Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Bildschirm schwarz nach Booten, explorer muss gestartet werden (https://www.trojaner-board.de/190095-bildschirm-schwarz-booten-explorer-gestartet.html)

monchou 03.05.2018 18:17
Bildschirm schwarz nach Booten, explorer muss gestartet werden
 
Hallo zusammen,

Ich hoffe es passt überhaupt hier rein - aber nach ein wenig Googlen wurde hier und da empfohlen, nach Malware o.Ä. zu suchen und das wollte ich nicht alleine machen und selbstständig irgendwelche LOGS anfertigen.

Zunächst bin ich auf einem WIN7 - wenn ich den Rechner hochfahre, bleibt der Bildschirm schwarz, wenn mein Login-Fenster kommen müsste. Manchmal startet es doch nochmal, oft wiederum nicht.

Den Taskmanager kann ich öffnen, wenn ich auch echt eine Weile warten muss, bis er auftaucht. Ich lasse dann explorer.exe starten. Nach einer Weile erscheint er und alles funktioniert wie gehabt.
Heute war explorer.exe hingegen DOCH schon im Taskmanager - habe den Prozess dann aber beendet und neugestartet. Gleiches wie oben


Hoffe wie gesagt, ich bin hier damit richtig - könnte ja gut sein, dass etwas da ist.

Viele Grüße

cosinus 03.05.2018 19:59
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

monchou 03.05.2018 22:47
Hi cosinus!
Danke für deine Antwort :)

Hoffe es ist okay, dass ich beim Untersuchen meinen Virus-Schutz pausiert habe - andernfalls ließ sich FRST nicht öffnen und es kam nur "C:\users\neslihan\desktop\FRST64.exe
Falscher Prameter (OK)"

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 03.05.2018
durchgeführt von Neslihan (Administrator) auf NESLIHAN-PC (03-05-2018 23:45:27)
Gestartet von C:\Users\Neslihan\Desktop
Geladene Profile: Neslihan (Verfügbare Profile: Neslihan & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Electronic Arts) E:\Games\Origin\OriginWebHelperService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(DEVGURU Co., LTD.) E:\Programme\kies\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Wacom Technology, Corp.) C:\Windows\System32\Pen_Tablet.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\Pen_TabletUser.exe
() C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\XSManager\WTGService.exe
(4G Systems GmbH & Co. KG) C:\Windows\service4g.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe
(Wacom Technology, Corp.) C:\Windows\System32\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NETGEAR,Inc.) C:\Program Files (x86)\NETGEAR\A6200\A6200.exe
(Akamai Technologies, Inc.) C:\Users\Neslihan\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Neslihan\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(cv cryptovision GmbH) E:\Program Files (x86)\cv cryptovision\cv act sc interface\RegisterTool.exe
() C:\Program Files (x86)\Lioncast LM30 Gaming Mouse\LCMon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [GENIE] => C:\Program Files (x86)\NETGEAR\A6200\A6200.exe [348888 2013-02-18] (NETGEAR,Inc.)
HKLM\...\Run: [LanuchApp] => C:\Program Files (x86)\NETGEAR\A6200\LanuchApp.exe [15136 2012-07-11] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-06] (Intel Corporation)
HKLM-x32\...\Run: [starter4g] => C:\Windows\starter4g.exe [160424 2010-04-30] (4G Systems GmbH & Co. KG)
HKLM-x32\...\Run: [LCgmmouseRun] => C:\Program Files (x86)\Lioncast LM30 Gaming Mouse\LCmon.exe [3171840 2015-05-25] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2409936 2018-02-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => E:\Adobe Documents\Acrobat DC\Acrobat\Acrotray.exe [1870928 2017-04-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [151224 2017-11-23] (Panda Security, S.L.)
Winlogon\Notify\ScCertProp:
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Run: [ctfmon] => C:\Windows\system32\ctfmon.exe [9728 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Neslihan\AppData\Local\Akamai\netsession_win.exe [4490200 2017-09-08] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Run: [Adobe Acrobat Synchronizer] => E:\Adobe Documents\Acrobat DC\Acrobat\AdobeCollabSync.exe [886352 2017-04-05] (Adobe Systems Incorporated)
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [panda] => reg.exe delete "HKCU\Software\AppDataLow\Software\panda" /f
HKU\S-1-5-18\...\RunOnce: [panda_XP] => reg.exe delete "HKCU\Software\panda" /f
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\cv act sc interface RegisterTool.lnk [2014-06-23]
ShortcutTarget: cv act sc interface RegisterTool.lnk -> E:\Program Files (x86)\cv cryptovision\cv act sc interface\RegisterTool.exe (cv cryptovision GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk [2014-02-25]
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{08D6EAEC-989B-47E7-9A6B-FFC1DD3F1541}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{140BEABE-B131-48D8-A795-5BE12294B5ED}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9541EBCD-4C46-48C8-AC3B-BF3B74ACB32D}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131538090685044225&GUID=00000000-0000-0000-0000-000000000000
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2601677052-3802215475-160921258-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2601677052-3802215475-160921258-1000 -> {3C3277C8-7F89-4F3F-AED7-71D9698B615D} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2601677052-3802215475-160921258-1000 -> {3D8B4390-0AF1-440A-9B59-8F69A66B8CCB} URL = hxxp://www.google.com.hk/search?hl=zh-CN&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2601677052-3802215475-160921258-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2601677052-3802215475-160921258-1000 -> {DBF90901-3B89-433A-BF74-7D34AEB1CB85} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-04-20] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2018-04-20] (Microsoft Corporation)
BHO: Panda Safe Web -> {b60873b9-51aa-4566-b2fc-c16de2ec8bff} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2018-02-13] ()
BHO: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2018-02-13] ()
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-04-20] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-01-18] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-21] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2018-01-18] (Microsoft Corporation)
BHO-x32: Panda Safe Web -> {b60873b9-51aa-4566-b2fc-c16de2ec8bff} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2018-02-13] ()
BHO-x32: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2018-02-13] ()
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-01-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-21] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
Toolbar: HKLM - Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2018-02-13] ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
Toolbar: HKLM - Panda Safe Web - {b60873b9-51aa-4566-b2fc-c16de2ec8bff} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2018-02-13] ()
Toolbar: HKLM-x32 - Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2018-02-13] ()
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Panda Safe Web - {b60873b9-51aa-4566-b2fc-c16de2ec8bff} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2018-02-13] ()
DPF: HKLM-x32 {AA07EBD2-EBDD-4BD6-9F8F-114BD513492C} hxxp://dist.cdnetworks.co.jp/cdndist/neffy/NeffyLauncher_v1013.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-18] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-18] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-18] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-01-18] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: 6ghfa3rf.default-1436973638517
FF ProfilePath: C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517 [2018-05-03]
FF Session Restore: Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517 -> ist aktiviert.
FF Extension: (Imperia OneClickEdit) - C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\Extensions\oce@imperia.de.xpi [2016-08-10] [Legacy]
FF Extension: (Panda Safe Web) - C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\Extensions\{b60873b9-51aa-4566-b2fc-c16de2ec8bff}.xpi [2018-02-13]
FF Extension: (Panda Security Toolbar) - C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\Extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} [2015-09-16] [Legacy] [ist nicht signiert]
FF Extension: (Adblock Plus) - C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-02-12]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - E:\Adobe Documents\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - E:\Adobe Documents\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2018-05-03] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_140.dll [2018-04-10] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> E:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-02-14] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_140.dll [2018-04-10] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-01-18] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-01-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> E:\Adobe Documents\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-22] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-02-14] (Adobe Systems)
StartMenuInternet: FIREFOX.EXE - E:\Program Files (x86)\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms}
CHR DefaultSearchKeyword: Default -> safeWeb
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default [2018-05-03]
CHR Extension: (Präsentationen) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Add to Wishlistr) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhdhompadhkjjcalkhplcfdbjegnkegh [2017-12-10]
CHR Extension: (Skype-Anrufe) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2015-11-03]
CHR Extension: (YouTube) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Mogicons) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpgpffljkgjmijjdmjbdppndoojdgboe [2018-04-21]
CHR Extension: (Google-Suche) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Icon Pack for Facebook) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjnigeodbhfkikngfpbpaponldpnajj [2017-03-25]
CHR Extension: (Panda Safe Web) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fagakgcelolinfnkfgekcnedpaklfcok [2018-04-12]
CHR Extension: (Full Page Screen Capture) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2018-05-03]
CHR Extension: (Tabellen) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Facebook™ Chat Privacy) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfpgaanechfneiboempkfjghninbibjn [2017-08-15]
CHR Extension: (Google Docs Offline) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2017-10-13]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (Noisli) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\klejemegaoblahjdpcajmpcnjjmkmkkf [2018-01-18]
CHR Extension: (Video DownloadHelper) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2016-12-21]
CHR Extension: (Ghostery – datenschutzorientierter Werbeblocker) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-04-21]
CHR Extension: (F.B. Purity For Facebook) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl [2016-07-16]
CHR Extension: (F.B.(FluffBusting)Purity) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkinhboiljjkhaknpaeaicmdjhagpep [2018-05-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (VK audio mp3 + video  by MyUpdate.ru) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofhhndfphhclgkigefjgbmghohfiomni [2015-10-11]
CHR Extension: (AdBlocker Ultimate) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohahllgiabjaoigichmmfljhkcfikeof [2018-04-17]
CHR Extension: (Spottster) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\oojdbjfeamokogkeipeejegidjceiaio [2016-03-25]
CHR Extension: (Google Mail) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Neslihan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-24]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-02-14] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1447944 2016-12-12] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-09-02] (BitRaider, LLC)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761584 2018-03-31] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [399120 2017-02-14] (EasyAntiCheat Ltd)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-01-28] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182248 2013-03-14] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-11-08] (Panda Security, S.L.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3521168 2015-07-22] (INCA Internet Co., Ltd.)
S3 OpenVPNService; E:\Program Files\OpenVPN\bin\openvpnserv.exe [37176 2014-06-05] (The OpenVPN Project)
S3 Origin Client Service; E:\Games\Origin\OriginClientService.exe [2154816 2018-02-08] (Electronic Arts)
R2 Origin Web Helper Service; E:\Games\Origin\OriginWebHelperService.exe [3024712 2018-02-08] (Electronic Arts)
S3 Panda VPN Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe [320848 2017-11-20] ()
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [246256 2016-11-22] (Visicom Media Inc.)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2017-10-18] (Panda Security, S.L.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-02-19] (Realtek Semiconductor)
R2 ss_conn_service; E:\Programme\kies\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WNDA6200; C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe [29984 2012-09-24] ()
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329872 2013-01-30] ()
R2 XS Stick Service; C:\Windows\service4g.exe [145064 2010-04-30] (4G Systems GmbH & Co. KG)
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 A6200; C:\Windows\System32\DRIVERS\bcmwlhigh664.sys [2567984 2013-02-28] (Broadcom Corporation)
S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2014-02-28] (ASRock Incorporation)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [126080 2014-11-18] (QUALCOMM Incorporated) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [537080 2017-07-19] (Intel Corporation)
S3 ew_usbccgpfilter; C:\Windows\System32\DRIVERS\ew_usbccgpfilter.sys [18944 2017-07-26] (Huawei Technologies Co., Ltd.)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2014-02-25] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2014-02-25] (FNet Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21048 2013-03-14] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21048 2013-03-14] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-03-14] ()
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-05-03] (Malwarebytes)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [107848 2017-11-03] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [212360 2017-11-03] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [121232 2017-11-03] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [126352 2017-11-03] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [94392 2017-09-18] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [118136 2017-11-03] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [85176 2017-11-03] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [135640 2017-11-03] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [337520 2017-11-03] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [249976 2017-11-03] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [123304 2017-11-03] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [281912 2017-11-03] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [125840 2017-11-03] (Panda Security, S.L.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-09-19] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-09-19] (NVIDIA Corporation)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S0 PsBoot; C:\Windows\System32\Drivers\PsBoot.sys [51680 2018-01-30] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [190552 2017-11-08] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [153176 2018-01-23] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206424 2018-01-30] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [146976 2017-11-06] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [159312 2017-11-06] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [129448 2017-11-06] (Panda Security, S.L.)
U3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72280 2017-05-22] (Panda Security, S.L.)
S3 RTCore64; E:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13512 2015-12-09] ()
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2011-04-08] (Realtek Semiconductor Corporation )
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 TesMon; C:\Windows\system32\TesMon.sys [60472 2016-12-30] (Tencent)
S3 TesSafe; C:\Windows\system32\TesSafe.sys [1020968 2016-12-30] (TENCENT)
R1 ui11drdr; C:\Windows\System32\DRIVERS\ui11drdr.sys [201072 2012-09-24] (1&1 Internet AG)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2018-05-03] ()
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S3 AsrSetupDrv; \??\C:\Windows\SysWOW64\Drivers\AsrSetupDrv.sys [X]
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-05-03 23:45 - 2018-05-03 23:45 - 000043206 _____ C:\Users\Neslihan\Desktop\FRST.txt
2018-05-03 23:43 - 2018-05-03 23:43 - 002405376 ____N (Farbar) C:\Users\Neslihan\Desktop\FRST64.exe
2018-05-03 23:43 - 2018-01-30 14:05 - 000051680 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PsBoot.sys
2018-05-03 19:09 - 2018-05-03 19:09 - 000094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2018-05-03 19:02 - 2017-05-22 12:29 - 000072280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2018-05-03 00:25 - 2018-05-03 00:25 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignf875b532ff5399cc
2018-05-03 00:20 - 2018-05-03 00:20 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign346030185d0d2c56
2018-05-03 00:19 - 2018-05-03 00:19 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignb37cac704767477d
2018-05-03 00:18 - 2018-05-03 00:18 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign4726f210bc53181d
2018-05-03 00:18 - 2018-05-03 00:18 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign1b1ffac4b8d87cf6
2018-04-23 20:20 - 2018-04-23 20:20 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsigndff71fbf12db2cb5
2018-04-23 20:20 - 2018-04-23 20:20 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignb4a78ca70b640e06
2018-04-23 20:20 - 2018-04-23 20:20 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsigna8b28681aed0a13b
2018-04-22 20:55 - 2018-04-22 20:55 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign518561ccad4d2db4
2018-04-22 20:55 - 2018-04-22 20:55 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign112ba21efa0d137c
2018-04-22 20:52 - 2018-04-22 20:52 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignce69f125ea68094f
2018-04-22 20:52 - 2018-04-22 20:52 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignb2680e55b240c05e
2018-04-22 20:52 - 2018-04-22 20:52 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignaca89af4b02ada46
2018-04-20 00:04 - 2018-04-20 00:04 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign88ebe21c74d1e1c0
2018-04-20 00:04 - 2018-04-20 00:04 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign1c444d715646e44e
2018-04-20 00:03 - 2018-04-20 00:03 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignbe1aefd42cb490b4
2018-04-19 23:39 - 2018-04-19 23:39 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign6670b4c479aa1875
2018-04-19 23:39 - 2018-04-19 23:39 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign00624c049cd64d94
2018-04-18 10:51 - 2018-04-18 10:51 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign65a5db0e7d3e9525
2018-04-18 10:03 - 2018-04-18 10:03 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignc65e765fad26f287
2018-04-18 10:03 - 2018-04-18 10:03 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign506b4518a5e394e9
2018-04-18 10:00 - 2018-04-18 10:00 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsignfdd6aa416482f9c9
2018-04-18 10:00 - 2018-04-18 10:00 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign79a304a58a756ed2
2018-04-18 10:00 - 2018-04-18 10:00 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Tempzxpsign057a634b1aab7108
2018-04-17 00:02 - 2018-04-17 00:02 - 000000710 _____ C:\Users\Neslihan\Desktop\Kaspersky Free Version 18.0.0.405 installieren.lnk
2018-04-16 22:26 - 2018-04-16 22:26 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2018-04-12 17:57 - 2018-05-03 19:09 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-04-12 17:57 - 2018-04-12 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-04-12 17:07 - 2018-05-03 22:41 - 000000000 ____D C:\Program Files\Panda Security URL Filtering
2018-04-12 17:07 - 2018-04-12 17:07 - 000000000 ____D C:\Users\Neslihan\AppData\LocalLow\pandasecuritytb
2018-04-12 17:07 - 2018-04-12 17:07 - 000000000 ____D C:\Program Files (x86)\pandasecuritytb
2018-04-12 17:06 - 2018-04-12 17:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Dome
2018-04-11 22:11 - 2018-04-11 22:11 - 000000000 ____D C:\Windows\system32\GroupPolicy
2018-04-11 21:53 - 2018-04-11 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2018-04-05 22:32 - 2018-04-05 22:32 - 000829525 _____ C:\Users\Neslihan\Desktop\FLT_XQ2TVU26523_0.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-05-03 23:45 - 2017-03-25 23:22 - 000000000 ____D C:\FRST
2018-05-03 20:23 - 2009-07-14 06:45 - 000031680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-03 20:23 - 2009-07-14 06:45 - 000031680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-03 19:13 - 2011-04-12 09:43 - 000700244 _____ C:\Windows\system32\perfh007.dat
2018-05-03 19:13 - 2011-04-12 09:43 - 000149882 _____ C:\Windows\system32\perfc007.dat
2018-05-03 19:13 - 2009-07-14 07:13 - 001623190 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-03 19:13 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-05-03 19:12 - 2015-11-10 00:00 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-03 19:12 - 2015-08-01 23:45 - 000000000 ____D C:\Users\Neslihan\AppData\Roaming\Skype
2018-05-03 19:09 - 2015-09-03 15:50 - 000000000 ____D C:\Users\Neslihan\AppData\Roaming\WTablet
2018-05-03 19:09 - 2014-02-25 16:57 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Adobe
2018-05-03 19:09 - 2014-02-25 16:39 - 000034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2018-05-03 19:02 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-03 00:40 - 2016-12-01 00:55 - 000000000 ____D C:\Users\Neslihan\AppData\LocalLow\Mozilla
2018-05-02 21:57 - 2014-09-25 23:35 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Last.fm
2018-05-02 19:15 - 2016-12-04 17:13 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Discord
2018-05-02 19:15 - 2016-10-26 05:44 - 000000000 ____D C:\Users\Neslihan\AppData\Local\Battle.net
2018-05-02 19:15 - 2016-05-17 22:43 - 000000000 ____D C:\Users\Neslihan\AppData\Roaming\discord
2018-05-01 14:44 - 2014-02-25 16:31 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-04-27 02:23 - 2015-03-28 17:13 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-04-23 20:40 - 2017-02-01 20:11 - 000001456 _____ C:\Users\Neslihan\AppData\Local\Adobe Save for Web 13.0 Prefs
2018-04-20 19:03 - 2015-03-11 16:49 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-04-20 19:02 - 2014-03-17 00:28 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-04-19 23:39 - 2016-11-10 02:14 - 000000033 _____ C:\Users\Neslihan\AppData\Roaming\AdobeWLCMCache.dat
2018-04-13 18:25 - 2017-01-01 16:49 - 007590120 _____ C:\Windows\system32\FNTCACHE.DAT
2018-04-12 17:07 - 2016-12-31 20:45 - 000341192 _____ C:\Users\Neslihan\AppData\Local\GDIPFONTCACHEV1.DAT
2018-04-12 17:07 - 2015-09-16 16:29 - 000000000 ____D C:\Users\Neslihan\AppData\Roaming\Panda Security
2018-04-12 17:07 - 2015-09-16 16:29 - 000000000 ____D C:\ProgramData\panda_url_filtering
2018-04-12 17:07 - 2015-09-16 16:29 - 000000000 ____D C:\Program Files (x86)\Panda Security
2018-04-12 17:07 - 2015-09-16 16:28 - 000000000 ____D C:\ProgramData\Panda Security
2018-04-11 22:11 - 2016-08-18 09:13 - 000000000 ____D C:\Users\Gast\AppData\Roaming\Panda Security
2018-04-10 10:55 - 2018-03-13 21:55 - 000004528 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-04-10 10:55 - 2014-04-04 23:45 - 000804864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-04-10 10:55 - 2014-04-04 23:45 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-04-10 10:55 - 2014-04-04 23:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-04-10 10:55 - 2014-02-26 23:01 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-04-10 10:55 - 2014-02-26 23:01 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-04-04 02:25 - 2015-09-12 14:15 - 000000000 ____D C:\Users\Neslihan\AppData\Roaming\vlc
2018-04-03 17:42 - 2009-07-14 07:08 - 000032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-05 22:35 - 2016-12-30 22:24 - 000000271 _____ () C:\ProgramData\DP0004.dat
2014-09-22 21:06 - 2016-01-02 01:53 - 000000132 _____ () C:\Users\Neslihan\AppData\Roaming\Adobe GIF-Format CC - Voreinstellungen
2014-08-06 12:44 - 2015-02-03 01:43 - 000000132 _____ () C:\Users\Neslihan\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2016-11-10 02:14 - 2018-04-19 23:39 - 000000033 _____ () C:\Users\Neslihan\AppData\Roaming\AdobeWLCMCache.dat
2016-12-27 19:50 - 2016-12-27 19:51 - 045331960 _____ (Tencent Inc.) C:\Users\Neslihan\AppData\Roaming\TXQBINSTX2.EXE
2015-09-10 18:47 - 2015-09-10 18:47 - 000000005 _____ () C:\Users\Neslihan\AppData\Roaming\version.ini
2014-03-01 18:43 - 2017-01-29 01:28 - 000001456 _____ () C:\Users\Neslihan\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2017-02-01 20:11 - 2018-04-23 20:40 - 000001456 _____ () C:\Users\Neslihan\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-02-26 21:22 - 2015-08-19 03:05 - 000007605 _____ () C:\Users\Neslihan\AppData\Local\resmon.resmoncfg
2014-02-25 16:30 - 2014-02-25 16:30 - 000000003 _____ () C:\Users\Neslihan\AppData\Local\user_data.ini

