Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Trojaner? nur weißer Bilddschirm nach dem booten (https://www.trojaner-board.de/129599-trojaner-nur-weisser-bilddschirm-booten.html)

Klaus_60 15.01.2013 19:59
Trojaner? nur weißer Bilddschirm nach dem booten
 
Hallo,

ich bin neu im Forum und auf Euch gestoßen, weil ich mein Problem bei Euch bereits mehrfach diskutiert und gelöst fand: Nach dem booten meines Notebooks erhalte ich nur einen weißen Bildschirm (Windows 7).

Ich habe bereits versucht:
1) im abgesicherten Modus zu starten - ohne Erfolg, d.h. weißer Bildschirm.
2) auf einen vorigen Wiederherstellungspunkt zurückzusetzen - ohne Erfolg, d.h. weißer Bildschirm

Habe danach von einem zweiten, sauberen System (Windows XP) eine BootCD erstellt mit OTLPENet.exe und versucht von dort aus zu booten. Ergebnis:
REATOGO-X-PE erscheint, Windows startet kurz um dann einen Blue Screen zu zeigen: "A problem has been detected and Windows has been shut down to prevent damage to your computer."

dann war ich ratlos...

Danke schon mal im Voraus
Klaus

markusg 15.01.2013 20:04
Hi
finger weg von der Systemwiederherstellung bei trojaner befall, dass kan schaden anrichten.
2. gehe ins bios, schaue, ob der ide oder ahci mode gewählt ist, konfiguriere jeweils den Gegenteiligen und versuchs erneut mit otl

Klaus_60 15.01.2013 20:31
Hi,

habe im bios den ahci in IDE Mode gewechselt, nun meldet sich der OTL einwandfrei.

markusg 15.01.2013 21:58
hi
lass mal bitte solche zwischen posts weg, einfach bei Fragen bzw erfolg melden, da neue posts an diesen angehangen werden und ich dann so oft hier rein gucken muss

Klaus_60 15.01.2013 22:46
Sorry, dachte ich bekomme weitere Hinweise wie ich weiter vorgehen soll. Hab nun den OTL Scan wie bei einer anderen Antwort gefunden durchgeführt. Allerdings wurde nur eine OTL.txt erstellt, die ich als zip anhänge - keine Extras.txt.

Brauchst du noch weitere Informationen um mein Problem zu bestimmen?

markusg 15.01.2013 22:52
hi
auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:
Code:
:OTL
O20 - AppInit_DLLs: (c:\progra~2\browse~1\23796~1.11\{16cdf~1\browse~1.dll) -  File not found
O20 - HKU\Moni_ON_E Winlogon: Shell - (C:\Users\Moni\AppData\Roaming\skype.dat) - E:\Users\Moni\AppData\Roaming\skype.dat ()
[2013/01/15 12:42:42 | 000,000,004 | ---- | M] () -- E:\Users\Moni\AppData\Roaming\skype.ini
:Files
E:\Users\Moni\AppData\Roaming\skype.dat
:Commands
[Reboot]


dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.


falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)



für eine weitere analyse benötige ich mal folgendes.
e:\Users\name\AppData\LocalLow\Sun\Java\Deployment\cache
dort rechtsklick auf den ordner cache, diesen mit winrar oder einem anderen programm packen, und im upload channel hochladen bitte

Klaus_60 15.01.2013 23:16
habe den Fix mit manuellem Eintrag durchgeführt. Habe die Frage nach reboot zwar bejaht, allerdings führt das System keinen reboot durch.
Kann ich ihn auch mit shut down und manuellem Neustart - ohne die CD - booten? Bekomme ich dann auch die OTL.txt? Oder gibt es eine andere Möglichkeit?

markusg 15.01.2013 23:21
jepp, mal testen bitte

Klaus_60 15.01.2013 23:43
Jetzt bootet Windows gar nicht mehr, bzw. versucht es in einer in einer Endlosschleife.Beim booten mit CD hab ich wieder den vorigen Zustand.
Soll ich evtl. den Fix wiederholen?

Möchte aber keinen Stress machen, muß morgen wieder sehr früh raus. Melde mich morgen wieder

Vielen Dank erst mal und gute Nacht
Klaus

markusg 16.01.2013 19:01
hi,
sorry, stell mal den Modus im Bios wieder um, dann gehts.

Klaus_60 16.01.2013 19:16
Hi,

ja der mode fiel mir auch ein. Habe jetzt mein befallenes System wieder, bootet einwandfrei, wenn auch ein wenig langsam. Allerdings habe ich keine OTL.txt gefunden. Die beiden anderen zip Datein versuche ich gerade hochzuladen, er meckert aber den Link zu meinem Thema an.
Ich gehe mal davon aus, dass der Grund für den weißen Schirm noch nicht beseitigt ist?

hxxp://www.trojaner-board.de/images/smilies/confused.gif

markusg 16.01.2013 20:39
hi
dann mal hier:
File-Upload.net - Ihr kostenloser File Hoster!
hochladen, link als private Nachicht an mich.

Klaus_60 16.01.2013 21:10
sprichst du von den Dateien, die du wolltest? Die habe ich gegen 19:30 h im Uploadchannel wie gewünscht hochgeladen.

Ansonsten müßte ich wissen, was du bauchst.

markusg 16.01.2013 21:12
Hi
is alles da :-)
die beiden Archive kannst du löschen.
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten
c: öffnen, tdsskiller-datum-version.txt öffnen, Inhalt posten

Klaus_60 16.01.2013 21:57
Log aus tdsskiller scan ist über den UploadChannel unterwegs....

