Trojaner-Board - Windows 7: Laptop extrem langsam, CPU ausgelastet bei 100% im Ruhezustand

Hallo liebes Trojaner-Board Team,

ich habe seid ein paar Wochen das Problem dass mein Laptop extrem langsam ist, während der Arbeitsprozesse öfter einfriert und auch für Firefox (z.B. Youtube Videos,..) momentan absolut ungeeignet ist. Ich kann mir leider nicht wirklich erklären was die Ursache dafür sein könnte, eigentlich bin ich sehr vorsichtig und lade nichts unsicheres herunter und habe auch keine Änderungen am System oder ähnliches vorgenommen, habe aber die Vermutung dass ich mir irgendetwas eingefangen habe.

Davor konnte ich sehr gut mit dem Laptop arbeiten, er ist sehr schnell hochgefahren und alles lief relativ flüssig und ohne lange Pausen. Jetzt ist er sogar im "Ruhemodus" bei 70% bis 100% CPU auslastung.

Ich würde mich sehr freuen falls Ihr mir irgendwie helfen könntet.

Noch ein paar Infos zum Laptop:

Dell Latitude E5400
Windows 7 Professional 64bit SP1
Intel Core 2 Duo P8400 2,26Ghz
4GB RAM

Hier die FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016

durchgeführt von Latitude E5400 (Administrator) auf LATITUDEE5400 (10-02-2016 19:27:19)

Gestartet von C:\Users\Latitude E5400\Desktop

Geladene Profile: Latitude E5400 (Verfügbare Profile: Latitude E5400)

Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

(Hercules®) C:\Program Files\Hercules\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe

() C:\ProgramData\MobileBrServ\mbbService.exe

(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe

() C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

(Farbar) C:\Users\Latitude E5400\Desktop\FRST64(1).exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-14] (COMODO)

HKLM-x32\...\Run: [Hercules DJ Series] => C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe [3409264 2016-01-06] (Hercules®)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_286_Plugin.exe -update plugin

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\MountPoints2: {18c7e284-14ad-11e4-998d-a4badbb5a26c} - F:\.\Autorun.exe AUTORUN=1

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\MountPoints2: {2fa4a6e3-1362-11e4-9a01-a4badbb5a26c} - E:\AutoRun.exe

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\MountPoints2: {a997bf5a-5bba-11e4-968c-a4badbb5a26c} - E:\MotoCastSetup.exe -a

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\MountPoints2: {b347dbff-1289-11e4-9952-a4badbb5a26c} - F:\.\Autorun.exe AUTORUN=1

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\MountPoints2: {b347dc0c-1289-11e4-9952-a4badbb5a26c} - E:\AutoRun.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 141.35.1.16 141.35.1.80

Tcpip\..\Interfaces\{84E76AE9-26D6-4414-930A-E1CC00032928}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{C019B254-9D19-40D5-8D17-8DC189373700}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{EDDFAABE-DCBE-49AF-ACE9-171532EB2A2E}: [DhcpNameServer] 141.35.1.16 141.35.1.80
 

Internet Explorer:

==================

SearchScopes: HKU\S-1-5-21-4243540776-3567738311-2066592817-1000 -> DefaultScope {B69FABEB-27B6-4DB5-857F-374037F9CC09} URL = 

BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-24] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-24] (Oracle Corporation)

BHO-x32: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei
 

FireFox:

========

FF ProfilePath: C:\Users\Latitude E5400\AppData\Roaming\Mozilla\Firefox\Profiles\j980mff9.default-1455121379226

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-24] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-24] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

FF Extension: Adblock Plus - C:\Users\Latitude E5400\AppData\Roaming\Mozilla\Firefox\Profiles\j980mff9.default-1455121379226\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-10]

FF HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht gefunden
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-09-08] (COMODO)

R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-14] (COMODO)

R2 HerculesDJControlMP3; C:\Program Files\Hercules\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE [18944 2016-01-06] (Hercules®) [Datei ist nicht signiert]

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-19] (Malwarebytes)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-19] (Malwarebytes)

R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()

R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-10-08] (DEVGURU Co., LTD.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 WMCoreService; C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe [430080 2009-09-24] () [Datei ist nicht signiert]

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [329168 2010-02-23] ()
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [232272 2016-01-06] (© Guillemot R&D, 2012. All rights reserved.)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21184 2015-11-18] (COMODO)

R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [806032 2015-11-18] (COMODO)

R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45856 2015-08-05] (COMODO)

S3 d554gps; C:\Windows\System32\DRIVERS\d554gps64.sys [96296 2009-07-10] (Ericsson AB)

S3 d557bus; C:\Windows\System32\DRIVERS\d557bus.sys [328704 2009-06-29] (MCCI Corporation)

S3 d557mdfl; C:\Windows\System32\DRIVERS\d557mdfl.sys [19456 2009-06-29] (MCCI Corporation)

S3 d557mdm; C:\Windows\System32\DRIVERS\d557mdm.sys [432128 2009-06-29] (MCCI Corporation)

S3 d557mgmt; C:\Windows\System32\DRIVERS\d557mgmt.sys [376320 2009-06-29] (MCCI Corporation)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [12800 2009-09-22] (Ericsson AB)

S3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [17408 2009-09-22] (Ericsson AB)

S3 ewsercd; C:\Windows\System32\DRIVERS\ewsercd.sys [112896 2014-07-23] (Huawei Technologies Co., Ltd.)

S3 ewsercd; C:\Windows\SysWOW64\DRIVERS\ewsercd.sys [112896 2014-07-26] (Huawei Technologies Co., Ltd.)

S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [117248 2014-07-26] (Huawei Technologies Co., Ltd.) [Datei ist nicht signiert]

S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [304976 2016-01-06] (© Guillemot R&D, 2012. All rights reserved.)

S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [253264 2016-01-06] (© Guillemot R&D, 2011. All rights reserved.)

S3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [121600 2014-07-26] (Huawei Technologies Co., Ltd.) [Datei ist nicht signiert]

R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105096 2015-08-05] (COMODO)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-19] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-19] (Malwarebytes Corporation)

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2015-11-06] (DEVGURU Co., LTD.(www.devguru.co.kr))

S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2015-11-06] (Microsoft Corporation)

S3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [255016 2009-09-22] (Ericsson AB)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-10 19:27 - 2016-02-10 19:29 - 00010578 _____ C:\Users\Latitude E5400\Desktop\FRST.txt

2016-02-10 18:11 - 2016-02-10 18:12 - 02370560 _____ (Farbar) C:\Users\Latitude E5400\Desktop\FRST64(1).exe

2016-02-10 17:23 - 2016-02-10 17:23 - 00000000 ____D C:\Users\Latitude E5400\Desktop\Alte Firefox-Daten

2016-02-02 14:50 - 2016-02-02 14:50 - 00010370 _____ C:\Users\Latitude E5400\Desktop\Ihre Retourenmarke.pdf

2016-02-02 13:53 - 2016-02-02 13:53 - 00215132 _____ C:\Users\Latitude E5400\Desktop\Stuwe Wohnplatz Bewerbung.PDF

2016-01-25 18:11 - 2016-01-25 18:11 - 00209709 _____ C:\Users\Latitude E5400\Desktop\Recht 2.odt

2016-01-19 08:55 - 2016-01-19 08:56 - 00000000 ____D C:\Windows\rescache

2016-01-14 19:31 - 2016-01-14 19:31 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-01-14 19:31 - 2016-01-14 19:31 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-01-14 19:31 - 2016-01-14 19:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-01-14 19:31 - 2016-01-14 19:31 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-01-14 19:31 - 2016-01-14 19:31 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-01-14 19:31 - 2016-01-14 19:31 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-01-14 19:31 - 2016-01-14 19:31 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-01-14 19:31 - 2016-01-14 19:31 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-01-14 19:31 - 2016-01-14 19:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-01-14 19:31 - 2015-12-12 19:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-01-14 19:31 - 2015-12-12 19:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-01-14 19:31 - 2015-12-12 18:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-01-14 19:31 - 2015-12-12 18:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-01-14 19:26 - 2016-01-14 19:26 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-01-14 19:26 - 2016-01-14 19:26 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-01-14 19:26 - 2016-01-14 19:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-01-14 19:26 - 2016-01-14 19:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-01-14 19:26 - 2016-01-14 19:26 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-01-14 19:26 - 2016-01-14 19:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-01-14 19:26 - 2016-01-14 19:26 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-01-14 19:26 - 2016-01-14 19:26 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-01-14 19:25 - 2016-01-14 19:25 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-01-14 19:25 - 2016-01-14 19:25 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-01-14 19:25 - 2016-01-14 19:25 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax

2016-01-14 19:25 - 2016-01-14 19:25 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2016-01-14 19:25 - 2016-01-14 19:25 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL

2016-01-14 19:25 - 2016-01-14 19:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe

2016-01-14 19:25 - 2016-01-14 19:25 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys

2016-01-14 19:25 - 2016-01-14 19:25 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2016-01-14 19:25 - 2016-01-14 19:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2016-01-14 19:25 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll

2016-01-14 19:25 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll

2016-01-14 19:11 - 2016-01-14 19:11 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-01-14 19:11 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-01-14 18:58 - 2015-12-08 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-01-14 18:58 - 2015-12-08 20:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-01-14 00:58 - 2016-01-14 12:11 - 00000000 ____D C:\Users\Latitude E5400\AppData\Local\Mixxx

2016-01-14 00:56 - 2016-01-14 00:56 - 00001622 _____ C:\Users\Public\Desktop\Mixxx.lnk

2016-01-14 00:56 - 2016-01-14 00:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixxx

2016-01-14 00:55 - 2016-01-14 00:56 - 00000000 ____D C:\Program Files\Mixxx

2016-01-13 23:40 - 2016-01-13 23:42 - 00000000 ____D C:\8c89aa78cc1d4e1fbb717b0625

2016-01-13 18:28 - 2016-01-13 18:28 - 25035393 _____ C:\Users\Latitude E5400\Downloads\mixxx-2.0.0-win64.exe

2016-01-13 18:24 - 2016-01-13 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-01-11 22:26 - 2016-01-11 22:26 - 00000395 _____ C:\Users\Latitude E5400\Desktop\drehbuch.txt
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-10 19:27 - 2015-10-20 15:16 - 00000000 ____D C:\FRST

2016-02-10 19:24 - 2014-07-14 18:43 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat

2016-02-10 18:39 - 2014-07-15 06:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-02-10 18:39 - 2014-07-15 06:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-02-10 18:39 - 2014-07-15 06:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2016-02-10 18:39 - 2014-07-15 06:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-02-10 18:27 - 2014-12-15 11:11 - 00604282 _____ C:\Windows\system32\Drivers\fvstore.dat

2016-02-10 18:18 - 2015-10-20 15:18 - 00049880 _____ C:\Users\Latitude E5400\Downloads\FRST.txt

2016-02-10 16:53 - 2009-07-14 05:45 - 00032736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-02-10 16:53 - 2009-07-14 05:45 - 00032736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-02-10 16:52 - 2015-09-08 21:04 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-02-10 16:44 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-02-06 03:47 - 2015-02-01 15:02 - 00000000 ____D C:\Users\Latitude E5400\AppData\Roaming\vlc

2016-01-25 22:49 - 2014-07-14 22:12 - 01744820 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2016-01-25 22:49 - 2011-04-12 08:43 - 00790032 _____ C:\Windows\system32\perfh007.dat

2016-01-25 22:49 - 2011-04-12 08:43 - 00207518 _____ C:\Windows\system32\perfc007.dat

2016-01-25 22:49 - 2009-07-14 06:13 - 01744820 _____ C:\Windows\system32\PerfStringBackup.INI

2016-01-25 22:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

2016-01-25 16:32 - 2015-06-03 18:07 - 00000519 _____ C:\Users\Latitude E5400\Desktop\SELF SERVICE Ernst-Abbe-Hochschule Jena.website