Einige Dateien in TEMP:
====================
2017-06-29 14:57 - 2017-06-29 14:57 - 000000180 _____ () C:\Users\Neslihan\AppData\Local\Temp\6699d3ee8dd9cf775caae782c8f44f03.dll
2017-06-29 14:57 - 2017-07-04 15:18 - 000000088 _____ () C:\Users\Neslihan\AppData\Local\Temp\76d20ca81e6625b22bcb2ec4300a8b29.dll
2018-04-12 17:07 - 2018-04-12 17:07 - 000290304 _____ (Microsoft Corporation) C:\Users\Neslihan\AppData\Local\Temp\Hydra.Sdk.Windows.Service.subinacl.exe
2017-02-07 10:12 - 2017-02-07 10:12 - 000739904 _____ (Oracle Corporation) C:\Users\Neslihan\AppData\Local\Temp\jre-8u121-windows-au.exe
2018-01-21 19:43 - 2018-01-21 19:43 - 001864256 _____ (Oracle Corporation) C:\Users\Neslihan\AppData\Local\Temp\jre-8u161-windows-au.exe
2017-07-03 16:50 - 2017-07-03 16:50 - 013767776 _____ (Microsoft Corporation) C:\Users\Neslihan\AppData\Local\Temp\vcredist_x86.exe
2017-04-29 23:04 - 2017-04-29 23:04 - 014456872 _____ (Microsoft Corporation) C:\Users\Neslihan\AppData\Local\Temp\vc_redist.x86.exe
2017-10-13 21:15 - 2017-10-13 21:15 - 032100680 _____ () C:\Users\Neslihan\AppData\Local\Temp\vlc-2.2.6-win64.exe
2018-04-12 17:05 - 2018-04-12 17:05 - 064068968 _____ (Panda Security, S.L.) C:\Users\Neslihan\AppData\Local\Temp\{E2472B61-0317-4958-856F-4D51F988F1A2}.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-04-28 18:53

==================== Ende von FRST.txt ============================

monchou 03.05.2018 22:48
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03.05.2018
durchgeführt von Neslihan (03-05-2018 23:45:52)
Gestartet von C:\Users\Neslihan\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-02-25 13:50:22)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2601677052-3802215475-160921258-500 - Administrator - Disabled)
Gast (S-1-5-21-2601677052-3802215475-160921258-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2601677052-3802215475-160921258-1002 - Limited - Enabled)
Neslihan (S-1-5-21-2601677052-3802215475-160921258-1000 - Administrator - Enabled) => C:\Users\Neslihan

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Panda Dome (Disabled - Up to date) {CF440CD9-5435-10B1-04E0-7768B6F10320}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Dome (Disabled - Up to date) {7425ED3D-720F-1F3F-3E50-4C1ACD76499D}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ÃÀͼ¿´¿´ 2.2.7 (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\ÃÀͼ¿´¿´) (Version: 2.2.7 - Meitu, Inc.)
Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.011.20038 - Adobe Systems Incorporated)
Adobe After Effects CC 2018 (HKLM-x32\...\AEFT_15_0_0) (Version: 15.0.0 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.4.1.298 - Adobe Systems Incorporated)
Adobe Flash Player 29 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_2) (Version: 21.0.2 - Adobe Systems Incorporated)
Adobe InDesign CC 2017 (HKLM-x32\...\IDSN_12_0_0) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_0_1) (Version: 18.0.1 - Adobe Systems Incorporated)
Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated)
Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Albion Online (HKLM-x32\...\SandboxAlbionOnline) (Version:  - Sandbox Interactive GmbH)
Amazon Cloud Player (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Amazon Amazon Cloud Player) (Version: 2.3.0.422 - Amazon Services LLC)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.17.1.44184 - Amazon)
Amazon Kindle (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Amazon Kindle) (Version: 1.21.0.48017 - Amazon)
AndreaMosaic 3.35.01 (HKLM-x32\...\AndreaMosaic) (Version:  - )
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)
ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version:  - ASRock Inc.)
ASRock XFast RAM v2.0.28 (HKLM\...\ASRock XFast RAM_is1) (Version:  - ASRock Inc.)
A-Tuning v1.0.17 (HKLM-x32\...\A-Tuning_is1) (Version: 1.0.17 - )
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.6 - Kakao Games Europe B.V.)
Blade & Soul (HKLM-x32\...\{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC)
calibre (HKLM-x32\...\{91FB7F70-259A-42F4-A576-E8E8E8E665AC}) (Version: 3.15.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.20 - Piriform)
Child of Light (HKLM-x32\...\Uplay Install 609) (Version:  - Ubisoft)
cv act sc/interface - Admin Edition (64-Bit) (HKLM\...\{05A84E0B-67C4-4ACA-8CAD-F62673D4C194}) (Version: 6.0.15 - cv cryptovision GmbH)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DC Universe Online (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\DGC-DC Universe Online) (Version: 1.0.3.192 - Daybreak Game Company)
DC Universe Online Live (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\DG0-DC Universe Online Live) (Version:  - Sony Online Entertainment)
Discord (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Discord) (Version: 0.0.301 - Discord Inc.)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FileZilla Client 3.17.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.17.0.1 - Tim Kosse)
ForHonor (HKLM-x32\...\Uplay Install 569) (Version:  - Ubisoft)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.139 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HiSuite (HKLM-x32\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd)
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.2.63.0 (HKLM\...\PROSetDX) (Version: 18.2.63.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.0.30.6644 - Intel(R) Corporation)
Intel(R) Smart Connect Technology 4.1 x64 (HKLM\...\{1EF24D7D-7B14-4EBA-A686-9E91C9C6763D}) (Version: 4.1.40.2143 - Intel)
Intel(R) Update Manager (HKLM-x32\...\{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}) (Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
IsoBuster 3.3 (HKLM-x32\...\IsoBuster3_is1) (Version: 3.3 - Smart Projects)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Last.fm Scrobbler 2.1.37 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Lioncast LM30 Gaming Mouse Version 1.1 (HKLM-x32\...\{BF8BC0AC-979B-4085-8F94-7933AF19CBD2}_is1) (Version: 1.1 - LIONCAST)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version:  - )
Malwarebytes Version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes)
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.8431.2242 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2017 (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.12.111.1002 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.51 - mIRC Co. Ltd.)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Firefox 59.0.2 (x64 en-US) (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Mozilla Firefox 59.0.2 (x64 en-US)) (Version: 59.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
Nero 9 Lite (HKLM-x32\...\{7edf2ecd-a3de-4e25-8e3f-51e7baafa7bb}) (Version:  - Nero AG)
NETGEAR A6200 Genie (HKLM-x32\...\{48E61F3E-61D4-42A3-9D29-D0CF40838779}) (Version: 26.0.0.0 - NETGEAR)
Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 1.2.0 - Nexon)
Nier Automata (HKLM-x32\...\Nier Automata_is1) (Version: 1.1 - THE KNIGHT)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.2.2 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 359.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.9.0.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.97 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2242 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2242 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2242 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.8326.2076 - Microsoft Corporation) Hidden
One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenVPN 2.3.4-I002  (HKLM\...\OpenVPN) (Version: 2.3.4-I002 - )
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version:  - Blizzard Entertainment)
Panda Cloud Cleaner (HKLM-x32\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.1.10 - Panda Security)
Panda Devices Agent (HKLM-x32\...\{3F9548B2-0B34-4453-A92E-35056B053F19}) (Version: 1.08.00 - Panda Security) Hidden
Panda Devices Agent (HKLM-x32\...\Panda Devices Agent) (Version: 1.03.08 - Panda Security) Hidden
Panda Dome (HKLM\...\{2D17A736-B95E-411E-9397-6C5F16EA26BE}) (Version: 9.12.00 - Panda Security) Hidden
Panda Dome (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 18.05.00.0000 - Panda Security)
Panda Safe Web (HKLM-x32\...\pandasecuritytb) (Version: 4.3.1.29 - Panda Security and Visicom Media Inc.)
PatchCleaner (HKLM-x32\...\{727DA176-50BB-452C-8DB5-96EE0A573ED4}) (Version: 1.4.20 - HomeDev)
Poedit (HKLM-x32\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 1.8.8 - Vaclav Slavik)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RUBICon (HKLM-x32\...\{438134D3-0BD4-4C52-8575-5B2B63AD01C2}) (Version: 2.0.25 - RUB)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Spotify) (Version: 1.0.68.407.g6864aaaf - Spotify AB)
Star Citizen Launcher (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\Star Citizen Launcher) (Version: 00.01.00.00 - Cloud Imperium Games)
Stifttablett (HKLM-x32\...\Pen Tablet Driver) (Version:  - Wacom Technology Corp.)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TouchChip USB Driver 2.20 (HKLM\...\{1EE6993C-5BBD-4AD8-B98B-EF4573DED395}) (Version: 2.20.0.0196 - AuthenTec Inc.) Hidden
TreeSize Free V3.4.5 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.4.5 - JAM Software)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
TwitchAlerts (HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\fb3f6ca9b67f53a3) (Version: 1.0.0.8 - TwitchAlerts)
UE4 Prerequisites (x64) (HKLM\...\{488048BA-66A9-462E-9C36-00B3F364FAF2}) (Version: 1.0.8.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{9514471f-b41e-41f7-af03-7da1d05b279e}) (Version: 1.0.8.0 - Epic Games, Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VC_CRT_x64 (HKLM\...\{54F2237F-018C-483B-8884-9FC0D88840C3}) (Version: 1.02.0000 - Intel Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
vs_filehandler_amd64 (HKLM-x32\...\{DDEF2BD0-F728-4D04-A085-B5ACC9ADC311}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{2512A3CE-E1E4-46D5-8B40-28DA3AE2261E}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{384F31FB-B99D-48A7-9D72-E1FEBEC2201A}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{66555B06-A474-4F98-A9D4-D753E5EBABE8}) (Version: 15.0.26906 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{0D3A6730-43CE-4AF6-BDF7-4D0660296C60}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.40 (64-位) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
XFast LAN v6.61 (HKLM\...\XFast LAN) (Version: 6.61 - cFos Software GmbH, Bonn)
XFastUSB (HKLM-x32\...\XFastUSB) (Version: 3.02.31 - ASRock Inc.)
XSplit Broadcaster (HKLM-x32\...\{96BC4ADF-C63F-4076-919D-259EA1D3C531}) (Version: 2.9.1701.1636 - SplitmediaLabs)
天涯明月刀 (HKLM-x32\...\天涯明月刀) (Version:  - Tencent)
美图秀秀 4.0.1  (HKLM-x32\...\美图秀秀) (Version:  - 美图网)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2601677052-3802215475-160921258-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [  AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [  AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [  AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [!{6A86DAFA-242F-4E90-A4AD-D01E6B56E6EA}] -> {6A86DAFA-242F-4E90-A4AD-D01E6B56E6EA} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [QBOverlayIcon] -> {96959DE7-C855-42BD-8382-2AAABF2A8F52} =>  -> Keine Datei
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => E:\Adobe Documents\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => E:\Program Files (x86)\Notepad++\NppShell_06.dll [2016-11-27] ()
ContextMenuHandlers1: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => E:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.)
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2018-01-30] (Panda Security, S.L.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files\WinRAR\rarext.dll [2016-08-18] (WinRAR 压缩管理软件中文版)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files\WinRAR\rarext32.dll [2016-08-18] (WinRAR 压缩管理软件中文版)
ContextMenuHandlers2: [1&1 Office-Drive] -> {9CA7CA19-4DC6-408f-8198-33DF449C9CE8} =>  -> Keine Datei
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ContextMenuHandlers3: [1&1 Office-Drive] -> {9CA7CA19-4DC6-408f-8198-33DF449C9CE8} =>  -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers4: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => E:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-11-24] (NVIDIA Corporation)
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2018-01-30] (Panda Security, S.L.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => E:\Adobe Documents\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers6: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => E:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2018-01-30] (Panda Security, S.L.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files\WinRAR\rarext.dll [2016-08-18] (WinRAR 压缩管理软件中文版)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files\WinRAR\rarext32.dll [2016-08-18] (WinRAR 压缩管理软件中文版)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0D7B1147-64DF-45D4-A99D-C5C69DC0571A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-04-20] (Microsoft Corporation)
Task: {0E61B214-E0C3-498C-90C7-4BCFC481634E} - \{819010D2-A0A3-49B0-AD47-F6FA41C287BE} -> Keine Datei <==== ACHTUNG
Task: {0EE0FDF9-B8EC-42D4-934B-194629235E95} - \{7716F4DC-9C3B-48F6-BD2D-D246152D50D5} -> Keine Datei <==== ACHTUNG
Task: {14E3DD92-198C-4339-841E-C84A880E7FC1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-09-19] (NVIDIA Corporation)
Task: {1A140C70-1D27-4CEC-A240-D1D5C5028120} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-04-20] (Microsoft Corporation)
Task: {2E4351C9-377F-44B0-B875-70E3240BB284} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12] (Intel Corporation)
Task: {2EBD7374-F0F7-4E0A-AE20-F85B59FE7F3F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12] (Intel Corporation)
Task: {3242145C-4CAA-4AD0-8A59-9BE8E85B5D28} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {360AABBB-54DB-411E-95C8-BAED518136CD} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-01-18] ()
Task: {37A9F98B-4BAB-4483-8B18-8FE21D26AE66} - System32\Tasks\{47DD83C3-7EE2-4614-806C-9F28087D2870} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.33.0.105&LastError=12040
Task: {3AA8AB51-D4BC-4082-B993-7C7E7E49C477} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-09-19] (NVIDIA Corporation)
Task: {3EFE99F5-3F5D-4FA5-A469-D353E96F188D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-03-31] (Microsoft Corporation)
Task: {3FCD1689-C888-4C9E-92AE-FF38E0B76E38} - \{FB56A103-64B6-478E-A049-9B2D3062D7F5} -> Keine Datei <==== ACHTUNG
Task: {4B6E2F6E-0771-439C-8CC1-5830A256859D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {4D52E475-C2D2-49A7-8244-B047655FEE7D} - \{5CD14BEA-4EA5-4E55-BEB2-096A9CEE323F} -> Keine Datei <==== ACHTUNG
Task: {523C6C28-69BF-42F7-A1F9-3CF53355F9F8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-09-19] (NVIDIA Corporation)
Task: {56E59397-8449-45D0-9A21-03E9519C7E1B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-07-13] (Piriform Ltd)
Task: {5AC7919B-0C5C-4CCB-8532-BEB59FEAAE2D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {6A218976-BADF-41B1-B607-6EAAFC6F59AA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {6F810984-92B9-4C8F-8058-7824D9AED054} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-04-20] (Microsoft Corporation)
Task: {85D85EB3-1537-48E0-BA99-97A4A9A65031} - System32\Tasks\AdobeGCInvoker-1.0-Neslihan-PC-Neslihan => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05] (Adobe Systems, Incorporated)
Task: {8E126DD9-3CD4-42BC-9D6D-C188C6B9A8F5} - \{44055574-0B85-44F3-A1C4-682E2FDE5C62} -> Keine Datei <==== ACHTUNG
Task: {914242A0-37A4-419E-8194-2D97425AFAEA} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {916E0712-04AA-4D46-8F52-32AD24B6525A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {9D86EFAD-6408-42DB-9C16-738DAA4D127B} - \{A13CFA64-A305-4CF8-B147-201BD908448B} -> Keine Datei <==== ACHTUNG
Task: {9F05A3C4-8DA9-4C8C-87F5-50F85963AFE3} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19] (NVIDIA Corporation)
Task: {A5502CD1-E22E-4AD7-8302-B3864D6C9BBE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-03-31] (Microsoft Corporation)
Task: {B31857D6-A81B-4D2A-94CC-E4489ED3136A} - System32\Tasks\AdobeAAMUpdater-1.0-Neslihan-PC-Neslihan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {B435BB39-05F4-4EF1-9C0F-96BBA28D9769} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-01-18] ()
Task: {BE0E3003-791E-4AEE-8414-A681F40CB476} - \{751E6175-316C-4642-809F-78BBE16BC1BB} -> Keine Datei <==== ACHTUNG
Task: {C457D177-4CE6-4010-960B-37AD9E648078} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_Plugin.exe [2018-04-10] (Adobe Systems Incorporated)
Task: {DDBC4148-291F-4637-A8C9-2AC78F191579} - \{4ABDB9BE-1FF9-4E66-945F-902C72DA8C8F} -> Keine Datei <==== ACHTUNG
Task: {DEB6B19A-37D8-40C9-A00A-C6F124692FC5} - \{F0BA206F-7AF8-4FDB-B502-BE05D000D02D} -> Keine Datei <==== ACHTUNG
Task: {E01E7AA4-F6F0-43B9-9C73-258B96A2E328} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-04-10] (Adobe Systems Incorporated)
Task: {E9860E6E-9168-4E8B-B448-F60851EED24C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {F6379081-512D-4EE8-BB0D-A2ED7CB25B94} - \{EEECA145-83F4-4879-86D0-176A6725C669} -> Keine Datei <==== ACHTUNG
Task: {FD5FA2A4-FE12-4075-B15C-C140815E24C7} - \{2C3E5067-F04D-40F9-8187-D7C85417554E} -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-10 00:00 - 2015-11-24 20:40 - 000116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-10-13 06:45 - 2015-10-13 06:45 - 000085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 06:45 - 2015-10-13 06:45 - 001328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-07-26 09:58 - 2017-07-26 09:58 - 000192200 _____ () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
2013-03-14 15:42 - 2013-03-14 15:42 - 000182248 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-03-14 15:42 - 2013-03-14 15:42 - 000059880 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2017-02-16 02:33 - 2017-09-19 09:23 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-02-10 02:12 - 2018-02-10 02:12 - 000614856 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2016-05-09 09:22 - 2016-05-09 09:22 - 000052912 _____ () E:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2016-11-27 19:55 - 2016-11-27 19:55 - 000230064 _____ () E:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-03-04 16:46 - 2012-09-24 18:28 - 000029984 _____ () C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
2014-11-18 01:07 - 2013-01-30 21:36 - 000329872 ____N () C:\Program Files (x86)\XSManager\WTGService.exe
2017-10-23 19:33 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-17 20:02 - 2015-05-25 18:21 - 003171840 _____ () C:\Program Files (x86)\Lioncast LM30 Gaming Mouse\LCMon.exe
2018-04-27 02:23 - 2018-04-26 05:14 - 004443992 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.139\libglesv2.dll
2018-04-27 02:23 - 2018-04-26 05:14 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.139\libegl.dll
2015-12-15 19:17 - 2015-12-15 19:17 - 000618544 _____ () C:\Program Files (x86)\Panda Security\Panda Security Protection\SQLite3.dll
2017-02-16 02:33 - 2017-09-19 09:23 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2014-03-04 16:46 - 2013-02-18 17:13 - 000106496 _____ () C:\Program Files (x86)\NETGEAR\A6200\GWlanController.dll
2014-03-04 16:46 - 2013-03-26 18:00 - 000018944 _____ () C:\Program Files (x86)\NETGEAR\A6200\GWPSController.dll
2017-09-26 22:22 - 2017-09-26 22:22 - 001984000 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2016-09-17 20:02 - 2011-01-27 00:53 - 000028160 _____ () C:\Program Files (x86)\Lioncast LM30 Gaming Mouse\uiHook.dll
2018-02-14 06:03 - 2018-02-14 06:03 - 067115984 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2016-05-09 09:22 - 2016-05-09 09:22 - 000048816 _____ () E:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2018-04-12 21:33 - 2018-04-12 21:33 - 000142376 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-04-12 21:33 - 2018-04-12 21:33 - 000271400 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-04-12 21:33 - 2018-04-12 21:33 - 000141864 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ref\build\Release\binding.node
2018-04-12 21:33 - 2018-04-12 21:33 - 000150568 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-04-12 21:33 - 2018-04-12 21:33 - 000111144 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin7.dll
2018-04-12 21:33 - 2018-04-12 21:33 - 000110120 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\idle-gc\build\Release\idle-gc.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000125904 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000125392 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000133072 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000222160 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000111064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin7.dll
2018-02-14 06:20 - 2018-02-14 06:20 - 000106456 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000094168 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-2601677052-3802215475-160921258-1000\...\sony.com -> sony.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-03-26 02:26 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2601677052-3802215475-160921258-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Amazon Cloud Player => "C:\Users\Neslihan\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe"
MSCONFIG\startupreg: EADM => "E:\Games\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: GIZMO2 => "C:\Program Files (x86)\GIZMO2\GIZMO.exe" -BootProcess
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: XFast LAN => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe
MSCONFIG\startupreg: XFastUSB => "C:\Program Files (x86)\XFastUSB\XFastUsb.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{B48A1D41-055C-4E81-9597-EFB1C9A1466C}C:\users\neslihan\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\neslihan\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{B5A058CC-8938-4DA3-8A87-5ECC3B8232CB}C:\users\neslihan\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\neslihan\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9BC85077-7676-4A9B-A422-A4FF1961DB79}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1B9BDF93-9287-42C3-8D8F-FBA98ED7253F}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{B7388B95-E761-4229-AFDD-FB2ED81ACB3C}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{FD5E0F71-A9D5-463A-820C-37B24A859BD6}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{63F26FDA-82C6-4BE9-A99D-848061FFF0E8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{E9DE5C25-33AC-444C-922F-1C4D56A63BE0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{785C47AF-4114-4714-9284-9665C20E515A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{52DD472D-6D1F-420D-B9C4-E055C2DC2F8D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{7A69CF87-421B-49F0-B8C2-8ABA35E43F78}C:\users\neslihan\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neslihan\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{9088FDA5-57E5-4892-97F0-71E9C4E36CD9}C:\users\neslihan\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neslihan\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{4033A3AA-1BCA-4940-8293-012BB9E770C4}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F5969E43-F6FD-4734-9553-E6129EF54443}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{D49F59A2-4DE7-4F15-A9A1-8F36A96E2E80}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{33A177C6-7465-4922-B0D5-38EFBEFAEFC4}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{F4791B80-1C05-4008-BB3C-B20FCC67EB85}E:\program files (x86)\winamp\winamp.exe] => (Allow) E:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{CF8DD967-EFA6-40EC-AC0F-D0657C0839EB}E:\program files (x86)\winamp\winamp.exe] => (Allow) E:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{228F4A92-F469-44A9-A524-ADAE1A455C6B}E:\program files (x86)\hearthstone\overwatch\overwatch.exe] => (Allow) E:\program files (x86)\hearthstone\overwatch\overwatch.exe
FirewallRules: [UDP Query User{A6CDB9CE-F035-4C63-AB87-6A8A94B0B08C}E:\program files (x86)\hearthstone\overwatch\overwatch.exe] => (Allow) E:\program files (x86)\hearthstone\overwatch\overwatch.exe
FirewallRules: [TCP Query User{8F4C12D6-2998-418C-B2A1-54CE412F6557}C:\users\neslihan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\neslihan\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{144B42AD-511A-493A-B681-CF4054148EB1}C:\users\neslihan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\neslihan\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{1CA92868-F6D9-4A33-93FE-3239084681B8}E:\program files (x86)\mirc\mirc.exe] => (Allow) E:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{B82E15BF-A314-4184-BBC1-3592B399CAED}E:\program files (x86)\mirc\mirc.exe] => (Allow) E:\program files (x86)\mirc\mirc.exe
FirewallRules: [{59329783-B730-466F-B803-1C6FF85006EA}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{0FBCF312-074F-494E-A13B-773DBC706995}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{93D9D5EC-A672-4D3A-9AD5-3BF2F1E27826}] => (Allow) E:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{66D7996D-A65B-4358-BE10-5CAC5F14A01B}] => (Allow) E:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{8A06A2F4-B9BD-4577-BEFF-2A429FEF90D6}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{7B269533-1E7E-4446-894E-D21A94573FEA}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{272BDFEE-72C3-449A-BB20-91F937D65B23}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{0972254A-E807-4A0D-BF7A-4E9CFDF9C34E}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{9B16F470-C815-43D5-B92E-61BB99F919FA}] => (Allow) E:\SteamLibrary\steamapps\common\SotA\Shroud of the Avatar.exe
FirewallRules: [{8E83F1DF-1E87-42E6-88D0-951197A4D526}] => (Allow) E:\SteamLibrary\steamapps\common\SotA\Shroud of the Avatar.exe
FirewallRules: [{8280DF8C-15AD-4310-B3DA-C72D13EF0380}] => (Allow) E:\SteamLibrary\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{9EDEA8D2-A2FD-43DF-A1A6-9C8DF05AC48A}] => (Allow) E:\SteamLibrary\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{CFF64B75-5606-43BF-BF54-7DF4796BECF6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{1BF13F9D-DA44-42BA-96E4-B2F1D6273E65}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D7FA6D64-5B89-4438-A97D-78B26771DC40}] => (Allow) C:\Program Files (x86)\pandasecuritytb\cleanupie.exe
FirewallRules: [{99736933-284D-486E-BDA3-4302E7D76DD4}] => (Allow) C:\Program Files (x86)\pandasecuritytb\cleanupie.exe
FirewallRules: [{64210B77-697B-45D0-AD7C-C634BB9903AC}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{8BF90224-0C1B-4723-985E-419490FF547C}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{F2798808-AC9A-4610-839D-77343566E639}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [E:\Program Files (x86)\Meitu\KanKan\KanKan.exe] => Enabled:KanKan

