Trojaner-Board - Windows 7: Laptop friert oftmals ein

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Windows 7: Laptop friert oftmals ein (https://www.trojaner-board.de/183604-windows-7-laptop-friert-oftmals.html)

Windows 7: Laptop friert oftmals ein

Hallo liebes TB :)

Nachdem ihr damals meiner Mutter geholfen habt und ich selber Versage hoffe ich das ihr mir Weiterhelfen könnt.

Mein problem ist folgendes: Mein Win 7 Laptop(32bit) hat seit ca 3 Wochen nun immer häufiger das Gefühl einfrieren zu müssen. Dabei ist es egal ob ich im Internet surfe oder ein Spiel spiele. Wenn er Lust hat, friert er dann ein. Da half für mich meist immer 5 Minuten warten, oder gar den laptop komplett auszumachen, da sich einfach nichts mehr getan hat.

Ich habe regelmäßig Updates gezogen, halte Jeden Freitag meinen Scan mit dem Malwarebytes und dem Security Essentials von Microsoft. Nur am 11.12 gab es einen Fund, zu vor jedoch nie. Daher hoffe ich das ihr mir behilflich sein könnt den Fehler bei meinem laptop zu finden.

Dabei mein Fundlog des Malwarebytes.

MFG Div

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 10.12.2016

Suchlaufzeit: 18:03

Protokolldatei: Scan.txt

Administrator: Ja
 

Version: 2.2.1.1043

Malware-Datenbank: v2016.12.10.06

Rootkit-Datenbank: v2016.11.20.01

Lizenz: Premium-Version

Malware-Schutz: Aktiviert

Schutz vor bösartigen Websites: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x86

Dateisystem: NTFS

Benutzer: flkr2104
 

Suchlauftyp: Benutzerdefinierter Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 513996

Abgelaufene Zeit: 6 Std., 49 Min., 29 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Aktiviert

Tiefer Rootkit-Suchlauf: Aktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 5

PUP.Optional.PlusHD, C:\Windows\System32\DriverStore\FileRepository\msgplusdriver.inf_x86_neutral_ba3eb3fc7c1cf303\i386\MsgPlusDriver.sys, In Quarantäne, [b7f717ce801afd393cc2657adf2449b7], 

PUP.Optional.PlusHD, C:\Program Files\Yuna Software\Messenger Plus!\MsgPlusDriver\amd64\MsgPlusDriver.sys, In Quarantäne, [634bb2335b3f2c0ab34b07d86f9430d0], 

PUP.Optional.PlusHD, C:\Program Files\Yuna Software\Messenger Plus!\MsgPlusDriver\i386\MsgPlusDriver.sys, In Quarantäne, [6f3f17ce74267abc23db11ce0ef52fd1], 

PUP.Optional.PlusHD, C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusDriver\amd64\MsgPlusDriver.sys, In Quarantäne, [822c667f5347b284c836de01a261d52b], 

PUP.Optional.PlusHD, C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusDriver\i386\MsgPlusDriver.sys, In Quarantäne, [dbd3e10462383df90af48a559a692fd1], 
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

:hallo:

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...:abklatsch:

Bitte arbeite alle Schritte der Reihe nach ab.
Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
Poste die Logfiles direkt in Deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst.

Los geht's:

Schritt 1
http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...e/frst/sn1.PNG

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://deeprybka.trojaner-board.de/tdss/codetags.gif

So, dann die FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-12-2016

Ran by flkr2104 (administrator) on UNGOEB-U1260RT5 (19-12-2016 20:34:19)

Running from C:\Users\flkr2104\Desktop

Loaded Profiles: flkr2104 (Available Profiles: flkr2104 & Administrator & DefaultAppPool)

Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Language: Norsk, bokmål (Norge)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSrv.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Windows\Runservice.exe

() C:\ProgramData\MobileBrServ\mbbService.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe

() C:\Windows\System32\PnkBstrA.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmListen.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Akamai Technologies, Inc.) C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Akamai Technologies, Inc.) C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\BM\TMBMSRV.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ====================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [QLBController] => C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [318520 2011-05-13] (Hewlett-Packard Company)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [OfficeScanNT Monitor] => C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe [1533720 2013-11-20] (Trend Micro Inc.)

HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2444016 2013-10-30] (Synaptics Incorporated)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [1667164 2000-01-01] (IDT, Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)

HKLM\...\Policies\Explorer: [NoAutorun] 1

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Run: [Akamai NetSession Interface] => C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6775512 2016-06-10] (Piriform Ltd)

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {020048ac-b58c-11e6-9e05-68a3c484513c} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {1788b050-b8af-11e6-9092-68a3c484513c} - E:\setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {2bf59e40-ca7f-11e1-8c9d-806e6f6e6963} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {45cf754d-af17-11e5-83e2-68a3c484513c} - E:\setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {5a673a96-e715-11e4-83ac-68a3c484513c} - E:\Setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {5a673a9a-e715-11e4-83ac-68a3c484513c} - F:\RunGame.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {8973e3ae-fe4c-11e4-a044-68a3c484513c} - E:\AutoRun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {a055b961-4b69-11e6-9d5e-68a3c484513c} - F:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {b2286f40-32fb-11e1-bea2-806e6f6e6963} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {dec291b3-db35-11e4-a209-68a3c484513c} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {ff282818-2118-11e3-b096-68a3c484513c} - E:\PCSTART.exe

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

Startup: C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-12-17]

ShortcutTarget: MEGAsync.lnk -> C:\Users\flkr2104\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{2F6908F7-5324-4907-AB61-36D8C47D8549}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{F3075377-C443-41F3-883B-A8B479B982D7}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{FA72C645-2B03-425E-AAB6-80878F656836}: [DhcpNameServer] 192.168.8.1 192.168.8.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.oppland.no

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/

URLSearchHook: HKU\S-1-5-21-1113328611-58381748-87005590-109325 - (No Name) - {37483b40-c254-4a72-bda4-22ee90182c1e} -  No File

SearchScopes: HKLM -> DefaultScope value is missing

SearchScopes: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\OfficeScan Client\TmIEPlg.dll [2013-07-01] (Trend Micro Inc.)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> No Name - {37483B40-C254-4A72-BDA4-22EE90182C1E} -  No File

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\OfficeScan Client\TmIEPlg.dll [2013-07-01] (Trend Micro Inc.)
 

FireFox:

========

FF DefaultProfile: 8wvhcelo.default

FF ProfilePath: C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default [2016-12-19]

FF Extension: (DOM Inspector) - C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default\Extensions\inspector@mozilla.org [2016-05-08]

FF Extension: (ChatZilla) - C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2015-12-06]

FF ProfilePath: C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788 [2016-12-19]

FF Homepage: Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788 -> hxxps://www.google.de/

FF Extension: (YouTube Download Plus) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\addon@ytdownloader.info.xpi [2016-09-03]

FF Extension: (MEGA) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\firefox@mega.co.nz.xpi [2016-12-08]

FF Extension: (WebSocket Monitor) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\websocketmonitor@getfirebug.com.xpi [2016-09-28]

FF Extension: (Adblock Plus) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]

FF HKLM\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\OfficeScan Client\FirefoxExtension

FF Extension: (Trend Micro NSC Firefox Extension) - C:\Program Files\Trend Micro\OfficeScan Client\FirefoxExtension [2016-11-04] [not signed]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-13] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)

FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)

FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)

FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-09-27] ()

FF Plugin: @raidcall.com/RCplugin -> C:\Users\flkr2104\AppData\LocalLow\raidcall\plugins\webplugin.dll [No File]

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 -> C:\Program Files\Veetle\plugins\npVeetle.dll [2012-01-14] (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 -> C:\Program Files\Veetle\Player\npvlc.dll [2012-01-14] (Veetle Inc)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1113328611-58381748-87005590-109325: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-28] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1113328611-58381748-87005590-109325: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2016-10-29]
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\pdf.dll => No File

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\gcswf32.dll => No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll => No File

CHR Plugin: (vShare.tv plug-in) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll => No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll => No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll => No File

CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll ()

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll => No File

CHR Plugin: (Unity Player) - C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Raidcall plugin) - C:\Users\flkr2104\AppData\LocalLow\raidcall\plugins\webplugin.dll => No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File

CHR Profile: C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default [2016-12-19]

CHR Extension: (Adblock Plus) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-30]

CHR Extension: (Chrome Web Store Payments) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]

CHR Extension: (Chrome Media Router) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-17]

