Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   High-End PC wird immer langsamer? (https://www.trojaner-board.de/127680-high-end-pc-immer-langsamer.html)

Ummgh23 30.11.2012 10:56
High-End PC wird immer langsamer?
 
Moin Leute.

Ich habe das Problem dass mein pc mit der zeit immer langsamer wird.. Kleine vorgeschichte: Ich hatte schonmal probleme bei spielen. Battlefield 3 auf Ultra, lief normalerweise mit >90 FPS auf grossen maps. Danach nur noch knapp 30 fps. Hab meinen techniker angerufen, der hat die graka ausgetauscht und es ging wieder. Jetz fängt der pc schon wieder an langsamer zu werden, aber nicht nur in spielen auch generell. Öffnen von Programmen, usw.

Hier noch die specs:

Nvidia GeForce GTX 690
16GB Ram
i7-3820, 3.6GHz
Win 7 64-bit

Bitte euch um hilfe beim weiteren vorgehen, da ich denke ich habe mir einen Virus eingefangen.

Danke
Ummgh23

cosinus 30.11.2012 21:59
Hallo und :hallo:

Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Mach bitte für den Anfang erstmal einen CustomScan mit OTL . Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.

Code:
msconfig
netsvcs
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMROOT%\system32\drivers\*.sys /lockedfiles
%SYSTEMROOT%\System32\config\*.sav
%SYSTEMROOT%\*. /mp /s
%SYSTEMROOT%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

Ummgh23 01.12.2012 00:45
Hier der OTL Log:

Code:
OTL logfile created on: 01.12.2012 00:36:53 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Kevin\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.M.yyyy
 
15,95 Gb Total Physical Memory | 12,91 Gb Available Physical Memory | 80,95% Memory free
31,91 Gb Paging File | 28,91 Gb Available in Paging File | 90,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1852,82 Gb Total Space | 1482,76 Gb Free Space | 80,03% Space Free | Partition Type: NTFS
Drive Y: | 9,73 Gb Total Space | 3,10 Gb Free Space | 31,86% Space Free | Partition Type: NTFS
 
Computer Name: KEVIN-PC | User Name: Kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.12.01 00:35:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kevin\Downloads\OTL.exe
PRC - [2012.11.26 21:36:09 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.10.02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.09.22 18:28:40 | 005,686,272 | ---- | M] () -- C:\Program Files (x86)\Freetec\SystemStore\Freemium.SelfUpdate.exe
PRC - [2012.09.10 16:58:16 | 000,059,280 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
PRC - [2012.08.31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012.08.29 14:00:12 | 000,059,280 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2012.08.27 21:32:54 | 000,059,280 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
PRC - [2012.07.03 08:04:58 | 000,507,312 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2012.05.01 14:47:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012.02.16 18:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\AlienRespawn\sftservice.EXE
PRC - [2012.01.27 16:30:20 | 000,320,832 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
PRC - [2012.01.26 21:51:44 | 004,005,184 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\AlienRespawn\TOASTER.EXE
PRC - [2012.01.26 21:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
PRC - [2012.01.10 10:25:44 | 000,014,152 | ---- | M] (Alienware) -- C:\Programme\Alienware\Command Center\AWCCApplicationWatcher32.exe
PRC - [2012.01.10 10:18:02 | 000,069,448 | ---- | M] (Alienware) -- C:\Programme\Alienware\Command Center\AlienwareAlienFXController.exe
PRC - [2012.01.10 10:13:02 | 000,016,200 | ---- | M] (Alienware) -- C:\Programme\Alienware\Command Center\AlienFusionController.exe
PRC - [2011.10.12 22:53:02 | 000,007,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
PRC - [2011.10.12 22:52:54 | 000,286,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
PRC - [2011.03.08 09:17:42 | 000,883,616 | ---- | M] (Razer USA Ltd) -- C:\Program Files (x86)\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe
PRC - [2011.02.08 20:03:14 | 001,503,824 | ---- | M] (Motorola Solutions, Inc.) -- C:\Programme\Motorola\Bluetooth\btplayerctrl.exe
PRC - [2010.09.02 15:25:02 | 000,193,888 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.11.17 01:57:25 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\0ae329e973212d2927b0c5d41313aae0\System.Management.ni.dll
MOD - [2012.11.17 00:55:58 | 000,134,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\ee695c95cdc7b75571c1d37525e20fda\System.Data.DataSetExtensions.ni.dll
MOD - [2012.11.17 00:55:40 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\9ef13b66141c6071d45ab738875cb2b4\System.Runtime.Remoting.ni.dll
MOD - [2012.11.17 00:55:21 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\23de8d00755205c37aa6795b0ce8a42d\System.Xaml.ni.dll
MOD - [2012.11.17 00:20:53 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\0cb48ee4524d818a38028e44d6ba2968\System.WorkflowServices.ni.dll
MOD - [2012.11.17 00:20:41 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\30f9318fcf980a0ac504421c663d24e5\System.ServiceModel.Web.ni.dll
MOD - [2012.11.17 00:20:38 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\526e535175775d4c3880f59d6a1463b7\System.Xml.Linq.ni.dll
MOD - [2012.11.17 00:20:03 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\239d84cfdb9de9730c1efb43840ef2eb\System.Core.ni.dll
MOD - [2012.11.17 00:19:41 | 001,083,392 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\40267c1bec60c4b94be794a65a4a8a49\System.IdentityModel.ni.dll
MOD - [2012.11.17 00:19:40 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fecb0ca59057e9d190318551d40feb22\System.Runtime.Serialization.ni.dll
MOD - [2012.11.17 00:19:39 | 017,478,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\8cdf7f9bde2b780692428f439f0f5a08\System.ServiceModel.ni.dll
MOD - [2012.11.17 00:19:39 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\3d3f043f645c0afeee0f7ed04c5e26e7\SMDiagnostics.ni.dll
MOD - [2012.11.17 00:19:29 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvcInt#\8d87b252e2caff0cb8543834651936e6\IAStorDataMgrSvcInterfaces.ni.dll
MOD - [2012.11.17 00:19:28 | 000,032,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\c14eb8b8b29c5cfd2e2c7b80ac5d5af4\IAStorCommon.ni.dll
MOD - [2012.11.17 00:19:26 | 000,335,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\72e8fa5590ea3a83dc956b8bc49e51c2\IAStorUtil.ni.dll
MOD - [2012.11.16 18:10:09 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7c4de95aa433eb8d81a81caf805947a8\PresentationFramework.Aero.ni.dll
MOD - [2012.11.16 18:10:04 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\616b25e9ad3de7ab58c67f200e21dbac\System.Web.ni.dll
MOD - [2012.11.16 18:09:53 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ec80905a71750be50dfc7981ad5ae28\PresentationFramework.ni.dll
MOD - [2012.11.16 18:09:46 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll
MOD - [2012.11.16 18:09:42 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll
MOD - [2012.11.16 18:09:40 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53d6d827964619285771ed72332d3659\PresentationCore.ni.dll
MOD - [2012.11.16 18:09:40 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\aa983d1ad8df4422c0859ab4d6e19a83\UIAutomationProvider.ni.dll
MOD - [2012.11.16 18:09:40 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\70705382a499703e7a595fada80b04e6\Accessibility.ni.dll
MOD - [2012.11.16 18:09:34 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll
MOD - [2012.11.16 18:09:31 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll
MOD - [2012.11.16 18:09:29 | 007,988,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll
MOD - [2012.11.16 18:09:29 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll
MOD - [2012.11.16 18:09:26 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll
MOD - [2012.11.16 07:00:42 | 018,002,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\c22857dbcce7e0320350436e80ec8ab1\PresentationFramework.ni.dll
MOD - [2012.11.16 07:00:34 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\78a485faba9584cfb1a5052a4cbe71e8\PresentationCore.ni.dll
MOD - [2012.11.16 07:00:29 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\df5142941549ff71737438c85e565ab3\WindowsBase.ni.dll
MOD - [2012.11.16 06:58:54 | 006,815,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\d15f027a989100ea46b1df0c050dda17\System.Data.ni.dll
MOD - [2012.11.16 06:58:53 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\ccf3f783590b1747a3593b889bede2fb\System.Windows.Forms.ni.dll
MOD - [2012.11.16 06:58:51 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\a7cdf1caedee630b8440fb8e8657aca1\System.Core.ni.dll
MOD - [2012.11.16 06:58:49 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\06db722a2ddebd960d907c2de6f1cfa7\System.Xml.ni.dll
MOD - [2012.11.16 06:58:48 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\ed7768172bbf30462bc554dee3911540\System.Drawing.ni.dll
MOD - [2012.11.16 06:58:47 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c15c94b675becb485d940f8f0068dc5d\System.Configuration.ni.dll
MOD - [2012.11.16 06:58:46 | 009,093,632 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\0bc033fa805a31e31dc462cfae365478\System.ni.dll
MOD - [2012.11.16 06:58:43 | 014,413,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\685f73e04393b5342bd1cebe701496ad\mscorlib.ni.dll
MOD - [2012.11.16 06:58:43 | 000,145,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\92e2965ed886e4fdbfd3052610cf74da\System.Numerics.ni.dll
MOD - [2012.08.16 16:54:07 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012.05.30 19:06:48 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.05.30 19:06:30 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012.01.26 21:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
MOD - [2010.11.21 07:49:35 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_de_b77a5c561934e089\System.ServiceModel.resources.dll
MOD - [2010.11.21 07:49:25 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2012.11.26 21:36:09 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.11.19 21:48:16 | 002,462,128 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.11.14 06:27:57 | 005,663,232 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Freetec\SystemStore\SelfUpdate.exe -- (SelfUpdateService)
SRV - [2012.11.14 06:24:00 | 009,016,320 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Freetec\SystemStore\SystemStore.exe -- (SystemStoreService)
SRV - [2012.11.09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.10.27 21:37:03 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.25 05:07:10 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.10.08 22:15:44 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.10.02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.09.22 18:28:40 | 005,686,272 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Freetec\SystemStore\Freemium.SelfUpdate.exe -- (FreemiumSelfUpdateService)
SRV - [2012.08.31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.08.16 09:30:08 | 001,028,096 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV - [2012.08.16 09:30:06 | 000,647,680 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.05.01 14:47:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.02.16 18:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\AlienRespawn\sftservice.EXE -- (SftService)
SRV - [2012.01.10 10:13:02 | 000,014,664 | ---- | M] (Alienware) [Auto | Running] -- C:\Programme\Alienware\Command Center\AlienFusionService.exe -- (AlienFusionService)
SRV - [2011.11.21 18:46:40 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV - [2011.10.12 22:53:02 | 000,007,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2011.02.28 15:02:30 | 001,189,968 | ---- | M] (Motorola Solutions, Inc.) [On_Demand | Running] -- C:\Programme\Motorola\Bluetooth\audiosrv.exe -- (Bluetooth Media Service)
SRV - [2011.02.15 20:36:28 | 000,680,016 | ---- | M] (Motorola Solutions, Inc.) [Auto | Running] -- C:\Programme\Motorola\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011.02.08 19:58:34 | 004,151,376 | ---- | M] (Motorola Solutions, Inc.) [On_Demand | Running] -- C:\Programme\Motorola\Bluetooth\devmgrsrv.exe -- (Bluetooth Device Manager)
SRV - [2010.09.02 15:25:02 | 000,211,808 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe -- (RalinkRegistryWriter64)
SRV - [2010.09.02 15:25:02 | 000,193,888 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.08.22 10:18:46 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.08.21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.08.16 16:54:12 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.08.16 16:54:10 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012.08.16 16:54:10 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012.07.09 13:42:54 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.04.18 09:08:04 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.10.12 23:44:02 | 000,023,832 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)
DRV:64bit: - [2011.10.12 23:44:00 | 000,562,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:64bit: - [2011.09.22 05:49:56 | 000,056,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2011.09.20 08:32:44 | 000,183,104 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SaiK0CD7.sys -- (SaiK0CD7)
DRV:64bit: - [2011.09.20 08:32:44 | 000,047,168 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SaiU0CD7.sys -- (SaiU0CD7)
DRV:64bit: - [2011.09.15 20:15:00 | 000,216,064 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rusb3xhc.sys -- (rusb3xhc)
DRV:64bit: - [2011.09.15 20:14:58 | 000,100,352 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rusb3hub.sys -- (rusb3hub)
DRV:64bit: - [2011.06.11 00:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.04.11 20:01:00 | 000,341,832 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys -- (LADF_RenderOnly)
DRV:64bit: - [2011.04.11 20:00:18 | 000,410,184 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSCamd64.sys -- (LADF_CaptureOnly)
DRV:64bit: - [2011.02.08 19:02:04 | 000,486,144 | ---- | M] (Motorola Solutions, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmusb.sys -- (BTMUSB)
DRV:64bit: - [2010.12.28 19:55:30 | 001,547,616 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux)
DRV:64bit: - [2010.11.21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.15 08:24:56 | 000,115,200 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzSynapse.sys -- (RzSynapse)
DRV:64bit: - [2010.09.29 11:34:50 | 000,377,176 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfSBVMamd64.sys -- (LADF_SBVM)
DRV:64bit: - [2010.09.29 11:34:48 | 000,062,168 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfDHP2amd64.sys -- (LADF_DHP2)
DRV:64bit: - [2010.06.30 11:02:30 | 000,052,736 | ---- | M] (Motorola, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmcom.sys -- (BTMCOM)
DRV:64bit: - [2010.03.19 03:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009.11.24 01:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 01:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.08.13 21:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.18 15:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2006.11.01 04:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.alienwarearena.com/welcome-at
IE - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alienwarearena.com/welcome-at
IE - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: personas@christopher.beard:1.6.2
FF - prefs.js..extensions.enabledAddons: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:1.5
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.132.0: C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.140.0: C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Kevin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.11.29 08:17:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.27 21:37:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012.08.22 09:16:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Extensions
[2012.11.20 21:22:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\8o1vga50.default\extensions
[2012.08.22 09:25:56 | 000,330,316 | ---- | M] () (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\firefox\profiles\8o1vga50.default\extensions\personas@christopher.beard.xpi
[2012.11.20 21:22:24 | 000,243,496 | ---- | M] () (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\firefox\profiles\8o1vga50.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2012.10.27 21:37:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.11.02 02:55:26 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.10.27 21:37:03 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.07.14 01:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.08.29 11:14:04 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.07.14 01:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.07.14 01:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.07.14 01:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.07.14 01:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: []  File not found
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.)
O4:64bit: - HKLM..\Run: [Command Center Controllers] C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe (Alienware)
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Razer Blackwidow Driver] C:\Program Files (x86)\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe (Razer USA Ltd)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech blank Produktregistrierung.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-3948810107-1892673177-3059596908-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9:64bit: - Extra Button: @C:\Program Files\Motorola\Bluetooth\Resources\deu.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Programme\Motorola\Bluetooth\btmiesend.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\Resources\deu.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Programme\Motorola\Bluetooth\btmiesend.htm ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Programme\Motorola\Bluetooth\btmiesend.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Programme\Motorola\Bluetooth\btmiesend.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{05C1B484-8B96-458A-ACA4-2B68D3D5EA0D}: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CD3ED8D4-969A-4E88-9970-6EAC36831E1A}: DhcpNameServer = 10.0.0.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004.04.30 16:01:00 | 000,000,053 | -HS- | M] () - Y:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Hamachi2Svc - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.LAGS - lagarith.dll ( )
Drivers32:64bit: vidc.xtor - DxtoryCodec64.dll (Dxtory Software)
Drivers32: msacm.ac3filter - ac3filter.acm File not found
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\Windows\SysWow64\ffdshow.ax ()
Drivers32: VIDC.LAGS - C:\Windows\SysWow64\lagarith.dll ( )
Drivers32: vidc.xtor - C:\Windows\SysWow64\DxtoryCodec.dll (Dxtory Software)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.26 20:02:57 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.11.26 18:58:58 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Documents\Assassin's Creed III
[2012.11.26 17:50:09 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2012.11.24 09:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.11.24 09:21:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012.11.23 18:14:52 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Local\ESN
[2012.11.20 06:16:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.11.20 06:16:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2012.11.14 20:48:49 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\Unity
[2012.11.14 20:27:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2012.11.14 20:25:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.11.14 20:25:23 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.11.14 20:25:23 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.11.14 20:25:23 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2012.11.14 19:07:34 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Local\Unity
[2012.11.03 16:35:28 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\Empty Clip Studios
[2012.11.02 11:42:42 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Documents\Eidos
 