2016-01-20 15:51 - 2016-01-06 15:53 - 00000000 ____D C:\Users\Latitude E5400\Documents\DJUCED

2016-01-15 20:01 - 2016-01-01 14:30 - 00000000 ____D C:\Users\Latitude E5400\Desktop\Prüfungen 2016

2016-01-15 10:53 - 2009-07-14 05:45 - 00296120 _____ C:\Windows\system32\FNTCACHE.DAT

2016-01-15 10:49 - 2014-12-12 12:20 - 00000000 ____D C:\Windows\system32\appraiser

2016-01-15 10:49 - 2014-07-14 21:39 - 00000000 ___SD C:\Windows\system32\CompatTel

2016-01-15 03:38 - 2014-07-16 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-01-15 03:37 - 2014-07-16 18:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-01-15 03:37 - 2014-07-16 18:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-01-15 03:35 - 2014-07-14 20:59 - 00000000 ____D C:\Windows\system32\MRT

2016-01-15 03:31 - 2014-07-14 20:59 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-01-14 19:25 - 2009-07-14 01:22 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll

2016-01-14 00:54 - 2015-02-17 12:42 - 00000000 ____D C:\ProgramData\Package Cache

2016-01-13 23:44 - 2014-07-14 20:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-01-13 20:08 - 2014-12-26 23:40 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-01-13 20:06 - 2015-07-03 19:44 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-01-12 10:14 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-11-24 21:57 - 2015-11-24 21:57 - 0003354 _____ () C:\Users\Latitude E5400\AppData\Local\recently-used.xbel
 

Einige Dateien in TEMP:

====================

C:\Users\Latitude E5400\AppData\Local\Temp\vcredist_x64.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-02-03 01:23
 

==================== Ende von FRST.txt ============================

Und die Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-02-2016

durchgeführt von Latitude E5400 (2016-02-10 19:34:51)

Gestartet von C:\Users\Latitude E5400\Desktop

Windows 7 Professional Service Pack 1 (X64) (2013-10-08 11:12:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4243540776-3567738311-2066592817-500 - Administrator - Disabled)

Gast (S-1-5-21-4243540776-3567738311-2066592817-501 - Limited - Disabled)

Latitude E5400 (S-1-5-21-4243540776-3567738311-2066592817-1000 - Administrator - Enabled) => C:\Users\Latitude E5400
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: COMODO Antivirus (Enabled - Up to date) {F25D0092-CDBE-B303-ADB7-88DE8CDECCF5}

AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: COMODO Firewall (Enabled) {CA6681B7-87D1-B25B-86E8-21EB720D8B8E}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4852 - CDBurnerXP)

COMODO Internet Security Premium (HKLM\...\{D32EF4F9-1506-434E-A813-3D4C0AA50300}) (Version: 7.0.53315.4132 - COMODO Security Solutions Inc.)

Dell System Detect (HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\9204f5692a8faf3b) (Version: 5.8.1.1 - Dell)

Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.108 - ALPS ELECTRIC CO., LTD.)

Dell Wireless HSPA Mini-Card Drivers (HKLM\...\{D32F6B1F-0FD0-46DA-B821-8D876070F20C}) (Version: 6.1.9.5 - Dell)

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

DJUCED (HKLM-x32\...\{1BE0813F-4110-4B1C-B96D-EB7278199DDC}) (Version: 1.0.24 - Guillemot)

DVBViewer TERRATEC Edition (HKLM-x32\...\DVBViewer TERRATEC Edition_is1) (Version:  - CM&V)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.3.17800 - Landesfinanzdirektion Thüringen)

Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Hercules DJ Products Series drivers (HKLM-x32\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 3.HDJS.2012 - Hercules)

Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)

Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)

JavaFX 2.0.3 (HKLM-x32\...\{1111706F-666A-4037-7777-203328764D10}) (Version: 2.0.3 - Oracle Corporation)

Kinovea (HKLM-x32\...\Kinovea) (Version: 0.8.15 - Kinovea)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Mixxx 2.0.0 (64-bit) (HKLM-x32\...\Mixxx (2.0.0)) (Version: 2.0.0 - The Mixxx Development Team)

Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.14.00.03 - Huawei Technologies Co.,Ltd)

Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC)

Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

NOXON DAB Player (HKLM-x32\...\{267A1D4B-FDB6-4914-AD41-FC8F3AB118B9}) (Version: 1.1.0 - NOXON Media)

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)

RICOH Media Driver ver.2.07.01.01 (HKLM-x32\...\{2B818257-E6C7-4841-8C29-C5C9A982BCE5}) (Version: 2.07.01.01 - RICOH)

Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)

Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)

Spotify (HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB)

TERRATEC Cinergy T Stick+ (64 Bit) (HKLM-x32\...\{40F7933E-E265-474C-8994-4193BC4D1EBC}) (Version: 86.001.1129.2011 - TERRATEC)

Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)

Verbindungsassistent (HKLM-x32\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Windows-Treiberpaket - TERRATEC (RTL2832U_IRHID) HIDClass  (06/17/2010 8664.001.0617.2010) (HKLM\...\832E5A8CFCF883BE35B792BF10CCBA5C9AEC98BA) (Version: 06/17/2010 8664.001.0617.2010 - TERRATEC)

Windows-Treiberpaket - TERRATEC (RTL2832UUSB) MEDIA  (08/02/2010 64.001.0802.2010) (HKLM\...\4CCE055897CD96DF140A4635E8FE9D7F91056439) (Version: 08/02/2010 64.001.0802.2010 - TERRATEC)

YTD Video Downloader 4.9.2 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9.2 - GreenTree Applications SRL) <==== ACHTUNG
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {05FF3432-A4E4-4E75-A46A-FC543B3C9A36} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO)

Task: {3B73551B-A3EC-490C-AA0A-797BE7DF6180} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-21] (Microsoft Corporation)

Task: {4E03CF95-D5CC-43F6-BE9B-565CB2D12569} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-14] (COMODO)

Task: {6602D487-641B-4D25-BD16-848664954778} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-01-13] (Adobe Systems Incorporated)

Task: {9CF5BC8E-960E-4CD9-BED4-DEFC2EFE26B2} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO)

Task: {A9CF0DF1-F0F5-45A6-B8E3-5E0BE4366526} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated)

Task: {B5FD9D26-CCD2-4D84-B4E6-5B7A708E5634} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO)

Task: {BEFE9807-9974-44DF-A8E8-ABCE38565F07} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-21] (Microsoft Corporation)

Task: {CE5D345D-9853-41D8-9025-D6CC2ADAD79C} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-14] (COMODO)

Task: {F133F463-DF4B-4704-B564-769477EC53E4} - System32\Tasks\{D46555D1-48E2-4A47-A7A1-6182DCD72D6E} => pcalua.exe -a "C:\Users\Latitude E5400\Downloads\Win7_64_15.17.19_2869_Dell_setup_ZPE.exe" -d "C:\Users\Latitude E5400\Downloads"
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-07-24 19:49 - 2012-03-12 10:05 - 00232288 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe

2009-09-24 09:54 - 2009-09-24 09:54 - 00430080 ____R () C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe

2014-07-26 13:08 - 2010-02-23 10:01 - 00329168 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

2013-04-15 17:39 - 2015-01-08 23:02 - 00067808 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav

2009-03-25 20:08 - 2009-03-25 20:08 - 00058880 ____R () C:\Program Files (x86)\Dell\Dell WWAN\WMCore\MBMDebug.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Windows\notepad.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appinfo.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\basesrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\BrUsi09c.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\BrWi209c.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\clfs.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\consent.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dwmcore.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\hdjapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\HDJAsioCpl.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\HDJAsiou.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\HDJSeries.cpl:$CmdTcID

AlternateDataStreams: C:\Windows\system32\HerculesDJDevices.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\hrfdongle.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID

AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\jnwmon.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msimsg.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\notepad.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ole32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rdpcorets.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\RdpGroupPolicyExtension.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rdvidcrl.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\tzres.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\ucrtbase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WdfCoInstaller01007.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID

AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID

AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WinUSBCoInstaller.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wksprt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\brprtink.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\d3d10warp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\HDJAPI.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\HDJAsioCpl.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\HDJAsiou.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\HDJSAPI.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\HRFDongle.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msimsg.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\notepad.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\occache.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ole32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\rdvidcrl.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\tzres.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\ucrtbase.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID

AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\BdaSup.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\HDJAsioK.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\HDJBulk.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\HDJCtrl.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\HDJMidi.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\http.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\rndismp6.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\RTL2832UBDA.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\RTL2832UUSB.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\RTL2832U_IRHID.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ssudbus.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ssudmdm.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\ssudserd.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\usb80236.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\USBAUDIO.sys:$CmdTcID

AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\20160125_135744-1.jpg:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\20160125_135744-1.jpg:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Bachelorstudiengang_Vorlesungsangebote_WS_2015_16_September.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Bachelorstudiengang_Vorlesungsangebote_WS_2015_16_September.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\freizeitplaner_2012.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\freizeitplaner_2012.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\FRST64(1).exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\FRST64(1).exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Ihre Retourenmarke.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Ihre Retourenmarke.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Logitel_Vertrag.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Logitel_Vertrag.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\SS_DL.dll:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Stuwe Wohnplatz Bewerbung.PDF:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Desktop\Stuwe Wohnplatz Bewerbung.PDF:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\AngemeldeteInstudiengang572057c7-3c35-4f19-aa35-8cf6ca9adbf0.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\AngemeldeteInstudiengang572057c7-3c35-4f19-aa35-8cf6ca9adbf0.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Defogger.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Defogger.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\ElsterFormular-16.0.20150211p.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\ElsterFormular-16.0.20150211p.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\eswe.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\eswe.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\FRST64.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\FRST64.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Gmer-19357.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Gmer-19357.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\gpubli.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\jre-8u45-windows-i586-iftw.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\jre-8u45-windows-i586-iftw.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\jre-8u66-windows-i586-iftw.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\jre-8u66-windows-i586-iftw.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Kies3Setup.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Kies3Setup.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Kosten_und_Leistungsrechnung.zip:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Kosten_und_Leistungsrechnung.zip:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Lob des Sexismus.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Lob des Sexismus.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\mbam-setup-2.1.8.1057.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\mbam-setup-2.1.8.1057.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\mixxx-2.0.0-win64.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\mixxx-2.0.0-win64.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Odin3 - CHIP-Installer.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Odin3 - CHIP-Installer.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\PhoneBackup_2.0.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Prüfungplan SS 2015-BW-BA-endgültig.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Prüfungplan SS 2015-BW-BA-endgültig.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\readerdc_de_a_install.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\readerdc_de_a_install.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\rootcert.cer:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\rootcert.cer:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\SpotifySetup.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\SpotifySetup.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Statistik.zip:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Statistik.zip:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studbesch_147CFE0E6AC66C763769FF1905F0BC3D.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studbesch_147CFE0E6AC66C763769FF1905F0BC3D.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studbesch_C3FDFC0EC17E0BBE9D054A74A395D1E2.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studbesch_D48FAEBBA837C215F1EF1C2D400F61D4.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studverlauf_147CFE0E6AC66C763769FF1905F0BC3D.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\studverlauf_147CFE0E6AC66C763769FF1905F0BC3D.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Tutorium.zip:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Tutorium.zip:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Ultimate Backup Tool - CHIP-Installer.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\Ultimate Backup Tool - CHIP-Installer.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\YTDSetup.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Downloads\YTDSetup.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\AMICA_KMC_13280_E_BDA_DE_FR_1401.pdf:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\AMICA_KMC_13280_E_BDA_DE_FR_1401.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\AMICA_KMC_13280_E_EBZ_1310.jpg:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\AMICA_KMC_13280_E_EBZ_1310.jpg:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\eswe-vertrag-jf8a4l6ujjhn0p8g0fnludqa43424fc9704d0c10ea6516a10fd93c6b0a.pdf:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\FreeYouTubeToMP354Converter.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\FreeYouTubeToMP354Converter.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\VLC media player 64 Bit - CHIP-Installer.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\VLC media player 64 Bit - CHIP-Installer.exe:$CmdZnID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\YTDSetup.exe:$CmdTcID