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>

CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\flkr2104\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-10-17]
 

==================== Services (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-10-04] (BitRaider, LLC)

S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279024 2014-01-30] (Intel Corporation)

R2 hpHotkeyMonitor; C:\Program Files\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [317496 2011-05-13] (Hewlett-Packard Company)

R3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [461024 2012-03-07] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-04-10] (Intel Corporation)

R2 LicCtrlService; C:\Windows\runservice.exe [2560 2012-07-04] () [File not signed]

S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)

S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)

R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2014-02-15] ()

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)

S3 npggsvc; C:\Windows\system32\GameMon.des [5150552 2013-03-19] (INCA Internet Co., Ltd.)

R2 ntrtscan; C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe [2320640 2013-11-16] (Trend Micro Inc.)

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2119688 2016-12-12] (Electronic Arts)

S2 Origin Web Helper Service; C:\Program Files\Origin\OriginWebHelperService.exe [2180624 2016-12-12] (Electronic Arts)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2015-03-21] ()

R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [307282 2000-01-01] (IDT, Inc.) [File not signed]

R3 TMBMServer; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [345112 2013-10-23] (Trend Micro Inc.)

R2 tmlisten; C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe [2272488 2013-12-17] (Trend Micro Inc.)

R3 TmPfw; C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe [497272 2011-04-15] (Trend Micro Inc.)

R3 TmProxy; C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe [689176 2013-07-01] (Trend Micro Inc.)

R2 vcsFPService; C:\Windows\system32\vcsFPService.exe [2762032 2011-03-24] (Validity Sensors, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S3 BRSptSvc; "C:\ProgramData\BitRaider\BRSptSvc.exe" [X]
 

===================== Drivers (Whitelisted) ======================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2016-08-27] ()

S3 BRDriver_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver.sys [66824 2016-10-15] (BitRaider)

S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()

S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2015-12-31] (Disc Soft Ltd)

S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [40504 2016-07-18] (Disc Soft Ltd)

S3 dtscsi; C:\Windows\System32\Drivers\dtscsi.sys [223128 2013-02-26] (DT Soft Ltd.) [File not signed]

R2 giveio; C:\Windows\system32\giveio.sys [5248 1996-04-03] () [File not signed]

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2016-08-27] ()

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)

R1 MpKsla9e728b5; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{04995F5A-3B11-494D-9F87-43DC52814C96}\MpKsla9e728b5.sys [39168 2016-12-19] (Microsoft Corporation)

R1 MpKslfc08889b; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{04995F5A-3B11-494D-9F87-43DC52814C96}\MpKslfc08889b.sys [39168 2016-12-19] (Microsoft Corporation)

R3 netr28; C:\Windows\System32\DRIVERS\netr28.sys [2075792 2014-12-10] (MediaTek Inc.)

S4 secdrv; C:\Windows\system32\Drivers\secdrv.sys [11973 2016-07-23] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [2484552 2015-07-16] (Sonix Tech. Co., Ltd.)

R2 speedfan; C:\Windows\system32\speedfan.sys [24184 2012-12-29] (Almico Software)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324152 2016-07-18] (Duplex Secure Ltd.)

R1 SSHDRV85; C:\Windows\system32\drivers\SSHDRV85.sys [78848 2013-12-29] () [File not signed]

R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [75600 2013-08-29] (Trend Micro Inc.)

R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [263072 2013-09-02] (Trend Micro Inc.)

R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [62704 2013-08-29] (Trend Micro Inc.)

R2 TmFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmXPFlt.sys [294152 2015-07-02] (Trend Micro Inc.)

R1 TmLwf; C:\Windows\System32\DRIVERS\tmlwf.sys [146232 2012-06-21] (Trend Micro Inc.)

R2 TmPreFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmPreFlt.sys [38152 2015-07-02] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [90712 2013-06-18] (Trend Micro Inc.)

R2 tmWfp; C:\Windows\System32\DRIVERS\tmwfp.sys [282936 2012-06-21] (Trend Micro Inc.)

S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2014-07-28] (Apple, Inc.) [File not signed]

R2 VSApiNt; C:\Program Files\Trend Micro\OfficeScan Client\VSApiNt.sys [1608744 2015-07-02] (Trend Micro Inc.)