========== Files - Modified Within 30 Days ==========
 
[2012.12.01 00:15:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.11.30 23:11:29 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.11.30 23:11:29 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.11.30 23:10:59 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.11.30 11:14:31 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.30 11:14:31 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.30 10:49:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.30 10:49:15 | 4257,648,638 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.29 16:32:56 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.11.29 08:17:55 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.11.26 21:36:09 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.11.26 17:52:00 | 000,532,797 | ---- | M] () -- C:\Users\Kevin\Desktop\IMG_26112012_175200.png
[2012.11.16 18:04:56 | 000,279,592 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.11.16 06:59:56 | 001,637,034 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.16 06:59:56 | 000,697,674 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.16 06:59:56 | 000,652,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.16 06:59:56 | 000,148,468 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.16 06:59:56 | 000,121,422 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.13 22:55:17 | 000,325,316 | ---- | M] () -- C:\Users\Kevin\Desktop\IMG_13112012_225517.png
[2012.11.13 17:41:59 | 000,426,997 | ---- | M] () -- C:\Users\Kevin\Desktop\IMG_13112012_174111.png
[2012.11.12 18:45:52 | 000,274,517 | ---- | M] () -- C:\Users\Kevin\Desktop\möp.png
[2012.11.08 19:25:56 | 000,252,423 | ---- | M] () -- C:\Users\Kevin\Desktop\135839_3936823780647_378524165_o.jpg
[2012.11.01 20:05:50 | 000,056,484 | ---- | M] () -- C:\Users\Kevin\Desktop\asds.PNG
 
