Trojaner-Board - ALLE Browser frieren bei Textinput ein - Verdächtige Konsole öffnet sich für eine Sekunde

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - ALLE Browser frieren bei Textinput ein - Verdächtige Konsole öffnet sich für eine Sekunde (https://www.trojaner-board.de/183104-alle-browser-frieren-textinput-verdaechtige-konsole-oeffnet-sekunde.html)

ALLE Browser frieren bei Textinput ein - Verdächtige Konsole öffnet sich für eine Sekunde

Hallo und erstmal Danke im Voraus, dass Ihr hier so eine tolle Arbeit leistet!

Zu meinem Problem:

Ich habe seit ca. 3 Tagen ein Einfrieren meines Chrome Browsers festgestellt. Dies geschieht, jedoch nur für wenige Sekunde, wenn ich Tabs wechsle, Text in der Suchleiste verschiedener Suchmaschinen eingebe oder in die URL Leiste selber etwas eingebe.

(Mein erster Verdacht war, dass da irgendwas eventuell meine Texteingabe abfischt)

Zudem öffnet sich in unregelmäßigen Abständen, jedenfalls habe ich noch kein Muster erkannt, ein leere CMD Konsole, welche sich dann sofort wieder schließt.

Ich habe vorsichtshalber sofort jegliche Passwörter von einem anderen Rechner, außerhalb meines Netzwerkes geändert.

(Benutze Google Chrome und Opera)

Danke für Eure Hilfe!

Hallo und :hallo:

+++ WICHTIGER HINWEIS +++

Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache.
Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung!
Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben.

Gelesen und verstanden?

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016

durchgeführt von Quobble (Administrator) auf QUOBBLE-PC (23-11-2016 17:32:42)

Gestartet von E:\Chrome Downloads

Geladene Profile: Quobble (Verfügbare Profile: Quobble)

Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AVAST Software) E:\Tools\AntiVir\AvastSvc.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Realtek Semiconductor Corp.) C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtlService.exe

() C:\Windows\runSW.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Realtek) C:\Windows\SwUSB.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Valve Corporation) E:\Steam\Steam.exe

(Hammer & Chisel, Inc.) C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\Discord.exe

(Flux Software LLC) C:\Users\Quobble\AppData\Local\FluxSoftware\Flux\flux.exe

(AVAST Software) E:\Tools\AntiVir\avastui.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe

(Disc Soft Ltd) E:\Tools\DTLiteInstaller\DAEMON Tools Lite\DiscSoftBusServiceLite.exe

(Hammer & Chisel, Inc.) C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\Discord.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(Hammer & Chisel, Inc.) C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\Discord.exe

(Valve Corporation) E:\Steam\bin\cef\cef.winxp\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [AvastUI.exe] => E:\Tools\AntiVir\AvastUI.exe [9080768 2016-11-15] (AVAST Software)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1890664 2016-01-14] (Western Digital Technologies, Inc.)

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Run: [Steam] => E:\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Run: [DAEMON Tools Lite Automount] => E:\Tools\DTLiteInstaller\DAEMON Tools Lite\DTAgent.exe [4295360 2016-06-08] (Disc Soft Ltd)

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Run: [Discord] => C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.)

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Run: [f.lux] => C:\Users\Quobble\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-01-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX64.dll [2016-06-30] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX64.dll [2016-06-30] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX64.dll [2016-06-30] ()

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => E:\Tools\AntiVir\ashShA64.dll [2016-09-09] (AVAST Software)

ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX32.dll [2016-06-30] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX32.dll [2016-06-30] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX32.dll [2016-06-30] ()
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{02B76A42-3EF1-4BCA-BAC7-46042ABAAB89}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{0E0FF80E-940F-4D19-B55F-FFCE01E52CA9}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{1F8E5442-11FE-4770-91EF-1B330868FEDF}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{3B3AF31B-7A97-458D-98D3-6FBD9B8837BC}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{879CC57E-00C0-4287-97F2-6068981A48BE}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{8D0428E6-9DD9-437E-93EB-EC70B49B30F6}: [DhcpNameServer] 192.168.42.129

Tcpip\..\Interfaces\{B26017A0-2A5C-4B6B-ADE4-31740AB0F84E}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{DDA0AACF-6EDD-4A34-8066-BE41D726BDAC}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-22] (Oracle Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> E:\Tools\AntiVir\aswWebRepIE64.dll [2016-10-24] (AVAST Software)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-22] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-22] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> E:\Tools\AntiVir\aswWebRepIE.dll [2016-10-24] (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-22] (Oracle Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - E:\Tools\AntiVir\WebRep\FF

FF Extension: (Avast Online Security) - E:\Tools\AntiVir\WebRep\FF [2016-09-09]

FF HKLM\...\Firefox\Extensions: [sp@avast.com] - E:\Tools\AntiVir\SafePrice\FF

FF Extension: (Avast SafePrice) - E:\Tools\AntiVir\SafePrice\FF [2016-09-09]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - E:\Tools\AntiVir\WebRep\FF

FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - E:\Tools\AntiVir\SafePrice\FF

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-22] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-22] (Oracle Corporation)

FF Plugin: @videolan.org/vlc,version=2.2.2 -> E:\Mediaplayers\VLC\npvlc.dll [2016-06-01] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.4 -> E:\Mediaplayers\VLC\npvlc.dll [2016-06-01] (VideoLAN)

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-22] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-22] (Oracle Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-10] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-10] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-22] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-22] (Google Inc.)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.de/

CHR Profile: C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default [2016-11-23]

CHR Extension: (Google Präsentationen) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-22]

CHR Extension: (Google Docs) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-22]

CHR Extension: (Google Drive) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-13]

CHR Extension: (YouTube) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-13]

CHR Extension: (uBlock Origin) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-11-23]

CHR Extension: (Google-Suche) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-13]

CHR Extension: (Avast Passwords) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2016-11-22]

CHR Extension: (Google Tabellen) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-13]

CHR Extension: (Google Docs Offline) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]

CHR Extension: (Black Black Chrome Theme Dark Blue Highlight) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\njpbabhpbnilgchdjbajcbgnnclkaida [2016-01-13]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-09]

CHR Extension: (Google Mail) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-13]

CHR Extension: (Chrome Media Router) - C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-22]

CHR HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avast! Antivirus; E:\Tools\AntiVir\AvastSvc.exe [197128 2016-09-09] (AVAST Software)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1456136 2016-10-17] ()

R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [38000 2016-10-10] (Dropbox, Inc.)

R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)

R3 Disc Soft Lite Bus Service; E:\Tools\DTLiteInstaller\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1458368 2016-06-08] (Disc Soft Ltd)

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-10] (NVIDIA Corporation)

R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-10-25] (NVIDIA Corporation)

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1316080 2016-11-07] (Overwolf LTD)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-07] ()

R2 Realtek8723AU; C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]

R2 RunSwUSB; C:\Windows\runSW.exe [44104 2013-05-23] ()

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [308088 2016-01-14] (Western Digital Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 Alpham1; C:\Windows\System32\DRIVERS\Alpham164.sys [52992 2007-07-23] (Ideazon Corporation)

R3 Alpham2; C:\Windows\System32\DRIVERS\Alpham264.sys [21760 2007-03-20] (Ideazon Corporation)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software)

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-23] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2016-06-08] ()

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-06-21] (Disc Soft Ltd)

R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-06-21] (Disc Soft Ltd)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2016-04-17] (Intel Corporation)

R3 ladfGSS; C:\Windows\System32\drivers\ladfGSS.sys [45208 2016-04-15] (Logitech Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2016-06-08] ()

R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-10-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2016-10-25] (NVIDIA Corporation)

S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2355416 2013-08-06] (Realtek Semiconductor Corporation                           )

S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2016-01-14] (Western Digital Technologies)

S3 dbx; system32\DRIVERS\dbx.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-11-23 17:32 - 2016-11-23 17:32 - 00000000 ____D C:\FRST

2016-11-23 11:38 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll

2016-11-23 11:38 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL

2016-11-23 11:38 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL

2016-11-23 11:38 - 2015-12-16 19:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL

2016-11-23 11:38 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll

2016-11-23 11:38 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL

2016-11-23 11:37 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-11-23 11:37 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-11-23 11:37 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-11-23 11:37 - 2016-10-11 16:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-11-23 11:37 - 2016-10-11 16:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-11-23 11:37 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-11-23 11:37 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-11-23 11:37 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-11-23 11:37 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-11-23 11:37 - 2016-10-11 16:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-11-23 11:37 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-11-23 11:37 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-11-23 11:37 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-11-23 11:37 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-11-23 11:37 - 2016-10-11 15:56 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-11-23 11:37 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe

2016-11-23 11:37 - 2016-10-11 15:55 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-11-23 11:37 - 2016-10-11 15:55 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-11-23 11:37 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-11-23 11:37 - 2016-10-11 15:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-11-23 11:37 - 2016-10-11 15:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-11-23 11:37 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-11-23 11:37 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-11-23 11:37 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-11-23 11:37 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-11-23 11:37 - 2016-10-11 15:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-11-23 11:37 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-11-23 11:37 - 2016-10-11 14:18 - 00419648 _____ C:\Windows\SysWOW64\locale.nls

2016-11-23 11:37 - 2016-10-11 14:17 - 00419648 _____ C:\Windows\system32\locale.nls

2016-11-23 11:37 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-11-23 11:37 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2016-11-23 11:37 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2016-11-23 11:37 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2016-11-23 11:37 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2016-11-23 11:37 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2016-11-23 11:37 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2016-11-23 11:37 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2016-11-23 11:37 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2016-11-23 11:31 - 2016-11-23 11:31 - 00003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1479897076

2016-11-23 11:31 - 2016-11-23 11:31 - 00001139 _____ C:\Users\Public\Desktop\Opera.lnk

2016-11-23 11:31 - 2016-11-23 11:31 - 00001139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2016-11-23 11:31 - 2016-11-23 11:31 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\Opera Software

2016-11-23 11:31 - 2016-11-23 11:31 - 00000000 ____D C:\Users\Quobble\AppData\Local\Opera Software

2016-11-23 11:30 - 2016-11-23 11:31 - 00000000 ____D C:\Program Files (x86)\Opera

2016-11-22 14:21 - 2016-11-22 14:21 - 00002263 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-11-22 14:21 - 2016-11-22 14:21 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-11-22 14:20 - 2016-11-23 17:25 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-11-22 14:20 - 2016-11-23 14:25 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-11-22 14:20 - 2016-11-22 14:20 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2016-11-22 14:20 - 2016-11-22 14:20 - 00003856 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2016-11-22 14:15 - 2016-11-22 14:15 - 00072306 _____ C:\Users\Quobble\Documents\cc_20161122_141502.reg

2016-11-22 14:15 - 2016-11-22 14:15 - 00004248 _____ C:\Users\Quobble\Documents\cc_20161122_141513.reg

2016-11-16 12:09 - 2016-11-16 12:09 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2016-11-16 12:09 - 2016-11-10 23:23 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2016-11-16 12:09 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll

2016-11-16 12:09 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll

2016-11-16 12:09 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2016-11-16 12:09 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe

2016-11-16 12:08 - 2016-11-11 00:48 - 40123840 _____ C:\Windows\system32\nvcompiler.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 35222464 _____ C:\Windows\SysWOW64\nvcompiler.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 34704952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 17440744 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 14048824 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2016-11-16 12:08 - 2016-11-11 00:48 - 10912048 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 10795128 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 10346024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 09150888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 08754160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 03645496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 03208248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437586.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437586.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00975928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00520912 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00491720 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00439864 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00435904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00407248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2016-11-16 12:08 - 2016-11-11 00:48 - 00170688 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2016-11-16 12:08 - 2016-11-11 00:48 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json

2016-11-16 12:08 - 2016-11-11 00:48 - 00000669 _____ C:\Windows\system32\nv-vk64.json

2016-11-16 11:48 - 2016-11-16 11:48 - 00003840 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00003840 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00003790 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00003778 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00003602 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00003542 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 11:48 - 2016-11-16 11:48 - 00001416 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2016-11-16 11:48 - 2016-11-10 23:35 - 00001951 _____ C:\Windows\NvContainerRecovery.bat

2016-11-16 11:48 - 2016-10-25 21:18 - 01854008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2016-11-16 11:47 - 2016-10-25 21:18 - 00106040 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2016-11-16 11:47 - 2016-10-25 21:18 - 00095800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2016-11-16 11:47 - 2016-10-25 21:18 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2016-11-15 16:33 - 2016-11-15 16:40 - 00000000 ____D C:\Arma3Mods

2016-11-15 14:20 - 2016-11-21 23:56 - 00000000 ____D C:\Users\Quobble\.junique

2016-11-15 14:20 - 2016-11-21 23:56 - 00000000 ____D C:\Program Files (x86)\ArmA3Sync

2016-11-15 14:20 - 2016-11-15 14:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArmA3Sync

2016-11-14 17:13 - 2016-11-14 17:13 - 00011805 _____ C:\Users\Quobble\Desktop\Arma3Launcher_Exception_20161114T161305.txt

2016-11-11 15:09 - 2016-11-11 15:11 - 00000000 ____D C:\Users\Quobble\Desktop\Shit

2016-11-09 09:38 - 2016-11-02 16:36 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-11-09 09:38 - 2016-11-02 16:32 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2016-11-09 09:38 - 2016-11-02 16:32 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-11-09 09:38 - 2016-11-02 16:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2016-11-09 09:38 - 2016-11-02 16:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2016-11-09 09:38 - 2016-11-02 16:22 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2016-11-09 09:38 - 2016-11-02 16:16 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2016-11-09 09:38 - 2016-11-02 16:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2016-11-09 09:38 - 2016-11-02 16:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2016-11-09 09:38 - 2016-11-02 15:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2016-11-09 09:38 - 2016-10-28 04:59 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-11-09 09:38 - 2016-10-28 04:14 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-11-09 09:38 - 2016-10-27 20:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-11-09 09:38 - 2016-10-27 20:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-11-09 09:38 - 2016-10-27 19:55 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-11-09 09:38 - 2016-10-27 19:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-11-09 09:38 - 2016-10-27 19:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-11-09 09:38 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-11-09 09:38 - 2016-10-27 19:53 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-11-09 09:38 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-11-09 09:38 - 2016-10-27 19:44 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-11-09 09:38 - 2016-10-27 19:43 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-11-09 09:38 - 2016-10-27 19:38 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-11-09 09:38 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-11-09 09:38 - 2016-10-27 19:37 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-11-09 09:38 - 2016-10-27 19:37 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-11-09 09:38 - 2016-10-27 19:37 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-11-09 09:38 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-11-09 09:38 - 2016-10-27 19:28 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-11-09 09:38 - 2016-10-27 19:24 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-11-09 09:38 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-11-09 09:38 - 2016-10-27 19:15 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-11-09 09:38 - 2016-10-27 19:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-11-09 09:38 - 2016-10-27 19:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-11-09 09:38 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-11-09 09:38 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-11-09 09:38 - 2016-10-27 19:02 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-11-09 09:38 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-11-09 09:38 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-11-09 09:38 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-11-09 09:38 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-11-09 09:38 - 2016-10-27 18:44 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-11-09 09:38 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-11-09 09:38 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-11-09 09:38 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-11-09 09:38 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-11-09 09:38 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-11-09 09:38 - 2016-10-25 16:02 - 03219456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-11-09 09:38 - 2016-10-22 18:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-11-09 09:38 - 2016-10-22 18:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-11-09 09:38 - 2016-10-22 18:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-11-09 09:38 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-11-09 09:38 - 2016-10-22 18:35 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-11-09 09:38 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-11-09 09:38 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-11-09 09:38 - 2016-10-22 18:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-11-09 09:38 - 2016-10-22 18:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-11-09 09:38 - 2016-10-22 18:22 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-11-09 09:38 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-11-09 09:38 - 2016-10-22 18:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-11-09 09:38 - 2016-10-22 18:20 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-11-09 09:38 - 2016-10-22 18:09 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-11-09 09:38 - 2016-10-22 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-11-09 09:38 - 2016-10-22 18:03 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-11-09 09:38 - 2016-10-22 17:59 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-11-09 09:38 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-11-09 09:38 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-11-09 09:38 - 2016-10-22 17:54 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-11-09 09:38 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-11-09 09:38 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-11-09 09:38 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-11-09 09:38 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-11-09 09:38 - 2016-10-22 17:43 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-11-09 09:38 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-11-09 09:38 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-11-09 09:38 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-11-09 09:38 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-11-09 09:38 - 2016-10-15 16:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2016-11-09 09:38 - 2016-10-15 16:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll

2016-11-09 09:38 - 2016-10-15 16:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2016-11-09 09:38 - 2016-10-15 16:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll

2016-11-09 09:38 - 2016-10-11 16:37 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2016-11-09 09:38 - 2016-10-11 16:31 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME

2016-11-09 09:38 - 2016-10-11 16:31 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-11-09 09:38 - 2016-10-11 16:31 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2016-11-09 09:38 - 2016-10-11 16:31 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll

2016-11-09 09:38 - 2016-10-11 16:31 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime

2016-11-09 09:38 - 2016-10-11 16:31 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME

2016-11-09 09:38 - 2016-10-11 16:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2016-11-09 09:38 - 2016-10-11 16:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2016-11-09 09:38 - 2016-10-11 16:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll

2016-11-09 09:38 - 2016-10-11 16:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime

2016-11-09 09:38 - 2016-10-11 16:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime

2016-11-09 09:38 - 2016-10-11 14:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2016-11-09 09:38 - 2016-10-11 14:06 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2016-11-09 09:38 - 2016-10-07 16:32 - 03649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll

2016-11-09 09:38 - 2016-10-07 16:32 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2016-11-09 09:38 - 2016-10-07 16:32 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-11-09 09:38 - 2016-10-07 16:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll

2016-11-09 09:38 - 2016-10-07 16:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2016-11-09 09:38 - 2016-10-07 16:12 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll

2016-11-09 09:38 - 2016-10-05 15:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2016-11-09 09:38 - 2016-09-15 15:56 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2016-11-09 09:38 - 2016-09-13 16:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-11-09 09:38 - 2016-09-13 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2016-11-09 09:38 - 2016-09-09 19:20 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-11-09 09:38 - 2016-09-09 19:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2016-11-09 09:38 - 2016-08-22 17:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-11-08 17:36 - 2016-11-08 17:36 - 05001920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2016-11-06 23:31 - 2016-11-06 23:31 - 00000000 ____D C:\Users\Quobble\Desktop\Screenshot

2016-11-06 23:22 - 2016-11-06 23:30 - 00000000 ____D C:\Users\Quobble\Desktop\Bilder

2016-11-03 03:15 - 2016-11-03 23:49 - 00001378 _____ C:\Users\Quobble\Desktop\Neues Textdokument.txt

2016-10-25 16:38 - 2016-10-26 01:19 - 00010952 _____ C:\Users\Quobble\Desktop\Rundschreiben - Bericht.odt

2016-10-24 02:25 - 2016-10-24 02:25 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux

2016-10-24 02:25 - 2016-10-24 02:25 - 00000000 ____D C:\Users\Quobble\AppData\Local\FluxSoftware
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-11-23 17:04 - 2016-07-20 09:45 - 00004138 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2016-11-23 16:36 - 2016-01-13 13:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-11-23 12:33 - 2016-10-21 22:13 - 00000000 ____D C:\Users\Quobble\AppData\Local\ElevatedDiagnostics

2016-11-23 12:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2016-11-23 11:54 - 2009-07-14 05:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-11-23 11:54 - 2009-07-14 05:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-11-23 11:53 - 2009-07-14 18:58 - 00699416 _____ C:\Windows\system32\perfh007.dat

2016-11-23 11:53 - 2009-07-14 18:58 - 00149556 _____ C:\Windows\system32\perfc007.dat

2016-11-23 11:53 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI

2016-11-23 11:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

2016-11-23 11:51 - 2016-01-14 21:50 - 00000000 ____D C:\ProgramData\NVIDIA

2016-11-23 11:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-11-23 11:39 - 2016-01-14 21:36 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2016-11-22 23:12 - 2016-01-14 21:45 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\Skype

2016-11-22 22:28 - 2016-01-14 21:45 - 00000000 ___RD C:\Program Files (x86)\Skype

2016-11-22 22:28 - 2016-01-14 21:45 - 00000000 ____D C:\ProgramData\Skype

2016-11-22 14:28 - 2016-01-14 22:07 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-11-22 14:25 - 2016-02-03 23:04 - 00000000 ____D C:\Program Files (x86)\Amazon

2016-11-22 14:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache

2016-11-22 14:21 - 2016-01-13 13:24 - 00000000 ____D C:\Program Files (x86)\Google

2016-11-22 14:20 - 2016-01-13 13:24 - 00000000 ____D C:\Users\Quobble\AppData\Local\Deployment

2016-11-22 14:18 - 2016-04-14 01:48 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-11-22 14:14 - 2016-01-14 21:39 - 00000000 ____D C:\Users\Quobble\AppData\Local\CrashDumps

2016-11-21 23:46 - 2016-04-21 20:24 - 00000000 ____D C:\Users\Quobble\AppData\Local\Arma 3

2016-11-20 19:56 - 2016-01-14 21:39 - 00000000 ____D C:\Users\Quobble\AppData\Local\NVIDIA Corporation

2016-11-17 19:48 - 2016-04-21 20:22 - 00000000 ____D C:\Users\Quobble\AppData\Local\Arma 3 Launcher

2016-11-17 19:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2016-11-16 12:09 - 2016-01-14 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-11-16 12:09 - 2016-01-14 21:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-16 12:09 - 2016-01-14 21:27 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-11-16 12:08 - 2016-01-14 21:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-11-16 11:55 - 2016-01-14 21:39 - 00000000 ____D C:\Users\Quobble\AppData\Local\NVIDIA

2016-11-16 01:49 - 2016-07-23 10:38 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi

2016-11-16 01:49 - 2016-07-23 10:38 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi

2016-11-16 00:04 - 2016-03-18 03:35 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\vlc

2016-11-15 17:25 - 2016-04-21 20:24 - 00000000 ____D C:\Users\Quobble\Documents\Arma 3

2016-11-15 14:20 - 2016-01-13 02:16 - 00000000 ____D C:\Users\Quobble

2016-11-15 00:33 - 2016-02-13 23:08 - 00000000 ____D C:\Users\Quobble\AppData\Local\UnrealEngine

2016-11-14 20:56 - 2016-03-19 20:56 - 00000000 ____D C:\Program Files (x86)\Overwolf

2016-11-14 14:57 - 2016-06-22 20:57 - 00000002 _____ C:\END

2016-11-14 01:06 - 2016-06-21 11:22 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\DAEMON Tools Lite

2016-11-14 01:06 - 2016-01-20 17:00 - 00000000 ____D C:\Users\Quobble\AppData\Roaming\uTorrent

2016-11-13 23:37 - 2016-01-19 19:23 - 00003414 _____ C:\Windows\System32\Tasks\EVGAPrecisionX

2016-11-11 15:12 - 2016-03-02 14:12 - 00000000 ____D C:\Users\Quobble\Desktop\Fuchsenmappe

2016-11-11 13:47 - 2016-07-23 10:37 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2016-11-11 00:48 - 2016-06-07 03:32 - 28140088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2016-11-11 00:48 - 2016-06-07 02:58 - 19936464 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2016-11-11 00:48 - 2016-06-07 02:58 - 17361976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2016-11-11 00:48 - 2016-06-07 02:56 - 14409936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2016-11-11 00:48 - 2016-06-07 02:55 - 03941536 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2016-11-11 00:48 - 2016-06-07 02:55 - 03479744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2016-11-11 00:48 - 2015-11-10 01:13 - 00041344 _____ C:\Windows\system32\nvinfo.pb

2016-11-10 23:38 - 2016-01-14 21:50 - 07511235 _____ C:\Windows\system32\nvcoproc.bin

2016-11-10 23:38 - 2016-01-14 21:50 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 00546752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2016-11-10 23:38 - 2016-01-14 21:50 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2016-11-10 10:35 - 2009-07-14 05:45 - 00294640 _____ C:\Windows\system32\FNTCACHE.DAT

2016-11-10 02:39 - 2016-01-14 21:29 - 00000000 ____D C:\Windows\system32\MRT

2016-11-10 02:37 - 2016-01-14 21:29 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-11-08 17:36 - 2016-01-13 13:27 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-11-08 17:36 - 2016-01-13 13:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-11-08 17:36 - 2016-01-13 13:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2016-11-08 17:36 - 2016-01-13 13:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2016-11-08 17:36 - 2016-01-13 13:27 - 00000000 ____D C:\Windows\system32\Macromed

2016-10-31 13:29 - 2016-01-13 13:24 - 00000000 ____D C:\Users\Quobble\AppData\Local\Google
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-06-13 01:08 - 2016-06-13 01:08 - 0001520 _____ () C:\Users\Quobble\AppData\Local\recently-used.xbel

2016-01-24 22:40 - 2016-01-24 22:40 - 0000000 ___SH () C:\ProgramData\.rdata
 

Einige Dateien in TEMP:

====================

C:\Users\Quobble\AppData\Local\Temp\jshortcut-2686000203289420894.dll

C:\Users\Quobble\AppData\Local\Temp\jshortcut-5251569094322177886.dll

C:\Users\Quobble\AppData\Local\Temp\jshortcut-5710729854331177184.dll

C:\Users\Quobble\AppData\Local\Temp\jshortcut-5770032046387167293.dll

C:\Users\Quobble\AppData\Local\Temp\sfamcc00001.dll

C:\Users\Quobble\AppData\Local\Temp\sfareca00001.dll
 
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-11-14 12:04
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016

durchgeführt von Quobble (23-11-2016 17:32:58)

Gestartet von E:\Chrome Downloads

Windows 7 Professional Service Pack 1 (X64) (2016-01-13 01:16:27)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2592108441-3361246110-3147240245-500 - Administrator - Disabled)

Gast (S-1-5-21-2592108441-3361246110-3147240245-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2592108441-3361246110-3147240245-1002 - Limited - Enabled)

Quobble (S-1-5-21-2592108441-3361246110-3147240245-1000 - Administrator - Enabled) => C:\Users\Quobble

SophosSAUQUOBBLE-PC0 (S-1-5-21-2592108441-3361246110-3147240245-1007 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

µTorrent (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)

7-Zip 16.02 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1602-000001000000}) (Version: 16.02.00.0 - Igor Pavlov)

Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)

Amazon 1Button App (HKLM-x32\...\{B6DCCCD3-520D-4485-B642-FCC136CE12C3}) (Version: 2.3.4 - Amazon) <==== ACHTUNG

Anno 1701 - Der Fluch des Drachen (HKLM-x32\...\{905D4F6B-FADC-4CA4-AA41-BD32A2E446CE}) (Version: 2.03 - Sunflowers)

Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.00 - Sunflowers)

Ansel (Version: 375.86 - NVIDIA Corporation) Hidden

Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)

ArmA3Sync 1.5.80 (HKLM-x32\...\{F097E7D7-D093-4394-9EED-43AFCCD12B7A}_is1) (Version: 1.5.80 - The [S.o.E] team)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)

Camtasia Studio 8 (HKLM-x32\...\{E7AFA156-D5CB-4B8C-843D-E7CA58D36B0A}) (Version: 8.6.0.2054 - TechSmith Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0191 - Disc Soft Ltd)

Day of Infamy (HKLM\...\Steam App 447820) (Version:  - New World Interactive)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)

devolo dLAN-Konfigurationsassistent (HKLM-x32\...\dlanconf) (Version: 20.0.0.0 - devolo AG)

devolo Informer (HKLM-x32\...\dslmon) (Version: 28.0.0.0 - devolo AG)

Discord (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.)

EVGA Precision XOC (HKLM\...\Steam App 268850) (Version:  - EVGA)

f.lux (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\Flux) (Version:  - )

Fallout 3 - Game of the Year Edition (HKLM\...\Steam App 22370) (Version:  - Bethesda Game Studios)

Fallout 4 (HKLM\...\Steam App 377160) (Version:  - Bethesda Game Studios)

Fallout: New Vegas (HKLM\...\Steam App 22380) (Version:  - Obsidian Entertainment)

Firestorm SecondLife and OpenSim viewer (Version: 4.7.47975 - The Phoenix Firestorm Project, Inc.) Hidden

Firestorm-Releasex64 x64 (HKLM-x32\...\{63667a72-ee55-4dac-b231-18e6773104d8}) (Version: 4.7.47975 - The Phoenix Firestorm Project, Inc.)

Geany 1.27 (HKLM-x32\...\Geany) (Version: 1.27 - The Geany developer team)

GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version:  - UltimateOutsider)

inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)

Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.15 - Oracle Corporation)

Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)

League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)

League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)

Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Mumble 1.2.14 (HKLM-x32\...\{79D15E9E-B707-45AD-A078-F2E941C85456}) (Version: 1.2.14 - Thorvald Natvig)

netis Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0223 - )

Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.23 - Black Tree Gaming)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 375.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.86 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.1.0.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)

NVIDIA Grafiktreiber 375.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.86 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

NvNodejs (Version: 3.1.0.52 - NVIDIA Corporation) Hidden

NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.1.2 (HKLM-x32\...\{E6AD67BB-1C33-4AB3-A387-E0D48137AB70}) (Version: 4.12.9782 - Apache Software Foundation)

Opera Stable 41.0.2353.56 (HKLM-x32\...\Opera 41.0.2353.56) (Version: 41.0.2353.56 - Opera Software)

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.99.218.0 - Overwolf Ltd.)

Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.12 - )

pidgin-otr 4.0.1 (HKLM-x32\...\pidgin-otr) (Version: 4.0.1 - Cypherpunks CA)

Project Reality: BF2 (HKLM\...\Project Reality: BF2 (pr)_is1) (Version: v1.3 - Project Reality)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)

Python 3.5.1 (32-bit) (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)

Python 3.5.1 Add to Path (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)

Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden

RimWorld (HKLM\...\Steam App 294100) (Version:  - Ludeon Studios)

SHIELD Streaming (Version: 7.1.0330 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 3.1.0.52 - NVIDIA Corporation) Hidden

Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)

Sid Meier's Civilization V (HKLM-x32\...\steam app 8930) (Version:  - 2K Games, Inc.)

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )

Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.5 - Safer-Networking Ltd.)

Squad (HKLM-x32\...\Steam App 393380) (Version:  - Offworld Industries)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TeamSpeak 3 Client (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Telegram Desktop version 0.10.16 (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.16 - Telegram Messenger LLP)

The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)

The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)

VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden

Verdun (HKLM\...\Steam App 242860) (Version:  - M2H)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)

WD Drive Utilities (HKLM-x32\...\{eab1fb93-61fb-48de-b815-b4e9b68d2ef1}) (Version: 1.3.2.2 - Western Digital Technologies, Inc.)

WD Drive Utilities (x32 Version: 1.3.2.2 - Western Digital Technologies, Inc.) Hidden

World of Tanks (HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)

XChat 2 (remove only) (HKLM-x32\...\xchat) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {006EE1BD-98AA-4402-82C1-2F7C8F0AF952} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-07-29] (AVAST Software)

Task: {129611B7-74C1-4A85-BDDF-99D9B2A2F33F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-22] (Google Inc.)

Task: {12A1DFD9-9EE1-41B9-B010-E2C6B01B5FEF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)

Task: {2300BC9F-7DA5-478B-93FC-443BCDF4E3B4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-22] (Google Inc.)

Task: {243487F4-D41B-4BA8-BCCF-C5EF5ACDEA01} - System32\Tasks\EVGAPrecisionX => C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe [2016-11-13] (EVGA Corp.)

Task: {2C211102-3D23-4AA3-BD33-D2A7B47BBA9D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-10-25] (NVIDIA Corporation)

Task: {2FE6C297-8309-43BB-86B5-CCD07E99AED3} - System32\Tasks\Safer-Networking\Spybot Anti-Beacon\Aktualisiere Anti-Beacon-Immunisierung => E:\Tools\Spybot Anti-Beacon\SDAntiBeacon.exe [2015-10-19] (Safer-Networking Ltd.)

