21:03:14.0389 0x27ac mrxsmb10 - ok
21:03:14.0405 0x27ac mrxsmb20 - ok
21:03:14.0436 0x27ac MsBridge - ok
21:03:14.0452 0x27ac MSDTC - ok
21:03:14.0467 0x27ac Msfs - ok
21:03:14.0498 0x27ac msgpiowin32 - ok
21:03:14.0498 0x27ac mshidkmdf - ok
21:03:14.0514 0x27ac mshidumdf - ok
21:03:14.0530 0x27ac msisadrv - ok
21:03:14.0561 0x27ac MSiSCSI - ok
21:03:14.0561 0x27ac msiserver - ok
21:03:14.0592 0x27ac MSKSSRV - ok
21:03:14.0608 0x27ac MsLldp - ok
21:03:14.0623 0x27ac MSPCLOCK - ok
21:03:14.0639 0x27ac MSPQM - ok
21:03:14.0655 0x27ac MsRPC - ok
21:03:14.0655 0x27ac mssmbios - ok
21:03:14.0670 0x27ac MSTEE - ok
21:03:14.0670 0x27ac MTConfig - ok
21:03:14.0670 0x27ac Mup - ok
21:03:14.0670 0x27ac mvumis - ok
21:03:14.0686 0x27ac NativeWifiP - ok
21:03:14.0717 0x27ac NcaSvc - ok
21:03:14.0717 0x27ac NcbService - ok
21:03:14.0717 0x27ac NcdAutoSetup - ok
21:03:14.0733 0x27ac ndfltr - ok
21:03:14.0733 0x27ac NDIS - ok
21:03:14.0733 0x27ac NdisCap - ok
21:03:14.0998 0x27ac NdisImPlatform - ok
21:03:15.0061 0x27ac NdisTapi - ok
21:03:15.0061 0x27ac Ndisuio - ok
21:03:15.0092 0x27ac NdisVirtualBus - ok
21:03:15.0123 0x27ac NdisWan - ok
21:03:15.0123 0x27ac ndiswanlegacy - ok
21:03:15.0139 0x27ac ndproxy - ok
21:03:15.0155 0x27ac Ndu - ok
21:03:15.0155 0x27ac NetAdapterCx - ok
21:03:15.0155 0x27ac NetBIOS - ok
21:03:15.0155 0x27ac NetBT - ok
21:03:15.0170 0x27ac Netlogon - ok
21:03:15.0186 0x27ac Netman - ok
21:03:15.0233 0x27ac netprofm - ok
21:03:15.0295 0x27ac NetSetupSvc - ok
21:03:15.0545 0x27ac NetTcpPortSharing - ok
21:03:15.0577 0x27ac NgcCtnrSvc - ok
21:03:15.0608 0x27ac NgcSvc - ok
21:03:15.0702 0x27ac [ 9B214FF571749C9055EEDFCE52A81F90, F1D0BD4DF34B6F5532B1756E50C6317D63DD71AB577D1F8CBA74A7A225456EB0 ] NitroDriverReadSpool8 C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
21:03:15.0717 0x27ac NitroDriverReadSpool8 - ok
21:03:15.0733 0x27ac NlaSvc - ok
21:03:16.0655 0x27ac [ BF15D119A19F8FD8B71F1E22C1BDA579, D24EFD135DB598DF2858AE8CDBEF92B439AE47F2880DD6E45D52ABD1E4FA5394 ] nlsX86cc C:\WINDOWS\SysWOW64\NLSSRV32.EXE
21:03:16.0670 0x27ac nlsX86cc - ok
21:03:16.0702 0x27ac Npfs - ok
21:03:16.0733 0x27ac npsvctrig - ok
21:03:16.0764 0x27ac nsi - ok
21:03:16.0764 0x27ac nsiproxy - ok
21:03:16.0811 0x27ac NTFS - ok
21:03:16.0811 0x27ac Null - ok
21:03:16.0858 0x27ac nvraid - ok
21:03:16.0858 0x27ac nvstor - ok
21:03:16.0920 0x27ac OneSyncSvc - ok
21:03:17.0092 0x27ac [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:03:17.0123 0x27ac ose - ok
21:03:17.0139 0x27ac p2pimsvc - ok
21:03:17.0170 0x27ac p2psvc - ok
21:03:17.0186 0x27ac Parport - ok
21:03:17.0202 0x27ac partmgr - ok
21:03:17.0233 0x27ac PcaSvc - ok
21:03:17.0248 0x27ac pci - ok
21:03:17.0311 0x27ac pciide - ok
21:03:17.0328 0x27ac pcmcia - ok
21:03:17.0328 0x27ac pcw - ok
21:03:17.0360 0x27ac pdc - ok
21:03:17.0375 0x27ac PEAUTH - ok
21:03:17.0391 0x27ac percsas2i - ok
21:03:17.0407 0x27ac percsas3i - ok
21:03:17.0422 0x27ac PerfHost - ok
21:03:17.0453 0x27ac PhoneSvc - ok
21:03:17.0469 0x27ac PimIndexMaintenanceSvc - ok
21:03:17.0519 0x27ac pla - ok
21:03:17.0535 0x27ac PlugPlay - ok
21:03:17.0535 0x27ac PNRPAutoReg - ok
21:03:17.0550 0x27ac PNRPsvc - ok
21:03:17.0566 0x27ac PolicyAgent - ok
21:03:17.0581 0x27ac Power - ok
21:03:17.0597 0x27ac PptpMiniport - ok
21:03:18.0331 0x27ac [ 77ABF70C71922873BC160933571B3F83, 7FCFBB4B42E7A92FCF11388CD5B600EA79A7C134F13A8A88CF8DCD3DB96C3F5A ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
21:03:18.0425 0x27ac PrintNotify - ok
21:03:18.0472 0x27ac Processor - ok