==================== Wiederherstellungspunkte =========================

24-04-2018 19:09:00 Geplanter Prüfpunkt
01-05-2018 20:00:11 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/03/2018 07:18:09 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT-AUTORITÄT)
Description: Produkt: Adobe Acrobat DC - Update "Adobe Acrobat DC
 (18.011.20038)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/03/2018 07:18:00 PM) (Source: MsiInstaller) (EventID: 11328) (User: NT-AUTORITÄT)
Description: Produkt: Adobe Acrobat DC -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei E:\Config.Msi\PTB890.tmp.  Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676

Error: (05/03/2018 07:08:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (05/03/2018 02:36:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSUAService.exe, Version: 4.0.2.1, Zeitstempel: 0x59e6a760
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.1, Zeitstempel: 0x4ba1dbbe
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d635
ID des fehlerhaften Prozesses: 0x3b44
Startzeit der fehlerhaften Anwendung: 0x01d3e27559513d33
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Panda Security\Panda Security Protection\MSVCR100.dll
Berichtskennung: fe15c311-4e69-11e8-9392-bc5ff4bfaa1f

Error: (05/03/2018 02:26:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSUAService.exe, Version: 4.0.2.1, Zeitstempel: 0x59e6a760
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.1, Zeitstempel: 0x4ba1dbbe
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d635
ID des fehlerhaften Prozesses: 0x1c34
Startzeit der fehlerhaften Anwendung: 0x01d3e273f0168975
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Panda Security\Panda Security Protection\MSVCR100.dll
Berichtskennung: 93afd8d9-4e68-11e8-9392-bc5ff4bfaa1f

Error: (05/03/2018 02:16:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSUAService.exe, Version: 4.0.2.1, Zeitstempel: 0x59e6a760
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.1, Zeitstempel: 0x4ba1dbbe
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d635
ID des fehlerhaften Prozesses: 0x2768
Startzeit der fehlerhaften Anwendung: 0x01d3e27286db5a73
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Panda Security\Panda Security Protection\MSVCR100.dll
Berichtskennung: 2a7b66c3-4e67-11e8-9392-bc5ff4bfaa1f

Error: (05/03/2018 02:05:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSUAService.exe, Version: 4.0.2.1, Zeitstempel: 0x59e6a760
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.1, Zeitstempel: 0x4ba1dbbe
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d635
ID des fehlerhaften Prozesses: 0x3b88
Startzeit der fehlerhaften Anwendung: 0x01d3e2711da740d8
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Panda Security\Panda Security Protection\MSVCR100.dll
Berichtskennung: c147b8b9-4e65-11e8-9392-bc5ff4bfaa1f

Error: (05/03/2018 01:55:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSUAService.exe, Version: 4.0.2.1, Zeitstempel: 0x59e6a760
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.30319.1, Zeitstempel: 0x4ba1dbbe
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d635
ID des fehlerhaften Prozesses: 0x38b8
Startzeit der fehlerhaften Anwendung: 0x01d3e26fb472ed6c
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Panda Security\Panda Security Protection\MSVCR100.dll
Berichtskennung: 5812fc10-4e64-11e8-9392-bc5ff4bfaa1f


Systemfehler:
=============
Error: (05/03/2018 07:09:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (05/03/2018 07:03:05 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst RtkAudioService erreicht.

Error: (05/03/2018 02:36:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/03/2018 02:26:16 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/03/2018 02:16:10 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/03/2018 02:06:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/03/2018 01:55:58 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/03/2018 01:45:52 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Panda Product Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.


Windows Defender:
===================================
Date: 2017-12-23 02:30:39.397
Description:
Die Windows Defender-Überprüfung wurde vor Fertigstellung beendet.
Überprüfungs-ID:{010CA089-9410-4C13-95DE-79BCC35DBEBF}
Überprüfungstyp:AntiSpyware
Überprüfungsparameter:Schnellscan
Benutzer:NT-AUTORITÄT\NETZWERKDIENST

Date: 2017-10-30 04:50:49.395
Description:
Bei der Windows Defender-Überprüfung wurde Spyware oder mögliche unerwünschte Software entdeckt.
Weitere Informationen finden Sie hier:
hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/IstartSurf!lnk&threatid=213962
Name:BrowserModifier:Win32/IstartSurf!lnk
ID:213962
Schweregrad:Hoch
Kategorie:Browserveränderer
Gefundener Pfad:containerfile:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk;file:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk->[CMDEmbedded];startup:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Feststellungstyp:Konkret
Feststellungsquelle:System
Status:Unbekannt
Benutzer:NT-AUTORITÄT\NETZWERKDIENST
Prozessname:c:\program files\windows defender\MpCmdRun.exe

Date: 2017-10-30 04:50:49.394
Description:
Bei der Windows Defender-Überprüfung wurde Spyware oder mögliche unerwünschte Software entdeckt.
Weitere Informationen finden Sie hier:
hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/IstartSurf!lnk&threatid=213962
Name:BrowserModifier:Win32/IstartSurf!lnk
ID:213962
Schweregrad:Hoch
Kategorie:Browserveränderer
Gefundener Pfad:containerfile:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk;file:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk->[CMDEmbedded];startup:C:\Users\Neslihan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Feststellungstyp:Konkret
Feststellungsquelle:System
Status:Unbekannt
Benutzer:NT-AUTORITÄT\NETZWERKDIENST
Prozessname:c:\program files\windows defender\MpCmdRun.exe

Date: 2016-02-17 05:38:36.347
Description:
Die Windows Defender-Überprüfung wurde vor Fertigstellung beendet.
Überprüfungs-ID:{88EE67AB-E43D-422C-B33F-6733A68D4661}
Überprüfungstyp:AntiSpyware
Überprüfungsparameter:Schnellscan
Benutzer:NT-AUTORITÄT\NETZWERKDIENST

Date: 2015-08-11 03:03:09.363
Description:
Bei der Windows Defender-Überprüfung wurde Spyware oder mögliche unerwünschte Software entdeckt.
Weitere Informationen finden Sie hier:
hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/IstartSurf!lnk&threatid=213962
Name:BrowserModifier:Win32/IstartSurf!lnk
ID:213962
Schweregrad:Hoch
Kategorie:Browserveränderer
Gefundener Pfad:containerfile:C:\Users\Neslihan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk;file:C:\Users\Neslihan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk->[CMDEmbedded]
Feststellungstyp:Konkret
Feststellungsquelle:System
Status:Unbekannt
Benutzer:NT-AUTORITÄT\NETZWERKDIENST
Prozessname:c:\program files\windows defender\MpCmdRun.exe

Date: 2017-12-22 21:14:57.449
Description:
Beim Laden der Signaturen wurde von Windows Defender ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.
Versuchte Signaturen:Aktuell
Fehlercode:0x80070002
Fehlerbeschreibung:Das System kann die angegebene Datei nicht finden.
Signaturversion:0.0.0.0
Modulversion:0.0.0.0

==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-4430 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 16301.32 MB
Verfügbarer physikalischer RAM: 10813.21 MB
Summe virtueller Speicher: 20299.5 MB
Verfügbarer virtueller Speicher: 14129.8 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:4 GB) NTFS
Drive e: () (Fixed) (Total:931.51 GB) (Free:216.46 GB) NTFS

\\?\Volume{103f3743-9e1f-11e3-8432-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 29C690AD)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: 29C690D5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 03.05.2018 22:56
Code:
Adobe Acrobat DC
Adobe Illustrator CC 2017
Microsoft Office 365 ProPlus
Microsoft Office Enterprise 2007
Ich rate mal: reine Privatnutzung! :rofl:

monchou 03.05.2018 23:05
Sind das zwei office Versionen? :D ich glaube eine haben wir mal über die Uni spendiert bekommen für begrenzte Zeit, aber glaube ich benutze nur die Aktuelle :stirn:

Und ja, benutze den nicht kommerziell - oder was meinst du genau? :( sorry stehe auf dem Schlauch

cosinus 03.05.2018 23:31
Gut, du bist Student, danke für die Erklärung!

