Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Firewall und andere Programme lassen sich nicht mehr ausführen. (https://www.trojaner-board.de/174941-firewall-andere-programme-lassen-mehr-ausfuehren.html)

Napp 09.01.2016 17:16
Firewall und andere Programme lassen sich nicht mehr ausführen.
 
Hallo.

Ich benutze Windows 8 und habe seit heute das Problem, dass sowohl meine Firewall als auch andere Programme nicht mehr ausführbar sind.:confused:
Ich habe auch schon einige Antivirensoftwares runtergeladen. Nachdem ich sie installieren wollte kam nur die Nachricht: Der Computer wurde durch Windows geschützt da dieses Programm eventuell schäden verursachen könnten. Ich klicke auf "Trotzdem ausführen" und bekomme die Fehlermeldung:....exe. konnte nicht gefunden werden.:headbang:

Ich bitte um Hilfe da ich nicht mehr weiß was ich machen kann.
:dankeschoen: im voraus.

deeprybka 09.01.2016 20:05
:hallo:

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...:abklatsch:
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
  • Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
  • Poste die Logfiles direkt in Deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst.



Los geht's:

Schritt 1
http://filepony.de/icon/frst.pnghttp://deeprybka.trojaner-board.de/b...e/frst/sn1.PNG

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://deeprybka.trojaner-board.de/tdss/codetags.gif

Napp 09.01.2016 20:24
Danke für die schnelle Antwort :)

Wir haben aber ein Problem.
Egal welche der beiden FRST Dateien ich herunterlade, es werden beide von meinem PC als bedrohung erkannt und wenn ich sie "trotzdem ausführen" will dann wurden sie nicht gefunden und Ich kann sie auch nicht von der Downloadliste aus mehr öffnen.:confused:

deeprybka 09.01.2016 20:27
Welches Antivirusprogramm ist installiert?

Napp 09.01.2016 20:39
Eigentlich Norton 360. Im Taskmanager ist auch Aufgelistet dass das Programm aktiv ist. Ich kann aber nicht darauf zugreifen. Dementsprechend ist die Normale Windows Firewall aktiv.

deeprybka 09.01.2016 20:44
Haste irgendwas bestimmtes gemacht? Download etc. wenn das Problem erst seit heute besteht?
Norton kann nicht deaktiviert werden? Dann boote mal in den abgesicherten Modus mit Netzwerk und versuche den Scan von dort.

Napp 09.01.2016 20:59
Nebenbei noch: Des öfteren wurde ich aus heiterem Himmel vom Internetexplorer gefragt ( Obwohl ich den nicht verwende ) ob ich irgendetwas schließen möchte oder nicht.
Das einzige was ich gemacht habe war die GeForce Gameexperience installation und dazu Google Chrome.

FRST:

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-01-2015
durchgeführt von Nico (Administrator) auf NICO-PC (09-01-2016 20:57:26)
Gestartet von C:\Users\Nico\Downloads
Geladene Profile: Nico (Verfügbare Profile: Nico)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Safe Mode (with Networking)
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)




(LogMeIn Inc.) D:\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2014-05-22] (Realtek Semiconductor)
HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2777392 2015-12-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [57928 2014-10-31] (LogMeIn, Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [WsmUpdater] => D:\Windows 8 Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)
HKLM-x32\...\Run: [DivXMediaServer] => D:\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [THGuard] => C:\Program Files (x86)\TrojanHunter\THGuard.exe [1082832 2015-06-18] (Mischel Internet Security)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\Run: [DAEMON Tools Lite] => "D:\Neuer Ordner\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\MountPoints2: {4ee05722-99f7-11e4-8260-448a5b82267f} - "F:\autorun.exe"
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\MountPoints2: {775d0aff-b460-11e4-8266-448a5b82267f} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\MountPoints2: {7e3792ca-6f28-11e4-825d-448a5b82267f} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\MountPoints2: {d235f1b9-5099-11e4-8257-806e6f6e6963} - "E:\zdata\cobi.exe"
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\MountPoints2: {e8039b49-ba67-11e4-8267-448a5b82267f} - "H:\HTC_Sync_Manager_PC.exe"
AppInit_DLLs-x32: 敨＀Ȇ噎䵒優袧쁀 => Keine Datei
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{F8D6DC72-9E1D-47A7-958D-BDF12B3C7379}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://localoem.msn.com
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001 -> DefaultScope {E98C6278-278D-4315-A95A-FAE9BF22B937} URL =
SearchScopes: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001 -> {E98C6278-278D-4315-A95A-FAE9BF22B937} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => Keine Datei
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> D:\Neverwinter\Arc\Plugins\ArcPluginIE.dll [2015-06-25] (Perfect World Entertainment Inc)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Nico\AppData\Roaming\Mozilla\Firefox\Profiles\c0u5oxcc.default-1418568528997
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> D:\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> D:\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> D:\Neverwinter\Arc\Plugins\npArcPluginFF.dll [2015-06-25] (Perfect World Entertainment Inc)
FF Extension: Adblock Plus - C:\Users\Nico\AppData\Roaming\Mozilla\Firefox\Profiles\c0u5oxcc.default-1418568528997\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon [2015-12-18]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon [2015-12-18]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-09]
CHR Extension: (YouTube) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-09]
CHR Extension: (Norton Security Toolbar) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-01-09]
CHR Extension: (Kingdom Rush) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckmfhhjalnddapegkbbohfaodgbnocim [2014-12-14]
CHR Extension: (Google-Suche) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-09]
CHR Extension: (Google Tabellen) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Stylish) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-01-09]
CHR Extension: (The Big Fish) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnlainpoijbdcjpdkbcggmidhignljon [2014-12-14]
CHR Extension: (Google Docs Offline) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-09]
CHR Extension: (GeForce Experience Stream Client) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjljknijpnfibppaijefibndmiabonep [2016-01-09]
CHR Extension: (Pocket Creature) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\haiaghaooebeljgpkagioccjcopnhnff [2014-12-14]
CHR Extension: (Norton Identity Safe) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-12-14]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-09]
CHR Extension: (Google Mail) - C:\Users\Nico\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-27]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ArcService; D:\Neverwinter\Arc\ArcService.exe [88400 2015-06-25] (Perfect World Entertainment Inc)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-05-17] (EasyAntiCheat Ltd)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-12-08] (NVIDIA Corporation)
R2 Hamachi2Svc; D:\Hamachi\hamachi-2.exe [2546184 2015-11-12] (LogMeIn Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [417288 2015-12-09] (LogMeIn, Inc.)
S2 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [507400 2015-12-09] (LogMeIn, Inc.)
S2 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2014-10-31] (LogMeIn, Inc.)
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe [282016 2015-11-20] (Symantec Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-12-08] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6299952 2015-12-08] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4804400 2015-12-08] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2104840 2015-12-20] (Electronic Arts)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-01-01] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-12-29] ()
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\BASHDefs\20160104.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation)
S3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys [173808 2015-07-11] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-12] (Disc Soft Ltd)
R0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-18] (Symantec Corporation)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
S3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\IPSDefs\20160108.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation)
S2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [16056 2014-10-31] (LogMeIn, Inc.)
S4 LMIRfsClientNP; kein ImagePath
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20160108.021\ENG64.SYS [138488 2015-10-27] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20160108.021\EX64.SYS [2148080 2015-10-27] (Symantec Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-12-08] (NVIDIA Corporation)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-09-05] (Windows (R) Win 7 DDK provider)
S3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [39032 2015-10-03] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)
S3 SRTSPX; C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS [50936 2015-07-11] (Symantec Corporation)
S3 SymEFASI; C:\Windows\system32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1605050.00F\SymELAM.sys [24192 2015-07-11] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-08-08] (Symantec Corporation)
S3 SymIRON; C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS [297720 2015-07-11] (Symantec Corporation)
S3 SymNetS; C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)
R3 VUSB3HUB; C:\Windows\System32\drivers\ViaHub3.sys [227840 2013-12-11] (VIA Technologies, Inc.)
S3 VUSBSTOR; C:\Windows\System32\Drivers\vusbstor.sys [86064 2013-01-18] (VIA Technologies, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
R3 xhcdrv; C:\Windows\System32\drivers\xhcdrv.sys [297984 2013-12-11] (VIA Technologies, Inc.)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-09 20:57 - 2016-01-09 20:57 - 00021515 _____ C:\Users\Nico\Downloads\FRST.txt
2016-01-09 20:57 - 2016-01-09 20:57 - 00000000 ____D C:\FRST
2016-01-09 20:55 - 2016-01-09 20:55 - 02370560 _____ (Farbar) C:\Users\Nico\Downloads\FRST64.exe
2016-01-09 20:53 - 2016-01-09 20:53 - 00141348 _____ C:\Windows\ntbtlog.txt
2016-01-09 20:10 - 2016-01-09 20:10 - 01721856 _____ (Farbar) C:\Users\Nico\Downloads\FRST.exe
2016-01-09 20:02 - 2016-01-09 20:02 - 01466656 _____ C:\Users\Nico\Downloads\TrojanHunter - CHIP-Installer(1).exe
2016-01-09 16:42 - 2016-01-09 16:42 - 00894960 _____ C:\Users\Nico\Downloads\Norton_Removal_Tool.exe
2016-01-09 16:26 - 2016-01-09 16:26 - 00271608 _____ C:\Windows\Minidump\010916-19328-01.dmp
2016-01-09 16:19 - 2016-01-09 16:19 - 00001228 _____ C:\Users\Nico\Desktop\Uplay.lnk
2016-01-09 16:19 - 2016-01-09 16:19 - 00000000 ____D C:\Users\Nico\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-01-09 16:16 - 2016-01-09 16:19 - 66007832 _____ (Ubisoft) C:\Users\Nico\Downloads\UplayInstaller.exe
2016-01-09 16:14 - 2016-01-09 16:14 - 00003126 _____ C:\Windows\System32\Tasks\{671940BF-53FF-42D0-8E70-4BA2A1B69D93}
2016-01-09 13:55 - 2016-01-09 13:55 - 44081872 _____ (NVIDIA Corporation) C:\Users\Nico\Downloads\GeForce_Experience_Beta_v2.9.0.48.exe
2016-01-09 13:26 - 2016-01-09 13:26 - 00927824 _____ (Google Inc.) C:\Users\Nico\Downloads\ChromeSetup(1).exe
2016-01-09 13:06 - 2015-12-08 19:49 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-01-09 12:34 - 2016-01-09 12:34 - 00000000 ____D C:\Users\Nico\AppData\Local\BANDAI NAMCO Games
2016-01-07 11:47 - 2016-01-09 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-04 10:54 - 2016-01-04 10:54 - 00267448 _____ C:\Windows\Minidump\010416-6437-01.dmp
2016-01-01 16:37 - 2016-01-01 16:37 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
2016-01-01 16:24 - 2016-01-01 16:28 - 00000000 ____D C:\Users\Nico\Documents\Battlefield 4
2015-12-31 13:47 - 2015-12-31 13:47 - 01640768 _____ C:\Users\Nico\Downloads\battlelog-web-plugins_2.7.1_162(1).exe
2015-12-31 13:47 - 2015-12-31 13:47 - 00000000 ____D C:\Users\Nico\AppData\Local\ESN
2015-12-30 21:02 - 2015-12-30 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-24 00:25 - 2015-12-24 00:25 - 00000000 ____D C:\Users\Nico\AppData\Roaming\DarkSoulsII
2015-12-14 12:16 - 2015-12-14 12:16 - 00237304 _____ C:\Users\Nico\Downloads\Retoure.pdf
2015-12-14 10:17 - 2015-12-14 10:17 - 01837057 _____ C:\Users\Nico\Downloads\1Media_Markt_DE_Webshop_AGB_2015-12-02_v2_0_7_clean.pdf
2015-12-13 02:40 - 2016-01-09 20:48 - 00000413 _____ C:\Users\Nico\Desktop\PC Komponenten.txt

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-09 20:57 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2016-01-09 20:53 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-09 20:53 - 2013-08-22 14:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-01-09 20:52 - 2015-08-04 15:14 - 00000000 ____D C:\Users\Nico\AppData\Roaming\Skype
2016-01-09 20:43 - 2015-04-10 17:27 - 00000000 ____D C:\Users\Nico\AppData\Local\Battle.net
2016-01-09 20:31 - 2015-10-24 18:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-09 20:04 - 2014-03-18 11:03 - 00005902 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-09 20:04 - 2014-03-18 10:25 - 01282970 _____ C:\Windows\system32\perfh007.dat
2016-01-09 20:04 - 2014-03-18 10:25 - 00320850 _____ C:\Windows\system32\perfc007.dat
2016-01-09 20:02 - 2014-11-17 15:24 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1194517703-2306931640-4110196692-1001
2016-01-09 20:00 - 2015-07-31 19:35 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-01-09 20:00 - 2014-11-17 15:28 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2CE5757D-B4CB-472A-AC8D-BAF15C5959C8}
2016-01-09 19:58 - 2015-08-22 08:08 - 00000000 __SHD C:\Users\Nico\IntelGraphicsProfiles
2016-01-09 19:58 - 2015-01-12 15:51 - 00001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
2016-01-09 19:58 - 2014-11-17 15:22 - 00000000 ___DO C:\Users\Nico\OneDrive
2016-01-09 19:57 - 2014-09-19 08:34 - 00000000 ____D C:\ProgramData\NVIDIA
2016-01-09 17:03 - 2015-01-12 15:37 - 00000000 ___RD C:\Users\Nico\Desktop\Dave Tools
2016-01-09 16:26 - 2015-11-29 14:04 - 00000000 ____D C:\Windows\Minidump
2016-01-09 16:25 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-01-09 16:20 - 2014-11-17 16:18 - 00000000 ____D C:\ProgramData\Origin
2016-01-09 16:19 - 2015-01-26 18:20 - 00000000 ____D C:\Users\Nico\AppData\Local\Ubisoft Game Launcher
2016-01-09 16:11 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-01-09 16:09 - 2015-04-29 18:43 - 00000000 ____D C:\Users\Nico\Desktop\Games
2016-01-09 16:09 - 2014-12-14 15:52 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-09 16:09 - 2014-11-17 15:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-09 14:38 - 2014-11-18 18:07 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-01-09 13:57 - 2014-11-17 15:19 - 00000000 ____D C:\Users\Nico\AppData\Local\NVIDIA
2016-01-09 13:56 - 2014-09-19 08:34 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-01-09 13:56 - 2014-09-19 08:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-01-09 12:29 - 2015-01-12 15:36 - 00000000 ____D C:\Users\Nico\AppData\Local\LogMeIn Hamachi
2016-01-09 12:26 - 2015-01-12 15:51 - 00000000 ____D C:\ProgramData\LogMeIn
2016-01-07 12:24 - 2014-12-24 17:07 - 00000000 ____D C:\Users\Nico\AppData\Local\ElevatedDiagnostics
2016-01-03 17:54 - 2014-11-18 18:07 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-01-01 16:27 - 2014-11-18 19:37 - 00000000 ____D C:\Users\Nico\AppData\Local\PunkBuster
2016-01-01 16:19 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2015-12-31 19:22 - 2014-11-17 15:19 - 00000000 ____D C:\Users\Nico
2015-12-31 13:47 - 2014-11-18 19:37 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2015-12-30 23:01 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2015-12-30 21:02 - 2015-08-04 15:14 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-30 21:02 - 2015-08-04 15:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-30 21:02 - 2015-08-04 15:14 - 00000000 ____D C:\Users\Nico\AppData\Local\Skype
2015-12-30 21:02 - 2015-08-04 15:14 - 00000000 ____D C:\ProgramData\Skype
2015-12-29 18:36 - 2014-11-27 16:26 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-29 18:36 - 2014-11-18 18:07 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2015-12-29 15:31 - 2015-10-24 18:44 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-28 16:20 - 2015-12-08 18:39 - 00000000 ____D C:\Users\Nico\AppData\Roaming\TeamViewer
2015-12-28 16:20 - 2014-11-18 16:11 - 00000000 ____D C:\Users\Nico\AppData\Local\CrashDumps
2015-12-26 09:48 - 2013-08-22 16:38 - 00826872 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-26 09:48 - 2013-08-22 16:38 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-22 15:06 - 2015-01-26 18:20 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2015-12-21 19:44 - 2014-11-18 19:37 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2015-12-18 00:13 - 2015-04-07 13:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-18 00:13 - 2015-04-07 13:22 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-13 02:44 - 2014-11-18 16:08 - 00000000 ____D C:\Users\Nico\Documents\my games
2015-12-10 19:11 - 2015-10-31 22:36 - 00000000 ____D C:\Users\Nico\Desktop\PS2
2015-12-10 17:18 - 2013-08-22 15:44 - 00341584 _____ C:\Windows\system32\FNTCACHE.DAT

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-19 08:31 - 2014-09-19 08:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-04 12:16

==================== Ende von FRST.txt ============================
Addition:

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-01-2015
durchgeführt von Nico (2016-01-09 20:57:41)
Gestartet von C:\Users\Nico\Downloads
Windows 8.1 (X64) (2014-11-17 14:19:31)
Start-Modus: Safe Mode (with Networking)
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1194517703-2306931640-4110196692-500 - Administrator - Disabled)
ASPNET (S-1-5-21-1194517703-2306931640-4110196692-1002 - Limited - Enabled)
Gast (S-1-5-21-1194517703-2306931640-4110196692-501 - Limited - Disabled)
Nico (S-1-5-21-1194517703-2306931640-4110196692-1001 - Administrator - Enabled) => C:\Users\Nico