markusg 16.01.2013 22:03
hi
logs hier im Thema posten, danke

Klaus_60 16.01.2013 22:19
Hier also das Log aus TDSS

Code:
21:41:48.0102 4584  TDSS rootkit removing tool 2.8.14.0 Oct 30 2012 13:37:33
21:42:09.0365 4584  ============================================================
21:42:09.0365 4584  Current date / time: 2013/01/16 21:42:09.0365
21:42:09.0365 4584  SystemInfo:
21:42:09.0365 4584 
21:42:09.0365 4584  OS Version: 6.1.7600 ServicePack: 0.0
21:42:09.0365 4584  Product type: Workstation
21:42:09.0365 4584  ComputerName: MONI-PC
21:42:09.0365 4584  UserName: Moni
21:42:09.0365 4584  Windows directory: C:\Windows
21:42:09.0365 4584  System windows directory: C:\Windows
21:42:09.0365 4584  Processor architecture: Intel x86
21:42:09.0365 4584  Number of processors: 4
21:42:09.0365 4584  Page size: 0x1000
21:42:09.0365 4584  Boot type: Normal boot
21:42:09.0365 4584  ============================================================
21:42:10.0426 4584  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
21:42:10.0426 4584  ============================================================
21:42:10.0426 4584  \Device\Harddisk0\DR0:
21:42:10.0426 4584  MBR partitions:
21:42:10.0426 4584  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:42:10.0426 4584  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x35152000
21:42:10.0426 4584  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x35184800, BlocksNum 0x5000000
21:42:10.0426 4584  ============================================================
21:42:10.0457 4584  C: <-> \Device\Harddisk0\DR0\Partition2
21:42:10.0535 4584  D: <-> \Device\Harddisk0\DR0\Partition3
21:42:10.0598 4584  ============================================================
21:42:10.0598 4584  Initialize success
21:42:10.0598 4584  ============================================================
21:44:09.0361 2172  ============================================================
21:44:09.0361 2172  Scan started
21:44:09.0361 2172  Mode: Manual;
21:44:09.0361 2172  ============================================================
21:44:09.0735 2172  ================ Scan system memory ========================
21:44:09.0735 2172  System memory - ok
21:44:09.0735 2172  ================ Scan services =============================
21:44:09.0891 2172  0107901358364742mcinstcleanup - ok
21:44:10.0031 2172  [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
21:44:10.0047 2172  1394ohci - ok
21:44:10.0109 2172  [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI            C:\Windows\system32\DRIVERS\ACPI.sys
21:44:10.0125 2172  ACPI - ok
21:44:10.0187 2172  acpiec - ok
21:44:10.0234 2172  [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi        C:\Windows\system32\DRIVERS\acpipmi.sys
21:44:10.0234 2172  AcpiPmi - ok
21:44:10.0359 2172  [ B1EA9681502EE57F87DB71D726288A5B ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
21:44:10.0453 2172  AdobeARMservice - ok
21:44:10.0577 2172  [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:44:10.0577 2172  AdobeFlashPlayerUpdateSvc - ok
21:44:10.0624 2172  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
21:44:10.0655 2172  adp94xx - ok
21:44:10.0687 2172  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
21:44:10.0702 2172  adpahci - ok
21:44:10.0749 2172  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
21:44:10.0765 2172  adpu320 - ok
21:44:10.0811 2172  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
21:44:10.0811 2172  AeLookupSvc - ok
21:44:10.0889 2172  [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD            C:\Windows\system32\drivers\afd.sys
21:44:11.0014 2172  AFD - ok
21:44:11.0061 2172  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\DRIVERS\agp440.sys
21:44:11.0061 2172  agp440 - ok
21:44:11.0123 2172  ahcix86s - ok
21:44:11.0155 2172  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx        C:\Windows\system32\DRIVERS\djsvs.sys
21:44:11.0170 2172  aic78xx - ok
21:44:11.0201 2172  alertservice - ok
21:44:11.0248 2172  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG            C:\Windows\System32\alg.exe
21:44:11.0264 2172  ALG - ok
21:44:11.0295 2172  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\DRIVERS\aliide.sys
21:44:11.0311 2172  aliide - ok
21:44:11.0342 2172  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\DRIVERS\amdagp.sys
21:44:11.0357 2172  amdagp - ok
21:44:11.0373 2172  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\DRIVERS\amdide.sys
21:44:11.0373 2172  amdide - ok
21:44:11.0404 2172  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
21:44:11.0404 2172  AmdK8 - ok
21:44:11.0420 2172  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:44:11.0435 2172  AmdPPM - ok
21:44:11.0467 2172  [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
21:44:11.0607 2172  amdsata - ok
21:44:11.0638 2172  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:44:11.0638 2172  amdsbs - ok
21:44:11.0654 2172  [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
21:44:11.0779 2172  amdxata - ok
21:44:11.0825 2172  appdrv - ok
21:44:11.0857 2172  [ FEB834C02CE1E84B6A38F953CA067706 ] AppID          C:\Windows\system32\drivers\appid.sys
21:44:11.0857 2172  AppID - ok
21:44:11.0888 2172  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:44:11.0888 2172  AppIDSvc - ok
21:44:11.0903 2172  [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo        C:\Windows\System32\appinfo.dll
21:44:11.0919 2172  Appinfo - ok
21:44:11.0950 2172  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc            C:\Windows\system32\DRIVERS\arc.sys
21:44:11.0950 2172  arc - ok
21:44:11.0997 2172  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:44:11.0997 2172  arcsas - ok
21:44:12.0044 2172  ASInsHelp - ok
21:44:12.0106 2172  [ 81E695913FEFD4E23360A69C0F151797 ] aswKbd          C:\Windows\system32\drivers\aswKbd.sys
21:44:12.0247 2172  aswKbd - ok
21:44:12.0293 2172  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:44:12.0293 2172  AsyncMac - ok
21:44:12.0325 2172  [ 338C86357871C167A96AB976519BF59E ] atapi          C:\Windows\system32\DRIVERS\atapi.sys
21:44:12.0325 2172  atapi - ok
21:44:12.0340 2172  atmeltpm - ok
21:44:12.0403 2172  [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:44:12.0418 2172  AudioEndpointBuilder - ok
21:44:12.0434 2172  [ 510C873BFA135AA829F4180352772734 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:44:12.0434 2172  Audiosrv - ok
21:44:12.0449 2172  autostore - ok
21:44:12.0527 2172  [ 728C4A6C722535C16D1025F51AA31E22 ] avmaudio        C:\Windows\system32\DRIVERS\avmaudio.sys
21:44:12.0605 2172  avmaudio - ok
21:44:12.0621 2172  [ 728C4A6C722535C16D1025F51AA31E22 ] avmaura        C:\Windows\system32\DRIVERS\avmaura.sys
21:44:12.0683 2172  avmaura - ok
21:44:12.0730 2172  [ 263CF9D248FD5E020A1333ED4F7EAA88 ] avmeject        C:\Windows\system32\drivers\avmeject.sys
21:44:12.0808 2172  avmeject - ok
21:44:12.0855 2172  [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:44:12.0855 2172  AxInstSV - ok
21:44:12.0902 2172  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbdx.sys
21:44:12.0917 2172  b06bdrv - ok
21:44:12.0949 2172  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
21:44:12.0964 2172  b57nd60x - ok
21:44:13.0027 2172  bb-run - ok
21:44:13.0027 2172  bc_ip_f - ok
21:44:13.0058 2172  bc_pat_f - ok
21:44:13.0089 2172  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:44:13.0105 2172  BDESVC - ok
21:44:13.0151 2172  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:44:13.0151 2172  Beep - ok
21:44:13.0198 2172  [ 53F476476F55A27F580661BDE09C4EC4 ] BITS            C:\Windows\System32\qmgr.dll
21:44:13.0229 2172  BITS - ok
21:44:13.0292 2172  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:44:13.0292 2172  blbdrive - ok
21:44:13.0370 2172  [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:44:13.0448 2172  bowser - ok
21:44:13.0463 2172  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:44:13.0479 2172  BrFiltLo - ok
21:44:13.0495 2172  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:44:13.0495 2172  BrFiltUp - ok
21:44:13.0541 2172  [ A0E691DC6589D4D2CBE373171D1A49E5 ] Browser        C:\Windows\System32\browser.dll
21:44:13.0588 2172  Browser - ok
21:44:13.0619 2172  [ 845B8CE732E67F3B4133164868C666EA ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
21:44:13.0635 2172  Brserid - ok
21:44:13.0651 2172  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:44:13.0666 2172  BrSerWdm - ok
21:44:13.0697 2172  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:44:13.0697 2172  BrUsbMdm - ok
21:44:13.0729 2172  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:44:13.0729 2172  BrUsbSer - ok
21:44:13.0760 2172  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:44:13.0760 2172  BTHMODEM - ok
21:44:13.0791 2172  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv        C:\Windows\system32\bthserv.dll
21:44:13.0807 2172  bthserv - ok
21:44:13.0838 2172  btwaudio - ok
21:44:13.0838 2172  ca-messagequeuing - ok
21:44:13.0885 2172  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:44:13.0900 2172  cdfs - ok
21:44:13.0947 2172  [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
21:44:13.0947 2172  cdrom - ok
21:44:13.0994 2172  [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc    C:\Windows\System32\certprop.dll
21:44:14.0009 2172  CertPropSvc - ok
21:44:14.0072 2172  [ 67B20DA4727F54AEA29FDDAD810C898D ] cfwids          C:\Windows\system32\drivers\cfwids.sys
21:44:14.0165 2172  cfwids - ok
21:44:14.0197 2172  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:44:14.0197 2172  circlass - ok
21:44:14.0228 2172  citrixxteserver - ok
21:44:14.0290 2172  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys
21:44:14.0290 2172  CLFS - ok
21:44:14.0368 2172  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:44:14.0384 2172  clr_optimization_v2.0.50727_32 - ok
21:44:14.0446 2172  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:44:14.0524 2172  clr_optimization_v4.0.30319_32 - ok
21:44:14.0571 2172  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:44:14.0587 2172  CmBatt - ok
21:44:14.0618 2172  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\DRIVERS\cmdide.sys
21:44:14.0618 2172  cmdide - ok
21:44:14.0680 2172  [ DB5E008B3744DD60C8498CBBF2A1CFA6 ] CNG            C:\Windows\system32\Drivers\cng.sys
21:44:14.0789 2172  CNG - ok
21:44:14.0805 2172  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:44:14.0821 2172  Compbatt - ok
21:44:14.0852 2172  [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
21:44:14.0852 2172  CompositeBus - ok
21:44:14.0867 2172  COMSysApp - ok
21:44:14.0883 2172  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
21:44:14.0899 2172  crcdisk - ok
21:44:14.0930 2172  [ F2FDE6C8DBAAD44CC58D1E07E4AF4EED ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:44:14.0992 2172  CryptSvc - ok
21:44:15.0008 2172  crystalaps - ok
21:44:15.0039 2172  [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:44:15.0055 2172  DcomLaunch - ok
21:44:15.0070 2172  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc      C:\Windows\System32\defragsvc.dll
21:44:15.0086 2172  defragsvc - ok
21:44:15.0101 2172  [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:44:15.0117 2172  Dhcp - ok
21:44:15.0179 2172  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys
21:44:15.0179 2172  discache - ok
21:44:15.0226 2172  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:44:15.0226 2172  Disk - ok
21:44:15.0242 2172  dlapoolm - ok
21:44:15.0273 2172  [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:44:15.0335 2172  Dnscache - ok
21:44:15.0367 2172  [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc        C:\Windows\System32\dot3svc.dll
21:44:15.0367 2172  dot3svc - ok
21:44:15.0382 2172  [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS            C:\Windows\system32\dps.dll
21:44:15.0398 2172  DPS - ok
21:44:15.0445 2172  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
21:44:15.0445 2172  drmkaud - ok
21:44:15.0507 2172  [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
21:44:15.0616 2172  DXGKrnl - ok
21:44:15.0647 2172  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost        C:\Windows\System32\eapsvc.dll
21:44:15.0663 2172  EapHost - ok
21:44:15.0772 2172  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv          C:\Windows\system32\DRIVERS\evbdx.sys
21:44:15.0866 2172  ebdrv - ok
21:44:15.0897 2172  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS            C:\Windows\System32\lsass.exe
21:44:15.0975 2172  EFS - ok
21:44:16.0037 2172  [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
21:44:16.0131 2172  ehRecvr - ok
21:44:16.0162 2172  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched        C:\Windows\ehome\ehsched.exe
21:44:16.0162 2172  ehSched - ok
21:44:16.0193 2172  ELmou - ok
21:44:16.0193 2172  elockservice - ok
21:44:16.0240 2172  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
21:44:16.0271 2172  elxstor - ok
21:44:16.0303 2172  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\DRIVERS\errdev.sys
21:44:16.0303 2172  ErrDev - ok
21:44:16.0318 2172  ESMCR - ok
21:44:16.0365 2172  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem    C:\Windows\system32\es.dll
21:44:16.0381 2172  EventSystem - ok
21:44:16.0412 2172  [ 2DC9108D74081149CC8B651D3A26207F ] exfat          C:\Windows\system32\drivers\exfat.sys
21:44:16.0427 2172  exfat - ok
21:44:16.0459 2172  Fabs - ok
21:44:16.0521 2172  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
21:44:16.0537 2172  fastfat - ok
21:44:16.0583 2172  [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax            C:\Windows\system32\fxssvc.exe
21:44:16.0615 2172  Fax - ok
21:44:16.0646 2172  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
21:44:16.0646 2172  fdc - ok
21:44:16.0677 2172  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost        C:\Windows\system32\fdPHost.dll
21:44:16.0677 2172  fdPHost - ok
21:44:16.0693 2172  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll
21:44:16.0693 2172  FDResPub - ok
21:44:16.0739 2172  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:44:16.0755 2172  FileInfo - ok
21:44:16.0771 2172  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
21:44:16.0786 2172  Filetrace - ok
21:44:16.0895 2172  [ FFF1130F7C9FA01D093A1EDFC5CCE8FC ] FirebirdServerMAGIXInstance C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
21:44:17.0145 2172  FirebirdServerMAGIXInstance - ok
21:44:17.0176 2172  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:44:17.0176 2172  flpydisk - ok
21:44:17.0223 2172  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:44:17.0239 2172  FltMgr - ok
21:44:17.0285 2172  [ 7FE4995528A7529A761875151EE3D512 ] FontCache      C:\Windows\system32\FntCache.dll
21:44:17.0379 2172  FontCache - ok
21:44:17.0473 2172  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:44:17.0473 2172  FontCache3.0.0.0 - ok
21:44:17.0519 2172  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
21:44:17.0519 2172  FsDepends - ok
21:44:17.0582 2172  [ BFAAA92861526BB0ADCD01E964AB6609 ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
21:44:17.0722 2172  fssfltr - ok
21:44:17.0831 2172  [ 40CDFAD174B3D5E80F95DDA003C0B97F ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
21:44:17.0956 2172  fsssvc - ok
21:44:18.0050 2172  [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:44:18.0143 2172  Fs_Rec - ok
21:44:18.0190 2172  [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:44:18.0549 2172  fvevol - ok
21:44:18.0611 2172  [ FF12FA487265DA2AC7DE4BE53F72FF1A ] FWLANUSB        C:\Windows\system32\DRIVERS\fwlanusb.sys
21:44:18.0705 2172  FWLANUSB - ok