AlternateDataStreams: C:\Users\Latitude E5400\Documents\YTDSetup.exe:$CmdZnID
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\...\dell.com -> dell.com
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4243540776-3567738311-2066592817-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Latitude E5400\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 141.35.1.16 - 141.35.1.80

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist deaktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Apoint => C:\Program Files\DellTPad\Apoint.exe

MSCONFIG\startupreg: MotoCast => "C:\Program Files (x86)\Motorola Mobility\MotoCast\MotoLauncher.lnk"

MSCONFIG\startupreg: Spotify => "C:\Users\Latitude E5400\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Latitude E5400\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{14366C3B-BACB-4618-A550-2EFE1735DB9E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{24FABA2B-F4BA-4B85-AF98-4321D814B60F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{3EBE92E9-6552-4C30-AD7E-DE7E13D50D08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7468E049-A423-4A26-AF1C-5EE4B121096C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Wiederherstellungspunkte =========================
 

04-02-2016 02:53:36 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (02/10/2016 04:45:36 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2016 02:46:21 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2016 09:08:25 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/09/2016 10:57:34 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/08/2016 10:54:37 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/08/2016 09:07:59 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/07/2016 11:46:38 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/06/2016 09:25:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/06/2016 11:16:22 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/06/2016 03:47:59 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.19110, Zeitstempel: 0x568429e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ac04

ID des fehlerhaften Prozesses: 0xd3c

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 
 

Systemfehler:

=============

Error: (01/20/2016 03:51:58 PM) (Source: Bulk) (EventID: 23) (User: )

Description: Device  failed cont reader callback, status:status:c0000001, usbsStatus:0.
 

Error: (01/19/2016 08:02:41 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMScheduler erreicht.
 

Error: (01/19/2016 01:33:51 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (01/19/2016 10:27:20 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}
 

Error: (01/19/2016 03:52:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Anwendungserfahrung" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (01/19/2016 03:52:57 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AeLookupSvc erreicht.
 

Error: (01/19/2016 03:52:52 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.
 

Error: (01/19/2016 03:52:22 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.
 

Error: (01/19/2016 03:45:56 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.
 

Error: (01/19/2016 03:45:26 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz

Prozentuale Nutzung des RAM: 44%

Installierter physikalischer RAM: 4051.17 MB

Verfügbarer physikalischer RAM: 2253.97 MB

Summe virtueller Speicher: 8100.54 MB

Verfügbarer virtueller Speicher: 5977.32 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:148.95 GB) (Free:56.99 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 0048FBA8)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=148.9 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Danke und viele Grüße,

Christian.

Hallo und vielen Dank für deine Hilfe Jürgen.

Es wurden anscheinend keine Rootkids gefunden. Hier der Report von TDSSKiller:

Code:

11:34:48.0172 0x0d18  TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12

11:34:51.0639 0x0d18  ============================================================

11:34:51.0639 0x0d18  Current date / time: 2016/02/12 11:34:51.0639

11:34:51.0639 0x0d18  SystemInfo:

11:34:51.0640 0x0d18  

11:34:51.0640 0x0d18  OS Version: 6.1.7601 ServicePack: 1.0

11:34:51.0640 0x0d18  Product type: Workstation

11:34:51.0640 0x0d18  ComputerName: LATITUDEE5400

11:34:51.0641 0x0d18  UserName: Latitude E5400

11:34:51.0641 0x0d18  Windows directory: C:\Windows

11:34:51.0641 0x0d18  System windows directory: C:\Windows

11:34:51.0641 0x0d18  Running under WOW64

11:34:51.0641 0x0d18  Processor architecture: Intel x64

11:34:51.0641 0x0d18  Number of processors: 2

11:34:51.0641 0x0d18  Page size: 0x1000

11:34:51.0641 0x0d18  Boot type: Normal boot

11:34:51.0641 0x0d18  ============================================================

11:34:53.0940 0x0d18  KLMD registered as C:\Windows\system32\drivers\38674734.sys

11:34:54.0840 0x0d18  System UUID: {64C725BD-8ACA-157E-2F9B-7A15487CCCBE}

11:34:57.0586 0x0d18  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:34:57.0609 0x0d18  ============================================================

11:34:57.0609 0x0d18  \Device\Harddisk0\DR0:

11:34:57.0609 0x0d18  MBR partitions:

11:34:57.0609 0x0d18  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

11:34:57.0609 0x0d18  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x129E6000

11:34:57.0609 0x0d18  ============================================================

11:34:57.0646 0x0d18  C: <-> \Device\Harddisk0\DR0\Partition2

11:34:57.0647 0x0d18  ============================================================

11:34:57.0647 0x0d18  Initialize success

11:34:57.0647 0x0d18  ============================================================

11:35:06.0366 0x09c0  ============================================================

11:35:06.0367 0x09c0  Scan started

11:35:06.0367 0x09c0  Mode: Manual; SigCheck; TDLFS; 

11:35:06.0367 0x09c0  ============================================================

11:35:06.0367 0x09c0  KSN ping started

11:35:08.0895 0x09c0  KSN ping finished: true

11:35:11.0122 0x09c0  ================ Scan system memory ========================

11:35:11.0123 0x09c0  System memory - ok

11:35:11.0134 0x09c0  ================ Scan services =============================

11:35:11.0498 0x09c0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys

11:35:11.0928 0x09c0  1394ohci - ok

11:35:12.0044 0x09c0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

11:35:12.0151 0x09c0  ACPI - ok

11:35:12.0227 0x09c0  [ 12C5274CD87449A2A37A607CDB321922, 50FA524E66A8FA04037DC954D3AB5383C633898F111A3B7488630B649B897370 ] acpials         C:\Windows\system32\DRIVERS\acpials.sys

11:35:12.0287 0x09c0  acpials - ok

11:35:12.0335 0x09c0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

11:35:12.0423 0x09c0  AcpiPmi - ok

11:35:12.0599 0x09c0  [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

11:35:12.0686 0x09c0  AdobeARMservice - ok

11:35:12.0887 0x09c0  [ 785FD0E36CA75D90DD50042E2594BC63, 471A5ED43A3E18A5A69C28F7F351558E90F20416D9C532ADF50888808090AE89 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

11:35:12.0956 0x09c0  AdobeFlashPlayerUpdateSvc - ok

11:35:13.0052 0x09c0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

11:35:13.0149 0x09c0  adp94xx - ok

11:35:13.0225 0x09c0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys

11:35:13.0333 0x09c0  adpahci - ok

11:35:13.0387 0x09c0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

11:35:13.0452 0x09c0  adpu320 - ok

11:35:13.0513 0x09c0  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

11:35:13.0580 0x09c0  AeLookupSvc - ok

11:35:13.0684 0x09c0  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys

11:35:13.0786 0x09c0  AFD - ok

11:35:13.0906 0x09c0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

11:35:13.0961 0x09c0  agp440 - ok

11:35:14.0127 0x09c0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

11:35:14.0269 0x09c0  ALG - ok

11:35:14.0332 0x09c0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

11:35:14.0424 0x09c0  aliide - ok

11:35:14.0446 0x09c0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

11:35:14.0497 0x09c0  amdide - ok

11:35:14.0539 0x09c0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

11:35:14.0601 0x09c0  AmdK8 - ok

11:35:14.0633 0x09c0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

11:35:14.0694 0x09c0  AmdPPM - ok

11:35:14.0743 0x09c0  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

11:35:14.0805 0x09c0  amdsata - ok

11:35:14.0850 0x09c0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

11:35:14.0918 0x09c0  amdsbs - ok

11:35:14.0952 0x09c0  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

11:35:15.0005 0x09c0  amdxata - ok

11:35:15.0130 0x09c0  [ CA5F1BD1261BC771D30096BBCFD625A0, 1DD3551527CF0D853F48399DBF6AAA7814EB4DEEF9A4193B2CC8D068084DB24A ] ApfiltrService  C:\Windows\system32\DRIVERS\Apfiltr.sys

11:35:15.0270 0x09c0  ApfiltrService - ok

11:35:15.0365 0x09c0  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID           C:\Windows\system32\drivers\appid.sys

11:35:15.0444 0x09c0  AppID - ok

11:35:15.0533 0x09c0  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

11:35:15.0595 0x09c0  AppIDSvc - ok

11:35:15.0645 0x09c0  [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo         C:\Windows\System32\appinfo.dll

11:35:15.0708 0x09c0  Appinfo - ok

11:35:15.0782 0x09c0  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll

11:35:15.0856 0x09c0  AppMgmt - ok

11:35:15.0911 0x09c0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys

11:35:15.0971 0x09c0  arc - ok

11:35:16.0012 0x09c0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys

11:35:16.0073 0x09c0  arcsas - ok

11:35:16.0254 0x09c0  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

11:35:16.0335 0x09c0  aspnet_state - ok

11:35:16.0408 0x09c0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

11:35:16.0673 0x09c0  AsyncMac - ok

11:35:16.0753 0x09c0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

11:35:16.0806 0x09c0  atapi - ok

11:35:16.0942 0x09c0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

11:35:17.0086 0x09c0  AudioEndpointBuilder - ok

11:35:17.0175 0x09c0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll

11:35:17.0309 0x09c0  AudioSrv - ok

11:35:17.0399 0x09c0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

11:35:17.0504 0x09c0  AxInstSV - ok

11:35:17.0622 0x09c0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

11:35:17.0869 0x09c0  b06bdrv - ok

11:35:17.0979 0x09c0  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

11:35:18.0098 0x09c0  b57nd60a - ok

11:35:18.0280 0x09c0  [ 9E84A931DBEE0292E38ED672F6293A99, 2945EAF0AC091709E0C5508B45EC343EDE507AC2B08A2D7D64F286D38424CBC4 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys

11:35:18.0483 0x09c0  BCM43XX - ok

11:35:18.0526 0x09c0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

11:35:18.0603 0x09c0  BDESVC - ok

11:35:18.0639 0x09c0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

11:35:18.0806 0x09c0  Beep - ok

11:35:19.0025 0x09c0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

11:35:19.0151 0x09c0  BFE - ok

11:35:19.0269 0x09c0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

11:35:19.0659 0x09c0  BITS - ok

11:35:19.0804 0x09c0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

11:35:19.0876 0x09c0  blbdrive - ok

11:35:19.0945 0x09c0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

11:35:20.0007 0x09c0  bowser - ok

11:35:20.0035 0x09c0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

11:35:20.0107 0x09c0  BrFiltLo - ok

11:35:20.0139 0x09c0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

11:35:20.0207 0x09c0  BrFiltUp - ok

11:35:20.0263 0x09c0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

11:35:20.0346 0x09c0  Browser - ok

11:35:20.0397 0x09c0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

11:35:20.0478 0x09c0  Brserid - ok

11:35:20.0510 0x09c0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

11:35:20.0578 0x09c0  BrSerWdm - ok

11:35:20.0602 0x09c0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

11:35:20.0669 0x09c0  BrUsbMdm - ok

11:35:20.0700 0x09c0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

11:35:20.0755 0x09c0  BrUsbSer - ok

11:35:20.0798 0x09c0  [ 21A583678FD814794BC3E8E32E5A6BD3, 4EC67E35BAC69A66B480DA50FBB176104C7294744B3F7B7F4C05F2B351FE62DE ] BTCFilterService C:\Windows\system32\DRIVERS\motfilt.sys