Schädlinge suchen mit Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

monchou 04.05.2018 18:37
Ah verstehe! Danke


Einen Fund gab es, entsprechend auf Skip gedrückt wie beschrieben

Code:
19:34:17.0591 0x1cf8  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
19:34:22.0821 0x1cf8  ============================================================
19:34:22.0821 0x1cf8  Current date / time: 2018/05/04 19:34:22.0821
19:34:22.0821 0x1cf8  SystemInfo:
19:34:22.0821 0x1cf8 
19:34:22.0821 0x1cf8  OS Version: 6.1.7601 ServicePack: 1.0
19:34:22.0821 0x1cf8  Product type: Workstation
19:34:22.0821 0x1cf8  ComputerName: NESLIHAN-PC
19:34:22.0821 0x1cf8  UserName: Neslihan
19:34:22.0821 0x1cf8  Windows directory: C:\Windows
19:34:22.0821 0x1cf8  System windows directory: C:\Windows
19:34:22.0821 0x1cf8  Running under WOW64
19:34:22.0821 0x1cf8  Processor architecture: Intel x64
19:34:22.0821 0x1cf8  Number of processors: 4
19:34:22.0821 0x1cf8  Page size: 0x1000
19:34:22.0821 0x1cf8  Boot type: Normal boot
19:34:22.0821 0x1cf8  CodeIntegrityOptions = 0x00000001
19:34:22.0821 0x1cf8  ============================================================
19:34:26.0317 0x1cf8  KLMD registered as C:\Windows\system32\drivers\17779144.sys
19:34:26.0317 0x1cf8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23915, osProperties = 0x1
19:34:26.0343 0x1cf8  System UUID: {C5C12FA4-AF46-6B4B-810C-191EF8F02E5A}
19:34:26.0422 0x1cf8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:34:26.0430 0x1cf8  Drive \Device\Harddisk1\DR1 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:34:26.0434 0x1cf8  ============================================================
19:34:26.0434 0x1cf8  \Device\Harddisk0\DR0:
19:34:26.0434 0x1cf8  MBR partitions:
19:34:26.0434 0x1cf8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
19:34:26.0434 0x1cf8  \Device\Harddisk1\DR1:
19:34:26.0434 0x1cf8  MBR partitions:
19:34:26.0434 0x1cf8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:34:26.0434 0x1cf8  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xEE49000
19:34:26.0434 0x1cf8  ============================================================
19:34:26.0435 0x1cf8  C: <-> \Device\Harddisk1\DR1\Partition2
19:34:26.0452 0x1cf8  E: <-> \Device\Harddisk0\DR0\Partition1
19:34:26.0452 0x1cf8  ============================================================
19:34:26.0452 0x1cf8  Initialize success
19:34:26.0452 0x1cf8  ============================================================
19:35:06.0297 0x2358  ============================================================
19:35:06.0297 0x2358  Scan started
19:35:06.0297 0x2358  Mode: Manual; SigCheck; TDLFS;
19:35:06.0297 0x2358  ============================================================
19:35:06.0297 0x2358  KSN ping started
19:35:06.0377 0x2358  KSN ping finished: true
19:35:06.0935 0x2358  ================ Scan system memory ========================
19:35:06.0935 0x2358  System memory - ok
19:35:06.0936 0x2358  ================ Scan services =============================
19:35:06.0953 0x2358  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
19:35:06.0973 0x2358  1394ohci - ok
19:35:07.0023 0x2358  [ CEB66453AFFE08518566151D2B86864C, B0E99D797E7E36F9DE5AC93C80C4D9047EA05A8C62DEC67E222CC7AE7D67AB18 ] A6200          C:\Windows\system32\DRIVERS\bcmwlhigh664.sys
19:35:07.0074 0x2358  A6200 - ok
19:35:07.0085 0x2358  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
19:35:07.0095 0x2358  ACPI - ok
19:35:07.0095 0x2358  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
19:35:07.0115 0x2358  AcpiPmi - ok
19:35:07.0117 0x2358  [ CA805DA983594B01F3554464B2E5158F, AC311C5D59AA1FA2B1B3CDB9CCEABEC85878BF6CA6106253186909AA9EB3C1BA ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:35:07.0127 0x2358  AdobeARMservice - ok
19:35:07.0147 0x2358  [ C237E820E6FB291557108324E6A0AAAC, 9C98C0E6A0E0BB46CBAB253B4CF98A830D84A7AD1EFA903206F8E1E8D21B08CC ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:35:07.0157 0x2358  AdobeFlashPlayerUpdateSvc - ok
19:35:07.0177 0x2358  [ CD283D86E1DE13F6AEED204F7CACCAAA, 4694217E965AD730848C54C1D3929126EDDA4D5061440E05003A252A8381532F ] AdobeUpdateService C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
19:35:07.0197 0x2358  AdobeUpdateService - ok
19:35:07.0207 0x2358  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
19:35:07.0217 0x2358  adp94xx - ok
19:35:07.0227 0x2358  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\Windows\system32\drivers\adpahci.sys
19:35:07.0237 0x2358  adpahci - ok
19:35:07.0247 0x2358  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
19:35:07.0257 0x2358  adpu320 - ok
19:35:07.0257 0x2358  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
19:35:07.0267 0x2358  AeLookupSvc - ok
19:35:07.0277 0x2358  [ 0DC2A9882540DEA4A55B08785E09D8FC, 69B15724B0034F9915AACE109A6C596D6AF2DA350FC18C9A0CD98C81CB7EDEE3 ] AFD            C:\Windows\system32\drivers\afd.sys
19:35:07.0297 0x2358  AFD - ok
19:35:07.0297 0x2358  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
19:35:07.0307 0x2358  agp440 - ok
19:35:07.0347 0x2358  [ 58A5D48F16E89575C21C0B14A15D4383, 0F5F96C7BAFA0A4E2D6A36257086687E7D1C016087F73B6F19BC3D4413DEC47B ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
19:35:07.0407 0x2358  AGSService - ok
19:35:07.0407 0x2358  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\Windows\System32\alg.exe
19:35:07.0417 0x2358  ALG - ok
19:35:07.0427 0x2358  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
19:35:07.0427 0x2358  aliide - ok
19:35:07.0437 0x2358  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
19:35:07.0437 0x2358  amdide - ok
19:35:07.0437 0x2358  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
19:35:07.0447 0x2358  AmdK8 - ok
19:35:07.0457 0x2358  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
19:35:07.0465 0x2358  AmdPPM - ok
19:35:07.0469 0x2358  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
19:35:07.0477 0x2358  amdsata - ok
19:35:07.0483 0x2358  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
19:35:07.0486 0x2358  amdsbs - ok
19:35:07.0486 0x2358  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\Windows\system32\drivers\amdxata.sys
19:35:07.0496 0x2358  amdxata - ok
19:35:07.0496 0x2358  [ C16B5B379A2A79702CC5FF923EAAE3FD, FD6A1E3C46282CF77AFA9FB4B4ACE2DB6295DFB0C69EA07BE7160538041CDB2F ] AppID          C:\Windows\system32\drivers\appid.sys
19:35:07.0506 0x2358  AppID - ok
19:35:07.0516 0x2358  [ 5152D6B29C61EF59537DBDA92BFE2978, 6D426A0FEE016A8899ADE864DD84BE019C5B5DB7E1DB295ED720239877FCB3EF ] AppIDSvc        C:\Windows\System32\appidsvc.dll
19:35:07.0516 0x2358  AppIDSvc - ok
19:35:07.0526 0x2358  [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo        C:\Windows\System32\appinfo.dll
19:35:07.0536 0x2358  Appinfo - ok
19:35:07.0536 0x2358  [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:35:07.0546 0x2358  Apple Mobile Device Service - ok
19:35:07.0546 0x2358  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt        C:\Windows\System32\appmgmts.dll
19:35:07.0556 0x2358  AppMgmt - ok
19:35:07.0566 0x2358  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\Windows\system32\drivers\arc.sys
19:35:07.0566 0x2358  arc - ok
19:35:07.0576 0x2358  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
19:35:07.0586 0x2358  arcsas - ok
19:35:07.0600 0x2358  [ 8637F3119057178364D200F2462E625C, 40CAE47AA6C6B23FEB95961FD06BB3EB075CA63BB91B54CB26215A368371B343 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:35:07.0600 0x2358  aspnet_state - ok
19:35:07.0610 0x2358  [ E1AFEE1584C74050DE0DD16DE2A54BF3, 77C8D98159D8BCDC7917B04977949823D50C49D0D13587310E060A4B8893AE42 ] AsrAppCharger  C:\Windows\system32\DRIVERS\AsrAppCharger.sys
19:35:07.0620 0x2358  AsrAppCharger - ok
19:35:07.0620 0x2358  [ 1A234F4643F5658BAB07BFA611282267, F40435488389B4FB3B945CA21A8325A51E1B5F80F045AB019748D0EC66056A8B ] AsrDrv101      C:\Windows\SysWOW64\Drivers\AsrDrv101.sys
19:35:07.0630 0x2358  AsrDrv101 - ok
19:35:07.0630 0x2358  [ 67C03C21F319647834DAA61704D8A248, A0845AE5B13E1208CDDEB77863AB2D40CA5D1C709AD5B1976C3AC595F7A516D5 ] AsrRamDisk      C:\Windows\system32\DRIVERS\AsrRamDisk.sys
19:35:07.0640 0x2358  AsrRamDisk - ok
19:35:07.0640 0x2358  AsrSetupDrv - ok
19:35:07.0640 0x2358  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
19:35:07.0660 0x2358  AsyncMac - ok
19:35:07.0670 0x2358  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\Windows\system32\drivers\atapi.sys
19:35:07.0670 0x2358  atapi - ok
19:35:07.0690 0x2358  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:35:07.0710 0x2358  AudioEndpointBuilder - ok
19:35:07.0720 0x2358  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
19:35:07.0740 0x2358  AudioSrv - ok
19:35:07.0750 0x2358  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
19:35:07.0770 0x2358  AxInstSV - ok
19:35:07.0780 0x2358  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
19:35:07.0793 0x2358  b06bdrv - ok
19:35:07.0803 0x2358  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
19:35:07.0813 0x2358  b57nd60a - ok
19:35:07.0813 0x2358  BCM42RLY - ok
19:35:07.0823 0x2358  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
19:35:07.0833 0x2358  BDESVC - ok
19:35:07.0833 0x2358  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
19:35:07.0860 0x2358  Beep - ok
19:35:07.0891 0x2358  [ D6BD4AE897D0DF163832AC75DF361BD0, E5F57A907EC557B2F29F49AA0A98AC90261DC44674F3066798AD622ECB24DBBE ] BEService      C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
19:35:07.0920 0x2358  BEService - ok
19:35:07.0938 0x2358  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\Windows\System32\bfe.dll
19:35:07.0953 0x2358  BFE - ok
19:35:07.0973 0x2358  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
19:35:08.0003 0x2358  BITS - ok
19:35:08.0013 0x2358  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
19:35:08.0023 0x2358  blbdrive - ok
19:35:08.0023 0x2358  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
19:35:08.0043 0x2358  bowser - ok
19:35:08.0046 0x2358  BRDriver64_1_3_3_E02B25FC - ok
19:35:08.0049 0x2358  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
19:35:08.0058 0x2358  BrFiltLo - ok
19:35:08.0061 0x2358  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
19:35:08.0071 0x2358  BrFiltUp - ok
19:35:08.0076 0x2358  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
19:35:08.0100 0x2358  BridgeMP - ok
19:35:08.0105 0x2358  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\Windows\System32\browser.dll
19:35:08.0115 0x2358  Browser - ok
19:35:08.0123 0x2358  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
19:35:08.0136 0x2358  Brserid - ok
19:35:08.0140 0x2358  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
19:35:08.0149 0x2358  BrSerWdm - ok
19:35:08.0158 0x2358  [ 448917845F097FCE9D4554C3D2001EF3, BDCBEC01579D7CF28963E4E13CDC5B26E4B69CA24FA2CC4D6E24CAE0DDBCB3FE ] BRSptStub      C:\ProgramData\BitRaider\BRSptStub.exe
19:35:08.0170 0x2358  BRSptStub - ok
19:35:08.0173 0x2358  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
19:35:08.0182 0x2358  BrUsbMdm - ok
19:35:08.0186 0x2358  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
19:35:08.0193 0x2358  BrUsbSer - ok
19:35:08.0197 0x2358  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
19:35:08.0206 0x2358  BTHMODEM - ok
19:35:08.0211 0x2358  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\Windows\system32\bthserv.dll
19:35:08.0235 0x2358  bthserv - ok
19:35:08.0238 0x2358  catchme - ok
19:35:08.0242 0x2358  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
19:35:08.0265 0x2358  cdfs - ok
19:35:08.0271 0x2358  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
19:35:08.0280 0x2358  cdrom - ok
19:35:08.0284 0x2358  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\Windows\System32\certprop.dll
19:35:08.0308 0x2358  CertPropSvc - ok
19:35:08.0341 0x2358  [ 33B82CF69E41B38A2EC0C3CABDE80D6E, E7331B38232001A4055CE1F6D74AED0F108385DDBD5211006DA8EA932D3B1575 ] cFosSpeed      C:\Windows\system32\DRIVERS\cfosspeed6.sys
19:35:08.0372 0x2358  cFosSpeed - ok
19:35:08.0377 0x2358  [ A469854CD303A39162931FA770EA45A2, 45CB65C6079B023A808EA76B96C4FE0D6A588E4A6747B337CC24FDDD35B5D356 ] cFosSpeedS      C:\Program Files\ASRock\XFast LAN\spd.exe
19:35:08.0387 0x2358  cFosSpeedS - ok
19:35:08.0397 0x2358  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
19:35:08.0407 0x2358  circlass - ok
19:35:08.0417 0x2358  [ 3963FEC1892368DD500E6ED1F5C286CE, A04689CB07AF1C1B4B1032B0ACAD88DA3EB03D89A575C59FE602A65E8C246138 ] CLFS            C:\Windows\system32\CLFS.sys
19:35:08.0427 0x2358  CLFS - ok
19:35:08.0576 0x2358  [ 9439B0EC928C0A93334F7CDD4525F24F, 2628234190BE9F1C46E3CA3F538594AC11B4E48F15735A90882A20AE450BEAC3 ] ClickToRunSvc  C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
19:35:08.0711 0x2358  ClickToRunSvc - ok
19:35:08.0721 0x2358  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:35:08.0731 0x2358  clr_optimization_v2.0.50727_32 - ok
19:35:08.0731 0x2358  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:35:08.0741 0x2358  clr_optimization_v2.0.50727_64 - ok
19:35:08.0751 0x2358  [ 2BA609641FA64BAB02ACD3C0095672F5, FD1FE403864F0564CA4A2F1D7415649B8FFE16F8ED33C4B44ACB21767118AD5F ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:35:08.0751 0x2358  clr_optimization_v4.0.30319_32 - ok
19:35:08.0761 0x2358  [ 7C7502CD2A2CFAB399D0D8DA95DB03E7, 4AE53B468CF597FCFD912A6EEE27E87EE4D9BC73F2A794FB5DF5DA46C1DD1289 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:35:08.0777 0x2358  clr_optimization_v4.0.30319_64 - ok
19:35:08.0780 0x2358  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
19:35:08.0788 0x2358  CmBatt - ok
19:35:08.0791 0x2358  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
19:35:08.0794 0x2358  cmdide - ok
19:35:08.0794 0x2358  [ F34031DC6D1745154F54B04AFF54F5D1, CDC5CCCB7F9A19C6F9459754895F60B149C2BDBADEF2620F75FAA9B870757758 ] cmnsusbser      C:\Windows\system32\DRIVERS\cmnsusbser.sys
19:35:08.0804 0x2358  cmnsusbser - detected UnsignedFile.Multi.Generic ( 1 )
19:35:08.0874 0x2358  Detect skipped due to KSN trusted
19:35:08.0874 0x2358  cmnsusbser - ok
19:35:08.0884 0x2358  [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG            C:\Windows\system32\Drivers\cng.sys
19:35:08.0908 0x2358  CNG - ok
19:35:08.0912 0x2358  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
19:35:08.0918 0x2358  Compbatt - ok
19:35:08.0921 0x2358  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
19:35:08.0927 0x2358  CompositeBus - ok
19:35:08.0927 0x2358  COMSysApp - ok
19:35:08.0927 0x2358  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
19:35:08.0937 0x2358  crcdisk - ok
19:35:08.0947 0x2358  [ 48FEDBE324F1EA9417BA1D62AE863011, 2C3D84F0842237A3BF2838DDB4126807977EB36588FA669B1E6671077584EF18 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
19:35:08.0961 0x2358  CryptSvc - ok
19:35:08.0971 0x2358  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC            C:\Windows\system32\drivers\csc.sys
19:35:08.0981 0x2358  CSC - ok
19:35:09.0001 0x2358  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
19:35:09.0021 0x2358  CscService - ok
19:35:09.0031 0x2358  [ 3F1A199859B4F3F8357B2A0AF5666A54, B0ACE9384088B7D0E54CF82BF48D4FEAA518BDEF98A294BA8F5A37DFF0E45328 ] DcomLaunch      C:\Windows\system32\rpcss.dll
19:35:09.0057 0x2358  DcomLaunch - ok
19:35:09.0065 0x2358  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\Windows\System32\defragsvc.dll
19:35:09.0080 0x2358  defragsvc - ok
19:35:09.0090 0x2358  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
19:35:09.0100 0x2358  DfsC - ok
19:35:09.0100 0x2358  [ 0F4A5D01156B948B54550375498B08A2, 1CAE3D744429A06E9C9EC46AC6B216AB68154EF8FACDD0721C47902B83820F56 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
19:35:09.0110 0x2358  dg_ssudbus - ok
19:35:09.0120 0x2358  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
19:35:09.0130 0x2358  Dhcp - ok
19:35:09.0170 0x2358  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack      C:\Windows\system32\diagtrack.dll
19:35:09.0197 0x2358  DiagTrack - ok
19:35:09.0197 0x2358  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
19:35:09.0219 0x2358  discache - ok
19:35:09.0229 0x2358  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\Windows\system32\drivers\disk.sys
19:35:09.0229 0x2358  Disk - ok
19:35:09.0239 0x2358  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc          C:\Windows\system32\drivers\dmvsc.sys
19:35:09.0239 0x2358  dmvsc - ok
19:35:09.0249 0x2358  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
19:35:09.0259 0x2358  Dnscache - ok
19:35:09.0269 0x2358  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\Windows\System32\dot3svc.dll
19:35:09.0289 0x2358  dot3svc - ok
19:35:09.0299 0x2358  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\Windows\system32\dps.dll
19:35:09.0319 0x2358  DPS - ok
19:35:09.0319 0x2358  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
19:35:09.0329 0x2358  drmkaud - ok
19:35:09.0349 0x2358  [ 5CEF80AE869336376F550ECAE91E424A, 49152AC35556A5629AE7A4A762FDB2112FAD1C9CDB91E6196172809F74A3149A ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
19:35:09.0369 0x2358  DXGKrnl - ok
19:35:09.0379 0x2358  [ 5B575E34207D63CC1D3C0B08D11D594E, 5F57470742C9D3B32915D629150B572948C7B535FF30A38D951C99D8A0925C37 ] e1dexpress      C:\Windows\system32\DRIVERS\e1d62x64.sys
19:35:09.0399 0x2358  e1dexpress - ok
19:35:09.0399 0x2358  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\Windows\System32\eapsvc.dll
19:35:09.0429 0x2358  EapHost - ok
19:35:09.0429 0x2358  EasyAntiCheat - ok
19:35:09.0489 0x2358  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
19:35:09.0539 0x2358  ebdrv - ok
19:35:09.0554 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] EFS            C:\Windows\System32\lsass.exe
19:35:09.0563 0x2358  EFS - ok
19:35:09.0579 0x2358  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
19:35:09.0600 0x2358  ehRecvr - ok
19:35:09.0603 0x2358  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\Windows\ehome\ehsched.exe
19:35:09.0613 0x2358  ehSched - ok
19:35:09.0623 0x2358  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
19:35:09.0633 0x2358  elxstor - ok
19:35:09.0633 0x2358  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
19:35:09.0643 0x2358  ErrDev - ok
19:35:09.0653 0x2358  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\Windows\system32\es.dll
19:35:09.0683 0x2358  EventSystem - ok
19:35:09.0683 0x2358  [ 0BF32186C3EC11315C33CC29EA8DD86C, 82B43762A5BC9C0AB7B5D1F96DC47B34700924B598070A7CCB30C92EB5EE1599 ] ew_usbccgpfilter C:\Windows\system32\DRIVERS\ew_usbccgpfilter.sys
19:35:09.0693 0x2358  ew_usbccgpfilter - ok
19:35:09.0703 0x2358  [ 7E45F8B117419ABA3BB26579F6E70324, 03FE86519860153E1BE571F10ACC9BA58FFB5A661C5C3EBDF3B77973BCD96C84 ] exfat          C:\Windows\system32\drivers\exfat.sys
19:35:09.0713 0x2358  exfat - ok
19:35:09.0713 0x2358  [ 6EDFA237D25433C03F42FBFDB16BDD24, A30F89A40F7AFC475D3C2D3591FB9AFC06AE3FEBC915FDCB24ED77946FBA4E2C ] fastfat        C:\Windows\system32\drivers\fastfat.sys
19:35:09.0723 0x2358  fastfat - ok
19:35:09.0743 0x2358  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\Windows\system32\fxssvc.exe
19:35:09.0763 0x2358  Fax - ok
19:35:09.0763 0x2358  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\Windows\system32\drivers\fdc.sys
19:35:09.0773 0x2358  fdc - ok
19:35:09.0773 0x2358  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\Windows\system32\fdPHost.dll
19:35:09.0799 0x2358  fdPHost - ok