S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [465408 2009-07-14] (Microsoft Corporation)

S3 BRDriver; \??\C:\ProgramData\BitRaider\BRDriver.sys [X]

S3 BTMCOM; System32\Drivers\btmcom.sys [X]

S3 BTMUSB; System32\Drivers\btmusb.sys [X]

S3 cleanhlp; \??\C:\EEK\bin\cleanhlp32.sys [X]

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 vtany; \??\C:\Windows\vtany.sys [X]

S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2016-12-19 20:34 - 2016-12-19 20:36 - 00025938 _____ C:\Users\flkr2104\Desktop\FRST.txt

2016-12-19 20:33 - 2016-12-19 20:34 - 00000000 ____D C:\FRST

2016-12-19 20:32 - 2016-12-19 20:32 - 01762304 _____ (Farbar) C:\Users\flkr2104\Desktop\FRST.exe

2016-12-19 16:17 - 2016-12-19 16:19 - 00002071 _____ C:\Users\flkr2104\Desktop\Scan.txt

2016-12-18 15:48 - 2016-12-18 16:28 - 00000000 ____D C:\Users\flkr2104\Documents\FUSSBALL MANAGER 16-17

2016-12-18 15:48 - 2016-12-18 15:48 - 00001169 _____ C:\Users\flkr2104\Desktop\FM17 Editor.lnk

2016-12-18 15:48 - 2016-12-18 15:48 - 00001159 _____ C:\Users\flkr2104\Desktop\FIFA Manager  17.lnk

2016-12-18 15:48 - 2016-12-18 15:48 - 00001149 _____ C:\Users\flkr2104\Desktop\FM17 Auflösung.lnk

2016-12-18 15:26 - 2016-12-18 15:26 - 00000000 ____D C:\Users\flkr2104\Documents\FUSSBALL MANAGER 13

2016-12-18 14:26 - 2016-12-18 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUSSBALL MANAGER 13

2016-12-17 22:10 - 2016-12-17 22:10 - 00000000 ____D C:\ProgramData\Electronic Arts

2016-12-16 20:49 - 2016-12-16 20:49 - 00000000 ____D C:\Users\flkr2104\Downloads\FC Basel

2016-12-13 16:53 - 2016-12-13 16:53 - 00191002 _____ C:\Users\flkr2104\Downloads\2016-11-24--Uebersichtsplan-Linie-10-via-Kauslund.pdf

2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\AeriaGames

2016-12-12 09:03 - 2016-12-12 09:03 - 00000000 ____D C:\ProgramData\Aeria Games

2016-12-12 09:01 - 2016-12-12 09:01 - 00001952 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk

2016-12-12 09:01 - 2016-12-12 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames

2016-12-12 09:01 - 2016-12-12 09:01 - 00000000 ____D C:\Program Files\Aeria Games

2016-12-12 08:59 - 2016-12-12 08:59 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Aeria Games & Entertainment

2016-12-12 08:49 - 2016-12-18 13:48 - 00000000 ____D C:\Program Files\Origin Games

2016-12-10 15:44 - 2016-09-12 21:54 - 00067816 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-12-10 15:44 - 2016-09-12 21:49 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-12-10 15:43 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2016-12-10 15:43 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-12-10 15:43 - 2016-10-11 16:24 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-12-10 15:43 - 2016-10-11 16:24 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-12-10 15:43 - 2016-10-11 16:21 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-12-10 15:43 - 2016-10-11 15:55 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-12-10 15:43 - 2016-10-11 15:55 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-12-10 15:43 - 2016-10-11 15:55 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-12-10 15:43 - 2016-10-11 15:55 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-12-10 15:43 - 2016-10-11 15:53 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-12-10 15:43 - 2016-10-11 15:51 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe

2016-12-10 15:43 - 2016-10-11 15:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-12-10 15:43 - 2016-10-11 15:51 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-12-10 15:43 - 2016-10-11 15:51 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-12-10 15:43 - 2016-10-11 15:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-12-10 15:43 - 2016-10-11 15:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-12-10 15:43 - 2016-10-11 15:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-12-10 15:43 - 2016-10-11 14:18 - 00419648 _____ C:\Windows\system32\locale.nls