11:35:20.0872 0x09c0  BTCFilterService - ok

11:35:20.0914 0x09c0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

11:35:20.0984 0x09c0  BTHMODEM - ok

11:35:21.0030 0x09c0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

11:35:21.0183 0x09c0  bthserv - ok

11:35:21.0260 0x09c0  [ A8C49D2F74630ABAB3398EE0702B64F4, B146D8D03ADABCA6840DB178A2C9A478E8507CE2BC88A4A157EC2BE3C3639870 ] Bulk            C:\Windows\system32\Drivers\HDJBulk.sys

11:35:21.0413 0x09c0  Bulk - ok

11:35:21.0485 0x09c0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

11:35:21.0708 0x09c0  cdfs - ok

11:35:21.0810 0x09c0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

11:35:21.0911 0x09c0  cdrom - ok

11:35:22.0053 0x09c0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

11:35:22.0222 0x09c0  CertPropSvc - ok

11:35:22.0271 0x09c0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys

11:35:22.0344 0x09c0  circlass - ok

11:35:22.0461 0x09c0  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys

11:35:22.0659 0x09c0  CLFS - ok

11:35:22.0777 0x09c0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

11:35:22.0875 0x09c0  clr_optimization_v2.0.50727_32 - ok

11:35:22.0935 0x09c0  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

11:35:22.0998 0x09c0  clr_optimization_v2.0.50727_64 - ok

11:35:23.0152 0x09c0  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

11:35:23.0221 0x09c0  clr_optimization_v4.0.30319_32 - ok

11:35:23.0276 0x09c0  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

11:35:23.0350 0x09c0  clr_optimization_v4.0.30319_64 - ok

11:35:23.0414 0x09c0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

11:35:23.0495 0x09c0  CmBatt - ok

11:35:24.0153 0x09c0  [ 848B4EBA6C41F33D8B26B909A612BEBD, 3AC44D6A2B864DA9A17D6AB5581257359E961C4AFC627080C3168C8B5D65A00D ] CmdAgent        C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

11:35:24.0924 0x09c0  CmdAgent - ok

11:35:25.0057 0x09c0  [ FB2B06F2FA6A51CEBAB148A998CBD5C4, 011DAB9FB0757879DFF2A2AFF86692C1E197F9BC84C9CA95E784EDD52C44E199 ] cmderd          C:\Windows\system32\DRIVERS\cmderd.sys

11:35:25.0128 0x09c0  cmderd - ok

11:35:25.0295 0x09c0  [ F70486A90296F60DD7264DE05C0CAA23, 865085F5BEFCF30050ED77E62B99E07B1205FC8425B10970213E985DBA819C7F ] cmdGuard        C:\Windows\system32\DRIVERS\cmdguard.sys

11:35:25.0437 0x09c0  cmdGuard - ok

11:35:25.0464 0x09c0  [ 12944DDE0FBE29DAE48B2FFE740F3C36, 6B8381131AFFCE362D9D9583B35EFB76FD983EF97A939F4EBEF52E167B72F14F ] cmdHlp          C:\Windows\system32\DRIVERS\cmdhlp.sys

11:35:25.0516 0x09c0  cmdHlp - ok

11:35:25.0545 0x09c0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

11:35:25.0596 0x09c0  cmdide - ok

11:35:25.0835 0x09c0  [ 7906367DCA033F747F7F0426A9F7C97E, 855BCFF8F71C692AA9B15B0378C4C257104078F0D435F3649C84A1068B568FAB ] cmdvirth        C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe

11:35:26.0101 0x09c0  cmdvirth - ok

11:35:26.0201 0x09c0  [ EC0511BB85BAA42A9734011685A6732C, 10B52F0860CCB3AA0FC34DDA5C5538BFCF7B6D40738B7756297237FD2D9E01C1 ] CNG             C:\Windows\system32\Drivers\cng.sys

11:35:26.0366 0x09c0  CNG - ok

11:35:26.0405 0x09c0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

11:35:26.0463 0x09c0  Compbatt - ok

11:35:26.0495 0x09c0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

11:35:26.0570 0x09c0  CompositeBus - ok

11:35:26.0595 0x09c0  COMSysApp - ok

11:35:26.0646 0x09c0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

11:35:26.0726 0x09c0  crcdisk - ok

11:35:26.0824 0x09c0  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

11:35:26.0914 0x09c0  CryptSvc - ok

11:35:27.0000 0x09c0  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys

11:35:27.0111 0x09c0  CSC - ok

11:35:27.0197 0x09c0  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll

11:35:27.0320 0x09c0  CscService - ok

11:35:27.0404 0x09c0  [ 7B2260B796D5DE34EDE7AE483005FCBB, 8D523E5939DAC8B3863C64D73736BF0031041E10E4B646CF3D348C8F0742F3EA ] d554gps         C:\Windows\system32\DRIVERS\d554gps64.sys

11:35:27.0452 0x09c0  d554gps - ok

11:35:27.0528 0x09c0  [ CE9C61E6B14841845420F796A6FF429D, 2AC9591396C23FA54C1AAA0F5FD6812D303747CC0EAE844859C008C7D32E0201 ] d557bus         C:\Windows\system32\DRIVERS\d557bus.sys

11:35:27.0598 0x09c0  d557bus - ok

11:35:27.0621 0x09c0  [ 45A5C98F82413B0AEFFFB5353E2660D7, 7DD1E0C5A1A05ED85608F822F545C8F5288AAC8BCD6D419B8ED2038F9191F3B8 ] d557mdfl        C:\Windows\system32\DRIVERS\d557mdfl.sys

11:35:27.0661 0x09c0  d557mdfl - ok

11:35:27.0717 0x09c0  [ AFC8D92AECE1A9EF8CDD37F9ED483FD4, C996138E5A8B8764410A3C995ACC0E46DFC117EECC3E0F4B3BD0BDD3E33B8DBD ] d557mdm         C:\Windows\system32\DRIVERS\d557mdm.sys

11:35:27.0796 0x09c0  d557mdm - ok

11:35:27.0879 0x09c0  [ B430F2576FFD60BA50139EAC989EB801, AE4004D175863FE1C5B9DA2891BE33825780B2884E011FF892B70F07DE9AF273 ] d557mgmt        C:\Windows\system32\DRIVERS\d557mgmt.sys

11:35:27.0954 0x09c0  d557mgmt - ok

11:35:28.0120 0x09c0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

11:35:28.0347 0x09c0  DcomLaunch - ok

11:35:28.0410 0x09c0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

11:35:28.0599 0x09c0  defragsvc - ok

11:35:28.0636 0x09c0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

11:35:28.0784 0x09c0  DfsC - ok

11:35:28.0848 0x09c0  [ 5492F6FB1F32E10AEF02679872AFD194, 470A0C39734E261DC7443C8E59ECE89A7E367ABCFC15AA325EB995452C3973AA ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys

11:35:28.0905 0x09c0  dg_ssudbus - ok

11:35:28.0974 0x09c0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

11:35:29.0068 0x09c0  Dhcp - ok

11:35:29.0297 0x09c0  [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack       C:\Windows\system32\diagtrack.dll

11:35:29.0524 0x09c0  DiagTrack - ok

11:35:29.0593 0x09c0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

11:35:29.0767 0x09c0  discache - ok

11:35:29.0829 0x09c0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys

11:35:29.0887 0x09c0  Disk - ok

11:35:29.0935 0x09c0  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys

11:35:29.0996 0x09c0  dmvsc - ok

11:35:30.0062 0x09c0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

11:35:30.0135 0x09c0  Dnscache - ok

11:35:30.0191 0x09c0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

11:35:30.0364 0x09c0  dot3svc - ok

11:35:30.0397 0x09c0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

11:35:30.0554 0x09c0  DPS - ok

11:35:30.0610 0x09c0  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

11:35:30.0665 0x09c0  drmkaud - ok

11:35:30.0805 0x09c0  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

11:35:30.0946 0x09c0  DXGKrnl - ok

11:35:30.0995 0x09c0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

11:35:31.0151 0x09c0  EapHost - ok

11:35:31.0498 0x09c0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

11:35:31.0898 0x09c0  ebdrv - ok

11:35:31.0977 0x09c0  [ 7E63B3E6B7AE2E458C8A77BB6736A18A, 9B8AF712EA5DEFF26ADD30DBF72F24A19F6D1BC52E880617E77C20030861F928 ] ecnssndis       C:\Windows\system32\Drivers\wwuss64.sys

11:35:32.0041 0x09c0  ecnssndis - ok

11:35:32.0066 0x09c0  [ 5ACC585E735191F83ABBFDC7C54A2F0E, FF4A6B5F4EB19B111C0B33BECEAA944FF311C44B3593F68C6736E74C8097D19C ] ecnssndisfltr   C:\Windows\system32\Drivers\wwussf64.sys

11:35:32.0113 0x09c0  ecnssndisfltr - ok

11:35:32.0163 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] EFS             C:\Windows\System32\lsass.exe

11:35:32.0222 0x09c0  EFS - ok

11:35:32.0344 0x09c0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

11:35:32.0559 0x09c0  ehRecvr - ok

11:35:32.0612 0x09c0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

11:35:32.0706 0x09c0  ehSched - ok

11:35:32.0819 0x09c0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

11:35:32.0976 0x09c0  elxstor - ok

11:35:33.0061 0x09c0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

11:35:33.0126 0x09c0  ErrDev - ok

11:35:33.0271 0x09c0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

11:35:33.0471 0x09c0  EventSystem - ok

11:35:33.0511 0x09c0  [ 4A158424FE9E32365D67989304733241, 4778DC5944A10B1A0170217ED67D575F5FD9DDF98C9A86798FBE4CEE5EAD9D3B ] ewsercd         C:\Windows\system32\DRIVERS\ewsercd.sys

11:35:33.0578 0x09c0  ewsercd - ok

11:35:33.0661 0x09c0  [ 86F7951BBCEE4A86E79A97306BD14318, 84B52A0392DA53ED71A2C4D483DD93DDF552BF8AC764C7BD47BE0EB58C7C8219 ] ew_hwusbdev     C:\Windows\system32\DRIVERS\ew_hwusbdev.sys

11:35:33.0692 0x09c0  ew_hwusbdev - detected UnsignedFile.Multi.Generic ( 1 )

11:35:36.0151 0x09c0  Detect skipped due to KSN trusted

11:35:36.0151 0x09c0  ew_hwusbdev - ok

11:35:36.0239 0x09c0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

11:35:36.0404 0x09c0  exfat - ok

11:35:36.0450 0x09c0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

11:35:36.0616 0x09c0  fastfat - ok

11:35:36.0721 0x09c0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

11:35:36.0840 0x09c0  Fax - ok

11:35:36.0869 0x09c0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys

11:35:36.0927 0x09c0  fdc - ok

11:35:36.0963 0x09c0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

11:35:37.0112 0x09c0  fdPHost - ok

11:35:37.0129 0x09c0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

11:35:37.0280 0x09c0  FDResPub - ok

11:35:37.0308 0x09c0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

11:35:37.0363 0x09c0  FileInfo - ok

11:35:37.0383 0x09c0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

11:35:37.0532 0x09c0  Filetrace - ok

11:35:37.0560 0x09c0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

11:35:37.0618 0x09c0  flpydisk - ok

11:35:37.0673 0x09c0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

11:35:37.0748 0x09c0  FltMgr - ok

11:35:37.0903 0x09c0  [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache       C:\Windows\system32\FntCache.dll