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton Internet Security (Enabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)
Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version:  - Blue Byte)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Chantelise (HKLM-x32\...\Steam App 70420) (Version:  - EasyGameStation)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command & Conquer™: Generals and Zero Hour (HKLM-x32\...\{8F0F5689-6900-425B-A8C2-0DBD10DAB694}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
ContentMod2.6.3 (HKLM-x32\...\ContentMod_2.6.3) (Version:  - )
Crysis (HKLM-x32\...\Steam App 17300) (Version:  - Crytek)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Crytek Studios)
Crysis Warhead (HKLM-x32\...\Steam App 17330) (Version:  - Crytek)
Cultures2 - Die Tore Asgards (HKLM-x32\...\Cultures2) (Version:  - )
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4427.02 - CyberLink Corp.)
DARK SOULS™ II: Scholar of the First Sin (HKLM-x32\...\Steam App 335300) (Version:  - FromSoftware, Inc)
Dawn of War - Dark Crusade (HKLM-x32\...\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}) (Version: 1.00.0000 - THQ)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
DmC Devil May Cry (HKLM-x32\...\Steam App 220440) (Version:  - Ninja Theory)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version:  - Bethesda Game Studios)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FarCry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Gothic II Gold (HKLM-x32\...\{DEDE1213-872D-48D2-82DD-741E1464F40D}) (Version: 1.0.0 - JoWooD)
Gothic III - Forsaken Gods (HKLM-x32\...\{D1FD3035-DD6F-4A17-BC30-784E97EFBC68}) (Version: 1.0.0 - JoWooD)
Gothic III (HKLM-x32\...\{02B244A2-7F6A-42E8-A36F-8C385D7A1625}) (Version: 1.00.0000 - JoWooD Productions Software AG)
H1Z1 (HKLM-x32\...\Steam App 295110) (Version:  - Sony Online Entertainment)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
How to Survive (HKLM-x32\...\Steam App 250400) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Killing Floor 2 (HKLM-x32\...\Steam App 232090) (Version:  - Tripwire Interactive)
Knights of Honor (HKLM-x32\...\Steam App 25830) (Version:  - Black Sea Studios Ltd)
Lagarith lossless video codec (Remove Only) (HKLM\...\LAGARITH) (Version:  - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LogMeIn (HKLM-x32\...\{F93EE340-3735-4032-8B74-0A3E489017A0}) (Version: 4.1.4670 - LogMeIn, Inc.)
LogMeIn Client (HKLM-x32\...\{D2300C4F-CC9B-4D00-BC53-B4C806A6C7AB}) (Version: 1.3.1675 - LogMeIn, Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden
Lost Planet 3 (HKLM-x32\...\Steam App 226720) (Version:  - Spark Unlimited)
Magicka (HKLM-x32\...\Steam App 42910) (Version:  - Arrowhead Game Studios)
Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version:  - Paradox North)
Mechs & Mercs: Black Talons (HKLM-x32\...\Steam App 273960) (Version:  - Camel 101)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version:  - )
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 22.5.5.15 - Symantec Corporation)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.9.0.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.0.48 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 358.50 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
ONE PIECE PIRATE WARRIORS 3 (HKLM-x32\...\Steam App 331600) (Version:  - KOEI TECMO GAMES CO., LTD.)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Ori and the Blind Forest (HKLM-x32\...\Steam App 261570) (Version:  - Moon Studios GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.1.571 - Electronic Arts, Inc.)
OSC Third Party Libraries (Version: 1.1 - NVIDIA Corporation) Hidden
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5350) (Version:  - )
Platform (x32 Version: 1.42 - VIA Technologies, Inc.) Hidden
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Questpaket 4 Update 2 Deinstallation (HKLM-x32\...\G3QP231012008_is1) (Version: 4.2.0.0 - Humanforce)
Razer Surround Driver Installer version 1.5 (HKLM-x32\...\{11B11FA5-41ED-43C1-AB4B-905DDEDC72A2}_is1) (Version: 1.5 - inXile Entertainment)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.34.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version:  - Piranha Bytes)
RollerCoaster Tycoon 3: Platinum! (HKLM-x32\...\Steam App 2700) (Version:  - Frontier)
S.T.A.L.K.E.R.: Call of Pripyat (HKLM-x32\...\Steam App 41700) (Version:  - GSC Game World)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version:  - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version:  - Croteam)
SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.9.0.48 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
Space Pirates and Zombies (HKLM-x32\...\Steam App 107200) (Version:  - MinMax Games Ltd.)
Speccy (HKLM\...\Speccy) (Version: 1.19 - Piriform)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.28745 - Electronic Arts)
STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.3.51560 - Electronic Arts)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
System Requirements Lab Detection (HKLM-x32\...\{E5551774-CF6E-4935-8414-E35DC9A877D7}) (Version: 6.1.6.0 - Husdawg, LLC)
Tales of Zestiria (HKLM-x32\...\Steam App 351970) (Version:  - BANDAI NAMCO Studio Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The I of the Dragon (HKLM-x32\...\Steam App 279720) (Version:  - Primal)
Transistor (HKLM-x32\...\Steam App 237930) (Version:  - Supergiant Games)
TrojanHunter 6.0 (HKLM-x32\...\TrojanHunter_is1) (Version: 6.0 - Bytelayer AB)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.42 - VIA Technologies, Inc.)
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version:  - Relic Entertainment)
Warhammer® 40,000™: Dawn of War® II (HKLM-x32\...\Steam App 15620) (Version:  - Relic Entertainment)
Wasteland 2 (HKLM-x32\...\Steam App 240760) (Version:  - inXile Entertainment)
Windows 8 Codecs Pack 1.0.0 (HKLM\...\w8cpsetup_is1) (Version: 1.0.0 - Web Solution Mart)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {12913DDC-77D6-41A2-B1DE-46FA44C3AFE7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-12-09] (Microsoft Corporation)
Task: {415806D8-22E1-4E2F-983A-93EC7CC2856D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe [2015-11-23] (Symantec Corporation)
Task: {45D8F9E2-A75F-4EFB-AE4B-579C65A449DA} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-11-23] (Symantec Corporation)
Task: {70B48DE4-EAAD-4A49-8443-863140B3A933} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {8EE5F617-7770-45E1-BEE3-B28CBAE17F9B} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {ACB4051B-144D-459F-8B81-E403A08F5504} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {C0D7361D-740C-4EBC-B0DD-2064A2E991B7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {C20B8A4C-2F8F-4D65-9A6A-A50B5C308904} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29] (Adobe Systems Incorporated)
Task: {CE481A58-7876-4E1A-970A-7D162D09FD0B} - System32\Tasks\{671940BF-53FF-42D0-8E70-4BA2A1B69D93} => pcalua.exe -a "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe"
Task: {FE255A1C-2E72-444A-B11F-4522F1ECED1D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============


==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\...\sony.com -> sony.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1194517703-2306931640-4110196692-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Nico\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{25A6D584-AC70-491A-AD53-FAF11E6A0587}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{5D7D6BC9-C4D0-48CE-97F2-EF3FDF97FEB6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{4F67BCA1-13C1-4FA4-9732-278D863C8A2D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{7A71A58A-9CF7-4C3A-8A07-12CB882F7894}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5BA1D234-4454-49B1-9D83-D43E9632D7EB}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{ADDF4932-D066-4E91-9C74-D6A47A1349F4}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{47258395-575F-4984-902E-972BA8F76AAB}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{A08930DB-C468-4D95-B4CB-55F3ED30074A}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{B3021B7A-8289-4FEE-85CC-88D525549ED4}] => (Allow) D:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{D7C9E334-68FF-4EA1-B382-9A88B406CBBC}] => (Allow) D:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{56B58824-BAF8-4D8C-BA9D-FEC6BF510663}] => (Allow) D:\Steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{BBCAEF25-D072-437E-8F10-489F550777D8}] => (Allow) D:\Steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{61DFFA63-1625-40B7-88F3-887176F33188}] => (Allow) D:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{B82C769C-05FB-4A5C-A89D-5C96F55C53F6}] => (Allow) D:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9F048E2A-7855-4FA5-A234-01AABFBCD45F}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{7B30FAEF-5E09-4A02-915B-0E43200474B2}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{6C465F62-B491-4257-ACCD-B4D8A11BD7BE}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{AE31F6F6-6AEA-481A-9A9F-E3F60768005F}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{B245B37B-CF50-4E68-A740-1DBAB000DFF6}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{B413B728-86FC-49D7-9564-09265A2F1D70}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{AF131636-8FCD-4443-8207-3F6FE26B941B}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{62D954E8-ED4E-46C3-99D3-3721E0272DE2}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{85D8920F-ED2F-42E1-87BF-D82CE39CE349}] => (Allow) D:\Steam\steamapps\common\Wasteland 2\Build\WL2.exe
FirewallRules: [{EFC7F5D5-3301-4F69-9F40-7D7A07EC46CD}] => (Allow) D:\Steam\steamapps\common\Wasteland 2\Build\WL2.exe
FirewallRules: [{14269996-2080-4402-9F09-FF50D2520BBD}] => (Allow) D:\Steam\steamapps\common\Dawn of War 2\DOW2.exe
FirewallRules: [{8C0F445A-6FE5-455D-8785-956374EF8472}] => (Allow) D:\Steam\steamapps\common\Dawn of War 2\DOW2.exe
FirewallRules: [{20CDB2BA-2BCB-4710-9438-6B2FB0282BEA}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{C3B54E57-58D1-42E5-BE42-CA4F27629C37}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{BC1CAD6B-5878-4F3B-AF99-26993AFBEFAE}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{66BB7D42-321B-4BA1-ABD4-0F5E062C38E9}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{721BEF47-9014-4B94-9FD7-E3DA3104C3C3}] => (Allow) D:\Steam\steamapps\common\Knights of Honor\KoH.exe
FirewallRules: [{B3906259-F07C-4166-8A7A-AFCB66CA312F}] => (Allow) D:\Steam\steamapps\common\Knights of Honor\KoH.exe
FirewallRules: [{B73233F3-2001-4BBD-BAE9-DC8747AB2D3F}] => (Allow) D:\Steam\steamapps\common\Transistor\x64\Transistor.exe
FirewallRules: [{4409A7E3-2894-46A1-849A-1B54B17E34F8}] => (Allow) D:\Steam\steamapps\common\Transistor\x64\Transistor.exe
FirewallRules: [{43CA9531-C4BA-4B3A-B720-C39C0006FCB9}] => (Allow) D:\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{7AED948C-0A8E-4D6D-B07D-DD0BC661DF43}] => (Allow) D:\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{9942AA61-44A0-40A6-8CA2-5ED538FCE718}] => (Allow) D:\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{978E724E-1CE8-4FA4-AA16-B3042D5AA4A9}] => (Allow) D:\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{16D79DAA-1D76-4912-8A03-C3B5A8FA2AB3}] => (Allow) D:\Steam\steamapps\common\Chantelise\chantelise.exe
FirewallRules: [{D18A3C56-11E6-453C-9E9D-5844A9F7506A}] => (Allow) D:\Steam\steamapps\common\Chantelise\chantelise.exe
FirewallRules: [{D4EDAB71-FB4D-46C0-A891-36628EFA8D26}] => (Allow) D:\Steam\steamapps\common\Chantelise\custom.exe
FirewallRules: [{54BF95A2-77C1-44A9-92AF-569A2DFB863D}] => (Allow) D:\Steam\steamapps\common\Chantelise\custom.exe
FirewallRules: [{18C41112-6C4B-49B6-9468-A427EC785438}] => (Allow) D:\Steam\steamapps\common\Black Talons\BlackTalons.exe
FirewallRules: [{D9E5DA62-A9A5-4453-A67D-DF051252BD14}] => (Allow) D:\Steam\steamapps\common\Black Talons\BlackTalons.exe
FirewallRules: [{9F2AD034-B799-4319-BD8E-96F22A5B4082}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{88919D9F-51C6-45F1-A20A-F1D2EF460037}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3FB1CF4B-D40D-4AF8-ADC0-58850E1B7C52}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{F0F88710-8FBE-4D5A-99A4-FF3C3535930A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{48091E13-12D6-49A3-828B-18E522F11AD4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CE063423-08B6-462A-A82B-3BC71433E756}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1B3FB13B-CD06-4AED-9575-09B6E2641D64}] => (Allow) D:\Ubisoft\Far Cry 4\FarCry 4\bin\FarCry4.exe
FirewallRules: [{AF1BEF41-7A9C-41F4-B04D-A2E17FCC0814}] => (Allow) D:\Ubisoft\Far Cry 4\FarCry 4\bin\FarCry4.exe
FirewallRules: [{B3F52F27-4AF6-4989-A82F-79482E76F409}] => (Allow) D:\Ubisoft\Far Cry 4\FarCry 4\bin\IGE_WPF64.exe
FirewallRules: [{FB3FA39C-485A-4128-95E5-47390A89592C}] => (Allow) D:\Ubisoft\Far Cry 4\FarCry 4\bin\IGE_WPF64.exe
FirewallRules: [{3F1027F5-B803-4A62-BB4D-79629C831FE9}] => (Allow) D:\Steam\steamapps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{6741DC82-0276-46ED-8221-82778EED21B9}] => (Allow) D:\Steam\steamapps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{94E2A69D-1E0F-453B-A0B1-FADEE97C50BE}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{FEBC25FC-B727-4B15-A09C-1C0DD5843E5B}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{B3CB44C1-C8CA-4983-96AB-55FF164C818A}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The Second Encounter\Bin\SamHD_TSE.exe
FirewallRules: [{428681F9-7715-4B4E-AD5C-6CCFCD78134C}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The Second Encounter\Bin\SamHD_TSE.exe
FirewallRules: [{FFDFE9AC-6279-4F01-A10C-D6EFDC53983D}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The Second Encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{A6CC1FE9-508F-45EB-8853-6F0682452517}] => (Allow) D:\Steam\steamapps\common\Serious Sam HD The Second Encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{D213ED01-2179-41CA-B7A9-9AC03246B11A}] => (Allow) D:\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{EBCBAE5F-8B87-4EE3-B1A0-DE5B30FA85D4}] => (Allow) D:\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{3D083924-3E3D-4E65-AB81-7791AB4DA87F}] => (Allow) D:\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{3DB2A358-6B38-4B56-A289-A9BF67C1F381}] => (Allow) D:\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{2E6E2B56-DC01-43E5-848D-29E145EDC4F3}] => (Allow) D:\Steam\steamapps\common\Ori\ori.exe
FirewallRules: [{DCED67BF-71F0-480E-945C-E48E25C67469}] => (Allow) D:\Steam\steamapps\common\Ori\ori.exe
FirewallRules: [{90658E6C-79A5-4940-8EE1-06FF7392455C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FDB1DE28-C2D8-49C8-BA7D-9F45DFEFA271}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{E0E7F8FB-4FAE-4DAB-9EE9-7DD82A9B50E0}] => (Allow) D:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [{BEF730D0-5360-4D67-98F2-E1F0D0F86CC7}] => (Allow) D:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [TCP Query User{A9546A54-CD96-4DDF-9CBF-5EBD74A86F13}D:\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{AAB3406E-9CB4-4D9D-94D4-CDC02A1EE867}D:\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [{A35456D0-FCFB-41FD-B728-A4C08EE833D1}] => (Allow) D:\Hearthstone\Hearthstone.exe
FirewallRules: [{F441C62B-4F15-4A35-B194-ED85F1DBD1AD}] => (Allow) D:\Hearthstone\Hearthstone.exe
FirewallRules: [{95D4A2DB-4062-48F8-AE5F-CB56D2B2AFDA}] => (Allow) D:\StarCraft II\StarCraft II.exe
FirewallRules: [{C3DE2541-B685-432A-8CF5-023A0B78F450}] => (Allow) D:\StarCraft II\StarCraft II.exe
FirewallRules: [{60FD8C47-BC63-4CCC-AE81-97D026C7F6D0}] => (Allow) D:\Steam\steamapps\common\Rollercoaster Tycoon 3 Gold\RCT3plus.exe
FirewallRules: [{83FDD0B8-7722-45B0-9874-5A634975D928}] => (Allow) D:\Steam\steamapps\common\Rollercoaster Tycoon 3 Gold\RCT3plus.exe
FirewallRules: [{A922BF77-2A2E-45FA-B351-7F18B62BB30F}] => (Allow) D:\Steam\steamapps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [{02DA6629-C2E2-4A19-8C94-2974FC15C9CA}] => (Allow) D:\Steam\steamapps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [{85648425-80A7-49CF-82BE-DDF146BAD39E}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{A6F1205C-7CFF-4292-AFBF-9ECA5FD7981C}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{86302591-257B-4407-9CDB-05B36EF5AA8D}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{B636CE12-07A0-4A17-971B-FAC7018004DE}] => (Allow) D:\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{8EC92937-5F31-41C7-9B11-04D2448372CA}] => (Allow) D:\Steam\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{33C4203C-0ECB-4877-80ED-23D549B9A011}] => (Allow) D:\Steam\steamapps\common\Anno 1404\Anno4.exe
FirewallRules: [{75E32006-7F00-408F-9737-45F6FFFFBA64}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{D46D437D-9A59-45F2-8577-00F24A737627}] => (Allow) D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{D4D8FB4A-DA49-4898-9AB3-4229AE469CFB}] => (Allow) D:\Program Files (x86)\Origin Games\Command and Conquer Generals Zero Hour\Generals.exe
FirewallRules: [{E8098565-CA60-40F8-BE63-0713BD6F57CC}] => (Allow) D:\Program Files (x86)\Origin Games\Command and Conquer Generals Zero Hour\Generals.exe
FirewallRules: [{F63899E8-7F74-4259-BCC0-443A183B5067}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{A5BCE184-2795-466A-AEEF-E209B138CEDA}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{D43E77D7-245F-45C8-B6B5-F46FC3B37A98}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{9FA2DC58-C373-459D-98C4-BD2EE38B7E55}] => (Allow) D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [TCP Query User{B9368DAB-5A94-4B2A-B3DC-736DDAF83668}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{91B2A9C4-5293-4798-852D-5113631DD4C0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{47B42B48-66CC-4D12-861C-E9337613AFD1}] => (Allow) D:\Steam\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{3FC2C1CA-C316-4A70-B363-6704D257BA99}] => (Allow) D:\Steam\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{BAEBD589-DFC3-41FA-87F7-28A8437F1D10}] => (Allow) D:\Steam\steamapps\common\OPPW3\oppw3.exe
FirewallRules: [{61FA30F9-F3E2-4E07-8198-187AC414486E}] => (Allow) D:\Steam\steamapps\common\OPPW3\oppw3.exe
FirewallRules: [{CD88EA04-B650-47C4-A260-73E1F8BE8FDD}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{D593BDAD-7E7E-4491-B589-91271C5FCAA5}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{57D72E5D-267F-4DF1-B9E5-3DD1BB61A6C8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D3979419-BAC6-4E56-B3B2-4ACDE4227922}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{DF27CAA9-5E96-444A-A046-20364A4D4D79}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{24179AFB-96E6-4591-BE2A-57F83F2179BF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{95D287FF-2E21-484B-B649-079848AE71BB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{706175B5-A411-407E-B7A0-1305EE2D10DB}] => (Allow) D:\Steam\steamapps\common\Space Pirates and Zombies\SpazGame.exe
FirewallRules: [{79048A22-3F84-4CD4-9AEB-D74D07EA333A}] => (Allow) D:\Steam\steamapps\common\Space Pirates and Zombies\SpazGame.exe
FirewallRules: [{CB39D55F-814A-4E7B-86BD-3B854356CFBF}] => (Allow) D:\Steam\steamapps\common\Crysis\Bin32\Crysis.exe
FirewallRules: [{FBDCC5D9-2E55-4F89-9C63-F85EF696238F}] => (Allow) D:\Steam\steamapps\common\Crysis\Bin32\Crysis.exe
FirewallRules: [{B162C162-13D5-486E-AE73-54316F332342}] => (Allow) D:\Steam\steamapps\common\Crysis Warhead\Bin32\Crysis.exe
FirewallRules: [{DC487308-1BF6-45FC-BDE4-7FFB5AFF6291}] => (Allow) D:\Steam\steamapps\common\Crysis Warhead\Bin32\Crysis.exe
FirewallRules: [{7263A1CA-CDB3-4195-815A-7BDCF4D016B5}] => (Allow) D:\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [{FCCCC93B-A9A8-42DA-BEE2-B8681C196E24}] => (Allow) D:\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [TCP Query User{30B61F89-F369-4F4F-96CC-A0AEC64D9BF2}D:\alles an blizzard\hearthstone\hearthstone.exe] => (Allow) D:\alles an blizzard\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{B9E9FD5E-D17A-4F4D-9CEE-4960AAFEB96B}D:\alles an blizzard\hearthstone\hearthstone.exe] => (Allow) D:\alles an blizzard\hearthstone\hearthstone.exe
FirewallRules: [{17895B14-F118-462B-BF12-6A19586BFDD0}] => (Allow) D:\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{5C89B3D1-5DC5-46C4-A9A5-771DCDECCD3B}] => (Allow) D:\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{E5D7632D-1A9E-4B30-B91A-8848AB764F45}] => (Allow) D:\Steam\steamapps\common\DmC Devil May Cry\Binaries\Win32\DMC-DevilMayCry.exe
FirewallRules: [{45B2DC22-4F78-495A-A116-8B333C8613AD}] => (Allow) D:\Steam\steamapps\common\DmC Devil May Cry\Binaries\Win32\DMC-DevilMayCry.exe
FirewallRules: [{86457E41-0C8E-4CD6-930F-E05F28AA69B9}] => (Allow) D:\Steam\steamapps\common\Lost Planet 3\Binaries\Win32\LP3Launcher.exe
FirewallRules: [{855544AF-4CA5-4F82-B4B3-4CDF332B1A47}] => (Allow) D:\Steam\steamapps\common\Lost Planet 3\Binaries\Win32\LP3Launcher.exe
FirewallRules: [{63DF115F-9FFB-4D29-B48F-DFB589341823}] => (Allow) D:\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{0A54D8A1-FED4-4F97-AAE6-4F111340795C}] => (Allow) D:\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{CE38A8E3-961D-403A-8399-598C663F8B80}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{98718234-D5AE-4979-9FD9-1D48889F4A15}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5110CE84-8B11-4478-AB17-EAE27697C28C}] => (Allow) D:\Steam\steamapps\common\The I of the Dragon\TheIOfTheDragon.exe
FirewallRules: [{3F766ACD-4004-4E65-8699-CA70982CCCD4}] => (Allow) D:\Steam\steamapps\common\The I of the Dragon\TheIOfTheDragon.exe
FirewallRules: [{BA217E23-F3F2-4058-B6D8-7A680F0492D8}] => (Allow) D:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{E6BA962C-6B91-44EF-B7EE-8F2A2342A5E9}] => (Allow) D:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{66DBC632-F111-4778-934C-E27574D075A5}] => (Allow) D:\Steam\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{DC029311-AF62-4DDA-A931-3F85F07B8A56}] => (Allow) D:\Steam\steamapps\common\Anno 1404\Addon.exe
FirewallRules: [{4EEE5B5F-D32D-43E4-A85C-1B9BC1C70BB1}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{127ECAAE-842D-434D-B1A1-A79A9B2BB660}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{24C0D253-930B-4310-8BBB-2F9CD9ED1F9B}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3.exe
FirewallRules: [{021B3FA3-81E1-4835-AD21-8F9CD06221E7}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3.exe
FirewallRules: [{C8EC4E1A-0D94-420B-8381-4C7FB3876676}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{244C40A2-05BE-4F6F-BEF3-109513C5F6A0}] => (Allow) D:\Steam\steamapps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{47A8EAAE-7F13-4005-8551-D724B67A8127}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{FECBE70B-B842-4D6E-96C2-515FC1957688}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{0CB8BDE8-53B0-467D-8260-3BE508ACE112}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{471F4065-2D9D-4A8C-9398-8996C9A363E8}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{D7689AFA-FE0A-4A19-B915-F0F91716FB86}] => (Allow) D:\Steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{5AC0CAD7-098B-4323-A2B9-1DA4D35826EB}] => (Allow) D:\Steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{772B0353-1454-4EAD-A61A-E74E8FA1AAF1}] => (Allow) D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{C57C36FB-D250-4701-9600-6A8451F98061}] => (Allow) D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{B1E47770-58FF-4D45-B445-E5D58109B56E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F4F2F64E-D4F5-4C0D-841D-0D24EFF3065D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F6FF7B50-EC86-4D8E-BCC4-57E9E6CE0D66}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{A1CE48E5-B407-4B14-AD6F-34663CF6E63B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4E0E9DDA-858D-402A-974A-3684481A8075}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{87DF843F-C9E9-4E1B-BFA8-21BEA372968E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D9A68F96-BCCC-41EA-B785-A7CF818A8B96}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{ED4428F9-1853-4305-B419-94D1618A810A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{B6D49AAD-93F8-4F1A-AF36-6395DA9C97C2}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{B9D8E353-67DD-41CD-9702-5C2216466AD1}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{53A0FDB2-0F85-433A-9841-538545266ADE}] => (Allow) D:\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{D5E6E26F-E8FB-4788-BF62-AE074E3BFF88}] => (Allow) D:\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{49665AF2-286E-4367-ACE8-3A0AD8E681DD}] => (Allow) D:\Steam\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe
FirewallRules: [{5BC6EB68-8EB8-46BE-A7C8-D5BECAC1E005}] => (Allow) D:\Steam\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe

==================== Wiederherstellungspunkte =========================

20-12-2015 14:27:36 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
28-12-2015 16:26:54 Geplanter Prüfpunkt
29-12-2015 18:35:29 DirectX wurde installiert
07-01-2016 12:34:30 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/09/2016 08:52:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SystemSettings.exe, Version 6.3.9600.17489 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1254

Startzeit: 01d14b17480dbcd2

Endzeit: 4294967295

Anwendungspfad: C:\Windows\ImmersiveControlPanel\SystemSettings.exe

Berichts-ID: 8f4d2303-b70a-11e5-82ae-448a5b82267f

Vollständiger Name des fehlerhaften Pakets: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: microsoft.windows.immersivecontrolpanel

Error: (01/09/2016 08:52:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: NICO-PC)
Description: Die App „windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (01/09/2016 08:52:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SystemSettings.exe, Version 6.3.9600.17489 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1a7c

Startzeit: 01d14b1735429fcf

Endzeit: 4294967295

Anwendungspfad: C:\Windows\ImmersiveControlPanel\SystemSettings.exe

Berichts-ID: 81e16bd9-b70a-11e5-82ae-448a5b82267f

Vollständiger Name des fehlerhaften Pakets: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: microsoft.windows.immersivecontrolpanel

Error: (01/09/2016 08:52:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: NICO-PC)
Description: Die App „windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (01/09/2016 08:04:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/09/2016 08:04:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/09/2016 08:04:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/09/2016 07:58:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (01/09/2016 07:58:14 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description:

Error: (01/09/2016 07:58:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL8


Systemfehler:
=============
Error: (01/09/2016 08:56:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/09/2016 08:56:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/09/2016 08:56:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/09/2016 08:54:27 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (01/09/2016 08:54:14 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (01/09/2016 08:54:10 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084dpsNicht verfügbar{7022A3B3-D004-4F52-AF11-E9E987FEE25F}

Error: (01/09/2016 08:54:10 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084dpsNicht verfügbar{7022A3B3-D004-4F52-AF11-E9E987FEE25F}

Error: (01/09/2016 08:54:09 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084dpsNicht verfügbar{7022A3B3-D004-4F52-AF11-E9E987FEE25F}

Error: (01/09/2016 08:54:09 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084dpsNicht verfügbar{7022A3B3-D004-4F52-AF11-E9E987FEE25F}

Error: (01/09/2016 08:54:09 PM) (Source: DCOM) (EventID: 10005) (User: NICO-PC)
Description: 1084dpsNicht verfügbar{7022A3B3-D004-4F52-AF11-E9E987FEE25F}


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 14%
Installierter physikalischer RAM: 8068.24 MB
Verfügbarer physikalischer RAM: 6880.92 MB
Summe virtueller Speicher: 16260.24 MB
Verfügbarer virtueller Speicher: 15198.59 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:103.88 GB) (Free:23.67 GB) NTFS
Drive d: (Daten) (Fixed) (Total:931.51 GB) (Free:280.04 GB) NTFS
Drive e: (COBI201601) (CDROM) (Total:3.88 GB) (Free:0 GB) CDFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: AACA7A89)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: D51A6206)

Partition: GPT.

==================== Ende von Addition.txt ============================

deeprybka 10.01.2016 12:40
Im "safemode with networking":