========== Files Created - No Company Name ==========
 
[2012.11.26 20:02:57 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.11.26 17:52:06 | 000,532,797 | ---- | C] () -- C:\Users\Kevin\Desktop\IMG_26112012_175200.png
[2012.11.16 06:59:13 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012.11.16 06:56:04 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012.11.13 22:55:27 | 000,325,316 | ---- | C] () -- C:\Users\Kevin\Desktop\IMG_13112012_225517.png
[2012.11.13 17:41:59 | 000,426,997 | ---- | C] () -- C:\Users\Kevin\Desktop\IMG_13112012_174111.png
[2012.11.12 18:46:01 | 000,274,517 | ---- | C] () -- C:\Users\Kevin\Desktop\möp.png
[2012.11.08 19:24:38 | 000,252,423 | ---- | C] () -- C:\Users\Kevin\Desktop\135839_3936823780647_378524165_o.jpg
[2012.11.01 20:05:36 | 000,056,484 | ---- | C] () -- C:\Users\Kevin\Desktop\asds.PNG
[2012.10.01 05:36:35 | 000,022,730 | R--- | C] () -- C:\Users\Kevin\guild_wars_2_eu_key_57434280_Z9HZNNJQ.jpg
[2012.09.21 03:49:16 | 000,000,045 | ---- | C] () -- C:\Users\Kevin\jagex_cl_runescape_LIVE3.dat
[2012.09.20 14:08:26 | 000,000,045 | ---- | C] () -- C:\Users\Kevin\jagex_cl_runescape_LIVE2.dat
[2012.09.18 05:47:32 | 000,000,046 | ---- | C] () -- C:\Users\Kevin\jagex_cl_loginapplet_LIVE.dat
[2012.09.18 05:33:20 | 000,000,045 | ---- | C] () -- C:\Users\Kevin\jagex_cl_runescape_LIVE1.dat
[2012.08.23 01:00:42 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2012.08.22 22:17:13 | 000,000,044 | ---- | C] () -- C:\Users\Kevin\jagex_cl_runescape_LIVE.dat
[2012.08.22 22:17:13 | 000,000,024 | ---- | C] () -- C:\Users\Kevin\random.dat
[2012.08.22 20:02:10 | 000,007,603 | ---- | C] () -- C:\Users\Kevin\AppData\Local\Resmon.ResmonCfg
[2012.08.22 13:16:51 | 000,715,038 | ---- | C] () -- C:\Windows\unins000.exe
[2012.08.22 13:16:51 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012.08.22 13:16:51 | 000,001,990 | ---- | C] () -- C:\Windows\unins000.dat
[2012.08.22 11:28:55 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.08.22 11:28:54 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.08.16 09:30:43 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2012.08.16 09:30:35 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.dll
[2012.08.16 09:30:35 | 000,000,451 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.ini
[2012.06.19 13:02:17 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.05.01 14:48:04 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012.01.10 10:23:14 | 000,021,320 | ---- | C] () -- C:\Windows\SysWow64\LightFX.dll
[2011.07.01 10:17:22 | 000,098,232 | ---- | C] () -- C:\Windows\SysWow64\CCBiosSupportAPI.dll
[2011.02.11 11:22:50 | 001,592,936 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.09.29 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\.minecraft
[2012.10.06 15:49:14 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Beat Hazard
[2012.11.26 20:05:15 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\DAEMON Tools Lite
[2012.11.03 16:35:28 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Empty Clip Studios
[2012.10.30 17:22:57 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Leadertech
[2012.08.25 07:31:40 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\LolClient
[2012.11.30 10:40:18 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Origin
[2012.08.22 13:05:04 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\PCDr
[2012.08.22 20:06:21 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Publish Providers
[2012.08.22 20:08:44 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Sony
[2012.11.04 14:10:50 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TeamViewer
[2012.12.01 00:36:33 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TS3Client
[2012.08.29 17:30:11 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\ts3overlay
[2012.11.14 20:48:49 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Unity
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2012.09.25 23:47:11 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012.08.16 09:38:22 | 000,000,000 | ---D | M] -- C:\Apps
[2012.09.18 22:20:31 | 000,000,000 | ---D | M] -- C:\Dell
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012.08.22 09:51:25 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2012.08.16 09:29:37 | 000,000,000 | ---D | M] -- C:\Intel
[2012.09.15 02:09:31 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2012.11.26 20:02:57 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.11.20 06:16:55 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.11.14 20:25:23 | 000,000,000 | ---D | M] -- C:\ProgramData
[2012.08.22 09:51:25 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.08.25 06:19:51 | 000,000,000 | ---D | M] -- C:\Riot Games
[2012.08.16 19:02:22 | 000,000,000 | -HSD | M] -- C:\System Recovery
[2012.12.01 00:38:22 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012.09.15 02:10:59 | 000,000,000 | ---D | M] -- C:\Temp
[2012.11.03 16:34:51 | 000,000,000 | R--D | M] -- C:\Users
[2012.11.29 08:17:53 | 000,000,000 | ---D | M] -- C:\Windows
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2012.09.29 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\.minecraft
[2012.08.25 05:31:47 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Adobe
[2012.11.14 20:46:36 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Apple Computer
[2012.10.06 15:49:14 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Beat Hazard
[2012.11.26 20:05:15 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\DAEMON Tools Lite
[2012.08.22 13:05:39 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Dell
[2012.11.03 16:35:28 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Empty Clip Studios
[2012.08.22 09:54:18 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Identities
[2012.08.22 09:54:38 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Intel Corporation
[2012.10.30 17:22:57 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Leadertech
[2012.10.30 17:57:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Logishrd
[2012.10.30 17:57:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Logitech
[2012.08.25 07:31:40 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\LolClient
[2012.08.22 09:10:07 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Macromedia
[2012.08.22 09:57:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Macrovision
[2010.11.21 08:00:23 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Media Center Programs
[2012.09.29 19:01:28 | 000,000,000 | --SD | M] -- C:\Users\Kevin\AppData\Roaming\Microsoft
[2012.08.22 09:16:38 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Mozilla
[2012.08.22 20:06:12 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\NVIDIA
[2012.11.30 10:40:18 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Origin
[2012.08.22 13:05:04 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\PCDr
[2012.08.22 20:06:21 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Publish Providers
[2012.08.22 09:54:43 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Roxio
[2012.08.22 09:04:11 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Roxio Burn
[2012.08.22 09:07:36 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Roxio Log Files
[2012.12.01 00:36:36 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Skype
[2012.08.22 20:08:44 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Sony
[2012.11.04 14:10:50 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TeamViewer
[2012.12.01 00:36:33 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TS3Client
[2012.08.29 17:30:11 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\ts3overlay
[2012.11.14 20:48:49 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Unity
[2012.10.19 23:11:48 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\vlc
[2012.08.22 10:20:21 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
 
< %SYSTEMROOT%\system32\drivers\*.sys /lockedfiles >
 
< %SYSTEMROOT%\System32\config\*.sav >
 
< %SYSTEMROOT%\*. /mp /s >
 
< %SYSTEMROOT%\system32\*.dll /lockedfiles >

< End of report >

cosinus 01.12.2012 01:09
1. aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehlalarm!
  • Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.


2. TDSS-Killer

Download TDSS-Killer auf Desktop siehe => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

Ummgh23 01.12.2012 01:15
Sagt mir nur aswMBR.exe ist keine zulässige Win32 anwendung..

Virenschutz hatte ich deaktiviert.

cosinus 01.12.2012 01:24
Bitte neu runterladen und nochmal probieren

Ummgh23 01.12.2012 01:57
So, hier die beiden logs.

aswMBR:

Code:
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-12-01 01:51:54
-----------------------------
01:51:54.742    OS Version: Windows x64 6.1.7601 Service Pack 1
01:51:54.742    Number of processors: 8 586 0x2D07
01:51:54.743    ComputerName: KEVIN-PC  UserName: Kevin
01:51:54.832    Initialze error 1
01:51:54.883    AVAST engine defs: 12113001
01:52:28.497    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000068
01:52:28.499    Disk 0 Vendor: Intel___ 1.0. Size: 1907726MB BusType: 8
01:52:28.508    Disk 0 MBR read successfully
01:52:28.509    Disk 0 MBR scan
01:52:28.510    Disk 0 unknown MBR code
01:52:28.512    Disk 0 Partition 1 00    EE          GPT          2097151 MB offset 1
01:52:28.514    Disk 0 scanning C:\Windows\system32\drivers
01:52:28.515    Service scanning
01:52:29.054    Modules scanning
01:52:29.056    Disk 0 trace - called modules:
01:52:29.058    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStorF.sys ACPI.sys storport.sys hal.dll iaStorA.sys
01:52:29.060    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800f2d3790]
01:52:29.062    3 CLASSPNP.SYS[fffff8800460143f] -> nt!IofCallDriver -> [0xfffffa800f1da850]
01:52:29.065    5 iaStorF.sys[fffff8800497c2fa] -> nt!IofCallDriver -> [0xfffffa800ef81bb0]
01:52:29.070    7 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\00000068[0xfffffa800ef81060]
01:52:29.074    AVAST engine scan C:\Windows
01:52:29.077    AVAST engine scan C:\Windows\system32
01:52:29.079    AVAST engine scan C:\Windows\system32\drivers
01:52:29.083    AVAST engine scan C:\Users\Kevin
01:52:29.086    AVAST engine scan C:\ProgramData
01:52:29.088    Scan finished successfully
01:52:39.595    Disk 0 MBR has been saved successfully to "C:\Users\Kevin\Desktop\MBR.dat"
01:52:39.597    The log file has been saved successfully to "C:\Users\Kevin\Desktop\aswMBR.txt"


Und TDSSKiller:

Code:
01:54:17.0285 5696  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
01:54:17.0285 5696  UEFI system
01:54:17.0368 5696  ============================================================
01:54:17.0368 5696  Current date / time: 2012/12/01 01:54:17.0368
01:54:17.0368 5696  SystemInfo:
01:54:17.0368 5696 
01:54:17.0368 5696  OS Version: 6.1.7601 ServicePack: 1.0
01:54:17.0368 5696  Product type: Workstation
01:54:17.0368 5696  ComputerName: KEVIN-PC
01:54:17.0368 5696  UserName: Kevin
01:54:17.0368 5696  Windows directory: C:\Windows
01:54:17.0368 5696  System windows directory: C:\Windows
01:54:17.0368 5696  Running under WOW64
01:54:17.0368 5696  Processor architecture: Intel x64
01:54:17.0369 5696  Number of processors: 8
01:54:17.0369 5696  Page size: 0x1000
01:54:17.0369 5696  Boot type: Normal boot
01:54:17.0369 5696  ============================================================
01:54:17.0720 5696  Drive \Device\Harddisk0\DR0 - Size: 0x1D1C0E00000 (1863.01 Gb), SectorSize: 0x200, Cylinders: 0x3B600, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
01:54:17.0724 5696  ============================================================
01:54:17.0724 5696  \Device\Harddisk0\DR0:
01:54:17.0724 5696  GPT partitions:
01:54:17.0731 5696  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {8CF46070-8E47-462D-A9EA-85C44B06C7DA}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x96000
01:54:17.0731 5696  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {0BB768E8-77AE-43E5-9EC9-B622BD159CF7}, Name: Basic data partition, StartLBA 0x96800, BlocksNum 0x14000
01:54:17.0731 5696  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {1393ABBC-0062-459D-B74D-EB3D8E7CC43A}, Name: Microsoft reserved partition, StartLBA 0xAA800, BlocksNum 0x40000
01:54:17.0731 5696  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {69AC69E4-6312-45B2-8B20-2C8FDF4F6E4A}, Name: Basic data partition, StartLBA 0xEA800, BlocksNum 0x1377000
01:54:17.0731 5696  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {BFAA7E17-F8C6-4373-A214-6CCEE601310C}, Name: Basic data partition, StartLBA 0x1461800, BlocksNum 0xE79A5000
01:54:17.0731 5696  MBR partitions:
01:54:17.0731 5696  ============================================================
01:54:17.0758 5696  C: <-> \Device\Harddisk0\DR0\Partition5
01:54:17.0758 5696  ============================================================
01:54:17.0758 5696  Initialize success
01:54:17.0758 5696  ============================================================
01:54:35.0528 5548  ============================================================
01:54:35.0528 5548  Scan started
01:54:35.0528 5548  Mode: Manual; SigCheck; TDLFS;
01:54:35.0528 5548  ============================================================
01:54:35.0865 5548  ================ Scan system memory ========================
01:54:35.0865 5548  System memory - ok
01:54:35.0865 5548  ================ Scan services =============================
01:54:36.0005 5548  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
01:54:36.0048 5548  1394ohci - ok
01:54:36.0075 5548  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
01:54:36.0086 5548  ACPI - ok
01:54:36.0099 5548  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
01:54:36.0130 5548  AcpiPmi - ok
01:54:36.0233 5548  [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
01:54:36.0249 5548  AdobeFlashPlayerUpdateSvc - ok
01:54:36.0263 5548  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
01:54:36.0277 5548  adp94xx - ok
01:54:36.0290 5548  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\drivers\adpahci.sys
01:54:36.0309 5548  adpahci - ok
01:54:36.0312 5548  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
01:54:36.0320 5548  adpu320 - ok
01:54:36.0341 5548  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
01:54:36.0376 5548  AeLookupSvc - ok
01:54:36.0509 5548  [ D1E343BC00136CE03C4D403194D06A80 ] AERTFilters    C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
01:54:36.0515 5548  AERTFilters - ok
01:54:36.0535 5548  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
01:54:36.0560 5548  AFD - ok
01:54:36.0563 5548  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
01:54:36.0570 5548  agp440 - ok
01:54:36.0583 5548  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
01:54:36.0609 5548  ALG - ok
01:54:36.0634 5548  [ D25A839151692E10BF4034D3B8D69A8C ] AlienFusionService C:\Program Files\Alienware\Command Center\AlienFusionService.exe
01:54:36.0639 5548  AlienFusionService - ok
01:54:36.0641 5548  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
01:54:36.0647 5548  aliide - ok
01:54:36.0648 5548  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
01:54:36.0654 5548  amdide - ok
01:54:36.0656 5548  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
01:54:36.0664 5548  AmdK8 - ok
01:54:36.0667 5548  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
01:54:36.0717 5548  AmdPPM - ok
01:54:36.0745 5548  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
01:54:36.0754 5548  amdsata - ok
01:54:36.0757 5548  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
01:54:36.0765 5548  amdsbs - ok
01:54:36.0771 5548  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
01:54:36.0777 5548  amdxata - ok
01:54:36.0779 5548  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
01:54:36.0813 5548  AppID - ok
01:54:36.0821 5548  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
01:54:36.0858 5548  AppIDSvc - ok
01:54:36.0876 5548  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
01:54:36.0915 5548  Appinfo - ok
01:54:36.0987 5548  [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
01:54:36.0994 5548  Apple Mobile Device - ok
01:54:36.0997 5548  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\drivers\arc.sys
01:54:37.0004 5548  arc - ok
01:54:37.0007 5548  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys
01:54:37.0016 5548  arcsas - ok
01:54:37.0095 5548  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
01:54:37.0102 5548  aspnet_state - ok
01:54:37.0137 5548  [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk        C:\Windows\system32\drivers\aswFsBlk.sys
01:54:37.0145 5548  aswFsBlk - ok
01:54:37.0164 5548  [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt      C:\Windows\system32\drivers\aswMonFlt.sys
01:54:37.0171 5548  aswMonFlt - ok
01:54:37.0186 5548  [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr          C:\Windows\System32\Drivers\aswrdr2.sys
01:54:37.0192 5548  aswRdr - ok
01:54:37.0231 5548  [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
01:54:37.0249 5548  aswSnx - ok
01:54:37.0270 5548  [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP          C:\Windows\system32\drivers\aswSP.sys
01:54:37.0282 5548  aswSP - ok
01:54:37.0295 5548  [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi          C:\Windows\system32\drivers\aswTdi.sys
01:54:37.0301 5548  aswTdi - ok
01:54:37.0303 5548  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
01:54:37.0341 5548  AsyncMac - ok
01:54:37.0363 5548  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
01:54:37.0369 5548  atapi - ok
01:54:37.0393 5548  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
01:54:37.0440 5548  AudioEndpointBuilder - ok
01:54:37.0444 5548  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
01:54:37.0468 5548  AudioSrv - ok
01:54:37.0581 5548  AutoBoot - ok
01:54:37.0643 5548  [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
01:54:37.0649 5548  avast! Antivirus - ok
01:54:37.0677 5548  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
01:54:37.0703 5548  AxInstSV - ok
01:54:37.0720 5548  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
01:54:37.0743 5548  b06bdrv - ok
01:54:37.0752 5548  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
01:54:37.0786 5548  b57nd60a - ok
01:54:37.0807 5548  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
01:54:37.0827 5548  BDESVC - ok
01:54:37.0847 5548  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
01:54:37.0867 5548  Beep - ok
01:54:37.0896 5548  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
01:54:37.0934 5548  BFE - ok
01:54:37.0971 5548  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
01:54:38.0001 5548  BITS - ok
01:54:38.0003 5548  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
01:54:38.0022 5548  blbdrive - ok
01:54:38.0175 5548  [ 94A6341079918DB7BF799EE897BD2563 ] Bluetooth Device Manager C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
01:54:38.0228 5548  Bluetooth Device Manager - ok
01:54:38.0263 5548  [ 7E76BF0972822A9B63FD55A73DF3EED6 ] Bluetooth Media Service C:\Program Files\Motorola\Bluetooth\audiosrv.exe
01:54:38.0281 5548  Bluetooth Media Service - ok
01:54:38.0301 5548  [ F7D36E135BF9274BB3435F95E7FAD339 ] Bluetooth OBEX Service C:\Program Files\Motorola\Bluetooth\obexsrv.exe
01:54:38.0313 5548  Bluetooth OBEX Service - ok
01:54:38.0348 5548  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
01:54:38.0365 5548  Bonjour Service - ok
01:54:38.0396 5548  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
01:54:38.0404 5548  bowser - ok
01:54:38.0407 5548  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
01:54:38.0416 5548  BrFiltLo - ok
01:54:38.0427 5548  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
01:54:38.0436 5548  BrFiltUp - ok
01:54:38.0457 5548  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
01:54:38.0466 5548  Browser - ok
01:54:38.0480 5548  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
01:54:38.0510 5548  Brserid - ok
01:54:38.0513 5548  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
01:54:38.0525 5548  BrSerWdm - ok
01:54:38.0527 5548  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
01:54:38.0537 5548  BrUsbMdm - ok
01:54:38.0539 5548  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
01:54:38.0547 5548  BrUsbSer - ok
01:54:38.0607 5548  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum        C:\Windows\system32\drivers\BthEnum.sys
01:54:38.0640 5548  BthEnum - ok
01:54:38.0643 5548  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
01:54:38.0672 5548  BTHMODEM - ok
01:54:38.0698 5548  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
01:54:38.0709 5548  BthPan - ok
01:54:38.0727 5548  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT        C:\Windows\System32\Drivers\BTHport.sys
01:54:38.0756 5548  BTHPORT - ok
01:54:38.0790 5548  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
01:54:38.0812 5548  bthserv - ok
01:54:38.0815 5548  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
01:54:38.0822 5548  BTHUSB - ok
01:54:38.0845 5548  [ 6D3FF2B480F7AB8DA103CBC7FBEACD48 ] BTMCOM          C:\Windows\system32\Drivers\btmcom.sys
01:54:38.0851 5548  BTMCOM - ok
01:54:38.0870 5548  [ B64CFABE65E241C784BB9F301795449B ] BTMUSB          C:\Windows\system32\Drivers\btmusb.sys
01:54:38.0882 5548  BTMUSB - ok
01:54:38.0890 5548  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
01:54:38.0925 5548  cdfs - ok
01:54:38.0951 5548  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
01:54:38.0959 5548  cdrom - ok
01:54:38.0987 5548  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
01:54:39.0014 5548  CertPropSvc - ok
01:54:39.0016 5548  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys
01:54:39.0025 5548  circlass - ok
01:54:39.0048 5548  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
01:54:39.0059 5548  CLFS - ok
01:54:39.0113 5548  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:54:39.0120 5548  clr_optimization_v2.0.50727_32 - ok
