Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Starke Lags/Spikes seit ca. 1-2 Wochen (https://www.trojaner-board.de/183186-starke-lags-spikes-seit-ca-1-2-wochen.html)

a3b2c1 26.11.2016 18:53
Starke Lags/Spikes seit ca. 1-2 Wochen
 
Hallo,
ich mal wieder. Habe wieder Performanceeinbrüche und wäre dankbar, wenn noch mal jemand einen Blick auf mein System werfen könnte. Beim letzten Mal wurde ja nichts gefunden, danach bin ich, trotz der Umständlichkeit in meiner Wohnsituation, von WLAN auf Kabel umgestiegen und das Problem war gelöst. Dass es sich jetzt wieder verschlechtert hat, lässt mich vermuten, dass ich mir in den letzten Wochen was eingefangen habe.
LG

M-K-D-B 27.11.2016 14:12
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
  • Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.



Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!




Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:


Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)






Schritt 2
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.







Bitte poste mit deiner nächsten Antwort
  • die Logdatei von TDSS-Killer,
  • die beiden neuen Logdateien von FRST.

a3b2c1 27.11.2016 15:10
Hallo, Matthias, danke dir!

FRST:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
durchgeführt von MG (Administrator) auf MG-PC (27-11-2016 15:06:31)
Gestartet von C:\Users\MG\Desktop
Geladene Profile: MG (Verfügbare Profile: MG)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 8 (Standard-Browser: "C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe" -- "%1")
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5296\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net.exe
() C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net Helper.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6626696 2016-07-18] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-09-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-23] (Intel Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2014-11-21] (AVM Berlin)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\MountPoints2: {94f3315e-866a-11e6-bea1-d8cb8ac229f5} - F:\pushinst.exe
Startup: C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe [2015-06-26] ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{3F6F289A-565B-4F81-9E9C-395B21529642}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6502409B-1ABC-4918-8B41-A8FC86081581}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2071224 2016-09-09] (Comodo)
S4 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [392168 2016-08-31] (Digital Wave Ltd.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation)
S3 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2227152 2016-08-17] (Micro-Star INT'L CO., LTD.)
S3 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1740760 2014-09-03] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [117400 2016-06-08] ()
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-03-25] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2014-11-21] (AVM Berlin)
S3 fwlanusb5_nv2; C:\Windows\System32\DRIVERS\fwlanusb5_nv2.sys [1322824 2014-11-21] (AVM GmbH)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-11-10] (Intel Corporation)
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-27 15:06 - 2016-11-27 15:06 - 00008807 _____ C:\Users\MG\Desktop\FRST.txt
2016-11-27 15:06 - 2016-11-27 15:06 - 00000000 ____D C:\FRST
2016-11-27 15:05 - 2016-11-27 15:05 - 02412032 _____ (Farbar) C:\Users\MG\Desktop\FRST64.exe
2016-11-18 18:43 - 2016-11-17 23:00 - 00512263 _____ C:\Users\MG\Desktop\min 16 till end.StormReplay

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-27 15:04 - 2016-09-30 00:37 - 00000000 ____D C:\Users\MG\AppData\Local\Battle.net
2016-11-27 12:50 - 2016-09-30 00:34 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-11-27 12:50 - 2009-07-14 05:45 - 00022176 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-27 12:50 - 2009-07-14 05:45 - 00022176 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-27 12:47 - 2011-04-12 08:43 - 00672604 _____ C:\Windows\system32\perfh007.dat
2016-11-27 12:47 - 2011-04-12 08:43 - 00138300 _____ C:\Windows\system32\perfc007.dat
2016-11-27 12:47 - 2009-07-14 06:13 - 01550316 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-27 12:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-27 12:43 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-27 02:06 - 2016-09-29 18:57 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-11-27 01:26 - 2016-10-02 19:44 - 00000000 ____D C:\Users\MG\AppData\Roaming\vlc
2016-11-27 01:22 - 2016-09-29 18:51 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-11-27 00:00 - 2016-09-29 20:39 - 00000000 ____D C:\Users\MG\Desktop\MP3
2016-11-26 23:56 - 2016-10-03 19:15 - 00002799 _____ C:\Users\MG\Desktop\Neues Textdokument.txt
2016-11-26 23:55 - 2016-09-29 20:57 - 00000000 ____D C:\Users\MG\AppData\Roaming\DVDVideoSoft
2016-11-26 21:22 - 2016-09-30 06:49 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2016-11-26 14:17 - 2016-09-29 22:05 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater
2016-11-26 14:17 - 2016-09-29 18:36 - 00000000 ____D C:\Program Files\AMD
2016-11-26 14:16 - 2016-09-29 19:36 - 00000000 ____D C:\AMD
2016-11-26 14:14 - 2016-09-29 18:51 - 00000000 ____D C:\Program Files (x86)\AMD
2016-11-22 19:56 - 2016-09-30 06:49 - 00000000 ____D C:\Users\MG\Documents\Heroes of the Storm
2016-11-13 11:12 - 2016-09-29 21:35 - 00000000 ____D C:\Users\MG\AppData\Roaming\TS3Client
2016-11-13 11:12 - 2016-09-29 21:17 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-12 19:34 - 2016-09-29 18:51 - 00003928 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-11-12 19:34 - 2016-09-29 18:50 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-12 19:34 - 2016-09-29 18:50 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-12 19:34 - 2016-09-29 18:50 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-12 19:34 - 2016-09-29 18:50 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-12 19:33 - 2016-09-29 20:00 - 00000000 ____D C:\Users\MG\AppData\Local\Adobe
2016-11-10 19:34 - 2016-09-30 11:04 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2016-11-09 20:56 - 2016-09-30 00:38 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-11-09 00:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-08 20:42 - 2016-09-29 20:20 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-07 18:26 - 2016-09-30 19:47 - 00000000 ____D C:\Users\MG\AppData\Local\ElevatedDiagnostics
2016-11-05 20:00 - 2016-09-29 20:20 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-09-29 19:15 - 2016-10-27 20:13 - 0007603 _____ () C:\Users\MG\AppData\Local\Resmon.ResmonCfg
2016-09-29 18:23 - 2016-09-29 18:23 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-14 18:37

==================== Ende von FRST.txt ============================
Addition:
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2016
durchgeführt von MG (27-11-2016 15:06:52)
Gestartet von C:\Users\MG\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2016-09-29 16:56:43)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1573683447-1232033385-2431656724-500 - Administrator - Disabled)
Gast (S-1-5-21-1573683447-1232033385-2431656724-501 - Limited - Disabled)
MG (S-1-5-21-1573683447-1232033385-2431656724-1000 - Administrator - Enabled) => C:\Users\MG

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Spybot - Search and Destroy (Enabled - Out of date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

. . . (Version: 2.1.28.3 - Intel) Hidden
. . . (x32 Version: 2.6.1.4 - Intel) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Application Profiles (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.00 - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Catalyst Control Center Next Localization BR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Chromodo (HKLM-x32\...\Chromodo) (Version: 52.15.25.664 - Comodo)
H1Z1: Just Survive (HKLM\...\Steam App 295110) (Version:  - Daybreak Game Company)
H1Z1: King of the Kill (HKLM\...\Steam App 433850) (Version:  - Daybreak Game Company)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.31.1000 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{fe2eebd3-ee15-4538-bb19-b627e3f2a911}) (Version: 2.6.1.4 - Intel)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.1.023 - MSI)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Path of Exile (HKLM-x32\...\{1d6b00b2-5f7d-43c8-8987-212632193cd7}) (Version: 2.4.0.64312 - Grinding Gear Games)
Path of Exile (x32 Version: 2.4.0.64312 - Grinding Gear Games) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7910 - Realtek Semiconductor Corp.)
Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.8 - MSI)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {15F11A74-1C0B-4B57-8976-96A7EAF08506} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe [2016-11-12] (Adobe Systems Incorporated)
Task: {25164A01-FC94-4C4E-A53E-E6AD5D63F7C9} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-09-27] (Advanced Micro Devices, Inc.)
Task: {38B504F0-3EF3-4D68-8A05-711D50E1112A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {521D8D38-94B1-439F-A873-B2025542B0DD} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {70B3FE7C-E517-40BE-AE2C-56F15F50B8F5} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {762B451B-F4FA-48D0-AE1A-479435182DCF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {CEB096E1-1DBA-41F5-9B04-098D7CB50006} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {DB46B6C3-71D8-413B-A744-87A217B97A7F} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-06-08 17:04 - 2016-06-08 17:04 - 00117400 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-06-08 17:04 - 2016-06-08 17:04 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-06-08 17:04 - 2016-06-08 17:04 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-06-08 17:04 - 2016-06-08 17:04 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-06-07 18:56 - 2016-06-07 18:56 - 00019176 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-06-07 18:56 - 2016-06-07 18:56 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-29 20:33 - 2015-06-26 23:14 - 01201664 _____ () C:\Users\MG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\capslocktoctrl.exe
2016-09-29 21:37 - 2016-06-08 17:07 - 00458904 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-09-29 21:37 - 2016-06-08 17:18 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-09-29 21:37 - 2016-06-08 17:17 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-09-29 21:37 - 2016-06-08 17:12 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-09-29 21:37 - 2016-06-08 17:15 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-09-29 21:37 - 2016-06-08 17:16 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-09-29 21:37 - 2016-06-08 17:16 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-09-29 21:37 - 2016-06-08 17:16 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-09-29 21:37 - 2016-06-08 17:17 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-09-29 21:37 - 2016-06-08 17:17 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-09-29 21:37 - 2016-06-08 17:16 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-09-29 21:37 - 2016-06-08 17:15 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 01484776 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\Battle.net Helper.exe
2016-09-29 19:57 - 2014-05-13 11:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-09-29 19:57 - 2014-05-13 11:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-09-29 19:57 - 2014-05-13 11:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-09-29 19:57 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-09-29 19:57 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-11-10 11:12 - 2014-11-10 11:12 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 00540336 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\ortp.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 37247976 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libcef.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 06402560 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\battle.net.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 00133632 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libEGL.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 03384832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\libGLESv2.dll
2016-11-09 18:15 - 2016-11-09 18:15 - 00990696 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8142\ffmpegsumo.dll
2015-12-02 17:58 - 2015-11-16 19:32 - 00919040 _____ () C:\Windows\mod_frst.exe

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 7914 mehr Seiten.

IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\...\123simsen.com -> www.123simsen.com

Da befinden sich 7914 mehr Seiten.


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2016-11-23 00:30 - 00453264 ____R C:\Windows\system32\Drivers\etc\hosts

127.0.0.1        www.007guard.com
127.0.0.1        007guard.com
127.0.0.1        008i.com
127.0.0.1        www.008k.com
127.0.0.1        008k.com
127.0.0.1        www.00hq.com
127.0.0.1        00hq.com
127.0.0.1        010402.com
127.0.0.1        www.032439.com
127.0.0.1        032439.com
127.0.0.1        www.0scan.com
127.0.0.1        0scan.com
127.0.0.1        1000gratisproben.com
127.0.0.1        www.1000gratisproben.com
127.0.0.1        1001namen.com
127.0.0.1        www.1001namen.com
127.0.0.1        100888290cs.com
127.0.0.1        www.100888290cs.com
127.0.0.1        www.100sexlinks.com
127.0.0.1        100sexlinks.com
127.0.0.1        10sek.com
127.0.0.1        www.10sek.com
127.0.0.1        www.1-2005-search.com
127.0.0.1        1-2005-search.com
127.0.0.1        123fporn.info
127.0.0.1        www.123fporn.info
127.0.0.1        www.123haustiereundmehr.com
127.0.0.1        123haustiereundmehr.com
127.0.0.1        123moviedownload.com
127.0.0.1        www.123moviedownload.com

Da befinden sich 15554 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1573683447-1232033385-2431656724-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Live Update => C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{2B147BBB-7D6F-4F5D-8099-34B96BDF6C76}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0FF345E9-E9DF-4957-9829-6E5B1EFBD6B9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FA8D75CB-7754-4E7E-ADBB-AC64C9DA3793}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{81C1B12D-D5F0-4353-BD35-3D8615483B42}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{DF280AE6-BC46-4810-BE29-E688CB9FB983}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{95962549-0C98-4470-B36C-131608140732}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [{B933A1FE-10E5-4CDD-8488-62B53E0D92B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1\LaunchPad.exe
FirewallRules: [TCP Query User{02EA8D3B-5723-4EE7-968D-788C3CC0F85B}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{1A733FF8-E0F6-4706-B04B-3A0C858B9C43}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{B2EB4091-50E5-4F13-B706-960B68744ABC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{7388A04C-AFA7-4E1A-8473-4A70255A032D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [TCP Query User{81B82AEF-2436-4E9B-84DD-8B4D77ABBE2C}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{0E5764A8-D294-4B4D-8829-4C8E5D462EF5}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{78364E17-9CA7-408E-9829-7C2157B6A5D1}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe
FirewallRules: [UDP Query User{55EE13A6-58DB-49D6-AD86-2D45F1C47ACB}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm.exe
FirewallRules: [TCP Query User{202CCA57-6078-4FCB-AFF7-EFA4BB38E1A6}C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe
FirewallRules: [UDP Query User{335A4750-9273-4A8B-B012-D7E37A0BA98A}C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46889\heroesofthestorm.exe
FirewallRules: [TCP Query User{19B73C30-C32A-4020-A0A9-35A2DE73DC4C}C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe
FirewallRules: [UDP Query User{6E5E227C-CA2B-438F-B466-50BDB37FE248}C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47219\heroesofthestorm.exe
FirewallRules: [TCP Query User{5E7FE3F3-DA96-402F-8A69-166132F5B159}C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe
FirewallRules: [UDP Query User{D340EDB7-54EE-4312-AF37-70AC0A8E80BA}C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base47479\heroesofthestorm.exe
FirewallRules: [TCP Query User{82B7BB73-9394-468F-B497-B73C4AD21841}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe
FirewallRules: [UDP Query User{CBDE797C-FCFD-4D42-982F-C752D60D75DB}C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48027\heroesofthestorm.exe
FirewallRules: [TCP Query User{8EFDF018-C569-467E-AC4C-2D271DF19863}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe
FirewallRules: [UDP Query User{5BEEE6E2-A356-4C9B-ACD4-F30F70A795C1}C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base48297\heroesofthestorm.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

21-10-2016 17:08:34 Ende der Bereinigung
31-10-2016 13:32:14 Geplanter Prüfpunkt
07-11-2016 18:26:40 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/27/2016 01:37:02 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (11/27/2016 01:31:05 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (11/27/2016 01:31:02 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (11/27/2016 01:28:58 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (11/27/2016 12:43:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/26/2016 02:18:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/26/2016 12:20:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/26/2016 10:11:40 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/25/2016 11:43:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (11/25/2016 05:41:14 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.