Schritt 1
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Napp 10.01.2016 13:27
Code:
13:22:56.0251 0x0680  TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
13:22:56.0251 0x0680  UEFI system
13:22:59.0799 0x0680  ============================================================
13:22:59.0799 0x0680  Current date / time: 2016/01/10 13:22:59.0799
13:22:59.0799 0x0680  SystemInfo:
13:22:59.0800 0x0680 
13:22:59.0800 0x0680  OS Version: 6.3.9600 ServicePack: 0.0
13:22:59.0800 0x0680  Product type: Workstation
13:22:59.0800 0x0680  ComputerName: NICO-PC
13:22:59.0800 0x0680  UserName: Nico
13:22:59.0800 0x0680  Windows directory: C:\Windows
13:22:59.0800 0x0680  System windows directory: C:\Windows
13:22:59.0800 0x0680  Running under WOW64
13:22:59.0800 0x0680  Processor architecture: Intel x64
13:22:59.0800 0x0680  Number of processors: 4
13:22:59.0800 0x0680  Page size: 0x1000
13:22:59.0800 0x0680  Boot type: Safe boot with network
13:22:59.0800 0x0680  ============================================================
13:22:59.0971 0x0680  KLMD registered as C:\Windows\system32\drivers\29200572.sys
13:22:59.0996 0x0680  System UUID: {10657A38-E3DF-C3CD-C86B-7EF375280BAE}
13:23:00.0187 0x0680  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:00.0388 0x0680  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:00.0398 0x0680  ============================================================
13:23:00.0398 0x0680  \Device\Harddisk0\DR0:
13:23:00.0399 0x0680  GPT partitions:
13:23:00.0399 0x0680  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {A13BDE5E-E4A2-4FAC-A64F-B8950D46D801}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xFA000
13:23:00.0399 0x0680  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {04183732-6523-4225-9131-566C62231112}, Name: EFI system partition, StartLBA 0xFA800, BlocksNum 0x32000
13:23:00.0399 0x0680  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {CAD0DBF3-4A66-4C64-893B-56999659FF61}, Name: Microsoft reserved partition, StartLBA 0x12C800, BlocksNum 0x40000
13:23:00.0399 0x0680  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {2EC5F68E-FAD0-4EA0-A1DA-92AF1180E4ED}, Name: Basic data partition, StartLBA 0x16C800, BlocksNum 0xCFC3800
13:23:00.0399 0x0680  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {4C57568A-AC17-48B8-A6E1-A1C3DDD952DB}, Name: Basic data partition, StartLBA 0xD130000, BlocksNum 0x1B4C000
13:23:00.0399 0x0680  MBR partitions:
13:23:00.0399 0x0680  \Device\Harddisk1\DR1:
13:23:00.0399 0x0680  GPT partitions:
13:23:00.0400 0x0680  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {BF29E670-E675-4D2E-B394-4BFF184F0EAD}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x74706000
13:23:00.0400 0x0680  MBR partitions:
13:23:00.0400 0x0680  ============================================================
13:23:00.0400 0x0680  C: <-> \Device\Harddisk0\DR0\Partition4
13:23:00.0413 0x0680  D: <-> \Device\Harddisk1\DR1\Partition1
13:23:00.0413 0x0680  ============================================================
13:23:00.0413 0x0680  Initialize success
13:23:00.0413 0x0680  ============================================================
13:24:44.0077 0x0444  ============================================================
13:24:44.0077 0x0444  Scan started
13:24:44.0077 0x0444  Mode: Manual; SigCheck; TDLFS;
13:24:44.0077 0x0444  ============================================================
13:24:44.0077 0x0444  KSN ping started
13:24:46.0452 0x0444  KSN ping finished: true
13:24:46.0796 0x0444  ================ Scan system memory ========================
13:24:46.0796 0x0444  System memory - ok
13:24:46.0796 0x0444  ================ Scan services =============================
13:24:46.0843 0x0444  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
13:24:46.0859 0x0444  1394ohci - ok
13:24:46.0874 0x0444  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware          C:\Windows\system32\drivers\3ware.sys
13:24:46.0874 0x0444  3ware - ok
13:24:46.0890 0x0444  [ E796AE43DDD1844281DB4D57294D17C0, 21AE69615044A96041E46476BE814B52C22624B6C7EA6BFC77BB64F69C3C21F5 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
13:24:46.0905 0x0444  ACPI - ok
13:24:46.0905 0x0444  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
13:24:46.0921 0x0444  acpiex - ok
13:24:46.0921 0x0444  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
13:24:46.0921 0x0444  acpipagr - ok
13:24:46.0921 0x0444  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
13:24:46.0937 0x0444  AcpiPmi - ok
13:24:46.0937 0x0444  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
13:24:46.0937 0x0444  acpitime - ok
13:24:46.0968 0x0444  [ C3E7E1F3C85A6788F3BA078BA214341E, A3D72ACE045730DC1C8A6F4E3937C5C765AB447BF7C573BEC53DE8148EB4A1C8 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
13:24:46.0984 0x0444  AdobeFlashPlayerUpdateSvc - ok
13:24:46.0984 0x0444  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
13:24:47.0015 0x0444  ADP80XX - ok
13:24:47.0015 0x0444  [ BCD58DACAA1EAAADC115EDD940478F6D, F31613F583C302F62A00E6766B031531C9E193CAED563689B178BA257715B992 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
13:24:47.0030 0x0444  AeLookupSvc - ok
13:24:47.0046 0x0444  [ A460C3AF3755A2A79A3C8EFE72E147B5, 62CEA85DA53D86D3E7B5D79F94095C6126FFF3DEE1427BBF3DEF5EA366B4513B ] AFD            C:\Windows\system32\drivers\afd.sys
13:24:47.0062 0x0444  AFD - ok
13:24:47.0062 0x0444  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\Windows\system32\drivers\agp440.sys
13:24:47.0077 0x0444  agp440 - ok
13:24:47.0077 0x0444  [ FE14D249D39368CA62D8DA6BC94AC694, E1036E22BFBD3750FD2D3DA6AB939B2DD54E824F4BD3E6539EF0E45AB5453DD1 ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
13:24:47.0077 0x0444  ahcache - ok
13:24:47.0093 0x0444  [ 14A45BE6F5678339F0EC5752D9849410, DD0F60E96FAC68FBD5B86382E541408C613BD0F871D0E0A1EF9AB6E7B26E545C ] ALG            C:\Windows\System32\alg.exe
13:24:47.0093 0x0444  ALG - ok
13:24:47.0093 0x0444  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
13:24:47.0109 0x0444  AmdK8 - ok
13:24:47.0109 0x0444  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
13:24:47.0124 0x0444  AmdPPM - ok
13:24:47.0124 0x0444  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
13:24:47.0124 0x0444  amdsata - ok
13:24:47.0140 0x0444  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
13:24:47.0140 0x0444  amdsbs - ok
13:24:47.0156 0x0444  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
13:24:47.0156 0x0444  amdxata - ok
13:24:47.0156 0x0444  [ 415DD71628795197F7AFC176CBADC74E, 5F0359053A6CD6EE239139E0E6F46E1FA9A73F017C0CE9B7BC052216B2C846EC ] AppID          C:\Windows\system32\drivers\appid.sys
13:24:47.0171 0x0444  AppID - ok
13:24:47.0171 0x0444  [ 88358135810B9DFD830A9D3A8C3D149A, DF914DA3828EE2310895D156342E3B3DF5E8C6F6F9B851C359E82A1F48180D4B ] AppIDSvc        C:\Windows\System32\appidsvc.dll
13:24:47.0171 0x0444  AppIDSvc - ok
13:24:47.0187 0x0444  [ 680BFB820C5A943AB709BAA2B1EF27F2, A51D2A7976A762FE470C13C6D1BA0319A0FB19C9E66BF02AA44F83EAEC7130F8 ] Appinfo        C:\Windows\System32\appinfo.dll
13:24:47.0187 0x0444  Appinfo - ok
13:24:47.0202 0x0444  [ 35E28923A23ADABAA5A1B43256D0AB58, A5F3AF8BBEE58B2165BAFACC5FF8B167B55B020998D3D1565C2229ED8753B269 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
13:24:47.0218 0x0444  AppReadiness - ok
13:24:47.0234 0x0444  [ 573542B5E97772021B73E854DA861DAA, C3FD00FA28060F8D7CDFD455BBB5FF8239CB76DDFFF2BDAE6AA944674DD993D3 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
13:24:47.0265 0x0444  AppXSvc - ok
13:24:47.0281 0x0444  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
13:24:47.0281 0x0444  arcsas - ok
13:24:47.0327 0x0444  [ DE6031BFA7FB56E7548C302AD708531D, 4DB0309A8F01B87BEAB46642ECDAABA059D852AB47C181AFF1EF1697F2DBA6DF ] ArcService      D:\Neverwinter\Arc\ArcService.exe
13:24:47.0327 0x0444  ArcService - ok
13:24:47.0327 0x0444  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi          C:\Windows\system32\drivers\atapi.sys
13:24:47.0343 0x0444  atapi - ok
13:24:47.0343 0x0444  [ 431FE56F5A2F5937994CB2DA330B47DB, E5AED551529A21494114959251FDF566802DD6D9B9D86A937A0EECE53338CAC7 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
13:24:47.0359 0x0444  AudioEndpointBuilder - ok
13:24:47.0374 0x0444  [ 0F03CC00645D7F841879A048787D6AC7, 3ECD2486157469F2EDB63D4868338D1445F2909153DF0AFFE432083730EEE3F5 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
13:24:47.0390 0x0444  Audiosrv - ok
13:24:47.0390 0x0444  [ 3C6ED74AF41DD1A5585CE5EF3D00915F, A742F576407776634E5A8E49C60023FFDF395DE0B2DE36662A23F85B79405ED2 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
13:24:47.0406 0x0444  AxInstSV - ok
13:24:47.0421 0x0444  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
13:24:47.0437 0x0444  b06bdrv - ok
13:24:47.0437 0x0444  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
13:24:47.0437 0x0444  BasicDisplay - ok
13:24:47.0437 0x0444  [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
13:24:47.0452 0x0444  BasicRender - ok
13:24:47.0452 0x0444  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
13:24:47.0452 0x0444  bcmfn2 - ok
13:24:47.0468 0x0444  [ 4B6F61BD394DCEDA9B06D702836531C2, 83C739467BD9A00FE09BCE83BB9409EA2DA62FCDD2384F9EE98626226223E918 ] BDESVC          C:\Windows\System32\bdesvc.dll
13:24:47.0484 0x0444  BDESVC - ok
13:24:47.0484 0x0444  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\Windows\system32\drivers\Beep.sys
13:24:47.0484 0x0444  Beep - ok
13:24:47.0499 0x0444  [ 8F2AD111B47A190F325EE7495D3C1803, C61F1506E74A9EFBB61B8A06B30886B6E891C33211F755F30B924EBA202ECEC5 ] BFE            C:\Windows\System32\bfe.dll
13:24:47.0531 0x0444  BFE - ok
13:24:47.0562 0x0444  [ 9CF4428D09C73B6F633AF9E58B835689, 173D1A8A3E1B1CA6D0E4773B048B8B6549A8124E87942992BDE30211BEFFBE20 ] BHDrvx64        C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\BASHDefs\20160104.001\BHDrvx64.sys
13:24:47.0593 0x0444  BHDrvx64 - ok
13:24:47.0609 0x0444  [ 48554994279BFE17A3D2B00076D0CB1A, 6521B1EC0BC6B01F63976370D89FE7DC2E7404899F68B6FAC37A9173B9C5D489 ] BITS            C:\Windows\System32\qmgr.dll
13:24:47.0640 0x0444  BITS - ok
13:24:47.0640 0x0444  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
13:24:47.0656 0x0444  bowser - ok
13:24:47.0656 0x0444  [ FA601515FF2B59F25FDD8EDB1D2A1104, 21DFB53241F8E880F7546B9ADF38F47D6AD0782EC7F8F0284ED69DE7CEF7DCB9 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
13:24:47.0671 0x0444  BrokerInfrastructure - ok
13:24:47.0671 0x0444  [ BC111AADACD0BF59D56547461D13AB6E, 91E3619930C29EE4B2683683888BA7EE3CF6B1DDB0C19A14E0880470CBE40EF4 ] Browser        C:\Windows\System32\browser.dll
13:24:47.0687 0x0444  Browser - ok
13:24:47.0687 0x0444  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
13:24:47.0687 0x0444  BthAvrcpTg - ok
13:24:47.0687 0x0444  [ 272A62B660A48AEF366F8A1836CED19F, 78EFAC6B1B2313482329BBFFBF0DDA6462BD88E5BE3C817C5E8E0EAF3074C925 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
13:24:47.0702 0x0444  BthHFEnum - ok
13:24:47.0702 0x0444  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
13:24:47.0702 0x0444  bthhfhid - ok
13:24:47.0718 0x0444  [ 9307A4B743D277C499CDA8E19E5687AC, 7A01989EC3D54581F292BDEDC9B9445F2ABD50165102617E3089BDD061C63A19 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
13:24:47.0734 0x0444  BthHFSrv - ok
13:24:47.0734 0x0444  [ 66B791F6B11DC4303DD18A224A501542, 502AE4D6FFC6B0FCED081B0E0F61F699F96F20DFEE737B53828F5DEE3BD0FCB1 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
13:24:47.0749 0x0444  BTHMODEM - ok
13:24:47.0749 0x0444  [ 043A0F37631BF453F16D478B71320F46, C368296B802984F438852927B8A40EA3F4205724A05828F3173F08EC17228356 ] bthserv        C:\Windows\system32\bthserv.dll
13:24:47.0749 0x0444  bthserv - ok
13:24:47.0781 0x0444  [ 68BD23A0AD9E934F037A1D8A1929D1E2, 7104B04435930D085D01779065C8F293A265800D90C9DEFB19C998D9326E44E7 ] c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
13:24:47.0812 0x0444  c2cautoupdatesvc - ok
13:24:47.0843 0x0444  [ 13297729C696656F990A5DBA53023129, EB2B34B04B79756199DBBBDE99ACBB576D20C7C0AF3E4F3C0CF0040948216AAC ] c2cpnrsvc      C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
13:24:47.0874 0x0444  c2cpnrsvc - ok
13:24:47.0890 0x0444  [ 5A1C7DBDDB001BC6F1D1720E655445E2, 07A766C804D0709936FF18A2F67C49D6499BEF9CEEB1EF69F654A35268A11027 ] ccSet_NIS      C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys
13:24:47.0890 0x0444  ccSet_NIS - ok
13:24:47.0890 0x0444  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
13:24:47.0906 0x0444  cdfs - ok
13:24:47.0906 0x0444  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom          C:\Windows\System32\drivers\cdrom.sys
13:24:47.0921 0x0444  cdrom - ok
13:24:47.0921 0x0444  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] CertPropSvc    C:\Windows\System32\certprop.dll
13:24:47.0937 0x0444  CertPropSvc - ok
13:24:47.0937 0x0444  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\Windows\System32\drivers\circlass.sys
13:24:47.0937 0x0444  circlass - ok
13:24:47.0952 0x0444  [ 8EB7E70C2D348FE2476A2E3F2D585E3D, 2B5D407FACF1D049261026CC552A7C93B028A661B0F4E959815EAE7670054127 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
13:24:47.0968 0x0444  CLFS - ok
13:24:47.0968 0x0444  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
13:24:47.0984 0x0444  CmBatt - ok
13:24:47.0984 0x0444  [ 0DE32A0BB1FE2A773666572F79584520, C417C12476B937265BEDC9A2C3C3F6C50FD19AEC096362337B0921627A2A92EA ] CNG            C:\Windows\system32\Drivers\cng.sys
13:24:47.0999 0x0444  CNG - ok
13:24:48.0015 0x0444  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\Windows\System32\drivers\CompositeBus.sys
13:24:48.0015 0x0444  CompositeBus - ok
13:24:48.0015 0x0444  COMSysApp - ok
13:24:48.0015 0x0444  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\Windows\system32\drivers\condrv.sys
13:24:48.0031 0x0444  condrv - ok
13:24:48.0046 0x0444  [ DAC4D7D79C07957F237E1A4F24435E96, F0D5C21A403580D71F1F6B049C5BB043D3257D39FABCDE623E81CD48034610AC ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
13:24:48.0077 0x0444  cphs - ok
13:24:48.0093 0x0444  [ 6324F0D18FB52833BA64BC828E29054C, 04118FA1BDFC512F76E4A81FEF34C78B6BD98429DB1D65123B6802B4A1E30584 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
13:24:48.0093 0x0444  CryptSvc - ok
13:24:48.0109 0x0444  [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam            C:\Windows\system32\drivers\dam.sys
13:24:48.0109 0x0444  dam - ok
13:24:48.0124 0x0444  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] DcomLaunch      C:\Windows\system32\rpcss.dll
13:24:48.0140 0x0444  DcomLaunch - ok
13:24:48.0156 0x0444  [ 95E1ABFB27F8A62ED764805775F0D2F3, 692865DA60C93481E01592883678B2C51FD9AC9A835DFB00A8E3F2DFEE7AB0ED ] defragsvc      C:\Windows\System32\defragsvc.dll
13:24:48.0171 0x0444  defragsvc - ok
13:24:48.0187 0x0444  [ FF086DEF5995558CCB1B5AAC2110195D, CED52FF01F9247BFDAFC5C7EFC538F8638146ED715574A422496EE0F846CB079 ] DeviceAssociationService C:\Windows\system32\das.dll
13:24:48.0202 0x0444  DeviceAssociationService - ok
13:24:48.0202 0x0444  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
13:24:48.0202 0x0444  DeviceInstall - ok
13:24:48.0218 0x0444  [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
13:24:48.0218 0x0444  Dfsc - ok
13:24:48.0234 0x0444  [ 3EEAADA3125431980E5804ED7143458A, 381E12C83E3211C255B321D35536F4049D67E31061F8D82155E4D4509E97F43D ] Dhcp            C:\Windows\system32\dhcpcore.dll
13:24:48.0249 0x0444  Dhcp - ok
13:24:48.0265 0x0444  [ 21EDAD8188372C912B7BB9B1C6CB0D38, 4A102745DE8A2A82D2C069B30503BF9FF2312A035A82854F84EF9C27E3533CEE ] DiagTrack      C:\Windows\system32\diagtrack.dll
13:24:48.0312 0x0444  DiagTrack - ok
13:24:48.0312 0x0444  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\Windows\system32\drivers\disk.sys
13:24:48.0312 0x0444  disk - ok
13:24:48.0327 0x0444  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
13:24:48.0327 0x0444  dmvsc - ok
13:24:48.0327 0x0444  [ 33ADFB7453BF3271463712C4BCE61AD1, A1DB30F874BA7B2C4C653494D70B46B94BF7D39D0DD8559F6CA7A14B676FD617 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
13:24:48.0343 0x0444  Dnscache - ok
13:24:48.0343 0x0444  [ 811EACBCC7C51A03AE11F13CC27B2AB6, FAB94F84950FFB7D3649BAFB8D96D43B880D7FDE8D5B879472AE26C4BC4203B0 ] dot3svc        C:\Windows\System32\dot3svc.dll
13:24:48.0359 0x0444  dot3svc - ok
13:24:48.0359 0x0444  [ B99CB575986789A93A683DCF292A43A1, 6ACEA31C723B74003E106FC8303542FCC6DBC4952B6B523F6590D006BE57238D ] DPS            C:\Windows\system32\dps.dll
13:24:48.0374 0x0444  DPS - ok
13:24:48.0374 0x0444  [ 00C594D5A1DBD22AD8B2902B9F6EFF94, 2920D62B5F7C49A8AFA80FCAD1E834BBAA670AEBDD7E6F21F0496D1D3CCB4E90 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
13:24:48.0390 0x0444  drmkaud - ok
13:24:48.0390 0x0444  [ 263625A4F616538EB867B6306A6590DB, 2A064720C247EAA3446EFDCC9E01D84CBA875905D78DFED0FBD62D1EE422D416 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
13:24:48.0406 0x0444  DsmSvc - ok
13:24:48.0406 0x0444  [ 33F90B202E9DD9B7D489EB59310FDC34, 6ECF6669433E090E9CF6B1875AF18D2C06F8CDB3901D58BF89C3E2202574ABBD ] dtsoftbus01    C:\Windows\System32\drivers\dtsoftbus01.sys
13:24:48.0421 0x0444  dtsoftbus01 - ok
13:24:48.0437 0x0444  [ E1BB0B6F00F470B451AB45EA13EBA0B3, 3A2FC2175B69A5EB98D6C2D563DBFDCB320647AB87A14E47FAE800423DCACDAB ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
13:24:48.0484 0x0444  DXGKrnl - ok
13:24:48.0484 0x0444  [ E253530BD5EDE28F1FF6AF93C4D8034D, 787A70C3E946348F066FB8EB81FCE60157217D93FD78ADC631B5835E8D76A253 ] Eaphost        C:\Windows\System32\eapsvc.dll
13:24:48.0499 0x0444  Eaphost - ok
13:24:48.0499 0x0444  EasyAntiCheat - ok
13:24:48.0546 0x0444  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
13:24:48.0624 0x0444  ebdrv - ok
13:24:48.0640 0x0444  [ DB817375F4D6D3F2556DE7777775D885, 6DC5CC936E26CBB468ACDD008F6F8B30F8D9D1EC631BCDDF7E692814C9A54D7D ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
13:24:48.0656 0x0444  eeCtrl - ok
13:24:48.0656 0x0444  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] EFS            C:\Windows\System32\lsass.exe
13:24:48.0656 0x0444  EFS - ok
13:24:48.0656 0x0444  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
13:24:48.0671 0x0444  EhStorClass - ok
13:24:48.0671 0x0444  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
13:24:48.0687 0x0444  EhStorTcgDrv - ok
13:24:48.0687 0x0444  [ A47F76D4AAFD6193AAC5E049C560213D, 2B6E4EB31394C4D8D2444A197FFCC3C702BC17B0F7BDF0D6FF87DF5C14016FC1 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
13:24:48.0687 0x0444  EraserUtilRebootDrv - ok
13:24:48.0702 0x0444  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\Windows\System32\drivers\errdev.sys
13:24:48.0702 0x0444  ErrDev - ok
13:24:48.0718 0x0444  [ F00C593994D57C75273F820653440536, 2DC986D9890EC907405FB2045E6F55ACC384169B45F0B56CCB1A953CF71D9A5D ] EventSystem    C:\Windows\system32\es.dll