11:35:38.0075 0x09c0  FontCache - ok

11:35:38.0144 0x09c0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

11:35:38.0190 0x09c0  FontCache3.0.0.0 - ok

11:35:38.0234 0x09c0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

11:35:38.0297 0x09c0  FsDepends - ok

11:35:38.0351 0x09c0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

11:35:38.0407 0x09c0  Fs_Rec - ok

11:35:38.0490 0x09c0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

11:35:38.0611 0x09c0  fvevol - ok

11:35:38.0637 0x09c0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

11:35:38.0692 0x09c0  gagp30kx - ok

11:35:38.0797 0x09c0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

11:35:39.0009 0x09c0  gpsvc - ok

11:35:39.0042 0x09c0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

11:35:39.0098 0x09c0  hcw85cir - ok

11:35:39.0172 0x09c0  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

11:35:39.0268 0x09c0  HdAudAddService - ok

11:35:39.0315 0x09c0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

11:35:39.0392 0x09c0  HDAudBus - ok

11:35:39.0474 0x09c0  [ 77F6A99AB6AC7E74A46A073F86CB00DF, 50495E8CC3D0EDE33BE98047E041B87D2727B4CA1CE7C2AC05A141416481F750 ] HDJAsioK        C:\Windows\system32\Drivers\HDJAsioK.sys

11:35:39.0548 0x09c0  HDJAsioK - ok

11:35:39.0613 0x09c0  [ 03165EB39C15F7BDBA74D1C46ABD8499, F6B714D8012774A64E106A56A55EA6E18FEE15CFF187E03CC42FB10F6C7F515F ] HDJMidi         C:\Windows\system32\DRIVERS\HDJMidi.sys

11:35:39.0679 0x09c0  HDJMidi - ok

11:35:39.0745 0x09c0  [ 0608CA17571AC7781A71160BCCD384FB, DF334271799435CDBF66770AADAF8EAA003A3AD49E39B154CE02653668770521 ] HerculesDJControlMP3 C:\Program Files\Hercules\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE

11:35:39.0761 0x09c0  HerculesDJControlMP3 - detected UnsignedFile.Multi.Generic ( 1 )

11:35:42.0200 0x09c0  Detect skipped due to KSN trusted

11:35:42.0200 0x09c0  HerculesDJControlMP3 - ok

11:35:42.0239 0x09c0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

11:35:42.0297 0x09c0  HidBatt - ok

11:35:42.0335 0x09c0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

11:35:42.0409 0x09c0  HidBth - ok

11:35:42.0440 0x09c0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys

11:35:42.0509 0x09c0  HidIr - ok

11:35:42.0553 0x09c0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

11:35:42.0704 0x09c0  hidserv - ok

11:35:42.0751 0x09c0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

11:35:42.0808 0x09c0  HidUsb - ok

11:35:42.0857 0x09c0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

11:35:43.0009 0x09c0  hkmsvc - ok

11:35:43.0059 0x09c0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

11:35:43.0138 0x09c0  HomeGroupListener - ok

11:35:43.0200 0x09c0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

11:35:43.0275 0x09c0  HomeGroupProvider - ok

11:35:43.0326 0x09c0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

11:35:43.0383 0x09c0  HpSAMD - ok

11:35:43.0504 0x09c0  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

11:35:43.0643 0x09c0  HTTP - ok

11:35:43.0717 0x09c0  [ 6E05228393CD614B983568EC40C262C3, CEB1CFDD346534F01A52D2E7004B0220692FC67CAD874FE04740ECDA2F92767D ] hwdatacard      C:\Windows\system32\DRIVERS\ewusbmdm.sys

11:35:43.0743 0x09c0  hwdatacard - detected UnsignedFile.Multi.Generic ( 1 )

11:35:46.0291 0x09c0  Detect skipped due to KSN trusted

11:35:46.0291 0x09c0  hwdatacard - ok

11:35:46.0380 0x09c0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

11:35:46.0432 0x09c0  hwpolicy - ok

11:35:46.0460 0x09c0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

11:35:46.0525 0x09c0  i8042prt - ok

11:35:46.0633 0x09c0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

11:35:46.0722 0x09c0  iaStorV - ok

11:35:46.0874 0x09c0  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

11:35:47.0044 0x09c0  idsvc - ok

11:35:47.0090 0x09c0  IEEtwCollectorService - ok

11:35:48.0343 0x09c0  [ 8814F0B9A09C647D3D7BE735450E7B4C, E82AD0DC556AE7663C1A5CE75DA3619E1614BC88F52558496FF0D569DE04E1CA ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

11:35:49.0555 0x09c0  igfx - ok

11:35:49.0668 0x09c0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

11:35:49.0722 0x09c0  iirsp - ok

11:35:49.0849 0x09c0  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

11:35:50.0014 0x09c0  IKEEXT - ok

11:35:50.0099 0x09c0  [ 0FFA95F1171F64F2A51F69A75B1EFF4A, 1F0001D519756DE74477D9398F300187665EBDF1AD902F68A967C2F95C4F85DF ] inspect         C:\Windows\system32\DRIVERS\inspect.sys

11:35:50.0158 0x09c0  inspect - ok

11:35:50.0264 0x09c0  [ B014CE58F0A8048D3924BA8D5CCBC5F1, C2A913B7A7A0CB2B8C1EC9E51DE98B51DF55A9AA4D21804C531E30D9FACCC0F9 ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys

11:35:50.0326 0x09c0  IntcHdmiAddService - ok

11:35:50.0368 0x09c0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

11:35:50.0418 0x09c0  intelide - ok

11:35:50.0453 0x09c0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

11:35:50.0522 0x09c0  intelppm - ok

11:35:50.0578 0x09c0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

11:35:50.0763 0x09c0  IPBusEnum - ok

11:35:50.0799 0x09c0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

11:35:50.0946 0x09c0  IpFilterDriver - ok

11:35:51.0088 0x09c0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

11:35:51.0210 0x09c0  iphlpsvc - ok

11:35:51.0277 0x09c0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

11:35:51.0381 0x09c0  IPMIDRV - ok

11:35:51.0455 0x09c0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

11:35:51.0696 0x09c0  IPNAT - ok

11:35:51.0740 0x09c0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

11:35:51.0832 0x09c0  IRENUM - ok

11:35:51.0857 0x09c0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

11:35:51.0909 0x09c0  isapnp - ok

11:35:51.0961 0x09c0  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

11:35:52.0046 0x09c0  iScsiPrt - ok

11:35:52.0083 0x09c0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

11:35:52.0137 0x09c0  kbdclass - ok

11:35:52.0174 0x09c0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

11:35:52.0231 0x09c0  kbdhid - ok

11:35:52.0259 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] KeyIso          C:\Windows\system32\lsass.exe

11:35:52.0319 0x09c0  KeyIso - ok

11:35:52.0367 0x09c0  [ 8E586F7B8E160C6974E724BE14294B62, 4637C5AB0B40BB5FDAD4C065E62A74A46B8F6BAB7370D8054372CC4E1DB514B8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

11:35:52.0424 0x09c0  KSecDD - ok

11:35:52.0471 0x09c0  [ B19FD57B64A1190E871D969A4261C0D0, 5A5E4709BE2A9F94C41CCB69106DE986CBD365D1F5AEC6A7B1C8E1310D0EA18A ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

11:35:52.0541 0x09c0  KSecPkg - ok

11:35:52.0615 0x09c0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

11:35:52.0760 0x09c0  ksthunk - ok

11:35:52.0839 0x09c0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

11:35:53.0022 0x09c0  KtmRm - ok

11:35:53.0084 0x09c0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

11:35:53.0248 0x09c0  LanmanServer - ok

11:35:53.0291 0x09c0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

11:35:53.0449 0x09c0  LanmanWorkstation - ok

11:35:53.0543 0x09c0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

11:35:53.0723 0x09c0  lltdio - ok

11:35:53.0827 0x09c0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

11:35:54.0008 0x09c0  lltdsvc - ok

11:35:54.0047 0x09c0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

11:35:54.0250 0x09c0  lmhosts - ok

11:35:54.0311 0x09c0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

11:35:54.0381 0x09c0  LSI_FC - ok

11:35:54.0422 0x09c0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

11:35:54.0483 0x09c0  LSI_SAS - ok

11:35:54.0520 0x09c0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

11:35:54.0577 0x09c0  LSI_SAS2 - ok

11:35:54.0616 0x09c0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

11:35:54.0676 0x09c0  LSI_SCSI - ok

11:35:54.0731 0x09c0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

11:35:54.0886 0x09c0  luafv - ok

11:35:54.0973 0x09c0  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

11:35:55.0022 0x09c0  MBAMProtector - ok

11:35:55.0270 0x09c0  [ AB176B9E59C0435499D83047D84EDD59, 85B826A3972CE9AD885313B69B9C60328B850257667D0EB65DDE890D0BB06361 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

11:35:55.0457 0x09c0  MBAMScheduler - ok

11:35:55.0646 0x09c0  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

11:35:55.0796 0x09c0  MBAMService - ok

11:35:55.0856 0x09c0  [ D61070CFAD43038DC56AEAD9BFE9CE2A, BD77AEF60E7FD2015CB14A464799304359547146C14A47F8D25274ACFA2E42D5 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

11:35:55.0910 0x09c0  MBAMWebAccessControl - ok

11:35:55.0958 0x09c0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

11:35:56.0024 0x09c0  Mcx2Svc - ok

11:35:56.0060 0x09c0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys

11:35:56.0120 0x09c0  megasas - ok

11:35:56.0177 0x09c0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

11:35:56.0256 0x09c0  MegaSR - ok

11:35:56.0313 0x09c0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

11:35:56.0495 0x09c0  MMCSS - ok

11:35:56.0681 0x09c0  [ 5A78BB029FD8414381FF1315F1E46947, 24EC386E9DD1150F705C6BFB02886E6EC6DB97359236DB998F34FFE1F61B4547 ] Mobile Broadband HL Service C:\ProgramData\MobileBrServ\mbbservice.exe

11:35:56.0744 0x09c0  Mobile Broadband HL Service - ok

11:35:56.0792 0x09c0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

11:35:56.0950 0x09c0  Modem - ok

11:35:57.0004 0x09c0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

11:35:57.0071 0x09c0  monitor - ok

11:35:57.0144 0x09c0  [ 4BD239A90FAFC80CA91AF2DD644D719A, D26D48AB392426544C9E57593BB72F9416E7EFF73769C94A9A4614099EA31E18 ] motandroidusb   C:\Windows\system32\Drivers\motoandroid.sys

11:35:57.0207 0x09c0  motandroidusb - ok

11:35:57.0285 0x09c0  [ 12588483F1A69AB2970D36D96B07F71B, CDC044F2FDAD3B22B295528A117D93B7DF464DE63E421DAE9C19E7A1535E3743 ] motccgp         C:\Windows\system32\DRIVERS\motccgp.sys

11:35:57.0355 0x09c0  motccgp - ok

11:35:57.0397 0x09c0  [ 19BC2161C3FCCED802F1BCD9B78C3466, 2EA39F23C49191A4651CD785A742554801A4AC59AACE1993B3A30EA137B4A321 ] MotoSwitchService C:\Windows\system32\DRIVERS\motswch.sys

11:35:57.0475 0x09c0  MotoSwitchService - ok

11:35:57.0515 0x09c0  [ 6A3C0B01551B614B6C6BC9743DEF60D9, 9144C0149A764355045711B36C12F87B2F914B76809407F46FB7BA72F83DDB9D ] Motousbnet      C:\Windows\system32\DRIVERS\Motousbnet.sys

11:35:57.0591 0x09c0  Motousbnet - ok

11:35:57.0645 0x09c0  [ 1D19770F88FA22DACB7F488EA8F8EE6B, AD100C774058CF878B6006518F3DCDBDEE475F3C9808FC5D844947D9C305FAE5 ] motusbdevice    C:\Windows\system32\DRIVERS\motusbdevice.sys

11:35:57.0749 0x09c0  motusbdevice - ok

11:35:57.0825 0x09c0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

11:35:57.0889 0x09c0  mouclass - ok

11:35:57.0973 0x09c0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

11:35:58.0086 0x09c0  mouhid - ok

11:35:58.0151 0x09c0  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

11:35:58.0214 0x09c0  mountmgr - ok

11:35:58.0351 0x09c0  [ 98DA127D0AB8B6CB5773546AF60D9217, BB07F34552342CA40E843F80AA32C928C29EF81789605E53C795EFD564F2DA7F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