19:35:09.0803 0x2358  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
19:35:09.0825 0x2358  FDResPub - ok
19:35:09.0828 0x2358  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
19:35:09.0828 0x2358  FileInfo - ok
19:35:09.0838 0x2358  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
19:35:09.0858 0x2358  Filetrace - ok
19:35:09.0858 0x2358  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
19:35:09.0868 0x2358  flpydisk - ok
19:35:09.0868 0x2358  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
19:35:09.0878 0x2358  FltMgr - ok
19:35:09.0890 0x2358  [ 508401A63E6B1CBF0B9C9A011498731F, F636B0A9C0EB6AE7EC04E5C5FD8A0578AEB76A1B0D974F355BCE6B6091901725 ] FNETTBOH_305    C:\Windows\system32\drivers\FNETTBOH_305.SYS
19:35:09.0896 0x2358  FNETTBOH_305 - ok
19:35:09.0899 0x2358  [ E341178C116DAC6A3A764587E68DFA7B, 91B4C79057908A622666FF069CF1C7ECA42952A6587432F5E99E33E8B19D29AF ] FNETURPX        C:\Windows\system32\drivers\FNETURPX.SYS
19:35:09.0905 0x2358  FNETURPX - ok
19:35:09.0932 0x2358  [ 785F474FB5E67E448E1931C98E8D0ABC, 911697D580CBF508A6F4A52D4F95A6976CF9A0EC3549076A8D0B5C8BD947C989 ] FontCache      C:\Windows\system32\FntCache.dll
19:35:09.0961 0x2358  FontCache - ok
19:35:09.0965 0x2358  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:35:09.0971 0x2358  FontCache3.0.0.0 - ok
19:35:09.0975 0x2358  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
19:35:09.0981 0x2358  FsDepends - ok
19:35:09.0984 0x2358  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
19:35:09.0991 0x2358  Fs_Rec - ok
19:35:09.0994 0x2358  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
19:35:10.0004 0x2358  fvevol - ok
19:35:10.0004 0x2358  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
19:35:10.0014 0x2358  gagp30kx - ok
19:35:10.0035 0x2358  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc          C:\Windows\System32\gpsvc.dll
19:35:10.0055 0x2358  gpsvc - ok
19:35:10.0055 0x2358  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:35:10.0069 0x2358  gupdate - ok
19:35:10.0074 0x2358  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:35:10.0081 0x2358  gupdatem - ok
19:35:10.0087 0x2358  [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc          C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
19:35:10.0095 0x2358  gusvc - ok
19:35:10.0098 0x2358  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
19:35:10.0106 0x2358  hcw85cir - ok
19:35:10.0116 0x2358  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:35:10.0131 0x2358  HdAudAddService - ok
19:35:10.0136 0x2358  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
19:35:10.0147 0x2358  HDAudBus - ok
19:35:10.0150 0x2358  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
19:35:10.0158 0x2358  HidBatt - ok
19:35:10.0163 0x2358  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
19:35:10.0174 0x2358  HidBth - ok
19:35:10.0178 0x2358  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\Windows\system32\drivers\hidir.sys
19:35:10.0187 0x2358  HidIr - ok
19:35:10.0190 0x2358  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\Windows\System32\hidserv.dll
19:35:10.0214 0x2358  hidserv - ok
19:35:10.0217 0x2358  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
19:35:10.0225 0x2358  HidUsb - ok
19:35:10.0230 0x2358  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
19:35:10.0253 0x2358  hkmsvc - ok
19:35:10.0260 0x2358  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:35:10.0271 0x2358  HomeGroupListener - ok
19:35:10.0277 0x2358  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:35:10.0288 0x2358  HomeGroupProvider - ok
19:35:10.0292 0x2358  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
19:35:10.0299 0x2358  HpSAMD - ok
19:35:10.0311 0x2358  [ CF5C9BD985120781200D35FD445D0BD5, 91B37F595A196542458CBBCDAD80779721D228A7030A34E55995DDBB06649248 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
19:35:10.0341 0x2358  HTTP - ok
19:35:10.0341 0x2358  [ E548929868BDFD3FC13B46D99605B764, 737C8A1210442533735F10BD80AFBB3E890D0CC9068F2406CA5C577C7C58B97C ] HuaweiHiSuiteService64.exe C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
19:35:10.0351 0x2358  HuaweiHiSuiteService64.exe - ok
19:35:10.0361 0x2358  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
19:35:10.0361 0x2358  hwpolicy - ok
19:35:10.0371 0x2358  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
19:35:10.0381 0x2358  i8042prt - ok
19:35:10.0391 0x2358  [ B9E489CC1EA3284FEED33799DC70612D, 0DD714A3A37C391B38F4EEEB3F85C3C3C056F4AAB4A5EFA63835AD967BC25B51 ] iaStorA        C:\Windows\system32\DRIVERS\iaStorA.sys
19:35:10.0411 0x2358  iaStorA - ok
19:35:10.0411 0x2358  [ 3AEE4C821114AC707699A28988F27ABB, 033A25A19E2A649DA059AE3BCACB8605C00D4F10D356C5E3167B84C01B9359A9 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
19:35:10.0426 0x2358  IAStorDataMgrSvc - ok
19:35:10.0429 0x2358  [ CC096E5C9BAABEB8EF12CDFAFFD888CF, 9D61736CB83DE04FC44FB25122AB6D09951C915E577E1A18188D4D5F35EACD76 ] iaStorF        C:\Windows\system32\DRIVERS\iaStorF.sys
19:35:10.0436 0x2358  iaStorF - ok
19:35:10.0446 0x2358  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
19:35:10.0459 0x2358  iaStorV - ok
19:35:10.0461 0x2358  [ E199288F016C354255C39A84378A48F6, 881B41D64D73F7A3A1680EDD68201E14AC5C60B848374EEAE44CCDDE46010E81 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
19:35:10.0471 0x2358  ICCS - ok
19:35:10.0491 0x2358  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:35:10.0501 0x2358  idsvc - ok
19:35:10.0511 0x2358  IEEtwCollectorService - ok
19:35:10.0511 0x2358  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
19:35:10.0521 0x2358  iirsp - ok
19:35:10.0521 0x2358  [ E18725531054FE222115873AC1CCB02B, 0FC4B9D5DF77E19E4732759B848B4BCBBD44A124304FA8333BB3B7BC37E15FB8 ] ikbevent        C:\Windows\system32\DRIVERS\ikbevent.sys
19:35:10.0531 0x2358  ikbevent - ok
19:35:10.0551 0x2358  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
19:35:10.0562 0x2358  IKEEXT - ok
19:35:10.0572 0x2358  [ 45060257BCA3D60204FEC29F6E6DE458, C9FB92FEEFC0DC5386B545A8E429D60B932360B9044A920F6F2EDD5CF3B7B5A0 ] imsevent        C:\Windows\system32\DRIVERS\imsevent.sys
19:35:10.0572 0x2358  imsevent - ok
19:35:10.0644 0x2358  [ 7D7711B0F972C73AE46105B42092D82E, AC66AE06B65C03BCEE2FF90732B13B651862382CDFEE85A6B5497DF3A2FF75A2 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:35:10.0698 0x2358  IntcAzAudAddService - ok
19:35:10.0718 0x2358  [ DDA8E5AD97231AB50B81FED04C28F64C, 5C9E8F7CC45A9AE7FF12A02641562E271D84894DFA7C50218AC2AAA298251B60 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
19:35:10.0738 0x2358  Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
19:35:10.0805 0x2358  Detect skipped due to KSN trusted
19:35:10.0805 0x2358  Intel(R) Capability Licensing Service Interface - ok
19:35:10.0821 0x2358  [ 86FE509640D77FB0998FC8B1FF5523C6, 13E895DEB9B84379251699D7E52C5E3FD888994425DE01B6C4634F9E959D5584 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
19:35:10.0831 0x2358  Intel(R) Capability Licensing Service TCP IP Interface - ok
19:35:10.0841 0x2358  [ EE65488B7294FBCB113EAC9FD492345C, D1D6B22CD94324387171B188D295AA716900654DA1DC9F3DC18D0CD528F2BBEA ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
19:35:10.0851 0x2358  Intel(R) ME Service - ok
19:35:10.0851 0x2358  [ 26FBC0AEDE7C6A67781202E0E2ECB6A6, BEF9E7CB2B2DD7A8091483EC53B812CA3F079CEC949DE545ABED6BE617A9ED55 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
19:35:10.0861 0x2358  Intel(R) PROSet Monitoring Service - ok
19:35:10.0872 0x2358  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
19:35:10.0878 0x2358  intelide - ok
19:35:10.0881 0x2358  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
19:35:10.0890 0x2358  intelppm - ok
19:35:10.0896 0x2358  [ A85A70A3C8E0A2A4252E598926B5270F, CDF65FA04331C120139EA0493DC6D613867F4D9EDEEC9FF5F16FCBE6EEC7B047 ] intelsba        C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
19:35:10.0902 0x2358  intelsba - ok
19:35:10.0906 0x2358  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
19:35:10.0928 0x2358  IPBusEnum - ok
19:35:10.0928 0x2358  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:35:10.0948 0x2358  IpFilterDriver - ok
19:35:10.0958 0x2358  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
19:35:10.0978 0x2358  iphlpsvc - ok
19:35:10.0988 0x2358  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
19:35:10.0988 0x2358  IPMIDRV - ok
19:35:10.0998 0x2358  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
19:35:11.0018 0x2358  IPNAT - ok
19:35:11.0018 0x2358  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
19:35:11.0028 0x2358  IRENUM - ok
19:35:11.0038 0x2358  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
19:35:11.0038 0x2358  isapnp - ok
19:35:11.0052 0x2358  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
19:35:11.0062 0x2358  iScsiPrt - ok
19:35:11.0065 0x2358  [ 4EE2423C38F43D37F8497A672FD10BDC, 031C5272DD28809255CF4FA8E6DE45DBFBD9A363BBD5156D0AEE0787C4297980 ] ISCT            C:\Windows\system32\DRIVERS\ISCTD64.sys
19:35:11.0071 0x2358  ISCT - ok
19:35:11.0071 0x2358  [ 88CCCCFA8269973C3C3C06F94DA03BAB, A88BF3397466C40C7D4BE94288A88FF1FB7103E92FBA4E17A16AB6A04F909F29 ] ISCTAgent      C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
19:35:11.0081 0x2358  ISCTAgent - ok
19:35:11.0091 0x2358  [ 622BF9C46A47CF17608C501320E8EFBD, 059F99D4306216324E100FCDAF02093B2CD662F2C6BE8565A4281E7760F8B575 ] iumsvc          C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
19:35:11.0101 0x2358  iumsvc - ok
19:35:11.0101 0x2358  [ 897B93573F07C9CB1140516DAC44BC7E, C80665FEA4913DDC72F2140EC92CD4FA5D693BD8D0E4029A99DB96D63172E3D1 ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
19:35:11.0111 0x2358  iusb3hcs - ok
19:35:11.0121 0x2358  [ 2D15CEDF619796002E8640F73A4BF920, FCC0137CB5AE32266A550EE46106B80F431F0B55342599951B9D032F8EA10649 ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
19:35:11.0131 0x2358  iusb3hub - ok
19:35:11.0151 0x2358  [ F1E93FE111924D0BC853155AADF8048B, 2DFD5B3D042286A0FD5E482C81FAE339E4F05C0A6DFF43061D8502C4551125F7 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
19:35:11.0171 0x2358  iusb3xhc - ok
19:35:11.0178 0x2358  [ BF5D3A2624177C413680DEF19A465AF8, B9909D3E6CB6F9971293116387865AD15CB9D47513C7FAA9C36BE4D2847A41EB ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
19:35:11.0186 0x2358  jhi_service - ok
19:35:11.0186 0x2358  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
19:35:11.0196 0x2358  kbdclass - ok
19:35:11.0196 0x2358  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
19:35:11.0206 0x2358  kbdhid - ok
19:35:11.0206 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] KeyIso          C:\Windows\system32\lsass.exe
19:35:11.0206 0x2358  KeyIso - ok
19:35:11.0216 0x2358  [ DFE85B031220F8E0271716BBB3C4C8FF, 531AB0851AE2F2B25D751605529C483B4734E5D26F94F56DEC0191730DD6A9A4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
19:35:11.0226 0x2358  KSecDD - ok
19:35:11.0226 0x2358  [ 70D7302DD70B979637179BFD8295C924, 7A3498C8A90AC5D7A070E9BCAF1BC0D16F478A7160A9333C58247034C5B3B59F ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
19:35:11.0236 0x2358  KSecPkg - ok
19:35:11.0236 0x2358  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
19:35:11.0256 0x2358  ksthunk - ok
19:35:11.0266 0x2358  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\Windows\system32\msdtckrm.dll
19:35:11.0296 0x2358  KtmRm - ok
19:35:11.0296 0x2358  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
19:35:11.0326 0x2358  LanmanServer - ok
19:35:11.0326 0x2358  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:35:11.0346 0x2358  LanmanWorkstation - ok
19:35:11.0356 0x2358  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
19:35:11.0376 0x2358  lltdio - ok
19:35:11.0386 0x2358  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
19:35:11.0406 0x2358  lltdsvc - ok
19:35:11.0416 0x2358  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\Windows\System32\lmhsvc.dll
19:35:11.0436 0x2358  lmhosts - ok
19:35:11.0446 0x2358  [ 02A9CBACE666877BBBA4FD66B22F6D4A, 0E783BA7A8F00CEC8F03CFEE03999CA5DB9E4DB7CCE62D9171CFCF36AFBE4BB1 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19:35:11.0456 0x2358  LMS - ok
19:35:11.0456 0x2358  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
19:35:11.0466 0x2358  LSI_FC - ok
19:35:11.0466 0x2358  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
19:35:11.0476 0x2358  LSI_SAS - ok
19:35:11.0476 0x2358  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
19:35:11.0486 0x2358  LSI_SAS2 - ok
19:35:11.0496 0x2358  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
19:35:11.0496 0x2358  LSI_SCSI - ok
19:35:11.0506 0x2358  [ 5416CEB2916BBE635288C4D1075B045E, BEFF99052206C0D774CFFF14AC3305C397726B289B17666C2AD2706C261F2FF0 ] luafv          C:\Windows\system32\drivers\luafv.sys
19:35:11.0516 0x2358  luafv - ok
19:35:11.0526 0x2358  [ A401CFF74982D8DF851F20307C806073, 1D7BA90C9E77FAAE59F60AB5310EC41D9C5B98F1F9A89A3CDB9169E6DEF565DA ] LVRS64          C:\Windows\system32\DRIVERS\lvrs64.sys
19:35:11.0536 0x2358  LVRS64 - ok
19:35:11.0612 0x2358  [ 13384CB5F5813E65F31078D6ABFAAF38, A6E7374C15CAECC273197BF62F8F926BA30E9509270A8470756F4710E1DEA126 ] LVUVC64        C:\Windows\system32\DRIVERS\lvuvc64.sys
19:35:11.0697 0x2358  LVUVC64 - ok
19:35:11.0830 0x2358  [ 96FA5B38DD94C8D49289CE75150D97C3, 31D2435E026B0425D47B479E7E58CAF7BEF5C2D23F9D164A59FF2BF27D49489F ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
19:35:11.0944 0x2358  MBAMService - ok
19:35:11.0958 0x2358  [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy  C:\Windows\System32\Drivers\mbamswissarmy.sys
19:35:11.0962 0x2358  MBAMSwissArmy - ok
19:35:11.0972 0x2358  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
19:35:11.0982 0x2358  Mcx2Svc - ok
19:35:11.0982 0x2358  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\Windows\system32\drivers\megasas.sys
19:35:11.0992 0x2358  megasas - ok
19:35:11.0992 0x2358  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
19:35:12.0002 0x2358  MegaSR - ok
19:35:12.0014 0x2358  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
19:35:12.0015 0x2358  MEIx64 - ok
19:35:12.0025 0x2358  [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
19:35:12.0036 0x2358  Microsoft Office Groove Audit Service - ok
19:35:12.0040 0x2358  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\Windows\system32\mmcss.dll
19:35:12.0057 0x2358  MMCSS - ok
19:35:12.0057 0x2358  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\Windows\system32\drivers\modem.sys
19:35:12.0077 0x2358  Modem - ok
19:35:12.0087 0x2358  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
19:35:12.0097 0x2358  monitor - ok
19:35:12.0097 0x2358  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
19:35:12.0107 0x2358  mouclass - ok
19:35:12.0107 0x2358  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
19:35:12.0117 0x2358  mouhid - ok
19:35:12.0117 0x2358  [ 072D8646E23ECF8A3F5F0157017B4DB6, EBFB1459ECC5AF94C94FB49CEBC724542612680F0777E24B5AA6E062C0EE5D94 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
19:35:12.0127 0x2358  mountmgr - ok
19:35:12.0127 0x2358  [ EB4B5C8AB9DA5585CCC975CD3D072115, BEED5B7478F92C9FB1BBB62FFCEB5321A5C12A7C1AA9B20151BF22064589CD46 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:35:12.0137 0x2358  MozillaMaintenance - ok
19:35:12.0137 0x2358  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
19:35:12.0147 0x2358  mpio - ok
19:35:12.0157 0x2358  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
19:35:12.0177 0x2358  mpsdrv - ok
19:35:12.0187 0x2358  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
19:35:12.0229 0x2358  MpsSvc - ok
19:35:12.0235 0x2358  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
19:35:12.0246 0x2358  MRxDAV - ok
19:35:12.0251 0x2358  [ 767C6DF04C5758B9F0790D400541B44F, BFC38D7BCF19F7246BCAD3E04273A403F6B973432EE0EF6E25B16BA3826A21B7 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
19:35:12.0262 0x2358  mrxsmb - ok
19:35:12.0270 0x2358  [ BD55F604FFABC911F8E5500186AE70E5, 3719EDB070E6FFE9781337A05CA0309C3CD5CD38A292DF091E05C9BA3D5A479F ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:35:12.0283 0x2358  mrxsmb10 - ok
19:35:12.0289 0x2358  [ 92EECFB046D4706A4B8D699A4069B6EC, 3B3E232DABA913A500CE55AD8600D8DD8F28E32B0276B9B6C8FD6239688833A4 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:35:12.0299 0x2358  mrxsmb20 - ok
19:35:12.0302 0x2358  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
19:35:12.0308 0x2358  msahci - ok
19:35:12.0313 0x2358  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
19:35:12.0313 0x2358  msdsm - ok
19:35:12.0323 0x2358  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\Windows\System32\msdtc.exe
19:35:12.0333 0x2358  MSDTC - ok
19:35:12.0333 0x2358  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
19:35:12.0353 0x2358  Msfs - ok
19:35:12.0363 0x2358  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
19:35:12.0383 0x2358  mshidkmdf - ok
19:35:12.0383 0x2358  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
19:35:12.0393 0x2358  msisadrv - ok
19:35:12.0396 0x2358  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
19:35:12.0416 0x2358  MSiSCSI - ok
19:35:12.0416 0x2358  msiserver - ok
19:35:12.0426 0x2358  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
19:35:12.0446 0x2358  MSKSSRV - ok
19:35:12.0446 0x2358  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
19:35:12.0466 0x2358  MSPCLOCK - ok
19:35:12.0466 0x2358  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
19:35:12.0486 0x2358  MSPQM - ok
19:35:12.0496 0x2358  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
19:35:12.0506 0x2358  MsRPC - ok
19:35:12.0506 0x2358  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
19:35:12.0516 0x2358  mssmbios - ok
19:35:12.0516 0x2358  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
19:35:12.0536 0x2358  MSTEE - ok
19:35:12.0547 0x2358  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
19:35:12.0555 0x2358  MTConfig - ok
19:35:12.0559 0x2358  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\Windows\system32\Drivers\mup.sys
19:35:12.0565 0x2358  Mup - ok
19:35:12.0575 0x2358  [ 2C28E4AB1DDF3BE7116241F507BAF548, 2E6FB5E05FACC27CC031FC5F1E349856E61494B6B5EC413FCA40B29D430EB965 ] NanoServiceMain C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
19:35:12.0584 0x2358  NanoServiceMain - ok
19:35:12.0596 0x2358  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
19:35:12.0624 0x2358  napagent - ok
19:35:12.0633 0x2358  [ 9FB2A095B1166CB3C9A06651863B3452, 808105C59C2D28C390FDE0CA48690A5CD052DE3D7F7327864EB45F80187D5BE9 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
19:35:12.0645 0x2358  NativeWifiP - ok
19:35:12.0663 0x2358  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys
19:35:12.0683 0x2358  NDIS - ok
19:35:12.0683 0x2358  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
19:35:12.0703 0x2358  NdisCap - ok
19:35:12.0713 0x2358  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
19:35:12.0733 0x2358  NdisTapi - ok
19:35:12.0733 0x2358  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
19:35:12.0758 0x2358  Ndisuio - ok
19:35:12.0763 0x2358  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
19:35:12.0786 0x2358  NdisWan - ok
19:35:12.0787 0x2358  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
19:35:12.0807 0x2358  NDProxy - ok
19:35:12.0807 0x2358  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
19:35:12.0827 0x2358  NetBIOS - ok