2016-12-10 15:43 - 2016-10-08 14:05 - 00534600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-12-10 15:43 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2016-12-10 15:43 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-12-10 15:42 - 2016-10-11 15:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-12-10 15:42 - 2016-10-11 15:50 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-12-10 15:42 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2016-12-10 15:42 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2016-12-10 15:40 - 2016-11-02 16:22 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2016-12-10 15:40 - 2016-11-02 15:53 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-12-10 15:40 - 2016-10-28 04:14 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-12-10 15:40 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-12-10 15:40 - 2016-10-27 15:16 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-12-10 15:40 - 2016-10-25 15:54 - 02399744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-12-10 15:40 - 2016-10-22 18:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-12-10 15:40 - 2016-10-22 18:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-12-10 15:40 - 2016-10-22 18:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-12-10 15:40 - 2016-10-22 18:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-12-10 15:40 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-12-10 15:40 - 2016-10-22 18:35 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-12-10 15:40 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-12-10 15:40 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-12-10 15:40 - 2016-10-22 18:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-12-10 15:40 - 2016-10-22 18:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-12-10 15:40 - 2016-10-22 18:22 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-12-10 15:40 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-12-10 15:40 - 2016-10-22 18:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-12-10 15:40 - 2016-10-22 18:21 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-12-10 15:40 - 2016-10-22 18:20 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-12-10 15:40 - 2016-10-22 18:13 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-12-10 15:40 - 2016-10-22 18:09 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-12-10 15:40 - 2016-10-22 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-12-10 15:40 - 2016-10-22 18:03 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-12-10 15:40 - 2016-10-22 17:59 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-12-10 15:40 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-12-10 15:40 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-12-10 15:40 - 2016-10-22 17:54 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-12-10 15:40 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-12-10 15:40 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-12-10 15:40 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-12-10 15:40 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-12-10 15:40 - 2016-10-22 17:43 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-12-10 15:40 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-12-10 15:40 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-12-10 15:40 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-12-10 15:40 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-12-10 15:40 - 2016-10-15 16:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2016-12-10 15:40 - 2016-10-15 16:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll

2016-12-10 15:40 - 2016-10-11 16:24 - 00250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2016-12-10 15:40 - 2016-10-11 16:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME

2016-12-10 15:40 - 2016-10-11 16:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-12-10 15:40 - 2016-10-11 16:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2016-12-10 15:40 - 2016-10-11 16:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll

2016-12-10 15:40 - 2016-10-11 16:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime

2016-12-10 15:40 - 2016-10-11 14:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-12-10 15:40 - 2016-10-05 15:50 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2016-12-10 15:40 - 2016-09-15 15:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2016-12-10 15:40 - 2016-09-13 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-12-10 15:40 - 2016-09-12 21:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll

2016-12-10 15:40 - 2016-09-12 20:08 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2016-12-10 15:40 - 2016-09-12 20:08 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2016-12-10 15:40 - 2016-09-09 19:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-12-10 15:40 - 2016-09-08 21:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2016-12-10 15:40 - 2016-09-08 21:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2016-12-10 15:40 - 2016-09-08 15:49 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2016-12-10 15:40 - 2016-09-08 15:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2016-12-10 15:40 - 2016-08-21 14:05 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-12-03 12:00 - 2016-11-15 21:44 - 00014299 _____ C:\Users\flkr2104\Downloads\Saison 3.xlsx

2016-12-03 12:00 - 2016-11-13 11:59 - 00012272 _____ C:\Users\flkr2104\Downloads\MeinUmfeld.xlsx

2016-11-19 10:48 - 2016-12-19 18:43 - 00000000 ____D C:\Users\flkr2104\AppData\LocalLow\Mozilla
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2016-12-19 19:50 - 2012-04-03 08:46 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-12-19 16:18 - 2009-07-14 05:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-12-19 16:18 - 2009-07-14 05:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-12-19 16:14 - 2014-12-08 23:37 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-12-19 16:08 - 2012-07-04 00:17 - 00002689 ___SH C:\Windows\system32\mmf.sys

2016-12-19 16:08 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-12-19 15:50 - 2016-08-24 08:18 - 00000000 ____D C:\Program Files\Steam

2016-12-19 15:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf

2016-12-19 15:02 - 2012-01-14 21:49 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Skype

2016-12-19 14:16 - 2010-11-21 00:42 - 00661468 _____ C:\Windows\system32\perfh014.dat