Task: {35D7294D-2BE8-4CAB-BFD6-2A4631AB17C7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)

Task: {49A223F9-CAA6-4C02-9F34-061D91EE67FA} - System32\Tasks\avast! Emergency Update => E:\Tools\AntiVir\AvastEmUpdate.exe [2016-09-09] (AVAST Software)

Task: {68E0E7AF-94AE-4711-AFB0-5B389E0223EB} - System32\Tasks\Opera scheduled Autoupdate 1479897076 => C:\Program Files (x86)\Opera\launcher.exe [2016-11-07] (Opera Software)

Task: {72822410-F9CE-426A-8DF6-B783BF17CCA6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-11-07] (Overwolf LTD)

Task: {83CF804C-BBED-4379-8172-1BB0BD099015} - System32\Tasks\{76A2941A-2CBD-4B59-BC04-38B771D0D090} => E:\SecondLife\Firestorm-bin.exe

Task: {BE2D4478-6B69-46F7-BD05-2E15C925A837} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-10-25] (NVIDIA Corporation)

Task: {BE8E2E06-4D67-43F3-889C-C1022C8CFCF5} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)

Task: {E1EB038F-4C70-4CDF-853E-918E71A03F8E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {EE92D4B6-B00E-4776-AF46-14AAA2845D68} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)

Task: {F4492774-7F3B-414C-A62C-E3F4430743C9} - System32\Tasks\{AEAC0C7C-FE28-40CC-B670-E5AA78D996AD} => E:\Games\Anno1701\Anno1701AddOn.exe

Task: {F8E4A50B-05B6-4EFF-BD60-5DFBA1409004} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-11-16 11:48 - 2016-10-25 21:18 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 00420408 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll

2016-01-24 22:39 - 2016-09-07 00:56 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2016-04-25 19:54 - 2013-05-23 14:33 - 00044104 _____ () C:\Windows\runSW.exe

2016-01-14 21:50 - 2016-11-10 23:38 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-06-30 09:23 - 2016-06-30 09:23 - 00592384 _____ () C:\Users\Quobble\AppData\Local\MEGAsync\ShellExtX64.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-11-22 14:21 - 2016-11-08 22:03 - 02367080 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll

2016-11-22 14:21 - 2016-11-08 22:03 - 00107112 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll

2016-09-09 17:02 - 2016-09-09 17:02 - 00169064 _____ () E:\Tools\AntiVir\JsonRpcServer.dll

2016-11-22 22:26 - 2016-11-22 22:26 - 03129808 _____ () E:\Tools\AntiVir\defs\16112201\algo.dll

2016-09-09 17:02 - 2016-09-09 17:02 - 00482928 _____ () E:\Tools\AntiVir\ffl2.dll

2016-11-23 17:31 - 2016-11-23 17:31 - 03134984 _____ () E:\Tools\AntiVir\defs\16112300\algo.dll

2016-01-14 21:37 - 2016-10-25 21:18 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-01-14 22:02 - 2016-09-08 04:14 - 00784672 _____ () E:\Steam\SDL2.dll

2016-01-14 22:02 - 2016-09-01 02:02 - 04969248 _____ () E:\Steam\v8.dll

2016-01-14 22:02 - 2016-09-01 02:02 - 01563936 _____ () E:\Steam\icui18n.dll

2016-01-14 22:02 - 2016-09-01 02:02 - 01195296 _____ () E:\Steam\icuuc.dll

2016-01-14 22:02 - 2016-10-13 02:58 - 02321696 _____ () E:\Steam\video.dll

2016-01-14 22:02 - 2016-01-27 08:49 - 02549760 _____ () E:\Steam\libavcodec-56.dll

2016-01-14 22:02 - 2016-01-27 08:49 - 00442880 _____ () E:\Steam\libavutil-54.dll

2016-01-14 22:02 - 2016-01-27 08:49 - 00491008 _____ () E:\Steam\libavformat-56.dll

2016-01-14 22:02 - 2016-01-27 08:49 - 00332800 _____ () E:\Steam\libavresample-2.dll

2016-01-14 22:02 - 2016-01-27 08:49 - 00485888 _____ () E:\Steam\libswscale-3.dll

2016-01-14 22:02 - 2016-10-13 02:58 - 00836896 _____ () E:\Steam\bin\chromehtml.DLL

2016-03-15 20:21 - 2016-07-04 23:17 - 00266560 _____ () E:\Steam\openvr_api.dll

2016-08-25 02:45 - 2016-08-24 16:49 - 01950392 _____ () C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\ffmpeg.dll

2016-08-25 14:22 - 2016-11-16 09:22 - 01058816 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_voice\discord_voice.node

2016-08-25 14:22 - 2016-11-16 09:22 - 03801088 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_voice\libdiscord.dll

2016-08-25 14:22 - 2016-08-25 14:22 - 00894136 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_utils\discord_utils.node

2016-08-25 14:30 - 2016-08-25 14:30 - 01298616 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_overlay\discord_overlay.node

2016-07-20 09:44 - 2016-07-20 09:44 - 48936448 _____ () E:\Tools\AntiVir\libcef.dll

2016-08-25 02:45 - 2016-08-24 16:49 - 02230456 _____ () C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\libglesv2.dll

2016-08-25 02:45 - 2016-08-24 16:49 - 00088760 _____ () C:\Users\Quobble\AppData\Local\Discord\app-0.0.296\libegl.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

2016-11-16 11:48 - 2016-10-25 20:57 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node

2016-11-16 11:48 - 2016-10-25 20:57 - 00255936 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node

2016-11-16 11:48 - 2016-10-25 20:57 - 02808256 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node

2016-11-16 11:48 - 2016-10-25 21:18 - 00901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-16 11:48 - 2016-10-25 21:18 - 03776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 11:48 - 2016-10-25 20:57 - 00246840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node

2016-11-16 11:48 - 2016-10-25 20:57 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node

2016-11-16 11:48 - 2016-10-25 20:57 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node

2016-11-16 11:48 - 2016-10-25 20:57 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node

2016-11-23 11:51 - 2016-11-23 11:51 - 00170496 _____ () \\?\C:\Users\Quobble\AppData\Local\Temp\3014.tmp.node

2016-08-25 14:22 - 2016-10-14 15:30 - 02658304 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_rpc\discord_rpc.node

2016-09-03 20:51 - 2016-10-14 15:30 - 02147328 _____ () \\?\C:\Users\Quobble\AppData\Roaming\discord\0.0.296\modules\discord_contact_import\discord_contact_import.node

2016-10-15 01:04 - 2016-08-04 21:56 - 49825056 _____ () E:\Steam\bin\cef\cef.winxp\libcef.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\.rdata:X [526]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\.DEFAULT\...\amazon.de -> amazon.de

IE trusted site: HKU\.DEFAULT\...\amazon.de -> hxxps://amazon.de

IE trusted site: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\...\amazon.de -> hxxps://amazon.de
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2016-11-23 11:52 - 00002641 ____A C:\Windows\system32\Drivers\etc\hosts
 

0.0.0.0        choice.microsoft.com

0.0.0.0        choice.microsoft.com.nstac.net

0.0.0.0        df.telemetry.microsoft.com

0.0.0.0        oca.telemetry.microsoft.com

0.0.0.0        oca.telemetry.microsoft.com.nsatc.net

0.0.0.0        redir.metaservices.microsoft.com

0.0.0.0        reports.wes.df.telemetry.microsoft.com

0.0.0.0        services.wes.df.telemetry.microsoft.com

0.0.0.0        settings-sandbox.data.microsoft.com

0.0.0.0        settings-win.data.microsoft.com

0.0.0.0        sqm.df.telemetry.microsoft.com

0.0.0.0        sqm.telemetry.microsoft.com

0.0.0.0        sqm.telemetry.microsoft.com.nsatc.net

0.0.0.0        telecommand.telemetry.microsoft.com

0.0.0.0        telecommand.telemetry.microsoft.com.nsatc.net

0.0.0.0        telemetry.appex.bing.net

0.0.0.0        telemetry.microsoft.com

0.0.0.0        telemetry.urs.microsoft.com

0.0.0.0        vortex-sandbox.data.microsoft.com

0.0.0.0        vortex-win.data.microsoft.com

0.0.0.0        vortex.data.microsoft.com

0.0.0.0        watson.telemetry.microsoft.com

0.0.0.0        watson.telemetry.microsoft.com.nsatc.net

0.0.0.0        watson.ppe.telemetry.microsoft.com

0.0.0.0        wes.df.telemetry.microsoft.com

0.0.0.0        vortex-bn2.metron.live.com.nsatc.net

0.0.0.0        vortex-cy2.metron.live.com.nsatc.net

0.0.0.0        watson.live.com

0.0.0.0        watson.microsoft.com

0.0.0.0        feedback.search.microsoft.com
 

Da befinden sich 6 zusätzliche Einträge.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Quobble\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{67230576-FEB1-45E2-8DDC-6CCF1559DE61}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{765ED47C-80FA-4C27-B337-D41654EE78F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{12550232-BAE8-4DD7-8C67-7910CDE61A24}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8A0299DE-D1C9-4CA3-9702-37BE6F7238AD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{ACDFB04B-B6D6-4E51-BCF0-55C6AF98AE17}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{700C167F-24E7-45D9-BC02-978A475A1E54}] => (Allow) E:\Steam\Steam.exe

FirewallRules: [{4164DA67-F8B5-43DC-B193-3398DC3896F4}] => (Allow) E:\Steam\Steam.exe

FirewallRules: [{203FAD31-2E15-4F1C-9A75-E33F1404133A}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{E2964534-B91E-4B21-B436-A0CAEE19D43B}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{90D651BC-8C4B-4E69-87BF-297CD6889CE2}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{B2DF449A-EFB0-44B2-89FB-DFF9B815C702}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{C8E97408-6350-4F73-8117-423AA435F0F0}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{8DBC3F91-B9CA-4BFB-8DD9-577E36AE4F3C}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{1DBD9260-3FA5-4CEE-87C9-EBA98F783452}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{B1EC1AC0-1F8D-4363-858F-1A0D8C4659F9}] => (Allow) C:\Users\Quobble\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{8FFCABE4-366D-4275-8E66-4086F2C8379E}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [{CAECB567-8A11-4635-B9BC-6EBDA4228216}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe

FirewallRules: [TCP Query User{D186A4EC-83F2-45D5-AACF-BFA286863C7E}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{54612EC5-C160-4431-8577-E935E7A0030F}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{486EA6A8-679B-437A-B7DD-1EC15E989C17}] => (Allow) E:\Steam\steamapps\common\Squad\squad_launcher.exe

FirewallRules: [{534AFF7E-24E4-4C63-A8E9-556D038953BD}] => (Allow) E:\Steam\steamapps\common\Squad\squad_launcher.exe

FirewallRules: [{5802EFB9-29A1-43EF-9C4F-8E35C975EEB1}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1ADE9271-5404-41B1-A34C-06B9782E8F2B}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{D61EAF10-BAD6-4052-A063-196758353DED}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe

FirewallRules: [{A3C4CEFE-5605-4A1C-BA98-58F6E1CFA787}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe

FirewallRules: [TCP Query User{4B451B8E-B0BA-434C-A73C-ED51F13F923D}E:\steam\steamapps\common\squad\squad\binaries\win64\squad.exe] => (Allow) E:\steam\steamapps\common\squad\squad\binaries\win64\squad.exe

FirewallRules: [UDP Query User{C416BFF1-6C04-4BFF-A021-B15BDA3C875C}E:\steam\steamapps\common\squad\squad\binaries\win64\squad.exe] => (Allow) E:\steam\steamapps\common\squad\squad\binaries\win64\squad.exe

FirewallRules: [TCP Query User{EBEF085F-F766-455A-B9D6-8DC036FEBEE9}E:\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\win64\aces.exe

FirewallRules: [UDP Query User{292C3100-C581-45EB-8394-71A8469C79E8}E:\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\win64\aces.exe

FirewallRules: [{8C631E54-F786-4DE5-98EF-704A7431E5EE}] => (Allow) E:\Steam\steamapps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{7B1B2359-C0B8-4D7C-9DBB-A7F9B803257A}] => (Allow) E:\Steam\steamapps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [TCP Query User{87501EA1-835F-4E4D-8840-4E97D1269329}E:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) E:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [UDP Query User{4547F073-19C3-44F7-A481-A6356FB62468}E:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) E:\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [{CE33F54A-ECA8-4B8D-BC8B-E53E5A6BECDA}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{F3EE0706-436C-4795-9470-ED7D58B8B951}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{08B8AF9B-B29D-4A5F-8CE5-9131B7095E82}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe

FirewallRules: [{1B3C8950-E70F-4542-8843-555B2979E9E3}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe

FirewallRules: [{927B54C8-057B-427E-BF2A-E86F766AA670}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{39D8E834-1D4E-4419-AD2F-666FB7A705DA}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [TCP Query User{E90A876E-46AE-4A9C-BCC9-DD2ABBB4C028}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [UDP Query User{04CD541E-D818-4A4B-8141-492A6F98C8DF}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [TCP Query User{8FD40345-550F-4744-9182-A8EA24398D4F}E:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) E:\steam\steamapps\common\arma 3\arma3.exe

FirewallRules: [UDP Query User{96D05A35-2319-40C9-9C8C-80FB2AAF9F27}E:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) E:\steam\steamapps\common\arma 3\arma3.exe

FirewallRules: [{493F1D5B-0B34-48A1-8190-A89DA8FB62C2}] => (Allow) C:\PROGRA~2\netis\USBWIR~1\RtWlan.exe

FirewallRules: [{A98B9984-9D31-492E-B89C-AE4C29759BAE}] => (Allow) LPort=1542

FirewallRules: [{D352C62C-A409-4E75-B812-6299483E22B2}] => (Allow) LPort=1542

FirewallRules: [{0D042455-9B79-437A-911E-E31F687F2107}] => (Allow) LPort=53

FirewallRules: [{991D5097-7801-4DF1-99AA-C5B5C69DBC2C}] => (Allow) LPort=67

FirewallRules: [{1217A497-4ED3-4388-9550-D70E8E1AEEFD}] => (Allow) LPort=68

FirewallRules: [{3C13C77C-4B36-45C1-B71C-E2DBA82F13AD}] => (Allow) LPort=53

FirewallRules: [{7C073538-A809-440D-8610-B3E3E25A9A00}] => (Allow) LPort=53

FirewallRules: [{E5C2B0D1-2800-4B2A-8D1E-7D2D25F2B4BE}] => (Allow) C:\Program Files (x86)\netis\USB Wireless LAN Utility\Rtldhcp.exe

FirewallRules: [{F3AA42C3-888C-4D66-9FB6-6B0515DBB5F0}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe

FirewallRules: [{28625B73-81AF-4947-A9C5-757362167B25}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe

FirewallRules: [TCP Query User{4B3A4EBE-6F61-45EE-AED2-04894CC05C3E}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe

FirewallRules: [UDP Query User{A0A184E7-3CF2-4391-8C6B-CDC0505E8CF8}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{0242F17B-F254-4748-AE8F-34A178A53E2A}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [UDP Query User{2B9049CE-56FD-4221-9154-FEC09903886A}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe

FirewallRules: [TCP Query User{5B7D6ED2-48DC-46D3-B8E4-4E90C64795A1}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe

FirewallRules: [UDP Query User{0B251693-8F8B-4256-89F2-E8B46F89E799}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe

FirewallRules: [TCP Query User{FF2B5CC7-36A3-4B2A-8E51-0FDD3F24667E}C:\users\quobble\desktop\paradox interactive\hearts of iron doomsday\hoi2.exe] => (Allow) C:\users\quobble\desktop\paradox interactive\hearts of iron doomsday\hoi2.exe

FirewallRules: [UDP Query User{E835F477-5FB6-4392-BF4E-D603A5AD40C4}C:\users\quobble\desktop\paradox interactive\hearts of iron doomsday\hoi2.exe] => (Allow) C:\users\quobble\desktop\paradox interactive\hearts of iron doomsday\hoi2.exe

FirewallRules: [TCP Query User{6F997191-28D0-4AF0-B29D-8D8D160DCB86}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [UDP Query User{70B0951B-019E-41A5-AA0E-E557C75B10BB}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [{13C5B5D2-E4BE-4FA8-9C7C-1E86D4F06C43}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{C964CB4E-FC9A-428E-A737-7691730D7393}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{61DB0BBE-3A40-4FC3-A49C-61A0D3F74145}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{8C70B64A-8E7C-4F8D-8761-CC384D06F52D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [TCP Query User{9286C39F-1F25-40BD-88E1-151FEF4DEEC7}C:\ssd games\project reality bf2\prbf2.exe] => (Allow) C:\ssd games\project reality bf2\prbf2.exe

FirewallRules: [UDP Query User{093F4AEF-943F-4BD7-A0B1-79C6D499859C}C:\ssd games\project reality bf2\prbf2.exe] => (Allow) C:\ssd games\project reality bf2\prbf2.exe

FirewallRules: [{A54FB1E2-E62F-4706-A5BB-D29E1B07A79A}] => (Allow) LPort=8317

FirewallRules: [{FAF1B2FC-8812-4AE3-B82E-78FFC7C6E258}] => (Allow) E:\Steam\steamapps\common\dayofinfamy\dayofinfamy.exe

FirewallRules: [{DE8B74ED-69E2-4A0A-A50C-31B265A07BEE}] => (Allow) E:\Steam\steamapps\common\dayofinfamy\dayofinfamy.exe

FirewallRules: [{F7CB2B4D-B11B-467D-8438-053B58617FB6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{0789E7B0-5227-4329-A70E-79AACE405142}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{AE18E23A-72CA-4495-ADA5-43632ABC03ED}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{B2A40405-FCC5-4B05-8C2D-71ADE4B5AF5E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{9C9F2EAB-38DA-48E7-87C4-6759D306AAD8}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\Fallout 4\Fallout4Launcher.exe

FirewallRules: [{86FFE561-40E1-46B2-92BD-D8F7CFB581D5}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\Fallout 4\Fallout4Launcher.exe

FirewallRules: [TCP Query User{05FF1E5F-5885-4CB7-8FC0-71B931875789}E:\messenger\xchat\xchat.exe] => (Allow) E:\messenger\xchat\xchat.exe

FirewallRules: [UDP Query User{C5519DC9-7A1E-4406-8E72-3D5A1BC91981}E:\messenger\xchat\xchat.exe] => (Allow) E:\messenger\xchat\xchat.exe

FirewallRules: [{F434D91E-D1BC-47C4-8078-1246DD52FEB2}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe

FirewallRules: [{61BD1C89-8DF3-4EB6-9931-3454FC9335D1}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe

FirewallRules: [TCP Query User{EC662CD0-2D96-4A91-861C-236E673843D5}E:\steam\steamapps\common\war thunder\win32\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\win32\aces.exe

FirewallRules: [UDP Query User{5B83337A-2A51-4269-9D2D-4775219B2C7F}E:\steam\steamapps\common\war thunder\win32\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\win32\aces.exe

FirewallRules: [{A5DDD29B-F591-4BE4-A780-498E24F69008}] => (Block) E:\steam\steamapps\common\war thunder\win32\aces.exe

FirewallRules: [{5DD6A938-3B0E-4DA5-930E-7D39B80B5B44}] => (Block) E:\steam\steamapps\common\war thunder\win32\aces.exe

FirewallRules: [{7FF2EF25-828B-43E6-9A1E-9663E82A2461}] => (Allow) E:\Steam\steamapps\common\RimWorld\RimWorldWin.exe

FirewallRules: [{533DBCC0-89DB-4E27-867E-45779770A1CF}] => (Allow) E:\Steam\steamapps\common\RimWorld\RimWorldWin.exe

FirewallRules: [{3CF48A90-44AE-4D47-A4EF-8F36F8C4028C}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{204C7DFF-66A0-4254-9266-B71E17CF0869}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B94D6CDA-E659-4707-9C52-124933E6C9ED}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe

FirewallRules: [{AD0FD1FD-A68F-4E34-A3A5-59A911C6081D}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe

FirewallRules: [{AD90CAF1-1867-4325-AB1A-6DB991733779}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe

FirewallRules: [{96487868-D077-4F97-B44E-6BCB99CC1F6B}] => (Allow) C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe

FirewallRules: [{416EAACD-B0E8-4D23-95C1-4BDE315201A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{E7E4B3E6-69F0-4243-ADA9-6AF7344EBB94}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

StandardProfile\AuthorizedApplications: [E:\Messenger\xchat\xchat.exe] => Enabled:XChat IRC Client
 

==================== Wiederherstellungspunkte =========================
 

16-11-2016 09:51:17 Geplanter Prüfpunkt

21-11-2016 16:27:42 Removed LogMeIn Hamachi

22-11-2016 22:27:47 ASU_MSI_TRAN

23-11-2016 11:38:33 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/23/2016 03:00:01 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )

Description: Ein Problem hat die Konsolidierung von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit in Dateien verhindert, die an Microsoft gesendet werden sollten (Fehler 80070005).
 