19:35:12.0841 0x2358  [ 734837208CAFD6E0959A7A0333C95C9D, 0B7CD6E3CE43ABE021DBE6516492E326265EC0273F2F4297187CE70602CB8CE1 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
19:35:12.0854 0x2358  NetBT - ok
19:35:12.0857 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] Netlogon        C:\Windows\system32\lsass.exe
19:35:12.0864 0x2358  Netlogon - ok
19:35:12.0874 0x2358  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
19:35:12.0902 0x2358  Netman - ok
19:35:12.0907 0x2358  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:35:12.0915 0x2358  NetMsmqActivator - ok
19:35:12.0919 0x2358  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:35:12.0927 0x2358  NetPipeActivator - ok
19:35:12.0929 0x2358  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
19:35:12.0959 0x2358  netprofm - ok
19:35:12.0969 0x2358  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:35:12.0979 0x2358  NetTcpActivator - ok
19:35:12.0979 0x2358  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:35:12.0989 0x2358  NetTcpPortSharing - ok
19:35:12.0989 0x2358  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
19:35:12.0999 0x2358  nfrd960 - ok
19:35:13.0009 0x2358  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
19:35:13.0019 0x2358  NlaSvc - ok
19:35:13.0029 0x2358  [ 75EF862A026C6749C634E0CF59BAEB50, C8C0894F12E6073AE2B2748F412E82567B63188F5EB87ECA8433580BE977B6D8 ] NNSALPC        C:\Windows\system32\DRIVERS\NNSAlpc.sys
19:35:13.0039 0x2358  NNSALPC - ok
19:35:13.0043 0x2358  [ 7E37A89FB1F3D1EF1D732E605DFB1ECA, B07335EB41BCCEF012C0ECE33D1D29C1E3D04256B839D62583EC99286F3BA547 ] NNSHTTP        C:\Windows\system32\DRIVERS\NNSHttp.sys
19:35:13.0053 0x2358  NNSHTTP - ok
19:35:13.0053 0x2358  [ 41B5BE3D04BE659D46EEB010DBA84D7C, 7BF3D962523A84AD6705E562445D0BE0554BB5566E9E4562A52A6AE451706CAD ] NNSHTTPS        C:\Windows\system32\DRIVERS\NNSHttps.sys
19:35:13.0063 0x2358  NNSHTTPS - ok
19:35:13.0073 0x2358  [ 8C85E7F4F75B58D4D5DEC18AD48DBA92, 1E2041EAB119BAF23653BF3D33BB72A87EF6FD2BDEAFAB5BEE28186EAE4AF18E ] NNSIDS          C:\Windows\system32\DRIVERS\NNSIds.sys
19:35:13.0083 0x2358  NNSIDS - ok
19:35:13.0083 0x2358  [ F253C8BA2CEFC14FF8A27FD51D64E1D3, 8508A1DF71EF7CAF9AA73AE9D29DF1B22E6CC8AEB0DC76CF9A2C1136652E70F2 ] NNSNAHSL        C:\Windows\system32\DRIVERS\NNSNAHSL.sys
19:35:13.0093 0x2358  NNSNAHSL - ok
19:35:13.0093 0x2358  [ 0BB388F37C88049F42D0830CCD28A170, 1CE5A4752321718E3317678834F5F63995EDE6B44A43F6E5BE24705B35001036 ] NNSPICC        C:\Windows\system32\DRIVERS\NNSPicc.sys
19:35:13.0103 0x2358  NNSPICC - ok
19:35:13.0113 0x2358  [ 40B6EEFA8E5EC0C2E4705CE7A9E544ED, 24B9247466B57CBABBE8DCE71552AD25FB84AA31F695AF5A4E76198945A0E623 ] NNSPIHSW        C:\Windows\system32\DRIVERS\NNSPihsw.sys
19:35:13.0123 0x2358  NNSPIHSW - ok
19:35:13.0123 0x2358  [ 4A580077C12E8E5907B10955B7E360A4, 7AEC77D66FCEA97E12C29F53828F0A5DB0F6D74D8B6E8F72293910C00929CAA7 ] NNSPOP3        C:\Windows\system32\DRIVERS\NNSPop3.sys
19:35:13.0133 0x2358  NNSPOP3 - ok
19:35:13.0143 0x2358  [ 962B5FBBD0DB13E614ED11F0745B0140, 43ADE4424830C1FADAB0F94C9AFFCF97CCB613030654AF5D139ECF29EF4A0DF5 ] NNSPROT        C:\Windows\system32\DRIVERS\NNSProt.sys
19:35:13.0153 0x2358  NNSPROT - ok
19:35:13.0163 0x2358  [ 1B00FF80507869478FD640C03EEC057B, 3A2DFAC5F66051EBC93521B59A0C56313C4E177EC47C6178DF069C328A9AA7A7 ] NNSPRV          C:\Windows\system32\DRIVERS\NNSPrv.sys
19:35:13.0173 0x2358  NNSPRV - ok
19:35:13.0173 0x2358  [ 2DCAD48763133C40EEE06E0E04E69E87, 22FF7FDF3631ABFB045F5E7866CEB5E28CEBD2467E8126AECF61A330B36381D8 ] NNSSMTP        C:\Windows\system32\DRIVERS\NNSSmtp.sys
19:35:13.0183 0x2358  NNSSMTP - ok
19:35:13.0193 0x2358  [ 46DF157022A0DE3B4E5007B536D365B0, 5B58C63A863607B1E0023448659A3F75AC46673F2D2A5E40A1170CD9A2D6C7A6 ] NNSSTRM        C:\Windows\system32\DRIVERS\NNSStrm.sys
19:35:13.0203 0x2358  NNSSTRM - ok
19:35:13.0213 0x2358  [ C33BE3E72AAC3F2B296EDAE9F1B163C0, ACDC6A7FF106448C0592CE1DABE6A26A8FE262C06C358A01613E0672838757EC ] NNSTLSC        C:\Windows\system32\DRIVERS\NNSTlsc.sys
19:35:13.0223 0x2358  NNSTLSC - ok
19:35:13.0223 0x2358  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
19:35:13.0243 0x2358  Npfs - ok
19:35:13.0243 0x2358  npggsvc - ok
19:35:13.0253 0x2358  [ 668B9EFF5CCA4542F435D2CD9CE3C778, 7409EF35D1DC0DE2BAB752694981FFA1F1855C7F11310366B80BD1EC3513262E ] nsi            C:\Windows\system32\nsisvc.dll
19:35:13.0253 0x2358  nsi - ok
19:35:13.0263 0x2358  [ BE313E566EEA2A4B7F9AAC9782A567D4, 377C624737B1A4FBC1DFF988F029B8ED9A368827C33A4FEEBA1B7937A87C2B47 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
19:35:13.0273 0x2358  nsiproxy - ok
19:35:13.0303 0x2358  [ 1065D9AFE491706EB00AD3CBB76C9E54, 7014029663FC61932EACC07682A66EE5483F11968EF58DE9766A9D77238C6812 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
19:35:13.0333 0x2358  Ntfs - ok
19:35:13.0343 0x2358  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
19:35:13.0363 0x2358  Null - ok
19:35:13.0373 0x2358  [ 2BEF214A38B59F00006DC9172F4E054A, E361ED26840F26558463301A7BF53014716AB16BDE1C3B09EFAD08073EDEA3B1 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
19:35:13.0393 0x2358  NvContainerLocalSystem - ok
19:35:13.0403 0x2358  [ 2BEF214A38B59F00006DC9172F4E054A, E361ED26840F26558463301A7BF53014716AB16BDE1C3B09EFAD08073EDEA3B1 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
19:35:13.0413 0x2358  NvContainerNetworkService - ok
19:35:13.0423 0x2358  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
19:35:13.0433 0x2358  NVHDA - ok
19:35:13.0641 0x2358  [ B2E1A2E7911DF19A2A41156F16982ECC, A87B6761CFB0B64F3D1B28CAE861C8749CB4144EC4F7638BEC8D0D199AF1453E ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:35:13.0826 0x2358  nvlddmkm - ok
19:35:13.0846 0x2358  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
19:35:13.0846 0x2358  nvraid - ok
19:35:13.0856 0x2358  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
19:35:13.0866 0x2358  nvstor - ok
19:35:13.0866 0x2358  [ E3ACDC7265D344C604C218AE14CDDB19, 76D893FE90917C16D3C1C540D62DE3896396F27035E47B690B0CBD7F5B50D4FF ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
19:35:13.0876 0x2358  NvStreamKms - ok
19:35:13.0896 0x2358  [ C897258EFDF6740F5ABFB4A6A61B4995, 0678E4BE0E66A528A9ED3CE5540F193BF67449296F6E96E4FCAA13D637FCF5BC ] nvsvc          C:\Windows\system32\nvvsvc.exe
19:35:13.0916 0x2358  nvsvc - ok
19:35:13.0926 0x2358  [ C8480E5ECBDA858EFB07F9727486CFA1, 0032F2ABF9B6297CE06641205D2A784B4F64DDB781B41C8715C9FB1497DB4AE8 ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
19:35:13.0946 0x2358  NvTelemetryContainer - ok
19:35:13.0946 0x2358  [ C9649C64C03E562CE96E3D5DE1E88A33, F4B678BD0645C1F1AD4D1EFFD46186E5054852660D27F5073ED80E59B056DB54 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
19:35:13.0956 0x2358  nvvad_WaveExtensible - ok
19:35:13.0956 0x2358  [ 4797F235AE5AF034A7AEAB484A9C25C4, 115C2FFB85407A125EE0C7932A9D911DF7C37E0FE575862E0A8776FFA6A39D3B ] nvvhci          C:\Windows\system32\DRIVERS\nvvhci.sys
19:35:13.0966 0x2358  nvvhci - ok
19:35:13.0966 0x2358  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
19:35:13.0976 0x2358  nv_agp - ok
19:35:13.0986 0x2358  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:35:13.0996 0x2358  odserv - ok
19:35:14.0006 0x2358  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
19:35:14.0006 0x2358  ohci1394 - ok
19:35:14.0077 0x2358  [ 107383EF78A7DC444F62594C927536E6, 7B1D2E3FE5D53AC168BE455881971E001845DB5BCADB4F0A49BB2DA8BCFFBACE ] OpenVPNService  E:\Program Files\OpenVPN\bin\openvpnserv.exe
19:35:14.0077 0x2358  OpenVPNService - ok
19:35:14.0158 0x2358  [ 77B30907A5E897F1EFDEE671B2C8F525, 82A0C310C26FA92D3C28F45621C2A2292818B23DAEF51AEBBEE1A2BB0B2CF47A ] Origin Client Service E:\Games\Origin\OriginClientService.exe
19:35:14.0198 0x2358  Origin Client Service - ok
19:35:14.0278 0x2358  [ 0ECD5AA6C4395CB71185066546A04A2F, 2AD84611312F2471C1DBAE33B6E8E9011EA5847338D4054A80C88F6C2FDCD0AB ] Origin Web Helper Service E:\Games\Origin\OriginWebHelperService.exe
19:35:14.0328 0x2358  Origin Web Helper Service - ok
19:35:14.0347 0x2358  [ C727D0DFF7506256397C72B20385315E, A4BFFF1D94D30AFB8906BA497577230E5213DE2C269B9CDD00D8A953A890242E ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:35:14.0357 0x2358  ose - ok
19:35:14.0442 0x2358  [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:35:14.0532 0x2358  osppsvc - ok
19:35:14.0542 0x2358  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
19:35:14.0554 0x2358  p2pimsvc - ok
19:35:14.0564 0x2358  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
19:35:14.0584 0x2358  p2psvc - ok
19:35:14.0594 0x2358  [ 4D7E86B82E737812351EFEDD0F0E609F, 3FA09A55282C22DF3B140D5426DB49B935E69E25DC43C038EC03D517925805DA ] Panda VPN Service C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe
19:35:14.0604 0x2358  Panda VPN Service - ok
19:35:14.0614 0x2358  [ 823079C4FF6CE5AB1C61A332FFA8918E, D31EC3DF7F28875FE567D489000B2CC98D34ACB85598C584316047487E90985F ] PandaAgent      C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
19:35:14.0624 0x2358  PandaAgent - ok
19:35:14.0624 0x2358  panda_url_filtering - ok
19:35:14.0624 0x2358  [ 6925454E20B184E482CD65F297D51DB5, 9386542E9B20C370FCB275C7F8005DAD45C86BBC2F7B8DB3552FA49B474C5EED ] panda_url_filteringd C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys
19:35:14.0634 0x2358  panda_url_filteringd - ok
19:35:14.0634 0x2358  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
19:35:14.0644 0x2358  Parport - ok
19:35:14.0654 0x2358  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
19:35:14.0654 0x2358  partmgr - ok
19:35:14.0664 0x2358  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\Windows\System32\pcasvc.dll
19:35:14.0674 0x2358  PcaSvc - ok
19:35:14.0674 0x2358  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\Windows\system32\drivers\pci.sys
19:35:14.0684 0x2358  pci - ok
19:35:14.0694 0x2358  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
19:35:14.0694 0x2358  pciide - ok
19:35:14.0704 0x2358  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
19:35:14.0714 0x2358  pcmcia - ok
19:35:14.0714 0x2358  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\Windows\system32\drivers\pcw.sys
19:35:14.0724 0x2358  pcw - ok
19:35:14.0734 0x2358  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
19:35:14.0754 0x2358  PEAUTH - ok
19:35:14.0784 0x2358  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
19:35:14.0804 0x2358  PeerDistSvc - ok
19:35:14.0824 0x2358  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
19:35:14.0834 0x2358  PerfHost - ok
19:35:14.0864 0x2358  [ BC5F8C5C7ACCD0B884FCB8B67616F537, 5C99E9D7E7095CED52B1F5F4A569E54F124602C573DD2B25731E0D57FDA22A27 ] pla            C:\Windows\system32\pla.dll
19:35:14.0897 0x2358  pla - ok
19:35:14.0903 0x2358  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
19:35:14.0913 0x2358  PlugPlay - ok
19:35:14.0923 0x2358  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
19:35:14.0933 0x2358  PNRPAutoReg - ok
19:35:14.0933 0x2358  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
19:35:14.0953 0x2358  PNRPsvc - ok
19:35:14.0963 0x2358  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
19:35:14.0973 0x2358  PolicyAgent - ok
19:35:14.0983 0x2358  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\Windows\system32\umpo.dll
19:35:15.0003 0x2358  Power - ok
19:35:15.0013 0x2358  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
19:35:15.0033 0x2358  PptpMiniport - ok
19:35:15.0033 0x2358  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\Windows\system32\drivers\processr.sys
19:35:15.0049 0x2358  Processor - ok
19:35:15.0055 0x2358  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\Windows\system32\profsvc.dll
19:35:15.0062 0x2358  ProfSvc - ok
19:35:15.0062 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:35:15.0072 0x2358  ProtectedStorage - ok
19:35:15.0072 0x2358  PsBoot - ok
19:35:15.0082 0x2358  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
19:35:15.0102 0x2358  Psched - ok
19:35:15.0112 0x2358  [ 5E409B8141D69B26A04501AE3686AD5F, 43E0898CC0109CBF02ACB6EDBB59FA927AD8DB38E85A17B03666B10AA71DE3E6 ] PSINAflt        C:\Windows\system32\DRIVERS\PSINAflt.sys
19:35:15.0122 0x2358  PSINAflt - ok
19:35:15.0122 0x2358  [ C87CC99B00F78A9F1648265F9C9B704D, 55618804ABFF0A48F20788A49E2F02732B55D53C589B545721978DA2E1EBBE10 ] PSINFile        C:\Windows\system32\DRIVERS\PSINFile.sys
19:35:15.0136 0x2358  PSINFile - ok
19:35:15.0142 0x2358  [ 570331E3F8D130299477BF120F53F8E3, 7122E20CE8D849A94986494C754ECFCF23DB73C547B32C3C2D55574FF3979B74 ] PSINKNC        C:\Windows\system32\DRIVERS\psinknc.sys
19:35:15.0153 0x2358  PSINKNC - ok
19:35:15.0153 0x2358  [ 8AF84FEF7898432C774B8B9C29945D65, 597C0E4E6157C639279AE8E7806DBC67514439C6B45D5AC3438FC9DB27946DA1 ] PSINProc        C:\Windows\system32\DRIVERS\PSINProc.sys
19:35:15.0163 0x2358  PSINProc - ok
19:35:15.0173 0x2358  [ 87128CD9F9D5911E3F1E0ADFCC01407E, A53A309205F20CC78C8860B6A6CD39D516304470D29F9DBE271B4E202C01D703 ] PSINProt        C:\Windows\system32\DRIVERS\PSINProt.sys
19:35:15.0183 0x2358  PSINProt - ok
19:35:15.0183 0x2358  [ 52CBA5F70CB2F426B12D76B72782B7DA, 5B4E35804E5DFCF61228BCBA695AAE218BC3C71D912C2C7F065E4B5051F4D456 ] PSINReg        C:\Windows\system32\DRIVERS\PSINReg.sys
19:35:15.0193 0x2358  PSINReg - ok
19:35:15.0193 0x2358  [ E407FE9E02D0F9B8817984A2CD23EBB2, 84FECB860F893F0DE7396CD442D58FFD3EE3F0847866E1E25845C95718A6C9FE ] PSKMAD          C:\Windows\system32\DRIVERS\PSKMAD.sys
19:35:15.0203 0x2358  PSKMAD - ok
19:35:15.0203 0x2358  [ 27C6601D0E6DB476AC8345C81A6C3752, 568D1BD34F3382D28D6A14AD92C8A720D15746891DF47BCFE06CF951F4C69004 ] PSUAService    C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
19:35:15.0213 0x2358  PSUAService - ok
19:35:15.0243 0x2358  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
19:35:15.0273 0x2358  ql2300 - ok
19:35:15.0283 0x2358  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
19:35:15.0283 0x2358  ql40xx - ok
19:35:15.0293 0x2358  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\Windows\system32\qwave.dll
19:35:15.0303 0x2358  QWAVE - ok
19:35:15.0313 0x2358  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
19:35:15.0323 0x2358  QWAVEdrv - ok
19:35:15.0323 0x2358  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
19:35:15.0343 0x2358  RasAcd - ok
19:35:15.0343 0x2358  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
19:35:15.0373 0x2358  RasAgileVpn - ok
19:35:15.0373 0x2358  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\Windows\System32\rasauto.dll
19:35:15.0393 0x2358  RasAuto - ok
19:35:15.0404 0x2358  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
19:35:15.0426 0x2358  Rasl2tp - ok
19:35:15.0435 0x2358  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
19:35:15.0456 0x2358  RasMan - ok
19:35:15.0456 0x2358  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
19:35:15.0486 0x2358  RasPppoe - ok
19:35:15.0486 0x2358  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
19:35:15.0506 0x2358  RasSstp - ok
19:35:15.0516 0x2358  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
19:35:15.0536 0x2358  rdbss - ok
19:35:15.0546 0x2358  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
19:35:15.0556 0x2358  rdpbus - ok
19:35:15.0556 0x2358  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
19:35:15.0576 0x2358  RDPCDD - ok
19:35:15.0576 0x2358  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
19:35:15.0586 0x2358  RDPDR - ok
19:35:15.0596 0x2358  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
19:35:15.0616 0x2358  RDPENCDD - ok
19:35:15.0616 0x2358  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
19:35:15.0646 0x2358  RDPREFMP - ok
19:35:15.0646 0x2358  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:35:15.0656 0x2358  RdpVideoMiniport - ok
19:35:15.0666 0x2358  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
19:35:15.0676 0x2358  RDPWD - ok
19:35:15.0676 0x2358  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
19:35:15.0686 0x2358  rdyboost - ok
19:35:15.0696 0x2358  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
19:35:15.0716 0x2358  RemoteAccess - ok
19:35:15.0716 0x2358  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
19:35:15.0746 0x2358  RemoteRegistry - ok
19:35:15.0756 0x2358  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
19:35:15.0796 0x2358  RpcEptMapper - ok
19:35:15.0796 0x2358  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
19:35:15.0806 0x2358  RpcLocator - ok
19:35:15.0816 0x2358  [ 3F1A199859B4F3F8357B2A0AF5666A54, B0ACE9384088B7D0E54CF82BF48D4FEAA518BDEF98A294BA8F5A37DFF0E45328 ] RpcSs          C:\Windows\system32\rpcss.dll
19:35:15.0836 0x2358  RpcSs - ok
19:35:15.0836 0x2358  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
19:35:15.0856 0x2358  rspndr - ok
19:35:15.0926 0x2358  [ 24061B0958874C1CB2A5A8E9D25482D4, F84F8173242B95F9F3C4FEA99B5555B33F9CE37CA8188B643871D261CB081496 ] RTCore64        E:\Program Files (x86)\MSI Afterburner\RTCore64.sys
19:35:15.0926 0x2358  RTCore64 - ok
19:35:15.0941 0x2358  [ 3A50489C017292386C1C6CF6EB283F23, 42E2C75A83A45070BB548591B83C3744F5DF6BB3743221D0442C1BA23789AD5D ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
19:35:15.0951 0x2358  RtkAudioService - ok
19:35:15.0969 0x2358  [ 7461D3DA1AABB5F703504E958455A900, B77D36E095A476A8191C1771539F20529F82CACF3C945BF55D64C39EEF09D0EA ] RTL8192cu      C:\Windows\system32\DRIVERS\RTL8192cu.sys
19:35:15.0989 0x2358  RTL8192cu - ok
19:35:15.0989 0x2358  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
19:35:15.0999 0x2358  s3cap - ok
19:35:15.0999 0x2358  [ 4F55BC63DCA859A6DEDC1106E0062135, C9AA97130DBEEE4D47BE2DAB3A8B8E7F0484DA0FCD3701C664B2F76F7671ACCF ] S3XXx64        C:\Windows\system32\DRIVERS\S3XXx64.sys
19:35:16.0009 0x2358  S3XXx64 - ok
19:35:16.0009 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] SamSs          C:\Windows\system32\lsass.exe
19:35:16.0019 0x2358  SamSs - ok
19:35:16.0029 0x2358  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
19:35:16.0029 0x2358  sbp2port - ok
19:35:16.0040 0x2358  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
19:35:16.0060 0x2358  SCardSvr - ok
19:35:16.0070 0x2358  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
19:35:16.0090 0x2358  scfilter - ok
19:35:16.0110 0x2358  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
19:35:16.0130 0x2358  Schedule - ok
19:35:16.0140 0x2358  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\Windows\System32\certprop.dll
19:35:16.0160 0x2358  SCPolicySvc - ok
19:35:16.0160 0x2358  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
19:35:16.0170 0x2358  SDRSVC - ok
19:35:16.0180 0x2358  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
19:35:16.0180 0x2358  secdrv - ok
19:35:16.0190 0x2358  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\Windows\system32\seclogon.dll
19:35:16.0190 0x2358  seclogon - ok
19:35:16.0200 0x2358  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
19:35:16.0220 0x2358  SENS - ok
19:35:16.0220 0x2358  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
19:35:16.0230 0x2358  SensrSvc - ok
19:35:16.0230 0x2358  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
19:35:16.0240 0x2358  Serenum - ok
19:35:16.0240 0x2358  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
19:35:16.0250 0x2358  Serial - ok
19:35:16.0260 0x2358  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
19:35:16.0260 0x2358  sermouse - ok
19:35:16.0270 0x2358  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
19:35:16.0290 0x2358  SessionEnv - ok
19:35:16.0290 0x2358  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