Systemfehler:
=============
Error: (11/23/2016 07:11:22 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Energy Server Service WILLAMETTE konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/23/2016 07:11:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "User Energy Server Service WILLAMETTE" wurde mit folgendem Fehler beendet:
%%268439640

Error: (11/19/2016 11:01:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (11/18/2016 04:45:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (11/18/2016 04:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (11/13/2016 08:46:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/13/2016 08:46:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/13/2016 08:46:21 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/13/2016 08:46:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/12/2016 04:46:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8136.03 MB
Verfügbarer physikalischer RAM: 5706.36 MB
Summe virtueller Speicher: 16270.24 MB
Verfügbarer virtueller Speicher: 13616.16 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.29 GB) (Free:760.62 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 994A7345)

Partition: GPT.

==================== Ende von Addition.txt ============================

a3b2c1 27.11.2016 15:14
TDSS-Killer:
Code:
15:11:01.0781 0x092c  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
15:11:01.0781 0x092c  UEFI system
15:11:06.0319 0x092c  ============================================================
15:11:06.0319 0x092c  Current date / time: 2016/11/27 15:11:06.0319
15:11:06.0320 0x092c  SystemInfo:
15:11:06.0320 0x092c 
15:11:06.0320 0x092c  OS Version: 6.1.7601 ServicePack: 1.0
15:11:06.0320 0x092c  Product type: Workstation
15:11:06.0320 0x092c  ComputerName: MG-PC
15:11:06.0320 0x092c  UserName: MG
15:11:06.0320 0x092c  Windows directory: C:\Windows
15:11:06.0320 0x092c  System windows directory: C:\Windows
15:11:06.0320 0x092c  Running under WOW64
15:11:06.0320 0x092c  Processor architecture: Intel x64
15:11:06.0320 0x092c  Number of processors: 4
15:11:06.0320 0x092c  Page size: 0x1000
15:11:06.0320 0x092c  Boot type: Normal boot
15:11:06.0320 0x092c  CodeIntegrityOptions = 0x00000001
15:11:06.0320 0x092c  ============================================================
15:11:08.0205 0x092c  KLMD registered as C:\Windows\system32\drivers\56588892.sys
15:11:08.0205 0x092c  KLMD ARK init status: drvProperties = 0x7FF00, osBuild = 7601.23403, osProperties = 0x1
15:11:08.0331 0x092c  System UUID: {0FC2DCC7-0577-6C02-FFA0-1523BC9E523D}
15:11:08.0643 0x092c  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:11:08.0674 0x092c  ============================================================
15:11:08.0674 0x092c  \Device\Harddisk0\DR0:
15:11:08.0696 0x092c  GPT partitions:
15:11:08.0697 0x092c  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {27CDAD20-EA50-4517-AA54-7BC6E0C7EE81}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
15:11:08.0697 0x092c  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {A0CE8F85-C6FD-4A94-8C9A-16E433214E18}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000
15:11:08.0697 0x092c  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {0B12D4E9-6BD3-4A32-A5C9-A5738445ED03}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x74694000
15:11:08.0697 0x092c  MBR partitions:
15:11:08.0697 0x092c  ============================================================
15:11:08.0766 0x092c  C: <-> \Device\Harddisk0\DR0\Partition3
15:11:08.0766 0x092c  ============================================================
15:11:08.0766 0x092c  Initialize success
15:11:08.0766 0x092c  ============================================================
15:12:21.0810 0x12e4  ============================================================
15:12:21.0810 0x12e4  Scan started
15:12:21.0810 0x12e4  Mode: Manual; SigCheck; TDLFS;
15:12:21.0810 0x12e4  ============================================================
15:12:21.0810 0x12e4  KSN ping started
15:12:35.0632 0x12e4  KSN ping finished: true
15:12:36.0279 0x12e4  ================ Scan system memory ========================
15:12:36.0279 0x12e4  System memory - ok
15:12:36.0279 0x12e4  ================ Scan services =============================
15:12:36.0382 0x12e4  [ E96ECC2315E4F7B42973CEAADC727C18, 8C8644580C8FBF7A772C20CC2DBBD1DE854A3CEF8ECFB986FA98577ED3540A61 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
15:12:36.0420 0x12e4  1394ohci - ok
15:12:36.0439 0x12e4  [ 6ECB3791368947C1E3588062325CCBD8, AB01591F89B4E16795D8F0FE45381BD9F2519F544DDEC514A82F61DBCAC4D6E5 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
15:12:36.0449 0x12e4  ACPI - ok
15:12:36.0474 0x12e4  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
15:12:36.0491 0x12e4  AcpiPmi - ok
15:12:36.0550 0x12e4  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:12:36.0556 0x12e4  AdobeARMservice - ok
15:12:36.0579 0x12e4  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
15:12:36.0591 0x12e4  adp94xx - ok
15:12:36.0609 0x12e4  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\Windows\system32\drivers\adpahci.sys
15:12:36.0618 0x12e4  adpahci - ok
15:12:36.0629 0x12e4  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
15:12:36.0636 0x12e4  adpu320 - ok
15:12:36.0660 0x12e4  [ DC3A5D287DC3213E01B9F401D025D04E, 59963E62C9B2179BC64602269B624A51944B48936F5D49F61FB9FF73D0405FD9 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
15:12:36.0687 0x12e4  AeLookupSvc - ok
15:12:36.0722 0x12e4  [ 6621364405B22FB2C642CDB6B6DE751C, D76C2B242BDB7314177A385099246916D7C6FA02B343253A171ACC9F24F3ED91 ] AFD            C:\Windows\system32\drivers\afd.sys
15:12:36.0736 0x12e4  AFD - ok
15:12:36.0763 0x12e4  [ 2823C845E4108CD74EC035E8ADB32A2B, B42CE70761F524B94BE4D2812DB3CD5486830346FFEBCA69D6D7AD97B8EEB333 ] agp440          C:\Windows\system32\drivers\agp440.sys
15:12:36.0769 0x12e4  agp440 - ok
15:12:36.0792 0x12e4  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\Windows\System32\alg.exe
15:12:36.0800 0x12e4  ALG - ok
15:12:36.0828 0x12e4  [ 56F1EA3065D386173EA976E7C8403E07, 9EE711A32D27B167F25FF3D2EF996431BB40815B48848F41C00FA9E80AD46A97 ] aliide          C:\Windows\system32\drivers\aliide.sys
15:12:36.0833 0x12e4  aliide - ok
15:12:36.0875 0x12e4  [ 102E0A294D4A2C4BB53210F4AD246A4D, B9816220CACBBD0FEB10E09FC3F46E6C376DDB6823ADACE848A9A0B2F238E6D5 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:12:36.0905 0x12e4  AMD External Events Utility - ok
15:12:36.0907 0x12e4  [ 9B66BA4D578B18A3A02607A49A46ED15, 8DB7004A1401694D37C81D060C7B6CC1A72ACB25204CF9A25157A355D9955D0E ] amdide          C:\Windows\system32\drivers\amdide.sys
15:12:36.0912 0x12e4  amdide - ok
15:12:36.0938 0x12e4  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
15:12:36.0944 0x12e4  AmdK8 - ok
15:12:36.0954 0x12e4  amdkmdag - ok
15:12:36.0974 0x12e4  [ B283403E7717FB0D41AD962C643FB7AC, D565C26ACF487B31961515330645100CD0BC77EA1C305E2012F1068146B232A5 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
15:12:36.0989 0x12e4  amdkmdap - ok
15:12:37.0002 0x12e4  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
15:12:37.0009 0x12e4  AmdPPM - ok
15:12:37.0030 0x12e4  [ AA8663311D3E7B711710AFAEE1825A2F, E75CD6FD4E03B5AA303CE950406D3F8C577A9EEDA866CE8EC1F8F065A1D6D0B2 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
15:12:37.0036 0x12e4  amdsata - ok
15:12:37.0044 0x12e4  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
15:12:37.0051 0x12e4  amdsbs - ok
15:12:37.0064 0x12e4  [ 0B5BFDCF705BF9F462B151FC5BE428B8, 12755113A1022B10DB320D53AB2D6ACD3D529872EB937AB8E27423449AA5B470 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
15:12:37.0069 0x12e4  amdxata - ok
15:12:37.0104 0x12e4  [ 62D799D2FDE093DD6FD8D5696A6280EB, F859B9007B8D3041095DBD011F8F4791DA480C9EDBDB1FE91170D4ECCFA41661 ] AppID          C:\Windows\system32\drivers\appid.sys
15:12:37.0111 0x12e4  AppID - ok
15:12:37.0139 0x12e4  [ F47AB7CFD2D7C409B2718A9256072FA4, 7FA180A6FB1C8254FB648496B655846EB7391194FCEBD4726925864BB712C8A2 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
15:12:37.0146 0x12e4  AppIDSvc - ok
15:12:37.0167 0x12e4  [ 00D1796D9D1A93908E7B6CD8F8D82CCF, CB3CD41F7C00D5483BF9B5AFBDEF33D1CE4B6BFA177754CD0CB47B45D6C74416 ] Appinfo        C:\Windows\System32\appinfo.dll
15:12:37.0175 0x12e4  Appinfo - ok
15:12:37.0201 0x12e4  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\Windows\system32\drivers\arc.sys
15:12:37.0207 0x12e4  arc - ok
15:12:37.0213 0x12e4  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
15:12:37.0219 0x12e4  arcsas - ok
15:12:37.0287 0x12e4  [ 108FB6DDB69E537A2EA53F425363FAE5, B12A9F5338D39805E08A44A335FF7AA77F2266F535A2F5C8412CC746C75E5B1D ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:12:37.0294 0x12e4  aspnet_state - ok
15:12:37.0317 0x12e4  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:12:37.0335 0x12e4  AsyncMac - ok
15:12:37.0349 0x12e4  [ C8AA50005E6461D5C2C247DBABBF2008, AD8A3FFCE945E8B9D4A3AECC0FFD6FC0484828502A902712E65F133CB54921E7 ] atapi          C:\Windows\system32\drivers\atapi.sys
15:12:37.0354 0x12e4  atapi - ok
15:12:37.0385 0x12e4  [ F9DB31BC5CD3700D37DB136BA56E5E9D, 9AB7421975500EE7FE583CCF86914F94E697606A9199DC4F27D5609554C5D3F7 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:12:37.0392 0x12e4  AtiHDAudioService - ok
15:12:37.0432 0x12e4  [ 6C6372713030936C2DC7E8992C851467, F5AFE4531D4955A6DEAD9B99EC4A379888A8989ED34E5AC20A7F301C7BECE7F3 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:12:37.0448 0x12e4  AudioEndpointBuilder - ok
15:12:37.0459 0x12e4  [ 6C6372713030936C2DC7E8992C851467, F5AFE4531D4955A6DEAD9B99EC4A379888A8989ED34E5AC20A7F301C7BECE7F3 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:12:37.0475 0x12e4  AudioSrv - ok
15:12:37.0501 0x12e4  [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject        C:\Windows\system32\drivers\avmeject.sys
15:12:37.0508 0x12e4  avmeject - ok
15:12:37.0538 0x12e4  [ D3AD54B05D8BA4535D3361F672F272C3, 29627C98475D062A836469EF1429233E2756B64B5809AD39530C648C73CABF3F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
15:12:37.0546 0x12e4  AxInstSV - ok
15:12:37.0582 0x12e4  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
15:12:37.0594 0x12e4  b06bdrv - ok
15:12:37.0634 0x12e4  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
15:12:37.0643 0x12e4  b57nd60a - ok
15:12:37.0664 0x12e4  [ A121235D24010DCACE05F4907ACF0B26, 4F5F048A30F996B55F62CAAEB553837CC6E3FD4E1093DBADCA9E96E87A2B2C45 ] BDESVC          C:\Windows\System32\bdesvc.dll
15:12:37.0671 0x12e4  BDESVC - ok
15:12:37.0699 0x12e4  [ B688235B47E8AC299B346692F736A562, C6981AC67C680D2B95B6509D753163D94413261A7931FD60CCAC4F43F28BB9A4 ] Beep            C:\Windows\system32\drivers\Beep.sys
15:12:37.0705 0x12e4  Beep - ok
15:12:37.0745 0x12e4  [ 3B192A21A7F995B9181EA6815466D6F9, 4CBB492402FA424A201244C7660179C689E831F923AF263BCF2348D5F805D975 ] BFE            C:\Windows\System32\bfe.dll
15:12:37.0763 0x12e4  BFE - ok