01:54:39.0157 5548  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
01:54:39.0163 5548  clr_optimization_v2.0.50727_64 - ok
01:54:39.0230 5548  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
01:54:39.0243 5548  clr_optimization_v4.0.30319_32 - ok
01:54:39.0254 5548  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
01:54:39.0262 5548  clr_optimization_v4.0.30319_64 - ok
01:54:39.0264 5548  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
01:54:39.0272 5548  CmBatt - ok
01:54:39.0274 5548  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
01:54:39.0280 5548  cmdide - ok
01:54:39.0317 5548  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG            C:\Windows\system32\Drivers\cng.sys
01:54:39.0331 5548  CNG - ok
01:54:39.0345 5548  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
01:54:39.0359 5548  Compbatt - ok
01:54:39.0376 5548  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
01:54:39.0403 5548  CompositeBus - ok
01:54:39.0405 5548  COMSysApp - ok
01:54:39.0408 5548  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
01:54:39.0414 5548  crcdisk - ok
01:54:39.0427 5548  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
01:54:39.0445 5548  CryptSvc - ok
01:54:39.0476 5548  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
01:54:39.0505 5548  DcomLaunch - ok
01:54:39.0514 5548  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
01:54:39.0539 5548  defragsvc - ok
01:54:39.0551 5548  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
01:54:39.0588 5548  DfsC - ok
01:54:39.0604 5548  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
01:54:39.0645 5548  Dhcp - ok
01:54:39.0669 5548  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
01:54:39.0694 5548  discache - ok
01:54:39.0716 5548  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys
01:54:39.0722 5548  Disk - ok
01:54:39.0745 5548  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
01:54:39.0765 5548  Dnscache - ok
01:54:39.0802 5548  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
01:54:39.0824 5548  dot3svc - ok
01:54:39.0833 5548  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
01:54:39.0855 5548  DPS - ok
01:54:39.0881 5548  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
01:54:39.0890 5548  drmkaud - ok
01:54:39.0928 5548  [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01    C:\Windows\system32\DRIVERS\dtsoftbus01.sys
01:54:39.0936 5548  dtsoftbus01 - ok
01:54:39.0959 5548  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
01:54:39.0984 5548  DXGKrnl - ok
01:54:39.0997 5548  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
01:54:40.0027 5548  EapHost - ok
01:54:40.0099 5548  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\drivers\evbda.sys
01:54:40.0154 5548  ebdrv - ok
01:54:40.0172 5548  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
01:54:40.0179 5548  EFS - ok
01:54:40.0265 5548  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
01:54:40.0280 5548  ehRecvr - ok
01:54:40.0306 5548  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
01:54:40.0315 5548  ehSched - ok
01:54:40.0332 5548  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
01:54:40.0344 5548  elxstor - ok
01:54:40.0346 5548  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
01:54:40.0373 5548  ErrDev - ok
01:54:40.0404 5548  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
01:54:40.0444 5548  EventSystem - ok
01:54:40.0448 5548  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
01:54:40.0469 5548  exfat - ok
01:54:40.0489 5548  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
01:54:40.0513 5548  fastfat - ok
01:54:40.0530 5548  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
01:54:40.0544 5548  Fax - ok
01:54:40.0546 5548  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\drivers\fdc.sys
01:54:40.0570 5548  fdc - ok
01:54:40.0588 5548  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
01:54:40.0623 5548  fdPHost - ok
01:54:40.0633 5548  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
01:54:40.0669 5548  FDResPub - ok
01:54:40.0683 5548  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
01:54:40.0697 5548  FileInfo - ok
01:54:40.0708 5548  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
01:54:40.0750 5548  Filetrace - ok
01:54:40.0803 5548  [ 3D9B36631032FDE0FFEA0DC0260E4E35 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
01:54:40.0811 5548  FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - warning
01:54:40.0811 5548  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic (1)
01:54:40.0851 5548  [ 52C0312AB35EB7187015FB6A99136BB5 ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
01:54:40.0878 5548  FLEXnet Licensing Service 64 ( UnsignedFile.Multi.Generic ) - warning
01:54:40.0878 5548  FLEXnet Licensing Service 64 - detected UnsignedFile.Multi.Generic (1)
01:54:40.0893 5548  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
01:54:40.0900 5548  flpydisk - ok
01:54:40.0914 5548  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
01:54:40.0924 5548  FltMgr - ok
01:54:40.0962 5548  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache      C:\Windows\system32\FntCache.dll
01:54:40.0978 5548  FontCache - ok
01:54:41.0013 5548  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
01:54:41.0024 5548  FontCache3.0.0.0 - ok
01:54:41.0191 5548  [ 701C9023D8B5B18C9E08C27D4D1B5617 ] FreemiumSelfUpdateService C:\Program Files (x86)\Freetec\SystemStore\Freemium.SelfUpdate.exe
01:54:41.0265 5548  FreemiumSelfUpdateService ( UnsignedFile.Multi.Generic ) - warning
01:54:41.0265 5548  FreemiumSelfUpdateService - detected UnsignedFile.Multi.Generic (1)
01:54:41.0292 5548  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
01:54:41.0300 5548  FsDepends - ok
01:54:41.0328 5548  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
01:54:41.0342 5548  Fs_Rec - ok
01:54:41.0370 5548  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
01:54:41.0380 5548  fvevol - ok
01:54:41.0392 5548  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
01:54:41.0399 5548  gagp30kx - ok
01:54:41.0419 5548  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
01:54:41.0424 5548  GEARAspiWDM - ok
01:54:41.0448 5548  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
01:54:41.0474 5548  gpsvc - ok
01:54:41.0492 5548  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi        C:\Windows\system32\DRIVERS\hamachi.sys
01:54:41.0497 5548  hamachi - ok
01:54:41.0592 5548  [ A5963114373834D78782013BC803043E ] Hamachi2Svc    C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
01:54:41.0639 5548  Hamachi2Svc - ok
01:54:41.0650 5548  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
01:54:41.0694 5548  hcw85cir - ok
01:54:41.0715 5548  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
01:54:41.0758 5548  HdAudAddService - ok
01:54:41.0788 5548  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
01:54:41.0809 5548  HDAudBus - ok
01:54:41.0835 5548  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
01:54:41.0842 5548  HidBatt - ok
01:54:41.0845 5548  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
01:54:41.0855 5548  HidBth - ok
01:54:41.0870 5548  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\drivers\hidir.sys
01:54:41.0880 5548  HidIr - ok
01:54:41.0886 5548  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
01:54:41.0930 5548  hidserv - ok
01:54:41.0964 5548  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
01:54:41.0972 5548  HidUsb - ok
01:54:41.0982 5548  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
01:54:42.0022 5548  hkmsvc - ok
01:54:42.0052 5548  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
01:54:42.0080 5548  HomeGroupListener - ok
01:54:42.0099 5548  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
01:54:42.0122 5548  HomeGroupProvider - ok
01:54:42.0138 5548  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
01:54:42.0145 5548  HpSAMD - ok
01:54:42.0168 5548  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
01:54:42.0212 5548  HTTP - ok
01:54:42.0218 5548  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
01:54:42.0223 5548  hwpolicy - ok
01:54:42.0241 5548  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
01:54:42.0249 5548  i8042prt - ok
01:54:42.0274 5548  [ BC14E2C46AECD17D22D3356CA0A2DD4B ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
01:54:42.0283 5548  iaStorA - ok
01:54:42.0329 5548  [ 10F228CC634E74B47FD48FDBFE0126D9 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
01:54:42.0347 5548  IAStorDataMgrSvc ( UnsignedFile.Multi.Generic ) - warning
01:54:42.0347 5548  IAStorDataMgrSvc - detected UnsignedFile.Multi.Generic (1)
01:54:42.0364 5548  [ 0475F003D7F3A949CA5BFC56C6B1DF43 ] iaStorF        C:\Windows\system32\drivers\iaStorF.sys
01:54:42.0369 5548  iaStorF - ok
01:54:42.0388 5548  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
01:54:42.0400 5548  iaStorV - ok
01:54:42.0438 5548  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
01:54:42.0452 5548  idsvc - ok
01:54:42.0455 5548  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
01:54:42.0461 5548  iirsp - ok
01:54:42.0486 5548  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
01:54:42.0513 5548  IKEEXT - ok
01:54:42.0579 5548  [ ABA41EE6F5EEFC034F3BBD025506B37E ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
01:54:42.0628 5548  IntcAzAudAddService - ok
01:54:42.0649 5548  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
01:54:42.0656 5548  intelide - ok
01:54:42.0667 5548  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
01:54:42.0691 5548  intelppm - ok
01:54:42.0711 5548  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
01:54:42.0734 5548  IPBusEnum - ok
01:54:42.0756 5548  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
01:54:42.0776 5548  IpFilterDriver - ok
01:54:42.0821 5548  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
01:54:42.0849 5548  iphlpsvc - ok
01:54:42.0863 5548  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
01:54:42.0883 5548  IPMIDRV - ok
01:54:42.0887 5548  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
01:54:42.0915 5548  IPNAT - ok
01:54:42.0981 5548  [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
01:54:43.0003 5548  iPod Service - ok
01:54:43.0012 5548  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
01:54:43.0035 5548  IRENUM - ok
01:54:43.0037 5548  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
01:54:43.0044 5548  isapnp - ok
01:54:43.0070 5548  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
01:54:43.0079 5548  iScsiPrt - ok
01:54:43.0095 5548  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
01:54:43.0101 5548  kbdclass - ok
01:54:43.0109 5548  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
01:54:43.0116 5548  kbdhid - ok
01:54:43.0127 5548  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
01:54:43.0134 5548  KeyIso - ok
01:54:43.0151 5548  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
01:54:43.0159 5548  KSecDD - ok
01:54:43.0167 5548  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
01:54:43.0176 5548  KSecPkg - ok
01:54:43.0182 5548  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
01:54:43.0215 5548  ksthunk - ok
01:54:43.0236 5548  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
01:54:43.0275 5548  KtmRm - ok
01:54:43.0324 5548  [ CE4347E2D90DB2E5517B6F2BC720A862 ] LADF_CaptureOnly C:\Windows\system32\DRIVERS\ladfGSCamd64.sys
01:54:43.0334 5548  LADF_CaptureOnly - ok