21:03:18.0503 0x27ac ProfSvc - ok
21:03:18.0519 0x27ac Psched - ok
21:03:18.0534 0x27ac QWAVE - ok
21:03:18.0566 0x27ac QWAVEdrv - ok
21:03:18.0597 0x27ac RasAcd - ok
21:03:18.0628 0x27ac RasAgileVpn - ok
21:03:18.0660 0x27ac RasAuto - ok
21:03:18.0675 0x27ac Rasl2tp - ok
21:03:18.0691 0x27ac RasMan - ok
21:03:18.0706 0x27ac RasPppoe - ok
21:03:18.0722 0x27ac RasSstp - ok
21:03:18.0722 0x27ac rdbss - ok
21:03:18.0769 0x27ac rdpbus - ok
21:03:18.0769 0x27ac RDPDR - ok
21:03:18.0800 0x27ac RdpVideoMiniport - ok
21:03:18.0800 0x27ac rdyboost - ok
21:03:18.0816 0x27ac ReFSv1 - ok
21:03:18.0863 0x27ac RemoteAccess - ok
21:03:18.0878 0x27ac RemoteRegistry - ok
21:03:18.0910 0x27ac RetailDemo - ok
21:03:18.0941 0x27ac RFCOMM - ok
21:03:19.0050 0x27ac [ FBA61BB4C484A01A655AFB18FF86C417, D53B2110CB09D0A909C4E330C468351BFE076BB056CCDDCB8ADA2FB91E96352E ] RichVideo64 C:\Program Files\CyberLink\Shared files\RichVideo64.exe
21:03:19.0081 0x27ac RichVideo64 - ok
21:03:19.0206 0x27ac RmSvc - ok
21:03:19.0222 0x27ac RpcEptMapper - ok
21:03:19.0253 0x27ac RpcLocator - ok
21:03:19.0253 0x27ac RpcSs - ok
21:03:19.0269 0x27ac rspndr - ok
21:03:19.0391 0x27ac [ 05E8543E0D8C07535944FC0CB15E0DA0, 8E076E7582C95E9251CB03D2F1F7FBA1E31ACAE21E16224C9ACDCC1489165A86 ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
21:03:19.0422 0x27ac RTSUER - ok
21:03:19.0672 0x27ac [ FF8B926ABA5BDA6562D7106E8A92BE7B, 887007E4D3F90CF6228B21D75E5B89818C18A7F2E2DB66C85039E6ECB5A16A15 ] rtsuvc C:\WINDOWS\system32\DRIVERS\rtsuvc.sys
21:03:19.0719 0x27ac rtsuvc - ok
21:03:19.0766 0x27ac s3cap - ok
21:03:19.0797 0x27ac SamSs - ok
21:03:19.0813 0x27ac SAService - ok
21:03:19.0844 0x27ac sbp2port - ok
21:03:19.0906 0x27ac SCardSvr - ok
21:03:19.0969 0x27ac ScDeviceEnum - ok
21:03:20.0016 0x27ac scfilter - ok
21:03:20.0047 0x27ac Schedule - ok
21:03:20.0063 0x27ac scmbus - ok
21:03:20.0078 0x27ac scmdisk0101 - ok
21:03:20.0141 0x27ac SCPolicySvc - ok
21:03:20.0170 0x27ac sdbus - ok
21:03:20.0178 0x27ac SDRSVC - ok
21:03:20.0194 0x27ac sdstor - ok
21:03:20.0209 0x27ac seclogon - ok
21:03:20.0269 0x27ac [ 07F83829E7429E60298440CD1E601A6A, 9F1229CD8DD9092C27A01F5D56E3C0D59C2BB9F0139ABF042E56F343637FDA33 ] semav6msr64 C:\WINDOWS\system32\drivers\semav6msr64.sys
21:03:20.0285 0x27ac semav6msr64 - ok
21:03:20.0316 0x27ac SENS - ok
21:03:20.0347 0x27ac SensorDataService - ok
21:03:20.0378 0x27ac SensorService - ok
21:03:20.0410 0x27ac SensrSvc - ok
21:03:20.0425 0x27ac SerCx - ok
21:03:20.0425 0x27ac SerCx2 - ok
21:03:20.0441 0x27ac Serenum - ok
21:03:20.0456 0x27ac Serial - ok
21:03:20.0472 0x27ac sermouse - ok
21:03:20.0503 0x27ac SessionEnv - ok
21:03:20.0503 0x27ac sfloppy - ok
21:03:20.0550 0x27ac SharedAccess - ok
21:03:20.0613 0x27ac ShellHWDetection - ok
21:03:20.0628 0x27ac shpamsvc - ok
21:03:20.0644 0x27ac SiSRaid2 - ok
21:03:20.0660 0x27ac SiSRaid4 - ok
21:03:20.0816 0x27ac [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:03:20.0847 0x27ac SkypeUpdate - ok
21:03:20.0863 0x27ac smphost - ok
21:03:20.0894 0x27ac [ 6CFE5AB2A11DC8FD80B4CE74364C39BC, E271867F4944CFA1E3ED25061C190D00B808198E20153E56D22D63871019F315 ] smsbda C:\WINDOWS\system32\drivers\smsbda.sys
21:03:20.0910 0x27ac smsbda - ok
21:03:20.0957 0x27ac SmsRouter - ok
21:03:20.0988 0x27ac SNMPTRAP - ok
21:03:21.0113 0x27ac [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
21:03:21.0144 0x27ac Sony PC Companion - detected UnsignedFile.Multi.Generic ( 1 )
21:03:21.0144 0x27ac Detect skipped due to KSN trusted