11:35:58.0421 0x09c0  MozillaMaintenance - ok

11:35:58.0492 0x09c0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

11:35:58.0562 0x09c0  mpio - ok

11:35:58.0621 0x09c0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

11:35:58.0785 0x09c0  mpsdrv - ok

11:35:59.0013 0x09c0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

11:35:59.0331 0x09c0  MpsSvc - ok

11:35:59.0396 0x09c0  [ D7ADC2B83CA0B0381F75A98351F72CEE, 05476B7CA0486DF770AE492B5A90C85E3D3E7485152EB2FA30A19EC9BE44ED81 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

11:35:59.0461 0x09c0  MRxDAV - ok

11:35:59.0521 0x09c0  [ 55BC784C80F64F90AC9D7E2A30560752, B64A7D0484CA9E526784C8B0F7E62AE6CFED36C663C45ED35897B69D937D5D95 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

11:35:59.0594 0x09c0  mrxsmb - ok

11:35:59.0687 0x09c0  [ BBBA7E2A7C9A88A6CA6C5395C83FA781, DCF0D6731E3780876C41BE7C17C695F9B8CBDA8F04375991D5536B58343AEB5F ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

11:35:59.0789 0x09c0  mrxsmb10 - ok

11:35:59.0851 0x09c0  [ 7A9ED330FCC5192960CB40D35FB1429D, D875B72C3BC8E32AFD01BBB2F1D810DEABA4328D8F0722A96606557AB89315D0 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

11:35:59.0919 0x09c0  mrxsmb20 - ok

11:35:59.0978 0x09c0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

11:36:00.0036 0x09c0  msahci - ok

11:36:00.0073 0x09c0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

11:36:00.0138 0x09c0  msdsm - ok

11:36:00.0201 0x09c0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

11:36:00.0295 0x09c0  MSDTC - ok

11:36:00.0344 0x09c0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

11:36:00.0517 0x09c0  Msfs - ok

11:36:00.0537 0x09c0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

11:36:00.0713 0x09c0  mshidkmdf - ok

11:36:00.0791 0x09c0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

11:36:00.0861 0x09c0  msisadrv - ok

11:36:00.0976 0x09c0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

11:36:01.0195 0x09c0  MSiSCSI - ok

11:36:01.0211 0x09c0  msiserver - ok

11:36:01.0257 0x09c0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

11:36:01.0405 0x09c0  MSKSSRV - ok

11:36:01.0436 0x09c0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

11:36:01.0582 0x09c0  MSPCLOCK - ok

11:36:01.0602 0x09c0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

11:36:01.0763 0x09c0  MSPQM - ok

11:36:01.0834 0x09c0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

11:36:01.0919 0x09c0  MsRPC - ok

11:36:01.0964 0x09c0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

11:36:02.0037 0x09c0  mssmbios - ok

11:36:02.0074 0x09c0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

11:36:02.0253 0x09c0  MSTEE - ok

11:36:02.0300 0x09c0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

11:36:02.0358 0x09c0  MTConfig - ok

11:36:02.0386 0x09c0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

11:36:02.0443 0x09c0  Mup - ok

11:36:02.0524 0x09c0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

11:36:02.0716 0x09c0  napagent - ok

11:36:02.0800 0x09c0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

11:36:02.0903 0x09c0  NativeWifiP - ok

11:36:03.0052 0x09c0  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys

11:36:03.0193 0x09c0  NDIS - ok

11:36:03.0232 0x09c0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

11:36:03.0385 0x09c0  NdisCap - ok

11:36:03.0440 0x09c0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

11:36:03.0611 0x09c0  NdisTapi - ok

11:36:03.0648 0x09c0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

11:36:03.0791 0x09c0  Ndisuio - ok

11:36:03.0837 0x09c0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

11:36:03.0996 0x09c0  NdisWan - ok

11:36:04.0021 0x09c0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

11:36:04.0166 0x09c0  NDProxy - ok

11:36:04.0187 0x09c0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

11:36:04.0333 0x09c0  NetBIOS - ok

11:36:04.0374 0x09c0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

11:36:04.0540 0x09c0  NetBT - ok

11:36:04.0573 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] Netlogon        C:\Windows\system32\lsass.exe

11:36:04.0633 0x09c0  Netlogon - ok

11:36:04.0715 0x09c0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

11:36:04.0897 0x09c0  Netman - ok

11:36:04.0951 0x09c0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:36:05.0027 0x09c0  NetMsmqActivator - ok

11:36:05.0095 0x09c0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:36:05.0179 0x09c0  NetPipeActivator - ok

11:36:05.0262 0x09c0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

11:36:05.0485 0x09c0  netprofm - ok

11:36:05.0534 0x09c0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:36:05.0609 0x09c0  NetTcpActivator - ok

11:36:05.0648 0x09c0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:36:05.0744 0x09c0  NetTcpPortSharing - ok

11:36:06.0327 0x09c0  [ 64428DFDAF6E88366CB51F45A79C5F69, 31187D38C1AB52120A3CB7AC3CE47ED9682AC37B0F06B9A9610C0065DD4E7B13 ] netw5v64        C:\Windows\system32\DRIVERS\netw5v64.sys

11:36:07.0142 0x09c0  netw5v64 - ok

11:36:07.0218 0x09c0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

11:36:07.0276 0x09c0  nfrd960 - ok

11:36:07.0357 0x09c0  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

11:36:07.0455 0x09c0  NlaSvc - ok

11:36:07.0504 0x09c0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

11:36:07.0663 0x09c0  Npfs - ok

11:36:07.0712 0x09c0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

11:36:07.0865 0x09c0  nsi - ok

11:36:07.0884 0x09c0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

11:36:08.0047 0x09c0  nsiproxy - ok

11:36:08.0279 0x09c0  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

11:36:08.0578 0x09c0  Ntfs - ok

11:36:08.0650 0x09c0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

11:36:08.0852 0x09c0  Null - ok

11:36:08.0953 0x09c0  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

11:36:09.0035 0x09c0  nvraid - ok

11:36:09.0105 0x09c0  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

11:36:09.0184 0x09c0  nvstor - ok

11:36:09.0285 0x09c0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

11:36:09.0350 0x09c0  nv_agp - ok

11:36:09.0403 0x09c0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

11:36:09.0467 0x09c0  ohci1394 - ok

11:36:09.0555 0x09c0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

11:36:09.0645 0x09c0  p2pimsvc - ok

11:36:09.0726 0x09c0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

11:36:09.0830 0x09c0  p2psvc - ok

11:36:09.0870 0x09c0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys

11:36:09.0936 0x09c0  Parport - ok

11:36:09.0992 0x09c0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

11:36:10.0051 0x09c0  partmgr - ok

11:36:10.0115 0x09c0  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll

11:36:10.0193 0x09c0  PcaSvc - ok

11:36:10.0229 0x09c0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

11:36:10.0296 0x09c0  pci - ok

11:36:10.0333 0x09c0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

11:36:10.0384 0x09c0  pciide - ok

11:36:10.0434 0x09c0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

11:36:10.0544 0x09c0  pcmcia - ok

11:36:10.0610 0x09c0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

11:36:10.0669 0x09c0  pcw - ok

11:36:10.0787 0x09c0  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

11:36:10.0932 0x09c0  PEAUTH - ok

11:36:11.0144 0x09c0  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

11:36:11.0370 0x09c0  PeerDistSvc - ok

11:36:11.0491 0x09c0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

11:36:11.0569 0x09c0  PerfHost - ok

11:36:11.0797 0x09c0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

11:36:12.0122 0x09c0  pla - ok

11:36:12.0249 0x09c0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

11:36:12.0376 0x09c0  PlugPlay - ok

11:36:12.0405 0x09c0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

11:36:12.0478 0x09c0  PNRPAutoReg - ok

11:36:12.0539 0x09c0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

11:36:12.0670 0x09c0  PNRPsvc - ok

11:36:12.0773 0x09c0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

11:36:12.0981 0x09c0  PolicyAgent - ok

11:36:13.0060 0x09c0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

11:36:13.0248 0x09c0  Power - ok

11:36:13.0330 0x09c0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

11:36:13.0505 0x09c0  PptpMiniport - ok

11:36:13.0534 0x09c0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys

11:36:13.0600 0x09c0  Processor - ok

11:36:13.0680 0x09c0  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

11:36:13.0758 0x09c0  ProfSvc - ok

11:36:13.0785 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] ProtectedStorage C:\Windows\system32\lsass.exe

11:36:13.0861 0x09c0  ProtectedStorage - ok

11:36:13.0900 0x09c0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

11:36:14.0055 0x09c0  Psched - ok

11:36:14.0250 0x09c0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

11:36:14.0462 0x09c0  ql2300 - ok

11:36:14.0508 0x09c0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

11:36:14.0568 0x09c0  ql40xx - ok

11:36:14.0628 0x09c0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

11:36:14.0734 0x09c0  QWAVE - ok

11:36:14.0766 0x09c0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

11:36:14.0856 0x09c0  QWAVEdrv - ok

11:36:14.0885 0x09c0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

11:36:15.0031 0x09c0  RasAcd - ok

11:36:15.0091 0x09c0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

11:36:15.0255 0x09c0  RasAgileVpn - ok

11:36:15.0305 0x09c0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

11:36:15.0471 0x09c0  RasAuto - ok

11:36:15.0503 0x09c0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

11:36:15.0663 0x09c0  Rasl2tp - ok

11:36:15.0767 0x09c0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

11:36:15.0954 0x09c0  RasMan - ok

11:36:15.0988 0x09c0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

11:36:16.0142 0x09c0  RasPppoe - ok

11:36:16.0190 0x09c0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

11:36:16.0370 0x09c0  RasSstp - ok

11:36:16.0429 0x09c0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

11:36:16.0613 0x09c0  rdbss - ok

11:36:16.0647 0x09c0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

11:36:16.0721 0x09c0  rdpbus - ok

11:36:16.0753 0x09c0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

11:36:16.0917 0x09c0  RDPCDD - ok

11:36:16.0990 0x09c0  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

11:36:17.0059 0x09c0  RDPDR - ok

11:36:17.0086 0x09c0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

11:36:17.0242 0x09c0  RDPENCDD - ok

11:36:17.0268 0x09c0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

11:36:17.0427 0x09c0  RDPREFMP - ok

11:36:17.0535 0x09c0  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

11:36:17.0594 0x09c0  RdpVideoMiniport - ok

11:36:17.0647 0x09c0  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

11:36:17.0726 0x09c0  RDPWD - ok

11:36:17.0792 0x09c0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

11:36:17.0876 0x09c0  rdyboost - ok

11:36:17.0926 0x09c0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

11:36:18.0132 0x09c0  RemoteAccess - ok

11:36:18.0220 0x09c0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

11:36:18.0394 0x09c0  RemoteRegistry - ok

11:36:18.0459 0x09c0  [ 6FAF5B04BEDC66D300D9D233B2D222F0, 26068A89DC00B8CC5A9CD840C16CA073D4290F25F8CE2CD418EFF0EDF2C6495E ] rimmptsk        C:\Windows\system32\DRIVERS\rimmpx64.sys

11:36:18.0515 0x09c0  rimmptsk - ok

11:36:18.0552 0x09c0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

11:36:18.0723 0x09c0  RpcEptMapper - ok

11:36:18.0769 0x09c0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

11:36:18.0829 0x09c0  RpcLocator - ok

11:36:18.0901 0x09c0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

11:36:19.0092 0x09c0  RpcSs - ok

11:36:19.0138 0x09c0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

11:36:19.0288 0x09c0  rspndr - ok

11:36:19.0365 0x09c0  [ 12E722B0B8016B16A9DDE068E6148612, 1A131310662003F1B3ABDB33231345CA627605801CEF434A1C9A82FB82B4B4B6 ] RTL2832UBDA     C:\Windows\system32\drivers\RTL2832UBDA.sys