01:54:43.0370 5548  [ 86DCBF8A41C78561A1DA07AB5E7B1CCC ] LADF_DHP2      C:\Windows\system32\DRIVERS\ladfDHP2amd64.sys
01:54:43.0374 5548  LADF_DHP2 - ok
01:54:43.0392 5548  [ 85A9D21D3AE2EA963E111CB150895877 ] LADF_RenderOnly C:\Windows\system32\DRIVERS\ladfGSRamd64.sys
01:54:43.0401 5548  LADF_RenderOnly - ok
01:54:43.0417 5548  [ 175C04C7813CE64616B5CB046E5E1383 ] LADF_SBVM      C:\Windows\system32\DRIVERS\ladfSBVMamd64.sys
01:54:43.0426 5548  LADF_SBVM - ok
01:54:43.0443 5548  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
01:54:43.0467 5548  LanmanServer - ok
01:54:43.0484 5548  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
01:54:43.0518 5548  LanmanWorkstation - ok
01:54:43.0536 5548  [ FA529FB35694C24BF98A9EF67C1CD9D0 ] LGBusEnum      C:\Windows\system32\drivers\LGBusEnum.sys
01:54:43.0541 5548  LGBusEnum - ok
01:54:43.0560 5548  [ 94B29CE153765E768F004FB3440BE2B0 ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys
01:54:43.0564 5548  LGVirHid - ok
01:54:43.0574 5548  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
01:54:43.0615 5548  lltdio - ok
01:54:43.0638 5548  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
01:54:43.0678 5548  lltdsvc - ok
01:54:43.0698 5548  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
01:54:43.0719 5548  lmhosts - ok
01:54:43.0744 5548  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
01:54:43.0759 5548  LSI_FC - ok
01:54:43.0761 5548  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
01:54:43.0768 5548  LSI_SAS - ok
01:54:43.0770 5548  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
01:54:43.0776 5548  LSI_SAS2 - ok
01:54:43.0779 5548  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
01:54:43.0786 5548  LSI_SCSI - ok
01:54:43.0805 5548  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
01:54:43.0827 5548  luafv - ok
01:54:43.0858 5548  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
01:54:43.0867 5548  Mcx2Svc - ok
01:54:43.0870 5548  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\drivers\megasas.sys
01:54:43.0876 5548  megasas - ok
01:54:43.0879 5548  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
01:54:43.0889 5548  MegaSR - ok
01:54:43.0925 5548  [ 86614752D2FAE34CCD9E7B2AABA5FBEC ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
01:54:43.0931 5548  MEIx64 - ok
01:54:43.0947 5548  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
01:54:43.0994 5548  MMCSS - ok
01:54:43.0997 5548  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
01:54:44.0017 5548  Modem - ok
01:54:44.0038 5548  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
01:54:44.0071 5548  monitor - ok
01:54:44.0087 5548  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
01:54:44.0101 5548  mouclass - ok
01:54:44.0111 5548  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
01:54:44.0118 5548  mouhid - ok
01:54:44.0139 5548  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
01:54:44.0146 5548  mountmgr - ok
01:54:44.0188 5548  [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
01:54:44.0203 5548  MozillaMaintenance - ok
01:54:44.0206 5548  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
01:54:44.0214 5548  mpio - ok
01:54:44.0223 5548  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
01:54:44.0245 5548  mpsdrv - ok
01:54:44.0268 5548  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
01:54:44.0304 5548  MpsSvc - ok
01:54:44.0306 5548  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
01:54:44.0318 5548  MRxDAV - ok
01:54:44.0338 5548  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
01:54:44.0346 5548  mrxsmb - ok
01:54:44.0359 5548  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
01:54:44.0384 5548  mrxsmb10 - ok
01:54:44.0386 5548  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
01:54:44.0394 5548  mrxsmb20 - ok
01:54:44.0408 5548  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
01:54:44.0415 5548  msahci - ok
01:54:44.0435 5548  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
01:54:44.0442 5548  msdsm - ok
01:54:44.0451 5548  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
01:54:44.0479 5548  MSDTC - ok
01:54:44.0494 5548  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
01:54:44.0533 5548  Msfs - ok
01:54:44.0539 5548  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
01:54:44.0581 5548  mshidkmdf - ok
01:54:44.0600 5548  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
01:54:44.0614 5548  msisadrv - ok
01:54:44.0646 5548  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
01:54:44.0686 5548  MSiSCSI - ok
01:54:44.0688 5548  msiserver - ok
01:54:44.0711 5548  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
01:54:44.0732 5548  MSKSSRV - ok
01:54:44.0750 5548  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
01:54:44.0789 5548  MSPCLOCK - ok
01:54:44.0790 5548  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
01:54:44.0811 5548  MSPQM - ok
01:54:44.0828 5548  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
01:54:44.0839 5548  MsRPC - ok
01:54:44.0845 5548  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
01:54:44.0851 5548  mssmbios - ok
01:54:44.0864 5548  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
01:54:44.0904 5548  MSTEE - ok
01:54:44.0914 5548  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
01:54:44.0922 5548  MTConfig - ok
01:54:44.0936 5548  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
01:54:44.0952 5548  Mup - ok
01:54:44.0963 5548  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
01:54:44.0990 5548  napagent - ok
01:54:45.0006 5548  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
01:54:45.0025 5548  NativeWifiP - ok
01:54:45.0055 5548  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
01:54:45.0071 5548  NDIS - ok
01:54:45.0082 5548  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
01:54:45.0118 5548  NdisCap - ok
01:54:45.0136 5548  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
01:54:45.0163 5548  NdisTapi - ok
01:54:45.0175 5548  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
01:54:45.0195 5548  Ndisuio - ok
01:54:45.0208 5548  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
01:54:45.0255 5548  NdisWan - ok
01:54:45.0271 5548  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
01:54:45.0291 5548  NDProxy - ok
01:54:45.0308 5548  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
01:54:45.0329 5548  NetBIOS - ok
01:54:45.0352 5548  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
01:54:45.0375 5548  NetBT - ok
01:54:45.0383 5548  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
01:54:45.0390 5548  Netlogon - ok
01:54:45.0409 5548  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
01:54:45.0447 5548  Netman - ok
01:54:45.0472 5548  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:54:45.0479 5548  NetMsmqActivator - ok
01:54:45.0480 5548  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:54:45.0485 5548  NetPipeActivator - ok
01:54:45.0503 5548  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
01:54:45.0531 5548  netprofm - ok
01:54:45.0572 5548  [ 53D7442AA919C91D055DBD44635F32B1 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys
01:54:45.0595 5548  netr28ux - ok
01:54:45.0597 5548  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:54:45.0602 5548  NetTcpActivator - ok
01:54:45.0603 5548  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:54:45.0609 5548  NetTcpPortSharing - ok
01:54:45.0627 5548  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
01:54:45.0634 5548  nfrd960 - ok
01:54:45.0674 5548  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
01:54:45.0698 5548  NlaSvc - ok
01:54:45.0715 5548  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
01:54:45.0737 5548  Npfs - ok
01:54:45.0747 5548  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
01:54:45.0769 5548  nsi - ok
01:54:45.0775 5548  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
01:54:45.0806 5548  nsiproxy - ok
01:54:45.0859 5548  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
01:54:45.0896 5548  Ntfs - ok
01:54:45.0903 5548  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
01:54:45.0943 5548  Null - ok
01:54:45.0971 5548  [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
01:54:45.0979 5548  NVHDA - ok
01:54:46.0184 5548  [ 766E8987B7CF28F76C61656A0D40813D ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
01:54:46.0414 5548  nvlddmkm - ok
01:54:46.0434 5548  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
01:54:46.0442 5548  nvraid - ok
01:54:46.0454 5548  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
01:54:46.0460 5548  nvstor - ok
01:54:46.0462 5548  NvStUSB - ok
01:54:46.0505 5548  [ C46E3B0F896264E89FC49556C395B1CD ] nvsvc          C:\Windows\system32\nvvsvc.exe
01:54:46.0522 5548  nvsvc - ok
01:54:46.0535 5548  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
01:54:46.0546 5548  nv_agp - ok
01:54:46.0562 5548  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
01:54:46.0589 5548  ohci1394 - ok
01:54:46.0608 5548  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
01:54:46.0637 5548  p2pimsvc - ok
01:54:46.0654 5548  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
01:54:46.0681 5548  p2psvc - ok
01:54:46.0688 5548  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\drivers\parport.sys
01:54:46.0704 5548  Parport - ok
01:54:46.0735 5548  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
01:54:46.0750 5548  partmgr - ok
01:54:46.0757 5548  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
01:54:46.0787 5548  PcaSvc - ok
01:54:46.0818 5548  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
01:54:46.0827 5548  pci - ok
01:54:46.0837 5548  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
01:54:46.0844 5548  pciide - ok
01:54:46.0857 5548  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
01:54:46.0866 5548  pcmcia - ok
01:54:46.0875 5548  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
01:54:46.0882 5548  pcw - ok
01:54:46.0896 5548  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
01:54:46.0934 5548  PEAUTH - ok
01:54:47.0012 5548  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
01:54:47.0021 5548  PerfHost - ok
01:54:47.0045 5548  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
01:54:47.0094 5548  pla - ok
01:54:47.0122 5548  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
01:54:47.0135 5548  PlugPlay - ok
01:54:47.0137 5548  PnkBstrA - ok
01:54:47.0163 5548  PnkBstrB - ok
01:54:47.0172 5548  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
01:54:47.0198 5548  PNRPAutoReg - ok
01:54:47.0201 5548  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
01:54:47.0210 5548  PNRPsvc - ok
01:54:47.0253 5548  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
01:54:47.0281 5548  PolicyAgent - ok
01:54:47.0299 5548  [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power          C:\Windows\system32\umpo.dll
01:54:47.0326 5548  Power - ok
01:54:47.0356 5548  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
01:54:47.0387 5548  PptpMiniport - ok
01:54:47.0390 5548  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\drivers\processr.sys
01:54:47.0406 5548  Processor - ok
01:54:47.0444 5548  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
01:54:47.0454 5548  ProfSvc - ok
01:54:47.0465 5548  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
01:54:47.0472 5548  ProtectedStorage - ok
01:54:47.0479 5548  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
01:54:47.0500 5548  Psched - ok