21:03:21.0144 0x27ac Sony PC Companion - ok
21:03:21.0197 0x27ac spaceport - ok
21:03:21.0213 0x27ac SpbCx - ok
21:03:21.0229 0x27ac Spooler - ok
21:03:21.0260 0x27ac sppsvc - ok
21:03:21.0275 0x27ac srv - ok
21:03:21.0291 0x27ac srv2 - ok
21:03:21.0307 0x27ac srvnet - ok
21:03:21.0322 0x27ac SSDPSRV - ok
21:03:21.0338 0x27ac SstpSvc - ok
21:03:21.0416 0x27ac [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
21:03:21.0447 0x27ac ssudmdm - ok
21:03:21.0479 0x27ac StateRepository - ok
21:03:21.0510 0x27ac stexstor - ok
21:03:21.0557 0x27ac stisvc - ok
21:03:21.0572 0x27ac storahci - ok
21:03:21.0619 0x27ac storflt - ok
21:03:21.0650 0x27ac stornvme - ok
21:03:21.0682 0x27ac storqosflt - ok
21:03:21.0697 0x27ac StorSvc - ok
21:03:21.0713 0x27ac storufs - ok
21:03:21.0728 0x27ac storvsc - ok
21:03:21.0838 0x27ac [ 26B2BB5733F69B0A8306BAC37551F90A, 60F1A0C23727144B53F1C64348907AAD611F991C0A8C9F93AC8194210634420B ] SUService C:\Program Files (x86)\Lenovo\System Update\SUService.exe
21:03:21.0869 0x27ac SUService - ok
21:03:21.0885 0x27ac svsvc - ok
21:03:21.0900 0x27ac swenum - ok
21:03:21.0900 0x27ac swprv - ok
21:03:21.0947 0x27ac Synth3dVsc - ok
21:03:21.0979 0x27ac SysMain - ok
21:03:22.0025 0x27ac SystemEventsBroker - ok
21:03:22.0088 0x27ac [ 48D2B8AA8C2F1C3360EC33554EC4E6D2, 0F66A9CBED9E70DA3CED6E009795000D41259AD345E3BD3C2EA2F2969588BB04 ] SystemUsageReportSvc_QUEENCREEK C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
21:03:22.0103 0x27ac SystemUsageReportSvc_QUEENCREEK - ok
21:03:22.0119 0x27ac TabletInputService - ok
21:03:22.0135 0x27ac TapiSrv - ok
21:03:22.0160 0x27ac Tcpip - ok
21:03:22.0160 0x27ac Tcpip6 - ok
21:03:22.0188 0x27ac tcpipreg - ok
21:03:22.0219 0x27ac tdx - ok
21:03:22.0235 0x27ac terminpt - ok
21:03:22.0266 0x27ac TermService - ok
21:03:22.0313 0x27ac Themes - ok
21:03:22.0360 0x27ac TieringEngineService - ok
21:03:22.0360 0x27ac tiledatamodelsvc - ok
21:03:22.0391 0x27ac TimeBrokerSvc - ok
21:03:22.0422 0x27ac TPM - ok
21:03:22.0438 0x27ac TrkWks - ok
21:03:22.0501 0x27ac TrustedInstaller - ok
21:03:22.0516 0x27ac tsusbflt - ok
21:03:22.0532 0x27ac TsUsbGD - ok
21:03:22.0547 0x27ac tunnel - ok
21:03:22.0579 0x27ac tzautoupdate - ok
21:03:22.0610 0x27ac UASPStor - ok
21:03:22.0641 0x27ac UcmCx0101 - ok
21:03:22.0641 0x27ac UcmTcpciCx0101 - ok
21:03:22.0657 0x27ac UcmUcsi - ok
21:03:22.0672 0x27ac Ucx01000 - ok
21:03:22.0688 0x27ac UdeCx - ok
21:03:22.0704 0x27ac udfs - ok
21:03:22.0721 0x27ac UEFI - ok
21:03:22.0721 0x27ac Ufx01000 - ok
21:03:22.0737 0x27ac UfxChipidea - ok
21:03:22.0768 0x27ac ufxsynopsys - ok
21:03:22.0831 0x27ac UI0Detect - ok
21:03:22.0846 0x27ac umbus - ok
21:03:22.0871 0x27ac UmPass - ok
21:03:22.0899 0x27ac UmRdpService - ok
21:03:22.0931 0x27ac UnistoreSvc - ok
21:03:22.0962 0x27ac upnphost - ok
21:03:23.0009 0x27ac UrsChipidea - ok
21:03:23.0024 0x27ac UrsCx01000 - ok
21:03:23.0040 0x27ac UrsSynopsys - ok
21:03:23.0065 0x27ac usbccgp - ok
21:03:23.0065 0x27ac usbcir - ok
21:03:23.0081 0x27ac usbehci - ok
21:03:23.0096 0x27ac usbhub - ok
21:03:23.0112 0x27ac USBHUB3 - ok
21:03:23.0128 0x27ac usbohci - ok
21:03:23.0143 0x27ac usbprint - ok
21:03:23.0143 0x27ac usbser - ok
21:03:23.0143 0x27ac USBSTOR - ok
21:03:23.0159 0x27ac usbuhci - ok
21:03:23.0180 0x27ac USBXHCI - ok
21:03:23.0180 0x27ac usb_rndisx - ok
21:03:23.0243 0x27ac UserDataSvc - ok
21:03:23.0258 0x27ac UserManager - ok
21:03:23.0540 0x27ac [ 8842ED1E87D7662F249B5B63501E693B, A6D71351C2F32295926664875369C0BF93C59541B023884BDAC684E1EA94487A ] USER_ESRV_SVC_QUEENCREEK C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