21:44:18.0736 2172  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:44:18.0736 2172  gagp30kx - ok
21:44:18.0783 2172  [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc          C:\Windows\System32\gpsvc.dll
21:44:18.0814 2172  gpsvc - ok
21:44:18.0908 2172  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate        C:\Program Files\Google\Update\GoogleUpdate.exe
21:44:18.0908 2172  gupdate - ok
21:44:18.0923 2172  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
21:44:18.0939 2172  gupdatem - ok
21:44:18.0970 2172  [ C1B577B2169900F4CF7190C39F085794 ] gusvc          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
21:44:19.0079 2172  gusvc - ok
21:44:19.0111 2172  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:44:19.0126 2172  hcw85cir - ok
21:44:19.0157 2172  [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:44:19.0173 2172  HdAudAddService - ok
21:44:19.0204 2172  [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
21:44:19.0220 2172  HDAudBus - ok
21:44:19.0251 2172  [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI            C:\Windows\system32\DRIVERS\HECI.sys
21:44:19.0391 2172  HECI - ok
21:44:19.0407 2172  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
21:44:19.0407 2172  HidBatt - ok
21:44:19.0438 2172  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:44:19.0454 2172  HidBth - ok
21:44:19.0469 2172  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
21:44:19.0485 2172  HidIr - ok
21:44:19.0516 2172  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv        C:\Windows\system32\hidserv.dll
21:44:19.0516 2172  hidserv - ok
21:44:19.0532 2172  [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:44:19.0532 2172  HidUsb - ok
21:44:19.0594 2172  [ D61E53E3FEC0C92BC8DD3969FAD63F87 ] HipShieldK      C:\Windows\system32\drivers\HipShieldK.sys
21:44:19.0688 2172  HipShieldK - ok
21:44:19.0719 2172  [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:44:19.0719 2172  hkmsvc - ok
21:44:19.0735 2172  [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:44:19.0735 2172  HomeGroupListener - ok
21:44:19.0766 2172  [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:44:19.0781 2172  HomeGroupProvider - ok
21:44:20.0047 2172  [ 8E5DB1D74836355696B6B3FB7C456225 ] HPHNDUSVC      C:\Users\Moni\AppData\Local\Temp\7zS3AD7\HPHNDUSVC.dll
21:44:20.0125 2172  HPHNDUSVC - ok
21:44:20.0281 2172  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\DRIVERS\HpSAMD.sys
21:44:20.0296 2172  HpSAMD - ok
21:44:20.0312 2172  HSXHWBS2 - ok
21:44:20.0359 2172  [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:44:20.0390 2172  HTTP - ok
21:44:20.0405 2172  [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:44:20.0421 2172  hwpolicy - ok
21:44:20.0437 2172  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
21:44:20.0452 2172  i8042prt - ok
21:44:20.0499 2172  [ 26541A068572F650A2FA490726FE81BE ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
21:44:20.0499 2172  iaStor - ok
21:44:20.0608 2172  [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:44:20.0702 2172  IAStorDataMgrSvc - ok
21:44:20.0733 2172  [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
21:44:20.0858 2172  iaStorV - ok
21:44:20.0889 2172  idisw2km - ok
21:44:20.0983 2172  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
21:44:20.0998 2172  IDriverT - ok
21:44:21.0107 2172  [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc          C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:44:21.0154 2172  idsvc - ok
21:44:21.0170 2172  IFP700 - ok
21:44:21.0388 2172  [ 8E9DA2E49347AF49901526DCD4D0F397 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
21:44:21.0747 2172  igfx - ok
21:44:21.0763 2172  [ 4173FF5708F3236CF25195FECD742915 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
21:44:21.0778 2172  iirsp - ok
21:44:21.0809 2172  [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:44:21.0825 2172  IKEEXT - ok
21:44:21.0872 2172  [ E3C36AC5AE87EC970AE8EA2A93D59AE1 ] Impcd          C:\Windows\system32\DRIVERS\Impcd.sys
21:44:21.0997 2172  Impcd - ok
21:44:22.0137 2172  [ 5F9882BA31B7755341BC7773CB1EAD62 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:44:22.0340 2172  IntcAzAudAddService - ok
21:44:22.0387 2172  [ BF31740828A26AB451803E3B35432651 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
21:44:22.0543 2172  IntcDAud - ok
21:44:22.0574 2172  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\DRIVERS\intelide.sys
21:44:22.0574 2172  intelide - ok
21:44:22.0636 2172  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:44:22.0652 2172  intelppm - ok
21:44:22.0699 2172  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
21:44:22.0699 2172  IPBusEnum - ok
21:44:22.0730 2172  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:44:22.0745 2172  IpFilterDriver - ok
21:44:22.0777 2172  [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV        C:\Windows\system32\DRIVERS\IPMIDrv.sys
21:44:22.0777 2172  IPMIDRV - ok
21:44:22.0792 2172  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
21:44:22.0792 2172  IPNAT - ok
21:44:22.0823 2172  ipssvc - ok
21:44:22.0839 2172  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:44:22.0839 2172  IRENUM - ok
21:44:22.0886 2172  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\DRIVERS\isapnp.sys
21:44:22.0886 2172  isapnp - ok
21:44:22.0933 2172  [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys
21:44:22.0933 2172  iScsiPrt - ok
21:44:22.0948 2172  jsdaemon - ok
21:44:23.0011 2172  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:44:23.0011 2172  kbdclass - ok
21:44:23.0042 2172  [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
21:44:23.0057 2172  kbdhid - ok
21:44:23.0073 2172  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso          C:\Windows\system32\lsass.exe
21:44:23.0089 2172  KeyIso - ok
21:44:23.0120 2172  [ 52FC17C8589F11747D01D3CF592673D0 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:44:23.0260 2172  KSecDD - ok
21:44:23.0291 2172  [ 3E5474B03568CFAB834DA3C38E8C9EFA ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
21:44:23.0416 2172  KSecPkg - ok
21:44:23.0447 2172  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm          C:\Windows\system32\msdtckrm.dll
21:44:23.0463 2172  KtmRm - ok
21:44:23.0494 2172  [ 4566FD5F4416E7FEF3600E4B30D086C3 ] L1C            C:\Windows\system32\DRIVERS\L1C62x86.sys
21:44:23.0619 2172  L1C - ok
21:44:23.0635 2172  [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:44:23.0681 2172  LanmanServer - ok
21:44:23.0728 2172  [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:44:23.0744 2172  LanmanWorkstation - ok
21:44:23.0775 2172  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:44:23.0791 2172  lltdio - ok
21:44:23.0822 2172  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
21:44:23.0837 2172  lltdsvc - ok
21:44:23.0853 2172  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts        C:\Windows\System32\lmhsvc.dll
21:44:23.0853 2172  lmhosts - ok
21:44:23.0931 2172  [ 1E2F802846EB944E0333EFEE7C9532A8 ] LMS            C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:44:24.0056 2172  LMS - ok
21:44:24.0087 2172  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:44:24.0103 2172  LSI_FC - ok
21:44:24.0118 2172  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
21:44:24.0134 2172  LSI_SAS - ok
21:44:24.0165 2172  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:44:24.0165 2172  LSI_SAS2 - ok
21:44:24.0196 2172  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:44:24.0196 2172  LSI_SCSI - ok
21:44:24.0243 2172  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv          C:\Windows\system32\drivers\luafv.sys
21:44:24.0259 2172  luafv - ok
21:44:24.0321 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McAfee SiteAdvisor Service C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:24.0415 2172  McAfee SiteAdvisor Service - ok
21:44:24.0493 2172  [ 1A77A98DFF5B43B1C50220E650C89BE6 ] McAWFwk        c:\PROGRA~1\mcafee\msc\mcawfwk.exe
21:44:24.0571 2172  McAWFwk - ok
21:44:24.0664 2172  [ 034606B82FA5BD3E73AB427B6D55F915 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe
21:44:24.0758 2172  McComponentHostService - ok
21:44:24.0805 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McMPFSvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:24.0805 2172  McMPFSvc - ok
21:44:24.0820 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] mcmscsvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:24.0820 2172  mcmscsvc - ok
21:44:24.0836 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McNaiAnn        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:24.0836 2172  McNaiAnn - ok
21:44:24.0867 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McNASvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:24.0867 2172  McNASvc - ok
21:44:24.0929 2172  [ C7DA06C9A9AEEFBE37AAC281EA6385D5 ] McODS          C:\Program Files\McAfee\VirusScan\mcods.exe
21:44:25.0039 2172  McODS - ok
21:44:25.0039 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McOobeSv        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:25.0039 2172  McOobeSv - ok
21:44:25.0039 2172  [ ECAB006AC6136F1307E140B633CDB8C2 ] McProxy        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:44:25.0054 2172  McProxy - ok
21:44:25.0101 2172  [ 6C2D89C52DA8592C57FB0DC7BAB36FF7 ] McShield        C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
21:44:25.0163 2172  McShield - ok
21:44:25.0195 2172  [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
21:44:25.0210 2172  Mcx2Svc - ok
21:44:25.0241 2172  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
21:44:25.0241 2172  megasas - ok
21:44:25.0273 2172  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:44:25.0288 2172  MegaSR - ok
21:44:25.0351 2172  [ BA3004F4C0A0CD19DB9C2C0AB3A84EFE ] mfeapfk        C:\Windows\system32\drivers\mfeapfk.sys
21:44:25.0444 2172  mfeapfk - ok
21:44:25.0475 2172  [ 39C20B7D9AC19BFE616CA09DD3A240AF ] mfeavfk        C:\Windows\system32\drivers\mfeavfk.sys
21:44:25.0553 2172  mfeavfk - ok
21:44:25.0569 2172  mfeavfk01 - ok
21:44:25.0616 2172  [ E3470DECDA0A4015A0CA00ED645F2EBE ] mfebopk        C:\Windows\system32\drivers\mfebopk.sys
21:44:25.0694 2172  mfebopk - ok
21:44:25.0725 2172  [ 4E13EA496E202BCB4FCC342D96FAF83A ] mfefire        C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
21:44:25.0787 2172  mfefire - ok
21:44:25.0834 2172  [ C8AC8147E02ED8795E1FD946165BACCF ] mfefirek        C:\Windows\system32\drivers\mfefirek.sys
21:44:25.0928 2172  mfefirek - ok
21:44:25.0975 2172  [ 7AAF92954D8D2801B17A1163C60ABFE9 ] mfehidk        C:\Windows\system32\drivers\mfehidk.sys
21:44:26.0131 2172  mfehidk - ok
21:44:26.0162 2172  [ 62D55D882D58A1250348F324BC0AFC06 ] mferkdet        C:\Windows\system32\drivers\mferkdet.sys
21:44:26.0224 2172  mferkdet - ok
21:44:26.0240 2172  [ 82B7415D5A8FB24D3F6736400F5E1600 ] mfevtp          C:\Windows\system32\mfevtps.exe
21:44:26.0318 2172  mfevtp - ok
21:44:26.0333 2172  [ 15F92BCD5CB189F5CC7D2F2381F179AC ] mfewfpk        C:\Windows\system32\drivers\mfewfpk.sys
21:44:26.0411 2172  mfewfpk - ok
21:44:26.0489 2172  Microsoft SharePoint Workspace Audit Service - ok
21:44:26.0505 2172  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS          C:\Windows\system32\mmcss.dll
21:44:26.0505 2172  MMCSS - ok
21:44:26.0567 2172  [ F001861E5700EE84E2D4E52C712F4964 ] Modem          C:\Windows\system32\drivers\modem.sys
21:44:26.0583 2172  Modem - ok
21:44:26.0599 2172  [ 79D10964DE86B292320E9DFE02282A23 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
21:44:26.0614 2172  monitor - ok
21:44:26.0645 2172  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:44:26.0645 2172  mouclass - ok
21:44:26.0661 2172  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:44:26.0677 2172  mouhid - ok
21:44:26.0692 2172  [ 921C18727C5920D6C0300736646931C2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:44:26.0708 2172  mountmgr - ok
21:44:26.0755 2172  [ 730A519505621DF46BCBF9CDAC9FB6AD ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
21:44:26.0864 2172  MozillaMaintenance - ok
21:44:26.0895 2172  [ 2AF5997438C55FB79D33D015C30E1974 ] mpio            C:\Windows\system32\DRIVERS\mpio.sys
21:44:26.0895 2172  mpio - ok
21:44:26.0911 2172  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:44:26.0926 2172  mpsdrv - ok
21:44:26.0942 2172  [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:44:26.0942 2172  MRxDAV - ok
21:44:26.0989 2172  [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:44:27.0098 2172  mrxsmb - ok
21:44:27.0145 2172  [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:44:27.0285 2172  mrxsmb10 - ok
21:44:27.0316 2172  [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:44:27.0425 2172  mrxsmb20 - ok
21:44:27.0457 2172  [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci          C:\Windows\system32\DRIVERS\msahci.sys
21:44:27.0457 2172  msahci - ok
21:44:27.0488 2172  [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm          C:\Windows\system32\DRIVERS\msdsm.sys
21:44:27.0488 2172  msdsm - ok
21:44:27.0535 2172  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC          C:\Windows\System32\msdtc.exe
21:44:27.0535 2172  MSDTC - ok
21:44:27.0628 2172  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:44:27.0628 2172  Msfs - ok
21:44:27.0659 2172  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
21:44:27.0675 2172  mshidkmdf - ok
21:44:27.0706 2172  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\DRIVERS\msisadrv.sys
21:44:27.0722 2172  msisadrv - ok
21:44:27.0753 2172  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
21:44:27.0769 2172  MSiSCSI - ok
21:44:27.0769 2172  msiserver - ok
21:44:27.0815 2172  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
21:44:27.0815 2172  MSKSSRV - ok
21:44:27.0831 2172  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:44:27.0847 2172  MSPCLOCK - ok
21:44:27.0862 2172  [ F456E973590D663B1073E9C463B40932 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
21:44:27.0878 2172  MSPQM - ok
21:44:27.0893 2172  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
21:44:27.0909 2172  MsRPC - ok
21:44:27.0956 2172  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
21:44:27.0956 2172  mssmbios - ok
21:44:27.0987 2172  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
21:44:27.0987 2172  MSTEE - ok
21:44:28.0018 2172  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:44:28.0034 2172  MTConfig - ok
21:44:28.0081 2172  [ 159FAD02F64E6381758C990F753BCC80 ] Mup            C:\Windows\system32\Drivers\mup.sys
21:44:28.0081 2172  Mup - ok
21:44:28.0127 2172  [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent        C:\Windows\system32\qagentRT.dll
21:44:28.0127 2172  napagent - ok
21:44:28.0159 2172  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
21:44:28.0159 2172  NativeWifiP - ok
21:44:28.0190 2172  [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:44:28.0221 2172  NDIS - ok
21:44:28.0237 2172  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
21:44:28.0252 2172  NdisCap - ok
21:44:28.0268 2172  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:44:28.0268 2172  NdisTapi - ok
21:44:28.0299 2172  [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
21:44:28.0299 2172  Ndisuio - ok
21:44:28.0346 2172  [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
21:44:28.0361 2172  NdisWan - ok
21:44:28.0377 2172  [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
21:44:28.0377 2172  NDProxy - ok
21:44:28.0393 2172  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
21:44:28.0408 2172  NetBIOS - ok
21:44:28.0439 2172  [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
21:44:28.0455 2172  NetBT - ok