01:54:47.0517 5548  [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
01:54:47.0522 5548  PxHlpa64 - ok
01:54:47.0547 5548  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
01:54:47.0578 5548  ql2300 - ok
01:54:47.0582 5548  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
01:54:47.0589 5548  ql40xx - ok
01:54:47.0599 5548  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
01:54:47.0617 5548  QWAVE - ok
01:54:47.0626 5548  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
01:54:47.0666 5548  QWAVEdrv - ok
01:54:47.0718 5548  [ E5F568414F32873E6EC9FD97F9EE980C ] RalinkRegistryWriter C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
01:54:47.0723 5548  RalinkRegistryWriter - ok
01:54:47.0743 5548  [ FFB6C1E16FF8772F62693A3DCA731F8F ] RalinkRegistryWriter64 C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
01:54:47.0750 5548  RalinkRegistryWriter64 - ok
01:54:47.0752 5548  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
01:54:47.0772 5548  RasAcd - ok
01:54:47.0785 5548  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
01:54:47.0806 5548  RasAgileVpn - ok
01:54:47.0814 5548  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
01:54:47.0837 5548  RasAuto - ok
01:54:47.0839 5548  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
01:54:47.0878 5548  Rasl2tp - ok
01:54:47.0901 5548  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
01:54:47.0965 5548  RasMan - ok
01:54:47.0983 5548  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
01:54:48.0005 5548  RasPppoe - ok
01:54:48.0007 5548  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
01:54:48.0042 5548  RasSstp - ok
01:54:48.0059 5548  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
01:54:48.0083 5548  rdbss - ok
01:54:48.0085 5548  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
01:54:48.0093 5548  rdpbus - ok
01:54:48.0102 5548  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
01:54:48.0122 5548  RDPCDD - ok
01:54:48.0147 5548  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
01:54:48.0184 5548  RDPENCDD - ok
01:54:48.0187 5548  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
01:54:48.0207 5548  RDPREFMP - ok
01:54:48.0222 5548  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
01:54:48.0247 5548  RDPWD - ok
01:54:48.0262 5548  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
01:54:48.0271 5548  rdyboost - ok
01:54:48.0287 5548  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
01:54:48.0321 5548  RemoteAccess - ok
01:54:48.0336 5548  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
01:54:48.0378 5548  RemoteRegistry - ok
01:54:48.0409 5548  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
01:54:48.0419 5548  RFCOMM - ok
01:54:48.0430 5548  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
01:54:48.0470 5548  RpcEptMapper - ok
01:54:48.0494 5548  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
01:54:48.0509 5548  RpcLocator - ok
01:54:48.0530 5548  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
01:54:48.0554 5548  RpcSs - ok
01:54:48.0564 5548  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
01:54:48.0587 5548  rspndr - ok
01:54:48.0622 5548  [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167        C:\Windows\system32\DRIVERS\Rt64win7.sys
01:54:48.0633 5548  RTL8167 - ok
01:54:48.0647 5548  [ CAB06CA598638E0457E1DCF8CA824EC2 ] rusb3hub        C:\Windows\system32\DRIVERS\rusb3hub.sys
01:54:48.0653 5548  rusb3hub - ok
01:54:48.0672 5548  [ F47E2920F2A8C34562AAE24B73800C5C ] rusb3xhc        C:\Windows\system32\DRIVERS\rusb3xhc.sys
01:54:48.0680 5548  rusb3xhc - ok
01:54:48.0717 5548  [ BEDAFAF4524C00EDC068DE3ADF151F9D ] RzSynapse      C:\Windows\system32\DRIVERS\RzSynapse.sys
01:54:48.0723 5548  RzSynapse - ok
01:54:48.0736 5548  [ 2E6A17E1160B488C784FEE9E55EBD5E2 ] SaiK0CD7        C:\Windows\system32\DRIVERS\SaiK0CD7.sys
01:54:48.0743 5548  SaiK0CD7 - ok
01:54:48.0753 5548  [ C15DDCCE5FAD5BA211CF01558219AB21 ] SaiU0CD7        C:\Windows\system32\DRIVERS\SaiU0CD7.sys
01:54:48.0759 5548  SaiU0CD7 - ok
01:54:48.0760 5548  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
01:54:48.0768 5548  SamSs - ok
01:54:48.0775 5548  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
01:54:48.0782 5548  sbp2port - ok
01:54:48.0796 5548  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
01:54:48.0820 5548  SCardSvr - ok
01:54:48.0831 5548  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
01:54:48.0868 5548  scfilter - ok
01:54:48.0909 5548  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
01:54:48.0941 5548  Schedule - ok
01:54:48.0971 5548  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
01:54:48.0990 5548  SCPolicySvc - ok
01:54:48.0999 5548  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
01:54:49.0008 5548  SDRSVC - ok
01:54:49.0017 5548  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
01:54:49.0037 5548  secdrv - ok
01:54:49.0042 5548  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
01:54:49.0070 5548  seclogon - ok
01:54:49.0214 5548  [ 69500F5EAFDE80040F8465CD6E72037E ] SelfUpdateService C:\Program Files (x86)\Freetec\SystemStore\SelfUpdate.exe
01:54:49.0286 5548  SelfUpdateService ( UnsignedFile.Multi.Generic ) - warning
01:54:49.0286 5548  SelfUpdateService - detected UnsignedFile.Multi.Generic (1)
01:54:49.0308 5548  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
01:54:49.0350 5548  SENS - ok
01:54:49.0360 5548  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
01:54:49.0391 5548  SensrSvc - ok
01:54:49.0443 5548  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
01:54:49.0466 5548  Serenum - ok
01:54:49.0487 5548  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
01:54:49.0495 5548  Serial - ok
01:54:49.0498 5548  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
01:54:49.0505 5548  sermouse - ok
01:54:49.0511 5548  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
01:54:49.0550 5548  SessionEnv - ok
01:54:49.0557 5548  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
01:54:49.0582 5548  sffdisk - ok
01:54:49.0584 5548  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
01:54:49.0593 5548  sffp_mmc - ok
01:54:49.0595 5548  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
01:54:49.0610 5548  sffp_sd - ok
01:54:49.0612 5548  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
01:54:49.0619 5548  sfloppy - ok
01:54:49.0710 5548  [ 4215C271D6E6898C3F4DABAB4F387DC9 ] SftService      C:\Program Files (x86)\AlienRespawn\sftservice.EXE
01:54:49.0733 5548  SftService - ok
01:54:49.0748 5548  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
01:54:49.0774 5548  SharedAccess - ok
01:54:49.0786 5548  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
01:54:49.0814 5548  ShellHWDetection - ok
01:54:49.0824 5548  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
01:54:49.0831 5548  SiSRaid2 - ok
01:54:49.0834 5548  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
01:54:49.0841 5548  SiSRaid4 - ok
01:54:49.0975 5548  [ 388AE59FE75F1B959DFA0900923C61BB ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
01:54:50.0022 5548  Skype C2C Service - ok
01:54:50.0076 5548  [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
01:54:50.0082 5548  SkypeUpdate - ok
01:54:50.0085 5548  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
01:54:50.0125 5548  Smb - ok
01:54:50.0142 5548  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
01:54:50.0169 5548  SNMPTRAP - ok
01:54:50.0171 5548  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
01:54:50.0178 5548  spldr - ok
01:54:50.0220 5548  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
01:54:50.0234 5548  Spooler - ok
01:54:50.0298 5548  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
01:54:50.0380 5548  sppsvc - ok
01:54:50.0400 5548  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
01:54:50.0424 5548  sppuinotify - ok
01:54:50.0453 5548  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
01:54:50.0478 5548  srv - ok
01:54:50.0511 5548  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
01:54:50.0536 5548  srv2 - ok
01:54:50.0571 5548  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
01:54:50.0594 5548  srvnet - ok
01:54:50.0618 5548  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
01:54:50.0643 5548  SSDPSRV - ok
01:54:50.0655 5548  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
01:54:50.0678 5548  SstpSvc - ok
01:54:50.0691 5548  Steam Client Service - ok
01:54:50.0747 5548  [ CDD36C125425F85BC5B0A5DF0B11D1D5 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
01:54:50.0757 5548  Stereo Service - ok
01:54:50.0768 5548  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys
01:54:50.0775 5548  stexstor - ok
01:54:50.0792 5548  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
01:54:50.0822 5548  stisvc - ok
01:54:50.0824 5548  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
01:54:50.0830 5548  swenum - ok
01:54:50.0853 5548  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
01:54:50.0882 5548  swprv - ok
01:54:50.0915 5548  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
01:54:50.0962 5548  SysMain - ok
01:54:51.0152 5548  [ 5657BA44BEE5A0410687CE5B23D88C26 ] SystemStoreService C:\Program Files (x86)\Freetec\SystemStore\SystemStore.exe
01:54:51.0267 5548  SystemStoreService ( UnsignedFile.Multi.Generic ) - warning
01:54:51.0267 5548  SystemStoreService - detected UnsignedFile.Multi.Generic (1)
01:54:51.0291 5548  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
01:54:51.0328 5548  TabletInputService - ok
01:54:51.0363 5548  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
01:54:51.0427 5548  TapiSrv - ok
01:54:51.0444 5548  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
01:54:51.0467 5548  TBS - ok
01:54:51.0534 5548  [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
01:54:51.0568 5548  Tcpip - ok
01:54:51.0584 5548  [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
01:54:51.0606 5548  TCPIP6 - ok
01:54:51.0629 5548  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
01:54:51.0636 5548  tcpipreg - ok
01:54:51.0643 5548  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
01:54:51.0663 5548  TDPIPE - ok
01:54:51.0679 5548  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
01:54:51.0687 5548  TDTCP - ok
01:54:51.0707 5548  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
01:54:51.0728 5548  tdx - ok
01:54:51.0834 5548  [ 5E53CF8AD0FD33B35000C113656AB37B ] TeamViewer7    C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
01:54:51.0885 5548  TeamViewer7 - ok
01:54:51.0893 5548  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
01:54:51.0900 5548  TermDD - ok
01:54:51.0936 5548  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
01:54:51.0982 5548  TermService - ok
01:54:52.0008 5548  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
01:54:52.0019 5548  Themes - ok
01:54:52.0044 5548  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
01:54:52.0065 5548  THREADORDER - ok
01:54:52.0077 5548  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
01:54:52.0120 5548  TrkWks - ok
01:54:52.0179 5548  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
01:54:52.0206 5548  TrustedInstaller - ok
01:54:52.0216 5548  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
01:54:52.0237 5548  tssecsrv - ok
01:54:52.0244 5548  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
01:54:52.0251 5548  TsUsbFlt - ok
01:54:52.0253 5548  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
01:54:52.0278 5548  TsUsbGD - ok