15:12:37.0798 0x12e4  [ B01E5A72DE3A2B3DC97BA042F90288DF, 33EC152C16E15371DB17AA276C4C2D1E136D57232EA86EA039032561E3C45237 ] BITS            C:\Windows\System32\qmgr.dll
15:12:37.0819 0x12e4  BITS - ok
15:12:37.0853 0x12e4  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
15:12:37.0859 0x12e4  blbdrive - ok
15:12:37.0867 0x12e4  [ 2256F9C53417855F4AB2BD2D604FEDD2, A834B4E1EB87D44A63F2EA97193B1518C65F15B9FD061A192BE522686F0291F2 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:12:37.0876 0x12e4  bowser - ok
15:12:37.0892 0x12e4  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
15:12:37.0899 0x12e4  BrFiltLo - ok
15:12:37.0906 0x12e4  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
15:12:37.0913 0x12e4  BrFiltUp - ok
15:12:37.0996 0x12e4  [ 50CD4AB9E87E9A55A816ACD7FB5740B7, 6816E87FBAA1F43611C9DB822F8F105CACC1A1E9A995D0301B921F8C01D6328E ] Browser        C:\Windows\System32\browser.dll
15:12:38.0006 0x12e4  Browser - ok
15:12:38.0023 0x12e4  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
15:12:38.0033 0x12e4  Brserid - ok
15:12:38.0055 0x12e4  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
15:12:38.0063 0x12e4  BrSerWdm - ok
15:12:38.0071 0x12e4  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
15:12:38.0078 0x12e4  BrUsbMdm - ok
15:12:38.0085 0x12e4  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
15:12:38.0091 0x12e4  BrUsbSer - ok
15:12:38.0112 0x12e4  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
15:12:38.0120 0x12e4  BTHMODEM - ok
15:12:38.0151 0x12e4  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\Windows\system32\bthserv.dll
15:12:38.0170 0x12e4  bthserv - ok
15:12:38.0183 0x12e4  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:12:38.0202 0x12e4  cdfs - ok
15:12:38.0223 0x12e4  [ 7200A15FCDDECA736E97D2815A32A54F, 2696A042DFFEFAFBBA57C6464CECF6F2944CABCD70ECF09024347AD4EE12F597 ] cdrom          C:\Windows\system32\drivers\cdrom.sys
15:12:38.0231 0x12e4  cdrom - ok
15:12:38.0250 0x12e4  [ E37B315C170C8DE43592F416264A6C31, 41109BB6A3681763AB43F9BA8FDA58C1ECBEAD8258B5FF65F95AFA072468984A ] CertPropSvc    C:\Windows\System32\certprop.dll
15:12:38.0257 0x12e4  CertPropSvc - ok
15:12:38.0332 0x12e4  [ 5C4A22156DB5EA87B44B2C3C9605DB09, 8C7B2D639E58485619C9B7BD2D68D6A58CDD9BEE1981193A3A834AA0E0670A35 ] ChromodoUpdater C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
15:12:38.0366 0x12e4  ChromodoUpdater - ok
15:12:38.0398 0x12e4  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
15:12:38.0405 0x12e4  circlass - ok
15:12:38.0430 0x12e4  [ 4BC058AF1AA60D540D216DF3EB26F2C9, B2BF0992FC8ED6F0FE2AD02E34FCB1BA0E10038D79E8A7D4C06238191004D415 ] CLFS            C:\Windows\system32\CLFS.sys
15:12:38.0439 0x12e4  CLFS - ok
15:12:38.0477 0x12e4  [ 382F277620C6C9FD8B9EED8BB658EBCF, 4414EB13A6C32D05BCD10088AD00E9D77FA697AB89434BF4B00F1FC4CC11FD1E ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:12:38.0483 0x12e4  clr_optimization_v2.0.50727_32 - ok
15:12:38.0504 0x12e4  [ A465B5783694F4DDBAED960293884713, 5518FA470C8D9C74E9E6DFF4A8EFFDBBA1DF9F2820E550348B91081B9E9032EE ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:12:38.0510 0x12e4  clr_optimization_v2.0.50727_64 - ok
15:12:38.0573 0x12e4  [ 6D7C8A951AF6AD6835C029B3CB88D333, 66F3D79887B2449B4C6912D1A258D1A96056888F51A8AA24FEDF37942AD5BDBB ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:12:38.0581 0x12e4  clr_optimization_v4.0.30319_32 - ok
15:12:38.0592 0x12e4  [ 86329C35FF23CFEF0FB6C0023BA06BCE, D915CE7AD564F97A1C3B047D5248B7EF67ADDC59687FBC90F1776C21DAA0D3FD ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:12:38.0603 0x12e4  clr_optimization_v4.0.30319_64 - ok
15:12:38.0620 0x12e4  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
15:12:38.0626 0x12e4  CmBatt - ok
15:12:38.0645 0x12e4  [ 4B47BBF1744551C2BE1469DAA66C1038, 6B70381FD0602C3A830026ED3CF10496700FD73098019EF51E6C22E95A08ABF1 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:12:38.0650 0x12e4  cmdide - ok
15:12:38.0684 0x12e4  [ CA3FB5A6B626D8A00A89E049CF95954E, CD5E3E40972513195108BA46CEC1D0AEA6B09A67EEBDD17EB759BD1729B07C06 ] CNG            C:\Windows\system32\Drivers\cng.sys
15:12:38.0699 0x12e4  CNG - ok
15:12:38.0715 0x12e4  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
15:12:38.0720 0x12e4  Compbatt - ok
15:12:38.0728 0x12e4  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
15:12:38.0735 0x12e4  CompositeBus - ok
15:12:38.0737 0x12e4  COMSysApp - ok
15:12:38.0749 0x12e4  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
15:12:38.0754 0x12e4  crcdisk - ok
15:12:38.0771 0x12e4  [ 11DD823AAB4CE0E55D96BD3102BEB92B, 596C74FF16C391816513D901D30BB10F3978A970B304389E904CBE87F746BA02 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:12:38.0782 0x12e4  CryptSvc - ok
15:12:38.0802 0x12e4  [ 4B1099E362ADAF9A4FA9B06D76294349, 163B466029223827163D3CC3561CBEC0C2046F34C86BEA1461343E315471FBF4 ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:12:38.0818 0x12e4  DcomLaunch - ok
15:12:38.0836 0x12e4  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\Windows\System32\defragsvc.dll
15:12:38.0858 0x12e4  defragsvc - ok
15:12:38.0876 0x12e4  [ CD7D1655EDCC30BDD5A8B4D717A3E40E, 220B36642A4898834DC7192A026BF6125D0A59BD52590B844CEFB5B953B23277 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:12:38.0885 0x12e4  DfsC - ok
15:12:38.0921 0x12e4  [ 85B0455CB0DA3F8D48EA80CA87AF4BAF, E6A830E0F5A6DA0428A51DCE4C3B7BC654485E304913319263CEFC2D7E38D68D ] Dhcp            C:\Windows\system32\dhcpcore.dll
15:12:38.0932 0x12e4  Dhcp - ok
15:12:38.0997 0x12e4  [ A36145A198899C3E45241B4E07073CA1, 00D28ABE4A2988C368C1C8D1E4C8548ABDD259EA3360818E3EB4A7DA8966D222 ] DiagTrack      C:\Windows\system32\diagtrack.dll
15:12:39.0022 0x12e4  DiagTrack - ok
15:12:39.0063 0x12e4  [ 3F67A20D02EF74C112A42FD7746C8E2E, 502FA3C7C5F1BC51CA51ECB9A29EFAFFB36867F76AACF51FA7BEE45674F2C278 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
15:12:39.0076 0x12e4  DigitalWave.Update.Service - ok
15:12:39.0091 0x12e4  [ 3322A9E3CD6CD76729CBD1D96C1C3103, D85541CF1F59A21C10C7A8494E2DDB8B4DCBBED49D11D55EC50367650D4206EE ] discache        C:\Windows\system32\drivers\discache.sys
15:12:39.0098 0x12e4  discache - ok
15:12:39.0117 0x12e4  [ 97659D0CEBCF0DB9C265D3DE1B116ECF, 70F6E01CF86B2CCCFBDC0E11A9AFC5E1C132F3830F8BEB7D003F912BC3C3EAE4 ] Disk            C:\Windows\system32\drivers\disk.sys
15:12:39.0123 0x12e4  Disk - ok
15:12:39.0147 0x12e4  [ 358D6EE69EE2BF3C96121B66DA63960D, E17666D2AFFA06E592B373564D6EBE59F922C98E55A3A344FB6E4668B0AF47C6 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:12:39.0157 0x12e4  Dnscache - ok
15:12:39.0174 0x12e4  [ 813E257D6A40EF6BEA4B10ECF1AB65D3, 0A6EA3229907DDF02E90486E66109C1EAE7891ECC68F44A7CE268EAAB7ACDE64 ] dot3svc        C:\Windows\System32\dot3svc.dll
15:12:39.0185 0x12e4  dot3svc - ok
15:12:39.0229 0x12e4  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\Windows\system32\dps.dll
15:12:39.0249 0x12e4  DPS - ok
15:12:39.0272 0x12e4  [ A1A42D99C70331B86B7B574598BDCA3A, DD04DD77CEC4F636CB02A7E9350FA710B079E7F2592003340A6B9394B0E36DCC ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
15:12:39.0277 0x12e4  drmkaud - ok
15:12:39.0319 0x12e4  [ C0219BE34C603ACEF3D9B7246A7E2247, 134B22A08DFD14B9CC18CABBF6AAEA2CE7FC59602D2F34B66485B5AFB9553F41 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
15:12:39.0337 0x12e4  DXGKrnl - ok
15:12:39.0351 0x12e4  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\Windows\System32\eapsvc.dll
15:12:39.0370 0x12e4  EapHost - ok
15:12:39.0450 0x12e4  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
15:12:39.0501 0x12e4  ebdrv - ok
15:12:39.0527 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] EFS            C:\Windows\System32\lsass.exe
15:12:39.0533 0x12e4  EFS - ok
15:12:39.0553 0x12e4  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
15:12:39.0565 0x12e4  elxstor - ok
15:12:39.0584 0x12e4  [ 7D8430241B482BC2BC8EACFD056C5F14, CC2F77457662422F08EE45D4597B952A101AE99BF5E1BF50EFFE80D9702D335F ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:12:39.0590 0x12e4  ErrDev - ok
15:12:39.0627 0x12e4  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\Windows\system32\es.dll
15:12:39.0651 0x12e4  EventSystem - ok
15:12:39.0677 0x12e4  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\Windows\system32\drivers\exfat.sys
15:12:39.0698 0x12e4  exfat - ok
15:12:39.0711 0x12e4  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
15:12:39.0732 0x12e4  fastfat - ok
15:12:39.0758 0x12e4  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\Windows\system32\fxssvc.exe
15:12:39.0773 0x12e4  Fax - ok
15:12:39.0790 0x12e4  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\Windows\system32\drivers\fdc.sys
15:12:39.0796 0x12e4  fdc - ok
15:12:39.0824 0x12e4  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\Windows\system32\fdPHost.dll
15:12:39.0842 0x12e4  fdPHost - ok
15:12:39.0845 0x12e4  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
15:12:39.0863 0x12e4  FDResPub - ok
15:12:39.0877 0x12e4  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:12:39.0882 0x12e4  FileInfo - ok
15:12:39.0890 0x12e4  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
15:12:39.0908 0x12e4  Filetrace - ok
15:12:39.0923 0x12e4  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
15:12:39.0929 0x12e4  flpydisk - ok
15:12:39.0953 0x12e4  [ 1010630ABAA94551C88EF3F111E5DB76, FF806263312E405D2755E574C1F9FE7506EE34FD59844BA2421BEBAAADAA402F ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:12:39.0962 0x12e4  FltMgr - ok
15:12:40.0005 0x12e4  [ C310D62EFBB0B004096133FB4505BAF2, 5C7AAF1E3A6879E7B9726ADA1C2F38CA5171DF940D3FCEA485C739B647AC1C40 ] FontCache      C:\Windows\system32\FntCache.dll
15:12:40.0027 0x12e4  FontCache - ok
15:12:40.0066 0x12e4  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:12:40.0071 0x12e4  FontCache3.0.0.0 - ok
15:12:40.0086 0x12e4  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
15:12:40.0092 0x12e4  FsDepends - ok
15:12:40.0122 0x12e4  [ EC4F611CEB6B65672EEF06928C2CEB8C, 1DA5FEE52A85AEC36476CB00064451CF8550B39DE4FCC0820AE74FDB1F10BF28 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:12:40.0127 0x12e4  Fs_Rec - ok
15:12:40.0136 0x12e4  [ 21B39456D89EE661F20F08082292DC9F, B866F33A5649DC004E56D3378FC831684EDC60437A0A3C3C98003EC39786EDD0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
15:12:40.0145 0x12e4  fvevol - ok
15:12:40.0194 0x12e4  [ 0D2843C3C676B852D0B01CEA1E1DAE6C, 2F2751E09725D52008865F08A08F9989BCC4BA07FBC11B3BEF4332DC463CFC63 ] fwlanusb5_nv2  C:\Windows\system32\DRIVERS\fwlanusb5_nv2.sys
15:12:40.0217 0x12e4  fwlanusb5_nv2 - ok
15:12:40.0245 0x12e4  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
15:12:40.0250 0x12e4  gagp30kx - ok
15:12:40.0284 0x12e4  [ 01FE2473050AD2C1E5B37E257EC6BEA6, DC10DACE1D9FF3C6053D554696A8665D2705D6F61FE0EF7B184359D76DDB9140 ] gpsvc          C:\Windows\System32\gpsvc.dll
15:12:40.0301 0x12e4  gpsvc - ok
15:12:40.0323 0x12e4  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
15:12:40.0329 0x12e4  hcw85cir - ok