21:44:28.0471 2172  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon        C:\Windows\system32\lsass.exe
21:44:28.0471 2172  Netlogon - ok
21:44:28.0502 2172  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll
21:44:28.0517 2172  Netman - ok
21:44:28.0533 2172  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll
21:44:28.0549 2172  netprofm - ok
21:44:28.0580 2172  [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:44:28.0580 2172  NetTcpPortSharing - ok
21:44:28.0595 2172  NETw5x32 - ok
21:44:28.0627 2172  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
21:44:28.0627 2172  nfrd960 - ok
21:44:28.0627 2172  nimcrpcsu - ok
21:44:28.0658 2172  [ 2226496E34BD40734946A054B1CD657F ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:44:28.0673 2172  NlaSvc - ok
21:44:28.0689 2172  nmraapache - ok
21:44:28.0751 2172  [ 7AEA4DF1CA68FD45DD4BBE1F0243CE7F ] NMSAccess      C:\Program Files\CDBurnerXP\NMSAccessU.exe
21:44:28.0845 2172  NMSAccess - ok
21:44:28.0907 2172  [ B0A67DE1A128389AEA4D42C5A56215FD ] nmwcd          C:\Windows\system32\drivers\ccdcmb.sys
21:44:29.0032 2172  nmwcd - ok
21:44:29.0079 2172  [ 025C54F9F8C8BC1894EA38529C742C54 ] nmwcdc          C:\Windows\system32\drivers\ccdcmbo.sys
21:44:29.0173 2172  nmwcdc - ok
21:44:29.0219 2172  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:44:29.0235 2172  Npfs - ok
21:44:29.0235 2172  NPPTNT - ok
21:44:29.0282 2172  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi            C:\Windows\system32\nsisvc.dll
21:44:29.0282 2172  nsi - ok
21:44:29.0297 2172  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:44:29.0313 2172  nsiproxy - ok
21:44:29.0391 2172  [ 5126C5402C730C2A953275D8497A4715 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:44:29.0500 2172  Ntfs - ok
21:44:29.0516 2172  Scan interrupted by user!
21:44:29.0516 2172  ================ Scan global ===============================
21:44:29.0516 2172  Scan interrupted by user!
21:44:29.0516 2172  ================ Scan MBR ==================================
21:44:29.0516 2172  Scan interrupted by user!
21:44:29.0516 2172  ================ Scan VBR ==================================
21:44:29.0516 2172  Scan interrupted by user!
21:44:29.0516 2172  ============================================================
21:44:29.0516 2172  Scan finished
21:44:29.0516 2172  ============================================================
21:44:29.0531 5524  Detected object count: 0
21:44:29.0531 5524  Actual detected object count: 0
21:44:52.0011 1284  ============================================================
21:44:52.0011 1284  Scan started
21:44:52.0011 1284  Mode: Manual; SigCheck; TDLFS;
21:44:52.0011 1284  ============================================================
21:44:52.0198 1284  ================ Scan system memory ========================
21:44:52.0198 1284  System memory - ok
21:44:52.0198 1284  ================ Scan services =============================
21:44:52.0307 1284  0107901358364742mcinstcleanup - ok
21:44:52.0432 1284  [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
21:44:52.0619 1284  1394ohci - ok
21:44:52.0651 1284  [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI            C:\Windows\system32\DRIVERS\ACPI.sys
21:44:52.0682 1284  ACPI - ok
21:44:52.0697 1284  acpiec - ok
21:44:52.0729 1284  [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi        C:\Windows\system32\DRIVERS\acpipmi.sys
21:44:52.0807 1284  AcpiPmi - ok
21:44:52.0885 1284  [ B1EA9681502EE57F87DB71D726288A5B ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
21:44:52.0916 1284  AdobeARMservice - ok
21:44:52.0994 1284  [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
21:44:53.0025 1284  AdobeFlashPlayerUpdateSvc - ok
21:44:53.0072 1284  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
21:44:53.0119 1284  adp94xx - ok
21:44:53.0197 1284  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
21:44:53.0243 1284  adpahci - ok
21:44:53.0275 1284  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
21:44:53.0306 1284  adpu320 - ok
21:44:53.0337 1284  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
21:44:53.0431 1284  AeLookupSvc - ok
21:44:53.0477 1284  [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD            C:\Windows\system32\drivers\afd.sys
21:44:53.0524 1284  AFD - ok
21:44:53.0555 1284  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\DRIVERS\agp440.sys
21:44:53.0571 1284  agp440 - ok
21:44:53.0587 1284  ahcix86s - ok
21:44:53.0602 1284  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx        C:\Windows\system32\DRIVERS\djsvs.sys
21:44:53.0618 1284  aic78xx - ok
21:44:53.0633 1284  alertservice - ok
21:44:53.0665 1284  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG            C:\Windows\System32\alg.exe
21:44:53.0789 1284  ALG - ok
21:44:53.0836 1284  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\DRIVERS\aliide.sys
21:44:53.0852 1284  aliide - ok
21:44:53.0930 1284  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\DRIVERS\amdagp.sys
21:44:53.0945 1284  amdagp - ok
21:44:53.0977 1284  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\DRIVERS\amdide.sys
21:44:54.0008 1284  amdide - ok
21:44:54.0023 1284  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
21:44:54.0070 1284  AmdK8 - ok
21:44:54.0117 1284  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:44:54.0179 1284  AmdPPM - ok
21:44:54.0242 1284  [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
21:44:54.0273 1284  amdsata - ok
21:44:54.0304 1284  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:44:54.0335 1284  amdsbs - ok
21:44:54.0351 1284  [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
21:44:54.0367 1284  amdxata - ok
21:44:54.0382 1284  appdrv - ok
21:44:54.0413 1284  [ FEB834C02CE1E84B6A38F953CA067706 ] AppID          C:\Windows\system32\drivers\appid.sys
21:44:54.0476 1284  AppID - ok
21:44:54.0523 1284  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:44:54.0616 1284  AppIDSvc - ok
21:44:54.0647 1284  [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo        C:\Windows\System32\appinfo.dll
21:44:54.0757 1284  Appinfo - ok
21:44:54.0850 1284  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc            C:\Windows\system32\DRIVERS\arc.sys
21:44:54.0881 1284  arc - ok
21:44:54.0928 1284  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:44:54.0959 1284  arcsas - ok
21:44:54.0959 1284  ASInsHelp - ok
21:44:54.0991 1284  [ 81E695913FEFD4E23360A69C0F151797 ] aswKbd          C:\Windows\system32\drivers\aswKbd.sys
21:44:55.0022 1284  aswKbd - ok
21:44:55.0037 1284  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:44:55.0147 1284  AsyncMac - ok
21:44:55.0178 1284  [ 338C86357871C167A96AB976519BF59E ] atapi          C:\Windows\system32\DRIVERS\atapi.sys
21:44:55.0193 1284  atapi - ok
21:44:55.0193 1284  atmeltpm - ok
21:44:55.0240 1284  [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:44:55.0365 1284  AudioEndpointBuilder - ok
21:44:55.0396 1284  [ 510C873BFA135AA829F4180352772734 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:44:55.0443 1284  Audiosrv - ok
21:44:55.0443 1284  autostore - ok
21:44:55.0474 1284  [ 728C4A6C722535C16D1025F51AA31E22 ] avmaudio        C:\Windows\system32\DRIVERS\avmaudio.sys
21:44:55.0521 1284  avmaudio - ok
21:44:55.0552 1284  [ 728C4A6C722535C16D1025F51AA31E22 ] avmaura        C:\Windows\system32\DRIVERS\avmaura.sys
21:44:55.0583 1284  avmaura - ok
21:44:55.0599 1284  [ 263CF9D248FD5E020A1333ED4F7EAA88 ] avmeject        C:\Windows\system32\drivers\avmeject.sys
21:44:55.0646 1284  avmeject ( UnsignedFile.Multi.Generic ) - warning
21:44:55.0646 1284  avmeject - detected UnsignedFile.Multi.Generic (1)
21:44:55.0693 1284  [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:44:55.0802 1284  AxInstSV - ok
21:44:55.0849 1284  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbdx.sys
21:44:55.0927 1284  b06bdrv - ok
21:44:55.0989 1284  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
21:44:56.0083 1284  b57nd60x - ok
21:44:56.0098 1284  bb-run - ok
21:44:56.0098 1284  bc_ip_f - ok
21:44:56.0114 1284  bc_pat_f - ok
21:44:56.0161 1284  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:44:56.0239 1284  BDESVC - ok
21:44:56.0254 1284  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:44:56.0363 1284  Beep - ok
21:44:56.0410 1284  [ 53F476476F55A27F580661BDE09C4EC4 ] BITS            C:\Windows\System32\qmgr.dll
21:44:56.0535 1284  BITS - ok
21:44:56.0582 1284  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:44:56.0613 1284  blbdrive - ok
21:44:56.0629 1284  [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:44:56.0707 1284  bowser - ok
21:44:56.0738 1284  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:44:56.0800 1284  BrFiltLo - ok
21:44:56.0816 1284  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:44:56.0863 1284  BrFiltUp - ok
21:44:56.0894 1284  [ A0E691DC6589D4D2CBE373171D1A49E5 ] Browser        C:\Windows\System32\browser.dll
21:44:57.0003 1284  Browser - ok
21:44:57.0034 1284  [ 845B8CE732E67F3B4133164868C666EA ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
21:44:57.0128 1284  Brserid - ok
21:44:57.0159 1284  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:44:57.0206 1284  BrSerWdm - ok
21:44:57.0253 1284  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:44:57.0299 1284  BrUsbMdm - ok
21:44:57.0331 1284  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:44:57.0377 1284  BrUsbSer - ok
21:44:57.0393 1284  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:44:57.0440 1284  BTHMODEM - ok
21:44:57.0502 1284  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv        C:\Windows\system32\bthserv.dll
21:44:57.0580 1284  bthserv - ok
21:44:57.0580 1284  btwaudio - ok
21:44:57.0596 1284  ca-messagequeuing - ok
21:44:57.0627 1284  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:44:57.0674 1284  cdfs - ok
21:44:57.0721 1284  [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
21:44:57.0767 1284  cdrom - ok
21:44:57.0799 1284  [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc    C:\Windows\System32\certprop.dll
21:44:57.0877 1284  CertPropSvc - ok
21:44:57.0908 1284  [ 67B20DA4727F54AEA29FDDAD810C898D ] cfwids          C:\Windows\system32\drivers\cfwids.sys
21:44:57.0939 1284  cfwids - ok
21:44:57.0970 1284  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:44:58.0017 1284  circlass - ok
21:44:58.0033 1284  citrixxteserver - ok
21:44:58.0079 1284  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys
21:44:58.0111 1284  CLFS - ok
21:44:58.0189 1284  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:44:58.0220 1284  clr_optimization_v2.0.50727_32 - ok
21:44:58.0282 1284  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:44:58.0313 1284  clr_optimization_v4.0.30319_32 - ok
21:44:58.0345 1284  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:44:58.0391 1284  CmBatt - ok
21:44:58.0423 1284  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\DRIVERS\cmdide.sys
21:44:58.0438 1284  cmdide - ok
21:44:58.0485 1284  [ DB5E008B3744DD60C8498CBBF2A1CFA6 ] CNG            C:\Windows\system32\Drivers\cng.sys
21:44:58.0516 1284  CNG - ok
21:44:58.0547 1284  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:44:58.0563 1284  Compbatt - ok
21:44:58.0579 1284  [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
21:44:58.0625 1284  CompositeBus - ok
21:44:58.0641 1284  COMSysApp - ok
21:44:58.0657 1284  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
21:44:58.0688 1284  crcdisk - ok
21:44:58.0719 1284  [ F2FDE6C8DBAAD44CC58D1E07E4AF4EED ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:44:58.0813 1284  CryptSvc - ok
21:44:58.0813 1284  crystalaps - ok
21:44:58.0844 1284  [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:44:58.0953 1284  DcomLaunch - ok
21:44:58.0984 1284  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc      C:\Windows\System32\defragsvc.dll
21:44:59.0078 1284  defragsvc - ok
21:44:59.0093 1284  [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:44:59.0125 1284  Dhcp - ok
21:44:59.0156 1284  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys
21:44:59.0249 1284  discache - ok
21:44:59.0265 1284  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:44:59.0296 1284  Disk - ok
21:44:59.0312 1284  dlapoolm - ok
21:44:59.0343 1284  [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:44:59.0405 1284  Dnscache - ok
21:44:59.0437 1284  [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc        C:\Windows\System32\dot3svc.dll
21:44:59.0499 1284  dot3svc - ok
21:44:59.0530 1284  [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS            C:\Windows\system32\dps.dll
21:44:59.0608 1284  DPS - ok
21:44:59.0639 1284  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
21:44:59.0686 1284  drmkaud - ok
21:44:59.0733 1284  [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
21:44:59.0780 1284  DXGKrnl - ok
21:44:59.0811 1284  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost        C:\Windows\System32\eapsvc.dll
21:44:59.0905 1284  EapHost - ok
21:45:00.0014 1284  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv          C:\Windows\system32\DRIVERS\evbdx.sys
21:45:00.0107 1284  ebdrv - ok
21:45:00.0139 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS            C:\Windows\System32\lsass.exe
21:45:00.0217 1284  EFS - ok
21:45:00.0279 1284  [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
21:45:00.0373 1284  ehRecvr - ok
21:45:00.0388 1284  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched        C:\Windows\ehome\ehsched.exe
21:45:00.0466 1284  ehSched - ok
21:45:00.0466 1284  ELmou - ok
21:45:00.0482 1284  elockservice - ok
21:45:00.0529 1284  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
21:45:00.0560 1284  elxstor - ok
21:45:00.0591 1284  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\DRIVERS\errdev.sys
21:45:00.0638 1284  ErrDev - ok
21:45:00.0653 1284  ESMCR - ok
21:45:00.0685 1284  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem    C:\Windows\system32\es.dll
21:45:00.0763 1284  EventSystem - ok
21:45:00.0794 1284  [ 2DC9108D74081149CC8B651D3A26207F ] exfat          C:\Windows\system32\drivers\exfat.sys
21:45:00.0887 1284  exfat - ok
21:45:00.0934 1284  Fabs - ok
21:45:00.0950 1284  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
21:45:01.0012 1284  fastfat - ok
21:45:01.0059 1284  [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax            C:\Windows\system32\fxssvc.exe
21:45:01.0153 1284  Fax - ok
21:45:01.0168 1284  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
21:45:01.0231 1284  fdc - ok
21:45:01.0262 1284  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost        C:\Windows\system32\fdPHost.dll
21:45:01.0324 1284  fdPHost - ok
21:45:01.0340 1284  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll
21:45:01.0402 1284  FDResPub - ok
21:45:01.0433 1284  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:45:01.0465 1284  FileInfo - ok
21:45:01.0465 1284  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
21:45:01.0527 1284  Filetrace - ok
21:45:01.0636 1284  [ FFF1130F7C9FA01D093A1EDFC5CCE8FC ] FirebirdServerMAGIXInstance C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
21:45:01.0699 1284  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
21:45:01.0699 1284  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
21:45:01.0730 1284  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:45:01.0777 1284  flpydisk - ok
21:45:01.0808 1284  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:45:01.0839 1284  FltMgr - ok
21:45:01.0886 1284  [ 7FE4995528A7529A761875151EE3D512 ] FontCache      C:\Windows\system32\FntCache.dll
21:45:01.0995 1284  FontCache - ok