13:24:48.0734 0x0444  EventSystem - ok
13:24:48.0734 0x0444  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat          C:\Windows\system32\drivers\exfat.sys
13:24:48.0749 0x0444  exfat - ok
13:24:48.0749 0x0444  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
13:24:48.0765 0x0444  fastfat - ok
13:24:48.0781 0x0444  [ 304B6AEC4639A7CCCCF544C6BA6177B2, B75CDD52FD3890B3008E06C503945D1E36478F0EC5E067C8DBC2822D7935D24B ] Fax            C:\Windows\system32\fxssvc.exe
13:24:48.0796 0x0444  Fax - ok
13:24:48.0796 0x0444  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc            C:\Windows\System32\drivers\fdc.sys
13:24:48.0812 0x0444  fdc - ok
13:24:48.0812 0x0444  [ 020D2F29009F893ADEFF4405B4B44565, 9F8501064C72933D1442DA00E70392B30D0207EB7D60F50E6648FF363799E6F1 ] fdPHost        C:\Windows\system32\fdPHost.dll
13:24:48.0812 0x0444  fdPHost - ok
13:24:48.0812 0x0444  [ E80D2EDD2F88B6E20076A0A4F5A5A245, E3CD6E0BE152B22E8A7340EFFD10CCDB1B632CD3EDF487E83F697D2E22A7D594 ] FDResPub        C:\Windows\system32\fdrespub.dll
13:24:48.0828 0x0444  FDResPub - ok
13:24:48.0828 0x0444  [ 47AB7D16EDE434B934AA4D661456C2D5, D375A92FB3E4BB0A8DA5270DACC888E53FB9F514516039FE6DAE4D4EF6B9A970 ] fhsvc          C:\Windows\system32\fhsvc.dll
13:24:48.0843 0x0444  fhsvc - ok
13:24:48.0843 0x0444  [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
13:24:48.0843 0x0444  FileInfo - ok
13:24:48.0843 0x0444  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
13:24:48.0859 0x0444  Filetrace - ok
13:24:48.0859 0x0444  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
13:24:48.0874 0x0444  flpydisk - ok
13:24:48.0874 0x0444  [ C1FB505A73FA2E9019D32444AB33B75A, 765F0635C18295855CA4C0394192E8B94BA2EA1C4D74F86B720358ABA019FFAA ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
13:24:48.0890 0x0444  FltMgr - ok
13:24:48.0906 0x0444  [ 2F225BC85B84C04EA01BAB8D8DACFA83, 1F6E20C8F0FFD3FA60BDF556FB8392FE014E6519C3F314D1D22D394DB2A040CA ] FontCache      C:\Windows\system32\FntCache.dll
13:24:48.0937 0x0444  FontCache - ok
13:24:48.0953 0x0444  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:24:48.0953 0x0444  FontCache3.0.0.0 - ok
13:24:48.0953 0x0444  [ A7C31B168F371E8E6796219F23E354DB, C51C9BF568F1E96CBBE57D2432B38F93F40520086DDB6AAAAC48CBCD1691B441 ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
13:24:48.0968 0x0444  FsDepends - ok
13:24:48.0968 0x0444  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
13:24:48.0968 0x0444  Fs_Rec - ok
13:24:48.0984 0x0444  [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
13:24:48.0999 0x0444  fvevol - ok
13:24:48.0999 0x0444  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM          C:\Windows\System32\drivers\fxppm.sys
13:24:49.0015 0x0444  FxPPM - ok
13:24:49.0015 0x0444  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
13:24:49.0015 0x0444  gagp30kx - ok
13:24:49.0015 0x0444  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
13:24:49.0031 0x0444  gencounter - ok
13:24:49.0046 0x0444  [ AD4731C477DF8875CF70176323EDE3B7, 51C4EDE368A53774B75F0F208E1BA66C253119337DFF5DB98663742A1BD97DB4 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
13:24:49.0078 0x0444  GfExperienceService - ok
13:24:49.0078 0x0444  [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
13:24:49.0093 0x0444  GPIOClx0101 - ok
13:24:49.0109 0x0444  [ 0D03F87D4FF4ADBAF8336DD80548155A, BC10CFA88EA2F41A8D96CB810B7953A4C168B79273A3E804A9F020F49AB58CD3 ] gpsvc          C:\Windows\System32\gpsvc.dll
13:24:49.0140 0x0444  gpsvc - ok
13:24:49.0140 0x0444  [ 7F79205B4EFA98F0767309479C8C01C6, 4B576903A83F33A8CF31D3887144A3D51C56D1187115C83AC99C0E9F6B4BF128 ] Hamachi        C:\Windows\system32\DRIVERS\Hamdrv.sys
13:24:49.0156 0x0444  Hamachi - ok
13:24:49.0171 0x0444  Hamachi2Svc - ok
13:24:49.0187 0x0444  [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
13:24:49.0203 0x0444  HdAudAddService - ok
13:24:49.0203 0x0444  [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
13:24:49.0218 0x0444  HDAudBus - ok
13:24:49.0218 0x0444  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
13:24:49.0218 0x0444  HidBatt - ok
13:24:49.0234 0x0444  [ 42F88B57CAE42FC10059C887B3FCFCEA, 9363AA2B8E839A6935A7C6A36C491938DF78024886DCCE6D29CB18E1D6A6D806 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
13:24:49.0234 0x0444  HidBth - ok
13:24:49.0234 0x0444  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
13:24:49.0249 0x0444  hidi2c - ok
13:24:49.0249 0x0444  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr          C:\Windows\System32\drivers\hidir.sys
13:24:49.0249 0x0444  HidIr - ok
13:24:49.0249 0x0444  [ EA85B5093DF7B5C3E80362B053740AE2, 1D4251385402A2ADEE8FA1642F54180304F88337DA74989BDE44025ABB145FE5 ] hidserv        C:\Windows\system32\hidserv.dll
13:24:49.0265 0x0444  hidserv - ok
13:24:49.0265 0x0444  [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
13:24:49.0265 0x0444  HidUsb - ok
13:24:49.0281 0x0444  [ 93C4315F47F8D635C6DB0DF49FCE10EE, 70C52B8927D54ACD23F27948780B522974250FD5CD81AA9801C3F158C402889F ] hkmsvc          C:\Windows\system32\kmsvc.dll
13:24:49.0281 0x0444  hkmsvc - ok
13:24:49.0296 0x0444  [ AC49522ED106BD4B545D6614D71C2445, 40BD738A301170378ECFC031635EB04E2F812B676376CADDD6607ECABEC9255F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:24:49.0296 0x0444  HomeGroupListener - ok
13:24:49.0312 0x0444  [ 99932E30CE0283B73BB6E5019E150394, 1F88C2F56A7B8E1F75E6359281F418F9661DA4FB7B7D7B14FA7F718B15D4DCE0 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:24:49.0328 0x0444  HomeGroupProvider - ok
13:24:49.0328 0x0444  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
13:24:49.0343 0x0444  HpSAMD - ok
13:24:49.0374 0x0444  [ E87A6D3B8FECD5B93BC0CFBB48C27970, 55C49B6F3822450447C082B40A263F3370694DB53AD0018ADEB911E4A9F65A88 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
13:24:49.0406 0x0444  HTTP - ok
13:24:49.0406 0x0444  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
13:24:49.0406 0x0444  hwpolicy - ok
13:24:49.0406 0x0444  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
13:24:49.0421 0x0444  hyperkbd - ok
13:24:49.0421 0x0444  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\Windows\system32\DRIVERS\HyperVideo.sys
13:24:49.0421 0x0444  HyperVideo - ok
13:24:49.0421 0x0444  [ 49EE0AE9E5B64FFBBD06D55C4984B598, 8866627F9241B24A59C81D8BCC67A4DCA87576F589599BA291D0E323F679EB4D ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
13:24:49.0437 0x0444  i8042prt - ok
13:24:49.0437 0x0444  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
13:24:49.0437 0x0444  iaLPSSi_GPIO - ok
13:24:49.0453 0x0444  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C    C:\Windows\System32\drivers\iaLPSSi_I2C.sys
13:24:49.0453 0x0444  iaLPSSi_I2C - ok
13:24:49.0468 0x0444  [ 9EBE1AE8B3DA91D06BE1971EB37F7DA0, 55B0E66139C966AF0D4955B44363123198C559968C864DA85F6610CF1C844E8D ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
13:24:49.0484 0x0444  iaStorA - ok
13:24:49.0484 0x0444  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
13:24:49.0499 0x0444  iaStorAV - ok
13:24:49.0515 0x0444  [ D524B034148F14C60F1CA66D267EE56A, 18045270C5CA718501285EE05EDED8B0EF998A881ACF19D9602F91A2A30E40AB ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
13:24:49.0515 0x0444  IAStorDataMgrSvc - ok
13:24:49.0531 0x0444  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
13:24:49.0531 0x0444  iaStorV - ok
13:24:49.0546 0x0444  [ 3448DB2B812AA873ED6E5D609B1DB067, E0F9B35FE59713C09BD838FAD5305DF5FDF24DF1D88F8849F7F88466CF93A7F7 ] IDSVia64        C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\IPSDefs\20160108.001\IDSvia64.sys
13:24:49.0578 0x0444  IDSVia64 - ok
13:24:49.0578 0x0444  IEEtwCollectorService - ok
13:24:49.0656 0x0444  [ 5863E2DD2E5C2D1B1F70C3826C162A7B, A6A0DBFA91F53D116AFFC1644F636A9D33A20B00A842A190190584F8AE2D1FF0 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
13:24:49.0687 0x07f8  Object required for P2P: [ C3E7E1F3C85A6788F3BA078BA214341E ] AdobeFlashPlayerUpdateSvc
13:24:49.0734 0x0444  igfx - ok
13:24:49.0749 0x0444  [ C5202C7669226FF13A74228BD42AD982, BA843DEF6649DF34F9D0D0A380E77557D7785B8239A61EA33EFF08AEF0C8E6DE ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
13:24:49.0765 0x0444  igfxCUIService1.0.0.0 - ok
13:24:49.0781 0x0444  [ AF8A43C376F83A4A1E7DA16461EDE114, EBA10519B074888355A4FC11D52FF1E6A52F88F754B7F1F9863A8313638645CB ] IKEEXT          C:\Windows\System32\ikeext.dll
13:24:49.0812 0x0444  IKEEXT - ok
13:24:49.0812 0x0444  [ 5950F69F9B345952F3C2275C39EA393B, 382923DE0F5F25285F8C86BA628350DF1CFB6E63FF20736CF9285FB0F36A76DE ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
13:24:49.0812 0x0444  intaud_WaveExtensible - ok
13:24:49.0874 0x0444  [ 39246F2CFBF1D32C3A12E242661EC039, EADF06D9B142844C16C2B0E412D708DB02BA07E2CD96BBFB2F0984DD6BB63E28 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
13:24:49.0953 0x0444  IntcAzAudAddService - ok
13:24:49.0968 0x0444  [ DAE6C3099D291EED8922A65C29ABCF52, AD0A932345382824122F84AF97A8609BAE1B916A3B9FD608779A1411E37D3643 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
13:24:49.0984 0x0444  Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
13:24:52.0109 0x07f8  Object send P2P result: true
13:24:52.0297 0x0444  Detect skipped due to KSN trusted
13:24:52.0297 0x0444  Intel(R) Capability Licensing Service Interface - ok
13:24:52.0328 0x0444  [ D45226E3E7A25F1E7CE8DF8FD0A2A098, 7BD74E9E3CB0A83D26BA3FD8177C6B9BA46A8695B6569CF7887FDC87947DA2D6 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
13:24:52.0359 0x0444  Intel(R) Capability Licensing Service TCP IP Interface - ok
13:24:52.0359 0x0444  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\Windows\system32\drivers\intelide.sys
13:24:52.0359 0x0444  intelide - ok
13:24:52.0359 0x0444  [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep        C:\Windows\system32\drivers\intelpep.sys
13:24:52.0375 0x0444  intelpep - ok
13:24:52.0375 0x0444  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
13:24:52.0375 0x0444  intelppm - ok
13:24:52.0390 0x0444  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:24:52.0390 0x0444  IpFilterDriver - ok
13:24:52.0406 0x0444  [ A5800036E4EA06697A34742A24ACFBE1, BA67060526E9213000B4206F86A74F904999AD7018EFCBE4FE9708650DA9D973 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
13:24:52.0437 0x0444  iphlpsvc - ok
13:24:52.0437 0x0444  [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
13:24:52.0453 0x0444  IPMIDRV - ok
13:24:52.0453 0x0444  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
13:24:52.0468 0x0444  IPNAT - ok
13:24:52.0468 0x0444  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\Windows\system32\drivers\irenum.sys
13:24:52.0468 0x0444  IRENUM - ok
13:24:52.0468 0x0444  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\Windows\system32\drivers\isapnp.sys
13:24:52.0484 0x0444  isapnp - ok
13:24:52.0484 0x0444  [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
13:24:52.0500 0x0444  iScsiPrt - ok
13:24:52.0500 0x0444  [ F1D3A377ED9BA1CA449824C41CAF104C, EA0E90D5D827664CFDB644753C6DC134C3F8F852F24175EC8328A9FA925B25BF ] iwdbus          C:\Windows\System32\drivers\iwdbus.sys
13:24:52.0500 0x0444  iwdbus - ok
13:24:52.0515 0x0444  [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
13:24:52.0515 0x0444  jhi_service - ok
13:24:52.0515 0x0444  [ 5917AFE4A3F695A54B99C1849C8207FE, DD57638966F2F0387DCF9DA4BBAEE3CDD8CC6F1A2D49581A0374D46A565BED4F ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
13:24:52.0531 0x0444  kbdclass - ok
13:24:52.0531 0x0444  [ 8CD840A062F6BDF41DDE3ACB96164B72, AEAE867F3557C1CE6B931E19D7144A3BD3CBABD81B1542667680D54FC24DEBE1 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
13:24:52.0531 0x0444  kbdhid - ok
13:24:52.0547 0x0444  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic          C:\Windows\system32\DRIVERS\kdnic.sys
13:24:52.0547 0x0444  kdnic - ok
13:24:52.0547 0x0444  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] KeyIso          C:\Windows\system32\lsass.exe
13:24:52.0562 0x0444  KeyIso - ok
13:24:52.0562 0x0444  [ 4E829B18D5BAEC29893792A3C671A847, 64C3B99F53A9D1ACA802B46B09E820AD210B667D5A1CD0ADAF1F12944B15B52E ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
13:24:52.0562 0x0444  KSecDD - ok
13:24:52.0578 0x0444  [ 35C19AF2116F67914712D7C4CBE47B8C, 5F976726880A6E51D7ABFA7E3EF7294C6FB7F383DC5710A2C2EC8DD26DAEC204 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
13:24:52.0578 0x0444  KSecPkg - ok
13:24:52.0578 0x0444  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
13:24:52.0593 0x0444  ksthunk - ok
13:24:52.0593 0x0444  [ C1591A66028C71147A3E2EAB0B1CCB7E, 82F3D5DCC1614398A144D9791E4BAA814DBA9112677341FD57D5E9834CEDEB41 ] KtmRm          C:\Windows\system32\msdtckrm.dll
13:24:52.0609 0x0444  KtmRm - ok
13:24:52.0625 0x0444  [ CA2828DDE4B09FEFFDB7CE68B3D8D00A, B514792FF1EF36C678BB51644A1C420105D5E2CD6DD5A89A3FB252D08277A40C ] LanmanServer    C:\Windows\system32\srvsvc.dll
13:24:52.0640 0x0444  LanmanServer - ok
13:24:52.0640 0x0444  [ 3DBD9100745F9B8506B8FEC6FE6CCDE3, C3EF2856A1680AFDE133887E48946CF9CAB6755C3BDC07F0326965DCD4096F62 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:24:52.0656 0x0444  LanmanWorkstation - ok
13:24:52.0656 0x0444  [ 8B9F3796EC1762CF255BDB324E5529C8, F73D6BEF19BE20AEB18DA82CB63E9D8B50ACBBE4ED9B646EF0C9F598F6B81F94 ] lfsvc          C:\Windows\System32\GeofenceMonitorService.dll
13:24:52.0687 0x0444  lfsvc - ok
13:24:52.0687 0x0444  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
13:24:52.0687 0x0444  lltdio - ok
13:24:52.0703 0x0444  [ DAE98CC96C5EE308BF4EA7B18F226CB8, 7A6CC56BF075010707715AB6608764291E358EDF27C806A025532869004C686B ] lltdsvc        C:\Windows\System32\lltdsvc.dll
13:24:52.0703 0x0444  lltdsvc - ok
13:24:52.0718 0x0444  [ 1E2662D847B7D9995C65D90D254A7E0F, AFD4063D2071FFCB6B0EAC0715276D986F42326919C86E525DCE12E1109A93E2 ] lmhosts        C:\Windows\System32\lmhsvc.dll
13:24:52.0718 0x0444  lmhosts - ok
13:24:52.0734 0x0444  [ 7BAC5AE7E6458B2EF22A6D859B57DB71, 53398857417C75610D655ABAC9CEC7E52F8CDB5E1B23A0E2602E156868717E3D ] LMIGuardianSvc  C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
13:24:52.0734 0x0444  LMIGuardianSvc - ok
13:24:52.0734 0x0444  [ 0F28935ECF1FBDEC22BAF720A5A94564, A4E8E13FD7FE1882243AD7139D5E0925F09069616920382F952D79586A4936E7 ] LMIInfo        C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
13:24:52.0750 0x0444  LMIInfo - ok
13:24:52.0750 0x0444  [ 52F03F995E4AA6922867511A90F542B1, 125EFCABC0A66A4AC24B034388EB6B62F5E9D3DCBEA2B72542835DE38B4B3D90 ] LMIMaint        C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
13:24:52.0765 0x0444  LMIMaint - ok
13:24:52.0765 0x0444  [ 413ECDCFAD9A82804D3674C8D7EEC24E, C8A65ED0B079D16D1A4449E840B4A9475388FBE61B5A84DFEFC35F4FB3B9A9B1 ] lmimirr        C:\Windows\system32\DRIVERS\lmimirr.sys
13:24:52.0781 0x0444  lmimirr - ok
13:24:52.0781 0x0444  LMIRfsClientNP - ok
13:24:52.0781 0x0444  [ C57D3FAA50E6F395759FFB7C709BD944, 7B0B86F0E710934D57801E1F7BB048AD878F871147B2A16BBF81219A4022B499 ] LMIRfsDriver    C:\Windows\system32\drivers\LMIRfsDriver.sys
13:24:52.0781 0x0444  LMIRfsDriver - ok
13:24:52.0797 0x0444  [ 08E2B577DB95156F9A658C988EE71F5D, D229FFD97EE9478169D2418A722FD2AD6AD10108FF1B0156BE9A1ADF38B5633A ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
13:24:52.0797 0x0444  LMS - ok
13:24:52.0812 0x0444  [ D3760BC17E1755091B7120CF32DBF56B, 2B31CA0CD838BEE0103054520E2FBEA2436A07D99E711B14543B85F3A511478F ] LogMeIn        C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
13:24:52.0828 0x0444  LogMeIn - ok
13:24:52.0828 0x0444  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
13:24:52.0828 0x0444  LSI_SAS - ok
13:24:52.0843 0x0444  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
13:24:52.0843 0x0444  LSI_SAS2 - ok
13:24:52.0843 0x0444  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\Windows\system32\drivers\lsi_sas3.sys
13:24:52.0859 0x0444  LSI_SAS3 - ok
13:24:52.0859 0x0444  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
13:24:52.0859 0x0444  LSI_SSS - ok
13:24:52.0875 0x0444  [ 9A7A7E45DAED2E8C2816716D8D28236A, C94787988826E546A8DC752BD6BE4EA7423DC3762B2D371DB297A63F865A95FF ] LSM            C:\Windows\System32\lsm.dll
13:24:52.0906 0x0444  LSM - ok
13:24:52.0906 0x0444  [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv          C:\Windows\system32\drivers\luafv.sys
13:24:52.0906 0x0444  luafv - ok
13:24:52.0922 0x0444  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas        C:\Windows\system32\drivers\megasas.sys
13:24:52.0922 0x0444  megasas - ok
13:24:52.0937 0x0444  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\Windows\system32\drivers\megasr.sys
13:24:52.0953 0x0444  megasr - ok
13:24:52.0953 0x0444  [ E0EF6C1399A9B1AAA0B28590411BED04, 10C193D1ED434A6DC2AD8C450012B9AF1C848A0A0B3B775F13495648FB77E009 ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
13:24:52.0953 0x0444  MEIx64 - ok
13:24:52.0968 0x0444  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] MMCSS          C:\Windows\system32\mmcss.dll
13:24:52.0968 0x0444  MMCSS - ok
13:24:52.0968 0x0444  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem          C:\Windows\system32\drivers\modem.sys
13:24:52.0984 0x0444  Modem - ok
13:24:52.0984 0x0444  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor        C:\Windows\System32\drivers\monitor.sys
13:24:52.0984 0x0444  monitor - ok
13:24:53.0000 0x0444  [ 08374E4E5B8914DE6067CBA99F61E930, CBB1390D6523FC968BEDF78FD13699488621ACB2CD1DF55D1606316090548661 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
13:24:53.0000 0x0444  mouclass - ok
13:24:53.0000 0x0444  [ 5FCBAB60598AE119E02B4C27DE6B99EA, 36F30094F700DE41C293047ACB49ED1961DD927BEDAD8DFDAB7023D4D24CB0DE ] mouhid          C:\Windows\System32\drivers\mouhid.sys
13:24:53.0015 0x0444  mouhid - ok
13:24:53.0015 0x0444  [ 9A788037D768809DFD677F4BA08A224A, E0686B3318F924E440ADA439D6671D44D3FF97C13D45C2E0A3A7B9E23DA38350 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
13:24:53.0015 0x0444  mountmgr - ok
13:24:53.0031 0x0444  [ 98DA127D0AB8B6CB5773546AF60D9217, BB07F34552342CA40E843F80AA32C928C29EF81789605E53C795EFD564F2DA7F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
13:24:53.0031 0x0444  MozillaMaintenance - ok
13:24:53.0031 0x0444  [ 6FC047578785B0435F4E2660946D1ADC, 8AEA5659F01FC2F75160922C69622502DABA39F33CB90D5178DD679A1CDE617D ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
13:24:53.0047 0x0444  mpsdrv - ok
13:24:53.0062 0x0444  [ C18AA14126ADC66478E8E962B2DFAA98, A6F8CE9D88D590DC083253004392572C3BD02C33433CD6C0D9117D2AA7171EEC ] MpsSvc          C:\Windows\system32\mpssvc.dll
13:24:53.0078 0x0444  MpsSvc - ok
13:24:53.0093 0x0444  [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
13:24:53.0093 0x0444  MRxDAV - ok
13:24:53.0109 0x0444  [ 89DE71940A0E7F5BA617AE08321EF5C3, BD056C9E18E902D6F118E59A6AC68415BFA0690A02D2B360F6C111CE3B5EAC67 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