Error: (11/23/2016 12:15:25 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: System.Data.Entity, Version=3.5.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil . Error code = 0x80070020
 

Error: (11/23/2016 11:54:58 AM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )

Description: Ein Problem hat die Konsolidierung von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit in Dateien verhindert, die an Microsoft gesendet werden sollten (Fehler 80070005).
 

Error: (11/23/2016 11:51:20 AM) (Source: Steam Client Service) (EventID: 1) (User: )

Description: Error: Failed to add firewall exception for E:\Steam\bin\steamwebhelper.exe
 

Error: (11/23/2016 11:12:58 AM) (Source: Steam Client Service) (EventID: 1) (User: )

Description: Error: Failed to add firewall exception for E:\Steam\bin\steamwebhelper.exe
 

Error: (11/22/2016 02:26:06 PM) (Source: Steam Client Service) (EventID: 1) (User: )

Description: Error: Failed to add firewall exception for E:\Steam\bin\steamwebhelper.exe
 

Error: (11/22/2016 02:25:50 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Name des fehlerhaften Moduls: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00029335

ID des fehlerhaften Prozesses: 0x7ec

Startzeit der fehlerhaften Anwendung: 0x01d244c3d8ba632c

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Berichtskennung: 2ece3a44-b0b7-11e6-b87f-bc5ff4f71c63
 

Error: (11/20/2016 02:51:10 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Name des fehlerhaften Moduls: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00029335

ID des fehlerhaften Prozesses: 0x824

Startzeit der fehlerhaften Anwendung: 0x01d24331e7c114e7

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Berichtskennung: 64158d19-af28-11e6-9d10-bc5ff4f71c63
 

Error: (11/19/2016 04:25:44 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Name des fehlerhaften Moduls: RtWlan.exe, Version: 700.1670.703.2013, Zeitstempel: 0x51d3f3e8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00029335

ID des fehlerhaften Prozesses: 0x424

Startzeit der fehlerhaften Anwendung: 0x01d24277714b9dc2

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtWlan.exe

Berichtskennung: 6fe9b669-ae6c-11e6-8449-bc5ff4f71c63
 

Error: (11/18/2016 03:56:45 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2

Name des fehlerhaften Moduls: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00037b59

ID des fehlerhaften Prozesses: 0x1450

Startzeit der fehlerhaften Anwendung: 0x01d24189fdb3ae72

Pfad der fehlerhaften Anwendung: E:\Steam\bin\cef\cef.winxp\steamwebhelper.exe

Pfad des fehlerhaften Moduls: E:\Steam\bin\cef\cef.winxp\steamwebhelper.exe

Berichtskennung: 38f5fe07-ad9f-11e6-b204-bc5ff4f71c63
 
 

Systemfehler:

=============

Error: (11/23/2016 11:48:00 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst RunSwUSB erreicht.
 

Error: (11/23/2016 11:47:30 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Realtek8723AU erreicht.
 

Error: (11/22/2016 02:25:09 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)

Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.
 

Error: (11/22/2016 02:25:09 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)

Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.
 

Error: (11/22/2016 02:19:00 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (11/22/2016 02:19:00 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (11/22/2016 02:19:00 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 20.
 

Error: (11/22/2016 02:17:28 PM) (Source: DCOM) (EventID: 10016) (User: Quobble-PC)

Description: Durch die Berechtigungseinstellungen (Computerstandard) wird der SID (S-1-5-21-2592108441-3361246110-3147240245-1000) für Benutzer Quobble-PC\Quobble von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Aktivierung (Lokal) für die COM-Serveranwendung mit CLSID 

{9BA05972-F6A8-11CF-A442-00A0C90A8F39}

 und APPID 

{9BA05972-F6A8-11CF-A442-00A0C90A8F39}

 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.
 

Error: (11/15/2016 04:37:28 PM) (Source: volsnap) (EventID: 25) (User: )

Description: Die Schattenkopien von Volume "C:" wurden gelöscht, weil der Schattenkopiespeicher nicht rechtzeitig vergrößert wurde. Sie sollten die E/A-Last auf dem System verringern oder ein Schattenkopie-Speichervolume, von dem keine Schattenkopie erstellt wird, auswählen.
 

Error: (11/15/2016 04:09:05 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "DHCP-Client" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

Es wird bereits eine Instanz des Dienstes ausgeführt.
 
 

CodeIntegrity:

===================================

  Date: 2016-09-09 18:46:40.550

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 14:44:30.292

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\EasyAntiCheat.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 13:59:48.356

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 13:59:48.278

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 04:16:58.173

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 04:13:56.278

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 04:13:56.216

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 04:07:33.325

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-09 04:07:33.262

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2016-09-08 13:12:19.243

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 24%

Installierter physikalischer RAM: 12218.59 MB

Verfügbarer physikalischer RAM: 9164.32 MB

Summe virtueller Speicher: 24435.36 MB

Verfügbarer virtueller Speicher: 20798.79 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:232.79 GB) (Free:76.65 GB) NTFS

Drive e: (HDD) (Fixed) (Total:232.88 GB) (Free:49.58 GB) NTFS

Drive f: (SyS) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 65E01175)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 27B9D688)

Partition 1: (Not Active) - (Size=232.9 GB) - (Type=OF Extended)
 

==================== Ende von Addition.txt ============================

Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

:D

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Code:

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 6.1.7601 Windows 7 Service Pack 1 x64
 

Account is Administrative
 

Internet Explorer version: 11.0.9600.18524
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED, F:\ DRIVE_FIXED

CPU speed: 3.399000 GHz

Memory total: 12812120064, free: 7914139648
 

Downloaded database version: v2016.11.23.19

Downloaded database version: v2016.11.20.01

Downloaded database version: v2016.09.21.01

=======================================

Initializing...

Driver version: 0.3.0.4

------------ Kernel report ------------

     11/24/2016 01:29:27

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kdcom.dll

\SystemRoot\system32\mcupdate_GenuineIntel.dll

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\CLFS.SYS

\SystemRoot\system32\CI.dll

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\system32\drivers\ACPI.sys

\SystemRoot\system32\drivers\WMILIB.SYS

\SystemRoot\system32\drivers\msisadrv.sys

\SystemRoot\system32\drivers\pci.sys

\SystemRoot\system32\drivers\vdrvroot.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\system32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\system32\drivers\vmbus.sys

\SystemRoot\system32\drivers\winhv.sys

\SystemRoot\system32\drivers\atapi.sys

\SystemRoot\system32\drivers\ataport.SYS

\SystemRoot\system32\drivers\msahci.sys

\SystemRoot\system32\drivers\PCIIDEX.SYS

\SystemRoot\system32\drivers\amdxata.sys

\SystemRoot\system32\drivers\fltmgr.sys

\SystemRoot\system32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\Ntfs.sys

\SystemRoot\System32\Drivers\msrpc.sys

\SystemRoot\System32\Drivers\ksecdd.sys

\SystemRoot\System32\Drivers\cng.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\system32\drivers\vmstorfl.sys

\SystemRoot\system32\drivers\volsnap.sys

\SystemRoot\System32\Drivers\spldr.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\System32\drivers\hwpolicy.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\system32\drivers\disk.sys

\SystemRoot\system32\drivers\CLASSPNP.SYS

\SystemRoot\system32\DRIVERS\cdrom.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\vga.sys

\SystemRoot\System32\drivers\VIDEOPRT.SYS

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\DRIVERS\RDPCDD.sys

\SystemRoot\system32\drivers\rdpencdd.sys

\SystemRoot\system32\drivers\rdprefmp.sys

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\SystemRoot\system32\drivers\afd.sys

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\DRIVERS\wfplwf.sys

\SystemRoot\system32\DRIVERS\pacer.sys

\SystemRoot\system32\DRIVERS\vwififlt.sys

\SystemRoot\system32\DRIVERS\netbios.sys

\SystemRoot\system32\DRIVERS\serial.sys

\SystemRoot\system32\DRIVERS\wanarp.sys

\SystemRoot\system32\drivers\termdd.sys

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\system32\drivers\mssmbios.sys

\SystemRoot\System32\drivers\discache.sys

\SystemRoot\system32\drivers\csc.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\DRIVERS\blbdrive.sys

\SystemRoot\system32\DRIVERS\tunnel.sys

\SystemRoot\system32\DRIVERS\nvlddmkm.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\dxgmms1.sys

\SystemRoot\system32\DRIVERS\HDAudBus.sys

\SystemRoot\system32\DRIVERS\HECIx64.sys

\SystemRoot\system32\DRIVERS\e1d62x64.sys

\SystemRoot\system32\drivers\usbehci.sys

\SystemRoot\system32\drivers\USBPORT.SYS

\SystemRoot\system32\DRIVERS\serenum.sys

\SystemRoot\system32\drivers\wmiacpi.sys

\SystemRoot\system32\DRIVERS\intelppm.sys

\SystemRoot\system32\drivers\CompositeBus.sys

\SystemRoot\system32\DRIVERS\AgileVpn.sys

\SystemRoot\system32\DRIVERS\rasl2tp.sys

\SystemRoot\system32\DRIVERS\ndistapi.sys

\SystemRoot\system32\DRIVERS\ndiswan.sys

\SystemRoot\system32\DRIVERS\raspppoe.sys

\SystemRoot\system32\DRIVERS\raspptp.sys

\SystemRoot\system32\DRIVERS\rassstp.sys

\SystemRoot\system32\DRIVERS\rdpbus.sys

\SystemRoot\system32\DRIVERS\kbdclass.sys

\SystemRoot\system32\DRIVERS\mouclass.sys

\SystemRoot\system32\DRIVERS\dtlitescsibus.sys

\SystemRoot\system32\drivers\swenum.sys

\SystemRoot\system32\drivers\ks.sys

\SystemRoot\system32\drivers\LGBusEnum.sys

\SystemRoot\system32\drivers\LGJoyXlCore.sys

\SystemRoot\system32\drivers\umbus.sys

\SystemRoot\system32\drivers\nvvad64v.sys

\SystemRoot\system32\drivers\portcls.sys

\SystemRoot\system32\drivers\drmk.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\system32\DRIVERS\dtliteusbbus.sys

\SystemRoot\system32\DRIVERS\usbhub.sys

\SystemRoot\System32\Drivers\NDProxy.SYS

\SystemRoot\system32\drivers\nvhda64v.sys

\SystemRoot\system32\drivers\HdAudio.sys

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\Drivers\dump_dumpata.sys

\SystemRoot\System32\Drivers\dump_msahci.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\drivers\Dxapi.sys

\SystemRoot\system32\DRIVERS\monitor.sys

\SystemRoot\system32\DRIVERS\usbccgp.sys

\SystemRoot\system32\DRIVERS\USBD.SYS

\SystemRoot\system32\drivers\usbaudio.sys

\SystemRoot\system32\drivers\ladfGSS.sys

\SystemRoot\system32\DRIVERS\hidusb.sys

\SystemRoot\system32\DRIVERS\HIDCLASS.SYS

\SystemRoot\system32\DRIVERS\HIDPARSE.SYS

\SystemRoot\system32\DRIVERS\LGSHidFilt.Sys

\SystemRoot\system32\DRIVERS\mouhid.sys

\SystemRoot\system32\DRIVERS\kbdhid.sys

\SystemRoot\system32\DRIVERS\Alpham164.sys

\SystemRoot\system32\DRIVERS\Alpham264.sys

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\system32\drivers\luafv.sys

\SystemRoot\system32\DRIVERS\lltdio.sys

\SystemRoot\system32\DRIVERS\nwifi.sys

\SystemRoot\system32\DRIVERS\ndisuio.sys

\SystemRoot\system32\DRIVERS\rspndr.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\System32\drivers\mpsdrv.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\SystemRoot\system32\DRIVERS\atksgt.sys

\??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys

\SystemRoot\system32\DRIVERS\lirsgt.sys

\SystemRoot\sysWOW64\drivers\npf_devolo.sys

\SystemRoot\system32\drivers\peauth.sys

\??\C:\Windows\SysWOW64\speedfan.sys

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\System32\DRIVERS\srv.sys

\SystemRoot\system32\drivers\LGVirHid.sys

\SystemRoot\system32\drivers\qwavedrv.sys

\??\C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\WinRing0\WinRing0x64.sys

\SystemRoot\system32\DRIVERS\asyncmac.sys

\??\C:\Windows\system32\drivers\mbamchameleon.sys

\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys

\Windows\System32\ntdll.dll

\Windows\System32\smss.exe

\Windows\System32\apisetschema.dll

\Windows\System32\autochk.exe

\Windows\System32\wininet.dll

\Windows\System32\imm32.dll

\Windows\System32\iertutil.dll

\Windows\System32\ole32.dll

\Windows\System32\sechost.dll

\Windows\System32\shlwapi.dll

\Windows\System32\lpk.dll

\Windows\System32\psapi.dll

\Windows\System32\setupapi.dll

\Windows\System32\kernel32.dll

\Windows\System32\urlmon.dll

\Windows\System32\difxapi.dll

\Windows\System32\advapi32.dll

\Windows\System32\ws2_32.dll

\Windows\System32\nsi.dll

\Windows\System32\Wldap32.dll

\Windows\System32\comdlg32.dll

\Windows\System32\gdi32.dll

\Windows\System32\usp10.dll

\Windows\System32\rpcrt4.dll

\Windows\System32\msvcrt.dll

\Windows\System32\shell32.dll

\Windows\System32\user32.dll

\Windows\System32\msctf.dll

\Windows\System32\imagehlp.dll

\Windows\System32\oleaut32.dll

\Windows\System32\clbcatq.dll

\Windows\System32\normaliz.dll

\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

\Windows\System32\devobj.dll

\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

\Windows\System32\cfgmgr32.dll

\Windows\System32\userenv.dll

\Windows\System32\crypt32.dll

\Windows\System32\KernelBase.dll

\Windows\System32\wintrust.dll

\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

\Windows\System32\comctl32.dll

\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

\Windows\System32\profapi.dll

\Windows\System32\msasn1.dll

\Windows\SysWOW64\normaliz.dll

----------- End -----------

Done!
 

Scan started

Database versions:

  main:    v2016.11.23.19

  rootkit: v2016.11.20.01
 

<<<2>>>

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xfffffa800a95c060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xfffffa800a95cb90, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xfffffa800a95c060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

DevicePointer: 0xfffffa800a250060, DeviceName: \Device\Ide\IdeDeviceP1T0L0-1\, DriverName: \Driver\atapi\

------------ End ----------

Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...

Done!

Drive 0

This is a System drive

Scanning MBR on drive 0...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 65E01175
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 204800

    Partition is bootable

    Partition file system is NTFS
 

    Partition 1 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 206848  Numsec = 488187904

    Partition is not bootable

    Partition file system is NTFS
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 250059350016 bytes

Sector size: 512 bytes
 

Done!

Physical Sector Size: 512

Drive: 1, DevicePointer: 0xfffffa800a95d060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xfffffa800a95db90, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xfffffa800a95d060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

DevicePointer: 0xfffffa800a380060, DeviceName: \Device\Ide\IdeDeviceP2T0L0-2\, DriverName: \Driver\atapi\

------------ End ----------

Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

Drive 1

Scanning MBR on drive 1...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 27B9D688
 

Partition information:
 

    Partition 0 type is Extended with LBA (0xf)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 16065  Numsec = 488376000

    Partition is not bootable
 

    Partition 1 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0

    Partition is not bootable
 

Disk Size: 250059350016 bytes

Sector size: 512 bytes
 

Done!

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.79" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.7C" is compressed (flags = 1)

File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-ADADAC53B5D3352795C5B906A2EE2E55DA9A83E1.bin.83" is compressed (flags = 1)

Scan finished

=======================================
 
 

Removal queue found; removal started

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-206848-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-16065-i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...