01:54:52.0310 5548  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
01:54:52.0344 5548  tunnel - ok
01:54:52.0347 5548  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
01:54:52.0354 5548  uagp35 - ok
01:54:52.0370 5548  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
01:54:52.0394 5548  udfs - ok
01:54:52.0401 5548  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
01:54:52.0429 5548  UI0Detect - ok
01:54:52.0446 5548  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
01:54:52.0453 5548  uliagpkx - ok
01:54:52.0466 5548  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
01:54:52.0495 5548  umbus - ok
01:54:52.0509 5548  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys
01:54:52.0524 5548  UmPass - ok
01:54:52.0551 5548  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
01:54:52.0595 5548  upnphost - ok
01:54:52.0634 5548  [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
01:54:52.0654 5548  USBAAPL64 - ok
01:54:52.0704 5548  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
01:54:52.0731 5548  usbaudio - ok
01:54:52.0750 5548  [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
01:54:52.0773 5548  usbccgp - ok
01:54:52.0786 5548  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
01:54:52.0795 5548  usbcir - ok
01:54:52.0809 5548  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
01:54:52.0816 5548  usbehci - ok
01:54:52.0843 5548  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
01:54:52.0854 5548  usbhub - ok
01:54:52.0866 5548  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
01:54:52.0874 5548  usbohci - ok
01:54:52.0886 5548  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\drivers\usbprint.sys
01:54:52.0895 5548  usbprint - ok
01:54:52.0914 5548  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
01:54:52.0933 5548  USBSTOR - ok
01:54:52.0958 5548  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
01:54:52.0977 5548  usbuhci - ok
01:54:52.0997 5548  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
01:54:53.0031 5548  UxSms - ok
01:54:53.0043 5548  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
01:54:53.0050 5548  VaultSvc - ok
01:54:53.0061 5548  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
01:54:53.0067 5548  vdrvroot - ok
01:54:53.0090 5548  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
01:54:53.0117 5548  vds - ok
01:54:53.0129 5548  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
01:54:53.0138 5548  vga - ok
01:54:53.0146 5548  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
01:54:53.0167 5548  VgaSave - ok
01:54:53.0180 5548  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
01:54:53.0189 5548  vhdmp - ok
01:54:53.0191 5548  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
01:54:53.0197 5548  viaide - ok
01:54:53.0208 5548  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
01:54:53.0215 5548  volmgr - ok
01:54:53.0228 5548  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
01:54:53.0239 5548  volmgrx - ok
01:54:53.0256 5548  [ DF8126BD41180351A093A3AD2FC8903B ] volsnap        C:\Windows\system32\drivers\volsnap.sys
01:54:53.0267 5548  volsnap - ok
01:54:53.0281 5548  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
01:54:53.0295 5548  vsmraid - ok
01:54:53.0331 5548  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
01:54:53.0364 5548  VSS - ok
01:54:53.0373 5548  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
01:54:53.0398 5548  vwifibus - ok
01:54:53.0451 5548  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
01:54:53.0462 5548  vwififlt - ok
01:54:53.0500 5548  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
01:54:53.0527 5548  W32Time - ok
01:54:53.0530 5548  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
01:54:53.0564 5548  WacomPen - ok
01:54:53.0600 5548  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
01:54:53.0629 5548  WANARP - ok
01:54:53.0630 5548  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
01:54:53.0650 5548  Wanarpv6 - ok
01:54:53.0706 5548  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
01:54:53.0740 5548  WatAdminSvc - ok
01:54:53.0778 5548  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
01:54:53.0813 5548  wbengine - ok
01:54:53.0832 5548  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
01:54:53.0845 5548  WbioSrvc - ok
01:54:53.0854 5548  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
01:54:53.0880 5548  wcncsvc - ok
01:54:53.0889 5548  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
01:54:53.0926 5548  WcsPlugInService - ok
01:54:53.0928 5548  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys
01:54:53.0934 5548  Wd - ok
01:54:53.0959 5548  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
01:54:53.0974 5548  Wdf01000 - ok
01:54:53.0976 5548  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
01:54:54.0006 5548  WdiServiceHost - ok
01:54:54.0008 5548  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
01:54:54.0019 5548  WdiSystemHost - ok
01:54:54.0042 5548  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
01:54:54.0072 5548  WebClient - ok
01:54:54.0092 5548  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
01:54:54.0130 5548  Wecsvc - ok
01:54:54.0152 5548  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
01:54:54.0182 5548  wercplsupport - ok
01:54:54.0198 5548  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
01:54:54.0221 5548  WerSvc - ok
01:54:54.0246 5548  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
01:54:54.0267 5548  WfpLwf - ok
01:54:54.0289 5548  [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr        C:\Windows\system32\DRIVERS\wimfltr.sys
01:54:54.0298 5548  WimFltr - ok
01:54:54.0300 5548  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
01:54:54.0306 5548  WIMMount - ok
01:54:54.0318 5548  WinDefend - ok
01:54:54.0322 5548  WinHttpAutoProxySvc - ok
01:54:54.0363 5548  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
01:54:54.0387 5548  Winmgmt - ok
01:54:54.0415 5548  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
01:54:54.0456 5548  WinRM - ok
01:54:54.0494 5548  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
01:54:54.0505 5548  WinUsb - ok
01:54:54.0542 5548  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
01:54:54.0575 5548  Wlansvc - ok
01:54:54.0602 5548  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\DRIVERS\wmiacpi.sys
01:54:54.0621 5548  WmiAcpi - ok
01:54:54.0644 5548  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
01:54:54.0670 5548  wmiApSrv - ok
01:54:54.0677 5548  WMPNetworkSvc - ok
01:54:54.0692 5548  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
01:54:54.0701 5548  WPCSvc - ok
01:54:54.0714 5548  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
01:54:54.0725 5548  WPDBusEnum - ok
01:54:54.0734 5548  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
01:54:54.0755 5548  ws2ifsl - ok
01:54:54.0764 5548  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
01:54:54.0777 5548  wscsvc - ok
01:54:54.0779 5548  WSearch - ok
01:54:54.0838 5548  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
01:54:54.0885 5548  wuauserv - ok
01:54:54.0917 5548  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
01:54:54.0932 5548  WudfPf - ok
01:54:54.0965 5548  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
01:54:54.0988 5548  WUDFRd - ok
01:54:55.0015 5548  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
01:54:55.0051 5548  wudfsvc - ok
01:54:55.0067 5548  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
01:54:55.0099 5548  WwanSvc - ok
01:54:55.0132 5548  [ 2EE48CFCE7CA8E0DB4C44C7476C0943B ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys
01:54:55.0138 5548  xusb21 - ok
01:54:55.0153 5548  ================ Scan global ===============================
01:54:55.0169 5548  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
01:54:55.0208 5548  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
01:54:55.0214 5548  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
01:54:55.0235 5548  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
01:54:55.0246 5548  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
01:54:55.0261 5548  [Global] - ok
01:54:55.0262 5548  ================ Scan MBR ==================================
01:54:55.0275 5548  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
01:54:55.0315 5548  \Device\Harddisk0\DR0 - ok
01:54:55.0316 5548  ================ Scan VBR ==================================
01:54:55.0328 5548  [ 7BF5B7732996B0917FB04B82B0C1F8E9 ] \Device\Harddisk0\DR0\Partition1
01:54:55.0337 5548  \Device\Harddisk0\DR0\Partition1 - ok
01:54:55.0343 5548  [ A17F6C2E5B685248163498095679AFAB ] \Device\Harddisk0\DR0\Partition2
01:54:55.0352 5548  \Device\Harddisk0\DR0\Partition2 - ok
01:54:55.0363 5548  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
01:54:55.0371 5548  \Device\Harddisk0\DR0\Partition3 - ok
01:54:55.0375 5548  [ 16DC7DC45DD02825669C5FA30E2DCB86 ] \Device\Harddisk0\DR0\Partition4
01:54:55.0376 5548  \Device\Harddisk0\DR0\Partition4 - ok
01:54:55.0377 5548  [ 8561700E5428EF95F58412DED01CEC83 ] \Device\Harddisk0\DR0\Partition5
01:54:55.0378 5548  \Device\Harddisk0\DR0\Partition5 - ok
01:54:55.0378 5548  ============================================================
01:54:55.0378 5548  Scan finished
01:54:55.0378 5548  ============================================================
01:54:55.0383 5020  Detected object count: 6
01:54:55.0383 5020  Actual detected object count: 6
01:55:22.0494 5020  FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0494 5020  FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:22.0495 5020  FLEXnet Licensing Service 64 ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0495 5020  FLEXnet Licensing Service 64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:22.0495 5020  FreemiumSelfUpdateService ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0495 5020  FreemiumSelfUpdateService ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:22.0496 5020  IAStorDataMgrSvc ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0496 5020  IAStorDataMgrSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:22.0497 5020  SelfUpdateService ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0497 5020  SelfUpdateService ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:22.0497 5020  SystemStoreService ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:22.0497 5020  SystemStoreService ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 01.12.2012 02:12
Ich seh da nichts. Bevor wir dein Windows unnötig weiter verschlimmbessern, denn ohne weiteren erhärtenden Verdachtsmomente macht man auch nicht mal eben eine Blinddarmoperation, daher würde ich mal das vorschlagen:

Ich würde erstmal versuchen rauszufinden, ob das nur unter Windows so ist, oder auch mit anderen Betriebssystemen.

So kann man sehen ob sich da ein Hardwareproblem abzeichnet oder der Fehler eher in der Konfig in Windows und/oder im Dateisystem ist.

Lad dir mal sowas wie Knoppix oder Xubuntu herunter, brenn die iso Datei per Imagebrennfunktion auf eine CD und boote den Rechner davon.
Teste dann mal ausgiebig das System unter Linux und berichte ob es dort normal läuft.

Ummgh23 01.12.2012 02:29
Naja weiss nicht, was mich stutzig macht ist eben dass es nach austausch der grafikkarte besser war und jetzt wieder so losgeht..Naja erstmal geh ich jetzt ins bett.

Nacht! ;)


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:54 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19