13:24:53.0125 0x0444  mrxsmb - ok
13:24:53.0125 0x0444  [ BCBD64220AD85C26823453FF1DC3EFBD, 0245E3659E9135B9276F3CCFBEA0CEFFC4F4C0826F6D19B6329057620235F087 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:24:53.0140 0x0444  mrxsmb10 - ok
13:24:53.0156 0x0444  [ EE16457030175F449BAB0ABD279F4B6A, DF627054136079553A24AD12DC7374F1ACEEAD782EFFDC278996AD7BCCE98877 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:24:53.0156 0x0444  mrxsmb20 - ok
13:24:53.0156 0x0444  [ F3C060444777A59FC63D920719E43CCD, 8766A2746E3DFB0749E902F458141269335CA6F0CEDCA3D5F8C204637C19E783 ] MsBridge        C:\Windows\system32\DRIVERS\bridge.sys
13:24:53.0172 0x0444  MsBridge - ok
13:24:53.0172 0x0444  [ 915747E010A9414B069173284A9B93F4, 8A335C28FE1EF96DD71485877F2E86155D24B5614ACE05468F4B07E2ACD56331 ] MSDTC          C:\Windows\System32\msdtc.exe
13:24:53.0187 0x0444  MSDTC - ok
13:24:53.0187 0x0444  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\Windows\system32\drivers\Msfs.sys
13:24:53.0203 0x0444  Msfs - ok
13:24:53.0203 0x0444  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
13:24:53.0203 0x0444  msgpiowin32 - ok
13:24:53.0203 0x0444  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
13:24:53.0218 0x0444  mshidkmdf - ok
13:24:53.0218 0x0444  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
13:24:53.0218 0x0444  mshidumdf - ok
13:24:53.0218 0x0444  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
13:24:53.0234 0x0444  msisadrv - ok
13:24:53.0234 0x0444  [ 4EAEEBAC8CFF4E0D717DFA920BC58A90, A65CB1BB3392B6A04B978348CAC18A414560A6B04A727F22DFC0ADB20DD3AF6B ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
13:24:53.0250 0x0444  MSiSCSI - ok
13:24:53.0250 0x0444  msiserver - ok
13:24:53.0250 0x0444  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
13:24:53.0250 0x0444  MSKSSRV - ok
13:24:53.0250 0x0444  [ 51B3AC0560848CD6D65AC2033E293113, 73A27E88774C6929328E6C9FC9C389F4DF76D4D4D5CBFC4F51651CC308829628 ] MsLldp          C:\Windows\system32\DRIVERS\mslldp.sys
13:24:53.0265 0x0444  MsLldp - ok
13:24:53.0265 0x0444  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
13:24:53.0265 0x0444  MSPCLOCK - ok
13:24:53.0281 0x0444  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
13:24:53.0281 0x0444  MSPQM - ok
13:24:53.0281 0x0444  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
13:24:53.0297 0x0444  MsRPC - ok
13:24:53.0312 0x0444  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
13:24:53.0312 0x0444  mssmbios - ok
13:24:53.0312 0x0444  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
13:24:53.0312 0x0444  MSTEE - ok
13:24:53.0328 0x0444  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
13:24:53.0328 0x0444  MTConfig - ok
13:24:53.0328 0x0444  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup            C:\Windows\system32\Drivers\mup.sys
13:24:53.0343 0x0444  Mup - ok
13:24:53.0343 0x0444  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
13:24:53.0343 0x0444  mvumis - ok
13:24:53.0359 0x0444  [ 8DF30698BDD9492A9D45A4B94FB4A82A, 26B1B2D7E785E29B8BCB74C467C66AE4EBDD481ACFF36334F3BDF4506B778244 ] napagent        C:\Windows\system32\qagentRT.dll
13:24:53.0375 0x0444  napagent - ok
13:24:53.0375 0x0444  [ 008F7CED69FD5B30CBDE1E03C6F36A27, D4ADA7834C470B17A3CD976012DC5A511B32545B9F91D23D09A85722E0B75320 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
13:24:53.0390 0x0444  NativeWifiP - ok
13:24:53.0390 0x0444  [ FE7B38240E86075E6BC5953496B5C2F1, 13CBDCFD5E63A49D6E66D9EBA701037F014EEED9BBFE8588CE2968A35FF2E16E ] NAVENG          C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20160109.038\ENG64.SYS
13:24:53.0406 0x0444  NAVENG - ok
13:24:53.0437 0x0444  [ C002FA84570CA35F704ACF0AC4A5EAB0, E4246631E5D7AFD31CE642157A9102CB0DDE5B5051D08C3A5EA736CB3C99C6D9 ] NAVEX15        C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20160109.038\EX64.SYS
13:24:53.0484 0x0444  NAVEX15 - ok
13:24:53.0484 0x0444  [ BFCE1225D10619029E68946929CEB64C, 499F560331FFBA82E3D673B47F027FDAB7BEE4F2CB5B811D69E0218839F6E6A5 ] NcaSvc          C:\Windows\System32\ncasvc.dll
13:24:53.0500 0x0444  NcaSvc - ok
13:24:53.0500 0x0444  [ 267C97373110B7AFD3B46DF60B6CBB85, CEBB99F71D47634BB9C04DF2836DF6B47F15B3073FEFC237F85526DF01E4E38B ] NcbService      C:\Windows\System32\ncbservice.dll
13:24:53.0515 0x0444  NcbService - ok
13:24:53.0515 0x0444  [ 0813B71EAF097208DC76CE0605B48AF0, A93A2E6A8FB77B58AC4D580E6F8BF307A25BADC9493994F9BE235EBFB0E1DB22 ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
13:24:53.0515 0x0444  NcdAutoSetup - ok
13:24:53.0547 0x0444  [ 97DC5967F65503213FD1F1B3E4A6F983, 3EC515856C7CE9B30032F963DC04190F66EE62402A819781DC45B7D088C84229 ] NDIS            C:\Windows\system32\drivers\ndis.sys
13:24:53.0578 0x0444  NDIS - ok
13:24:53.0578 0x0444  [ 8CECC8DA55F3274181FD1EA28AD76664, 188112424CEF97FB926A0FB915260B803555A775DD2E1846725A9C8616300F42 ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
13:24:53.0578 0x0444  NdisCap - ok
13:24:53.0578 0x0444  [ 269882812E9A68FFF1AFE1283D428322, 50B99EBC42DA9B46A8C2C28C9BADCF58AE3079535CDD1227D0F5C86291C715FF ] NdisImPlatform  C:\Windows\system32\DRIVERS\NdisImPlatform.sys
13:24:53.0593 0x0444  NdisImPlatform - ok
13:24:53.0593 0x0444  [ 82821F4EEC776B4CF11695A38F3ABA46, 23184F9D31E662855DC4D23EFE7C2FE00E5487D3762B6024704A5D8C87762E1C ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
13:24:53.0593 0x0444  NdisTapi - ok
13:24:53.0609 0x0444  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
13:24:53.0609 0x0444  Ndisuio - ok
13:24:53.0609 0x0444  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
13:24:53.0625 0x0444  NdisVirtualBus - ok
13:24:53.0625 0x0444  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
13:24:53.0640 0x0444  NdisWan - ok
13:24:53.0640 0x0444  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
13:24:53.0656 0x0444  NdisWanLegacy - ok
13:24:53.0656 0x0444  [ DDD7F92A83F74D1476B71FBA9530A8DC, D3F94FC9F48854E09B0B77CE5E1C1DB948D54EAC63C5583437051BB893B5A386 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
13:24:53.0672 0x0444  NDProxy - ok
13:24:53.0672 0x0444  [ 3083926D1CC5B56EA0786527B557DD1B, 3C3F0CA0D43398576DBE8F677B353ADDA7E8F56829874958CE668E31261C1590 ] Ndu            C:\Windows\system32\drivers\Ndu.sys
13:24:53.0672 0x0444  Ndu - ok
13:24:53.0687 0x0444  [ 42FF4975D032CAE558AE4BB8448F6E5A, 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
13:24:53.0687 0x0444  NetBIOS - ok
13:24:53.0687 0x0444  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
13:24:53.0703 0x0444  NetBT - ok
13:24:53.0703 0x0444  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] Netlogon        C:\Windows\system32\lsass.exe
13:24:53.0719 0x0444  Netlogon - ok
13:24:53.0719 0x0444  [ 8F074B62E66B6117D9598C62A12069C5, 5FDB19045D3E2F6D0F0C5158AC2ECB0D5404CD2AF7A319755D7E3753CA3B7CF3 ] Netman          C:\Windows\System32\netman.dll
13:24:53.0734 0x0444  Netman - ok
13:24:53.0750 0x0444  [ 4A04B1CD5BFB4A978C5F60E86D6C3E45, A946922C1C38ADD3CF9D3B09DDCC301AE4DAC960A081B2F42B32BE1E7095B3FD ] netprofm        C:\Windows\System32\netprofmsvc.dll
13:24:53.0765 0x0444  netprofm - ok
13:24:53.0797 0x0444  [ E32D07CDCEB656AD11E15F121393C6CA, 5241FA2552B2CB875AD114E2EAAEA5ADD5C0385688AE42B09A943BEC89F0AC8A ] netr28x        C:\Windows\system32\DRIVERS\netr28x.sys
13:24:53.0859 0x0444  netr28x - ok
13:24:53.0859 0x0444  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:24:53.0875 0x0444  NetTcpPortSharing - ok
13:24:53.0875 0x0444  [ D4DCE03870314D3354F3501F9DDD4123, 5BFE8299B3F72B8C39A4965365CBF5BA151024451F02DD872FAD1CC35CF94CEA ] netvsc          C:\Windows\System32\drivers\netvsc63.sys
13:24:53.0875 0x0444  netvsc - ok
13:24:53.0890 0x0444  [ E3243F501B6494B4401CC875B854FF4B, D3F3F978997F9234822C53E3AB052D2FB9A871B66951803EB2F4A27692195754 ] NIS            C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe
13:24:53.0906 0x0444  NIS - ok
13:24:53.0906 0x0444  [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc          C:\Windows\System32\nlasvc.dll
13:24:53.0922 0x0444  NlaSvc - ok
13:24:53.0922 0x0444  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
13:24:53.0937 0x0444  Npfs - ok
13:24:53.0937 0x0444  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
13:24:53.0937 0x0444  npsvctrig - ok
13:24:53.0953 0x0444  [ 0F12A72A753CFD7FB0631EE8D08FE983, 860A96471F6CD90DDA9AB3A48E95CEAD826C87D2FA98A00EF91B61C44A4C8B82 ] nsi            C:\Windows\system32\nsisvc.dll
13:24:53.0953 0x0444  nsi - ok
13:24:53.0953 0x0444  [ 0E046FF5823B95326D10CF1B4AF23541, 39D22715003746527AB4BFEDED8C34B695DAF589091AE7F3A2A2C4B8A35675A9 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
13:24:53.0969 0x0444  nsiproxy - ok
13:24:54.0000 0x0444  [ 7F68063A5A0461E02BC860CE0E6BFDDC, 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
13:24:54.0047 0x0444  Ntfs - ok
13:24:54.0047 0x0444  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\Windows\system32\drivers\Null.sys
13:24:54.0062 0x0444  Null - ok
13:24:54.0062 0x0444  [ B9E5A80F646DDFEF158773722A466EA3, 028979FE600D17DA70445F44D81FAE4EDA3478FCC81FA5506133CCAC37C4E2BF ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
13:24:54.0062 0x0444  NVHDA - ok
13:24:54.0234 0x0444  [ 36BAB895547EA82892292F05FA02142E, 224D165CE3ECB0EF35C18D09507AB43ADC4A7AD12E507F31230012943C83BEDB ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
13:24:54.0437 0x0444  nvlddmkm - ok
13:24:54.0469 0x0444  [ 8DE93771F5417C84665160E3498AF30D, C1DDAFCD12588E613DE8A7D4D15B89D403B9FB3BE66C6C8006F240DE6BCC1B0B ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
13:24:54.0515 0x0444  NvNetworkService - ok
13:24:54.0515 0x0444  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
13:24:54.0531 0x0444  nvraid - ok
13:24:54.0531 0x0444  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
13:24:54.0547 0x0444  nvstor - ok
13:24:54.0547 0x0444  [ C935A0667017C5AEA9EF6C6FE4A2C1DE, 45D6A72C37E9BA2E3D9F81D341CD122D9BB9E6AEEAC7AE71A281D234777C050F ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
13:24:54.0547 0x0444  NvStreamKms - ok
13:24:54.0640 0x0444  [ F9F3F20CE27B456F9F9B40CC6EE5C62C, 3B67FD7C004C7D29D0FD6ECE0568E24217FB471C8809754DB124A8CDCE9B4CE6 ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
13:24:54.0750 0x0444  NvStreamNetworkSvc - ok
13:24:54.0844 0x0444  [ 7D9CF85EDE4007B377027A4B44473A33, 8BF9818934220EE56610F0D14765C94E26784A600527B3C7E4B1FDA825F8F892 ] NvStreamSvc    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
13:24:54.0937 0x0444  NvStreamSvc - ok
13:24:54.0953 0x0444  [ 86E5948C370B1DB07A8E66C9598131D1, CD2EE00D4F521A3B19588EFA91BCDDD22F1347F9401E8C92C754CBA2EFE8261C ] NvStUSB        C:\Windows\System32\drivers\nvstusb.sys
13:24:54.0953 0x0444  NvStUSB - ok
13:24:54.0969 0x0444  [ 6B245B7F96F901891636814B5A7A9088, BC6DF13929AEBA2CF5DC8449FF9D5F73497DF8E9760AFA93B56543D86BE940C3 ] nvsvc          C:\Windows\system32\nvvsvc.exe
13:24:55.0000 0x0444  nvsvc - ok
13:24:55.0000 0x0444  [ 17D21ADA263B31EEDB7EA344AEA4F2E7, 7F6DE0A27DAE8040AC5EA806759A91A61E6AA24717627083508195D21B95FA37 ] NVSWCFilter    C:\Windows\System32\drivers\nvswcfilter.sys
13:24:55.0000 0x0444  NVSWCFilter - ok
13:24:55.0000 0x0444  [ 4A19E70F524627B2B4F8A37DE3E3C0CC, 21033B9046179CA21BBC63BE142E64E4C7083958784415DA3E5CE8EBBC8EFE30 ] NVVADARM        C:\Windows\system32\drivers\nvvadarm.sys
13:24:55.0015 0x0444  NVVADARM - ok
13:24:55.0015 0x0444  [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
13:24:55.0015 0x0444  nvvad_WaveExtensible - ok
13:24:55.0015 0x0444  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
13:24:55.0031 0x0444  nv_agp - ok
13:24:55.0109 0x0444  [ 40CB809645F1D0A93C535F9B0402F269, E683ED4ED824CE4E49715F23E3D3E8245B398D7A0D279E1F31470B9D7AF7E223 ] Origin Client Service D:\Origin\OriginClientService.exe
13:24:55.0156 0x0444  Origin Client Service - ok
13:24:55.0172 0x0444  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
13:24:55.0187 0x0444  p2pimsvc - ok
13:24:55.0203 0x0444  [ FD8F61F0D1F64BBB3D835F39A3F979C9, E5C5F86576488EA7F605E26C06EE5AFB36506A446F60C894D55E0A148BF7F02D ] p2psvc          C:\Windows\system32\p2psvc.dll
13:24:55.0203 0x0444  p2psvc - ok
13:24:55.0219 0x0444  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport        C:\Windows\System32\drivers\parport.sys
13:24:55.0219 0x0444  Parport - ok
13:24:55.0219 0x0444  [ BAFF6122CFC9F95CA175AD8C348179A4, 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
13:24:55.0234 0x0444  partmgr - ok
13:24:55.0234 0x0444  [ ABE95ABE27A8BD9701782BBCD82C9925, AE3BA1E9ECDE692374D8DAC95A8DAA289DD2470E3D8D58EFAD9F83A37F3AC8E5 ] PcaSvc          C:\Windows\System32\pcasvc.dll
13:24:55.0250 0x0444  PcaSvc - ok
13:24:55.0266 0x0444  [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci            C:\Windows\system32\drivers\pci.sys
13:24:55.0281 0x0444  pci - ok
13:24:55.0281 0x0444  [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide          C:\Windows\system32\drivers\pciide.sys
13:24:55.0281 0x0444  pciide - ok
13:24:55.0297 0x0444  [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
13:24:55.0297 0x0444  pcmcia - ok
13:24:55.0297 0x0444  [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw            C:\Windows\system32\drivers\pcw.sys
13:24:55.0312 0x0444  pcw - ok
13:24:55.0312 0x0444  [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc            C:\Windows\system32\drivers\pdc.sys
13:24:55.0312 0x0444  pdc - ok
13:24:55.0328 0x0444  [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
13:24:55.0344 0x0444  PEAUTH - ok
13:24:55.0375 0x0444  [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost        C:\Windows\SysWow64\perfhost.exe
13:24:55.0375 0x0444  PerfHost - ok
13:24:55.0406 0x0444  [ 70B39E7241F750A248798CE82C44596D, 54A72199EB277EE586611DCBC21654786FD2196F91D5884C4F531297893CC3EC ] pla            C:\Windows\system32\pla.dll
13:24:55.0437 0x0444  pla - ok
13:24:55.0453 0x0444  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
13:24:55.0453 0x0444  PlugPlay - ok
13:24:55.0453 0x0444  [ CD421DDB5C6E5458CE52EDC36DE7DC5B, 7B9C0A8B2B86BBF5D7E02F2620B0015A2530CBBC99724BE20313DE53EB31D62E ] PnkBstrA        C:\Windows\system32\PnkBstrA.exe
13:24:55.0469 0x0444  PnkBstrA - ok
13:24:55.0469 0x0444  [ 4570F8A37D221660F3A09D6F4DD4BA94, 0EA190CFFA53DF9CCA2D53A4EF1BCB837BA3F2489A3AC5BD11F6D6ED811D118E ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
13:24:55.0469 0x0444  PNRPAutoReg - ok
13:24:55.0484 0x0444  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
13:24:55.0484 0x0444  PNRPsvc - ok
13:24:55.0500 0x0444  [ BDD52AB4AEBB8B1904568DBD0CCB70CB, C3D1DBA349C79B43DCDD9EF5255C5EE973EFB844235B808B5EF9B63A51FF00AA ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
13:24:55.0516 0x0444  PolicyAgent - ok
13:24:55.0516 0x0444  [ C8DD82C3035E60D671B8CC5DF128D3A9, 6AABF632CBEDA9A7B553BC9134FF100CB6FDC88000D499D2883408FCEDD97576 ] Power          C:\Windows\system32\umpo.dll
13:24:55.0531 0x0444  Power - ok
13:24:55.0578 0x0444  [ E3514CE7CB4AF80ECCA383F065BC77C0, 1EA06D358A07EB9DFB703CEFC4EB834B947B899E0ACFE1C494E2DAED63F1D4B5 ] PrintNotify    C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
13:24:55.0641 0x0444  PrintNotify - ok
13:24:55.0641 0x0444  [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor      C:\Windows\System32\drivers\processr.sys
13:24:55.0656 0x0444  Processor - ok
13:24:55.0656 0x0444  [ 6E409D818C6B342544EAE741B1422B85, B4ADFB7809FC42C432C984C3AC13FAFD1B7AD53BCC7FB16E86371DE4C829DD1A ] ProfSvc        C:\Windows\system32\profsvc.dll
13:24:55.0672 0x0444  ProfSvc - ok
13:24:55.0672 0x0444  [ FC0141B4A5AD6D637D883C1A89FC45C5, DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
13:24:55.0672 0x0444  Psched - ok
13:24:55.0687 0x0444  [ DAA9DEE0A5D5F238C4EE54C2C7FB67C5, 7EC8C603BD92699AC35BDCD294F13BEE90D5C2C195FD93A3F16928BFCF53CA93 ] QWAVE          C:\Windows\system32\qwave.dll
13:24:55.0703 0x0444  QWAVE - ok
13:24:55.0703 0x0444  [ 83868EB2924E6BC21A54337C65D614D1, 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
13:24:55.0703 0x0444  QWAVEdrv - ok
13:24:55.0703 0x0444  [ B337B1F1E82A83E20A1743E008E25C0F, A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
13:24:55.0719 0x0444  RasAcd - ok
13:24:55.0719 0x0444  [ 044638489B4A5FE5334F46C5314A0826, E06CC2A9EF369794DAD69FBB5AFD1676D4283DDAB2AD5E3EFE454C473F62F955 ] RasAuto        C:\Windows\System32\rasauto.dll
13:24:55.0734 0x0444  RasAuto - ok
13:24:55.0734 0x0444  [ F83B38FCD4F69157B3D158433FA149CC, AB103BD3E2B3B134CB355C556DF70BCF0CF4DB11EFF7DB4A9876D5AA43D81293 ] RasMan          C:\Windows\System32\rasmans.dll
13:24:55.0750 0x0444  RasMan - ok
13:24:55.0766 0x0444  [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
13:24:55.0766 0x0444  RasPppoe - ok
13:24:55.0781 0x0444  [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
13:24:55.0797 0x0444  rdbss - ok
13:24:55.0797 0x0444  [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
13:24:55.0797 0x0444  rdpbus - ok
13:24:55.0812 0x0444  [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
13:24:55.0812 0x0444  RDPDR - ok
13:24:55.0812 0x0444  [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
13:24:55.0828 0x0444  RdpVideoMiniport - ok
13:24:55.0828 0x0444  [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
13:24:55.0844 0x0444  rdyboost - ok
13:24:55.0859 0x0444  [ 615DFD97DEA56CE1C3A52185A3038FF8, 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 ] ReFS            C:\Windows\system32\drivers\ReFS.sys
13:24:55.0891 0x0444  ReFS - ok
13:24:55.0891 0x0444  [ 0CF7CB56BF2D5E9DBCEE0185CB626FAD, 2BD2E2FB1D2EADD1F70EF55E8523C353F95D4FEB1BAD5017FA4D94F790F27825 ] RemoteAccess    C:\Windows\System32\mprdim.dll
13:24:55.0906 0x0444  RemoteAccess - ok
13:24:55.0906 0x0444  [ AC8785B53F8436058C90450DA1840AE7, CC1FFC2713910211F8A6AD532DBB9253ACD188CBD784F1BE6613DF382825A3C1 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
13:24:55.0906 0x0444  RemoteRegistry - ok
13:24:55.0922 0x0444  [ 65B9FDE300A6DECC03BA44C4616DCAD6, CAD992982733DD20282A3453DC4E554AE1FC077C35479C0CA4E8BC3A9DCD3BB0 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
13:24:55.0922 0x0444  RpcEptMapper - ok
13:24:55.0922 0x0444  [ A737B433ABAF3F2DCB2BD7B4CC582B26, 3B5706B0CF0969A9F82060FD4DCC745F2D83C066B663FE8A4F0F493B64032C9C ] RpcLocator      C:\Windows\system32\locator.exe
13:24:55.0937 0x0444  RpcLocator - ok
13:24:55.0953 0x0444  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] RpcSs          C:\Windows\system32\rpcss.dll
13:24:55.0969 0x0444  RpcSs - ok
13:24:55.0969 0x0444  [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
13:24:55.0984 0x0444  rspndr - ok
13:24:56.0000 0x0444  [ 0283ADA7E6B1F2E495A0EA0EF2C1F9A2, 89B2CFEC06A884BC92D5E769FD15DC1F4C4E194F4952B36AC6D40FDE27C9E79B ] RTL8168        C:\Windows\system32\DRIVERS\Rt630x64.sys
13:24:56.0016 0x0444  RTL8168 - ok
13:24:56.0016 0x0444  [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
13:24:56.0016 0x0444  s3cap - ok