21:03:23.0571 0x27ac USER_ESRV_SVC_QUEENCREEK - ok
21:03:23.0603 0x27ac UsoSvc - ok
21:03:23.0603 0x27ac VaultSvc - ok
21:03:23.0603 0x27ac vdrvroot - ok
21:03:23.0634 0x27ac vds - ok
21:03:23.0649 0x27ac VerifierExt - ok
21:03:23.0649 0x27ac vhdmp - ok
21:03:23.0665 0x27ac vhf - ok
21:03:23.0665 0x27ac vmbus - ok
21:03:23.0681 0x27ac VMBusHID - ok
21:03:23.0681 0x27ac vmgid - ok
21:03:23.0712 0x27ac vmicguestinterface - ok
21:03:23.0712 0x27ac vmicheartbeat - ok
21:03:23.0712 0x27ac vmickvpexchange - ok
21:03:23.0745 0x27ac vmicrdv - ok
21:03:23.0760 0x27ac vmicshutdown - ok
21:03:23.0760 0x27ac vmictimesync - ok
21:03:23.0760 0x27ac vmicvmsession - ok
21:03:23.0760 0x27ac vmicvss - ok
21:03:23.0780 0x27ac volmgr - ok
21:03:23.0780 0x27ac volmgrx - ok
21:03:23.0780 0x27ac volsnap - ok
21:03:23.0812 0x27ac volume - ok
21:03:23.0841 0x27ac vpci - ok
21:03:23.0841 0x27ac vsmraid - ok
21:03:23.0857 0x27ac VSS - ok
21:03:23.0873 0x27ac VSTXRAID - ok
21:03:23.0904 0x27ac vwifibus - ok
21:03:23.0904 0x27ac vwififlt - ok
21:03:23.0904 0x27ac vwifimp - ok
21:03:23.0920 0x27ac W32Time - ok
21:03:23.0935 0x27ac WacomPen - ok
21:03:23.0982 0x27ac WalletService - ok
21:03:24.0013 0x27ac wanarp - ok
21:03:24.0013 0x27ac wanarpv6 - ok
21:03:24.0045 0x27ac wbengine - ok
21:03:24.0071 0x27ac WbioSrvc - ok
21:03:24.0077 0x27ac wcifs - ok
21:03:24.0109 0x27ac Wcmsvc - ok
21:03:24.0124 0x27ac wcncsvc - ok
21:03:24.0124 0x27ac wcnfs - ok
21:03:24.0140 0x27ac WdBoot - ok
21:03:24.0140 0x27ac Wdf01000 - ok
21:03:24.0156 0x27ac WdFilter - ok
21:03:24.0171 0x27ac WdiServiceHost - ok
21:03:24.0171 0x27ac WdiSystemHost - ok
21:03:24.0187 0x27ac wdiwifi - ok
21:03:24.0202 0x27ac WdNisDrv - ok
21:03:24.0234 0x27ac WdNisSvc - ok
21:03:24.0249 0x27ac WebClient - ok
21:03:24.0281 0x27ac Wecsvc - ok
21:03:24.0296 0x27ac WEPHOSTSVC - ok
21:03:24.0328 0x27ac wercplsupport - ok
21:03:24.0359 0x27ac WerSvc - ok
21:03:24.0359 0x27ac WFPLWFS - ok
21:03:24.0390 0x27ac WiaRpc - ok
21:03:24.0421 0x27ac WIMMount - ok
21:03:24.0421 0x27ac WinDefend - ok
21:03:24.0468 0x27ac WindowsTrustedRT - ok
21:03:24.0484 0x27ac WindowsTrustedRTProxy - ok
21:03:24.0499 0x27ac WinHttpAutoProxySvc - ok
21:03:24.0515 0x27ac WinMad - ok
21:03:24.0578 0x27ac Winmgmt - ok
21:03:24.0625 0x27ac WinRM - ok
21:03:24.0703 0x27ac WINUSB - ok
21:03:24.0718 0x27ac WinVerbs - ok
21:03:24.0765 0x27ac wisvc - ok
21:03:24.0812 0x27ac WlanSvc - ok
21:03:24.0843 0x27ac wlidsvc - ok
21:03:24.0843 0x27ac WmiAcpi - ok
21:03:24.0877 0x27ac wmiApSrv - ok
21:03:24.0908 0x27ac WMPNetworkSvc - ok
21:03:24.0939 0x27ac Wof - ok
21:03:24.0971 0x27ac workfolderssvc - ok
21:03:25.0017 0x27ac WPDBusEnum - ok
21:03:25.0033 0x27ac WpdUpFltr - ok
21:03:25.0064 0x27ac WpnService - ok
21:03:25.0064 0x27ac WpnUserService - ok
21:03:25.0096 0x27ac ws2ifsl - ok
21:03:25.0127 0x27ac wscsvc - ok
21:03:25.0142 0x27ac WSDPrintDevice - ok
21:03:25.0158 0x27ac WSDScan - ok
21:03:25.0174 0x27ac WSearch - ok
21:03:25.0221 0x27ac [ 72B4E9DF6456C43C42A1419B09486045, 536BA7377B5BEA7EA46864453933111DB88DB8FB689C68915ACD7261A996E61D ] wsvd C:\WINDOWS\system32\DRIVERS\wsvd.sys
21:03:25.0267 0x27ac wsvd - ok
21:03:25.0299 0x27ac wuauserv - ok
21:03:25.0299 0x27ac WudfPf - ok
21:03:25.0314 0x27ac WUDFRd - ok
21:03:25.0330 0x27ac wudfsvc - ok
21:03:25.0330 0x27ac WUDFWpdFs - ok
21:03:25.0330 0x27ac WUDFWpdMtp - ok
21:03:25.0346 0x27ac WwanSvc - ok
21:03:25.0385 0x27ac XblAuthManager - ok