15:12:40.0370 0x12e4  [ 345AC81C44BC37685725D78CB641F28F, BAC680DBF6A43DF48ADBEDEB128DC2B7D69AF4257619C0D70ED750A6615758E4 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:12:40.0380 0x12e4  HdAudAddService - ok
15:12:40.0398 0x12e4  [ 45DAAFD1056B8942C5038EFFD285658D, 5529F911F71A38614DCF7194E799DF79E846F87048099BCE9CB2C7DD96E9469E ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
15:12:40.0405 0x12e4  HDAudBus - ok
15:12:40.0419 0x12e4  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
15:12:40.0425 0x12e4  HidBatt - ok
15:12:40.0440 0x12e4  [ 387C19A65ECADEB9D27E80F27D882FCF, E389ACA137C5EA7021CDB8488E85D0055A41153D68A481216585C3579FE63932 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
15:12:40.0447 0x12e4  HidBth - ok
15:12:40.0472 0x12e4  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\Windows\system32\drivers\hidir.sys
15:12:40.0479 0x12e4  HidIr - ok
15:12:40.0503 0x12e4  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\Windows\system32\hidserv.dll
15:12:40.0522 0x12e4  hidserv - ok
15:12:40.0536 0x12e4  [ D150C09088401493980E7A80CFA091FE, 40F3F2559E813D3023F83451358B331C11BA4CC137CD11B21B6A1268728EB84B ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:12:40.0542 0x12e4  HidUsb - ok
15:12:40.0563 0x12e4  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:12:40.0582 0x12e4  hkmsvc - ok
15:12:40.0608 0x12e4  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:12:40.0617 0x12e4  HomeGroupListener - ok
15:12:40.0645 0x12e4  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:12:40.0653 0x12e4  HomeGroupProvider - ok
15:12:40.0664 0x12e4  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
15:12:40.0670 0x12e4  HpSAMD - ok
15:12:40.0704 0x12e4  [ 059D2AFA7C79FFDE302A4A440E9B8E55, 90C9F29A398FBB0227545B166344EF469069E75A4E49D846DB877D2E451B41F4 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:12:40.0722 0x12e4  HTTP - ok
15:12:40.0738 0x12e4  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
15:12:40.0743 0x12e4  hwpolicy - ok
15:12:40.0761 0x12e4  [ 55CCD3E5E4DA18FCF0598F42249D47DF, 9F1EF7E8A1E80C7EEFE60B1F93E42C58B8C5C110F026442DEFC0EE3A1D0EAC0E ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
15:12:40.0768 0x12e4  i8042prt - ok
15:12:40.0807 0x12e4  [ 58A8CCA18210A9096B626B08EACC0B28, FF01194265CE1E2C14D0DF44FEFF32574092376B263C9A9871BB4F04531D017E ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
15:12:40.0817 0x12e4  iaStorV - ok
15:12:40.0857 0x12e4  [ 0845EA9630319721B01E49E0A659E109, D4ACF05337E4ED5699124893443092C7969F38FC9A5C72AE185D01950BAC99DF ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:12:40.0874 0x12e4  idsvc - ok
15:12:40.0888 0x12e4  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
15:12:40.0894 0x12e4  iirsp - ok
15:12:40.0932 0x12e4  [ ED13D904AB82A0CA6D1C15AB19D010BD, 95B3A5490F684DC97703FE6B67783E1C6CF616AE19C7A9C6AF03DE48D1323D9A ] IKEEXT          C:\Windows\System32\ikeext.dll
15:12:40.0953 0x12e4  IKEEXT - ok
15:12:41.0069 0x12e4  [ 13AD818FFE1E7524D85E1AA0531C9EA7, 2B10B7BBA88BF04D3863246625E3F4F546AFCA10EB0F078EACC8FDEC301927A1 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:12:41.0148 0x12e4  IntcAzAudAddService - ok
15:12:41.0235 0x12e4  [ 9A6DEB5DDF7E29728F6FEA5092AFA3F2, 21C47A0490EBA302657EF30C560E4AF83777685FFE126DCCAC310163C47401D1 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
15:12:41.0252 0x12e4  Intel(R) Capability Licensing Service TCP IP Interface - ok
15:12:41.0296 0x12e4  [ 74D9B6BDA6F9CDAF7E19F5A33B63EBC9, 2304AE8ED2FCBD550B83E74795E8CBEDDE45CE99E7C506E0AF4CB39A77FC6C18 ] intelide        C:\Windows\system32\drivers\intelide.sys
15:12:41.0301 0x12e4  intelide - ok
15:12:41.0322 0x12e4  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
15:12:41.0328 0x12e4  intelppm - ok
15:12:41.0352 0x12e4  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
15:12:41.0372 0x12e4  IPBusEnum - ok
15:12:41.0380 0x12e4  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:12:41.0398 0x12e4  IpFilterDriver - ok
15:12:41.0437 0x12e4  [ 83185D9DB2C3944B296531B95FAB49FE, B570B4777AEE924A4C075692748843BC65C3479BC07E4B7856883B5E9604F364 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:12:41.0453 0x12e4  iphlpsvc - ok
15:12:41.0462 0x12e4  [ 63C9FB04EECFA385BC092D9B41E85990, 2B25E9586A635894E02A81097D9ABF53942A5A19A96AC71E1FD56573E5E69A76 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
15:12:41.0469 0x12e4  IPMIDRV - ok
15:12:41.0492 0x12e4  [ 9774AA4661A30E0ADCEA48B5A1B9F4B7, 7D1697A93FFF1C0F77D29A6D609623AC895420CCCD3C81BBD0105C0F2E52E143 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
15:12:41.0499 0x12e4  IPNAT - ok
15:12:41.0531 0x12e4  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:12:41.0539 0x12e4  IRENUM - ok
15:12:41.0559 0x12e4  [ E3DBCD75AA78937303E54E0946669959, E04C0FE50850AEBB47CE5E933AEB6995EF44293694FD619D0951A43DD3123EBE ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:12:41.0564 0x12e4  isapnp - ok
15:12:41.0579 0x12e4  [ 7A9C4A7DAE277FC177D60E4C75164763, 53DFE03F97912676BB31F3B84CD34A404696C3B8BCDB5D6BFFAFEB6B535BB4C0 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
15:12:41.0587 0x12e4  iScsiPrt - ok
15:12:41.0626 0x12e4  [ 8CAF9BE17438F875A82FCE36DE4DC634, 8CBD8817D4429D40FA60B9397C7AD33FB3DC342DEEF2E25C1C8B13976E16F42D ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
15:12:41.0631 0x12e4  iusb3hcs - ok
15:12:41.0644 0x12e4  [ 013AC194D2716C345742B01CDC4A73A7, AF1663A9D13EE892D6EF79C8460BACEAB476821FEAF9418122EB885AF47BC10A ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
15:12:41.0656 0x12e4  iusb3hub - ok
15:12:41.0675 0x12e4  [ 242C9879365A45E4E0C5E2E13E43E938, 43F5003794D1388B58CA9D8CD126480DE5C8CC63CBA98DFF602F46F616DA5064 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
15:12:41.0695 0x12e4  iusb3xhc - ok
15:12:41.0713 0x12e4  [ CA295D3E5032DDF8A3CBD1A256E646FA, 03879D331AE446FCF25D0193805A5E0C17764439B5B8FE1D684DDB96B1A358C9 ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
15:12:41.0721 0x12e4  jhi_service - ok
15:12:41.0734 0x12e4  [ C3CEAAF93C02A205B0712DEF98BAE544, DEAB391D0A8C454F2423D37D7DAA77B3DAA04F7B50DD76867FD4CD797A5874FB ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
15:12:41.0739 0x12e4  kbdclass - ok
15:12:41.0748 0x12e4  [ 73DD773AC3F96B229AF7C6BB0D9009FE, 5DDEC781A3A31B764D02DEE234CAAFE386F90A7284A6B09B13B081195E784631 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
15:12:41.0754 0x12e4  kbdhid - ok
15:12:41.0760 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] KeyIso          C:\Windows\system32\lsass.exe
15:12:41.0766 0x12e4  KeyIso - ok
15:12:41.0784 0x12e4  [ 7CE48DF5147ED56361A5BC8B7E9592B9, D9558942848CCE79D634B83DE0857B44A02E3176745D16B74ACC65B472C7905E ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:12:41.0789 0x12e4  KSecDD - ok
15:12:41.0806 0x12e4  [ 6E8D4F00C8899A41A70F2EF2AE10ED35, B5628B22B042EDA97CC602C274F5E354BB5D8481F6549FF6CEDADF9201D49FCA ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
15:12:41.0813 0x12e4  KSecPkg - ok
15:12:41.0842 0x12e4  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
15:12:41.0860 0x12e4  ksthunk - ok
15:12:41.0904 0x12e4  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\Windows\system32\msdtckrm.dll
15:12:41.0928 0x12e4  KtmRm - ok
15:12:41.0971 0x12e4  [ 119AE0B67CEE5F761304DFCA3C8EE1B5, 0EDED6FA4ACFD86281B9F05D375261286363C52AA38C86089B50CA0C586BF910 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:12:41.0983 0x12e4  LanmanServer - ok
15:12:42.0005 0x12e4  [ 3B86086F7362872AB55983FE225F9E5E, 88092F7C2F21116C01983748AA24BA01CA1402E50F8AD952E40E6662EC73CE78 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:12:42.0015 0x12e4  LanmanWorkstation - ok
15:12:42.0038 0x12e4  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:12:42.0057 0x12e4  lltdio - ok
15:12:42.0076 0x12e4  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
15:12:42.0099 0x12e4  lltdsvc - ok
15:12:42.0115 0x12e4  [ 15BAC3E8DC159C701671F3C9D9F86D7F, 750F60062C81B7860292EE9BF47272265E1562B80635B83003B6BD82B624A87A ] lmhosts        C:\Windows\System32\lmhsvc.dll
15:12:42.0124 0x12e4  lmhosts - ok
15:12:42.0169 0x12e4  [ ED5C8B920F2ACF11A26586B2FA66BF3D, D6F014F0CCAB7EDA38A8CC58F439D2A8CD89195AE84F82E25475CE11CB3883C9 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
15:12:42.0182 0x12e4  LMS - ok
15:12:42.0207 0x12e4  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
15:12:42.0213 0x12e4  LSI_FC - ok
15:12:42.0259 0x12e4  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
15:12:42.0265 0x12e4  LSI_SAS - ok
15:12:42.0278 0x12e4  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
15:12:42.0284 0x12e4  LSI_SAS2 - ok
15:12:42.0290 0x12e4  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
15:12:42.0296 0x12e4  LSI_SCSI - ok
15:12:42.0309 0x12e4  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\Windows\system32\drivers\luafv.sys
15:12:42.0328 0x12e4  luafv - ok
15:12:42.0340 0x12e4  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\Windows\system32\drivers\megasas.sys
15:12:42.0344 0x12e4  megasas - ok
15:12:42.0371 0x12e4  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
15:12:42.0379 0x12e4  MegaSR - ok
15:12:42.0389 0x12e4  [ 1BC9159CF58BABD89419072EA180A8F6, 6C9AB779C2355A341800A8F93AAAF9B19FAFF444CD6A7BD27C63D53F379A75EF ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
15:12:42.0397 0x12e4  MEIx64 - ok
15:12:42.0407 0x12e4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\Windows\system32\mmcss.dll
15:12:42.0427 0x12e4  MMCSS - ok
15:12:42.0443 0x12e4  [ DFDA7308112839CE14D5F2C92B62607A, 098833170511DE6F65CCDD6A9EC38B01961A3627528467D92504EA7FAEFE480D ] Modem          C:\Windows\system32\drivers\modem.sys
15:12:42.0450 0x12e4  Modem - ok
15:12:42.0478 0x12e4  [ 419D67778CA8B7DFFB39DF3FCE3EE351, 6E6AEECA191DAC838EB2DC8BC341E37F3E4F28458E85E7E1A87174D57E4DCF34 ] monitor        C:\Windows\system32\drivers\monitor.sys
15:12:42.0483 0x12e4  monitor - ok
15:12:42.0502 0x12e4  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:12:42.0507 0x12e4  mouclass - ok
15:12:42.0526 0x12e4  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:12:42.0532 0x12e4  mouhid - ok
15:12:42.0547 0x12e4  [ 42F3A012BA759F1F2EEAE921C5BC6C56, 0C3CA25E18394D787A7F79466644D4A55C0ADDB0A52E35D93CCE27E1FB56431F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
15:12:42.0552 0x12e4  mountmgr - ok
15:12:42.0571 0x12e4  [ AE8932E3B623A75B547F8CB71D70C469, DDF5B8FB3080E0EF1F2970B8F02314F9F16A7E275D53AC81518B272F18D4E317 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:12:42.0578 0x12e4  mpio - ok
15:12:42.0598 0x12e4  [ 5F46B69809CE21701289300B6B668684, 8B7363CCBCB0E84DA1CF9423FEC7B5134E6F56543D43CBA3736B7E98D248351F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:12:42.0607 0x12e4  mpsdrv - ok
15:12:42.0626 0x12e4  [ 041903F4EE7B3CD8DC7CB783C6085E28, 93E51EFA3DC81821698D57C0E5B9FC1DB3FD1D4725DC2D5977A954F35429F27B ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:12:42.0646 0x12e4  MpsSvc - ok