21:45:02.0057 1284  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:45:02.0073 1284  FontCache3.0.0.0 - ok
21:45:02.0135 1284  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
21:45:02.0167 1284  FsDepends - ok
21:45:02.0198 1284  [ BFAAA92861526BB0ADCD01E964AB6609 ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
21:45:02.0213 1284  fssfltr - ok
21:45:02.0291 1284  [ 40CDFAD174B3D5E80F95DDA003C0B97F ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
21:45:02.0354 1284  fsssvc - ok
21:45:02.0369 1284  [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:45:02.0385 1284  Fs_Rec - ok
21:45:02.0416 1284  [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:45:02.0432 1284  fvevol - ok
21:45:02.0479 1284  [ FF12FA487265DA2AC7DE4BE53F72FF1A ] FWLANUSB        C:\Windows\system32\DRIVERS\fwlanusb.sys
21:45:02.0541 1284  FWLANUSB - ok
21:45:02.0572 1284  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:45:02.0603 1284  gagp30kx - ok
21:45:02.0650 1284  [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc          C:\Windows\System32\gpsvc.dll
21:45:02.0713 1284  gpsvc - ok
21:45:02.0791 1284  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate        C:\Program Files\Google\Update\GoogleUpdate.exe
21:45:02.0822 1284  gupdate - ok
21:45:02.0837 1284  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
21:45:02.0853 1284  gupdatem - ok
21:45:02.0884 1284  [ C1B577B2169900F4CF7190C39F085794 ] gusvc          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
21:45:02.0915 1284  gusvc - ok
21:45:02.0931 1284  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:45:02.0993 1284  hcw85cir - ok
21:45:03.0040 1284  [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:45:03.0087 1284  HdAudAddService - ok
21:45:03.0103 1284  [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
21:45:03.0149 1284  HDAudBus - ok
21:45:03.0181 1284  [ A88485DC6A7136C10D9A6C7E38FDFE3C ] HECI            C:\Windows\system32\DRIVERS\HECI.sys
21:45:03.0243 1284  HECI - ok
21:45:03.0259 1284  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
21:45:03.0305 1284  HidBatt - ok
21:45:03.0337 1284  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:45:03.0383 1284  HidBth - ok
21:45:03.0430 1284  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
21:45:03.0477 1284  HidIr - ok
21:45:03.0524 1284  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv        C:\Windows\system32\hidserv.dll
21:45:03.0571 1284  hidserv - ok
21:45:03.0617 1284  [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:45:03.0664 1284  HidUsb - ok
21:45:03.0695 1284  [ D61E53E3FEC0C92BC8DD3969FAD63F87 ] HipShieldK      C:\Windows\system32\drivers\HipShieldK.sys
21:45:03.0711 1284  HipShieldK - ok
21:45:03.0742 1284  [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:45:03.0805 1284  hkmsvc - ok
21:45:03.0820 1284  [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:45:03.0883 1284  HomeGroupListener - ok
21:45:03.0914 1284  [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:45:03.0961 1284  HomeGroupProvider - ok
21:45:04.0210 1284  [ 8E5DB1D74836355696B6B3FB7C456225 ] HPHNDUSVC      C:\Users\Moni\AppData\Local\Temp\7zS3AD7\HPHNDUSVC.dll
21:45:04.0226 1284  HPHNDUSVC - ok
21:45:04.0397 1284  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\DRIVERS\HpSAMD.sys
21:45:04.0429 1284  HpSAMD - ok
21:45:04.0429 1284  HSXHWBS2 - ok
21:45:04.0475 1284  [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:45:04.0569 1284  HTTP - ok
21:45:04.0600 1284  [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:45:04.0600 1284  hwpolicy - ok
21:45:04.0631 1284  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
21:45:04.0678 1284  i8042prt - ok
21:45:04.0725 1284  [ 26541A068572F650A2FA490726FE81BE ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
21:45:04.0756 1284  iaStor - ok
21:45:04.0850 1284  [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:45:04.0865 1284  IAStorDataMgrSvc - ok
21:45:04.0912 1284  [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
21:45:04.0943 1284  iaStorV - ok
21:45:04.0943 1284  idisw2km - ok
21:45:05.0021 1284  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
21:45:05.0037 1284  IDriverT ( UnsignedFile.Multi.Generic ) - warning
21:45:05.0037 1284  IDriverT - detected UnsignedFile.Multi.Generic (1)
21:45:05.0162 1284  [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc          C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:45:05.0224 1284  idsvc - ok
21:45:05.0224 1284  IFP700 - ok
21:45:05.0474 1284  [ 8E9DA2E49347AF49901526DCD4D0F397 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
21:45:05.0708 1284  igfx - ok
21:45:05.0739 1284  [ 4173FF5708F3236CF25195FECD742915 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
21:45:05.0770 1284  iirsp - ok
21:45:05.0817 1284  [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:45:05.0895 1284  IKEEXT - ok
21:45:05.0926 1284  [ E3C36AC5AE87EC970AE8EA2A93D59AE1 ] Impcd          C:\Windows\system32\DRIVERS\Impcd.sys
21:45:05.0973 1284  Impcd - ok
21:45:06.0098 1284  [ 5F9882BA31B7755341BC7773CB1EAD62 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:45:06.0176 1284  IntcAzAudAddService - ok
21:45:06.0191 1284  [ BF31740828A26AB451803E3B35432651 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
21:45:06.0269 1284  IntcDAud - ok
21:45:06.0285 1284  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\DRIVERS\intelide.sys
21:45:06.0316 1284  intelide - ok
21:45:06.0347 1284  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:45:06.0394 1284  intelppm - ok
21:45:06.0425 1284  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
21:45:06.0503 1284  IPBusEnum - ok
21:45:06.0535 1284  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:45:06.0613 1284  IpFilterDriver - ok
21:45:06.0644 1284  [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV        C:\Windows\system32\DRIVERS\IPMIDrv.sys
21:45:06.0706 1284  IPMIDRV - ok
21:45:06.0722 1284  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
21:45:06.0800 1284  IPNAT - ok
21:45:06.0800 1284  ipssvc - ok
21:45:06.0831 1284  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:45:06.0878 1284  IRENUM - ok
21:45:06.0925 1284  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\DRIVERS\isapnp.sys
21:45:06.0956 1284  isapnp - ok
21:45:06.0987 1284  [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys
21:45:07.0018 1284  iScsiPrt - ok
21:45:07.0018 1284  jsdaemon - ok
21:45:07.0034 1284  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:45:07.0065 1284  kbdclass - ok
21:45:07.0096 1284  [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
21:45:07.0143 1284  kbdhid - ok
21:45:07.0174 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso          C:\Windows\system32\lsass.exe
21:45:07.0205 1284  KeyIso - ok
21:45:07.0237 1284  [ 52FC17C8589F11747D01D3CF592673D0 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:45:07.0268 1284  KSecDD - ok
21:45:07.0299 1284  [ 3E5474B03568CFAB834DA3C38E8C9EFA ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
21:45:07.0330 1284  KSecPkg - ok
21:45:07.0361 1284  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm          C:\Windows\system32\msdtckrm.dll
21:45:07.0439 1284  KtmRm - ok
21:45:07.0471 1284  [ 4566FD5F4416E7FEF3600E4B30D086C3 ] L1C            C:\Windows\system32\DRIVERS\L1C62x86.sys
21:45:07.0502 1284  L1C - ok
21:45:07.0533 1284  [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:45:07.0595 1284  LanmanServer - ok
21:45:07.0642 1284  [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:45:07.0705 1284  LanmanWorkstation - ok
21:45:07.0751 1284  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:45:07.0829 1284  lltdio - ok
21:45:07.0876 1284  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
21:45:07.0939 1284  lltdsvc - ok
21:45:07.0954 1284  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts        C:\Windows\System32\lmhsvc.dll
21:45:08.0048 1284  lmhosts - ok
21:45:08.0110 1284  [ 1E2F802846EB944E0333EFEE7C9532A8 ] LMS            C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:45:08.0141 1284  LMS - ok
21:45:08.0173 1284  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:45:08.0204 1284  LSI_FC - ok
21:45:08.0251 1284  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
21:45:08.0282 1284  LSI_SAS - ok
21:45:08.0297 1284  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:45:08.0329 1284  LSI_SAS2 - ok
21:45:08.0360 1284  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:45:08.0375 1284  LSI_SCSI - ok
21:45:08.0422 1284  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv          C:\Windows\system32\drivers\luafv.sys
21:45:08.0485 1284  luafv - ok
21:45:08.0547 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McAfee SiteAdvisor Service C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0578 1284  McAfee SiteAdvisor Service - ok
21:45:08.0656 1284  [ 1A77A98DFF5B43B1C50220E650C89BE6 ] McAWFwk        c:\PROGRA~1\mcafee\msc\mcawfwk.exe
21:45:08.0672 1284  McAWFwk - ok
21:45:08.0750 1284  [ 034606B82FA5BD3E73AB427B6D55F915 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe
21:45:08.0781 1284  McComponentHostService - ok
21:45:08.0797 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McMPFSvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0812 1284  McMPFSvc - ok
21:45:08.0828 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] mcmscsvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0843 1284  mcmscsvc - ok
21:45:08.0843 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McNaiAnn        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0859 1284  McNaiAnn - ok
21:45:08.0875 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McNASvc        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0890 1284  McNASvc - ok
21:45:08.0953 1284  [ C7DA06C9A9AEEFBE37AAC281EA6385D5 ] McODS          C:\Program Files\McAfee\VirusScan\mcods.exe
21:45:08.0984 1284  McODS - ok
21:45:08.0984 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McOobeSv        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:08.0999 1284  McOobeSv - ok
21:45:09.0015 1284  [ ECAB006AC6136F1307E140B633CDB8C2 ] McProxy        C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
21:45:09.0031 1284  McProxy - ok
21:45:09.0077 1284  [ 6C2D89C52DA8592C57FB0DC7BAB36FF7 ] McShield        C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
21:45:09.0093 1284  McShield - ok
21:45:09.0124 1284  [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
21:45:09.0171 1284  Mcx2Svc - ok
21:45:09.0202 1284  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
21:45:09.0233 1284  megasas - ok
21:45:09.0265 1284  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:45:09.0296 1284  MegaSR - ok
21:45:09.0327 1284  [ BA3004F4C0A0CD19DB9C2C0AB3A84EFE ] mfeapfk        C:\Windows\system32\drivers\mfeapfk.sys
21:45:09.0343 1284  mfeapfk - ok
21:45:09.0374 1284  [ 39C20B7D9AC19BFE616CA09DD3A240AF ] mfeavfk        C:\Windows\system32\drivers\mfeavfk.sys
21:45:09.0390 1284  mfeavfk - ok
21:45:09.0390 1284  mfeavfk01 - ok
21:45:09.0405 1284  [ E3470DECDA0A4015A0CA00ED645F2EBE ] mfebopk        C:\Windows\system32\drivers\mfebopk.sys
21:45:09.0421 1284  mfebopk - ok
21:45:09.0452 1284  [ 4E13EA496E202BCB4FCC342D96FAF83A ] mfefire        C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
21:45:09.0483 1284  mfefire - ok
21:45:09.0514 1284  [ C8AC8147E02ED8795E1FD946165BACCF ] mfefirek        C:\Windows\system32\drivers\mfefirek.sys
21:45:09.0546 1284  mfefirek - ok
21:45:09.0561 1284  [ 7AAF92954D8D2801B17A1163C60ABFE9 ] mfehidk        C:\Windows\system32\drivers\mfehidk.sys
21:45:09.0592 1284  mfehidk - ok
21:45:09.0608 1284  [ 62D55D882D58A1250348F324BC0AFC06 ] mferkdet        C:\Windows\system32\drivers\mferkdet.sys
21:45:09.0624 1284  mferkdet - ok
21:45:09.0639 1284  [ 82B7415D5A8FB24D3F6736400F5E1600 ] mfevtp          C:\Windows\system32\mfevtps.exe
21:45:09.0655 1284  mfevtp - ok
21:45:09.0686 1284  [ 15F92BCD5CB189F5CC7D2F2381F179AC ] mfewfpk        C:\Windows\system32\drivers\mfewfpk.sys
21:45:09.0702 1284  mfewfpk - ok
21:45:09.0764 1284  Microsoft SharePoint Workspace Audit Service - ok
21:45:09.0780 1284  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS          C:\Windows\system32\mmcss.dll
21:45:09.0858 1284  MMCSS - ok
21:45:09.0904 1284  [ F001861E5700EE84E2D4E52C712F4964 ] Modem          C:\Windows\system32\drivers\modem.sys
21:45:09.0982 1284  Modem - ok
21:45:10.0014 1284  [ 79D10964DE86B292320E9DFE02282A23 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
21:45:10.0076 1284  monitor - ok
21:45:10.0092 1284  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:45:10.0123 1284  mouclass - ok
21:45:10.0138 1284  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:45:10.0185 1284  mouhid - ok
21:45:10.0232 1284  [ 921C18727C5920D6C0300736646931C2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:45:10.0263 1284  mountmgr - ok
21:45:10.0310 1284  [ 730A519505621DF46BCBF9CDAC9FB6AD ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
21:45:10.0341 1284  MozillaMaintenance - ok
21:45:10.0372 1284  [ 2AF5997438C55FB79D33D015C30E1974 ] mpio            C:\Windows\system32\DRIVERS\mpio.sys
21:45:10.0388 1284  mpio - ok
21:45:10.0419 1284  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:45:10.0482 1284  mpsdrv - ok
21:45:10.0497 1284  [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:45:10.0544 1284  MRxDAV - ok
21:45:10.0591 1284  [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:45:10.0669 1284  mrxsmb - ok
21:45:10.0716 1284  [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:45:10.0778 1284  mrxsmb10 - ok
21:45:10.0825 1284  [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:45:10.0856 1284  mrxsmb20 - ok
21:45:10.0903 1284  [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci          C:\Windows\system32\DRIVERS\msahci.sys
21:45:10.0918 1284  msahci - ok
21:45:10.0950 1284  [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm          C:\Windows\system32\DRIVERS\msdsm.sys
21:45:10.0981 1284  msdsm - ok
21:45:10.0996 1284  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC          C:\Windows\System32\msdtc.exe
21:45:11.0028 1284  MSDTC - ok
21:45:11.0059 1284  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:45:11.0137 1284  Msfs - ok
21:45:11.0152 1284  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
21:45:11.0215 1284  mshidkmdf - ok
21:45:11.0246 1284  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\DRIVERS\msisadrv.sys
21:45:11.0246 1284  msisadrv - ok
21:45:11.0277 1284  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
21:45:11.0355 1284  MSiSCSI - ok
21:45:11.0371 1284  msiserver - ok
21:45:11.0386 1284  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
21:45:11.0433 1284  MSKSSRV - ok
21:45:11.0449 1284  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:45:11.0527 1284  MSPCLOCK - ok
21:45:11.0558 1284  [ F456E973590D663B1073E9C463B40932 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
21:45:11.0620 1284  MSPQM - ok
21:45:11.0636 1284  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
21:45:11.0667 1284  MsRPC - ok
21:45:11.0698 1284  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
21:45:11.0714 1284  mssmbios - ok
21:45:11.0730 1284  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
21:45:11.0808 1284  MSTEE - ok
21:45:11.0839 1284  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:45:11.0886 1284  MTConfig - ok
21:45:11.0901 1284  [ 159FAD02F64E6381758C990F753BCC80 ] Mup            C:\Windows\system32\Drivers\mup.sys
21:45:11.0917 1284  Mup - ok
21:45:11.0964 1284  [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent        C:\Windows\system32\qagentRT.dll