21:03:25.0448 0x27ac XblGameSave - ok
21:03:25.0479 0x27ac xboxgip - ok
21:03:25.0526 0x27ac XboxNetApiSvc - ok
21:03:25.0573 0x27ac xinputhid - ok
21:03:25.0635 0x27ac ================ Scan global ===============================
21:03:25.0729 0x27ac [ Global ] - ok
21:03:25.0729 0x27ac ================ Scan MBR ==================================
21:03:25.0760 0x27ac [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
21:03:26.0107 0x27ac \Device\Harddisk0\DR0 - ok
21:03:26.0107 0x27ac ================ Scan VBR ==================================
21:03:26.0138 0x27ac [ 2E17CCD49D062E31E0B3A9684E00B350 ] \Device\Harddisk0\DR0\Partition1
21:03:26.0169 0x27ac \Device\Harddisk0\DR0\Partition1 - ok
21:03:26.0200 0x27ac [ C3176033020941E2EBB9159D1CDFFBA7 ] \Device\Harddisk0\DR0\Partition2
21:03:26.0200 0x27ac \Device\Harddisk0\DR0\Partition2 - ok
21:03:26.0232 0x27ac [ 8BAE10C7C382DC892756A9D0E473039A ] \Device\Harddisk0\DR0\Partition3
21:03:26.0232 0x27ac \Device\Harddisk0\DR0\Partition3 - ok
21:03:26.0263 0x27ac [ F5A529530EF5DB5350E971E33C81254D ] \Device\Harddisk0\DR0\Partition4
21:03:26.0263 0x27ac \Device\Harddisk0\DR0\Partition4 - ok
21:03:26.0294 0x27ac [ 5122B00C1E0E999E5CF0A458F0650CCD ] \Device\Harddisk0\DR0\Partition5
21:03:26.0326 0x27ac \Device\Harddisk0\DR0\Partition5 - ok
21:03:26.0372 0x27ac [ 03AD12C5EF9EE07B720AF1D09B4A77FE ] \Device\Harddisk0\DR0\Partition6
21:03:26.0419 0x27ac \Device\Harddisk0\DR0\Partition6 - ok
21:03:26.0466 0x27ac [ 9A20E57ED890E0C7CA48B383F2AD9784 ] \Device\Harddisk0\DR0\Partition7
21:03:26.0513 0x27ac \Device\Harddisk0\DR0\Partition7 - ok
21:03:26.0513 0x27ac ================ Scan generic autorun ======================
21:03:26.0685 0x27ac [ FFBFE1175531CD582D89796835CBB598, 7DC1FEB90AFC08C829001849985C7B20CB782F05CD9C000C6C9D42D3FDB1DDF4 ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
21:03:26.0716 0x27ac cAudioFilterAgent - ok
21:03:26.0857 0x27ac [ 4F8B94EC4D4FFA0712CCADF8145F28D1, 6CED9332100CA71FB17930AAC4ED1798E6F3A83CEBEE0A3412EFA01F6F1A6F22 ] C:\Program Files\CONEXANT\SAII\SACpl.exe
21:03:26.0888 0x27ac SmartAudio - ok
21:03:26.0888 0x27ac ETDCtrl - ok
21:03:27.0872 0x27ac [ AC2ECBAA39F816944A608926973EFDB7, 9C32F89B255B2690843EA96A331665B27A28E4EF67B16AC6D254FE593146F7D5 ] C:\WINDOWS\RTFTrack.exe
21:03:28.0029 0x27ac RtsFT - ok
21:03:28.0122 0x27ac [ BAD24090378CD1D9D70DD21CF21D1BFB, A5FB5F8DCF33BB252304D6DA7CB62906E5A437A561A066A647C8D199EE3C57B8 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
21:03:28.0138 0x27ac IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
21:03:28.0138 0x27ac Detect skipped due to KSN trusted
21:03:28.0138 0x27ac IAStorIcon - ok
21:03:28.0216 0x27ac [ 48EB2BD8D360E9C8D9A71968A477ADBE, 2E9D5D9790EC07279CDA6A213A90D52C764CD9338194C47DBA26C545D65853BA ] C:\WINDOWS\system32\igfxtray.exe
21:03:28.0247 0x27ac IgfxTray - ok
21:03:30.0107 0x27ac [ E0AD9F72153A7F55702C3170FDA7876C, 839A8D0B72C3A0530ACC447532CA4CACC19E3C91CEA6B9CBB9498D36DD2DFBE6 ] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
21:03:30.0373 0x27ac Energy Manager - ok
21:03:30.0435 0x27ac [ F0627CE818DA58BAE771DCD4669FA343, 070CE17C9DAC01CC5AE465DFA3FDD8A44ABF97AC8101ED238C96668027B6F10B ] C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe
21:03:30.0451 0x27ac Lenovo Utility - ok
21:03:30.0529 0x27ac [ 233A10D4B3F6897899112E4EC60F1906, 1F7E768E57064938114DF2EFC5B219EB0D30A7D9E574924E9CED054462505AF0 ] C:\WINDOWS\WindowsMobile\wmdc.exe
21:03:30.0560 0x27ac Windows Mobile Device Center - ok