15:12:42.0671 0x12e4  [ 80DA0579FFB53575FC75EA7ADF2A5749, 20DB89266F5209DBBE439EF0614BF84A2D8207A5CAA701C7F84A612D3DB6D563 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:12:42.0679 0x12e4  MRxDAV - ok
15:12:42.0700 0x12e4  [ F4B3F9929024A9A28B8CE87D981D426C, 6A713CA7025F2F20B9ECED6F37D62371B7D7918B9E9E9A368C7F5759FD89A663 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:12:42.0711 0x12e4  mrxsmb - ok
15:12:42.0725 0x12e4  [ 7049DF10CE9F8FDBEB249795306DF746, A2888943D0EE84AB90AE26F91A3113AB35C9B355D1FCC46B4DCF7ECA2385764E ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:12:42.0737 0x12e4  mrxsmb10 - ok
15:12:42.0750 0x12e4  [ 39DAE97D859184B116F0464616240A89, 884A5C996BEF29F767202D52A1AB682D150712F8DF43C57B650281164282D005 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:12:42.0760 0x12e4  mrxsmb20 - ok
15:12:42.0774 0x12e4  [ 0C7033B1EF362F6C1F74E3E41B2306B8, 81EA18896C56FE3057CEF48F4555832CFF72A85E36234819F2401736195E96D1 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:12:42.0779 0x12e4  msahci - ok
15:12:42.0792 0x12e4  [ A75ADF411CF22D1C57AE40773BE51CDC, 9A210238AF65EC488431DD2A9A63B66F8619289162051489312F28960F67CDAD ] msdsm          C:\Windows\system32\drivers\msdsm.sys
15:12:42.0799 0x12e4  msdsm - ok
15:12:42.0813 0x12e4  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\Windows\System32\msdtc.exe
15:12:42.0821 0x12e4  MSDTC - ok
15:12:42.0843 0x12e4  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:12:42.0862 0x12e4  Msfs - ok
15:12:42.0871 0x12e4  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
15:12:42.0889 0x12e4  mshidkmdf - ok
15:12:42.0898 0x12e4  MSICDSetup - ok
15:12:42.0916 0x12e4  [ 5BDBD4F3C00E887B7FA8E416CD146855, 6A17BC29090AA3C712DD5EBD4B5B384C249A96C998B883B891E53965C2E6BE6B ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:12:42.0921 0x12e4  msisadrv - ok
15:12:42.0950 0x12e4  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
15:12:42.0970 0x12e4  MSiSCSI - ok
15:12:42.0972 0x12e4  msiserver - ok
15:12:43.0057 0x12e4  [ 8BDFEFB0F45C53D3C5B77730BF73BE91, ACC1FF6F5DC504792A01C7133DD5964864718CBD4AA6BFA3BF20B91F8AFE6D13 ] MSI_LiveUpdate_Service C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
15:12:43.0093 0x12e4  MSI_LiveUpdate_Service - ok
15:12:43.0124 0x12e4  [ A7EDADFB0AE38AE6F0488F0F2448D8B5, 7DC08FF24CC4E2071BF8E876976B22E810A8A407FADE403D119F75AD50088105 ] MSI_Trigger_Service C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
15:12:43.0128 0x12e4  MSI_Trigger_Service - ok
15:12:43.0159 0x12e4  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
15:12:43.0177 0x12e4  MSKSSRV - ok
15:12:43.0186 0x12e4  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:12:43.0205 0x12e4  MSPCLOCK - ok
15:12:43.0215 0x12e4  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
15:12:43.0233 0x12e4  MSPQM - ok
15:12:43.0250 0x12e4  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
15:12:43.0259 0x12e4  MsRPC - ok
15:12:43.0273 0x12e4  [ AEF3CB71F17CB9D8C6A3B49D3CDE5E22, 01A6072622BA88EE4D41A1FEFAD87256E7A46E2483FC57C31349A3FBAC91163F ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
15:12:43.0278 0x12e4  mssmbios - ok
15:12:43.0279 0x12e4  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
15:12:43.0297 0x12e4  MSTEE - ok
15:12:43.0306 0x12e4  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
15:12:43.0311 0x12e4  MTConfig - ok
15:12:43.0328 0x12e4  [ ADF51F0215E71361B35FA2C5D3F49D66, A4065BE1BB0C9F8B012CAC840DB951F4AB10DAB08B771BC277136FCAFF939A7B ] Mup            C:\Windows\system32\Drivers\mup.sys
15:12:43.0334 0x12e4  Mup - ok
15:12:43.0353 0x12e4  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
15:12:43.0377 0x12e4  napagent - ok
15:12:43.0417 0x12e4  [ FC380F5585171EE88045247D12F21242, A254F25DD4CB2B22BEDDE2C1A7ECB17A1735EFA57654364C6E542CB5EFB5C6ED ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
15:12:43.0427 0x12e4  NativeWifiP - ok
15:12:43.0457 0x12e4  [ 8664770EC3CF87492AD1CDDA424FD3CB, F6722F7D402AD8256B518C8E1F7AA0A1729206D33C08EF03C012CA24A75500EB ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:12:43.0475 0x12e4  NDIS - ok
15:12:43.0493 0x12e4  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
15:12:43.0511 0x12e4  NdisCap - ok
15:12:43.0538 0x12e4  [ 8196473CCF244832109BE0F5BEFD7C4D, F5CB1925163FC590D5A84F8E4B556CE192A637BD031EB12BD16AE05E896F8311 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:12:43.0544 0x12e4  NdisTapi - ok
15:12:43.0568 0x12e4  [ A17CC85238E2D08E0C44A8FE3DC3B192, 8823B58F111991ACC95A4BAADC8E0033A2EE334056C07B989FEC2499567F599A ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
15:12:43.0575 0x12e4  Ndisuio - ok
15:12:43.0585 0x12e4  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
15:12:43.0605 0x12e4  NdisWan - ok
15:12:43.0609 0x12e4  [ 357C6186EBE2B4065080A06F740DCB34, 1F4F090D1652260AF0AAF8B765FEC8D8B955CD2A9DA23A9E8F1B68D76DEF2B7D ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
15:12:43.0616 0x12e4  NDProxy - ok
15:12:43.0634 0x12e4  [ 7FA2D0AC5EA6E10013AC4B7D300BD906, E8ADC114A0E15AFD7C01297ADD0B94517F9DDD36423744D83181CAA7BC824008 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
15:12:43.0642 0x12e4  NetBIOS - ok
15:12:43.0661 0x12e4  [ 4B446DCE1B5059BEA80430E7C5498F5A, 5D775502A7C39B94EC9CB7DD613E3F94C99456914B81580AB650A8B20A2286E1 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
15:12:43.0672 0x12e4  NetBT - ok
15:12:43.0677 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] Netlogon        C:\Windows\system32\lsass.exe
15:12:43.0683 0x12e4  Netlogon - ok
15:12:43.0713 0x12e4  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
15:12:43.0736 0x12e4  Netman - ok
15:12:43.0759 0x12e4  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:12:43.0767 0x12e4  NetMsmqActivator - ok
15:12:43.0770 0x12e4  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:12:43.0777 0x12e4  NetPipeActivator - ok
15:12:43.0808 0x12e4  [ 66439DA1B5658290E15EC0A8DA95F71B, C00361B01EBC3903EC4DD0F0DC9888BB0723C92902D785A9BAD7CC9D521E31DA ] netprofm        C:\Windows\System32\netprofm.dll
15:12:43.0823 0x12e4  netprofm - ok
15:12:43.0826 0x12e4  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:12:43.0834 0x12e4  NetTcpActivator - ok
15:12:43.0837 0x12e4  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:12:43.0845 0x12e4  NetTcpPortSharing - ok
15:12:43.0875 0x12e4  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
15:12:43.0881 0x12e4  nfrd960 - ok
15:12:43.0905 0x12e4  [ 4621514D60E64B17464F192155498077, B1BBDB2FF164BC88D6309F0C5785A7C39CEB6FC7CE4CB6D960C7D5E19E359DC9 ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:12:43.0918 0x12e4  NlaSvc - ok
15:12:43.0923 0x12e4  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:12:43.0942 0x12e4  Npfs - ok
15:12:43.0945 0x12e4  [ 9702E6E07379F5FDA3B2FB1DC137553A, D7F9CB06A030BAB87724901376E593C6B66EF38FAED696446BECB71E21A6CD49 ] nsi            C:\Windows\system32\nsisvc.dll
15:12:43.0953 0x12e4  nsi - ok
15:12:43.0968 0x12e4  [ 7D00B92D4803354BC6616A293A24C119, C9FB5EDE7CE2B698DBC6B788D758D5603C59AA25229F802901A152795FFA2C54 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:12:43.0976 0x12e4  nsiproxy - ok
15:12:44.0022 0x12e4  [ DF54A465B6C6AA7A306D03B9B1D2B61E, 691C409CFAC3BCA8470C9492E5DD72E604106FE9E5F8B0B40572F3481F2367EB ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:12:44.0053 0x12e4  Ntfs - ok
15:12:44.0065 0x12e4  NTIOLib_1_0_C - ok
15:12:44.0083 0x12e4  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
15:12:44.0100 0x12e4  Null - ok
15:12:44.0129 0x12e4  [ C58189F39002E5E483C0B8BF728E8343, E86730A549F5F35B97109B16A84C32DCD51AC6379D911C1B7379AF449C76FA11 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:12:44.0136 0x12e4  nvraid - ok
15:12:44.0143 0x12e4  [ 77497B64AEAC221A081D2EE7C80B1CF4, 9C887206C24AD2BB276D2F21DCD882F824DF4A9D38731C20B12DAD392F623122 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:12:44.0150 0x12e4  nvstor - ok
15:12:44.0176 0x12e4  [ 1317382EDFDF491DA4CB3BACFF058A52, 393864357771F8658704C726ED3256F3C4FDF6E6CE682F2165F1792C48E12E55 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:12:44.0183 0x12e4  nv_agp - ok
15:12:44.0194 0x12e4  [ C1E10246E2F0436D0AFD147E8F28391F, 740488612F06A0876A7347D90C9D0EB01204F68AB1F5DD9ED579533BA8DAED6B ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
15:12:44.0201 0x12e4  ohci1394 - ok
15:12:44.0220 0x12e4  [ 1CBF382EAFF5E298F8CAE6F07A321DC0, 1958B6923F16D3D7C2EE6836EC1994CE566036FEBC95B4C2E03C99EC651CA4CC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
15:12:44.0231 0x12e4  p2pimsvc - ok
15:12:44.0251 0x12e4  [ 27DF5BAA26444B4166F1015193787725, 946BE0655B824F744109F357D8BF43F159605F1354673A7C4D355C84FA66A7B6 ] p2psvc          C:\Windows\system32\p2psvc.dll
15:12:44.0263 0x12e4  p2psvc - ok
15:12:44.0291 0x12e4  [ 0E75370C05A7AB23E3B05840BA9E1935, F1C77B265A8DDB966A69434484D5AC90987B72C43EAC87E6C6A7EE7704537915 ] Parport        C:\Windows\system32\drivers\parport.sys
15:12:44.0298 0x12e4  Parport - ok
15:12:44.0322 0x12e4  [ B38E9BF9A0A43B0E84731CE83541D710, 759DB5086A2966B506B0A22583C60FCCEEFEEE760CA734A65BEC129509F1EAA4 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
15:12:44.0327 0x12e4  partmgr - ok
15:12:44.0349 0x12e4  [ 50B4EB78246F2B5EA57826F5F6244DD7, 4C04F7DC6C21EBC7D13AF0478A063C14ECF5D8804F3F98DE39A99E123F4FCCD8 ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:12:44.0359 0x12e4  PcaSvc - ok
15:12:44.0370 0x12e4  [ E8EDD0D68FB3D1FD1B1EB410DC8E87BC, 3D590E365BE388E21286AF70D195B9159B70CA6EB43538B5EB9EEA1D55CD09F9 ] pci            C:\Windows\system32\drivers\pci.sys
15:12:44.0377 0x12e4  pci - ok
15:12:44.0402 0x12e4  [ 7D7E0DC331C675B35627B9E2C4ED1B4B, D7898C6638B9DF29DA7614A1EA10CFC4A9095813665275DC91010A56D2D89209 ] pciide          C:\Windows\system32\drivers\pciide.sys
15:12:44.0407 0x12e4  pciide - ok
15:12:44.0441 0x12e4  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
15:12:44.0448 0x12e4  pcmcia - ok
15:12:44.0461 0x12e4  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\Windows\system32\drivers\pcw.sys
15:12:44.0466 0x12e4  pcw - ok
15:12:44.0499 0x12e4  [ A1437BBF4DD736F0FEBE720ABB591316, 008B0B7B11D40B7D0E283575DBE8F50C026732A117C9A562562210FE8764F492 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:12:44.0515 0x12e4  PEAUTH - ok
15:12:44.0571 0x12e4  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:12:44.0577 0x12e4  PerfHost - ok
15:12:44.0626 0x12e4  [ B92FD8F870E56A3A010A7B77C583DCDA, F7D309CF8AFFC35C90DB37D0C22A209FFB259040D5BAE57B3938CFB07E08713D ] pla            C:\Windows\system32\pla.dll
15:12:44.0654 0x12e4  pla - ok
15:12:44.0689 0x12e4  [ 9AB25C0B739B432819F0D141BEB3B38A, 354AEB215643B49FB729789BBDB9037B6FA10A538AF1262D882972952D651004 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:12:44.0703 0x12e4  PlugPlay - ok
15:12:44.0723 0x12e4  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
15:12:44.0729 0x12e4  PNRPAutoReg - ok
15:12:44.0745 0x12e4  [ 1CBF382EAFF5E298F8CAE6F07A321DC0, 1958B6923F16D3D7C2EE6836EC1994CE566036FEBC95B4C2E03C99EC651CA4CC ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