21:45:12.0042 1284  napagent - ok
21:45:12.0073 1284  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
21:45:12.0151 1284  NativeWifiP - ok
21:45:12.0182 1284  [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:45:12.0229 1284  NDIS - ok
21:45:12.0244 1284  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
21:45:12.0307 1284  NdisCap - ok
21:45:12.0338 1284  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:45:12.0369 1284  NdisTapi - ok
21:45:12.0385 1284  [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
21:45:12.0463 1284  Ndisuio - ok
21:45:12.0494 1284  [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
21:45:12.0556 1284  NdisWan - ok
21:45:12.0588 1284  [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
21:45:12.0650 1284  NDProxy - ok
21:45:12.0666 1284  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
21:45:12.0697 1284  NetBIOS - ok
21:45:12.0712 1284  [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
21:45:12.0775 1284  NetBT - ok
21:45:12.0790 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon        C:\Windows\system32\lsass.exe
21:45:12.0806 1284  Netlogon - ok
21:45:12.0837 1284  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll
21:45:12.0900 1284  Netman - ok
21:45:12.0915 1284  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll
21:45:12.0962 1284  netprofm - ok
21:45:13.0009 1284  [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:45:13.0024 1284  NetTcpPortSharing - ok
21:45:13.0024 1284  NETw5x32 - ok
21:45:13.0056 1284  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
21:45:13.0071 1284  nfrd960 - ok
21:45:13.0071 1284  nimcrpcsu - ok
21:45:13.0087 1284  [ 2226496E34BD40734946A054B1CD657F ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:45:13.0118 1284  NlaSvc - ok
21:45:13.0134 1284  nmraapache - ok
21:45:13.0180 1284  [ 7AEA4DF1CA68FD45DD4BBE1F0243CE7F ] NMSAccess      C:\Program Files\CDBurnerXP\NMSAccessU.exe
21:45:13.0212 1284  NMSAccess - ok
21:45:13.0243 1284  [ B0A67DE1A128389AEA4D42C5A56215FD ] nmwcd          C:\Windows\system32\drivers\ccdcmb.sys
21:45:13.0336 1284  nmwcd - ok
21:45:13.0383 1284  [ 025C54F9F8C8BC1894EA38529C742C54 ] nmwcdc          C:\Windows\system32\drivers\ccdcmbo.sys
21:45:13.0430 1284  nmwcdc - ok
21:45:13.0461 1284  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:45:13.0539 1284  Npfs - ok
21:45:13.0539 1284  NPPTNT - ok
21:45:13.0586 1284  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi            C:\Windows\system32\nsisvc.dll
21:45:13.0664 1284  nsi - ok
21:45:13.0664 1284  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:45:13.0711 1284  nsiproxy - ok
21:45:13.0758 1284  [ 5126C5402C730C2A953275D8497A4715 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:45:13.0804 1284  Ntfs - ok
21:45:13.0836 1284  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\Windows\system32\drivers\Null.sys
21:45:13.0914 1284  Null - ok
21:45:13.0929 1284  [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:45:14.0054 1284  nvraid - ok
21:45:14.0070 1284  nvrd64 - ok
21:45:14.0101 1284  [ 4520B63899E867F354EE012D34E11536 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:45:14.0241 1284  nvstor - ok
21:45:14.0272 1284  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\Windows\system32\DRIVERS\nv_agp.sys
21:45:14.0304 1284  nv_agp - ok
21:45:14.0319 1284  nwrdr - ok
21:45:14.0350 1284  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys
21:45:14.0397 1284  ohci1394 - ok
21:45:14.0460 1284  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:45:14.0475 1284  ose - ok
21:45:14.0662 1284  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
21:45:14.0974 1284  osppsvc - ok
21:45:15.0021 1284  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:45:15.0084 1284  p2pimsvc - ok
21:45:15.0115 1284  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\Windows\system32\p2psvc.dll
21:45:15.0162 1284  p2psvc - ok
21:45:15.0177 1284  PAC7302 - ok
21:45:15.0224 1284  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
21:45:15.0286 1284  Parport - ok
21:45:15.0318 1284  [ 66D3415C159741ADE7038A277EFFF99F ] partmgr        C:\Windows\system32\drivers\partmgr.sys
21:45:15.0474 1284  partmgr - ok
21:45:15.0505 1284  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
21:45:15.0536 1284  Parvdm - ok
21:45:15.0552 1284  pavreport - ok
21:45:15.0598 1284  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:45:15.0661 1284  PcaSvc - ok
21:45:15.0708 1284  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfd.sys
21:45:15.0832 1284  pccsmcfd - ok
21:45:15.0864 1284  [ C858CB77C577780ECC456A892E7E7D0F ] pci            C:\Windows\system32\DRIVERS\pci.sys
21:45:15.0895 1284  pci - ok
21:45:15.0926 1284  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\Windows\system32\DRIVERS\pciide.sys
21:45:15.0957 1284  pciide - ok
21:45:15.0973 1284  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:45:15.0988 1284  pcmcia - ok
21:45:16.0035 1284  [ 250F6B43D2B613172035C6747AEEB19F ] pcw            C:\Windows\system32\drivers\pcw.sys
21:45:16.0066 1284  pcw - ok
21:45:16.0082 1284  pdrframe - ok
21:45:16.0113 1284  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:45:16.0207 1284  PEAUTH - ok
21:45:16.0285 1284  [ 9C1BFF7910C89A1D12E57343475840CB ] pla            C:\Windows\system32\pla.dll
21:45:16.0456 1284  pla - ok
21:45:16.0488 1284  [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:45:16.0644 1284  PlugPlay - ok
21:45:16.0659 1284  pmounter - ok
21:45:16.0675 1284  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
21:45:16.0706 1284  PNRPAutoReg - ok
21:45:16.0722 1284  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
21:45:16.0753 1284  PNRPsvc - ok
21:45:16.0784 1284  [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
21:45:16.0893 1284  PolicyAgent - ok
21:45:16.0940 1284  [ DBFF83F709A91049621C1D35DD45C92C ] Power          C:\Windows\system32\umpo.dll
21:45:16.0971 1284  Power - ok
21:45:17.0002 1284  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:45:17.0080 1284  PptpMiniport - ok
21:45:17.0096 1284  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor      C:\Windows\system32\DRIVERS\processr.sys
21:45:17.0158 1284  Processor - ok
21:45:17.0190 1284  [ AEA3BDBDBA667AA6F678CB38907E4F5E ] ProfSvc        C:\Windows\system32\profsvc.dll
21:45:17.0283 1284  ProfSvc - ok
21:45:17.0299 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:45:17.0314 1284  ProtectedStorage - ok
21:45:17.0314 1284  psadd - ok
21:45:17.0361 1284  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:45:17.0455 1284  Psched - ok
21:45:17.0517 1284  [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2      c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
21:45:17.0658 1284  PSI_SVC_2 - ok
21:45:17.0736 1284  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
21:45:17.0829 1284  ql2300 - ok
21:45:17.0876 1284  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
21:45:17.0907 1284  ql40xx - ok
21:45:17.0923 1284  queuemgr - ok
21:45:17.0970 1284  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE          C:\Windows\system32\qwave.dll
21:45:18.0032 1284  QWAVE - ok
21:45:18.0063 1284  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:45:18.0126 1284  QWAVEdrv - ok
21:45:18.0141 1284  raidmagt - ok
21:45:18.0172 1284  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:45:18.0235 1284  RasAcd - ok
21:45:18.0282 1284  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
21:45:18.0328 1284  RasAgileVpn - ok
21:45:18.0360 1284  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto        C:\Windows\System32\rasauto.dll
21:45:18.0406 1284  RasAuto - ok
21:45:18.0453 1284  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
21:45:18.0531 1284  Rasl2tp - ok
21:45:18.0562 1284  [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan          C:\Windows\System32\rasmans.dll
21:45:18.0640 1284  RasMan - ok
21:45:18.0656 1284  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:45:18.0750 1284  RasPppoe - ok
21:45:18.0765 1284  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
21:45:18.0828 1284  RasSstp - ok
21:45:18.0921 1284  [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
21:45:18.0984 1284  rdbss - ok
21:45:18.0999 1284  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:45:19.0030 1284  rdpbus - ok
21:45:19.0062 1284  [ 1E016846895B15A99F9A176A05029075 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:45:19.0124 1284  RDPCDD - ok
21:45:19.0140 1284  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:45:19.0186 1284  RDPENCDD - ok
21:45:19.0202 1284  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:45:19.0264 1284  RDPREFMP - ok
21:45:19.0296 1284  [ C5B8D47A4688DE9D335204EA757C2240 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
21:45:19.0498 1284  RDPWD - ok
21:45:19.0530 1284  [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:45:19.0561 1284  rdyboost - ok
21:45:19.0592 1284  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:45:19.0670 1284  RemoteAccess - ok
21:45:19.0701 1284  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:45:19.0779 1284  RemoteRegistry - ok
21:45:19.0857 1284  [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo      C:\Program Files\CyberLink\Shared files\RichVideo.exe
21:45:19.0982 1284  RichVideo ( UnsignedFile.Multi.Generic ) - warning
21:45:19.0982 1284  RichVideo - detected UnsignedFile.Multi.Generic (1)
21:45:19.0982 1284  risdptsk - ok
21:45:19.0998 1284  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:45:20.0060 1284  RpcEptMapper - ok
21:45:20.0091 1284  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\Windows\system32\locator.exe
21:45:20.0138 1284  RpcLocator - ok
21:45:20.0169 1284  [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs          C:\Windows\system32\rpcss.dll
21:45:20.0247 1284  RpcSs - ok
21:45:20.0278 1284  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:45:20.0341 1284  rspndr - ok
21:45:20.0388 1284  [ 0340A381B920A6E68178B832889F33F8 ] RSUSBSTOR      C:\Windows\System32\Drivers\RtsUStor.sys
21:45:20.0559 1284  RSUSBSTOR - ok
21:45:20.0559 1284  rt2500usb - ok
21:45:20.0606 1284  [ B6B3C4259D514F10B458CA6C2E50BC2E ] RTL8187B        C:\Windows\system32\DRIVERS\wg111v3.sys
21:45:20.0793 1284  RTL8187B - ok
21:45:20.0840 1284  [ B5E9979FBB26FC059BD87A81F763D5DA ] rtl8192se      C:\Windows\system32\DRIVERS\rtl8192se.sys
21:45:21.0043 1284  rtl8192se - ok
21:45:21.0058 1284  s116mgmt - ok
21:45:21.0074 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs          C:\Windows\system32\lsass.exe
21:45:21.0090 1284  SamSs - ok
21:45:21.0090 1284  savscan - ok
21:45:21.0121 1284  [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys
21:45:21.0152 1284  sbp2port - ok
21:45:21.0183 1284  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:45:21.0292 1284  SCardSvr - ok
21:45:21.0339 1284  [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:45:21.0386 1284  scfilter - ok
21:45:21.0433 1284  [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule        C:\Windows\system32\schedsvc.dll
21:45:21.0589 1284  Schedule - ok
21:45:21.0620 1284  [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc    C:\Windows\System32\certprop.dll
21:45:21.0682 1284  SCPolicySvc - ok
21:45:21.0714 1284  [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:45:21.0745 1284  SDRSVC - ok
21:45:21.0745 1284  SE2Bbus - ok
21:45:21.0776 1284  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:45:21.0823 1284  secdrv - ok
21:45:21.0823 1284  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\Windows\system32\seclogon.dll
21:45:21.0916 1284  seclogon - ok
21:45:21.0948 1284  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\Windows\System32\sens.dll
21:45:22.0010 1284  SENS - ok
21:45:22.0026 1284  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:45:22.0088 1284  SensrSvc - ok
21:45:22.0104 1284  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
21:45:22.0150 1284  Serenum - ok
21:45:22.0166 1284  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
21:45:22.0213 1284  Serial - ok
21:45:22.0244 1284  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
21:45:22.0291 1284  sermouse - ok
21:45:22.0384 1284  [ 668043F192AB9659761A349A4703600D ] ServiceLayer    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
21:45:22.0525 1284  ServiceLayer - ok
21:45:22.0556 1284  [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv      C:\Windows\system32\sessenv.dll
21:45:22.0603 1284  SessionEnv - ok
21:45:22.0650 1284  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk        C:\Windows\system32\DRIVERS\sffdisk.sys
21:45:22.0743 1284  sffdisk - ok
21:45:22.0790 1284  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\Windows\system32\DRIVERS\sffp_mmc.sys
21:45:22.0837 1284  sffp_mmc - ok
21:45:22.0852 1284  [ A0708BBD07D245C06FF9DE549CA47185 ] sffp_sd        C:\Windows\system32\DRIVERS\sffp_sd.sys
21:45:22.0946 1284  sffp_sd - ok
21:45:22.0977 1284  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
21:45:23.0024 1284  sfloppy - ok
21:45:23.0086 1284  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:45:23.0196 1284  SharedAccess - ok
21:45:23.0227 1284  [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:45:23.0305 1284  ShellHWDetection - ok
21:45:23.0336 1284  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\Windows\system32\DRIVERS\sisagp.sys
21:45:23.0367 1284  sisagp - ok
21:45:23.0383 1284  sisnic - ok
21:45:23.0398 1284  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:45:23.0430 1284  SiSRaid2 - ok
21:45:23.0476 1284  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
21:45:23.0523 1284  SiSRaid4 - ok
21:45:23.0695 1284  [ 388AE59FE75F1B959DFA0900923C61BB ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
21:45:23.0976 1284  Skype C2C Service - ok
21:45:24.0054 1284  [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate    C:\Program Files\Skype\Updater\Updater.exe
21:45:31.0744 1284  SkypeUpdate - ok
21:45:31.0744 1284  slee_503_service - ok
21:45:31.0807 1284  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb            C:\Windows\system32\DRIVERS\smb.sys
21:45:31.0900 1284  Smb - ok
21:45:31.0900 1284  smstsmgr - ok
21:45:31.0947 1284  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:45:31.0994 1284  SNMPTRAP - ok
21:45:32.0010 1284  SPCtl - ok
21:45:32.0025 1284  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr          C:\Windows\system32\drivers\spldr.sys
21:45:32.0056 1284  spldr - ok
21:45:32.0088 1284  [ E17323B0AA9FB3FF9945731D736EDA2F ] Spooler        C:\Windows\System32\spoolsv.exe
21:45:32.0244 1284  Spooler - ok
21:45:32.0337 1284  [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc          C:\Windows\system32\sppsvc.exe
21:45:32.0462 1284  sppsvc - ok
21:45:32.0493 1284  [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
21:45:32.0540 1284  sppuinotify - ok
21:45:32.0634 1284  [ 4EDA91FF8EEE2196229AACCCC9F6952C ] SProtection    C:\Program Files\Common Files\Umbrella\Umbrella.exe
21:45:32.0774 1284  SProtection - ok
21:45:32.0836 1284  [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv            C:\Windows\system32\DRIVERS\srv.sys
21:45:33.0039 1284  srv - ok
21:45:33.0070 1284  [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:45:33.0226 1284  srv2 - ok
21:45:33.0258 1284  [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:45:33.0429 1284  srvnet - ok
21:45:33.0460 1284  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
21:45:33.0554 1284  SSDPSRV - ok
21:45:33.0570 1284  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
21:45:33.0632 1284  SstpSvc - ok
21:45:33.0694 1284  [ F92254B0BCFCD10CAAC7BCCC7CB7F467 ] StarOpen        C:\Windows\system32\drivers\StarOpen.sys