13:24:56.0031 0x0444  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] SamSs          C:\Windows\system32\lsass.exe
13:24:56.0031 0x0444  SamSs - ok
13:24:56.0031 0x0444  [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
13:24:56.0047 0x0444  sbp2port - ok
13:24:56.0047 0x0444  [ 74A3B67F03877D06B09B1B40C5ED582E, A8FF9BF416F0BF365BFB4E1796859825C811A74B5E54DDDCE8345193BEEBE206 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
13:24:56.0062 0x0444  SCardSvr - ok
13:24:56.0062 0x0444  [ 8B9C4D55B4A536FB01C360DDB9533574, 9B939FE68F6F9C171ED0D91E2CE1E67515295D34EC23606BCDFD097DCC8CFD4A ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
13:24:56.0078 0x0444  ScDeviceEnum - ok
13:24:56.0078 0x0444  [ 13BEA6C882D4D877A5A85CA149C86BC1, 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
13:24:56.0078 0x0444  scfilter - ok
13:24:56.0109 0x0444  [ 3151A020E03DDE31AAC49F35C5EFB4DB, 5ABB1103009979F86C862357E28F37C2744979F2C99F7CF6ABB4EB1B8416B3F6 ] Schedule        C:\Windows\system32\schedsvc.dll
13:24:56.0141 0x0444  Schedule - ok
13:24:56.0141 0x0444  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] SCPolicySvc    C:\Windows\System32\certprop.dll
13:24:56.0141 0x0444  SCPolicySvc - ok
13:24:56.0156 0x0444  [ C54B6B2170BF628FD42F799A66956D75, BCF460A124CAA6F1F1A9A7BCBDCC2D5E39B0404D96B7C9FFAC806E041782B91E ] sdbus          C:\Windows\System32\drivers\sdbus.sys
13:24:56.0172 0x0444  sdbus - ok
13:24:56.0172 0x0444  [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
13:24:56.0172 0x0444  sdstor - ok
13:24:56.0172 0x0444  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
13:24:56.0187 0x0444  secdrv - ok
13:24:56.0187 0x0444  [ BA24CEA7152239F42ECD04AFB7C89D24, A2A11EABB0C283772B74667C7544B61BEB1B9745FBF065E831542129EB585AFA ] seclogon        C:\Windows\system32\seclogon.dll
13:24:56.0187 0x0444  seclogon - ok
13:24:56.0203 0x0444  [ 81FE9A81EDF8016816C9E91FBFBF7D35, 87FB92A3D15F312F0B9C423EF851061A944B013E5668D8C9A441B4DC0EB690AF ] SENS            C:\Windows\System32\sens.dll
13:24:56.0203 0x0444  SENS - ok
13:24:56.0219 0x0444  [ 6E4012AE67F09F867EF620C8D5524C0B, 63933E51F8E413E63481369CE2F9FD224560550FBD3BD2B4573E9F4AD88708A2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
13:24:56.0219 0x0444  SensrSvc - ok
13:24:56.0234 0x0444  [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
13:24:56.0234 0x0444  SerCx - ok
13:24:56.0234 0x0444  [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
13:24:56.0250 0x0444  SerCx2 - ok
13:24:56.0250 0x0444  [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum        C:\Windows\System32\drivers\serenum.sys
13:24:56.0250 0x0444  Serenum - ok
13:24:56.0266 0x0444  [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial          C:\Windows\System32\drivers\serial.sys
13:24:56.0266 0x0444  Serial - ok
13:24:56.0266 0x0444  [ 148195AE95D9BC7375A08846439FDAC1, 3A2F78FD18AA7A6D659921E19335E943894530874AC5AB5E7219CEF28FA54F7A ] sermouse        C:\Windows\System32\drivers\sermouse.sys
13:24:56.0281 0x0444  sermouse - ok
13:24:56.0281 0x0444  [ 3A2F1A7472C3B7CC9B89C8516C726488, 9BCBBAC10C900EA7B30822B463A77EE5067F217C4B490857A09E5277983CB89B ] SessionEnv      C:\Windows\system32\sessenv.dll
13:24:56.0297 0x0444  SessionEnv - ok
13:24:56.0297 0x0444  [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
13:24:56.0312 0x0444  sfloppy - ok
13:24:56.0312 0x0444  [ 8081FF3DAE8159FE8956B09BC29CE983, AC0F305AEE8B1AB2E1275F1D33EC1D2F3E23F234F831BD9D41F415A94A19D3AB ] SharedAccess    C:\Windows\System32\ipnathlp.dll
13:24:56.0328 0x0444  SharedAccess - ok
13:24:56.0344 0x0444  [ 7FD9A61A3523A61FC135D61D6E160314, 409E1CF7A62FD90CBC31AEAFBB7230B02DBEC6CFCA2D266D221A7643FAEBA13B ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:24:56.0359 0x0444  ShellHWDetection - ok
13:24:56.0359 0x0444  [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
13:24:56.0375 0x0444  SiSRaid2 - ok
13:24:56.0375 0x0444  [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
13:24:56.0375 0x0444  SiSRaid4 - ok
13:24:56.0391 0x0444  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
13:24:56.0406 0x0444  SkypeUpdate - ok
13:24:56.0406 0x0444  [ 3C84DCCE5B322F745A75CA8BA3A0F6B3, 1FB94A8A1C63D6FDB82E28ED5B696B3CB1F64183A89A3B5153B266C292CB7815 ] smphost        C:\Windows\System32\smphost.dll
13:24:56.0406 0x0444  smphost - ok
13:24:56.0406 0x0444  [ D0EB0DF8C603BBA084351A92732B1CBE, E24ED8F78EF41C1BC17386AE4BBCE0DC892C5B89B12C03FC9FB61D359B13F1B4 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
13:24:56.0422 0x0444  SNMPTRAP - ok
13:24:56.0437 0x0444  [ D24B1945ED1F9C96DA786DBBF1E983CE, B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 ] spaceport      C:\Windows\system32\drivers\spaceport.sys
13:24:56.0453 0x0444  spaceport - ok
13:24:56.0453 0x0444  [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
13:24:56.0453 0x0444  SpbCx - ok
13:24:56.0469 0x0444  [ FCB156A6745631A67DEA61827061D483, 9275ABFA1E1E595969A71C0DA228D18D1B868BF46E097E1276142BD80F8A32C9 ] Spooler        C:\Windows\System32\spoolsv.exe
13:24:56.0484 0x0444  Spooler - ok
13:24:56.0594 0x0444  [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc          C:\Windows\system32\sppsvc.exe
13:24:56.0734 0x0444  sppsvc - ok
13:24:56.0750 0x0444  [ AB3558A087FA03861162F8DE9B681AE8, ACEBE679C31BD9238D1836C38F2433C47FF1C7E8B4F8248404F5D14DE5014A37 ] SRTSP          C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS
13:24:56.0781 0x0444  SRTSP - ok
13:24:56.0781 0x0444  [ BA2ABBEA69BD1866C973DE11CB0CE9F8, 7A04BC2F4DA9A69A996911CC429064D24CF51F4046A2EE688D4326B44C9EDAFB ] SRTSPX          C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS
13:24:56.0781 0x0444  SRTSPX - ok
13:24:56.0797 0x0444  [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv            C:\Windows\system32\DRIVERS\srv.sys
13:24:56.0812 0x0444  srv - ok
13:24:56.0828 0x0444  [ 00D8AC8E3053290BDE6EA2FB6810D2FC, 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
13:24:56.0844 0x0444  srv2 - ok
13:24:56.0844 0x0444  [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
13:24:56.0859 0x0444  srvnet - ok
13:24:56.0859 0x0444  [ CF6C3037839CF78421A94F9060C2886F, CA98C180AE03F5BE8FEFFBA75BD98DEE2AD4FA975E1EF83215C9CD2476946811 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
13:24:56.0875 0x0444  SSDPSRV - ok
13:24:56.0875 0x0444  [ 198A737DBA666F4808D62E9A8277A6B7, 90B6E5E2ACE95D850C913A3A1DA1F966C44955C530004C228FA93B2A536F5C27 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
13:24:56.0891 0x0444  SstpSvc - ok
13:24:56.0906 0x0444  [ A831D5A4D2F5138E332AC1B98315EBB1, 2FF5C256A83ACFB5CEC17B9FA7875048F770B793C37657D6D4E37C70B2F857A8 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
13:24:56.0922 0x0444  Steam Client Service - ok
13:24:56.0938 0x0444  [ C368FAF3084E3978462159F1DDAFF54F, F7DD88038E002EF3D2BCA648FE7CF0F92347E901C5F495D8D8E4D24076E895CD ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
13:24:56.0938 0x0444  Stereo Service - ok
13:24:56.0938 0x0444  [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
13:24:56.0953 0x0444  stexstor - ok
13:24:56.0969 0x0444  [ 63E9CE568CF1192771A5F0460DE7D2B9, C27B21FD2C14AD41A59EF62EB8AC95C08EB13CCB1CEECD8378B8CDD4DC352E69 ] stisvc          C:\Windows\System32\wiaservc.dll
13:24:56.0984 0x0444  stisvc - ok
13:24:56.0984 0x0444  [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci        C:\Windows\system32\drivers\storahci.sys
13:24:57.0000 0x0444  storahci - ok
13:24:57.0000 0x0444  [ 8B9486B64E5FC17FB9CC04CA10B77A34, C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
13:24:57.0000 0x0444  storflt - ok
13:24:57.0000 0x0444  [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme        C:\Windows\system32\drivers\stornvme.sys
13:24:57.0016 0x0444  stornvme - ok
13:24:57.0016 0x0444  [ A45F5AC9D8069D0EC66E3CA73103073B, 996788F1C58E016E8E5CF3FD1D220A3C40AFFD6C21361A34636415DB12E0D381 ] StorSvc        C:\Windows\system32\storsvc.dll
13:24:57.0016 0x0444  StorSvc - ok
13:24:57.0031 0x0444  [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc        C:\Windows\system32\drivers\storvsc.sys
13:24:57.0031 0x0444  storvsc - ok
13:24:57.0031 0x0444  [ E395BE02F80A79A6CF973BA38DBB8135, 4C6F85B0EB8E7725BA720F9742561D229726C0D7C17505D1E79F19A5626F6325 ] svsvc          C:\Windows\system32\svsvc.dll
13:24:57.0047 0x0444  svsvc - ok
13:24:57.0047 0x0444  [ 65454187E0F8B6C0DCECB0287D06EC43, 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE ] swenum          C:\Windows\System32\drivers\swenum.sys
13:24:57.0047 0x0444  swenum - ok
13:24:57.0063 0x0444  [ 1C71D72D4997A284128FBEE770726330, 21682BDE74A1108FED1124FB1EA35A03CBFA94ABE1B89CC0FADB4DD82596C43E ] swprv          C:\Windows\System32\swprv.dll
13:24:57.0078 0x0444  swprv - ok
13:24:57.0109 0x0444  [ 6F227CF9E64364578E2DABD1EF6E51A4, D5223B441A319D4C57FDBEA9BFBB8E5C95CA6F7B6AE6F4029BCE84A5CCE51B33 ] SymEFASI        C:\Windows\system32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS
13:24:57.0141 0x0444  SymEFASI - ok
13:24:57.0141 0x0444  [ 1DE0CBF15AC67AE0E5B456ADEFB89493, C764815313BB4332279730AA02531A448A1D32F5B6D5689FF04549406A5B5212 ] SymELAM        C:\Windows\system32\drivers\NISx64\1605050.00F\SymELAM.sys
13:24:57.0156 0x0444  SymELAM - ok
13:24:57.0156 0x0444  [ 6DF8F618B93C821630C9BAA8DA3FAAAF, 553972D63F3347291EC8370AB910F741EF1DA61BC74FBA4192EF6E1DF567FB99 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
13:24:57.0156 0x0444  SymEvent - ok
13:24:57.0172 0x0444  [ 0891E59A27208B9B727BAB863B853E80, 7BBDD53CB7AB003DF803D6D596A2B5216425DCC7FA8D3F311AE5BD4EC19FBB0A ] SymIRON        C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS
13:24:57.0172 0x0444  SymIRON - ok
13:24:57.0188 0x0444  [ 751C968945EFD42469FE52D6CE384196, 3386681036909F60A249951009822190EFB1C390D2F46E7EFE44893F28D0F31C ] SymNetS        C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS
13:24:57.0203 0x0444  SymNetS - ok
13:24:57.0219 0x0444  [ 7E85DB0463AD2403AE84AD162B162279, 996C42ECAFC6E24C623068AFAFCC0A2612526333AF9315F7536C6D40C2570632 ] SysMain        C:\Windows\system32\sysmain.dll
13:24:57.0266 0x0444  SysMain - ok
13:24:57.0266 0x0444  [ D73DBBB96CEE90C2856164AAD8543425, D11ADB5D4C5DD355314CA656D375D0062CAE7462E866F94F1B26D5803F65DCB2 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
13:24:57.0281 0x0444  SystemEventsBroker - ok
13:24:57.0281 0x0444  [ D6A71B95ACF71ACA63B67232059F1BCD, C5CEC032E7AB507500D1CC7A4E65DA6322412C798201A9D770CBDE892E50DFC8 ] TabletInputService C:\Windows\System32\TabSvc.dll
13:24:57.0297 0x0444  TabletInputService - ok
13:24:57.0297 0x0444  [ 5A5BAB1CA9621E73E25EE4744B67CDA6, 479EBD7BAE1E2AD431153FDC016742F7A8D824716EAB1A4CA87EBBD21D61DECD ] TapiSrv        C:\Windows\System32\tapisrv.dll
13:24:57.0313 0x0444  TapiSrv - ok
13:24:57.0359 0x0444  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
13:24:57.0406 0x0444  Tcpip - ok
13:24:57.0453 0x0444  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
13:24:57.0500 0x0444  TCPIP6 - ok
13:24:57.0516 0x0444  [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
13:24:57.0516 0x0444  tcpipreg - ok
13:24:57.0531 0x0444  [ E0BD2D83875464FEEEB242CBA8B7E073, A3067165128F36035FA9F3CBA55CFED736E180C495497FA7332B3D97908C3D90 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
13:24:57.0531 0x0444  tdx - ok
13:24:57.0609 0x0444  [ C0C121B537DA3AD87481C0502CACE462, E0FC2AC71B60C796DCD03217A510C47425FB7783713FCCC477130E69715D2B8D ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
13:24:57.0719 0x0444  TeamViewer - ok
13:24:57.0719 0x0444  [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
13:24:57.0734 0x0444  terminpt - ok
13:24:57.0750 0x0444  [ C50997E282576DA492EBA66B059D4196, EBD793CB396F9503376207FA60353F5672DEDB620C8E01C8D6AE0030B3B03339 ] TermService    C:\Windows\System32\termsrv.dll
13:24:57.0766 0x0444  TermService - ok
13:24:57.0781 0x0444  [ 2180DBCE75B914E5E5BBFFFAAE97AA21, 8000AECC8855903DB50ABA7E304396D1FCEAE8DC9ADD4FC50275CF24B4D914DE ] Themes          C:\Windows\system32\themeservice.dll
13:24:57.0781 0x0444  Themes - ok
13:24:57.0781 0x0444  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] THREADORDER    C:\Windows\system32\mmcss.dll
13:24:57.0797 0x0444  THREADORDER - ok
13:24:57.0797 0x0444  [ B5ED9CC61798C7D44BD535D40B89EFB5, 1BDCEAA9AF2096381870D92129C748F4EE06A1167ABA9367B9DD43BAF27E3F5B ] TimeBroker      C:\Windows\System32\TimeBrokerServer.dll
13:24:57.0813 0x0444  TimeBroker - ok
13:24:57.0813 0x0444  [ 80A2FC1A089A71F2DBE5D8394FFB009F, DEA30E751F6EA42E43E16869713FC7E37832B15DAFA0062B1798DFA476981385 ] TPM            C:\Windows\system32\drivers\tpm.sys
13:24:57.0828 0x0444  TPM - ok
13:24:57.0828 0x0444  [ 884113C2BB703FE806C8608B75F34831, 24DE5750CA4363455412BABB0B1FAB08497153E8F158ED44958F100410F93506 ] TrkWks          C:\Windows\System32\trkwks.dll
13:24:57.0844 0x0444  TrkWks - ok
13:24:57.0844 0x0444  [ 44A94FB4C76528D2382FFE04B05827C3, B0BCDF7CD1D65E61A9061D539D83527A89B69583958F8A26C6BF9766C1B61E0C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:24:57.0844 0x0444  TrustedInstaller - ok
13:24:57.0859 0x0444  [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
13:24:57.0859 0x0444  TsUsbFlt - ok
13:24:57.0859 0x0444  [ 20185BEB7512EDE4EFECDFA148AC9F99, 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
13:24:57.0875 0x0444  TsUsbGD - ok
13:24:57.0875 0x0444  [ E85916632CD3B9E9B546968DB950BF42, DECE3852C763CC6293C7D1B772296C43A0AE1E47BBCC4979C96B3B2AD70413F3 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
13:24:57.0891 0x0444  tunnel - ok
13:24:57.0891 0x0444  [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
13:24:57.0891 0x0444  uagp35 - ok
13:24:57.0891 0x0444  [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
13:24:57.0906 0x0444  UASPStor - ok
13:24:57.0906 0x0444  [ 807F8CF3E973305FC435C61CBBEE2A49, 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 ] UCX01000        C:\Windows\System32\drivers\ucx01000.sys
13:24:57.0922 0x0444  UCX01000 - ok
13:24:57.0922 0x0444  [ C61EAF8E1E4B2F62BA4FDF457440B2C6, 961F76A789925234AC27F56AAE34556FA06088D71580B42C24B0BC209EAFD67E ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
13:24:57.0938 0x0444  udfs - ok
13:24:57.0938 0x0444  [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
13:24:57.0953 0x0444  UEFI - ok
13:24:57.0953 0x0444  [ A867F0F978EE64C87FADC3B100869EE4, 2686BE85F963D0D0BB275E92E5B543280D8742CF10772303E3189D0719B6A277 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
13:24:57.0953 0x0444  UI0Detect - ok
13:24:57.0969 0x0444  [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
13:24:57.0969 0x0444  uliagpkx - ok
13:24:57.0969 0x0444  [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus          C:\Windows\System32\drivers\umbus.sys
13:24:57.0984 0x0444  umbus - ok
13:24:57.0984 0x0444  [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass          C:\Windows\System32\drivers\umpass.sys
13:24:57.0984 0x0444  UmPass - ok
13:24:58.0000 0x0444  [ A023F267A262D5DA6CE1436D9C5E8FD9, 92AD7AF91184C244A7E392F49663143193A80D5D81114546A00F18227DE31D23 ] UmRdpService    C:\Windows\System32\umrdp.dll
13:24:58.0000 0x0444  UmRdpService - ok
13:24:58.0016 0x0444  [ C98493DD8E6A50154FAC75C15E1C36BB, CECD1C826C8F7AF05468871BF6A0ACDBB6B0202F4F87F48C6D367E5BD699E800 ] upnphost        C:\Windows\System32\upnphost.dll
13:24:58.0031 0x0444  upnphost - ok
13:24:58.0031 0x0444  [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
13:24:58.0047 0x0444  usbccgp - ok
13:24:58.0047 0x0444  [ 0139248F6B95CF0D837B5B46A2722D40, 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 ] usbcir          C:\Windows\System32\drivers\usbcir.sys
13:24:58.0063 0x0444  usbcir - ok
13:24:58.0063 0x0444  [ BBFD17B6B954FC9FA02E62D604052069, 47D2B7228EABA7F37F69A1756B69FFFB19F0C2CC2869C5BF674E4FD9257488A2 ] usbehci        C:\Windows\System32\drivers\usbehci.sys
13:24:58.0063 0x0444  usbehci - ok
13:24:58.0078 0x0444  [ CD81683F4553677B9BF5163A922153EB, 6B304B0D68B9BFF0245EC755CDAAF9DF59DF3A081727E32CB66672929F0DBC50 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
13:24:58.0094 0x0444  usbhub - ok
13:24:58.0109 0x0444  [ 5C90D5379B53590FBB24BBAD4FA682EE, DC036340510C1C0999AB1CB845F8E6EB8B7696BAC9BBE6E936454C0000D1E9D4 ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
13:24:58.0125 0x0444  USBHUB3 - ok
13:24:58.0125 0x0444  [ A0F0484C97D6441ED6A75D7426ECCC9E, FF928ADE1C5464E581BF929F7383D5762D110EA6C7E31A6F0887EA7357ADBEFE ] usbohci        C:\Windows\System32\drivers\usbohci.sys
13:24:58.0141 0x0444  usbohci - ok
13:24:58.0141 0x0444  [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
13:24:58.0141 0x0444  usbprint - ok
13:24:58.0156 0x0444  [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
13:24:58.0156 0x0444  USBSTOR - ok
13:24:58.0156 0x0444  [ FC974B03C8B87455F44F734C8F31A3C8, D69F6EE8030F7DF96FF151D9EAA6AE65417ACAC5A267C7DB96E9611D5BC42D2C ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
13:24:58.0172 0x0444  usbuhci - ok
13:24:58.0172 0x0444  [ 44603DA5A87FB491EF59C889EBBB4DDB, 59AA9B6B0B5D66F9312CD3F999D0D9F12F1A2C5D230365AD7287CD71FD86961C ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
13:24:58.0188 0x0444  USBXHCI - ok
13:24:58.0188 0x0444  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] VaultSvc        C:\Windows\system32\lsass.exe
13:24:58.0203 0x0444  VaultSvc - ok
13:24:58.0203 0x0444  [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
13:24:58.0203 0x0444  vdrvroot - ok
13:24:58.0234 0x0444  [ 8A4D808D1EC7C1C47B2C8BF488A9A07A, 63C07312ADB6F8A8BDE93361C30AC63DAB4DE1141AF54630EEF11E54B0BF983D ] vds            C:\Windows\System32\vds.exe
13:24:58.0266 0x0444  vds - ok
13:24:58.0266 0x0444  [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
13:24:58.0281 0x0444  VerifierExt - ok
13:24:58.0281 0x0444  [ C06E8481E068F170A258441639AC5792, 2F550530BACB511A195D5047F003B01CB6E04FA9A0DCCF638CB3D51FF5467DC7 ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
13:24:58.0313 0x0444  vhdmp - ok
13:24:58.0313 0x0444  [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide          C:\Windows\system32\drivers\viaide.sys
13:24:58.0313 0x0444  viaide - ok
13:24:58.0313 0x0444  [ 511AD3FF957A0127E6BD336FF6F89C38, 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
13:24:58.0328 0x0444  vmbus - ok
13:24:58.0328 0x0444  [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
13:24:58.0328 0x0444  VMBusHID - ok
13:24:58.0344 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
13:24:58.0359 0x0444  vmicguestinterface - ok
13:24:58.0375 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicheartbeat  C:\Windows\System32\ICSvc.dll
13:24:58.0375 0x0444  vmicheartbeat - ok
13:24:58.0391 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
13:24:58.0406 0x0444  vmickvpexchange - ok
13:24:58.0422 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicrdv        C:\Windows\System32\ICSvc.dll
13:24:58.0438 0x0444  vmicrdv - ok