21:03:30.0837 0x27ac [ FE18DDEA98D90DBF850AFCA0158ABEC8, 8EC0099B560CC23DA6D26A71A202667D1A7C4BC37CE0F9F3458EA40440541D06 ] C:\Users\Administrator\Desktop\Everything\Everything.exe
21:03:30.0884 0x27ac Everything - detected UnsignedFile.Multi.Generic ( 1 )
21:03:30.0884 0x27ac Detect skipped due to KSN trusted
21:03:30.0884 0x27ac Everything - ok
21:03:31.0072 0x27ac [ 8F83160C43C61FC6775391B46B7C16BF, 648588126B2CD0B9F50F478BF4F7474137D1285061A3B22B56C1CB5B4FD3C3BF ] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe
21:03:31.0103 0x27ac UpdateP2GShortCut - ok
21:03:31.0243 0x27ac [ 305C1D680482E937D65D2A43448629A1, EFCA1B8FB5F932276E1CE6679EB155CF643E2B3CCCE36AF07C68C2A82473C7F6 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
21:03:31.0259 0x27ac FUFAXRCV - ok
21:03:31.0384 0x27ac [ 92B992307F1BF5F9DE727ACDD5A4CD4A, B6F751A990A90C5346CE5C2B11EEB8A09F582835A63D3921E70E286E45C24475 ] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
21:03:31.0400 0x27ac FUFAXSTM - ok
21:03:31.0541 0x27ac [ 4ABA86D5B0D440F33BDBDBDAEA065C42, 434E035E4748D0E4CEB08E655FF9A1739FF7E0099CCCC42122A24736DE3DE7E3 ] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
21:03:31.0557 0x27ac EEventManager - ok
21:03:31.0650 0x27ac [ 7D440447C6FCDEC9BBB739A048AA90CD, FA39828FD3FE9A1B57E1022B04729E7711C984E131CBE44BF1FAE73EF430D762 ] C:\WINDOWS\tsnp2std.exe
21:03:31.0681 0x27ac tsnp2std - detected UnsignedFile.Multi.Generic ( 1 )
21:03:31.0681 0x27ac Detect skipped due to KSN trusted
21:03:31.0681 0x27ac tsnp2std - ok
21:03:32.0135 0x27ac [ D9F25B1C673DEEF18A45AD2080DC9A5E, 76C4E520099F0CF3556158B6C154B68E4F954D4CA6A1851FB08979207F482200 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe
21:03:32.0182 0x27ac StartCCC - ok
21:03:32.0807 0x27ac [ DBD8934E3909B60DA81A91BF53B76901, 29B061C5E05097394B8B9D7C6681783DB02735CE8AAD06BCC03C08617D778039 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
21:03:32.0838 0x27ac avgnt - ok
21:03:32.0932 0x27ac [ 2AB57E205B61BCB095168A97B8D2AC4D, 18D9709CED7F02B694405E62ED5BA8EBE737FF59BB2D9EFBF0335C0F3BEE105B ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
21:03:32.0947 0x27ac Avira SystrayStartTrigger - ok
21:03:33.0197 0x27ac OneDriveSetup - ok
21:03:33.0197 0x27ac OneDriveSetup - ok
21:03:33.0807 0x27ac [ 103C5E01E5705A4BD468CBC902AA8EEF, 7598411CE3BA9C79CF74E64A5691D92ADA8121735495C1AB3B56F9E6CA3B0FB1 ] C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe
21:03:33.0963 0x27ac Vidalia - detected UnsignedFile.Multi.Generic ( 1 )
21:03:33.0963 0x27ac Vidalia ( UnsignedFile.Multi.Generic ) - warning
21:03:36.0713 0x27ac [ 3F6B014280D8A98ACC323BB28CA5BCA7, 724FE1E949D57E982B50CC6FBBA8BCB524C42592A39ED60D37042CC2C2E73CAB ] C:\Program Files\CCleaner\CCleaner64.exe
21:03:36.0885 0x27ac CCleaner Monitoring - ok
21:03:36.0901 0x27ac Object required for P2P: [ 3F6B014280D8A98ACC323BB28CA5BCA7 ] C:\Program Files\CCleaner\CCleaner64.exe
21:03:36.0916 0x27ac Object send P2P result: false
21:03:37.0229 0x27ac [ 642102CCB9EF737E188D136B93AB9A1F, 9BF47F3B3DAD7938C804C951FC81AC5C1EA8BDD94AB29630D5080CE797F3CC0F ] C:\Users\Manja\AppData\Local\Microsoft\OneDrive\OneDrive.exe
21:03:37.0276 0x27ac OneDrive - ok
21:03:37.0527 0x27ac [ FD9A7F99A09DB266D0C1361B0ACCBD7E, 579160BDACDFE39AE5DDD7B5C2964453E89BA8D933F3FB16C6E3897EA3BDED29 ] C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe
21:03:37.0559 0x27ac OneDrive - ok
21:03:37.0574 0x27ac AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\WindowsSecurityCenter.exe ( 15.0.25.170 ), 0x41000 ( enabled : updated )