15:12:44.0756 0x12e4  PNRPsvc - ok
15:12:44.0784 0x12e4  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
15:12:44.0808 0x12e4  PolicyAgent - ok
15:12:44.0835 0x12e4  [ 94A61BDF895925BAD2A36417E3FBF706, 22F3ABC273C66B64D0C0353B388902368307415E8EBA488DA6C6C1E1330E3D0C ] Power          C:\Windows\system32\umpo.dll
15:12:44.0845 0x12e4  Power - ok
15:12:44.0873 0x12e4  [ 0E13F3D32ED2C76B3485294E43040738, 8CCEEC4D2B5F41704A0393AF299811B305B140C944B16C6D40B58AC5FF7BC548 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:12:44.0881 0x12e4  PptpMiniport - ok
15:12:44.0901 0x12e4  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\Windows\system32\drivers\processr.sys
15:12:44.0907 0x12e4  Processor - ok
15:12:44.0951 0x12e4  [ 1EA789C00B0ACAD75193CDC6F8829015, C5E830992AC71E5969FCA2825700224812888CD33F84D94EFA60F39AD8FF9B57 ] ProfSvc        C:\Windows\system32\profsvc.dll
15:12:44.0963 0x12e4  ProfSvc - ok
15:12:44.0968 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] ProtectedStorage C:\Windows\system32\lsass.exe
15:12:44.0974 0x12e4  ProtectedStorage - ok
15:12:44.0994 0x12e4  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
15:12:45.0013 0x12e4  Psched - ok
15:12:45.0052 0x12e4  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
15:12:45.0078 0x12e4  ql2300 - ok
15:12:45.0110 0x12e4  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
15:12:45.0116 0x12e4  ql40xx - ok
15:12:45.0140 0x12e4  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\Windows\system32\qwave.dll
15:12:45.0152 0x12e4  QWAVE - ok
15:12:45.0161 0x12e4  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:12:45.0170 0x12e4  QWAVEdrv - ok
15:12:45.0176 0x12e4  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:12:45.0194 0x12e4  RasAcd - ok
15:12:45.0212 0x12e4  [ FCBC6E55B7EAFEE6E26B5AF77441DD2A, CCAB8711CBFD9435609FBF0C0F2013FF5E5174BC23A6DD0B3142147F6770937E ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
15:12:45.0219 0x12e4  RasAgileVpn - ok
15:12:45.0236 0x12e4  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\Windows\System32\rasauto.dll
15:12:45.0256 0x12e4  RasAuto - ok
15:12:45.0272 0x12e4  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
15:12:45.0291 0x12e4  Rasl2tp - ok
15:12:45.0332 0x12e4  [ F674C89CC5835F2EB6E914150F59C0D4, 1B753FFCCFDD44E0CC705DE8DBCCAC146D70E8C066564C056A969230929582E5 ] RasMan          C:\Windows\System32\rasmans.dll
15:12:45.0343 0x12e4  RasMan - ok
15:12:45.0363 0x12e4  [ 64908FACD0C3EAE09E4FDF251A4B2792, 1A8F7D28B7A6366B081F774EAC08C92DEC21F03B8BC74B0A918B6AB7CA67B682 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:12:45.0370 0x12e4  RasPppoe - ok
15:12:45.0398 0x12e4  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
15:12:45.0418 0x12e4  RasSstp - ok
15:12:45.0447 0x12e4  [ 7FC7357E1FA467EB68F405B1B5FEE365, 0EC3FDB080494F85E58641B10411448C931ED1EB8D5176A958437FC9B39B15DE ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
15:12:45.0460 0x12e4  rdbss - ok
15:12:45.0470 0x12e4  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
15:12:45.0478 0x12e4  rdpbus - ok
15:12:45.0491 0x12e4  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:12:45.0509 0x12e4  RDPCDD - ok
15:12:45.0527 0x12e4  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:12:45.0545 0x12e4  RDPENCDD - ok
15:12:45.0549 0x12e4  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
15:12:45.0568 0x12e4  RDPREFMP - ok
15:12:45.0584 0x12e4  [ 79062C89658D3E71097E0CB7A85B7E46, 22DE59A0C2DC3207A759DD5570CC0988F31F4DDA64D165D68A4A170D8CB9C2C2 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
15:12:45.0595 0x12e4  RDPWD - ok
15:12:45.0630 0x12e4  [ 53E15480838EB8550D80A8796982C7EE, F188A30180E8CEBB1157E7A404BC5D6EB414976C5AA1BD49E420715169D3E16A ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
15:12:45.0637 0x12e4  rdyboost - ok
15:12:45.0655 0x12e4  [ AE0D1BF6603EBC2A831B80918C9DB444, 39FA55F4EA56964954C76DE56D78515D454C3DD59E9D942E8A5EDF6A73DADD69 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:12:45.0664 0x12e4  RemoteAccess - ok
15:12:45.0691 0x12e4  [ 71AD40FFF94D90B86748952022ECED2D, A2AEF7FC3B062D2EE2D70B4CA1CE23E353685F7E51F23F5CD493683275CCB0FB ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:12:45.0702 0x12e4  RemoteRegistry - ok
15:12:45.0726 0x12e4  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
15:12:45.0746 0x12e4  RpcEptMapper - ok
15:12:45.0755 0x12e4  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
15:12:45.0762 0x12e4  RpcLocator - ok
15:12:45.0785 0x12e4  [ 4B1099E362ADAF9A4FA9B06D76294349, 163B466029223827163D3CC3561CBEC0C2046F34C86BEA1461343E315471FBF4 ] RpcSs          C:\Windows\system32\rpcss.dll
15:12:45.0800 0x12e4  RpcSs - ok
15:12:45.0818 0x12e4  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:12:45.0837 0x12e4  rspndr - ok
15:12:45.0877 0x12e4  [ DCF7221D6588EDA8CD77CB27AE9B1844, 7741A4F513952CC3C4D5056958D0D50F8F2A9D3142C7478707F73A83D3CDE01C ] RTL8167        C:\Windows\system32\DRIVERS\Rt64win7.sys
15:12:45.0895 0x12e4  RTL8167 - ok
15:12:45.0901 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] SamSs          C:\Windows\system32\lsass.exe
15:12:45.0907 0x12e4  SamSs - ok
15:12:45.0918 0x12e4  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:12:45.0924 0x12e4  sbp2port - ok
15:12:45.0950 0x12e4  [ 9C7ECDB7D4F0113621D0C2806D634DEC, A2CD66F1BB6329309B9423D72112299F6E24F09B8B0F2FB82EFEE57ED67E5C85 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:12:45.0959 0x12e4  SCardSvr - ok
15:12:45.0979 0x12e4  [ 53CE84F6E4FABFC5AB47375546E1303D, 8FA3B1063ED1EE8B4771DDC5A8CA87AA93E1F0FB7B7A206E0AFFAEBF707FCB6E ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
15:12:45.0984 0x12e4  scfilter - ok
15:12:46.0020 0x12e4  [ FFF0BE84084D90265A6ED79229CE53AA, 2A0D76E68E15B1821C8977F1BACE7785EEA621DF0B5E804D337D0362CE479544 ] Schedule        C:\Windows\system32\schedsvc.dll
15:12:46.0045 0x12e4  Schedule - ok
15:12:46.0065 0x12e4  [ E37B315C170C8DE43592F416264A6C31, 41109BB6A3681763AB43F9BA8FDA58C1ECBEAD8258B5FF65F95AFA072468984A ] SCPolicySvc    C:\Windows\System32\certprop.dll
15:12:46.0071 0x12e4  SCPolicySvc - ok
15:12:46.0097 0x12e4  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:12:46.0104 0x12e4  SDRSVC - ok
15:12:46.0184 0x12e4  [ 2ED9CD42F4E46EF13073847F8924B60C, 01AD75364DED7596C131FF73300BB910555C6901C826A669ABDA4A01D0DD2178 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
15:12:46.0212 0x12e4  SDScannerService - ok
15:12:46.0302 0x12e4  [ 94653C9CFDC15B30EEECD94BA7219654, 59F54AC9BC79C1BFBEA84992181C58AF434A3DDDF473C9BE942D3462875A8375 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
15:12:46.0374 0x12e4  SDUpdateService - ok
15:12:46.0403 0x12e4  [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
15:12:46.0410 0x12e4  SDWSCService - ok
15:12:46.0439 0x12e4  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:12:46.0446 0x12e4  secdrv - ok
15:12:46.0474 0x12e4  [ B17F80360153B9DCED601108B74BDC25, 8AAE54EB719442EADDA8C67887A311838083B848BB714B4C8AF44BF4E9A7B75E ] seclogon        C:\Windows\system32\seclogon.dll
15:12:46.0483 0x12e4  seclogon - ok
15:12:46.0518 0x12e4  [ 07F83829E7429E60298440CD1E601A6A, 9F1229CD8DD9092C27A01F5D56E3C0D59C2BB9F0139ABF042E56F343637FDA33 ] semav6msr64    C:\Windows\system32\drivers\semav6msr64.sys
15:12:46.0524 0x12e4  semav6msr64 - ok
15:12:46.0551 0x12e4  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
15:12:46.0571 0x12e4  SENS - ok
15:12:46.0588 0x12e4  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
15:12:46.0595 0x12e4  SensrSvc - ok
15:12:46.0617 0x12e4  [ 38B4E056D31DF16EC0EB5884F65B1979, 58EF8363103702352B9BB9F4DB47E388E86193F3C93E7392523BCC86A76B46FE ] Serenum        C:\Windows\system32\drivers\serenum.sys
15:12:46.0622 0x12e4  Serenum - ok
15:12:46.0640 0x12e4  [ F9DF63C7E70CBAC77EB07E454B35AB2A, 4FB02E23F48BE9876EE4C6B1CD6B7DAFBD7AE1FD7C61B42B3A1C617F46053EC6 ] Serial          C:\Windows\system32\drivers\serial.sys
15:12:46.0647 0x12e4  Serial - ok
15:12:46.0675 0x12e4  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
15:12:46.0681 0x12e4  sermouse - ok
15:12:46.0712 0x12e4  [ 8E7762634E03FE9B8774C73309563BAD, 9A56D9E0CE17EA31EC0299F24CF55DF9F3C5462D0EB66BD4165851570BA71670 ] SessionEnv      C:\Windows\system32\sessenv.dll
15:12:46.0723 0x12e4  SessionEnv - ok
15:12:46.0730 0x12e4  [ 5E332126E8DBAB045A21D623EA5A0488, C9EBEEDDD8DBE38CFF061FC6C3E487E871E6C56C06AEBCE0C0CDF5566CD0827D ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
15:12:46.0735 0x12e4  sffdisk - ok
15:12:46.0745 0x12e4  [ C7CF5601AEBC0AFD053C065998E312B1, 72FB7E64D06B73A9C27ACDEC3B96C8474CF0202FE3C00D51E573965F5CBC74FC ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:12:46.0751 0x12e4  sffp_mmc - ok
15:12:46.0753 0x12e4  [ 4530300DB74296B77FCC9E549E0C3752, 8F830353CBF103EC5B7A95FEF5164E31619121BEBB4940F4405435A71F7207BE ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
15:12:46.0758 0x12e4  sffp_sd - ok
15:12:46.0780 0x12e4  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
15:12:46.0786 0x12e4  sfloppy - ok
15:12:46.0813 0x12e4  [ 595D3A71FDAF4ADB4227E4F8FA31FC59, 988F20A2F8B8B56524C82B4B2F6E1C7E7471FD44AB5BA85A468A7B3E51117308 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:12:46.0824 0x12e4  SharedAccess - ok
15:12:46.0859 0x12e4  [ 4B247D567187961DCBAA98FD13D8EB39, 8758021A5303A2EF2DF7549AA3719CE927FCA13D497DD0AE9F4A4BF55EEF8D2F ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:12:46.0871 0x12e4  ShellHWDetection - ok
15:12:46.0885 0x12e4  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
15:12:46.0890 0x12e4  SiSRaid2 - ok
15:12:46.0906 0x12e4  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
15:12:46.0912 0x12e4  SiSRaid4 - ok
15:12:46.0933 0x12e4  [ 4E6FAEE3F259DAC82213D935785991FB, ADA019AD261BBEAE78495B508B4D375BEC1005DF119F20897D29C3C613A0CA46 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
15:12:46.0943 0x12e4  SkypeUpdate - ok
15:12:46.0963 0x12e4  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
15:12:46.0983 0x12e4  Smb - ok
15:12:47.0017 0x12e4  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:12:47.0024 0x12e4  SNMPTRAP - ok
15:12:47.0028 0x12e4  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\Windows\system32\drivers\spldr.sys
15:12:47.0033 0x12e4  spldr - ok
15:12:47.0073 0x12e4  [ E9B8F49884BDDE8BE466F6133523577F, 9B6E22F340640C8FC97C4F081C0B34F055C4088FCB9B6EFB35E2424DBBEDF842 ] Spooler        C:\Windows\System32\spoolsv.exe
15:12:47.0087 0x12e4  Spooler - ok
15:12:47.0180 0x12e4  [ 19907FFEF003698B25D6D58AD38A256A, BFAFEE132EF82A29ECF69BE37E9A4A12641F22CEB015B9103D3AE200E64EBC03 ] sppsvc          C:\Windows\system32\sppsvc.exe
15:12:47.0250 0x12e4  sppsvc - ok
15:12:47.0274 0x12e4  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
15:12:47.0294 0x12e4  sppuinotify - ok
15:12:47.0326 0x12e4  [ DFB9455AA17E89E20F302B0D63F3DF01, 127842C77A601AC92D20C18EE1298CFED1D4D25314F2B31FE02E572BD7DE32F2 ] srv            C:\Windows\system32\DRIVERS\srv.sys
15:12:47.0340 0x12e4  srv - ok