13:24:58.0438 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicshutdown    C:\Windows\System32\ICSvc.dll
13:24:58.0453 0x0444  vmicshutdown - ok
13:24:58.0469 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmictimesync    C:\Windows\System32\ICSvc.dll
13:24:58.0484 0x0444  vmictimesync - ok
13:24:58.0484 0x0444  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicvss        C:\Windows\System32\ICSvc.dll
13:24:58.0500 0x0444  vmicvss - ok
13:24:58.0500 0x0444  [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr          C:\Windows\system32\drivers\volmgr.sys
13:24:58.0516 0x0444  volmgr - ok
13:24:58.0516 0x0444  [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
13:24:58.0531 0x0444  volmgrx - ok
13:24:58.0547 0x0444  [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
13:24:58.0547 0x0444  volsnap - ok
13:24:58.0563 0x0444  [ EF31713EE4C7CCFE4049F7E7F15645A2, 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 ] vpci            C:\Windows\System32\drivers\vpci.sys
13:24:58.0563 0x0444  vpci - ok
13:24:58.0563 0x0444  [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
13:24:58.0578 0x0444  vsmraid - ok
13:24:58.0594 0x0444  [ 94FAFD473CDD80CE19A21FB9503D7ED1, 953E5E8C753C0017E1258695A76F60CC05D283F7476B9D9C5C8AC78B8E3FCE18 ] VSS            C:\Windows\system32\vssvc.exe
13:24:58.0641 0x0444  VSS - ok
13:24:58.0641 0x0444  [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
13:24:58.0656 0x0444  VSTXRAID - ok
13:24:58.0656 0x0444  [ 26BF9586A9F4CF7630F75D8514797103, 4E0EF6D085B5948FFB59210723C05A2FB926FCC0A1EE0D5A129FAD754131486B ] VUSB3HUB        C:\Windows\System32\drivers\ViaHub3.sys
13:24:58.0672 0x0444  VUSB3HUB - ok
13:24:58.0672 0x0444  [ A5DA80C665904C64F346A95EDB89242E, A0EB92E0E8E5B87C38B851E1019892EDDCD638D64DA715D656D4FDCEC5EE4C48 ] VUSBSTOR        C:\Windows\System32\Drivers\vusbstor.sys
13:24:58.0672 0x0444  VUSBSTOR - ok
13:24:58.0688 0x0444  [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
13:24:58.0688 0x0444  vwifibus - ok
13:24:58.0688 0x0444  [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
13:24:58.0703 0x0444  vwififlt - ok
13:24:58.0703 0x0444  [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
13:24:58.0703 0x0444  vwifimp - ok
13:24:58.0719 0x0444  [ DC821E811EFBB65CDD77FBB8B6ECA385, B7C8AACDF81DBA298F2F384983D36B269876C31F0398D89BF9070217A069B96F ] W32Time        C:\Windows\system32\w32time.dll
13:24:58.0735 0x0444  W32Time - ok
13:24:58.0735 0x0444  [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
13:24:58.0735 0x0444  WacomPen - ok
13:24:58.0766 0x0444  [ A81988DCC4FA440AA88B84CA452F5E22, 3573AAA09971E8ADB6FEFA778E02B2D8EE5E4249267CF37A524D9F019CC836FB ] wbengine        C:\Windows\system32\wbengine.exe
13:24:58.0797 0x0444  wbengine - ok
13:24:58.0813 0x0444  [ 0F1DFA2FED73FA78B8C3CDE332A870F6, 1089F6F585F5350D349A640EBD3117832DF6B3657EB6667CB00AE217E04ACA17 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
13:24:58.0828 0x0444  WbioSrvc - ok
13:24:58.0828 0x0444  [ 0EAEC313B24837613621B4A2536ED382, 61C194ED7FA7D65BBE61A546D5FCA52F52AB08324E084D3EC23C9706E9BF0175 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
13:24:58.0844 0x0444  Wcmsvc - ok
13:24:58.0860 0x0444  [ F6B4C2280FF7C7156AC8A4687B9DA35E, 1899D584D7469BB49355D84080051E2575B033E6312009D9C6C1DD3F7F9AA4C5 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
13:24:58.0875 0x0444  wcncsvc - ok
13:24:58.0875 0x0444  [ B7BF1D783F5B2484E8CE1C0C78257F16, 468601199FCCF63DBAE86EE6B8825EA85B2A1EE177413353FFA2CC9CA5249FCD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
13:24:58.0875 0x0444  WcsPlugInService - ok
13:24:58.0891 0x0444  [ 81285DDC994F03379DB46419300B2DCB, 98D3622E11F375718AEA1DE3B5F0104DDAB4F96B6D4C19788C14F7B338A6F235 ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
13:24:58.0891 0x0444  WdBoot - ok
13:24:58.0906 0x0444  [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
13:24:58.0922 0x0444  Wdf01000 - ok
13:24:58.0938 0x0444  [ 26B8FED3F3B85F5F0C4BD03FD00B9941, 7F94FE7954498223B33C025258DB588A3AC9FF25C58EEAD204514FD20652FE40 ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
13:24:58.0938 0x0444  WdFilter - ok
13:24:58.0953 0x0444  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiServiceHost  C:\Windows\system32\wdi.dll
13:24:58.0953 0x0444  WdiServiceHost - ok
13:24:58.0953 0x0444  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiSystemHost  C:\Windows\system32\wdi.dll
13:24:58.0969 0x0444  WdiSystemHost - ok
13:24:58.0969 0x0444  [ CE67080F00E0AF32755096CEA6430ABA, 0E5D626F9F76C0BC63B2D246AD66D9CBF7D92F34B56398417BCFD0C331DBD282 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
13:24:58.0985 0x0444  WdNisDrv - ok
13:24:58.0985 0x0444  WdNisSvc - ok
13:24:58.0985 0x0444  [ 40F83492DB9ABBA59773A45FB487C8B2, 0D0DE0B0C9B929FEFD2674CCF17F5F2FC4B16EAB8E1981BBCE51B0305FD7D75E ] WebClient      C:\Windows\System32\webclnt.dll
13:24:59.0000 0x0444  WebClient - ok
13:24:59.0000 0x0444  [ 384E1D04FE20845B2559D292F17A9FA1, AD3B0B2B2219691AC30FEEC8AFDB3BBB74B51BB7D02038AE2B4DEA514E245315 ] Wecsvc          C:\Windows\system32\wecsvc.dll
13:24:59.0016 0x0444  Wecsvc - ok
13:24:59.0016 0x0444  [ 455014F4E48B67EBE0F032E2B0E06BF2, A36435784A034B27056A0E606683A20C69F1B0AB2B6BAEDEAEAA190F6287CAEF ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
13:24:59.0031 0x0444  WEPHOSTSVC - ok
13:24:59.0031 0x0444  [ F13DBA57CEA9B7074B95EDCA6AD2635E, 1D9BA4841EF1343A5D9096B5FE27FC65DC1901D6683DD13516171638549666B5 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
13:24:59.0031 0x0444  wercplsupport - ok
13:24:59.0047 0x0444  [ FD7E58B6AA3EABF2D12B9762A20E11E4, 4C5E2E246C5C70074866BB3DBC2AAF483ECE4345004CCB8D1FE285047268685D ] WerSvc          C:\Windows\System32\WerSvc.dll
13:24:59.0047 0x0444  WerSvc - ok
13:24:59.0063 0x0444  [ 715ABA3DD164D06457A2A3C92F6EA9D5, E6F8269D2FFC4A548B65724C0A3F53756ED15E47229861FBD40B656EE40FE166 ] WFPLWFS        C:\Windows\system32\DRIVERS\wfplwfs.sys
13:24:59.0063 0x0444  WFPLWFS - ok
13:24:59.0063 0x0444  [ 8C840E1FD7584E74BD0CC1EA581EC187, 148E534A94B4882E7396B13FABE17407802292E7890713540080D03D5629C81D ] WiaRpc          C:\Windows\System32\wiarpc.dll
13:24:59.0078 0x0444  WiaRpc - ok
13:24:59.0078 0x0444  [ 5F66B7BB330AA80067FC66149A692620, 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
13:24:59.0078 0x0444  WIMMount - ok
13:24:59.0078 0x0444  WinDefend - ok
13:24:59.0110 0x0444  [ 10DAD6A7FC617A221313BD584E3C3A00, F139B878668ECF38FE59831E8595A207D5CEEE76C6FFDA8C9F735435E601A763 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
13:24:59.0125 0x0444  WinHttpAutoProxySvc - ok
13:24:59.0125 0x0444  [ FC8BD690321216C32BB58B035B6D5674, D61698DB19D9DB2593B60B6BA13F7B7735667206F41D751D507135469D6D3CDD ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
13:24:59.0141 0x0444  Winmgmt - ok
13:24:59.0188 0x0444  [ 75436315AA383CF527695C6D49D0CA59, E3D55F2ACBD45D4D031FA6CA799394459C89BE50FF6ADE4FE36F2CAB2D2E63D0 ] WinRM          C:\Windows\system32\WsmSvc.dll
13:24:59.0235 0x0444  WinRM - ok
13:24:59.0250 0x0444  [ 3AF1FA17F1C4ACBDB660D8F98B1A9C13, 99B0851410B462685F6705EBF832D10943FB9634030B02D15BF5D0C66F26F2C2 ] WinUsb          C:\Windows\System32\drivers\WinUsb.sys
13:24:59.0250 0x0444  WinUsb - ok
13:24:59.0281 0x0444  [ DC079BA8390089E4EBCA63D27EEA3ECB, 4D549217A68292E2B16C09FD9F84317011EE54A2DAF4E2AB85554267DF0D3249 ] WlanSvc        C:\Windows\System32\wlansvc.dll
13:24:59.0313 0x0444  WlanSvc - ok
13:24:59.0344 0x0444  [ 06BF5897949A8F24893F792E876B71F5, 9D3719492A86BF52A56E2EA798FD6FDB5862A03F6D360FCC4B0CEA9BE9792AE4 ] wlidsvc        C:\Windows\system32\wlidsvc.dll
13:24:59.0375 0x0444  wlidsvc - ok
13:24:59.0375 0x0444  [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
13:24:59.0391 0x0444  WmiAcpi - ok
13:24:59.0391 0x0444  [ B96F7A1236C3F21212DE2C40A3DDB005, 5A29EBB6DA036E303611EB1304192655021405BB05452FD37886DDE604FF0D9D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
13:24:59.0406 0x0444  wmiApSrv - ok
13:24:59.0406 0x0444  WMPNetworkSvc - ok
13:24:59.0406 0x0444  [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof            C:\Windows\system32\drivers\Wof.sys
13:24:59.0422 0x0444  Wof - ok
13:24:59.0453 0x0444  [ 588040D595BBF0856CA1ADD941A8ED17, CBC92BB5453FE1BEA6F33239B7CE884F312559591383408EA5F95A006156C5D3 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
13:24:59.0485 0x0444  workfolderssvc - ok
13:24:59.0485 0x0444  [ A2468CC3509394A33C4C32F99563D845, 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 ] wpcfltr        C:\Windows\system32\DRIVERS\wpcfltr.sys
13:24:59.0500 0x0444  wpcfltr - ok
13:24:59.0500 0x0444  [ 19F4DF69876DA7E9C4965351560FE6B7, 127247A7964F55EE3AF842D25120F5ACD387632BEE2BF3D28FAC05840CEA19BA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
13:24:59.0500 0x0444  WPCSvc - ok
13:24:59.0500 0x0444  [ 2ADE11F3D84709C5F6781E4C59F11683, F003C43396CF8FCF44EAB87583650DB4D2A233322D28D6A78D1694945D9073BB ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
13:24:59.0516 0x0444  WPDBusEnum - ok
13:24:59.0516 0x0444  [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
13:24:59.0516 0x0444  WpdUpFltr - ok
13:24:59.0531 0x0444  [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
13:24:59.0531 0x0444  ws2ifsl - ok
13:24:59.0531 0x0444  [ 5596C0960ED6ED7494BF2A55DE428684, C95CF09A657F37F421CC80E16F2F95B8EC59A8D5D48F104551155EAC8E53DCB2 ] wscsvc          C:\Windows\System32\wscsvc.dll
13:24:59.0547 0x0444  wscsvc - ok
13:24:59.0547 0x0444  WSearch - ok
13:24:59.0610 0x0444  [ 6B2D71124C1EA86B74412F414C42431D, 078CC6C9667EF6BDA3E6900BC26A5A5B030CAA66928A6BBB7B7DC43C5C199EDC ] WSService      C:\Windows\System32\WSService.dll
13:24:59.0688 0x0444  WSService - ok
13:24:59.0750 0x0444  [ 688DAAE720E39DA86822785195646663, DB6E0F89496BB74EDF8378E6AE06364B19249701F6ACD176A0DCA1951E81A63D ] wuauserv        C:\Windows\system32\wuaueng.dll
13:24:59.0813 0x0444  wuauserv - ok
13:24:59.0828 0x0444  [ 481286719402E4BAEFEA0604AB1B5113, F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
13:24:59.0828 0x0444  WudfPf - ok
13:24:59.0844 0x0444  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
13:24:59.0844 0x0444  WUDFRd - ok
13:24:59.0844 0x0444  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFSensorLP    C:\Windows\System32\drivers\WUDFRd.sys
13:24:59.0860 0x0444  WUDFSensorLP - ok
13:24:59.0860 0x0444  [ 51D28F7F1F888DDCF2C67DCF3B79A5D3, 74FF2936AFCEB9A36175D5B00EB91A5AD614B52BE3FB3FA9B994A025A484D2B7 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
13:24:59.0875 0x0444  wudfsvc - ok
13:24:59.0875 0x0444  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdFs      C:\Windows\System32\drivers\WUDFRd.sys
13:24:59.0891 0x0444  WUDFWpdFs - ok
13:24:59.0891 0x0444  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdMtp      C:\Windows\System32\drivers\WUDFRd.sys
13:24:59.0891 0x0444  WUDFWpdMtp - ok
13:24:59.0906 0x0444  [ A0900F8F628B5AF6841414EB3CF11E50, 8A531F2472FF4B4D895D469D28C215C834ECADBEF539894B8F3F606079A86184 ] WwanSvc        C:\Windows\System32\wwansvc.dll
13:24:59.0922 0x0444  WwanSvc - ok
13:24:59.0938 0x0444  [ 6A6EDC5E20DB7B1363F5A0B1A1EB59C4, B8826B8A742115D8D42EF9D5759A9A000278C1F01A85E8ED216BC21AE451B612 ] xhcdrv          C:\Windows\System32\drivers\xhcdrv.sys
13:24:59.0938 0x0444  xhcdrv - ok
13:24:59.0953 0x0444  ================ Scan global ===============================
13:24:59.0953 0x0444  [ 05B08C20B8428ECE088CB5635696A48D, 471642A2D0E5C3BB235962FC8D86A49AC30D7DDE80B97E348425BBFCDE4DCDC3 ] C:\Windows\system32\basesrv.dll
13:24:59.0953 0x0444  [ EAB311B0A7A8EA0346F14F08D4BC8F46, 11168E4074679F8A69DA714C0ABD0C68BA49D171B379343F14783C9C563202CA ] C:\Windows\system32\winsrv.dll
13:24:59.0969 0x0444  [ 3600ED7EA8AED849E20700551C0BD63B, 4A8C346C1646E80B58EF93F87F915A41E05CA2E993BB1C96955AE62A0669AF66 ] C:\Windows\system32\sxssrv.dll
13:24:59.0969 0x0444  [ E0C7813A97CA7947FF5C18A8F3B61A45, 083BB4F3B20419C87DB656F1465E5F782ACDE76838CDE6207F26AAD035C69DE0 ] C:\Windows\system32\services.exe
13:24:59.0985 0x0444  [ Global ] - ok
13:24:59.0985 0x0444  ================ Scan MBR ==================================
13:24:59.0985 0x0444  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
13:25:00.0000 0x0444  \Device\Harddisk0\DR0 - ok
13:25:00.0000 0x0444  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
13:25:00.0078 0x0444  \Device\Harddisk1\DR1 - ok
13:25:00.0078 0x0444  ================ Scan VBR ==================================
13:25:00.0078 0x0444  [ 6AEACAEB08E78D901B0E60D3204FAF8E ] \Device\Harddisk0\DR0\Partition1
13:25:00.0078 0x0444  \Device\Harddisk0\DR0\Partition1 - ok
13:25:00.0078 0x0444  [ 5B77F09C087CFEBD4DCCEFE2B69EA90F ] \Device\Harddisk0\DR0\Partition2
13:25:00.0078 0x0444  \Device\Harddisk0\DR0\Partition2 - ok
13:25:00.0078 0x0444  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
13:25:00.0078 0x0444  \Device\Harddisk0\DR0\Partition3 - ok
13:25:00.0078 0x0444  [ B9534E6952C2649EA02077F2C5CC7E58 ] \Device\Harddisk0\DR0\Partition4
13:25:00.0094 0x0444  \Device\Harddisk0\DR0\Partition4 - ok
13:25:00.0094 0x0444  [ 942EE1F545674A81E407484671331F81 ] \Device\Harddisk0\DR0\Partition5
13:25:00.0094 0x0444  \Device\Harddisk0\DR0\Partition5 - ok
13:25:00.0094 0x0444  [ F09FA3AC69F16C3377728E62DEBA96DD ] \Device\Harddisk1\DR1\Partition1
13:25:00.0125 0x0444  \Device\Harddisk1\DR1\Partition1 - ok
13:25:00.0125 0x0444  ================ Scan generic autorun ======================
13:25:00.0125 0x0444  [ F14327BA386AAA2246585BFADD8FE8E8, 2804D7985B116C808942B4501362D4F4BAE4B540E9A6AC9B176B30DD448BA5AC ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
13:25:00.0125 0x0444  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
13:25:01.0625 0x0414  Object required for P2P: [ E3243F501B6494B4401CC875B854FF4B ] NIS
13:25:02.0438 0x0444  Detect skipped due to KSN trusted
13:25:02.0438 0x0444  IAStorIcon - ok
13:25:02.0579 0x0444  [ 2C1AF8733700FF54C48187797809DC35, AB8BD1BFAF4AB981EB98DDAF357EA77DFC1F434DD7DBDB5DB46649A794F8A309 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
13:25:02.0704 0x0444  RTHDVCPL - ok
13:25:02.0719 0x0444  VIAxHCUtl - ok
13:25:02.0750 0x0444  [ B432EC16773BDFBEB02362F29CC8E8F4, 06533FC481769997C6AE0783D16B9C257E7594DF2CAAA8D90DB25B5A432EE0F1 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
13:25:02.0813 0x0444  NvBackend - ok
13:25:02.0813 0x0444  [ 6C308D32AFA41D26CE2A0EA8F7B79565, 5CC2C563D89257964C4B446F54AFE1E57BBEE49315A9FC001FF5A6BCB6650393 ] C:\Windows\system32\rundll32.exe
13:25:02.0813 0x0444  ShadowPlay - ok
13:25:02.0829 0x0444  [ 223A96BAC91792E1A954BFEB49FBE02C, 56582B1E48EB9AAE8C3AA0BCFB3B8DCBBA6AE26138BBE801DA2404A527DF5636 ] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe
13:25:02.0829 0x0444  LogMeIn GUI - ok
13:25:02.0829 0x0444  [ A2221900B57AEC20577996744FA4A56A, AFEF9176DBA86CDB16A7E84AD0DF6433D4F5865948774FB6B619CBEBEC004592 ] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
13:25:02.0829 0x0444  RemoteControl10 - ok
13:25:02.0860 0x0444  [ 16AFB34618E1286FF856DC600AC49C79, 431EC110507685A0F4472EAE35383B4C1E3DC0B56E01CDECFB18F753181DC995 ] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
13:25:02.0907 0x0444  DivXUpdate - ok
13:25:02.0954 0x0444  [ 8043262DDF132F2BADD230278F21F3B2, 77FF4628813E81B31A3F8C53FB58A211A4CA632E3CDE52486241308147FDC38B ] D:\Windows 8 Codecs Pack\Updater.exe
13:25:02.0954 0x0444  WsmUpdater - ok
13:25:03.0000 0x0444  [ BBCCA29684E7C80B7AE4F5680EDF6FA8, 1101DCCB6CD0C45308F4A23DC4EEF6C6A7EE89C3A0A9FA74F5D2AFBACE6DCC98 ] D:\DivX\DivX Media Server\DivXMediaServer.exe
13:25:03.0016 0x0444  DivXMediaServer - ok
13:25:03.0032 0x0444  [ 81926A18E59336F0CDF816B7F0263E43, 7ED22F2A3B3EC5B9EEAD72D6526D3514E485A8EB6A2A0EB334509202C8A6CE5C ] C:\Program Files (x86)\TrojanHunter\THGuard.exe
13:25:03.0063 0x0444  THGuard - ok
13:25:03.0188 0x0444  [ E5255D63DD01AA9F1CC4355FE366E2D3, 2E28C14DC1FEAE10626D37FF4C1DAE27F3801A40EA973E02E42B48185CBBC89B ] D:\Hamachi\hamachi-2-ui.exe
13:25:03.0313 0x0444  LogMeIn Hamachi Ui - ok
13:25:03.0313 0x0444  DAEMON Tools Lite - ok
13:25:03.0454 0x0444  [ 40335C8877B6B84842AF03A40E1BB206, 33433ED8961B1AEEBD30F8DD53A541C711C403D019F1074406FF9C9D1E9F4113 ] C:\Program Files\CCleaner\CCleaner64.exe
13:25:03.0610 0x0444  CCleaner Monitoring - ok
13:25:03.0626 0x0444  Skype - ok
13:25:03.0626 0x0444  Waiting for KSN requests completion. In queue: 241
13:25:04.0641 0x0444  Waiting for KSN requests completion. In queue: 241
13:25:05.0641 0x0444  Waiting for KSN requests completion. In queue: 241
13:25:05.0954 0x0550  Object required for P2P: [ B432EC16773BDFBEB02362F29CC8E8F4 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
13:25:06.0641 0x0444  Waiting for KSN requests completion. In queue: 216
13:25:07.0641 0x0444  Waiting for KSN requests completion. In queue: 216
13:25:08.0313 0x0550  Object send P2P result: true
13:25:08.0313 0x0550  Object required for P2P: [ E5255D63DD01AA9F1CC4355FE366E2D3 ] D:\Hamachi\hamachi-2-ui.exe
13:25:08.0642 0x0444  Waiting for KSN requests completion. In queue: 208
13:25:09.0157 0x0414  Object send P2P result: true
13:25:09.0157 0x0414  Object required for P2P: [ 6B245B7F96F901891636814B5A7A9088 ] nvsvc
13:25:09.0642 0x0444  Waiting for KSN requests completion. In queue: 191
13:25:10.0642 0x0444  Waiting for KSN requests completion. In queue: 191
13:25:10.0704 0x0550  Object send P2P result: true
13:25:11.0532 0x0414  Object send P2P result: true
13:25:11.0532 0x0414  Object required for P2P: [ 4A19E70F524627B2B4F8A37DE3E3C0CC ] NVVADARM
13:25:11.0642 0x0444  Waiting for KSN requests completion. In queue: 187
13:25:12.0642 0x0444  Waiting for KSN requests completion. In queue: 187
13:25:13.0642 0x0444  Waiting for KSN requests completion. In queue: 187
13:25:13.0908 0x0414  Object send P2P result: true
13:25:14.0658 0x0444  AV detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe ( 22.5.0.0 ), 0x51000 ( enabled : updated )
13:25:14.0658 0x0444  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.207.0 ), 0x60100 ( disabled : updated )
13:25:14.0658 0x0444  FW detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\WSCStub.exe ( 22.5.0.0 ), 0x51010 ( enabled )
13:25:17.0142 0x0444  ============================================================
13:25:17.0142 0x0444  Scan finished
13:25:17.0142 0x0444  ============================================================
13:25:17.0142 0x01a0  Detected object count: 0
13:25:17.0142 0x01a0  Actual detected object count: 0

deeprybka 10.01.2016 14:12
Das gleiche bitte mit ESET:

Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Napp 10.01.2016 17:34
Danke für die Tolle Hilfe :)
Aber ich muss dies so schnell wie möglich beheben. Ich werde mein Windows neu aufsetzen da Ich meinen PC ab morgen Funktionstüchtig brauche.

Ich bin dir echt Dankbar dass Du dir Zeit für mich genommen hast.:dankeschoen:

LG Napp

deeprybka 10.01.2016 18:24
OK. :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:23 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131