21:03:37.0574 0x27ac AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
21:03:37.0621 0x27ac Win FW state via NFP2: enabled ( trusted )
21:03:37.0621 0x27ac ============================================================
21:03:37.0621 0x27ac Scan finished
21:03:37.0621 0x27ac ============================================================
21:03:37.0637 0x276c Detected object count: 1
21:03:37.0637 0x276c Actual detected object count: 1
21:03:47.0806 0x276c Vidalia ( UnsignedFile.Multi.Generic ) - skipped by user
21:03:47.0806 0x276c Vidalia ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:05:17.0505 0x02c0 Deinitialize success
FRST.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017 (ACHTUNG: ====> FRSTVersion ist 37 Tage alt und könnte veraltet sein)
durchgeführt von Manja (Administrator) auf LENOVO-PC (21-04-2017 21:06:50)
Gestartet von C:\Users\Manja\Desktop
Geladene Profile: Manja (Verfügbare Profile: Manja & Administrator)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\ArcSoft TV 5.0\TMTV5Monitor.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
() C:\Program Files (x86)\Vidalia Relay Bundle\Tor\tor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Lenovo) C:\Users\Manja\AppData\Local\Apps\2.0\H1XBY3NA.MTY\ORDNQXPM.YZE\lsb...tion_2d7b41b05b24775e_0001.0006_3b0a905c8de4f74a\LSB.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SysWOW64\backgroundTaskHost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [9309936 2015-08-30] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [393208 2016-10-07] ()
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-03-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-03-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Everything] => C:\Users\Administrator\Desktop\Everything\Everything.exe [1441792 2014-08-06] ()
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink Corp.)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [650784 2015-12-22] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863776 2015-12-22] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-06-10] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [tsnp2std] => C:\WINDOWS\tsnp2std.exe [258048 2007-01-05] (SONIX)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [909744 2017-03-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [63432 2017-01-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-2024608735-1276328420-4132175576-1001\...\Run: [Vidalia] => C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2013-01-26] ()
HKU\S-1-5-21-2024608735-1276328420-4132175576-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-2024608735-1276328420-4132175576-1001\...\MountPoints2: {152510a8-0b88-11e7-8381-4a5ab6dfb585} - "F:\AutoRun.exe"
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKLM\...\Providers\uccs53rf: C:\Program Files (x86)\Grotersp Mapper\local64spl.dll [310784 2017-02-07] ()
ShellExecuteHooks: Kein Name - {B7F52870-EABC-11E6-A3B1-64006A5CFC23} - C:\Users\Manja\AppData\Roaming\Valrythujaent\Faoing.dll [145408 2017-02-07] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll [2017-04-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll [2017-04-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll [2017-04-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\FileSyncShell.dll [2017-04-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\FileSyncShell.dll [2017-04-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manja\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\FileSyncShell.dll [2017-04-21] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk [2015-10-11]