21:45:33.0804 1284  StarOpen ( UnsignedFile.Multi.Generic ) - warning
21:45:33.0804 1284  StarOpen - detected UnsignedFile.Multi.Generic (1)
21:45:33.0835 1284  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
21:45:33.0866 1284  stexstor - ok
21:45:33.0897 1284  [ EDB05BD63148796F23EA78506404A538 ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
21:45:33.0944 1284  StillCam - ok
21:45:34.0006 1284  [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc          C:\Windows\System32\wiaservc.dll
21:45:34.0053 1284  StiSvc - ok
21:45:34.0069 1284  STV680 - ok
21:45:34.0100 1284  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
21:45:34.0147 1284  swenum - ok
21:45:34.0178 1284  [ A28BD92DF340E57B024BA433165D34D7 ] swprv          C:\Windows\System32\swprv.dll
21:45:34.0256 1284  swprv - ok
21:45:34.0256 1284  symids - ok
21:45:34.0303 1284  [ D776EB85A20696D9D43129CCF6E703E2 ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
21:45:34.0412 1284  SynTP - ok
21:45:34.0443 1284  [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain        C:\Windows\system32\sysmain.dll
21:45:34.0521 1284  SysMain - ok
21:45:34.0552 1284  [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:45:34.0584 1284  TabletInputService - ok
21:45:34.0615 1284  [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv        C:\Windows\System32\tapisrv.dll
21:45:34.0677 1284  TapiSrv - ok
21:45:34.0708 1284  [ B799D9FDB26111737F58288D8DC172D9 ] TBS            C:\Windows\System32\tbssvc.dll
21:45:34.0771 1284  TBS - ok
21:45:34.0849 1284  [ 55E9965552741F3850CB22CBBA9671ED ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
21:45:35.0036 1284  Tcpip - ok
21:45:35.0067 1284  [ 55E9965552741F3850CB22CBBA9671ED ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:45:35.0114 1284  TCPIP6 - ok
21:45:35.0145 1284  [ E64444523ADD154F86567C469BC0B17F ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:45:35.0223 1284  tcpipreg - ok
21:45:35.0239 1284  [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:45:35.0317 1284  TDPIPE - ok
21:45:35.0348 1284  [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
21:45:35.0504 1284  TDTCP - ok
21:45:35.0535 1284  [ CB39E896A2A83702D1737BFD402B3542 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
21:45:35.0629 1284  tdx - ok
21:45:35.0660 1284  [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
21:45:35.0691 1284  TermDD - ok
21:45:35.0738 1284  [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService    C:\Windows\System32\termsrv.dll
21:45:35.0832 1284  TermService - ok
21:45:35.0847 1284  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\Windows\system32\themeservice.dll
21:45:35.0910 1284  Themes - ok
21:45:35.0925 1284  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER    C:\Windows\system32\mmcss.dll
21:45:35.0972 1284  THREADORDER - ok
21:45:36.0003 1284  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\Windows\System32\trkwks.dll
21:45:36.0081 1284  TrkWks - ok
21:45:36.0144 1284  [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:45:36.0206 1284  TrustedInstaller - ok
21:45:36.0253 1284  [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:45:36.0346 1284  tssecsrv - ok
21:45:36.0378 1284  [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:45:36.0456 1284  tunnel - ok
21:45:36.0487 1284  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
21:45:36.0502 1284  uagp35 - ok
21:45:36.0502 1284  UDFReadr - ok
21:45:36.0534 1284  [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:45:36.0596 1284  udfs - ok
21:45:36.0627 1284  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
21:45:36.0674 1284  UI0Detect - ok
21:45:36.0705 1284  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\Windows\system32\DRIVERS\uliagpkx.sys
21:45:36.0752 1284  uliagpkx - ok
21:45:36.0783 1284  [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
21:45:36.0846 1284  umbus - ok
21:45:36.0877 1284  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
21:45:36.0924 1284  UmPass - ok
21:45:37.0048 1284  [ AF905F4966CFC8B973623AB150CD4B2B ] UNS            C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
21:45:37.0251 1284  UNS - ok
21:45:37.0267 1284  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\Windows\System32\upnphost.dll
21:45:37.0329 1284  upnphost - ok
21:45:37.0407 1284  [ 78B74AF8727A28C128E164E9B53A5413 ] upperdev        C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
21:45:37.0563 1284  upperdev - ok
21:45:37.0610 1284  [ C31AE588E403042632DC796CF09E30B0 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
21:45:37.0735 1284  usbccgp - ok
21:45:37.0766 1284  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\Windows\system32\DRIVERS\usbcir.sys
21:45:37.0828 1284  usbcir - ok
21:45:37.0875 1284  [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci        C:\Windows\system32\drivers\usbehci.sys
21:45:38.0031 1284  usbehci - ok
21:45:38.0062 1284  [ BDCD7156EC37448F08633FD899823620 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
21:45:38.0203 1284  usbhub - ok
21:45:38.0250 1284  [ EB2D819A639015253C871CDA09D91D58 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
21:45:38.0390 1284  usbohci - ok
21:45:38.0421 1284  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
21:45:38.0468 1284  usbprint - ok
21:45:38.0515 1284  [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
21:45:38.0546 1284  usbscan - ok
21:45:38.0624 1284  [ 88701ECA76145E2C011C0EEFF0F7B70E ] usbser          C:\Windows\system32\drivers\usbser.sys
21:45:38.0671 1284  usbser - ok
21:45:38.0686 1284  [ 4F8FBC51A1C0A17310846B417A447F91 ] UsbserFilt      C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
21:45:38.0827 1284  UsbserFilt - ok
21:45:38.0842 1284  [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:45:39.0045 1284  USBSTOR - ok
21:45:39.0076 1284  [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
21:45:39.0248 1284  usbuhci - ok
21:45:39.0295 1284  [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
21:45:39.0498 1284  usbvideo - ok
21:45:39.0544 1284  [ D82F43D15FDAA666856C0190CB73E7C9 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys
21:45:39.0591 1284  usb_rndisx - ok
21:45:39.0607 1284  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms          C:\Windows\System32\uxsms.dll
21:45:39.0685 1284  UxSms - ok
21:45:39.0685 1284  v2imount - ok
21:45:39.0716 1284  [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc        C:\Windows\system32\lsass.exe
21:45:39.0732 1284  VaultSvc - ok
21:45:39.0747 1284  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\Windows\system32\DRIVERS\vdrvroot.sys
21:45:39.0763 1284  vdrvroot - ok
21:45:39.0794 1284  [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds            C:\Windows\System32\vds.exe
21:45:39.0841 1284  vds - ok
21:45:39.0872 1284  [ 17C408214EA61696CEC9C66E388B14F3 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
21:45:39.0934 1284  vga - ok
21:45:39.0950 1284  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave        C:\Windows\System32\drivers\vga.sys
21:45:40.0028 1284  VgaSave - ok
21:45:40.0075 1284  [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp          C:\Windows\system32\DRIVERS\vhdmp.sys
21:45:40.0122 1284  vhdmp - ok
21:45:40.0153 1284  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\Windows\system32\DRIVERS\viaagp.sys
21:45:40.0184 1284  viaagp - ok
21:45:40.0200 1284  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7          C:\Windows\system32\DRIVERS\viac7.sys
21:45:40.0231 1284  ViaC7 - ok
21:45:40.0262 1284  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\Windows\system32\DRIVERS\viaide.sys
21:45:40.0278 1284  viaide - ok
21:45:40.0309 1284  [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr          C:\Windows\system32\DRIVERS\volmgr.sys
21:45:40.0340 1284  volmgr - ok
21:45:40.0371 1284  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
21:45:40.0418 1284  volmgrx - ok
21:45:40.0449 1284  [ 59F06B4968E58BC83DFC56CA4517960E ] volsnap        C:\Windows\system32\drivers\volsnap.sys
21:45:40.0558 1284  volsnap - ok
21:45:40.0590 1284  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
21:45:40.0605 1284  vsmraid - ok
21:45:40.0668 1284  [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS            C:\Windows\system32\vssvc.exe
21:45:40.0761 1284  VSS - ok
21:45:40.0808 1284  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
21:45:40.0855 1284  vwifibus - ok
21:45:40.0886 1284  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
21:45:40.0933 1284  vwififlt - ok
21:45:41.0011 1284  [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
21:45:41.0073 1284  vwifimp - ok
21:45:41.0104 1284  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time        C:\Windows\system32\w32time.dll
21:45:41.0167 1284  W32Time - ok
21:45:41.0214 1284  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
21:45:41.0245 1284  WacomPen - ok
21:45:41.0260 1284  [ 692A712062146E96D28BA0B7D75DE31B ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:45:41.0307 1284  WANARP - ok
21:45:41.0307 1284  [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:45:41.0338 1284  Wanarpv6 - ok
21:45:41.0416 1284  [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
21:45:41.0526 1284  WatAdminSvc - ok
21:45:41.0604 1284  [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine        C:\Windows\system32\wbengine.exe
21:45:41.0713 1284  wbengine - ok
21:45:41.0713 1284  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:45:41.0775 1284  WbioSrvc - ok
21:45:41.0791 1284  wceusbsh - ok
21:45:41.0853 1284  [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
21:45:41.0994 1284  wcncsvc - ok
21:45:42.0025 1284  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:45:42.0103 1284  WcsPlugInService - ok
21:45:42.0134 1284  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\Windows\system32\DRIVERS\wd.sys
21:45:42.0165 1284  Wd - ok
21:45:42.0228 1284  [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:45:42.0337 1284  Wdf01000 - ok
21:45:42.0352 1284  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:45:42.0399 1284  WdiServiceHost - ok
21:45:42.0399 1284  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost  C:\Windows\system32\wdi.dll
21:45:42.0430 1284  WdiSystemHost - ok
21:45:42.0462 1284  [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient      C:\Windows\System32\webclnt.dll
21:45:42.0618 1284  WebClient - ok
21:45:42.0618 1284  websensecpmcommunicationagent - ok
21:45:42.0649 1284  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:45:42.0727 1284  Wecsvc - ok
21:45:42.0742 1284  [ AC804569BB2364FB6017370258A4091B ] wercplsupport  C:\Windows\System32\wercplsupport.dll
21:45:42.0789 1284  wercplsupport - ok
21:45:42.0805 1284  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:45:42.0836 1284  WerSvc - ok
21:45:42.0883 1284  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:45:42.0961 1284  WfpLwf - ok
21:45:42.0976 1284  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:45:42.0992 1284  WIMMount - ok
21:45:43.0070 1284  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
21:45:43.0164 1284  Winmgmt - ok
21:45:43.0226 1284  [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM          C:\Windows\system32\WsmSvc.dll
21:45:43.0366 1284  WinRM - ok
21:45:43.0413 1284  [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
21:45:43.0476 1284  WinUsb - ok
21:45:43.0522 1284  [ 4C69A8E2E159C1C59BC4B688E9DD7F8C ] WisLMSvc        C:\Program Files\Launch Manager\WisLMSvc.exe
21:45:43.0632 1284  WisLMSvc - ok
21:45:43.0694 1284  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc        C:\Windows\System32\wlansvc.dll
21:45:43.0788 1284  Wlansvc - ok
21:45:43.0881 1284  [ 6067ACEF367E79914AF628FA1E9B5330 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
21:45:43.0990 1284  wlcrasvc - ok
21:45:44.0068 1284  [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:45:44.0224 1284  wlidsvc - ok
21:45:44.0271 1284  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi        C:\Windows\system32\DRIVERS\wmiacpi.sys
21:45:44.0334 1284  WmiAcpi - ok
21:45:44.0380 1284  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:45:44.0427 1284  wmiApSrv - ok
21:45:44.0505 1284  [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
21:45:44.0630 1284  WMPNetworkSvc - ok
21:45:44.0630 1284  WNCPKT - ok
21:45:44.0677 1284  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:45:44.0755 1284  WPCSvc - ok
21:45:44.0770 1284  [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:45:44.0833 1284  WPDBusEnum - ok
21:45:44.0864 1284  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
21:45:44.0958 1284  ws2ifsl - ok
21:45:45.0004 1284  [ 553F6CCD7C58EB98D4A8FBDAF283D7A9 ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys
21:45:45.0036 1284  WSDPrintDevice - ok
21:45:45.0051 1284  WSearch - ok
21:45:45.0129 1284  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll
21:45:45.0238 1284  wuauserv - ok
21:45:45.0270 1284  [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:45:45.0363 1284  WudfPf - ok
21:45:45.0410 1284  [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:45:45.0535 1284  WUDFRd - ok
21:45:45.0566 1284  [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
21:45:45.0675 1284  wudfsvc - ok
21:45:45.0706 1284  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc        C:\Windows\System32\wwansvc.dll
21:45:45.0784 1284  WwanSvc - ok
21:45:45.0831 1284  ================ Scan global ===============================
21:45:45.0894 1284  [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
21:45:45.0909 1284  [ A031E84E7A5884841171E13A73315A7B ] C:\Windows\system32\winsrv.dll
21:45:46.0003 1284  [ A031E84E7A5884841171E13A73315A7B ] C:\Windows\system32\winsrv.dll
21:45:46.0050 1284  [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
21:45:46.0096 1284  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
21:45:46.0096 1284  [Global] - ok
21:45:46.0096 1284  ================ Scan MBR ==================================
21:45:46.0112 1284  [ 8A1C59E4DFEF87510470928550466632 ] \Device\Harddisk0\DR0
21:45:49.0232 1284  \Device\Harddisk0\DR0 - ok
21:45:49.0232 1284  ================ Scan VBR ==================================
21:45:49.0232 1284  [ F31DC2512AD53822A7E28369D1C5E63F ] \Device\Harddisk0\DR0\Partition1
21:45:49.0232 1284  \Device\Harddisk0\DR0\Partition1 - ok
21:45:49.0263 1284  [ 880637BEA931FE8C03ABED6DD053F59B ] \Device\Harddisk0\DR0\Partition2
21:45:49.0263 1284  \Device\Harddisk0\DR0\Partition2 - ok
21:45:49.0310 1284  [ 41300EC0D0BBC9DAB6D46FB8D03C5F51 ] \Device\Harddisk0\DR0\Partition3
21:45:49.0310 1284  \Device\Harddisk0\DR0\Partition3 - ok
21:45:49.0310 1284  ============================================================
21:45:49.0310 1284  Scan finished
21:45:49.0310 1284  ============================================================
21:45:49.0326 4800  Detected object count: 5
21:45:49.0326 4800  Actual detected object count: 5
21:48:00.0756 4800  avmeject ( UnsignedFile.Multi.Generic ) - skipped by user
21:48:00.0756 4800  avmeject ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:48:00.0756 4800  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
21:48:00.0756 4800  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:48:00.0756 4800  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
21:48:00.0756 4800  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:48:00.0756 4800  RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
21:48:00.0756 4800  RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:48:00.0756 4800  StarOpen ( UnsignedFile.Multi.Generic ) - skipped by user
21:48:00.0756 4800  StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Skip