15:12:47.0356 0x12e4  [ B33FBF664008CD1D73454D3B6BBBBB6F, 2A13D281D1E169055A282603447E22D0F9AD6E5227A0234E91A4AEF4CBE602B0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:12:47.0370 0x12e4  srv2 - ok
15:12:47.0387 0x12e4  [ 707E7C3E39DEAF69E34D502FAD96E5EF, 6017F20C9ED0A9B1D726146849E107AA274CDA881D20D7E3CCB8FA9219E28EA9 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:12:47.0398 0x12e4  srvnet - ok
15:12:47.0426 0x12e4  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
15:12:47.0447 0x12e4  SSDPSRV - ok
15:12:47.0461 0x12e4  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\Windows\system32\sstpsvc.dll
15:12:47.0480 0x12e4  SstpSvc - ok
15:12:47.0529 0x12e4  [ 04F9B53224689BB3638CC2D3DA721E5C, D073C8D5CEFD59CC3D4834A6B92EA8FE113A73C400C27BB6B3D215522FAE17C3 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
15:12:47.0553 0x12e4  Steam Client Service - ok
15:12:47.0566 0x12e4  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
15:12:47.0571 0x12e4  stexstor - ok
15:12:47.0596 0x12e4  [ 82848B4B4D2E4987844C7DC51AAF7313, 2A91F1411228D5B2BFA3B531FE756BFC50C2E84604D1E29724E8CF5964189BE2 ] stisvc          C:\Windows\System32\wiaservc.dll
15:12:47.0609 0x12e4  stisvc - ok
15:12:47.0628 0x12e4  [ 5485470D82D50777757AF985776474BD, 6BCCC3F9379BB02C83CCA29534A899528E42B46E7C16133ED17CFCA60711E15A ] swenum          C:\Windows\system32\drivers\swenum.sys
15:12:47.0632 0x12e4  swenum - ok
15:12:47.0655 0x12e4  [ EFF602790C7B1407510BB6FCCE487D97, BF42D990287773F3FA75486078DDC0C97E3FC43E3C2BB640AA0F9FEA894DB6D8 ] swprv          C:\Windows\System32\swprv.dll
15:12:47.0671 0x12e4  swprv - ok
15:12:47.0719 0x12e4  [ B30860D06FC3296FA04A7C7AB5ED02B9, 98C112F9AB70DA36F622095C28ABBFC13C5BDB816B67940D0C8ACB110427CF15 ] SysMain        C:\Windows\system32\sysmain.dll
15:12:47.0749 0x12e4  SysMain - ok
15:12:47.0780 0x12e4  [ 2BE3A44B764D6C43CBF4650E862CB807, 78920DA47F3A0C26503FB62EF159455A860E57A9A39C72AEE23A9324168EC1D2 ] SystemUsageReportSvc_WILLAMETTE C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
15:12:47.0787 0x12e4  SystemUsageReportSvc_WILLAMETTE - ok
15:12:47.0804 0x12e4  [ 2682F3E219BDD0FCDC452E1FE7AD7E8B, 764BAF7F52DB774CFCF8E40957A7BA7AE4E729585F37C31154569F04A1A02135 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:12:47.0812 0x12e4  TabletInputService - ok
15:12:47.0846 0x12e4  [ A58C3A68BD01A3A96E3244A8C15CE585, D9EED5BF3E06BC1636A17652171847C4E7C2F541DA818221E37D2B4F201ECDA8 ] TapiSrv        C:\Windows\System32\tapisrv.dll
15:12:47.0857 0x12e4  TapiSrv - ok
15:12:47.0917 0x12e4  [ FF92A3BBFA7E7CB71B1892BF13AB8AFF, 17BE2DE04564F5B3309C5F35DA6CB49995715A9DDAAF4AE844E3C29F5AEAA1C7 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
15:12:47.0948 0x12e4  Tcpip - ok
15:12:47.0985 0x12e4  [ FF92A3BBFA7E7CB71B1892BF13AB8AFF, 17BE2DE04564F5B3309C5F35DA6CB49995715A9DDAAF4AE844E3C29F5AEAA1C7 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
15:12:48.0016 0x12e4  TCPIP6 - ok
15:12:48.0027 0x12e4  [ 7D5ACA08ACF6F39441C09E0C3E397138, C52AA6ED5892D06CF3D4B5621C0B708A399C6757D29276FD99440CB55CA20A5F ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:12:48.0035 0x12e4  tcpipreg - ok
15:12:48.0055 0x12e4  [ 5FB705F7D93059B059900F2C6F7DE76B, F5AEF8C3DA8042FA04124F58B32B66ADF76107DB63D5D1D7B7D9511135524550 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:12:48.0064 0x12e4  TDPIPE - ok
15:12:48.0066 0x12e4  [ CEB11D6BB417E3E26CD0FEFDCAD5A052, 4AB18D67ACAAA66D527E3CA73267C8FC0ABFD9E11866D8849668E5E13F7A783C ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
15:12:48.0074 0x12e4  TDTCP - ok
15:12:48.0098 0x12e4  [ 106269AB8623435C130A33DCA499A7EF, B61A982924F34694BB90BCB174BED25CE2A1A8B0A59EB0C196D423EAA7D6FFA7 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
15:12:48.0108 0x12e4  tdx - ok
15:12:48.0122 0x12e4  [ DF87E778D5EDC3F8959C6AB05A9C4E39, 4364E19490D49F99F39FAD8002D269B95566F8CE835E6DF19BA246D840550981 ] TermDD          C:\Windows\system32\drivers\termdd.sys
15:12:48.0127 0x12e4  TermDD - ok
15:12:48.0162 0x12e4  [ 30A3A5BE7A486ADB5E20FFE4324362BF, 81F9B5E10478316F250466B24BCBFA77B38DA9CF43223FAC4CF37379E5DE49E0 ] TermService    C:\Windows\System32\termsrv.dll
15:12:48.0181 0x12e4  TermService - ok
15:12:48.0207 0x12e4  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
15:12:48.0217 0x12e4  Themes - ok
15:12:48.0240 0x12e4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\Windows\system32\mmcss.dll
15:12:48.0259 0x12e4  THREADORDER - ok
15:12:48.0274 0x12e4  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
15:12:48.0295 0x12e4  TrkWks - ok
15:12:48.0337 0x12e4  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:12:48.0357 0x12e4  TrustedInstaller - ok
15:12:48.0374 0x12e4  [ 9E5A819FA3016108CED020FE621CB0AE, 99F49191D957157AEC03672598FE9C6C5F6BEECA9BC254F1CFB84E3931B2392A ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:12:48.0382 0x12e4  tssecsrv - ok
15:12:48.0413 0x12e4  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
15:12:48.0419 0x12e4  TsUsbFlt - ok
15:12:48.0435 0x12e4  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
15:12:48.0440 0x12e4  TsUsbGD - ok
15:12:48.0453 0x12e4  [ 06BC523D39A2E6A9FBAED812C7A5ED6B, F3E2D2B24F52465223D790A8618825024617220FF19AC19006FDCED98739D74F ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:12:48.0461 0x12e4  tunnel - ok
15:12:48.0463 0x12e4  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
15:12:48.0469 0x12e4  uagp35 - ok
15:12:48.0494 0x12e4  [ 8DE87C94A4938BF4C21C310077DB22BD, 11DCBD0B7B00BC5D51D9575F90083D9F7C57FDB317AAD638EC775EFD9419574E ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:12:48.0507 0x12e4  udfs - ok
15:12:48.0536 0x12e4  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
15:12:48.0543 0x12e4  UI0Detect - ok
15:12:48.0578 0x12e4  [ F76C937416EE9A617FF5519370EEA1A1, 5036EDEC68F3D039C7A23BD532944FB5724155964FBB10659435C5989BE9FD4A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:12:48.0584 0x12e4  uliagpkx - ok
15:12:48.0603 0x12e4  [ C77B614D818386596EC5540E318AE034, EE4B6D5E612E3C927CFC6C8E9E979CFAEC47EA160FFA4602014B7C8D4644EC58 ] umbus          C:\Windows\system32\drivers\umbus.sys
15:12:48.0609 0x12e4  umbus - ok
15:12:48.0618 0x12e4  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
15:12:48.0624 0x12e4  UmPass - ok
15:12:48.0640 0x12e4  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
15:12:48.0664 0x12e4  upnphost - ok
15:12:48.0687 0x12e4  [ 3676F1F15EC8953F05AE618A049891ED, DEB084CCC5733E20E3FD5AA24636FFA7396B70BB1FB5E2A7627CC1DF5D0355F4 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
15:12:48.0694 0x12e4  usbccgp - ok
15:12:48.0714 0x12e4  [ 710EE0EEDFF1DB5089397CCBBBD80C58, E6336A6292557FBE49B94F07DF0195A186D5EB2FF137E5AD6DD435F4AC525373 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:12:48.0720 0x12e4  usbcir - ok
15:12:48.0731 0x12e4  [ E94288914A796BD942D8FCCFEC91E34D, 243CCE3C402D73DCF83D840F6A02C4911FA90D77F58B21E94B7F8BF5E42DF1A4 ] usbehci        C:\Windows\system32\drivers\usbehci.sys
15:12:48.0737 0x12e4  usbehci - ok
15:12:48.0757 0x12e4  [ FEAA37A971ACA6F2AED20551E5E3E5ED, BBFE80E2EB5E6FCE69DE46D7ADC30A91587AF463DA79E0CD7630764AE592FEBE ] usbhub          C:\Windows\system32\drivers\usbhub.sys
15:12:48.0767 0x12e4  usbhub - ok
15:12:48.0781 0x12e4  [ 19317FFA87F6AD97EB56E8C520C6CC97, 76CE555988172BA8BD6C39AE85E25A5301FDA9C682CACC3F4B9D9B6175EE503E ] usbohci        C:\Windows\system32\drivers\usbohci.sys
15:12:48.0786 0x12e4  usbohci - ok
15:12:48.0807 0x12e4  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
15:12:48.0815 0x12e4  usbprint - ok
15:12:48.0823 0x12e4  [ 18C50A2277BCB1509A27F91A07377263, 8034DF1A6841E029482B6843DFF906E9FBD3F26B8A317191145A670EB07AC0DA ] USBSTOR        C:\Windows\system32\drivers\USBSTOR.SYS
15:12:48.0829 0x12e4  USBSTOR - ok
15:12:48.0839 0x12e4  [ F906A62B9F67CD98761D6767964B426A, CA908E31388E2E05BB19526E7028421AD8DD96501DBE48A83D9570380404B7C0 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
15:12:48.0845 0x12e4  usbuhci - ok
15:12:48.0904 0x12e4  [ F4D8F67474DDA4FEF3935393AAA0173F, 5EB1700895E33972816DE4C2B920769CCE5580B83CAB8B2D7A8A6264F3A42B80 ] USER_ESRV_SVC_WILLAMETTE C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
15:12:48.0915 0x12e4  USER_ESRV_SVC_WILLAMETTE - ok
15:12:48.0929 0x12e4  [ 0FD209CC2F2A2B17D07CE2D977087088, E68280D69CF6499B2182AF4257F282D0700B79BA94B2C0B393B049A99BC786F5 ] UxSms          C:\Windows\System32\uxsms.dll
15:12:48.0937 0x12e4  UxSms - ok
15:12:48.0943 0x12e4  [ C1405BCE8275ED7B7AFAA62776DB6B3B, 9010A48812C42CA5142E2F9B2FA1C878AC3E45C3911E486A0AC25E332558409C ] VaultSvc        C:\Windows\system32\lsass.exe
15:12:48.0949 0x12e4  VaultSvc - ok
15:12:48.0970 0x12e4  [ DB25700CE057D426102AB5A2259F275B, 797ED4C829B827AECF63C25FF93BAA4DBEE7625C6240077E7403F1246988A3AE ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
15:12:48.0975 0x12e4  vdrvroot - ok
15:12:49.0005 0x12e4  [ 57295E9336C4AE8408725B6246BA6B9A, 58994C975E3378EE29A2A6127CF32EDDA4FF0D64881AE11C36D464DF718A2167 ] vds            C:\Windows\System32\vds.exe
15:12:49.0021 0x12e4  vds - ok
15:12:49.0034 0x12e4  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
15:12:49.0041 0x12e4  vga - ok
15:12:49.0054 0x12e4  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\Windows\System32\drivers\vga.sys
15:12:49.0073 0x12e4  VgaSave - ok
15:12:49.0094 0x12e4  [ FF0E9994E61F7D9778DB1C4E6F3F25F5, F160278446BB09F136AA7678F2920A5F0101A29C2B8E90D3A472AC53DBECC212 ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
15:12:49.0101 0x12e4  vhdmp - ok
15:12:49.0120 0x12e4  [ 2B6E179E984F5A11521F8FE1EA6BAE83, AF9B3C0826C8F9CC7DB37CF4385AD365B623FB03293C5AF907077799F202A7C7 ] viaide          C:\Windows\system32\drivers\viaide.sys
15:12:49.0125 0x12e4  viaide - ok
15:12:49.0127 0x12e4  [ 95B852EC9A799A1FDAD33A8F8FDE8818, A9511B8E4729D0333F81C1FEF0371407B0EDBB9CB653E679BD8DE8C05B88D52D ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:12:49.0133 0x12e4  volmgr - ok
15:12:49.0161 0x12e4  [ 758824D06738A437E56304FC1D400F7F, 76CB0EF89C24149F0D5C3BB81DD68FF2C42C45ADC7E29E97D1CA6640BDB55C19 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
15:12:49.0170 0x12e4  volmgrx - ok
15:12:49.0192 0x12e4  [ B52F1F5F55CD773BA89E5739B82E9C34, FBA4EC1EB9564B9EEFB1477AF54FE8862B8F52DCC518CB659B8862697C417A7B ] volsnap        C:\Windows\system32\drivers\volsnap.sys
15:12:49.0201 0x12e4  volsnap - ok
15:12:49.0223 0x12e4  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
15:12:49.0230 0x12e4  vsmraid - ok
15:12:49.0272 0x12e4  [ A6B355943A77FC59B4BE54F6CC2C1A06, 422DE0C69A4F34FAD576663587F6BD03A48E20C96F1283D803F7667A288B962D ] VSS            C:\Windows\system32\vssvc.exe
15:12:49.0302 0x12e4  VSS - ok
15:12:49.0321 0x12e4  [ BFCBFD74A7D673AF8311F236AA15D0AF, AE52D49121A6FB173D30DA6F3901A934A1F6C8FF9CF0DCEE8954FE05F111A063 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
15:12:49.0327 0x12e4  vwifibus - ok
15:12:49.0347 0x12e4  [ 97B4B3EB0CCEA0D020CC26A308921B9E, 25AEA08F5C769F292C801770141574C219434CD1BAB4F659726FAEB2EED9820C ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