Removal finished

Code:

01:41:18.0600 0x1690  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01

01:41:24.0812 0x1690  ============================================================

01:41:24.0812 0x1690  Current date / time: 2016/11/24 01:41:24.0812

01:41:24.0812 0x1690  SystemInfo:

01:41:24.0812 0x1690  

01:41:24.0812 0x1690  OS Version: 6.1.7601 ServicePack: 1.0

01:41:24.0812 0x1690  Product type: Workstation

01:41:24.0812 0x1690  ComputerName: QUOBBLE-PC

01:41:24.0812 0x1690  UserName: Quobble

01:41:24.0812 0x1690  Windows directory: C:\Windows

01:41:24.0812 0x1690  System windows directory: C:\Windows

01:41:24.0812 0x1690  Running under WOW64

01:41:24.0812 0x1690  Processor architecture: Intel x64

01:41:24.0812 0x1690  Number of processors: 4

01:41:24.0812 0x1690  Page size: 0x1000

01:41:24.0812 0x1690  Boot type: Normal boot

01:41:24.0812 0x1690  CodeIntegrityOptions = 0x00000001

01:41:24.0812 0x1690  ============================================================

01:41:24.0979 0x1690  KLMD registered as C:\Windows\system32\drivers\90865563.sys

01:41:24.0979 0x1690  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x1

01:41:25.0007 0x1690  System UUID: {0958E933-52E2-FB39-70E1-28F968C76476}

01:41:25.0179 0x1690  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

01:41:25.0190 0x1690  Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

01:41:25.0193 0x1690  ============================================================

01:41:25.0193 0x1690  \Device\Harddisk0\DR0:

01:41:25.0193 0x1690  MBR partitions:

01:41:25.0193 0x1690  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

01:41:25.0193 0x1690  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D192800

01:41:25.0193 0x1690  \Device\Harddisk1\DR1:

01:41:25.0193 0x1690  MBR partitions:

01:41:25.0198 0x1690  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F00, BlocksNum 0x1D1C0681

01:41:25.0198 0x1690  ============================================================

01:41:25.0199 0x1690  C: <-> \Device\Harddisk0\DR0\Partition2

01:41:25.0213 0x1690  E: <-> \Device\Harddisk1\DR1\Partition1

01:41:25.0213 0x1690  F: <-> \Device\Harddisk0\DR0\Partition1

01:41:25.0213 0x1690  ============================================================

01:41:25.0213 0x1690  Initialize success

01:41:25.0213 0x1690  ============================================================

01:41:29.0790 0x1368  ============================================================

01:41:29.0790 0x1368  Scan started

01:41:29.0790 0x1368  Mode: Manual; 

01:41:29.0790 0x1368  ============================================================

01:41:29.0790 0x1368  KSN ping started

01:41:33.0043 0x1368  KSN ping finished: true

01:41:33.0566 0x1368  ================ Scan system memory ========================

01:41:33.0566 0x1368  System memory - ok

01:41:33.0566 0x1368  ================ Scan services =============================

01:41:33.0588 0x1368  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

01:41:33.0594 0x1368  1394ohci - ok

01:41:33.0607 0x1368  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

01:41:33.0614 0x1368  ACPI - ok

01:41:33.0618 0x1368  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

01:41:33.0618 0x1368  AcpiPmi - ok

01:41:33.0633 0x1368  [ 9BAF21BA600EC4E5FD9A66AD3E4FF5A6, 5E02E5E80557F6EC870EB7CC2DE95169D4225B87A2FE7E796736205F51C15816 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

01:41:33.0636 0x1368  AdobeFlashPlayerUpdateSvc - ok

01:41:33.0647 0x1368  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

01:41:33.0655 0x1368  adp94xx - ok

01:41:33.0665 0x1368  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

01:41:33.0670 0x1368  adpahci - ok

01:41:33.0677 0x1368  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

01:41:33.0680 0x1368  adpu320 - ok

01:41:33.0686 0x1368  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

01:41:33.0688 0x1368  AeLookupSvc - ok

01:41:33.0700 0x1368  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys

01:41:33.0706 0x1368  AFD - ok

01:41:33.0710 0x1368  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

01:41:33.0711 0x1368  agp440 - ok

01:41:33.0715 0x1368  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

01:41:33.0716 0x1368  ALG - ok

01:41:33.0719 0x1368  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

01:41:33.0719 0x1368  aliide - ok

01:41:33.0724 0x1368  [ B3E801135E0C81733542C14D9AA8120A, 69A19C73BBB942DDEBD079EF924ED1AEFC3516867569618D2FBBD1CD831204C2 ] Alpham1         C:\Windows\system32\DRIVERS\Alpham164.sys

01:41:33.0725 0x1368  Alpham1 - ok

01:41:33.0727 0x1368  [ 6493983FEDBC49D9112703ECE9B251FE, E5D0EEBA8C8D9C02CC4109C86ABC6375E5CF79F6549917C011238FD2DD78BF71 ] Alpham2         C:\Windows\system32\DRIVERS\Alpham264.sys

01:41:33.0728 0x1368  Alpham2 - ok

01:41:33.0730 0x1368  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

01:41:33.0731 0x1368  amdide - ok

01:41:33.0735 0x1368  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

01:41:33.0736 0x1368  AmdK8 - ok

01:41:33.0739 0x1368  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

01:41:33.0743 0x1368  AmdPPM - ok

01:41:33.0746 0x1368  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

01:41:33.0749 0x1368  amdsata - ok

01:41:33.0756 0x1368  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

01:41:33.0759 0x1368  amdsbs - ok

01:41:33.0763 0x1368  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

01:41:33.0763 0x1368  amdxata - ok

01:41:33.0766 0x1368  [ FCE5C79717A487BDC71F3DEC78A684CA, F5520F112A4EBDD10444AA5E9FDB9125219FCF768FEB95AB608BC84D60136816 ] AppID           C:\Windows\system32\drivers\appid.sys

01:41:33.0768 0x1368  AppID - ok

01:41:33.0771 0x1368  [ 8921E1D8AE5171691F186A7C5B98B630, 4A37313BB94D4B49D0294C9439AD0793DE328F9F4DA1C47E34E6ACEA46AF6E14 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

01:41:33.0772 0x1368  AppIDSvc - ok

01:41:33.0777 0x1368  [ B46099A534B7989D80330EA82D9092D6, 0CAC09732FAFAE805E55428B6BE001DCC39EBC599539FADE7AA68571A8A554E5 ] Appinfo         C:\Windows\System32\appinfo.dll

01:41:33.0779 0x1368  Appinfo - ok

01:41:33.0785 0x1368  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll

01:41:33.0789 0x1368  AppMgmt - ok

01:41:33.0794 0x1368  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys

01:41:33.0796 0x1368  arc - ok

01:41:33.0799 0x1368  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

01:41:33.0801 0x1368  arcsas - ok

01:41:33.0811 0x1368  [ 1918931DAC607E14BAACCC03A24334A1, 2EFF0241CCDF2BC4579F0778BEC0392703BE7134F30483308A312384E823393B ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

01:41:33.0813 0x1368  aspnet_state - ok

01:41:33.0816 0x1368  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

01:41:33.0817 0x1368  AsyncMac - ok

01:41:33.0821 0x1368  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

01:41:33.0821 0x1368  atapi - ok

01:41:33.0827 0x1368  [ B4BDE3F758A34658A37DFED3D9783CD8, BC9F6B9BDD639457894DE0F596AB3A655374E078796762FE5E8E5414F0481208 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys

01:41:33.0828 0x1368  atksgt - ok

01:41:33.0845 0x1368  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

01:41:33.0854 0x1368  AudioEndpointBuilder - ok

01:41:33.0865 0x1368  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

01:41:33.0873 0x1368  AudioSrv - ok

01:41:33.0879 0x1368  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

01:41:33.0881 0x1368  AxInstSV - ok

01:41:33.0893 0x1368  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

01:41:33.0900 0x1368  b06bdrv - ok

01:41:33.0908 0x1368  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

01:41:33.0914 0x1368  b57nd60a - ok

01:41:33.0919 0x1368  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

01:41:33.0921 0x1368  BDESVC - ok

01:41:33.0924 0x1368  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

01:41:33.0924 0x1368  Beep - ok

01:41:33.0947 0x1368  [ AA330E094D81048411B2D9209BBD73A8, C5A78E38F294D80B76D53D18580B2EB5C917BAC8070A4383AE077C57AECD9848 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe

01:41:33.0967 0x1368  BEService - ok

01:41:33.0983 0x1368  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

01:41:33.0994 0x1368  BFE - ok

01:41:34.0011 0x1368  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

01:41:34.0026 0x1368  BITS - ok

01:41:34.0029 0x1368  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

01:41:34.0030 0x1368  blbdrive - ok

01:41:34.0035 0x1368  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

01:41:34.0037 0x1368  bowser - ok

01:41:34.0039 0x1368  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

01:41:34.0040 0x1368  BrFiltLo - ok

01:41:34.0042 0x1368  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

01:41:34.0043 0x1368  BrFiltUp - ok

01:41:34.0047 0x1368  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

01:41:34.0049 0x1368  Browser - ok

01:41:34.0057 0x1368  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

01:41:34.0061 0x1368  Brserid - ok

01:41:34.0065 0x1368  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

01:41:34.0066 0x1368  BrSerWdm - ok

01:41:34.0068 0x1368  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

01:41:34.0069 0x1368  BrUsbMdm - ok

01:41:34.0072 0x1368  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

01:41:34.0073 0x1368  BrUsbSer - ok

01:41:34.0075 0x1368  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

01:41:34.0077 0x1368  BTHMODEM - ok

01:41:34.0081 0x1368  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

01:41:34.0083 0x1368  bthserv - ok

01:41:34.0086 0x1368  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

01:41:34.0088 0x1368  cdfs - ok

01:41:34.0094 0x1368  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

01:41:34.0096 0x1368  cdrom - ok

01:41:34.0099 0x1368  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

01:41:34.0100 0x1368  CertPropSvc - ok

01:41:34.0103 0x1368  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

01:41:34.0104 0x1368  circlass - ok

01:41:34.0113 0x1368  [ 3891EA60B84EFE115CE070311FA83BBB, 2A30FB15C8D0C69289C087DFE1F822AB4F9C3F091DBB3FD2E99DC5B562E90DFB ] CLFS            C:\Windows\system32\CLFS.sys

01:41:34.0117 0x1368  CLFS - ok

01:41:34.0122 0x1368  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

01:41:34.0124 0x1368  clr_optimization_v2.0.50727_32 - ok

01:41:34.0128 0x1368  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

01:41:34.0130 0x1368  clr_optimization_v2.0.50727_64 - ok

01:41:34.0137 0x1368  [ FEB23309B5452EBACD52D3E6AC8B012D, 6D2D6514DA97AD8B67FC4CEEF7C904883340048055A2FB985BCAB7C475970299 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

01:41:34.0139 0x1368  clr_optimization_v4.0.30319_32 - ok

01:41:34.0143 0x1368  [ BF17E3D9E51517A03CE9938E7641F3D8, 5AB4FA6157354F275A9996BE416A88F6BA6BF0A5E89A351703792394BF3B373D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

01:41:34.0146 0x1368  clr_optimization_v4.0.30319_64 - ok

01:41:34.0149 0x1368  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

01:41:34.0149 0x1368  CmBatt - ok

01:41:34.0153 0x1368  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

01:41:34.0153 0x1368  cmdide - ok

01:41:34.0163 0x1368  [ 3323F76352B0AF14B2CDC4DFBF3E980A, F8E3C3508C37E647497B6889F26819B1DB30275F48A994D1BBFBAA9454E5FD70 ] CNG             C:\Windows\system32\Drivers\cng.sys

01:41:34.0171 0x1368  CNG - ok

01:41:34.0175 0x1368  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

01:41:34.0175 0x1368  Compbatt - ok

01:41:34.0178 0x1368  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

01:41:34.0179 0x1368  CompositeBus - ok

01:41:34.0181 0x1368  COMSysApp - ok

01:41:34.0186 0x1368  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

01:41:34.0187 0x1368  crcdisk - ok

01:41:34.0193 0x1368  [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc        C:\Windows\system32\cryptsvc.dll

01:41:34.0196 0x1368  CryptSvc - ok

01:41:34.0206 0x1368  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys

01:41:34.0215 0x1368  CSC - ok

01:41:34.0230 0x1368  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll

01:41:34.0241 0x1368  CscService - ok

01:41:34.0245 0x1368  dbx - ok

01:41:34.0247 0x1368  [ A8352D11F8E2F7E8FA0BD6F8EF599C61, 72B9F8B96433CCFE5CC9FB786BF976068BDDC04D39F9F3BCFA5132E61A97C3FD ] DbxSvc          C:\Windows\system32\DbxSvc.exe

01:41:34.0248 0x1368  DbxSvc - ok

01:41:34.0260 0x1368  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch      C:\Windows\system32\rpcss.dll

01:41:34.0266 0x1368  DcomLaunch - ok

01:41:34.0274 0x1368  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

01:41:34.0280 0x1368  defragsvc - ok

01:41:34.0344 0x1368  [ 0B24043732807EE3AA25389356F4DE7C, 6A9A65B38968FF704C3938BEF5E6C1226447FF4F78997473B1694EA8D3D519DF ] DevoloNetworkService C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

01:41:34.0387 0x1368  DevoloNetworkService - ok

01:41:34.0395 0x1368  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

01:41:34.0397 0x1368  DfsC - ok

01:41:34.0405 0x1368  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

01:41:34.0412 0x1368  Dhcp - ok

01:41:34.0434 0x1368  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack       C:\Windows\system32\diagtrack.dll

01:41:34.0453 0x1368  DiagTrack - ok

01:41:34.0557 0x1368  [ 7BCF721E4A1C26544E0567BE33CE43F0, 24E7BE66A8EEFE49AAF432B11AA2BD8783F6097C7FAC80F1A403036D1CF1AD7C ] Disc Soft Lite Bus Service E:\Tools\DTLiteInstaller\DAEMON Tools Lite\DiscSoftBusServiceLite.exe

01:41:34.0575 0x1368  Disc Soft Lite Bus Service - ok

01:41:34.0579 0x1368  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

01:41:34.0580 0x1368  discache - ok

01:41:34.0583 0x1368  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\Windows\system32\drivers\disk.sys

01:41:34.0585 0x1368  Disk - ok

01:41:34.0590 0x1368  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

01:41:34.0594 0x1368  Dnscache - ok

01:41:34.0601 0x1368  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

01:41:34.0605 0x1368  dot3svc - ok

01:41:34.0610 0x1368  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

01:41:34.0614 0x1368  DPS - ok

01:41:34.0617 0x1368  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

01:41:34.0617 0x1368  drmkaud - ok

01:41:34.0620 0x1368  [ 679FF716052109392D870F6A6C4A3535, BEF1784448CCA4AF1D67ED68BD0C7CFE01A7719E98CACF92C2DCBFAA916DC57E ] dtlitescsibus   C:\Windows\system32\DRIVERS\dtlitescsibus.sys

01:41:34.0621 0x1368  dtlitescsibus - ok

01:41:34.0624 0x1368  [ E23FDD696839A4790682CA66C48D3F2F, F5F0721BDA751968224E52E75D0C309A3E084C430CD98E85A55AF622D16B9A44 ] dtliteusbbus    C:\Windows\system32\DRIVERS\dtliteusbbus.sys

01:41:34.0625 0x1368  dtliteusbbus - ok

01:41:34.0643 0x1368  [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

01:41:34.0656 0x1368  DXGKrnl - ok

01:41:34.0667 0x1368  [ 73F8DE25B04A66CE3BE5D09A10DE56E6, ABA5AA50D936897CC71D710BBCF9A1B1CCCAC290FCD10A710E4471C1CDDE1093 ] e1dexpress      C:\Windows\system32\DRIVERS\e1d62x64.sys

01:41:34.0673 0x1368  e1dexpress - ok

01:41:34.0679 0x1368  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

01:41:34.0682 0x1368  EapHost - ok

01:41:34.0741 0x1368  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

01:41:34.0795 0x1368  ebdrv - ok

01:41:34.0801 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] EFS             C:\Windows\System32\lsass.exe

01:41:34.0803 0x1368  EFS - ok

01:41:34.0816 0x1368  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

01:41:34.0826 0x1368  ehRecvr - ok

01:41:34.0833 0x1368  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

01:41:34.0835 0x1368  ehSched - ok

01:41:34.0846 0x1368  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

01:41:34.0854 0x1368  elxstor - ok

01:41:34.0858 0x1368  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

01:41:34.0858 0x1368  ErrDev - ok

01:41:34.0869 0x1368  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

01:41:34.0876 0x1368  EventSystem - ok

01:41:34.0881 0x1368  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

01:41:34.0884 0x1368  exfat - ok

01:41:34.0890 0x1368  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

01:41:34.0892 0x1368  fastfat - ok

01:41:34.0908 0x1368  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe

01:41:34.0920 0x1368  Fax - ok

01:41:34.0924 0x1368  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

01:41:34.0925 0x1368  fdc - ok

01:41:34.0927 0x1368  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

01:41:34.0928 0x1368  fdPHost - ok

01:41:34.0931 0x1368  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

01:41:34.0933 0x1368  FDResPub - ok

01:41:34.0937 0x1368  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

01:41:34.0940 0x1368  FileInfo - ok

01:41:34.0943 0x1368  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

01:41:34.0944 0x1368  Filetrace - ok

01:41:34.0946 0x1368  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

01:41:34.0947 0x1368  flpydisk - ok

01:41:34.0955 0x1368  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

01:41:34.0960 0x1368  FltMgr - ok

01:41:34.0979 0x1368  [ 700A5373FA66F1DAAECBD2CFB88C73ED, D6C1C4C846BC24EB6539ECC701A456FA53BB6679C79391F5B70580D47B6CE395 ] FontCache       C:\Windows\system32\FntCache.dll