19:35:16.0300 0x2358  sffdisk - ok
19:35:16.0310 0x2358  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
19:35:16.0310 0x2358  sffp_mmc - ok
19:35:16.0320 0x2358  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
19:35:16.0330 0x2358  sffp_sd - ok
19:35:16.0330 0x2358  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
19:35:16.0330 0x2358  sfloppy - ok
19:35:16.0340 0x2358  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
19:35:16.0370 0x2358  SharedAccess - ok
19:35:16.0380 0x2358  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:35:16.0410 0x2358  ShellHWDetection - ok
19:35:16.0410 0x2358  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
19:35:16.0420 0x2358  SiSRaid2 - ok
19:35:16.0420 0x2358  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
19:35:16.0430 0x2358  SiSRaid4 - ok
19:35:16.0430 0x2358  [ 22CC2A61BC77C5972B58756049AA254E, 4DF554A1C2FF8C2D9AD8633231961DE95171A17295DAA7779E607AFD7BD8FE03 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
19:35:16.0450 0x2358  SkypeUpdate - ok
19:35:16.0460 0x2358  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
19:35:16.0482 0x2358  Smb - ok
19:35:16.0486 0x2358  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
19:35:16.0486 0x2358  SNMPTRAP - ok
19:35:16.0496 0x2358  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\Windows\system32\drivers\spldr.sys
19:35:16.0496 0x2358  spldr - ok
19:35:16.0506 0x2358  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\Windows\System32\spoolsv.exe
19:35:16.0526 0x2358  Spooler - ok
19:35:16.0592 0x2358  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
19:35:16.0662 0x2358  sppsvc - ok
19:35:16.0672 0x2358  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
19:35:16.0692 0x2358  sppuinotify - ok
19:35:16.0702 0x2358  [ 72E6A150A8C8530B201832D1C801CDE6, EFBDD5D1FB924979E63D829A6970CB5552A746BEBB7C4D41066684CA16A374E0 ] srv            C:\Windows\system32\DRIVERS\srv.sys
19:35:16.0722 0x2358  srv - ok
19:35:16.0732 0x2358  [ C4F67ABCC5033D334613F28F9E782809, A19E32E2EF790E88E7013C298AF0A34A9957A7CE55DF19FBD7BDF688D3767BA5 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
19:35:16.0742 0x2358  srv2 - ok
19:35:16.0752 0x2358  [ C53CB62B0E57488AAE41FDA0FF8A0AB9, 93614C72C578E348B66690585F8AC2B53C0C19D2C96AAD3E776D3389CA5E43B6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
19:35:16.0762 0x2358  srvnet - ok
19:35:16.0762 0x2358  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
19:35:16.0792 0x2358  SSDPSRV - ok
19:35:16.0792 0x2358  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\Windows\system32\sstpsvc.dll
19:35:16.0812 0x2358  SstpSvc - ok
19:35:16.0822 0x2358  [ D08FFE34AF5B7AC5F69EEA1E0E8C6ECE, CC43752CE5C879E24229C84443DBEE667CE629ECF992AD0D42F0F77FE04F6751 ] ssudmdm        C:\Windows\system32\DRIVERS\ssudmdm.sys
19:35:16.0832 0x2358  ssudmdm - ok
19:35:16.0952 0x2358  [ 7DB9E612A2742ACEAB080B882E83141C, FFD1FA36E732F55223F3F4B5F845331DBB3073B023C2C5BF51A0E7680DEE7FA7 ] ss_conn_service E:\Programme\kies\USB Drivers\27_ssconn\conn\ss_conn_service.exe
19:35:16.0972 0x2358  ss_conn_service - ok
19:35:17.0013 0x2358  [ F71CA689063E1A15A44268A6B42E3164, FF3B38035A3F3E547CA6B88AEB790DCAFFFBF93A6DB8AEA9B9DC17E77642B165 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
19:35:17.0039 0x2358  Steam Client Service - ok
19:35:17.0049 0x2358  [ 84E3F6607842CD40A4F3B4EC2D5152B6, 1C1240069576B728BDE22C41DEB55CCFDF9085E36178761DDD91322009359EBF ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:35:17.0061 0x2358  Stereo Service - ok
19:35:17.0071 0x2358  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
19:35:17.0071 0x2358  stexstor - ok
19:35:17.0081 0x2358  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
19:35:17.0101 0x2358  stisvc - ok
19:35:17.0111 0x2358  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
19:35:17.0111 0x2358  storflt - ok
19:35:17.0121 0x2358  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc        C:\Windows\system32\storsvc.dll
19:35:17.0121 0x2358  StorSvc - ok
19:35:17.0131 0x2358  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc        C:\Windows\system32\drivers\storvsc.sys
19:35:17.0131 0x2358  storvsc - ok
19:35:17.0141 0x2358  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
19:35:17.0141 0x2358  swenum - ok
19:35:17.0151 0x2358  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\Windows\System32\swprv.dll
19:35:17.0181 0x2358  swprv - ok
19:35:17.0211 0x2358  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain        C:\Windows\system32\sysmain.dll
19:35:17.0251 0x2358  SysMain - ok
19:35:17.0251 0x2358  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:35:17.0271 0x2358  TabletInputService - ok
19:35:17.0331 0x2358  [ 37BEA19DBD43301FD987F5D277DFBEA5, E58F4E4FD589C33134C658A06CA4FEB9CA2A000A4D31314DEEABFD86DE4215A5 ] TabletServicePen C:\Windows\system32\Pen_Tablet.exe
19:35:17.0391 0x2358  TabletServicePen - ok
19:35:17.0391 0x2358  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901        C:\Windows\system32\DRIVERS\tap0901.sys
19:35:17.0401 0x2358  tap0901 - ok
19:35:17.0411 0x2358  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\Windows\System32\tapisrv.dll
19:35:17.0431 0x2358  TapiSrv - ok
19:35:17.0471 0x2358  [ 7FB36A0A036ADDACE0A868E4A43C1C27, AFDCD57C49D06F31C02F37C81B67BA148CDC9B62AD62B771925D31339DDA9012 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
19:35:17.0511 0x2358  Tcpip - ok
19:35:17.0553 0x2358  [ 7FB36A0A036ADDACE0A868E4A43C1C27, AFDCD57C49D06F31C02F37C81B67BA148CDC9B62AD62B771925D31339DDA9012 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
19:35:17.0583 0x2358  TCPIP6 - ok
19:35:17.0593 0x2358  [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
19:35:17.0603 0x2358  tcpipreg - ok
19:35:17.0603 0x2358  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
19:35:17.0613 0x2358  TDPIPE - ok
19:35:17.0613 0x2358  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
19:35:17.0623 0x2358  TDTCP - ok
19:35:17.0623 0x2358  [ 4DD986720F7CB7A8A5D1226793097B9A, 9020375B45E9C966BF44CF425C127D7E0EC82EB99C7047F225C25402FF97743D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
19:35:17.0643 0x2358  tdx - ok
19:35:17.0643 0x2358  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
19:35:17.0653 0x2358  TermDD - ok
19:35:17.0663 0x2358  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\Windows\System32\termsrv.dll
19:35:17.0683 0x2358  TermService - ok
19:35:17.0693 0x2358  [ 8221854F134EF1A0E260CFCBE7030EFA, D89A957F3623DBEDAB49F94F560BDCE6AC77E7E4EBFAE62838FAA9C5B2A4CB58 ] TesMon          C:\Windows\system32\TesMon.sys
19:35:17.0703 0x2358  TesMon - ok
19:35:17.0723 0x2358  [ C163DA99031A953AB160575E9D259AED, 117D7EE9F0F962839141098AADC2A42CC84051CBF3E4D6ADA6897FD5674E3987 ] TesSafe        C:\Windows\system32\TesSafe.sys
19:35:17.0753 0x2358  TesSafe - ok
19:35:17.0753 0x2358  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
19:35:17.0763 0x2358  Themes - ok
19:35:17.0763 0x2358  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\Windows\system32\mmcss.dll
19:35:17.0795 0x2358  THREADORDER - ok
19:35:17.0800 0x2358  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
19:35:17.0825 0x2358  TrkWks - ok
19:35:17.0831 0x2358  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:35:17.0849 0x2358  TrustedInstaller - ok
19:35:17.0849 0x2358  [ 2CF58216424757ED29605B4F18EC443C, 9D523FC075F7F41A17F60617670A976A8F2F2943444515DC3834720BDC37DFA0 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
19:35:17.0859 0x2358  tssecsrv - ok
19:35:17.0869 0x2358  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
19:35:17.0869 0x2358  TsUsbFlt - ok
19:35:17.0879 0x2358  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
19:35:17.0879 0x2358  TsUsbGD - ok
19:35:17.0889 0x2358  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
19:35:17.0909 0x2358  tunnel - ok
19:35:17.0909 0x2358  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
19:35:17.0919 0x2358  uagp35 - ok
19:35:17.0929 0x2358  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
19:35:17.0949 0x2358  udfs - ok
19:35:17.0959 0x2358  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
19:35:17.0959 0x2358  UI0Detect - ok
19:35:17.0969 0x2358  [ 4AD47E4A6AEBB8D2D54414BCDAC0AA38, BE2E7529188C6B96FF10200C65DE1F2D31171F1E83DE134C060F15A8E6032549 ] ui11drdr        C:\Windows\system32\DRIVERS\ui11drdr.sys
19:35:17.0979 0x2358  ui11drdr - ok
19:35:17.0979 0x2358  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
19:35:17.0989 0x2358  uliagpkx - ok
19:35:17.0989 0x2358  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
19:35:17.0999 0x2358  umbus - ok
19:35:17.0999 0x2358  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
19:35:18.0009 0x2358  UmPass - ok
19:35:18.0019 0x2358  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
19:35:18.0029 0x2358  UmRdpService - ok
19:35:18.0039 0x2358  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
19:35:18.0067 0x2358  upnphost - ok
19:35:18.0069 0x2358  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
19:35:18.0079 0x2358  usbaudio - ok
19:35:18.0079 0x2358  [ 9E68E917FB4B5C983438969643F53BEF, 7148BF1E7AFAFA025A51AA9A26B90ED85328B41C7F7791CB3460D9CF53245985 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
19:35:18.0089 0x2358  usbccgp - ok
19:35:18.0089 0x2358  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
19:35:18.0099 0x2358  usbcir - ok
19:35:18.0109 0x2358  [ 3F9D3902CE931E2A28DD8452AE915B67, C8BF042DD84FB2E3AE7FCDBA65923611FCBDAFD6410E42A5E58F8995D99AE16C ] usbehci        C:\Windows\system32\drivers\usbehci.sys
19:35:18.0109 0x2358  usbehci - ok
19:35:18.0119 0x2358  [ 86B65EEBC03B936DE8B26E5A18D98FA2, 2981CF5A0FB6B6FE0A38363EA4804DB743C45E3E6E72DC3A2260F583377717C8 ] usbhub          C:\Windows\system32\drivers\usbhub.sys
19:35:18.0129 0x2358  usbhub - ok
19:35:18.0139 0x2358  [ 099C2931C6F73EB1B9E13C560F61B50D, 83B64A52173243526E380C8FA0D913C7B07C2AF1806ECC4EC0D0B5523A7CBFAA ] usbohci        C:\Windows\system32\drivers\usbohci.sys
19:35:18.0139 0x2358  usbohci - ok
19:35:18.0149 0x2358  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
19:35:18.0149 0x2358  usbprint - ok
19:35:18.0159 0x2358  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:35:18.0169 0x2358  USBSTOR - ok
19:35:18.0169 0x2358  [ 5D7651347C7D702F4A5DE53603DC024F, F55532D13AB2FF6D4B6058113AF2710AC5C87059C9000942CF517198BABCD6F5 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
19:35:18.0179 0x2358  usbuhci - ok
19:35:18.0179 0x2358  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
19:35:18.0189 0x2358  usbvideo - ok
19:35:18.0189 0x2358  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\Windows\System32\uxsms.dll
19:35:18.0219 0x2358  UxSms - ok
19:35:18.0219 0x2358  [ 62056ADD38513A86C4866E912371B56B, 9465E65EB4303BF87483B9621D402E848A50E6D22B05846A621A2761B9516A57 ] VaultSvc        C:\Windows\system32\lsass.exe
19:35:18.0229 0x2358  VaultSvc - ok
19:35:18.0229 0x2358  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
19:35:18.0229 0x2358  vdrvroot - ok
19:35:18.0249 0x2358  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\Windows\System32\vds.exe
19:35:18.0269 0x2358  vds - ok
19:35:18.0279 0x2358  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
19:35:18.0289 0x2358  vga - ok
19:35:18.0289 0x2358  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\Windows\System32\drivers\vga.sys
19:35:18.0309 0x2358  VgaSave - ok
19:35:18.0319 0x2358  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
19:35:18.0319 0x2358  vhdmp - ok
19:35:18.0329 0x2358  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
19:35:18.0329 0x2358  viaide - ok
19:35:18.0339 0x2358  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
19:35:18.0349 0x2358  vmbus - ok
19:35:18.0349 0x2358  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
19:35:18.0359 0x2358  VMBusHID - ok
19:35:18.0359 0x2358  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
19:35:18.0369 0x2358  volmgr - ok
19:35:18.0379 0x2358  [ 85C5468BC395819AE2A0C747334BA14C, 75EB4751F90F3347229442A5622539383CE0B1834EE7B995260D0D433BA2E25F ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
19:35:18.0389 0x2358  volmgrx - ok
19:35:18.0389 0x2358  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\Windows\system32\drivers\volsnap.sys
19:35:18.0399 0x2358  volsnap - ok
19:35:18.0409 0x2358  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
19:35:18.0419 0x2358  vsmraid - ok
19:35:18.0449 0x2358  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\Windows\system32\vssvc.exe
19:35:18.0489 0x2358  VSS - ok
19:35:18.0499 0x2358  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
19:35:18.0509 0x2358  vwifibus - ok
19:35:18.0509 0x2358  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
19:35:18.0519 0x2358  vwififlt - ok
19:35:18.0532 0x2358  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\Windows\system32\w32time.dll
19:35:18.0552 0x2358  W32Time - ok
19:35:18.0562 0x2358  [ F39FC224758290A3193C68C091E6F11A, 6F5EEF38D269F41DE95389F0EB5D2642D4D6E3FDCAC95301F5D7DB87A35A7A96 ] wacmoumonitor  C:\Windows\system32\DRIVERS\wacmoumonitor.sys
19:35:18.0562 0x2358  wacmoumonitor - ok
19:35:18.0562 0x2358  [ E04D43C7D1641E95D35CAE6086C7E350, BF08ED680EC835D70C522B91560B8987F206793E8E2987117C1D7B77DEFF8556 ] wacommousefilter C:\Windows\system32\DRIVERS\wacommousefilter.sys
19:35:18.0572 0x2358  wacommousefilter - ok
19:35:18.0572 0x2358  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
19:35:18.0586 0x2358  WacomPen - ok
19:35:18.0589 0x2358  [ 53B03E71E88109A5C3C074A33889258A, 67728D644C21F430D471A9F1FD2D09B43F56198B3A84C9A707D462E47743D8ED ] wacomvhid      C:\Windows\system32\DRIVERS\wacomvhid.sys
19:35:18.0593 0x2358  wacomvhid - ok
19:35:18.0596 0x2358  [ 8B4255329EDFBA3ECFBD0714476FAD38, DF1EEBB2672A0A0762B16CDB85896752F508A0CB86E8B644F34F5098C73B9814 ] WacomVKHid      C:\Windows\system32\DRIVERS\WacomVKHid.sys
19:35:18.0601 0x2358  WacomVKHid - ok
19:35:18.0603 0x2358  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
19:35:18.0623 0x2358  WANARP - ok
19:35:18.0623 0x2358  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
19:35:18.0643 0x2358  Wanarpv6 - ok
19:35:18.0673 0x2358  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
19:35:18.0703 0x2358  wbengine - ok
19:35:18.0713 0x2358  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
19:35:18.0723 0x2358  WbioSrvc - ok
19:35:18.0733 0x2358  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
19:35:18.0753 0x2358  wcncsvc - ok
19:35:18.0753 0x2358  [ BC00873272B3771CCDA38336AF2B4D4B, 3E412DEC5F172B4C5FD5C227CD790EE56B90A00A8B538704E8F973D230BE2289 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:35:18.0763 0x2358  WcsPlugInService - ok
19:35:18.0763 0x2358  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
19:35:18.0773 0x2358  Wd - ok
19:35:18.0783 0x2358  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
19:35:18.0803 0x2358  Wdf01000 - ok
19:35:18.0813 0x2358  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
19:35:18.0823 0x2358  WdiServiceHost - ok
19:35:18.0823 0x2358  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\Windows\system32\wdi.dll
19:35:18.0833 0x2358  WdiSystemHost - ok
19:35:18.0833 0x2358  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient      C:\Windows\System32\webclnt.dll
19:35:18.0853 0x2358  WebClient - ok
19:35:18.0853 0x2358  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
19:35:18.0883 0x2358  Wecsvc - ok
19:35:18.0883 0x2358  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
19:35:18.0903 0x2358  wercplsupport - ok
19:35:18.0913 0x2358  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
19:35:18.0933 0x2358  WerSvc - ok
19:35:18.0933 0x2358  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
19:35:18.0953 0x2358  WfpLwf - ok
19:35:18.0963 0x2358  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
19:35:18.0963 0x2358  WIMMount - ok
19:35:18.0963 0x2358  WinDefend - ok
19:35:18.0973 0x2358  WinHttpAutoProxySvc - ok
19:35:18.0983 0x2358  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
19:35:19.0003 0x2358  Winmgmt - ok
19:35:19.0045 0x2358  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM          C:\Windows\system32\WsmSvc.dll
19:35:19.0077 0x2358  WinRM - ok
19:35:19.0087 0x2358  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
19:35:19.0097 0x2358  WinUsb - ok
19:35:19.0121 0x2358  [ 4B7912EB80820EAC543EE54806EFCAF0, 4D9186F9FE80F03C85C4DC73342EE5870DF1021BD29974BE33557CEA0D524667 ] Wlansvc        C:\Windows\System32\wlansvc.dll
19:35:19.0136 0x2358  Wlansvc - ok
19:35:19.0176 0x2358  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:35:19.0216 0x2358  wlidsvc - ok
19:35:19.0226 0x2358  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
19:35:19.0237 0x2358  WmiAcpi - ok
19:35:19.0244 0x2358  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
19:35:19.0254 0x2358  wmiApSrv - ok
19:35:19.0256 0x2358  WMPNetworkSvc - ok
19:35:19.0259 0x2358  [ CD04DC21E9A4CF93945BA3C469C1AB5F, 30F9529C52F4FC6A1AEA48F4D6ED90CC5A6BA854E8327CB296510684806542AC ] WNDA6200        C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
19:35:19.0265 0x2358  WNDA6200 - ok
19:35:19.0268 0x2358  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
19:35:19.0269 0x2358  WPCSvc - ok
19:35:19.0279 0x2358  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
19:35:19.0289 0x2358  WPDBusEnum - ok
19:35:19.0289 0x2358  [ 7CA09731EB7FC99B910C7F239E57720F, 502F8917A0811F37C39B2B3F5E9B4F38A0E899C30CB29D3ECD87A50FF228E536 ] WPRO_41_2001    C:\Windows\system32\drivers\WPRO_41_2001.sys
19:35:19.0289 0x2358  WPRO_41_2001 - ok
19:35:19.0299 0x2358  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
19:35:19.0319 0x2358  ws2ifsl - ok
19:35:19.0319 0x2358  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
19:35:19.0329 0x2358  wscsvc - ok
19:35:19.0329 0x2358  WSearch - ok
19:35:19.0339 0x2358  [ B91CC2B946124529044BBCD915DD0FE3, 0D5437CE441D516439FAF0CD298950EA8BE07A6925E14B5E706AD5BBBF0621F8 ] WTGService      C:\Program Files (x86)\XSManager\WTGService.exe
19:35:19.0349 0x2358  WTGService - ok
19:35:19.0409 0x2358  [ 88009DB9E1166B6B6713A858C176FECD, CBF4C63D3C5D14AF3C3F0D9C48E5AC9E7A4323BFB0363E9948FD801963BE1467 ] wuauserv        C:\Windows\system32\wuaueng.dll
19:35:19.0459 0x2358  wuauserv - ok
19:35:19.0459 0x2358  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
19:35:19.0469 0x2358  WudfPf - ok
19:35:19.0479 0x2358  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
19:35:19.0489 0x2358  WUDFRd - ok
19:35:19.0489 0x2358  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
19:35:19.0499 0x2358  wudfsvc - ok
19:35:19.0509 0x2358  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\Windows\System32\wwansvc.dll
19:35:19.0519 0x2358  WwanSvc - ok
19:35:19.0519 0x2358  xhunter1 - ok
19:35:19.0539 0x2358  [ 4A5CE13408945E525503B5F73D29B9C5, D58BB31AF17752508EA67931BF170CE46877DC204FC5DA7EED5A078AEB0CA0FD ] xnacc          C:\Windows\system32\DRIVERS\xnacc.sys
19:35:19.0552 0x2358  xnacc - ok
19:35:19.0562 0x2358  [ C2F3D4B5BA078EB6CB08300990304F39, 45DC087206F0D8AE5F21F9EBB323E5747DE92FE7DCD550AC65FD2F4D7B1C46A3 ] XS Stick Service C:\Windows\service4g.exe
19:35:19.0562 0x2358  XS Stick Service - ok
19:35:19.0572 0x2358  [ 377F3E3467A8BFA3CDC921AD6425D513, 699271DA1D63E90FE1F9FE8AF3A8789CA588A0B7A2AFF5899EBA443361E041A5 ] XSplit_Dummy    C:\Windows\system32\drivers\xspltspk.sys
19:35:19.0572 0x2358  XSplit_Dummy - ok
19:35:19.0582 0x2358  ================ Scan global