11:36:19.0434 0x09c0  RTL2832UBDA - ok

11:36:19.0485 0x09c0  [ 3EF259D6F46B7DEF712AE4AC49B0042C, 41F036B658A556415508765D8E5DE5D6C59238C6F9D10936BFB0A99DCCC03DDC ] RTL2832UUSB     C:\Windows\system32\Drivers\RTL2832UUSB.sys

11:36:19.0530 0x09c0  RTL2832UUSB - ok

11:36:19.0597 0x09c0  [ 626CF5E334D0856A3C3C3135F8205982, F6EFF98CF7406C2D6F8A4BBB40B4437A45FC07D3A2941B57D8ED4167FD459A44 ] RTL2832U_IRHID  C:\Windows\system32\DRIVERS\RTL2832U_IRHID.sys

11:36:19.0645 0x09c0  RTL2832U_IRHID - ok

11:36:19.0677 0x09c0  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

11:36:19.0752 0x09c0  s3cap - ok

11:36:19.0804 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] SamSs           C:\Windows\system32\lsass.exe

11:36:19.0862 0x09c0  SamSs - ok

11:36:19.0901 0x09c0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

11:36:19.0961 0x09c0  sbp2port - ok

11:36:20.0023 0x09c0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

11:36:20.0191 0x09c0  SCardSvr - ok

11:36:20.0232 0x09c0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

11:36:20.0405 0x09c0  scfilter - ok

11:36:20.0547 0x09c0  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll

11:36:20.0718 0x09c0  Schedule - ok

11:36:20.0775 0x09c0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

11:36:20.0917 0x09c0  SCPolicySvc - ok

11:36:20.0987 0x09c0  [ 111E0EBC0AD79CB0FA014B907B231CF0, B7D43D156C2524938503CF8E99C4D1F7A5C55E16C0368F57F4CD23C6D833B38F ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys

11:36:21.0059 0x09c0  sdbus - ok

11:36:21.0106 0x09c0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

11:36:21.0180 0x09c0  SDRSVC - ok

11:36:21.0212 0x09c0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

11:36:21.0266 0x09c0  secdrv - ok

11:36:21.0290 0x09c0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

11:36:21.0436 0x09c0  seclogon - ok

11:36:21.0475 0x09c0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

11:36:21.0631 0x09c0  SENS - ok

11:36:21.0649 0x09c0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

11:36:21.0711 0x09c0  SensrSvc - ok

11:36:21.0739 0x09c0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys

11:36:21.0796 0x09c0  Serenum - ok

11:36:21.0827 0x09c0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys

11:36:21.0888 0x09c0  Serial - ok

11:36:21.0927 0x09c0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys

11:36:21.0983 0x09c0  sermouse - ok

11:36:22.0066 0x09c0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

11:36:22.0220 0x09c0  SessionEnv - ok

11:36:22.0246 0x09c0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\DRIVERS\sffdisk.sys

11:36:22.0312 0x09c0  sffdisk - ok

11:36:22.0336 0x09c0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

11:36:22.0409 0x09c0  sffp_mmc - ok

11:36:22.0453 0x09c0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\DRIVERS\sffp_sd.sys

11:36:22.0524 0x09c0  sffp_sd - ok

11:36:22.0556 0x09c0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

11:36:22.0614 0x09c0  sfloppy - ok

11:36:22.0679 0x09c0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

11:36:22.0860 0x09c0  SharedAccess - ok

11:36:22.0938 0x09c0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

11:36:23.0162 0x09c0  ShellHWDetection - ok

11:36:23.0194 0x09c0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

11:36:23.0249 0x09c0  SiSRaid2 - ok

11:36:23.0276 0x09c0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

11:36:23.0337 0x09c0  SiSRaid4 - ok

11:36:23.0370 0x09c0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

11:36:23.0522 0x09c0  Smb - ok

11:36:23.0572 0x09c0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

11:36:23.0636 0x09c0  SNMPTRAP - ok

11:36:23.0679 0x09c0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

11:36:23.0731 0x09c0  spldr - ok

11:36:23.0828 0x09c0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

11:36:23.0937 0x09c0  Spooler - ok

11:36:24.0358 0x09c0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

11:36:24.0861 0x09c0  sppsvc - ok

11:36:24.0921 0x09c0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

11:36:25.0075 0x09c0  sppuinotify - ok

11:36:25.0166 0x09c0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

11:36:25.0263 0x09c0  srv - ok

11:36:25.0334 0x09c0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

11:36:25.0426 0x09c0  srv2 - ok

11:36:25.0466 0x09c0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

11:36:25.0532 0x09c0  srvnet - ok

11:36:25.0590 0x09c0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

11:36:25.0761 0x09c0  SSDPSRV - ok

11:36:25.0792 0x09c0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

11:36:25.0946 0x09c0  SstpSvc - ok

11:36:26.0021 0x09c0  [ 627FFBE52FEDF0460C3D7259FC0EDF50, 92CB006CA91E4AF0CAA3ECD74D9329C349650EAFF70D847E62D9D8F2BE38B3B1 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys

11:36:26.0085 0x09c0  ssudmdm - ok

11:36:26.0175 0x09c0  [ 76F7D7217FBDAB77798A2A244ACD641F, E65CF2CE789E721CEFCA35DF5100304C56135459DA2421DB2A0DF9E6E9DDE70F ] ssudserd        C:\Windows\system32\DRIVERS\ssudserd.sys

11:36:26.0239 0x09c0  ssudserd - ok

11:36:26.0437 0x09c0  [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe

11:36:26.0554 0x09c0  ss_conn_service - ok

11:36:26.0605 0x09c0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

11:36:26.0656 0x09c0  stexstor - ok

11:36:26.0770 0x09c0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

11:36:26.0909 0x09c0  stisvc - ok

11:36:26.0941 0x09c0  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

11:36:26.0994 0x09c0  storflt - ok

11:36:27.0039 0x09c0  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll

11:36:27.0098 0x09c0  StorSvc - ok

11:36:27.0148 0x09c0  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys

11:36:27.0200 0x09c0  storvsc - ok

11:36:27.0239 0x09c0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

11:36:27.0290 0x09c0  swenum - ok

11:36:27.0389 0x09c0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

11:36:27.0603 0x09c0  swprv - ok

11:36:27.0827 0x09c0  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll

11:36:28.0097 0x09c0  SysMain - ok

11:36:28.0147 0x09c0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

11:36:28.0239 0x09c0  TabletInputService - ok

11:36:28.0292 0x09c0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

11:36:28.0467 0x09c0  TapiSrv - ok

11:36:28.0516 0x09c0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

11:36:28.0675 0x09c0  TBS - ok

11:36:28.0893 0x09c0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

11:36:29.0132 0x09c0  Tcpip - ok

11:36:29.0356 0x09c0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

11:36:29.0592 0x09c0  TCPIP6 - ok

11:36:29.0674 0x09c0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

11:36:29.0737 0x09c0  tcpipreg - ok

11:36:29.0783 0x09c0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

11:36:29.0852 0x09c0  TDPIPE - ok

11:36:29.0887 0x09c0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

11:36:29.0953 0x09c0  TDTCP - ok

11:36:30.0013 0x09c0  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

11:36:30.0076 0x09c0  tdx - ok

11:36:30.0108 0x09c0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

11:36:30.0172 0x09c0  TermDD - ok

11:36:30.0292 0x09c0  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

11:36:30.0428 0x09c0  TermService - ok

11:36:30.0486 0x09c0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

11:36:30.0572 0x09c0  Themes - ok

11:36:30.0607 0x09c0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

11:36:30.0768 0x09c0  THREADORDER - ok

11:36:30.0824 0x09c0  [ DBCC20C02E8A3E43B03C304A4E40A84F, BF5F3ACCB0342304A6870E94D2576644B08DBF307C853C7DBA4B82B0C7309DA4 ] TPM             C:\Windows\system32\drivers\tpm.sys

11:36:30.0886 0x09c0  TPM - ok

11:36:30.0954 0x09c0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

11:36:31.0134 0x09c0  TrkWks - ok

11:36:31.0220 0x09c0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

11:36:31.0387 0x09c0  TrustedInstaller - ok

11:36:31.0448 0x09c0  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

11:36:31.0505 0x09c0  tssecsrv - ok

11:36:31.0566 0x09c0  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

11:36:31.0626 0x09c0  TsUsbFlt - ok

11:36:31.0675 0x09c0  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

11:36:31.0734 0x09c0  TsUsbGD - ok

11:36:31.0819 0x09c0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

11:36:31.0971 0x09c0  tunnel - ok

11:36:32.0011 0x09c0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

11:36:32.0069 0x09c0  uagp35 - ok

11:36:32.0131 0x09c0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

11:36:32.0307 0x09c0  udfs - ok

11:36:32.0358 0x09c0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

11:36:32.0427 0x09c0  UI0Detect - ok

11:36:32.0485 0x09c0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

11:36:32.0544 0x09c0  uliagpkx - ok

11:36:32.0607 0x09c0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

11:36:32.0666 0x09c0  umbus - ok

11:36:32.0698 0x09c0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys

11:36:32.0754 0x09c0  UmPass - ok

11:36:32.0818 0x09c0  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll

11:36:32.0904 0x09c0  UmRdpService - ok

11:36:32.0969 0x09c0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

11:36:33.0166 0x09c0  upnphost - ok

11:36:33.0236 0x09c0  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A, DE1CDDEEF2285CC8387E88ACB13C000576DC8819DF6DC648C988068B5C83BB15 ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

11:36:33.0312 0x09c0  usbaudio - ok

11:36:33.0389 0x09c0  [ 481DFF26B4DCA8F4CBAC1F7DCE1D6829, 5D6E404FE0AB875202CA1A3E8E9D2F4368DF6ACCFA1C872ECFAF8399CBA3A485 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

11:36:33.0455 0x09c0  usbccgp - ok

11:36:33.0515 0x09c0  [ AF0892A803FDDA7492F595368E3B68E7, F263346DEB4D742EB436CF578F187AC8521D84CED52E98475E6198EC52244F07 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

11:36:33.0589 0x09c0  usbcir - ok

11:36:33.0629 0x09c0  [ 74EE782B1D9C241EFE425565854C661C, E8258EA65B0FCAD4E077B176E9D9324646B652D6E651241E397346A39770D065 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

11:36:33.0689 0x09c0  usbehci - ok

11:36:33.0779 0x09c0  [ DC96BD9CCB8403251BCF25047573558E, 66EBF8A6B3BC0634F32DDCC8BA31F1EB5987E8C6853E1DC26005E3EED0945565 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

11:36:33.0866 0x09c0  usbhub - ok

11:36:33.0900 0x09c0  [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

11:36:33.0956 0x09c0  usbohci - ok

11:36:33.0987 0x09c0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

11:36:34.0053 0x09c0  usbprint - ok

11:36:34.0122 0x09c0  [ 54EAFFD31C377C8C1055D33E6B6B4B27, F7A7F49D3A20075134389FC38E43F889E5391C25B0524AC59755B15CBEC92490 ] usbrndis6       C:\Windows\system32\DRIVERS\usb80236.sys

11:36:34.0175 0x09c0  usbrndis6 - ok

11:36:34.0212 0x09c0  [ AAA2513C8AED8B54B189FD0C6B1634C0, 02FEE0B756AA559C29477A19861AC16D5A3152DC3C897C7D466423438B6A5E42 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

11:36:34.0286 0x09c0  usbscan - ok

11:36:34.0325 0x09c0  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

11:36:34.0391 0x09c0  USBSTOR - ok

11:36:34.0448 0x09c0  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

11:36:34.0505 0x09c0  usbuhci - ok

11:36:34.0556 0x09c0  [ 70D05EE263568A742D14E1876DF80532, D49D7B60EE30F2398B8B532F4A4C3F17535485F2BDB9B14AB600E2A4E3F12A6B ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