01:41:34.0996 0x1368  FontCache - ok

01:41:34.0999 0x1368  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

01:41:35.0000 0x1368  FontCache3.0.0.0 - ok

01:41:35.0005 0x1368  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

01:41:35.0006 0x1368  FsDepends - ok

01:41:35.0008 0x1368  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

01:41:35.0009 0x1368  Fs_Rec - ok

01:41:35.0015 0x1368  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

01:41:35.0018 0x1368  fvevol - ok

01:41:35.0021 0x1368  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

01:41:35.0023 0x1368  gagp30kx - ok

01:41:35.0037 0x1368  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc           C:\Windows\System32\gpsvc.dll

01:41:35.0049 0x1368  gpsvc - ok

01:41:35.0055 0x1368  [ A8FD9222E4D72596BB37DA8BE95C0BA4, 52FC3AA9F704300041E486E57FE863218E4CDF4C8EEE05CA6B99A296EFEE5737 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

01:41:35.0058 0x1368  gupdate - ok

01:41:35.0061 0x1368  [ A8FD9222E4D72596BB37DA8BE95C0BA4, 52FC3AA9F704300041E486E57FE863218E4CDF4C8EEE05CA6B99A296EFEE5737 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

01:41:35.0064 0x1368  gupdatem - ok

01:41:35.0066 0x1368  [ 15473D941C1A7C43620B1C31C13B2E89, 34A727A9521F1B82CFDEC16336FCDFC2466D9DC46784725EF41DDA63668442D9 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys

01:41:35.0067 0x1368  hamachi - ok

01:41:35.0071 0x1368  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

01:41:35.0072 0x1368  hcw85cir - ok

01:41:35.0079 0x1368  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

01:41:35.0084 0x1368  HdAudAddService - ok

01:41:35.0089 0x1368  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

01:41:35.0090 0x1368  HDAudBus - ok

01:41:35.0093 0x1368  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

01:41:35.0094 0x1368  HidBatt - ok

01:41:35.0098 0x1368  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

01:41:35.0100 0x1368  HidBth - ok

01:41:35.0103 0x1368  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

01:41:35.0104 0x1368  HidIr - ok

01:41:35.0107 0x1368  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll

01:41:35.0108 0x1368  hidserv - ok

01:41:35.0111 0x1368  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

01:41:35.0111 0x1368  HidUsb - ok

01:41:35.0116 0x1368  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

01:41:35.0118 0x1368  hkmsvc - ok

01:41:35.0124 0x1368  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

01:41:35.0128 0x1368  HomeGroupListener - ok

01:41:35.0134 0x1368  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

01:41:35.0141 0x1368  HomeGroupProvider - ok

01:41:35.0145 0x1368  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

01:41:35.0146 0x1368  HpSAMD - ok

01:41:35.0162 0x1368  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

01:41:35.0171 0x1368  HTTP - ok

01:41:35.0176 0x1368  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

01:41:35.0177 0x1368  hwpolicy - ok

01:41:35.0180 0x1368  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

01:41:35.0182 0x1368  i8042prt - ok

01:41:35.0191 0x1368  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

01:41:35.0199 0x1368  iaStorV - ok

01:41:35.0215 0x1368  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

01:41:35.0228 0x1368  idsvc - ok

01:41:35.0231 0x1368  IEEtwCollectorService - ok

01:41:35.0235 0x1368  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

01:41:35.0236 0x1368  iirsp - ok

01:41:35.0253 0x1368  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

01:41:35.0268 0x1368  IKEEXT - ok

01:41:35.0277 0x1368  [ CBF7341E55A8348C7AB01A9870C7D948, A5084DF3C6321788C88A9E6B5F43FE5BCFDBB579BDE3A4D5F55558C6D13035A5 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe

01:41:35.0279 0x1368  Intel(R) PROSet Monitoring Service - ok

01:41:35.0282 0x1368  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

01:41:35.0283 0x1368  intelide - ok

01:41:35.0286 0x1368  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

01:41:35.0287 0x1368  intelppm - ok

01:41:35.0290 0x1368  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

01:41:35.0293 0x1368  IPBusEnum - ok

01:41:35.0298 0x1368  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

01:41:35.0300 0x1368  IpFilterDriver - ok

01:41:35.0311 0x1368  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

01:41:35.0320 0x1368  iphlpsvc - ok

01:41:35.0324 0x1368  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

01:41:35.0326 0x1368  IPMIDRV - ok

01:41:35.0331 0x1368  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

01:41:35.0334 0x1368  IPNAT - ok

01:41:35.0337 0x1368  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

01:41:35.0338 0x1368  IRENUM - ok

01:41:35.0340 0x1368  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

01:41:35.0340 0x1368  isapnp - ok

01:41:35.0350 0x1368  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

01:41:35.0355 0x1368  iScsiPrt - ok

01:41:35.0359 0x1368  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

01:41:35.0360 0x1368  kbdclass - ok

01:41:35.0363 0x1368  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

01:41:35.0364 0x1368  kbdhid - ok

01:41:35.0366 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] KeyIso          C:\Windows\system32\lsass.exe

01:41:35.0367 0x1368  KeyIso - ok

01:41:35.0370 0x1368  [ DADA537418AEBB35AF6EEA3AD58B02A4, 86D483C6106F67678F72E100F9FD86660F528CFEE11835B523657C61DCA54704 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

01:41:35.0371 0x1368  KSecDD - ok

01:41:35.0376 0x1368  [ 641DA91DB8858FD9F156E6F1977AC14E, 4BCE86DDFC6E0E3D950ECFC023969F87BF1969AA0341A4CAEEBBF6E34254DB37 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

01:41:35.0379 0x1368  KSecPkg - ok

01:41:35.0386 0x1368  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

01:41:35.0387 0x1368  ksthunk - ok

01:41:35.0396 0x1368  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

01:41:35.0403 0x1368  KtmRm - ok

01:41:35.0406 0x1368  [ 35649357A0578F7E208ECCB87884C756, FEEEF17E6B1E697EEC169B0CBAFF68DA45DFADC039DD52F93C83BEB46ADA4322 ] ladfGSS         C:\Windows\system32\drivers\ladfGSS.sys

01:41:35.0407 0x1368  ladfGSS - ok

01:41:35.0412 0x1368  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll

01:41:35.0416 0x1368  LanmanServer - ok

01:41:35.0420 0x1368  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

01:41:35.0423 0x1368  LanmanWorkstation - ok

01:41:35.0426 0x1368  [ 5E7641AECAC4CFC7B4B442B461A25C83, 1F6AF4ED863C17A1A326A4CB0D289EAABFAD748A6B0A7CE40CF842694572FDB7 ] LGBusEnum       C:\Windows\system32\drivers\LGBusEnum.sys

01:41:35.0427 0x1368  LGBusEnum - ok

01:41:35.0430 0x1368  [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp      C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys

01:41:35.0431 0x1368  LGCoreTemp - ok

01:41:35.0436 0x1368  [ 7D24DEBE7BC0C01A30A9A65806B61453, 342E758AD6F88E3FA83B69F26836A9F54D1A3BE344D1D2F9C6394E085E5FCA92 ] LGJoyXlCore     C:\Windows\system32\drivers\LGJoyXlCore.sys

01:41:35.0438 0x1368  LGJoyXlCore - ok

01:41:35.0441 0x1368  [ 94AF1384A67B9FCF5651E70BC9D4C526, 9C025F7BBB5BBE9DAF3DEF2F6385CE77C8F413912C4D16930814F6D19B62B367 ] LGSHidFilt      C:\Windows\system32\DRIVERS\LGSHidFilt.Sys

01:41:35.0443 0x1368  LGSHidFilt - ok

01:41:35.0445 0x1368  [ DBEAB45BA2B47C057F3BAE5AD0654173, 9660B803F4AD4BD3427F1A24D09B2712E4DC0E25A18942984AF01750D77C118C ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys

01:41:35.0446 0x1368  LGVirHid - ok

01:41:35.0450 0x1368  [ 955982BF4421B77722196552B62E8DC2, 3732449ACDBB78E1ED8436DF153C899C28573F458FDCFE345DFA1B305D085033 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys

01:41:35.0450 0x1368  lirsgt - ok

01:41:35.0454 0x1368  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

01:41:35.0455 0x1368  lltdio - ok

01:41:35.0464 0x1368  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

01:41:35.0470 0x1368  lltdsvc - ok

01:41:35.0473 0x1368  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

01:41:35.0474 0x1368  lmhosts - ok

01:41:35.0479 0x1368  [ B78534B305C93D18CAED123E1F9346E5, 19FE198E0D7C81AAF1A00700AB85F19E37E4198EDB8A59C55D1766E03D9E060F ] LogiRegistryService C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

01:41:35.0482 0x1368  LogiRegistryService - ok

01:41:35.0487 0x1368  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

01:41:35.0489 0x1368  LSI_FC - ok

01:41:35.0494 0x1368  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

01:41:35.0496 0x1368  LSI_SAS - ok

01:41:35.0499 0x1368  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

01:41:35.0500 0x1368  LSI_SAS2 - ok

01:41:35.0504 0x1368  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

01:41:35.0506 0x1368  LSI_SCSI - ok

01:41:35.0510 0x1368  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

01:41:35.0512 0x1368  luafv - ok

01:41:35.0515 0x1368  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

01:41:35.0518 0x1368  Mcx2Svc - ok

01:41:35.0521 0x1368  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

01:41:35.0521 0x1368  megasas - ok

01:41:35.0529 0x1368  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

01:41:35.0535 0x1368  MegaSR - ok

01:41:35.0538 0x1368  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys

01:41:35.0540 0x1368  MEIx64 - ok

01:41:35.0543 0x1368  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

01:41:35.0545 0x1368  MMCSS - ok

01:41:35.0547 0x1368  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

01:41:35.0548 0x1368  Modem - ok

01:41:35.0550 0x1368  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

01:41:35.0551 0x1368  monitor - ok

01:41:35.0554 0x1368  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

01:41:35.0555 0x1368  mouclass - ok

01:41:35.0558 0x1368  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

01:41:35.0559 0x1368  mouhid - ok

01:41:35.0563 0x1368  [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

01:41:35.0565 0x1368  mountmgr - ok

01:41:35.0569 0x1368  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

01:41:35.0572 0x1368  mpio - ok

01:41:35.0576 0x1368  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

01:41:35.0577 0x1368  mpsdrv - ok

01:41:35.0593 0x1368  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

01:41:35.0607 0x1368  MpsSvc - ok

01:41:35.0612 0x1368  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

01:41:35.0614 0x1368  MRxDAV - ok

01:41:35.0618 0x1368  [ C514067DA02C938D4F96BB7769408089, 3ABA77FA2E7C6A3B07FF0E9927EA209AF5102D23137DB0F27451BAFE338D1B6D ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

01:41:35.0621 0x1368  mrxsmb - ok

01:41:35.0627 0x1368  [ 0B86690B115B3F99707F12D962015769, C60EA050FD436C774B0847F1D0B4D303473768448D59E8D275049BD9164BEC94 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

01:41:35.0632 0x1368  mrxsmb10 - ok

01:41:35.0636 0x1368  [ 8D5D3EEBCF4DABCE2B2006AF69155046, 0565DBE3B220EAEDEA6FB235CE128A1964A7F481A7987B4CCEDA9C2BFD149E98 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

01:41:35.0638 0x1368  mrxsmb20 - ok

01:41:35.0641 0x1368  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

01:41:35.0641 0x1368  msahci - ok

01:41:35.0646 0x1368  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

01:41:35.0649 0x1368  msdsm - ok

01:41:35.0653 0x1368  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

01:41:35.0655 0x1368  MSDTC - ok

01:41:35.0659 0x1368  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

01:41:35.0660 0x1368  Msfs - ok

01:41:35.0662 0x1368  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

01:41:35.0662 0x1368  mshidkmdf - ok

01:41:35.0665 0x1368  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

01:41:35.0665 0x1368  msisadrv - ok

01:41:35.0669 0x1368  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

01:41:35.0673 0x1368  MSiSCSI - ok

01:41:35.0675 0x1368  msiserver - ok

01:41:35.0677 0x1368  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

01:41:35.0678 0x1368  MSKSSRV - ok

01:41:35.0680 0x1368  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

01:41:35.0680 0x1368  MSPCLOCK - ok

01:41:35.0683 0x1368  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

01:41:35.0683 0x1368  MSPQM - ok

01:41:35.0691 0x1368  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

01:41:35.0696 0x1368  MsRPC - ok

01:41:35.0699 0x1368  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

01:41:35.0700 0x1368  mssmbios - ok

01:41:35.0702 0x1368  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

01:41:35.0703 0x1368  MSTEE - ok

01:41:35.0706 0x1368  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

01:41:35.0707 0x1368  MTConfig - ok

01:41:35.0709 0x1368  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

01:41:35.0711 0x1368  Mup - ok

01:41:35.0723 0x1368  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

01:41:35.0733 0x1368  napagent - ok

01:41:35.0740 0x1368  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

01:41:35.0745 0x1368  NativeWifiP - ok

01:41:35.0762 0x1368  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys

01:41:35.0776 0x1368  NDIS - ok

01:41:35.0779 0x1368  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

01:41:35.0780 0x1368  NdisCap - ok

01:41:35.0783 0x1368  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

01:41:35.0784 0x1368  NdisTapi - ok

01:41:35.0786 0x1368  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

01:41:35.0788 0x1368  Ndisuio - ok

01:41:35.0794 0x1368  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

01:41:35.0796 0x1368  NdisWan - ok

01:41:35.0799 0x1368  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

01:41:35.0800 0x1368  NDProxy - ok

01:41:35.0803 0x1368  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

01:41:35.0804 0x1368  NetBIOS - ok

01:41:35.0810 0x1368  [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

01:41:35.0814 0x1368  NetBT - ok

01:41:35.0817 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] Netlogon        C:\Windows\system32\lsass.exe

01:41:35.0818 0x1368  Netlogon - ok

01:41:35.0826 0x1368  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

01:41:35.0833 0x1368  Netman - ok

01:41:35.0837 0x1368  [ 1691508046941E185A040F4EC0906A16, CE0F2BA472AE0126AB92859FA96529847BAE554B40285382A1DF220FDEEF992F ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

01:41:35.0839 0x1368  NetMsmqActivator - ok

01:41:35.0842 0x1368  [ 1691508046941E185A040F4EC0906A16, CE0F2BA472AE0126AB92859FA96529847BAE554B40285382A1DF220FDEEF992F ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

01:41:35.0844 0x1368  NetPipeActivator - ok

01:41:35.0854 0x1368  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

01:41:35.0863 0x1368  netprofm - ok

01:41:35.0880 0x1368  [ 618C55B392238B9467F9113E13525C49, 304A77EF3E1E7A1738E5A4F6A911B4DF736CEF4867C6F07CA71E227048E90370 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys

01:41:35.0895 0x1368  netr28ux - ok

01:41:35.0900 0x1368  [ 1691508046941E185A040F4EC0906A16, CE0F2BA472AE0126AB92859FA96529847BAE554B40285382A1DF220FDEEF992F ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

01:41:35.0902 0x1368  NetTcpActivator - ok

01:41:35.0906 0x1368  [ 1691508046941E185A040F4EC0906A16, CE0F2BA472AE0126AB92859FA96529847BAE554B40285382A1DF220FDEEF992F ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

01:41:35.0908 0x1368  NetTcpPortSharing - ok

01:41:35.0912 0x1368  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

01:41:35.0914 0x1368  nfrd960 - ok

01:41:35.0921 0x1368  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

01:41:35.0926 0x1368  NlaSvc - ok

01:41:35.0930 0x1368  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

01:41:35.0931 0x1368  Npfs - ok

01:41:35.0942 0x1368  [ 49697C2C761ACB5C0DE99CC8FE93E95B, 02EEA7FB21D28B235A05FE0A6061170F366470EF6E45C9B21D7C8C0E7C728FC5 ] NPF_devolo      C:\Windows\sysWOW64\drivers\npf_devolo.sys

01:41:35.0943 0x1368  NPF_devolo - ok

01:41:35.0946 0x1368  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

01:41:35.0947 0x1368  nsi - ok

01:41:35.0950 0x1368  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

01:41:35.0951 0x1368  nsiproxy - ok

01:41:35.0985 0x1368  [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

01:41:36.0006 0x1368  Ntfs - ok

01:41:36.0010 0x1368  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

01:41:36.0010 0x1368  Null - ok

01:41:36.0020 0x1368  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

01:41:36.0025 0x1368  NvContainerLocalSystem - ok

01:41:36.0035 0x1368  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

01:41:36.0040 0x1368  NvContainerNetworkService - ok

01:41:36.0046 0x1368  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

01:41:36.0050 0x1368  NVHDA - ok

01:41:36.0070 0x1368  [ 0B7CFF94C247E661A9D5F7FDAB2F726B, 16D651A50347131CC6B96EB17096EFB22F9767572964E6C12CA1BF928E6C1397 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

01:41:36.0084 0x1368  NVIDIA Wireless Controller Service - ok

01:41:36.0289 0x1368  [ 04EFA8E35BFABDA5F8C13A1FD6ECC8C1, 0DDDAFD3ACE44C39DCEE595AB23A9B1F3155BFF3766FB5DA8629D1278E790DFE ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

01:41:36.0459 0x1368  nvlddmkm - ok

01:41:36.0476 0x1368  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

01:41:36.0478 0x1368  nvraid - ok

01:41:36.0483 0x1368  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

01:41:36.0486 0x1368  nvstor - ok

01:41:36.0488 0x1368  [ 5FA3A8CE5BAA23E2C9D18EA154017BC4, 6C2B0546FB9D8A4C7A747AB776BB98C8A90D2745FA0D293FA63DABBF67C7ED58 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