monchou 04.05.2018 18:38
(TEIL 2, DA ZU LANG)


Code:
===============================
19:35:19.0643 0x2358  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
19:35:19.0650 0x2358  [ 66A8A9412337B08E1735204B8ADEE58C, 766429FBB014A9CA6AEFD39579C3F33625335A3DFD88AB324E4534978695B887 ] C:\Windows\system32\winsrv.dll
19:35:19.0660 0x2358  [ 66A8A9412337B08E1735204B8ADEE58C, 766429FBB014A9CA6AEFD39579C3F33625335A3DFD88AB324E4534978695B887 ] C:\Windows\system32\winsrv.dll
19:35:19.0666 0x2358  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
19:35:19.0669 0x2358  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
19:35:19.0679 0x2358  [ Global ] - ok
19:35:19.0679 0x2358  ================ Scan MBR ==================================
19:35:19.0679 0x2358  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:35:19.0899 0x2358  \Device\Harddisk0\DR0 - ok
19:35:19.0899 0x2358  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
19:35:19.0969 0x2358  \Device\Harddisk1\DR1 - ok
19:35:19.0969 0x2358  ================ Scan VBR ==================================
19:35:19.0969 0x2358  [ 639E7ED30A711D020904451D61BEA8F0 ] \Device\Harddisk0\DR0\Partition1
19:35:19.0969 0x2358  \Device\Harddisk0\DR0\Partition1 - ok
19:35:19.0969 0x2358  [ 587E11BEF865F5A8B00719E2FABA5F4C ] \Device\Harddisk1\DR1\Partition1
19:35:19.0969 0x2358  \Device\Harddisk1\DR1\Partition1 - ok
19:35:19.0969 0x2358  [ B0F2C1E711B85EB55BC57000BACA68E6 ] \Device\Harddisk1\DR1\Partition2
19:35:19.0969 0x2358  \Device\Harddisk1\DR1\Partition2 - ok
19:35:19.0969 0x2358  ================ Scan generic autorun ======================
19:35:19.0969 0x2358  [ 4503FA7E89950178CAD1B635B501640D, E607913AE096DB1E07B9FE1003DF9F9E294FC512F6CD3DEE8D0FB9851491BA37 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
19:35:19.0979 0x2358  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
19:35:20.0055 0x2358  Detect skipped due to KSN trusted
19:35:20.0055 0x2358  IAStorIcon - ok
19:35:20.0057 0x2358  [ 3731A3AB53B6321E455CC6D1FB3DB8DD, 0FFA668F41EDBA5CDCC66C898B7EB8FC9D12E86D58040E0C0BD8B8CFAAE51F71 ] C:\Program Files (x86)\NETGEAR\A6200\A6200.exe
19:35:20.0067 0x2358  GENIE - ok
19:35:20.0077 0x2358  [ 15972BF70736F6AC32B0BA9470945E51, B6AEC29533F7B52A826BC41C806EEBE318B2CB067E961C67B1A2BFBA99D7D376 ] C:\Program Files (x86)\NETGEAR\A6200\LanuchApp.exe
19:35:20.0077 0x2358  LanuchApp - ok
19:35:20.0283 0x2358  [ 6DDA13FB28B620FEE52E0E616F4E7B70, 8C75E17E2C0C81BA3D1660ACB73591C181C3BD15237DF3A2E9734A7FF365C16A ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
19:35:20.0493 0x2358  RtHDVCpl - ok
19:35:20.0523 0x2358  [ 48515EEA1608ECD83FE26C7490460F59, C7C552D13ED12B4165FDE45F69E170D4F18B746D84B3B08E7254AAF8D9671D0C ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
19:35:20.0533 0x2358  AdobeAAMUpdater-1.0 - ok
19:35:20.0533 0x2358  [ C36BB659F08F046B139C8D1B980BF1AC, 405F03534BE8B45185695F68DEB47D4DAF04DCD6DF9D351CA6831D3721B1EFC4 ] C:\Windows\system32\rundll32.exe
19:35:20.0552 0x2358  ShadowPlay - ok
19:35:20.0562 0x2358  [ FC53CA749AD9BA4D51192B4694421D55, 1613253EF063451D998358B965CFEE03A1D8CC0460221C9A12F69638978FD27F ] C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe
19:35:20.0572 0x2358  AdobeGCInvoker-1.0 - ok
19:35:20.0582 0x2358  [ 70BDEE03032BF7CE279838866B25E697, 007C3AC1B4380BC56EC6E14EFC022C03F165D08447AD763854351C530E19D976 ] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
19:35:20.0582 0x2358  IMSS - ok
19:35:20.0592 0x2358  [ 0436F64FD296BE331B3BB0CE446548BF, 53A8F8E58F451A7B030AE61E30DBB9BDFD5342046674177941A838B66D80FD70 ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
19:35:20.0602 0x2358  USB3MON - ok
19:35:20.0602 0x2358  [ 85B91052ADF40F50FAD6994A85C607F7, 114D6FBB162D6D8CFCD20C303836BE8E6DE31FBBBAFE9B5EBD134DBF7082E2B4 ] C:\Windows\starter4g.exe
19:35:20.0612 0x2358  starter4g - ok
19:35:20.0682 0x2358  [ 308AD1E5746DBF1704EE3E87BD481A92, 40549EEE0D86A676D657114C50B2DC664E54591061BD16098C846C0D9F254501 ] C:\Program Files (x86)\Lioncast LM30 Gaming Mouse\LCmon.exe
19:35:20.0736 0x2358  LCgmmouseRun - detected UnsignedFile.Multi.Generic ( 1 )
19:35:20.0856 0x2358  LCgmmouseRun ( UnsignedFile.Multi.Generic ) - warning
19:35:21.0036 0x2358  [ 64E784B822BAD0DFCADECD90BF72735D, 6F8E84210757FF4B67FFFC6848424AF80D7C5EC8A97C84B97070C1F456BA8E9A ] C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
19:35:21.0087 0x2358  Adobe Creative Cloud - ok
19:35:21.0097 0x2358  [ 0E34B7BB1FCF22BCC1E394D16F9E992B, 382CA8E6BAC301E2F277F8EDA03D263FF71272796A8EED582C36294EEE9191F9 ] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
19:35:21.0107 0x2358  GrooveMonitor - ok
19:35:21.0198 0x2358  [ 612354D351683C76C5728A5A9A858090, CB14F6190186F06D772636EF041533578AE77DD2D846EE5E635EF63FF25CF77E ] E:\Adobe Documents\Acrobat DC\Acrobat\Acrotray.exe
19:35:21.0235 0x2358  Acrobat Assistant 8.0 - ok
19:35:21.0239 0x2358  [ 42B6A94DD747DF2B5F628A2752E62A98, 4A49EAE1322E65FFA6C71F0BEA52CAEC97D1F30DE71FB068CD9FD8318C8287AB ] C:\Windows\system32\ctfmon.exe
19:35:21.0246 0x2358  ctfmon - ok
19:35:21.0353 0x2358  [ DDB61723341089CFAEDE1C6AE0961DE4, FA03D774A1CD59F9EFE9D21D1A8A8071D387E243D7E90810E08DEE12943B4AF9 ] C:\Users\Neslihan\AppData\Local\Akamai\netsession_win.exe
19:35:21.0423 0x2358  Akamai NetSession Interface - ok
19:35:21.0483 0x2358  [ A12401E177E869FB3C24902E489C9A63, EC877F3100414CB66D99BED6C7A63A08EC8BCB4E7D6A3930D5FD099A8A007049 ] E:\Adobe Documents\Acrobat DC\Acrobat\AdobeCollabSync.exe
19:35:21.0503 0x2358  Adobe Acrobat Synchronizer - ok
19:35:21.0503 0x2358  Skype - ok
19:35:21.0503 0x2358  Steam - ok
19:35:21.0572 0x2358  [ 829D22D81F210C213DE2ACF7953E69E0, EAA6C98734FDB4C12BF535A72E00FD4D8CBBF40B8489025CE0461ACF6BEC321D ] E:\Games\Origin\Origin.exe
19:35:21.0622 0x2358  EADM - ok
19:35:21.0632 0x2358  Waiting for KSN requests completion. In queue: 176
19:35:22.0632 0x2358  AV detected via SS2: Panda Dome, C:\Program Files (x86)\Panda Security\Panda Security Protection\PAV3WSC.exe ( 6.0.0.0 ), 0x70000 ( disabled : updated )
19:35:22.0642 0x2358  Win FW state via NFP2: enabled ( trusted )
19:35:22.0732 0x2358  ============================================================
19:35:22.0732 0x2358  Scan finished
19:35:22.0732 0x2358  ============================================================
19:35:22.0738 0x12c8  Detected object count: 1
19:35:22.0738 0x12c8  Actual detected object count: 1
19:36:09.0358 0x12c8  LCgmmouseRun ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:09.0358 0x12c8  LCgmmouseRun ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 04.05.2018 20:03
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.1

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Einstellungen, scrolle nach unten und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • Tracing Schlüssel löschen
    • Prefetch-Dateien löschen
    • Proxy wiederherstellen
    • IE-Policies wiederherstellen
    • Chrome-Policies wiederherstellen
    • Winsock wiederherstellen
  • Klicke nun auf Dashboard, dann auf Jetzt scannen und warte bis der Suchlauf abgeschlossen ist.
  • Klicke nun auf Bereinigen & Reparieren und bestätige mit Jetzt bereinigen.
  • WICHTIG:
    Sollte AdwCleaner nichts finden, klicke auf Grundlegende Reparatur ausführen und anschließend auf Jetzt bereinigen.
  • Nach dem Neustart öffnet sich AdwCleaner automatisch. Klicke auf Log-Datei ansehen.
  • Poste mir deren Inhalt der Log-Datei mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt. (xx = fortlaufende Nummer).

cosinus 04.05.2018 20:03
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.1

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Einstellungen, scrolle nach unten und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • Tracing Schlüssel löschen
    • Prefetch-Dateien löschen
    • Proxy wiederherstellen
    • IE-Policies wiederherstellen
    • Chrome-Policies wiederherstellen
    • Winsock wiederherstellen
  • Klicke nun auf Dashboard, dann auf Jetzt scannen und warte bis der Suchlauf abgeschlossen ist.
  • Klicke nun auf Bereinigen & Reparieren und bestätige mit Jetzt bereinigen.
  • WICHTIG:
    Sollte AdwCleaner nichts finden, klicke auf Grundlegende Reparatur ausführen und anschließend auf Jetzt bereinigen.
  • Nach dem Neustart öffnet sich AdwCleaner automatisch. Klicke auf Log-Datei ansehen.
  • Poste mir deren Inhalt der Log-Datei mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt. (xx = fortlaufende Nummer).

monchou 05.05.2018 13:55
Danke dir!

1

Code:
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-05-02.2
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    05-05-2018
# Duration: 00:00:01
# OS:      Windows 7 Professional
# Cleaned:  20
# Failed:  1


***** [ Services ] *****

Deleted      panda_url_filtering

***** [ Folders ] *****

Deleted      C:\Users\Neslihan\AppData\Local\VirtualStore\ProgramData\Tencent
Deleted      C:\Program Files (x86)\pandasecuritytb
Deleted      C:\Users\Neslihan\AppData\LocalLow\pandasecuritytb
Deleted      C:\Program Files\Panda Security URL Filtering

***** [ Files ] *****

Deleted      C:\END
Deleted      C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\pandasecuritytb\setupCfg.xml
Deleted      C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\pandasecuritytb\guid.dat

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted      HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLs|url2
Deleted      HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLs|url1
Deleted      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
Deleted      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
Deleted      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
Deleted      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{99736933-284D-486E-BDA3-4302E7D76DD4}
Deleted      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D7FA6D64-5B89-4438-A97D-78B26771DC40}
Deleted      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8BF90224-0C1B-4723-985E-419490FF547C}
Deleted      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{64210B77-697B-45D0-AD7C-C634BB9903AC}

***** [ Chromium (and derivatives) ] *****

Deleted      Panda Safe Web

***** [ Chromium URLs ] *****

Deleted      Mailsystem Ruhr-Uni-Bochum
Deleted      Mailsystem Ruhr-Uni-Bochum

***** [ Firefox (and derivatives) ] *****

Not Deleted  Panda Security Toolbar

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset Winsock

*************************


########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
2

Code:
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-05-02.2
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    05-05-2018
# Duration: 00:00:11
# OS:      Windows 7 Professional
# Scanned:  40818
# Detected: 21


***** [ Services ] *****

PUP.Optional.Panda              panda_url_filtering

***** [ Folders ] *****

PUP.Optional.Legacy            C:\Users\Neslihan\AppData\Local\VirtualStore\ProgramData\Tencent
PUP.Optional.Legacy            C:\Program Files (x86)\pandasecuritytb
PUP.Optional.Legacy            C:\Users\Neslihan\AppData\LocalLow\pandasecuritytb
PUP.Optional.Panda              C:\Program Files\Panda Security URL Filtering

***** [ Files ] *****

PUP.Optional.Legacy            C:\END
PUP.Optional.Panda              C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\pandasecuritytb\setupCfg.xml
PUP.Optional.Panda              C:\Users\Neslihan\AppData\Roaming\Mozilla\Firefox\Profiles\6ghfa3rf.default-1436973638517\pandasecuritytb\guid.dat

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.MyWebSearch.Heuristic      HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLs|url2
PUP.MyWebSearch.Heuristic      HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLs|url1
PUP.Optional.Legacy            HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
PUP.Optional.Legacy            HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
PUP.Optional.Legacy            HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
PUP.Optional.Legacy            HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{99736933-284D-486E-BDA3-4302E7D76DD4}
PUP.Optional.Legacy            HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D7FA6D64-5B89-4438-A97D-78B26771DC40}
PUP.Optional.Legacy            HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8BF90224-0C1B-4723-985E-419490FF547C}
PUP.Optional.Legacy            HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{64210B77-697B-45D0-AD7C-C634BB9903AC}

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Panda              Panda Safe Web

***** [ Chromium URLs ] *****

PUP.Optional.Legacy            Mailsystem Ruhr-Uni-Bochum
PUP.Optional.Legacy            Mailsystem Ruhr-Uni-Bochum

***** [ Firefox (and derivatives) ] *****

PUP.Optional.Legacy            Panda Security Toolbar

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

cosinus 05.05.2018 13:59
adwcleaner bitte zwecks Kontrolle wiederholen

monchou 05.05.2018 14:44
Beim Scannen hieß es, dass zwei 2 bedrohliche Dinge gefunden wurden


Code:
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-05-02.2
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    05-05-2018
# Duration: 00:00:11
# OS:      Windows 7 Professional
# Scanned:  40818
# Detected: 2


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Panda              Panda Safe Web

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

PUP.Optional.Legacy            Panda Security Toolbar

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########

Code:
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-05-02.2
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    05-05-2018
# Duration: 00:00:00
# OS:      Windows 7 Professional
# Cleaned:  1
# Failed:  1


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Deleted      Panda Safe Web

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

Not Deleted  Panda Security Toolbar

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset Winsock

*************************


########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

Hättest du eventuell eine Empfehlung, was ich derzeit zum Schutz installieren kann? Natürlich sollte ich auch auf meine besuchten Websites achten - aber kann mir momentan keine kostenpflichtige Software leisten; Kunstuni mit Adobe usw. ist alles schon sehr viel. :l sorry für die knausrige Frage. Panda Antivir scheint auch irgendwie eher seltsam zu sein.

cosinus 05.05.2018 15:37
Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:52 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131