11:36:34.0617 0x09c0  usb_rndisx - ok

11:36:34.0657 0x09c0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

11:36:34.0817 0x09c0  UxSms - ok

11:36:34.0848 0x09c0  [ 6313B3E6CEA11B4829094EDAB9EA2FA5, FCAEFF2DB40EF406FCE1200E595501C78C9DA5DD51D2BEB19D6C99CAFBD03D98 ] VaultSvc        C:\Windows\system32\lsass.exe

11:36:34.0936 0x09c0  VaultSvc - ok

11:36:34.0993 0x09c0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

11:36:35.0053 0x09c0  vdrvroot - ok

11:36:35.0148 0x09c0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

11:36:35.0368 0x09c0  vds - ok

11:36:35.0425 0x09c0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

11:36:35.0560 0x09c0  vga - ok

11:36:35.0598 0x09c0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

11:36:35.0751 0x09c0  VgaSave - ok

11:36:35.0808 0x09c0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

11:36:35.0894 0x09c0  vhdmp - ok

11:36:35.0928 0x09c0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

11:36:35.0993 0x09c0  viaide - ok

11:36:36.0060 0x09c0  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys

11:36:36.0132 0x09c0  vmbus - ok

11:36:36.0167 0x09c0  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

11:36:36.0221 0x09c0  VMBusHID - ok

11:36:36.0257 0x09c0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

11:36:36.0314 0x09c0  volmgr - ok

11:36:36.0388 0x09c0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

11:36:36.0474 0x09c0  volmgrx - ok

11:36:36.0532 0x09c0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

11:36:36.0611 0x09c0  volsnap - ok

11:36:36.0684 0x09c0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

11:36:36.0763 0x09c0  vsmraid - ok

11:36:36.0957 0x09c0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

11:36:37.0304 0x09c0  VSS - ok

11:36:37.0357 0x09c0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

11:36:37.0424 0x09c0  vwifibus - ok

11:36:37.0467 0x09c0  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

11:36:37.0551 0x09c0  vwififlt - ok

11:36:37.0631 0x09c0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

11:36:37.0834 0x09c0  W32Time - ok

11:36:37.0907 0x09c0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

11:36:37.0967 0x09c0  WacomPen - ok

11:36:38.0022 0x09c0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

11:36:38.0185 0x09c0  WANARP - ok

11:36:38.0239 0x09c0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

11:36:38.0392 0x09c0  Wanarpv6 - ok

11:36:38.0594 0x09c0  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

11:36:38.0792 0x09c0  WatAdminSvc - ok

11:36:39.0088 0x09c0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

11:36:39.0298 0x09c0  wbengine - ok

11:36:39.0355 0x09c0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

11:36:39.0456 0x09c0  WbioSrvc - ok

11:36:39.0565 0x09c0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

11:36:39.0693 0x09c0  wcncsvc - ok

11:36:39.0718 0x09c0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

11:36:39.0782 0x09c0  WcsPlugInService - ok

11:36:39.0823 0x09c0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys

11:36:39.0875 0x09c0  Wd - ok

11:36:39.0988 0x09c0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

11:36:40.0122 0x09c0  Wdf01000 - ok

11:36:40.0190 0x09c0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll

11:36:40.0260 0x09c0  WdiServiceHost - ok

11:36:40.0300 0x09c0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll

11:36:40.0367 0x09c0  WdiSystemHost - ok

11:36:40.0433 0x09c0  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll

11:36:40.0515 0x09c0  WebClient - ok

11:36:40.0582 0x09c0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

11:36:40.0767 0x09c0  Wecsvc - ok

11:36:40.0796 0x09c0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

11:36:40.0951 0x09c0  wercplsupport - ok

11:36:40.0988 0x09c0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

11:36:41.0145 0x09c0  WerSvc - ok

11:36:41.0189 0x09c0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

11:36:41.0329 0x09c0  WfpLwf - ok

11:36:41.0361 0x09c0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

11:36:41.0412 0x09c0  WIMMount - ok

11:36:41.0469 0x09c0  WinDefend - ok

11:36:41.0510 0x09c0  WinHttpAutoProxySvc - ok

11:36:41.0597 0x09c0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

11:36:41.0762 0x09c0  Winmgmt - ok

11:36:41.0999 0x09c0  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll

11:36:42.0251 0x09c0  WinRM - ok

11:36:42.0369 0x09c0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

11:36:42.0436 0x09c0  WinUsb - ok

11:36:42.0557 0x09c0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

11:36:42.0720 0x09c0  Wlansvc - ok

11:36:42.0826 0x09c0  [ B7611A163ADC4D3C5262A869DA890FBC, 10483F636A75B49D552C0F9320101BE2F03A84D28EC06D1DFC12E6381BC25D3F ] WMCoreService   C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe

11:36:42.0881 0x09c0  WMCoreService - detected UnsignedFile.Multi.Generic ( 1 )

11:36:45.0346 0x09c0  Detect skipped due to KSN trusted

11:36:45.0346 0x09c0  WMCoreService - ok

11:36:45.0494 0x09c0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

11:36:45.0558 0x09c0  WmiAcpi - ok

11:36:45.0643 0x09c0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

11:36:45.0719 0x09c0  wmiApSrv - ok

11:36:45.0766 0x09c0  WMPNetworkSvc - ok

11:36:45.0788 0x09c0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

11:36:45.0848 0x09c0  WPCSvc - ok

11:36:45.0888 0x09c0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

11:36:45.0963 0x09c0  WPDBusEnum - ok

11:36:45.0997 0x09c0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

11:36:46.0141 0x09c0  ws2ifsl - ok

11:36:46.0177 0x09c0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

11:36:46.0265 0x09c0  wscsvc - ok

11:36:46.0278 0x09c0  WSearch - ok

11:36:46.0415 0x09c0  [ 534C2D3D81B066FA24A075C224045654, 6480B7A2BCCAE3D365F604630FD174ECDCE04AC62D673CEAAAD99F13FFF7CB48 ] WTGService      C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

11:36:46.0483 0x09c0  WTGService - ok

11:36:46.0799 0x09c0  [ 3D4032E6A5885C007AEF4BA816AB4032, 21EB2B5B5A64EED44B5B7743820842205175F52A6F5525BD0F95DCB2733F449C ] wuauserv        C:\Windows\system32\wuaueng.dll

11:36:47.0108 0x09c0  wuauserv - ok

11:36:47.0191 0x09c0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

11:36:47.0248 0x09c0  WudfPf - ok

11:36:47.0294 0x09c0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

11:36:47.0365 0x09c0  WUDFRd - ok

11:36:47.0407 0x09c0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

11:36:47.0474 0x09c0  wudfsvc - ok

11:36:47.0539 0x09c0  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

11:36:47.0624 0x09c0  WwanSvc - ok

11:36:47.0708 0x09c0  [ A1C2F6E26E47534EA926E92312E69B6C, E375CCE03E1EBD2AE93771CD1B84C777716CE9790D14155E3E3B98308A931561 ] WwanUsbServ     C:\Windows\system32\DRIVERS\WwanUsbMp64.sys

11:36:47.0769 0x09c0  WwanUsbServ - ok

11:36:47.0918 0x09c0  ================ Scan global ===============================

11:36:47.0962 0x09c0  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll

11:36:48.0023 0x09c0  [ 5D47F5EFC5D88116D71BA72B1D1BE118, 2483B22094B34EC1FAF08C08A78AE304D17FA9EEA635E32EC55CC916F79E23B8 ] C:\Windows\system32\winsrv.dll

11:36:48.0086 0x09c0  [ 5D47F5EFC5D88116D71BA72B1D1BE118, 2483B22094B34EC1FAF08C08A78AE304D17FA9EEA635E32EC55CC916F79E23B8 ] C:\Windows\system32\winsrv.dll

11:36:48.0140 0x09c0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

11:36:48.0224 0x09c0  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

11:36:48.0257 0x09c0  [ Global ] - ok

11:36:48.0258 0x09c0  ================ Scan MBR ==================================

11:36:48.0276 0x09c0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

11:36:48.0731 0x09c0  \Device\Harddisk0\DR0 - ok

11:36:48.0733 0x09c0  ================ Scan VBR ==================================

11:36:48.0741 0x09c0  [ 638FDADF5A6B0E3E77FDAF991971F85E ] \Device\Harddisk0\DR0\Partition1

11:36:48.0746 0x09c0  \Device\Harddisk0\DR0\Partition1 - ok

11:36:48.0791 0x09c0  [ D0012360CC6E6F8180E65213977998D8 ] \Device\Harddisk0\DR0\Partition2

11:36:48.0797 0x09c0  \Device\Harddisk0\DR0\Partition2 - ok

11:36:48.0799 0x09c0  ================ Scan generic autorun ======================

11:36:48.0987 0x09c0  [ C2C935DB4D88C5CFF1F4C8DCF940743B, 2457C7EC9273BC59051EA0D2DF1013F71E4C1E2A8469C02653E4215EC062C43E ] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe

11:36:49.0158 0x09c0  COMODO Internet Security - ok

11:36:49.0216 0x09c0  [ C2CE61C4AE82B3BC3EA3B7A6314E6FB7, 890C14671348E3A7111FEA27BE1D112F1D6AD35E20117789740F249DBF87F377 ] C:\Windows\system32\igfxtray.exe

11:36:49.0275 0x09c0  IgfxTray - ok

11:36:49.0326 0x09c0  [ 073C972995C7CEFB632709AA9A53E148, 93262E1CF4EC35C14C365E9C4685EFA9694569E49D81883910BC8FA0BF5089CE ] C:\Windows\system32\hkcmd.exe

11:36:49.0404 0x09c0  HotKeysCmds - ok

11:36:49.0463 0x09c0  [ 29D086B391806395A45C63A9A254965A, 8C498C99B3B5F150054D0846A70A18A190EDC09D574AC3BEA410BB00B3646E3A ] C:\Windows\system32\igfxpers.exe

11:36:49.0544 0x09c0  Persistence - ok

11:36:49.0929 0x09c0  [ 1CB9F5B926D477E3EA2119373FD0B198, 0D5DF6F88119B3DC0864D91FD875F976AEFC05DF765446539F1342A7B9FB6AE0 ] C:\Program Files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe

11:36:50.0278 0x09c0  Hercules DJ Series - ok

11:36:50.0454 0x09c0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

11:36:50.0633 0x09c0  Sidebar - ok

11:36:50.0697 0x09c0  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

11:36:50.0785 0x09c0  mctadmin - ok

11:36:50.0917 0x09c0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

11:36:51.0080 0x09c0  Sidebar - ok

11:36:51.0115 0x09c0  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

11:36:51.0199 0x09c0  mctadmin - ok

11:36:51.0202 0x09c0  Waiting for KSN requests completion. In queue: 302

11:36:52.0202 0x09c0  Waiting for KSN requests completion. In queue: 302

11:36:53.0205 0x09c0  Waiting for KSN requests completion. In queue: 302

11:36:54.0280 0x09c0  AV detected via SS2: COMODO Antivirus, C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe ( 8.2.0.4674 ), 0x61000 ( enabled : updated )

11:36:54.0287 0x09c0  FW detected via SS2: COMODO Firewall, C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe ( 8.2.0.4674 ), 0x61010 ( enabled )

11:36:56.0738 0x09c0  ============================================================

11:36:56.0739 0x09c0  Scan finished

11:36:56.0739 0x09c0  ============================================================

11:36:56.0803 0x04c8  Detected object count: 0

11:36:56.0803 0x04c8  Actual detected object count: 0

Ich hatte allerdings Probleme den TDSSKiller zu starten während Comodo aktiv war, er hat mir angezeigt dass das Program Schadsoftware, packed.win32.mupx.gen, enthält und den Start des Programms verhindert.

Habe dann Comodo deaktiviert und den Suchlauf durchgeführt. Ich hoffe das war ok so?

Danke nochmal und viele Grüße Christian.