markusg 16.01.2013 22:20
hi,
combofix:
Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.
Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Klaus_60 16.01.2013 23:09
Hi,

Combofix bringt eine Maldung, dass AntiVir Desktop antivirus und antispyware noch aktiv sind. Ich finde diese Software nicht - ich habe das AntiVir damals gelöscht als ich den Mc Affee installierte,
Aber auch den kann ich nicht deaktivieren

Hast du mir einen Tipp?

markusg 17.01.2013 15:34
Hi
dann ignoriere die Meldung.

Klaus_60 17.01.2013 21:24
Hi,

Combofix hat sich ein wenig Zeit gegönnt, lief seit 19:22h. Hier das Log
Code:
Combofix Logfile:

       
Code:

       
ComboFix 13-01-16.01 - Moni 17.01.2013  20:35:56.1.4 - x86
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.2935.2063 [GMT 1:00]
ausgeführt von:: c:\users\Moni\Desktop\ComboFix.exe
AV: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
FW: McAfee  Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
SP: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Im Speicher befindliches AV aktiv.
.
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Windows Live\Messenger\msacm32.dll
c:\users\Moni\4889965.exe
c:\users\Moni\AppData\Local\Temp\7zS3AD7\HPHNDUSVC.dll
c:\users\Moni\AppData\Roaming\.#
c:\users\Public\Desktop\Control center.lnk
c:\windows\$NtUninstallKB8357$
c:\windows\$NtUninstallKB8357$\2228807563
c:\windows\$NtUninstallKB8357$\2708635176\@
c:\windows\$NtUninstallKB8357$\2708635176\L\xadqgnnk
c:\windows\$NtUninstallKB8357$\2708635176\loader.tlb
c:\windows\$NtUninstallKB8357$\2708635176\U\@00000001
c:\windows\$NtUninstallKB8357$\2708635176\U\@000000c0
c:\windows\$NtUninstallKB8357$\2708635176\U\@000000cb
c:\windows\$NtUninstallKB8357$\2708635176\U\@000000cf
c:\windows\$NtUninstallKB8357$\2708635176\U\@80000000
c:\windows\$NtUninstallKB8357$\2708635176\U\@800000c0
c:\windows\$NtUninstallKB8357$\2708635176\U\@800000cb
c:\windows\$NtUninstallKB8357$\2708635176\U\@800000cf
c:\windows\system32\dds_log_trash.cmd
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_HPHNDUSVC
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-12-17 bis 2013-01-17  ))))))))))))))))))))))))))))))
.
.
2013-01-17 19:52 . 2013-01-17 19:52        --------        d-----w-        c:\users\Moni\AppData\Local\temp
2013-01-16 20:36 . 2013-01-16 20:36        --------        d-----w-        c:\users\Moni\AppData\Roaming\Iminent
2013-01-16 20:35 . 2013-01-16 20:35        --------        d-----w-        c:\programdata\Iminent
2013-01-16 20:35 . 2013-01-17 19:55        --------        d-----w-        c:\program files\Common Files\Umbrella
2013-01-16 20:35 . 2013-01-16 20:35        --------        d-----w-        c:\program files\Iminent
2013-01-16 04:04 . 2011-07-13 02:55        2237440        ----a-r-        C:\OTLPE.exe
2013-01-16 04:04 . 2013-01-16 20:26        --------        d-----w-        C:\_OTL
2013-01-11 19:08 . 2012-12-10 16:15        73696        ----a-w-        c:\program files\Mozilla Firefox\updated\breakpadinjector.dll
2013-01-11 19:08 . 2012-12-10 16:15        262112        ----a-w-        c:\program files\Mozilla Firefox\updated\components\browsercomps.dll
2013-01-11 19:08 . 2012-12-10 16:15        18912        ----a-w-        c:\program files\Mozilla Firefox\updated\AccessibleMarshal.dll
2013-01-10 10:58 . 2012-11-20 05:10        219136        ----a-w-        c:\windows\system32\ncrypt.dll
2013-01-10 10:58 . 2012-11-22 09:33        627712        ----a-w-        c:\windows\system32\usp10.dll
2013-01-10 10:58 . 2012-11-23 03:06        2344960        ----a-w-        c:\windows\system32\win32k.sys
2013-01-10 10:58 . 2012-11-09 04:49        492032        ----a-w-        c:\windows\system32\win32spl.dll
2013-01-10 10:56 . 2012-12-07 03:21        45568        ----a-w-        c:\windows\system32\oflc-nz.rs
2012-12-21 13:10 . 2012-12-16 14:25        295424        ----a-w-        c:\windows\system32\atmfd.dll
2012-12-21 13:10 . 2012-12-16 14:25        34304        ----a-w-        c:\windows\system32\atmlib.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-09 09:09 . 2012-04-17 06:37        697864        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-01-09 09:09 . 2011-07-14 04:31        74248        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-17 20:07 . 2012-12-17 20:08        93640        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2012-12-17 20:07 . 2012-12-17 20:08        859072        ----a-w-        c:\windows\system32\npDeployJava1.dll
2012-12-17 20:07 . 2010-06-28 23:43        779704        ----a-w-        c:\windows\system32\deployJava1.dll
2012-11-09 05:56 . 2012-08-02 13:56        60480        ----a-w-        c:\windows\system32\drivers\cfwids.sys
2012-11-09 05:53 . 2012-08-02 13:56        210136        ----a-w-        c:\windows\system32\drivers\mfewfpk.sys
2012-11-09 05:53 . 2012-08-02 13:33        167344        ----a-w-        c:\windows\system32\mfevtps.exe
2012-11-09 05:52 . 2012-08-02 13:56        9648        ----a-w-        c:\windows\system32\drivers\mfeclnk.sys
2012-11-09 05:52 . 2012-08-02 13:56        92192        ----a-w-        c:\windows\system32\drivers\mferkdet.sys
2012-11-09 05:51 . 2010-10-14 04:28        565352        ----a-w-        c:\windows\system32\drivers\mfehidk.sys
2012-11-09 05:50 . 2012-08-02 13:56        362640        ----a-w-        c:\windows\system32\drivers\mfefirek.sys
2012-11-09 05:50 . 2012-08-02 13:56        65488        ----a-w-        c:\windows\system32\drivers\mfebopk.sys
2012-11-09 05:49 . 2012-08-02 13:56        234824        ----a-w-        c:\windows\system32\drivers\mfeavfk.sys
2012-11-09 05:49 . 2010-10-14 04:28        132912        ----a-w-        c:\windows\system32\drivers\mfeapfk.sys
2012-11-09 04:49 . 2012-12-12 06:13        2048        ----a-w-        c:\windows\system32\tzres.dll
2012-11-02 04:48 . 2012-12-12 06:16        376832        ----a-w-        c:\windows\system32\dpnet.dll
2012-10-31 14:10 . 2012-10-31 14:10        138056        ----a-w-        c:\windows\system32\atl100.dll
2012-10-27 05:00 . 2012-12-12 06:15        981504        ----a-w-        c:\windows\system32\wininet.dll
2012-10-27 04:59 . 2012-12-12 06:14        44544        ----a-w-        c:\windows\system32\licmgr10.dll
2012-10-27 03:52 . 2012-12-12 06:14        386048        ----a-w-        c:\windows\system32\html.iec
2013-01-12 06:30 . 2011-05-13 15:16        262704        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll
2010-10-13 20:28 . 2012-08-02 13:56        24376        ----a-w-        c:\program files\mozilla firefox\components\Scriptff.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{57CC507B-E60F-46E3-A6BC-678074531620}]
2011-03-02 12:05        202240        ----a-w-        c:\users\Moni\AppData\Roaming\Gears\IE\Gears.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C38E40BD-AF96-4006-8EED-B2F41315CEB9}]
2011-03-02 11:03        542208        ----a-w-        c:\users\Moni\AppData\Roaming\AdobeReader\IE\AdobeReader.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MyTomTomSA.exe"="c:\program files\MyTomTom 3\MyTomTomSA.exe" [2012-05-18 434168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-06-21 136216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-06-21 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-06-21 170008]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-12-11 1594664]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"AVMWlanClient"="c:\program files\avmwlanstick\FRITZWLANMini.exe" [2007-02-02 283136]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-09-12 1278648]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Iminent"="c:\program files\Iminent\Iminent.exe" [2012-12-19 1074888]
"IminentMessenger"="c:\program files\Iminent\Iminent.Messengers.exe" [2012-12-19 884936]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"SPUpdSentinel"="c:\program files\Common Files\Umbrella\Umbrella_bkpc" [X]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.285\SSScheduler.exe [2012-9-5 271808]
t@x aktuell.lnk - c:\program files\Buhl finance\tax Steuersoftware 2013\taxaktuell.exe [2012-12-19 536216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyApp]
2009-12-14 18:25        200704        ----a-w-        c:\program files\Launch Manager\HotkeyApp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LMgrVolOSD]
2009-12-11 22:18        348960        ----a-w-        c:\program files\Launch Manager\OSD.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2011-11-01 14:40        1053056        ----a-w-        c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg]
2010-04-23 14:53        1423904        ------w-        c:\program files\Realtek\Audio\HDA\RtHDVBg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2010-04-23 14:53        9177632        ------w-        c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wbutton]
2010-01-13 17:18        413696        ----a-w-        c:\program files\Launch Manager\WButton.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WISE-FTP Task Planner]
2007-02-12 07:48        965632        ----a-w-        c:\program files\AceBIT\WISE-FTP 4\wf_tp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [x]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [x]
R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [x]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.285\McCHSvc.exe [x]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys [x]
R3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\DRIVERS\wg111v3.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [x]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]
S1 aswKbd;aswKbd; [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [x]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [x]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [x]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 SProtection;SProtection;c:\program files\Common Files\Umbrella\Umbrella.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys [x]
S3 avmaura;AVM USB-Fernanschluss;c:\windows\system32\DRIVERS\avmaura.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPHNDUService        REG_MULTI_SZ           HPHNDUSVC
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
NETSVCS BENÖTIGT REPARATUR - Derzeitig vorhandene Einträge:
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
IKEEXT
AudioSrv
FastUserSwitchingCompatibility
Ias
Irmon
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
SENS
Sharedaccess
SRService
Tapisrv
Wmi
WmdmPmSp
jsdaemon
nimcrpcsu
nmraapache
symids
btwaudio
ca-messagequeuing
psadd
ipssvc
HSFHWALI
agentsrv
gdrv
DC21x4
iAimTV5
mssql$sony_mediamgr
ofcpfwsvc
Ld51ocnucsnp
idebusdr
enum1394
mxnic
IntelC52
ctusfsyn
WinHttpAutoProxySvc
itmrtsvc
TClass2k
PTproct
REVOSENS
ctljystk
pclepci
keymaestro
NAL
Ptserlp
vpnva
iSMBIOS
wmi
prfldsvc
lexbces
splitter
s217bus
sym_u3
sscdmdfl
zfdwm
zpnodecollector
SaiH040B
iaantmon
Usb20Scan
elnkservice
dwusbdnt
dlapoolm
mclogmanagerservice
nicser_wmp11
apache
usbcm
Shockprf
z800mdm
ssm_bus
pdlnslea
sweepsrv.sys
dbmanagerscheduler
nabtsfec
upsmonservice
SE26obex
aracpi
Eplpdx02
twotrack
lpds
v2imount
idisw2km
risdptsk
pavreport
autostore
nwrdr
bc_ip_f
STV680
ELmou
HSXHWBS2
nvrd64
crystalaps
atmeltpm
pdrframe
pmounter
smstsmgr
queuemgr
savscan
ZDCNDIS5
bwmservice
mvdcodec
dktknsrv
symproxysvc
AsDsm
ups
w810bus
winss
CAMFLT
btcsrusb
cpuidlep
RTL8169
rdnaoflsvc
ramaint
iAimFP5
yukonwxp
DCamUSBEMPIA
iviaspi
usb20l
sagefserver
elbydelay
vmnetuserif
kwatchsvc
s116mdm
w810mdfl
lirsgt
nocashio
w200mdfl
ssdiagn
UDFReadr
rt2500usb
NPPTNT
appdrv
bc_pat_f
PAC7302
WNCPKT
elockservice
ASInsHelp
ahcix86s
alertservice
SPCtl
ESMCR
websensecpmcommunicationagent
bb-run
slee_503_service
raidmagt
winvnc4
unlockerdriver5
MREMP50
cpqdmi
aavmker4
IntelC53
padfsvr
RalinkRegistryWriter
cpqnicmgmt
mcupdmgr.exe
freepops
lkcitadelserver
ctxhttp
PID_PEPI
aclient
adiloader
ifxtcs
wintab32
zenos1
ltxred
rnadiagnosticsservice
cnmpar21
TBPanel
slssvc
mindretrieve
FlexBios
TestHandler
McciCMService
int15.sys
ASUSVRC
symmpi
OVT511Plus
hpdj
se26unic
atalk
ATSWPDRV
sympxsvc
Sntnlusb
prevxagent
ELkbd
bcserver
RR2Mjpeg
winproxy
prism_a02
cdudf_xp
DcCam
PBADRV
wusb54gv2svc
lmab_device
bridgemp
XBCD
telnet
lvhidsvc
KR10N
was
speakerphone
venturi2
wanusb
tsdhd
NETw5x32
citrixxteserver
acpiec
SE2Bbus
sisnic
wceusbsh
s116mgmt
IFP700
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
seclogon
AppInfo
msiscsi
MMCSS
wercplsupport
EapHost
ProfSvc
schedule
hkmsvc
SessionEnv
winmgmt
browser
Themes
BDESVC
.
Rebuilding ... You need to reboot your machine for this to take effect.
.
AppMgmt
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-11 19:09        1606760        ----a-w-        c:\program files\Google\Chrome\Application\24.0.1312.52\Installer\setup.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-01-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-17 09:09]
.
2013-01-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-11 05:15]
.
2013-01-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-11 05:15]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://search.babylon.com/?affID=109958&tt=4612_1&babsrc=HP_ss&mntrId=947725b800000000000000262dc0792e
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://home.sweetim.com/?barid={52623381-9626-4E85-A3C0-BEF07A24553F}
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: An OneNote s&enden - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Web-Suche - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
Trusted Zone: die-meisterschaft.de\www
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Moni\AppData\Roaming\Mozilla\Firefox\Profiles\rv6cb1ci.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.edith-hasslberger.de/
FF - ExtSQL: 2013-01-16 21:35; webbooster@iminent.com; c:\program files\Iminent\webbooster@iminent.com
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=947725b800000000000000262dc0792e&q=
FF - user.js: extensions.BabylonToolbar.id - 947725b800000000000000262dc0792e
FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
FF - user.js: extensions.BabylonToolbar.instlDay - 15661
FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.3.8
FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.3.8
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.8.3.821:38
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - base
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{7e111a5c-3d11-4f56-9463-5310c3c69025} - (no file)
WebBrowser-{26647CA4-A2A7-4EAC-8A72-761AA9141DE7} - (no file)
SafeBoot-BsScanner
MSConfigStartUp-ConnectionCenter - c:\program files\Citrix\ICA Client\concentr.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FotoManager10Deluxe.8.alb"
.
[HKEY_USERS\S-1-5-21-2596008763-1249654248-4138452930-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{243B1B79-664A-4BD5-7F42-3E41B675BD5F}*]
"iakmonhamhddclbnma"=hex:66,61,69,6e,62,64,70,68,61,66,6b,62,00,fd
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(3328)
c:\windows\system32\we4.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\McAfee\SystemCore\mcshield.exe
c:\program files\Common Files\McAfee\SystemCore\mfefire.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\sppsvc.exe
c:\progra~1\mcafee.com\agent\mcagent.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-01-17  21:01:48 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-01-17 20:01
.
Vor Suchlauf: 25 Verzeichnis(se), 297.081.458.688 Bytes frei
Nach Suchlauf: 30 Verzeichnis(se), 298.808.320.000 Bytes frei
.
- - End Of File - - 155F6414D7B4A735FCAC430F9B2E6F82

--- --- ---

markusg 17.01.2013 21:40
hi
nutzt du das Gerät für onlinebanking, zum einkaufen, für sonstige Zahlungsabwicklungen, oder ähnlich wichtigem, wie beruflichem?

Klaus_60 17.01.2013 21:51
ja, die gesamte Palette von Banking bis ebay.

Beruflich habe ich ein anderes Notebook, das ganz anderen Restriktiionen unterworfen ist.

markusg 17.01.2013 21:53
hi
bitte bank anrufen, onlinebanking wegen rootkit.zero access sperren lassen.
notfall nummer:
116 116
da man diese Malware nicht 100 %ig sicher los wird:
der pc muss neu aufgesetzt und dann abgesichert werden
1. Datenrettung:2. Formatieren, Windows neu instalieren:3. PC absichern: http://www.trojaner-board.de/96344-a...-rechners.html
ich werde außerdem noch weitere punkte dazu posten.
4. alle Passwörter ändern!
5. nach PC Absicherung, die gesicherten Daten prüfen und falls sauber: zurückspielen.
6. werde ich dann noch was zum absichern von Onlinebanking mit Chip Card Reader + Star Money sagen.

Klaus_60 17.01.2013 22:19
Hi,

Reicht es ggf. die online banking Zugänge von einem anderen Rechner mit neuen Kennwörtern zu versorgen? Ansonsten wohl so lange sperren lassen bis der Rechner neu aufgesetzt ist?

Bei dem Rechner handelt es sich (bitte nicht lachen) um einen MEDION Akoya E7214 also um einen Fertigrechner - ohne Windows CD.

markusg 17.01.2013 22:22
hi
warum sollte ich darüber lachen.
wegen den banking zugängen, sprich das mit deiner Bank ab, ich lasse es immer vorsichtshalber sperren, wenn die Bank sagt, ändern der Zugangsdaten reicht, dann ists ok.

Klaus_60 28.01.2013 19:11
Hi,

hatte nach deiner letzten Antwort ziemlich viel um die Ohren aber jetzt hab ich den Rechner wieder betriebsbereit. Nach meinem neuen Virencanner Trend Micro Titanium ist der Rechner nun auch virenfrei.

Wenn's das war dann sag ich mal ganz herzlich danke, ohne dich hätte ich wahrscheinlich das Ding weggeworfen....
:abklatsch:

markusg 29.01.2013 15:42
pc absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
Computeractive Software Store - Emsisoft Anti-Malware 7 [1-PC] - 63% off RRP
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut währe avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung anpassen.


Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie - Download - Filepony

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser

passwort sicherheit:
jeder dienst benötigt ein eigenes, mindestens 12-stelliges passwort
bei der passwort verwaltung und erstellung hilft roboform
Passwort Manager, Formular Ausfueller, Passwort Management | RoboForm Passwort Manager
anleitung:
RoboForm-Bedienungsanleitung: Passwort-Manager, Verwalten von Passwörtern und persönlichen Daten


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:37 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19