01:41:36.0489 0x1368  NvStreamKms - ok

01:41:36.0491 0x1368  [ 1D54A108BFAD4ED568E393518769F516, D0BE8343784DDD2B7CADFC85779CC72C78D49601E9C746D13D8134CE38DD920F ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys

01:41:36.0493 0x1368  nvvad_WaveExtensible - ok

01:41:36.0497 0x1368  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

01:41:36.0499 0x1368  nv_agp - ok

01:41:36.0502 0x1368  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

01:41:36.0504 0x1368  ohci1394 - ok

01:41:36.0526 0x1368  [ 559E102771EC599B74A19BE829D4C809, 4AF59FEFD0727BDC6BF087307EFF22EBB09B56F7B6DFFBCA9CF6A3AACBB04CA9 ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe

01:41:36.0544 0x1368  OverwolfUpdater - ok

01:41:36.0553 0x1368  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

01:41:36.0558 0x1368  p2pimsvc - ok

01:41:36.0568 0x1368  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

01:41:36.0577 0x1368  p2psvc - ok

01:41:36.0581 0x1368  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

01:41:36.0583 0x1368  Parport - ok

01:41:36.0586 0x1368  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

01:41:36.0588 0x1368  partmgr - ok

01:41:36.0593 0x1368  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\Windows\System32\pcasvc.dll

01:41:36.0596 0x1368  PcaSvc - ok

01:41:36.0602 0x1368  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

01:41:36.0604 0x1368  pci - ok

01:41:36.0607 0x1368  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

01:41:36.0607 0x1368  pciide - ok

01:41:36.0614 0x1368  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

01:41:36.0618 0x1368  pcmcia - ok

01:41:36.0621 0x1368  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

01:41:36.0622 0x1368  pcw - ok

01:41:36.0634 0x1368  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

01:41:36.0642 0x1368  PEAUTH - ok

01:41:36.0668 0x1368  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

01:41:36.0690 0x1368  PeerDistSvc - ok

01:41:36.0695 0x1368  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

01:41:36.0696 0x1368  PerfHost - ok

01:41:36.0722 0x1368  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

01:41:36.0744 0x1368  pla - ok

01:41:36.0755 0x1368  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

01:41:36.0764 0x1368  PlugPlay - ok

01:41:36.0766 0x1368  PnkBstrA - ok

01:41:36.0768 0x1368  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

01:41:36.0770 0x1368  PNRPAutoReg - ok

01:41:36.0777 0x1368  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

01:41:36.0781 0x1368  PNRPsvc - ok

01:41:36.0791 0x1368  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

01:41:36.0798 0x1368  PolicyAgent - ok

01:41:36.0804 0x1368  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

01:41:36.0807 0x1368  Power - ok

01:41:36.0811 0x1368  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

01:41:36.0813 0x1368  PptpMiniport - ok

01:41:36.0815 0x1368  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

01:41:36.0817 0x1368  Processor - ok

01:41:36.0822 0x1368  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

01:41:36.0826 0x1368  ProfSvc - ok

01:41:36.0828 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] ProtectedStorage C:\Windows\system32\lsass.exe

01:41:36.0829 0x1368  ProtectedStorage - ok

01:41:36.0834 0x1368  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

01:41:36.0835 0x1368  Psched - ok

01:41:36.0862 0x1368  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

01:41:36.0887 0x1368  ql2300 - ok

01:41:36.0893 0x1368  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

01:41:36.0895 0x1368  ql40xx - ok

01:41:36.0901 0x1368  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

01:41:36.0907 0x1368  QWAVE - ok

01:41:36.0909 0x1368  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

01:41:36.0910 0x1368  QWAVEdrv - ok

01:41:36.0913 0x1368  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

01:41:36.0914 0x1368  RasAcd - ok

01:41:36.0916 0x1368  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

01:41:36.0918 0x1368  RasAgileVpn - ok

01:41:36.0922 0x1368  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

01:41:36.0926 0x1368  RasAuto - ok

01:41:36.0930 0x1368  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

01:41:36.0932 0x1368  Rasl2tp - ok

01:41:36.0939 0x1368  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

01:41:36.0945 0x1368  RasMan - ok

01:41:36.0949 0x1368  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

01:41:36.0951 0x1368  RasPppoe - ok

01:41:36.0954 0x1368  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

01:41:36.0956 0x1368  RasSstp - ok

01:41:36.0964 0x1368  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

01:41:36.0970 0x1368  rdbss - ok

01:41:36.0974 0x1368  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

01:41:36.0975 0x1368  rdpbus - ok

01:41:36.0977 0x1368  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

01:41:36.0977 0x1368  RDPCDD - ok

01:41:36.0983 0x1368  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

01:41:36.0985 0x1368  RDPDR - ok

01:41:36.0988 0x1368  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

01:41:36.0988 0x1368  RDPENCDD - ok

01:41:36.0991 0x1368  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

01:41:36.0991 0x1368  RDPREFMP - ok

01:41:36.0995 0x1368  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

01:41:36.0996 0x1368  RdpVideoMiniport - ok

01:41:37.0001 0x1368  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

01:41:37.0004 0x1368  RDPWD - ok

01:41:37.0011 0x1368  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

01:41:37.0015 0x1368  rdyboost - ok

01:41:37.0019 0x1368  [ 100817619F5AE04074D10427B3A7456A, 90F50DD33D40091D3D0D6336E1BB15E40BDD8083D392DB5C39ED15C1D23E978C ] Realtek8723AU   C:\Program Files (x86)\netis\USB Wireless LAN Utility\RtlService.exe

01:41:37.0019 0x1368  Realtek8723AU - ok

01:41:37.0024 0x1368  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

01:41:37.0026 0x1368  RemoteAccess - ok

01:41:37.0031 0x1368  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

01:41:37.0035 0x1368  RemoteRegistry - ok

01:41:37.0038 0x1368  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

01:41:37.0040 0x1368  RpcEptMapper - ok

01:41:37.0044 0x1368  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

01:41:37.0045 0x1368  RpcLocator - ok

01:41:37.0057 0x1368  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs           C:\Windows\system32\rpcss.dll

01:41:37.0064 0x1368  RpcSs - ok

01:41:37.0068 0x1368  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

01:41:37.0069 0x1368  rspndr - ok

01:41:37.0117 0x1368  [ FE264F936DE6573425E60F3EE2954390, 66530D1A019D7218C5BAC8D2181DFB7C6694E0917E5BA611C90C81CA0BCE1AA9 ] RtlWlanu        C:\Windows\system32\DRIVERS\rtwlanu.sys

01:41:37.0159 0x1368  RtlWlanu - ok

01:41:37.0166 0x1368  [ 6106526CA0AB6DFE788BDB29C98B5004, B4E6BD6C79E513600DBEA4CDAAAE27D1A95A51ECD565BCC2DADF7EEB546B4962 ] RunSwUSB        C:\Windows\runSW.exe

01:41:37.0166 0x1368  RunSwUSB - ok

01:41:37.0169 0x1368  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

01:41:37.0169 0x1368  s3cap - ok

01:41:37.0173 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] SamSs           C:\Windows\system32\lsass.exe

01:41:37.0174 0x1368  SamSs - ok

01:41:37.0180 0x1368  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

01:41:37.0183 0x1368  sbp2port - ok

01:41:37.0189 0x1368  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

01:41:37.0194 0x1368  SCardSvr - ok

01:41:37.0196 0x1368  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

01:41:37.0197 0x1368  scfilter - ok

01:41:37.0218 0x1368  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll

01:41:37.0237 0x1368  Schedule - ok

01:41:37.0241 0x1368  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

01:41:37.0243 0x1368  SCPolicySvc - ok

01:41:37.0249 0x1368  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

01:41:37.0254 0x1368  SDRSVC - ok

01:41:37.0256 0x1368  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

01:41:37.0257 0x1368  secdrv - ok

01:41:37.0259 0x1368  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\Windows\system32\seclogon.dll

01:41:37.0261 0x1368  seclogon - ok

01:41:37.0265 0x1368  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll

01:41:37.0268 0x1368  SENS - ok

01:41:37.0270 0x1368  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

01:41:37.0273 0x1368  SensrSvc - ok

01:41:37.0275 0x1368  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

01:41:37.0277 0x1368  Serenum - ok

01:41:37.0280 0x1368  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

01:41:37.0281 0x1368  Serial - ok

01:41:37.0284 0x1368  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

01:41:37.0285 0x1368  sermouse - ok

01:41:37.0291 0x1368  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

01:41:37.0294 0x1368  SessionEnv - ok

01:41:37.0297 0x1368  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

01:41:37.0297 0x1368  sffdisk - ok

01:41:37.0299 0x1368  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

01:41:37.0300 0x1368  sffp_mmc - ok

01:41:37.0304 0x1368  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

01:41:37.0305 0x1368  sffp_sd - ok

01:41:37.0307 0x1368  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

01:41:37.0308 0x1368  sfloppy - ok

01:41:37.0317 0x1368  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

01:41:37.0324 0x1368  SharedAccess - ok

01:41:37.0334 0x1368  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

01:41:37.0342 0x1368  ShellHWDetection - ok

01:41:37.0345 0x1368  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

01:41:37.0347 0x1368  SiSRaid2 - ok

01:41:37.0350 0x1368  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

01:41:37.0352 0x1368  SiSRaid4 - ok

01:41:37.0359 0x1368  [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

01:41:37.0364 0x1368  SkypeUpdate - ok

01:41:37.0368 0x1368  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

01:41:37.0370 0x1368  Smb - ok

01:41:37.0376 0x1368  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

01:41:37.0377 0x1368  SNMPTRAP - ok

01:41:37.0380 0x1368  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\Windows\SysWOW64\speedfan.sys

01:41:37.0381 0x1368  speedfan - ok

01:41:37.0383 0x1368  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

01:41:37.0384 0x1368  spldr - ok

01:41:37.0395 0x1368  [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler         C:\Windows\System32\spoolsv.exe

01:41:37.0405 0x1368  Spooler - ok

01:41:37.0466 0x1368  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

01:41:37.0520 0x1368  sppsvc - ok

01:41:37.0526 0x1368  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

01:41:37.0528 0x1368  sppuinotify - ok

01:41:37.0538 0x1368  [ EC666682FE8344CF7E6ED69E74FA9F4F, DCD2A1C046425630689E2C9A6A6E356FE5A2A6664D12C20CFE236FCB32240DF9 ] srv             C:\Windows\system32\DRIVERS\srv.sys

01:41:37.0545 0x1368  srv - ok

01:41:37.0555 0x1368  [ E450C0318DCE8ED28ED272C8806B8495, D2FD459F8C5E42103EF2F71421FA175A4F0821F8C2A3763093122D433D1C50FB ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

01:41:37.0561 0x1368  srv2 - ok

01:41:37.0569 0x1368  [ 9C12C78AD36C23D925711A4640228225, FF72C23F2A08EDF0C41BAF1EB0245AB44FF91365C5466F09C47A8F0928D20994 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

01:41:37.0580 0x1368  srvnet - ok

01:41:37.0585 0x1368  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

01:41:37.0589 0x1368  SSDPSRV - ok

01:41:37.0592 0x1368  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

01:41:37.0594 0x1368  SstpSvc - ok

01:41:37.0619 0x1368  [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

01:41:37.0638 0x1368  Steam Client Service - ok

01:41:37.0643 0x1368  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

01:41:37.0643 0x1368  stexstor - ok

01:41:37.0655 0x1368  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

01:41:37.0664 0x1368  stisvc - ok

01:41:37.0668 0x1368  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

01:41:37.0669 0x1368  storflt - ok

01:41:37.0671 0x1368  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll

01:41:37.0673 0x1368  StorSvc - ok

01:41:37.0676 0x1368  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys

01:41:37.0677 0x1368  storvsc - ok

01:41:37.0679 0x1368  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

01:41:37.0679 0x1368  swenum - ok

01:41:37.0690 0x1368  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

01:41:37.0699 0x1368  swprv - ok

01:41:37.0730 0x1368  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll

01:41:37.0759 0x1368  SysMain - ok

01:41:37.0764 0x1368  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

01:41:37.0767 0x1368  TabletInputService - ok

01:41:37.0775 0x1368  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

01:41:37.0781 0x1368  TapiSrv - ok

01:41:37.0813 0x1368  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

01:41:37.0841 0x1368  Tcpip - ok

01:41:37.0874 0x1368  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

01:41:37.0899 0x1368  TCPIP6 - ok

01:41:37.0905 0x1368  [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

01:41:37.0906 0x1368  tcpipreg - ok

01:41:37.0909 0x1368  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

01:41:37.0909 0x1368  TDPIPE - ok

01:41:37.0912 0x1368  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

01:41:37.0913 0x1368  TDTCP - ok

01:41:37.0916 0x1368  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

01:41:37.0918 0x1368  tdx - ok

01:41:37.0921 0x1368  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

01:41:37.0923 0x1368  TermDD - ok

01:41:37.0937 0x1368  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

01:41:37.0946 0x1368  TermService - ok

01:41:37.0950 0x1368  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

01:41:37.0953 0x1368  Themes - ok

01:41:37.0955 0x1368  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

01:41:37.0957 0x1368  THREADORDER - ok

01:41:37.0962 0x1368  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

01:41:37.0965 0x1368  TrkWks - ok

01:41:37.0970 0x1368  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

01:41:37.0974 0x1368  TrustedInstaller - ok

01:41:37.0978 0x1368  [ 19BEDA57F3E0A06B8D5EB6D619BD5624, 952D5FAFD662C93628C12A6F7EB8E240A44216C0A15CBD2F5016BC357CBFE821 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

01:41:37.0979 0x1368  tssecsrv - ok

01:41:37.0983 0x1368  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

01:41:37.0985 0x1368  TsUsbFlt - ok

01:41:37.0993 0x1368  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

01:41:37.0997 0x1368  tunnel - ok

01:41:38.0000 0x1368  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

01:41:38.0001 0x1368  uagp35 - ok

01:41:38.0009 0x1368  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

01:41:38.0015 0x1368  udfs - ok

01:41:38.0019 0x1368  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

01:41:38.0021 0x1368  UI0Detect - ok

01:41:38.0026 0x1368  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

01:41:38.0028 0x1368  uliagpkx - ok

01:41:38.0031 0x1368  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys

01:41:38.0032 0x1368  umbus - ok

01:41:38.0035 0x1368  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

01:41:38.0035 0x1368  UmPass - ok

01:41:38.0041 0x1368  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll

01:41:38.0045 0x1368  UmRdpService - ok

01:41:38.0054 0x1368  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

01:41:38.0061 0x1368  upnphost - ok

01:41:38.0067 0x1368  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

01:41:38.0070 0x1368  usbaudio - ok

01:41:38.0074 0x1368  [ 28B81917A195B67617AF7DCF4DFE5736, 40A4D2AAE1BDE5ABA8708ED150396E913C566ECD5CDA40D6C6DB256F1B9FD4A9 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

01:41:38.0075 0x1368  usbccgp - ok

01:41:38.0079 0x1368  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

01:41:38.0080 0x1368  usbcir - ok

01:41:38.0084 0x1368  [ B626F048318DAE65A3317F0592BE592C, 284D8FFE1D35F852EFDA182A72288AC3A10D6ED825FE2CC5812497D3FE291AF1 ] usbehci         C:\Windows\system32\drivers\usbehci.sys

01:41:38.0085 0x1368  usbehci - ok

01:41:38.0092 0x1368  [ 390109E8E05BA00375DCB1ED64DC60AF, B8628502590B423BEFB6F7C8C69FAD0667AD0746FF6B444EE02016E8E1052B78 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

01:41:38.0098 0x1368  usbhub - ok

01:41:38.0100 0x1368  [ B4DF0F4C1D9D25DFE1DAD1D8670F1D4F, 4317C2DEDC639527B53864BAEC46CBE022D298C0503E29E1072DD1C851D92BFC ] usbohci         C:\Windows\system32\drivers\usbohci.sys

01:41:38.0101 0x1368  usbohci - ok

01:41:38.0104 0x1368  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

01:41:38.0105 0x1368  usbprint - ok

01:41:38.0107 0x1368  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

01:41:38.0109 0x1368  USBSTOR - ok

01:41:38.0111 0x1368  [ CFEAAF96E666E3DCBD8F6DFF516784AE, 006218A3DB5851790CC0A7F3DCD7B3AF82F624DA679296DE507AFD36C5468317 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

01:41:38.0113 0x1368  usbuhci - ok

01:41:38.0118 0x1368  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys

01:41:38.0120 0x1368  usbvideo - ok

01:41:38.0123 0x1368  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

01:41:38.0124 0x1368  usb_rndisx - ok

01:41:38.0126 0x1368  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

01:41:38.0128 0x1368  UxSms - ok

01:41:38.0130 0x1368  [ 4747BB1EF5246596B864831903C7E3F9, 45A8B23593FAA0219AD4541CD9F525587AAFD4EC0EBBA46814DC9874C4816E5C ] VaultSvc        C:\Windows\system32\lsass.exe