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\ArcSoft TV 5.0\TMTV5Monitor.exe (ArcSoft, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a859d951-1702-4c70-843c-1f03b6a5db08}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2024608735-1276328420-4132175576-1001\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-2024608735-1276328420-4132175576-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-2024608735-1276328420-4132175576-1001 -> DefaultScope {F89CBD86-A9F4-11E4-826F-485AB6DFB586} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2024608735-1276328420-4132175576-1001 -> {0BB5F216-46AD-4421-8307-71AD5A980D61} URL =
SearchScopes: HKU\S-1-5-21-2024608735-1276328420-4132175576-1001 -> {F89CBD86-A9F4-11E4-826F-485AB6DFB586} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2024608735-1276328420-4132175576-1001 -> {FF9451C6-C472-4F44-98C3-0A2D6DCACFBE} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-03-14] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971 [2017-04-21]
FF Homepage: Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971 -> hxxps://www.ixquick.com/do/mypage.pl?prf=71655fbbbc8e4b165b2a6245f3e01481
FF NetworkProxy: Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971 -> type", 0
FF Extension: (Easy Screenshot) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\easyscreenshot@mozillaonline.com.xpi [2017-03-05]
FF Extension: (Ghostery) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\firefox@ghostery.com.xpi [2017-03-05]
FF Extension: (HTTPS Everywhere) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\https-everywhere-eff@eff.org.xpi [2017-04-09]
FF Extension: (ProxTube) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\ich@maltegoetz.de.xpi [2017-04-21]
FF Extension: (YouTube mp3) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\info@youtube-mp3.org.xpi [2017-03-05]
FF Extension: (FireShot) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2017-03-05]
FF Extension: (FlashGot) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2017-03-05]
FF Extension: (Youtube to MP3 Converter) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{37115292-022c-4500-a5da-95738388073a}.xpi [2017-03-06]
FF Extension: (NoScript) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-03-18]
FF Extension: (Download YouTube Videos as MP4) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2017-03-05]
FF Extension: (Video DownloadHelper) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-03-05]
FF Extension: (Adblock Plus) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-03-05]
FF Extension: (DownThemAll!) - C:\Users\Manja\AppData\Roaming\Mozilla\Firefox\Profiles\v589m9uz.default-1488680288971\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2017-03-05]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2016-02-22] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-03-05] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-03-05] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-01-13] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2013-08-17] (Nitro PDF)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2024608735-1276328420-4132175576-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2017-02-06] (Tracker Software Products (Canada) Ltd.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\firefox.js [2017-02-07]
|
So funktioniert es:
FRST 32-Bit | FRST 64-Bit
TDSSKiller.exe und speichere diese Datei auf dem Desktop