15:12:49.0354 0x12e4  vwififlt - ok
15:12:49.0383 0x12e4  [ 77B02662D2485F43C096B32FC7A99B48, 7DB0EE090311CD1BC25629F4EA6F6E72F4B67287B753B02E9F76183A797D1C2F ] W32Time        C:\Windows\system32\w32time.dll
15:12:49.0397 0x12e4  W32Time - ok
15:12:49.0415 0x12e4  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
15:12:49.0421 0x12e4  WacomPen - ok
15:12:49.0451 0x12e4  [ 7AF9F1F2BAF52266096501BBBEEE62A9, 5B6B908B4F398F64E440DDD703E80F3C3E8537D5EB593CC69028E2E20456F213 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
15:12:49.0459 0x12e4  WANARP - ok
15:12:49.0461 0x12e4  [ 7AF9F1F2BAF52266096501BBBEEE62A9, 5B6B908B4F398F64E440DDD703E80F3C3E8537D5EB593CC69028E2E20456F213 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:12:49.0468 0x12e4  Wanarpv6 - ok
15:12:49.0512 0x12e4  [ 01037578F5CFE26D347296A03E0801C0, 91405FB934EFD8D0FE9B51CECBB977814B359C2EE1F409E62717C230362D7AFC ] wbengine        C:\Windows\system32\wbengine.exe
15:12:49.0539 0x12e4  wbengine - ok
15:12:49.0554 0x12e4  [ 55E42FA7B170579F9F95AC5A405F82FD, 1F3DA26D8395B9AF53ADCE075FA24E48FF4AA7553FC0F8CAF696B3F032EA6545 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
15:12:49.0564 0x12e4  WbioSrvc - ok
15:12:49.0591 0x12e4  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
15:12:49.0605 0x12e4  wcncsvc - ok
15:12:49.0618 0x12e4  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:12:49.0624 0x12e4  WcsPlugInService - ok
15:12:49.0648 0x12e4  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
15:12:49.0653 0x12e4  Wd - ok
15:12:49.0684 0x12e4  [ 37CE6867FC4A6827009A713A9737262C, D8890524F4EF358E35C4A992BEAF7C8FB5ED647FE4D899D3CF608C2201E218A5 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:12:49.0701 0x12e4  Wdf01000 - ok
15:12:49.0724 0x12e4  [ E8E4226F02B3CDC87FC53C9406F3BEA0, 2CF36989DCC2B534C4E55F95F52C911BD364735D2089D8195E5CB913268A5757 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:12:49.0734 0x12e4  WdiServiceHost - ok
15:12:49.0736 0x12e4  [ E8E4226F02B3CDC87FC53C9406F3BEA0, 2CF36989DCC2B534C4E55F95F52C911BD364735D2089D8195E5CB913268A5757 ] WdiSystemHost  C:\Windows\system32\wdi.dll
15:12:49.0747 0x12e4  WdiSystemHost - ok
15:12:49.0770 0x12e4  [ 0F9A4358F20B443D303F9FA222D4ECD2, 8552F4D8DF9E62DF7C1B1233B036E78BCE70F2BD1F057E23729CEF991BD65441 ] WebClient      C:\Windows\System32\webclnt.dll
15:12:49.0781 0x12e4  WebClient - ok
15:12:49.0807 0x12e4  [ D833A60DE407802A3A4894DD3B2E2AFB, CBB0CA5300A6F67D12EF0BE76F7EA30DE1C64C02D3CF1F835E36C5AD866A1D66 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:12:49.0820 0x12e4  Wecsvc - ok
15:12:49.0843 0x12e4  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
15:12:49.0863 0x12e4  wercplsupport - ok
15:12:49.0883 0x12e4  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
15:12:49.0903 0x12e4  WerSvc - ok
15:12:49.0937 0x12e4  [ 7575DC87DF112AC0C6E95A0F87915CDC, 1EC63A4CC0AC3341F639A5483F1A0B710E148DCB2DDA16ADCDDDED6E5EECE549 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
15:12:49.0942 0x12e4  WfpLwf - ok
15:12:49.0963 0x12e4  [ EACC800ECF26D82A063BC8E49EE1D8BF, DB14CDF030EDD10E174F44AA6EDC953964EC5E26D219480C776C29378BF84314 ] WiaRpc          C:\Windows\System32\wiarpc.dll
15:12:49.0970 0x12e4  WiaRpc - ok
15:12:49.0987 0x12e4  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
15:12:49.0992 0x12e4  WIMMount - ok
15:12:50.0011 0x12e4  WinDefend - ok
15:12:50.0019 0x12e4  WinHttpAutoProxySvc - ok
15:12:50.0053 0x12e4  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
15:12:50.0075 0x12e4  Winmgmt - ok
15:12:50.0129 0x12e4  [ A7F3CD630FAEDA9110881CBC5ED43F70, 4715EE145790CF0EC8B14E925D4D72AC92A30130F07F64746C6F030E9B0F73C5 ] WinRM          C:\Windows\system32\WsmSvc.dll
15:12:50.0167 0x12e4  WinRM - ok
15:12:50.0211 0x12e4  [ 20BEDD4C86D69D8036821B5FBF0081E5, 10FFAFBDBE0D576EA825351BFF3816551417C53E01E3D8B1955ACE3EA9DB027F ] Wlansvc        C:\Windows\System32\wlansvc.dll
15:12:50.0230 0x12e4  Wlansvc - ok
15:12:50.0248 0x12e4  [ 241A2D103E5F63A69B130D7C344A228D, 26458F76235116F2BD4F689763F1B730BD024C850B7B22238210D60ABB1393D8 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
15:12:50.0254 0x12e4  WmiAcpi - ok
15:12:50.0275 0x12e4  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:12:50.0284 0x12e4  wmiApSrv - ok
15:12:50.0313 0x12e4  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:12:50.0319 0x12e4  WPCSvc - ok
15:12:50.0336 0x12e4  [ 74D81AAA1AAAA9F74A978D9584EF0CB6, C4377E29C80004767CD9EB66B343DF46A96373A0F92F3D5A6D3536DFB3E3F226 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:12:50.0343 0x12e4  WPDBusEnum - ok
15:12:50.0363 0x12e4  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
15:12:50.0381 0x12e4  ws2ifsl - ok
15:12:50.0396 0x12e4  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
15:12:50.0407 0x12e4  wscsvc - ok
15:12:50.0470 0x12e4  [ 0506D69B820F2D82506C19D8CF5E4A3F, 210A14364D46E96C45906F07E9B0BD7627CAB1E997F8E5634832987328B6E1B4 ] wuauserv        C:\Windows\system32\wuaueng.dll
15:12:50.0512 0x12e4  wuauserv - ok
15:12:50.0534 0x12e4  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:12:50.0543 0x12e4  WudfPf - ok
15:12:50.0562 0x12e4  [ 1685B0232BF1306A31DFBC04F36A32B9, E4D98D1636E0E16F7EEAA6E2991307D66A5BA235D4CAF6293F423012E4D6B6B0 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
15:12:50.0572 0x12e4  wudfsvc - ok
15:12:50.0602 0x12e4  [ 13E19A9868C6E1C9F5584D571DDA7D76, 05F0BFA9C1F089EF35EBA85B9B142CF2AC5BDF82968073739E2950CB8444B4BA ] WwanSvc        C:\Windows\System32\wwansvc.dll
15:12:50.0613 0x12e4  WwanSvc - ok
15:12:50.0629 0x12e4  ================ Scan global ===============================
15:12:50.0644 0x12e4  [ CEC94EC582DBBAD9461EB2BE2BE319A6, A0FAACC5790D8B813415FB55BB56C5DBD1A9E04BD2CE29BB8671D706F4DA1DF6 ] C:\Windows\system32\basesrv.dll
15:12:50.0667 0x12e4  [ 01CF024CF63002A8134AE73CFACB2B51, 8CC1D0FE5EE04CAB68E41C5953832D8AF0C0BDA5F00D653B7B3064F604E8D9F2 ] C:\Windows\system32\winsrv.dll
15:12:50.0675 0x12e4  [ 01CF024CF63002A8134AE73CFACB2B51, 8CC1D0FE5EE04CAB68E41C5953832D8AF0C0BDA5F00D653B7B3064F604E8D9F2 ] C:\Windows\system32\winsrv.dll
15:12:50.0687 0x12e4  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
15:12:50.0715 0x12e4  [ 38382A6B73FB37EF692DCBD882AB1FC4, 66B8501C3797C8B4525CD8EC2B141A8751D7A163E24E249C3E1DE42F7C055889 ] C:\Windows\system32\services.exe
15:12:50.0719 0x12e4  [ Global ] - ok
15:12:50.0720 0x12e4  ================ Scan MBR ==================================
15:12:50.0727 0x12e4  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
15:12:50.0807 0x12e4  \Device\Harddisk0\DR0 - ok
15:12:50.0807 0x12e4  ================ Scan VBR ==================================
15:12:50.0808 0x12e4  [ 67244C0705B3A4B3430C77B9DF889843 ] \Device\Harddisk0\DR0\Partition1
15:12:50.0808 0x12e4  \Device\Harddisk0\DR0\Partition1 - ok
15:12:50.0845 0x12e4  [ A1A1CC4BA4AE1C51FC0245E9B1587FFB ] \Device\Harddisk0\DR0\Partition2
15:12:50.0845 0x12e4  \Device\Harddisk0\DR0\Partition2 - ok
15:12:50.0850 0x12e4  [ D636959D87291DFF36CF784BAB1DE298 ] \Device\Harddisk0\DR0\Partition3
15:12:50.0850 0x12e4  \Device\Harddisk0\DR0\Partition3 - ok
15:12:50.0851 0x12e4  ================ Scan generic autorun ======================
15:12:50.0995 0x12e4  [ F1BECCB20E118DBCED2C777FC54459F4, E5D1A1193FDCBAD0E930EC6E73942D339FC3885CE407C56BEE2F861F6F1735F1 ] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
15:12:51.0103 0x12e4  StartCN - ok
15:12:51.0288 0x12e4  [ 7F1D9A8ADFA040DBF7D23B7338DB77F3, A71CF7325333E6073A58C70245548AAC6569D2296DCEDC326ABE8F55611A2F99 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
15:12:51.0432 0x12e4  RTHDVCPL - ok
15:12:51.0501 0x12e4  [ 2555A094409BD20DAB7A97A5A539F21C, 9227932E394C9AB803C423ED38F58F2D7FBCB193A041FD3975B6F0A927D56B55 ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
15:12:51.0510 0x12e4  USB3MON - ok
15:12:51.0544 0x12e4  [ 4B5985DC72C3546A890C881A6EA5BE5A, CEB1B4F63517E9E4F7E473A70EE1B1968AD45AD41C6900CE38040F8CF857D98F ] C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
15:12:51.0565 0x12e4  AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 )
15:12:53.0938 0x12e4  Detect skipped due to KSN trusted
15:12:53.0938 0x12e4  AVMWlanClient - ok
15:12:54.0113 0x12e4  [ 7EE68A122ED08E4AAD8DA551E34D2515, B3C9AB270AF595D3DBAFBF4A312B96CBF00C16F0A03CCC86BE56825CD1EB7143 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
15:12:54.0172 0x12e4  SDTray - ok
15:12:54.0223 0x12e4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:12:54.0259 0x12e4  Sidebar - ok
15:12:54.0278 0x12e4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:12:54.0298 0x12e4  mctadmin - ok
15:12:54.0316 0x12e4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:12:54.0338 0x12e4  Sidebar - ok
15:12:54.0341 0x12e4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:12:54.0350 0x12e4  mctadmin - ok
15:12:54.0395 0x12e4  [ F51BB12D8977D26C1A4CDA348770D9F1, DDA35CD8F8A6591B83821B5180D457740E0B820CCE000BC7FB1B78FB4AEAD3BA ] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe
15:12:54.0411 0x12e4  SpybotPostWindows10UpgradeReInstall - detected UnsignedFile.Multi.Generic ( 1 )
15:12:56.0748 0x12e4  Detect skipped due to KSN trusted
15:12:56.0748 0x12e4  SpybotPostWindows10UpgradeReInstall - ok
15:12:56.0749 0x12e4  Waiting for KSN requests completion. In queue: 5
15:12:57.0749 0x12e4  Waiting for KSN requests completion. In queue: 5
15:12:58.0749 0x12e4  Waiting for KSN requests completion. In queue: 5
15:12:59.0754 0x12e4  AV detected via SS2: Spybot - Search and Destroy, C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe ( 2.3.39.0 ), 0x61010 ( enabled : outofdate )
15:12:59.0781 0x12e4  Win FW state via NFP2: enabled ( trusted )
15:13:02.0177 0x12e4  ============================================================
15:13:02.0177 0x12e4  Scan finished
15:13:02.0177 0x12e4  ============================================================
15:13:02.0180 0x12ac  Detected object count: 0
15:13:02.0180 0x12ac  Actual detected object count: 0

M-K-D-B 28.11.2016 16:05
Servus,


Logdateien sehen gut aus. :)


Wir können gerne ein paar Tools laufen lassen, wenn du magst... gib mir einfach Bescheid.

a3b2c1 28.11.2016 17:16
Ja, gerne.

M-K-D-B 29.11.2016 15:32
Servus,


wir beginnen so:


Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

a3b2c1 30.11.2016 15:03
Habs drüber laufen lassen, es wurde allerdings nichts gefunden, deshalb war auch kein Cleanup nötig/möglich..
Passt das?

M-K-D-B 30.11.2016 17:07
Servus,


ja, passt. :)






Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel
    • "Prefetch" Dateien
    • Proxy
    • Winsock
    • Internet Explorer Richtlinien
    • Chrome Richtlinien
  • Bestätige die Auswahl mit Ok.
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.








Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die beiden neuen Logdateien von FRST.

M-K-D-B 03.12.2016 14:49
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:28 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131