01:41:38.0131 0x1368  VaultSvc - ok

01:41:38.0135 0x1368  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

01:41:38.0136 0x1368  vdrvroot - ok

01:41:38.0147 0x1368  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

01:41:38.0158 0x1368  vds - ok

01:41:38.0161 0x1368  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

01:41:38.0161 0x1368  vga - ok

01:41:38.0164 0x1368  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

01:41:38.0164 0x1368  VgaSave - ok

01:41:38.0170 0x1368  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

01:41:38.0175 0x1368  vhdmp - ok

01:41:38.0177 0x1368  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

01:41:38.0178 0x1368  viaide - ok

01:41:38.0183 0x1368  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys

01:41:38.0186 0x1368  vmbus - ok

01:41:38.0188 0x1368  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

01:41:38.0189 0x1368  VMBusHID - ok

01:41:38.0193 0x1368  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

01:41:38.0195 0x1368  volmgr - ok

01:41:38.0203 0x1368  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

01:41:38.0207 0x1368  volmgrx - ok

01:41:38.0214 0x1368  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

01:41:38.0218 0x1368  volsnap - ok

01:41:38.0223 0x1368  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

01:41:38.0226 0x1368  vsmraid - ok

01:41:38.0254 0x1368  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

01:41:38.0280 0x1368  VSS - ok

01:41:38.0284 0x1368  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

01:41:38.0285 0x1368  vwifibus - ok

01:41:38.0288 0x1368  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

01:41:38.0289 0x1368  vwififlt - ok

01:41:38.0292 0x1368  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

01:41:38.0293 0x1368  vwifimp - ok

01:41:38.0303 0x1368  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

01:41:38.0310 0x1368  W32Time - ok

01:41:38.0314 0x1368  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

01:41:38.0315 0x1368  WacomPen - ok

01:41:38.0320 0x1368  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

01:41:38.0321 0x1368  WANARP - ok

01:41:38.0325 0x1368  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

01:41:38.0326 0x1368  Wanarpv6 - ok

01:41:38.0354 0x1368  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

01:41:38.0379 0x1368  wbengine - ok

01:41:38.0390 0x1368  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

01:41:38.0395 0x1368  WbioSrvc - ok

01:41:38.0405 0x1368  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

01:41:38.0411 0x1368  wcncsvc - ok

01:41:38.0416 0x1368  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

01:41:38.0419 0x1368  WcsPlugInService - ok

01:41:38.0422 0x1368  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

01:41:38.0424 0x1368  Wd - ok

01:41:38.0427 0x1368  [ CC46CB1B492D69A5EF554F807DA01729, DED4151923A837F4889C84555D237513C9400CE5DF2DBC7FEC9B2DA1CC355C36 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64_prewin8.sys

01:41:38.0428 0x1368  WDC_SAM - ok

01:41:38.0435 0x1368  [ E84CF717E854D02DF30BD1BCC612BEAC, 31E3D9F5D369C62D32C7A79FA9198BA772223764C2E07E4FA2FE3826F81BE112 ] WDDriveService  C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

01:41:38.0439 0x1368  WDDriveService - ok

01:41:38.0455 0x1368  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

01:41:38.0469 0x1368  Wdf01000 - ok

01:41:38.0473 0x1368  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll

01:41:38.0476 0x1368  WdiServiceHost - ok

01:41:38.0478 0x1368  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll

01:41:38.0480 0x1368  WdiSystemHost - ok

01:41:38.0487 0x1368  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient       C:\Windows\System32\webclnt.dll

01:41:38.0492 0x1368  WebClient - ok

01:41:38.0498 0x1368  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

01:41:38.0504 0x1368  Wecsvc - ok

01:41:38.0507 0x1368  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

01:41:38.0510 0x1368  wercplsupport - ok

01:41:38.0514 0x1368  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

01:41:38.0516 0x1368  WerSvc - ok

01:41:38.0518 0x1368  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

01:41:38.0519 0x1368  WfpLwf - ok

01:41:38.0523 0x1368  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

01:41:38.0524 0x1368  WIMMount - ok

01:41:38.0525 0x1368  WinDefend - ok

01:41:38.0528 0x1368  WinHttpAutoProxySvc - ok

01:41:38.0537 0x1368  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

01:41:38.0542 0x1368  Winmgmt - ok

01:41:38.0545 0x1368  [ 27BCBEEC8A466178A6057B64BEF66512, A7B000ABBCC344444A9B00CFADE7AA22AB92CE0CADEC196C30EB1851AE4FA062 ] WinRing0_1_2_0  C:\SSD Games\Steam Library\steamapps\common\EVGA PrecisionX\WinRing0\WinRing0x64.sys

01:41:38.0546 0x1368  WinRing0_1_2_0 - ok

01:41:38.0578 0x1368  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM           C:\Windows\system32\WsmSvc.dll

01:41:38.0607 0x1368  WinRM - ok

01:41:38.0613 0x1368  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys

01:41:38.0614 0x1368  WinUsb - ok

01:41:38.0631 0x1368  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

01:41:38.0646 0x1368  Wlansvc - ok

01:41:38.0649 0x1368  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

01:41:38.0649 0x1368  WmiAcpi - ok

01:41:38.0655 0x1368  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

01:41:38.0658 0x1368  wmiApSrv - ok

01:41:38.0660 0x1368  WMPNetworkSvc - ok

01:41:38.0663 0x1368  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

01:41:38.0665 0x1368  WPCSvc - ok

01:41:38.0669 0x1368  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

01:41:38.0672 0x1368  WPDBusEnum - ok

01:41:38.0674 0x1368  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

01:41:38.0675 0x1368  ws2ifsl - ok

01:41:38.0678 0x1368  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll

01:41:38.0681 0x1368  wscsvc - ok

01:41:38.0684 0x1368  WSearch - ok

01:41:38.0729 0x1368  [ 31F32E0C1A8BA9A37EEC23DE5F27F847, 0180832BC6172C9A4C32B5B222BB3F91EA615A5EBDA98DB79ED4FED258C2D257 ] wuauserv        C:\Windows\system32\wuaueng.dll

01:41:38.0773 0x1368  wuauserv - ok

01:41:38.0780 0x1368  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

01:41:38.0781 0x1368  WudfPf - ok

01:41:38.0788 0x1368  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

01:41:38.0792 0x1368  WUDFRd - ok

01:41:38.0796 0x1368  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

01:41:38.0798 0x1368  wudfsvc - ok

01:41:38.0805 0x1368  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

01:41:38.0810 0x1368  WwanSvc - ok

01:41:38.0821 0x1368  ================ Scan global ===============================

01:41:38.0825 0x1368  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll

01:41:38.0830 0x1368  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\Windows\system32\winsrv.dll

01:41:38.0838 0x1368  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\Windows\system32\winsrv.dll

01:41:38.0843 0x1368  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

01:41:38.0851 0x1368  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

01:41:38.0858 0x1368  [ Global ] - ok

01:41:38.0859 0x1368  ================ Scan MBR ==================================

01:41:38.0860 0x1368  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

01:41:38.0905 0x1368  \Device\Harddisk0\DR0 - ok

01:41:38.0918 0x1368  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1

01:41:38.0928 0x1368  \Device\Harddisk1\DR1 - ok

01:41:38.0929 0x1368  ================ Scan VBR ==================================

01:41:38.0930 0x1368  [ E1BE2EC629924A204E178381C9570AB9 ] \Device\Harddisk0\DR0\Partition1

01:41:38.0931 0x1368  \Device\Harddisk0\DR0\Partition1 - ok

01:41:38.0933 0x1368  [ 743B2BEFEFA674AE3DF075063B507580 ] \Device\Harddisk0\DR0\Partition2

01:41:38.0934 0x1368  \Device\Harddisk0\DR0\Partition2 - ok

01:41:38.0936 0x1368  [ A87F4307E00EB30D0E40A2A0635AD8BF ] \Device\Harddisk1\DR1\Partition1

01:41:38.0937 0x1368  \Device\Harddisk1\DR1\Partition1 - ok

01:41:38.0937 0x1368  ================ Scan generic autorun ======================

01:41:39.0197 0x1368  [ 1BDEB33CEAA541F6FCB19D9C342FBF86, F7DF33410511011317915F2EC3E571D249F1C92D5E35485313BF4DE9999D534C ] C:\Program Files\Logitech Gaming Software\LCore.exe

01:41:39.0381 0x1368  Launch LCore - ok

01:41:39.0394 0x1368  [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe

01:41:39.0396 0x1368  ShadowPlay - ok

01:41:39.0407 0x1368  [ 7089344C07545CD4C7F49DE0EA2F8993, 4D19DEB78B8DC08F02653235CAB76978B2F159CB990AD5AF51AC3DFA15260D65 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

01:41:39.0414 0x1368  SunJavaUpdateSched - ok

01:41:39.0445 0x1368  [ E93FDA336764BBE2CB05C924AEF834B4, 2FE1443ED25708760CCB405AEFA26A4B0EE62CE20576AD31D8E4D2F4EDB13E92 ] C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe

01:41:39.0466 0x1368  DriveUtilitiesHelper - ok

01:41:39.0492 0x1368  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

01:41:39.0512 0x1368  Sidebar - ok

01:41:39.0517 0x1368  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

01:41:39.0519 0x1368  mctadmin - ok

01:41:39.0543 0x1368  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

01:41:39.0556 0x1368  Sidebar - ok

01:41:39.0560 0x1368  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

01:41:39.0561 0x1368  mctadmin - ok

01:41:39.0688 0x1368  [ D2CE6EA0E9F641D7153462D40C6B4193, 3AAE5239F951E29497D759326BDC23E19644B763DC5661CA4E4980418195C37D ] E:\Steam\steam.exe

01:41:39.0720 0x1368  Steam - ok

01:41:39.0846 0x1368  [ C224456660839CFCAD2CD8DFB293F38B, D99B862217BBF99BF26B78615B3FDC1484607BA0A34E61C445345CD8D49501D4 ] C:\Program Files\CCleaner\CCleaner64.exe

01:41:39.0943 0x1368  CCleaner Monitoring - ok

01:41:40.0074 0x1368  [ E3F573D649A4A8C088C53EEB76DE8DE9, 69DB2ABD54A131F16E60821901B1A547DFCBF3BBD659A36D7E11AAF50EFBF58E ] E:\Tools\DTLiteInstaller\DAEMON Tools Lite\DTAgent.exe

01:41:40.0189 0x1368  DAEMON Tools Lite Automount - ok

01:41:40.0194 0x1368  Discord - ok

01:41:40.0211 0x1368  [ 44A9229022A519ED45294A1934C05EEC, 6DEF0DB5F9B50E9B0AFEE1CF50066BEB4FB7E15E2DC829A499509925660D6992 ] C:\Users\Quobble\AppData\Local\FluxSoftware\Flux\flux.exe

01:41:40.0223 0x1368  f.lux - ok

01:41:40.0224 0x1368  Waiting for KSN requests completion. In queue: 182

01:41:41.0224 0x1368  Waiting for KSN requests completion. In queue: 155

01:41:42.0224 0x1368  Waiting for KSN requests completion. In queue: 155

01:41:43.0224 0x1368  Waiting for KSN requests completion. In queue: 155

01:41:44.0236 0x1368  Win FW state via NFP2: enabled ( trusted )

01:41:47.0475 0x1368  ============================================================

01:41:47.0475 0x1368  Scan finished

01:41:47.0475 0x1368  ============================================================

01:41:47.0479 0x0998  Detected object count: 0

01:41:47.0479 0x0998  Actual detected object count: 0

01:41:55.0582 0x0af0  Deinitialize success

Anleitung bitte richtig lesen...poste das richtige Log von MBAR

Verzeihung, bin etwas müde ;)

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.11.23.19

  rootkit: v2016.11.20.01
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.18524

Quobble :: QUOBBLE-PC [administrator]
 

24.11.2016 01:29:30

mbar-log-2016-11-24 (01-29-30).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 285932

Time elapsed: 5 minute(s), 49 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Dann mach mal morgen weiter...ich poste dir noch instructions für morgen:

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Code:

# AdwCleaner v6.030 - Bericht erstellt am 24/11/2016 um 02:47:35

# Aktualisiert am 19/10/2016 von Malwarebytes

# Datenbank : 2016-11-23.1 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)

# Benutzername : Quobble - QUOBBLE-PC

# Gestartet von : E:\Chrome Downloads\AdwCleaner_6.030.exe

# Modus: Suchlauf

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 

Keine schädlichen Dienste gefunden.
 
 

***** [ Ordner ] *****
 

Ordner Gefunden: C:\Users\Quobble\Desktop\ScreenShot
 
 

***** [ Dateien ] *****
 

Datei Gefunden: C:\END
 
 

***** [ DLL ] *****
 

Keine infizierten DLLs gefunden.
 
 

***** [ WMI ] *****
 

Keine schädlichen Schlüssel gefunden.
 
 

***** [ Verknüpfungen ] *****
 

Keine infizierten Verknüpfungen gefunden.
 
 

***** [ Aufgabenplanung ] *****
 

Keine schädlichen Aufgaben gefunden.
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden: HKLM\SOFTWARE\Classes\AppID\{7F46C358-270D-4791-A579-AD1DDA1A3F7B}

Schlüssel Gefunden: HKU\S-1-5-21-2592108441-3361246110-3147240245-1000\Software\distromatic

Schlüssel Gefunden: HKCU\Software\distromatic

Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B6DCCCD3-520D-4485-B642-FCC136CE12C3}

Schlüssel Gefunden: [x64] HKCU\Software\distromatic

Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Installer\Features\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Installer\Products\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\Installer\Features\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\Installer\Products\3DCCCD6BD02558446B24CF1C63EC213C

Schlüssel Gefunden: HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam

Schlüssel Gefunden: [x64] HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
 
 

***** [ Internetbrowser ] *****
 

Keine schädlichen Elemente in Firefox basierten Browsern gefunden.

Chrome pref Gefunden: [C:\Users\Quobble\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - pbjikboenpfhbbejgkoklgkhjpfogcam
 

*************************
 

C:\AdwCleaner\AdwCleaner[C2].txt - [1381 Bytes] - [31/08/2015 22:34:11]

C:\AdwCleaner\AdwCleaner[R0].txt - [2433 Bytes] - [09/03/2015 03:53:22]

C:\AdwCleaner\AdwCleaner[S0].txt - [2338 Bytes] - [09/03/2015 03:55:00]

C:\AdwCleaner\AdwCleaner[S2].txt - [1213 Bytes] - [31/08/2015 22:33:11]

C:\AdwCleaner\AdwCleaner[S3].txt - [2768 Bytes] - [24/11/2016 02:47:35]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [2841 Bytes] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.9 (09.30.2016)

Operating System: Windows 7 Professional x64 

Ran by Quobble (Administrator) on 24.11.2016 at  2:55:39,02

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 33 
 

Successfully deleted: C:\Users\Quobble\AppData\Local\crashrpt (Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\01R32WXS (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2BPGABI9 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84FW64PK (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\96QFUXI4 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JI6Y17B1 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRFG0342 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QNAP9MOY (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S6W4YF3K (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SIDDNR11 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WBE2NGMW (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y83DTLFB (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Quobble\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YCGXAPJR (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\01R32WXS (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2BPGABI9 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84FW64PK (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\96QFUXI4 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JI6Y17B1 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRFG0342 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QNAP9MOY (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S6W4YF3K (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SIDDNR11 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WBE2NGMW (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y83DTLFB (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YCGXAPJR (Temporary Internet Files Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 24.11.2016 at  2:56:33,42

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Habe mal einen Screenshot des komischen CMD Fensters gemacht.

hxxp://imgur.com/a/ih7aD

adwCleaner nichts gelöscht? Bitte Anleitung richtig lesen

Zitat:

Zitat von cosinus (Beitrag 1625330)

adwCleaner nichts gelöscht? Bitte Anleitung richtig lesen

Ich hab adwcleaner alle gefundenen Objekte löschen lassen.

Hier nochmal ein Durchgang:

Code:

# AdwCleaner v6.030 - Bericht erstellt am 24/11/2016 um 13:39:28

# Aktualisiert am 19/10/2016 von Malwarebytes

# Datenbank : 2016-11-23.1 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)

# Benutzername : Quobble - QUOBBLE-PC

# Gestartet von : E:\Chrome Downloads\AdwCleaner_6.030.exe

# Modus: Löschen

# Unterstützung : hxxps://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 
 
 

***** [ Dateien ] *****
 
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 
 
 

***** [ Browser ] *****
 
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C2].txt - [1381 Bytes] - [31/08/2015 22:34:11]

C:\AdwCleaner\AdwCleaner[C3].txt - [3105 Bytes] - [24/11/2016 02:52:04]

C:\AdwCleaner\AdwCleaner[C4].txt - [1094 Bytes] - [24/11/2016 13:39:28]

C:\AdwCleaner\AdwCleaner[R0].txt - [2433 Bytes] - [09/03/2015 03:53:22]

C:\AdwCleaner\AdwCleaner[S0].txt - [2338 Bytes] - [09/03/2015 03:55:00]

C:\AdwCleaner\AdwCleaner[S2].txt - [1213 Bytes] - [31/08/2015 22:33:11]

C:\AdwCleaner\AdwCleaner[S3].txt - [2944 Bytes] - [24/11/2016 02:47:35]

C:\AdwCleaner\AdwCleaner[S4].txt - [1799 Bytes] - [24/11/2016 13:35:59]

C:\AdwCleaner\AdwCleaner[S5].txt - [1872 Bytes] - [24/11/2016 13:39:02]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1605 Bytes] ##########

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611