2016-12-19 14:16 - 2010-11-21 00:42 - 00153528 _____ C:\Windows\system32\perfc014.dat

2016-12-19 14:16 - 2010-11-20 22:01 - 01808420 _____ C:\Windows\system32\PerfStringBackup.INI

2016-12-18 15:36 - 2016-08-25 17:44 - 00000000 ____D C:\Users\flkr2104\Documents\MEGAsync Downloads

2016-12-18 15:27 - 2014-09-19 22:39 - 00000000 ____D C:\ProgramData\Origin

2016-12-18 15:26 - 2016-09-10 18:56 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Origin

2016-12-18 14:26 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-12-17 21:31 - 2012-08-11 18:35 - 00000132 _____ C:\Users\flkr2104\AppData\Roaming\Adobe PNG Format CS5 Prefs

2016-12-15 21:41 - 2012-07-19 15:19 - 00002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-12-15 16:41 - 2012-05-04 20:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2016-12-14 17:27 - 2016-11-18 18:14 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-12-14 16:28 - 2013-12-28 23:17 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-13 21:50 - 2012-04-03 08:46 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2016-12-13 21:50 - 2011-09-15 07:55 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2016-12-13 21:50 - 2011-08-02 09:22 - 00000000 ____D C:\Windows\system32\Macromed

2016-12-13 15:38 - 2012-05-16 20:09 - 00183112 _____ C:\Windows\system32\PnkBstrB.exe

2016-12-13 15:38 - 2012-05-16 20:09 - 00183112 _____ C:\Windows\system32\PnkBstrB.ex0

2016-12-13 15:38 - 2012-05-16 20:09 - 00138184 _____ C:\Windows\system32\Drivers\PnkBstrK.sys

2016-12-12 09:54 - 2016-06-17 23:23 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames

2016-12-12 09:01 - 2012-09-12 17:53 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin

2016-12-12 08:45 - 2016-09-10 18:46 - 00000000 ____D C:\Program Files\Origin

2016-12-10 16:58 - 2011-09-22 20:10 - 00000000 ____D C:\Program Files\GIMP-2.0

2016-12-10 16:58 - 2011-08-24 10:03 - 00000000 ____D C:\Users\flkr2104

2016-12-10 16:31 - 2009-07-14 05:33 - 00543848 _____ C:\Windows\system32\FNTCACHE.DAT

2016-12-10 16:28 - 2014-12-26 03:45 - 00000000 ____D C:\Windows\system32\appraiser

2016-12-10 16:28 - 2014-04-24 15:00 - 00000000 ___SD C:\Windows\system32\CompatTel

2016-12-10 16:21 - 2013-03-16 19:22 - 00002083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk

2016-12-10 16:21 - 2013-03-16 19:22 - 00001912 _____ C:\Windows\epplauncher.mif

2016-12-10 16:20 - 2013-09-06 11:43 - 00000000 ____D C:\Windows\system32\MRT

2016-12-10 16:20 - 2013-03-16 19:22 - 00000000 ____D C:\Program Files\Microsoft Security Client

2016-12-10 16:02 - 2011-10-11 22:28 - 138444440 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-12-03 23:00 - 2011-08-08 10:23 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2016-12-03 20:19 - 2012-01-25 14:32 - 00330240 _____ (Trend Micro Inc.) C:\Windows\RegBootClean.exe

2016-12-02 21:26 - 2012-03-21 13:00 - 00000000 ____D C:\Windows\system32\directx

2016-12-02 21:23 - 2012-03-21 13:00 - 00000000 ___HD C:\Windows\msdownld.tmp

2016-11-25 14:39 - 2015-10-12 11:25 - 00000000 ___HD C:\Program Files\Common Files\EAInstaller

2016-11-23 20:40 - 2016-02-17 22:03 - 00000000 ___RD C:\Program Files\Skype

2016-11-23 20:40 - 2012-01-14 21:49 - 00000000 ____D C:\ProgramData\Skype
 

==================== Files in the root of some directories =======
 

2012-09-15 19:30 - 2012-09-14 07:30 - 0000044 ____H () C:\Program Files\e1697bb7.tmp

2012-06-09 10:39 - 2007-12-01 16:22 - 0315392 _____ () C:\Program Files\GMLMatting.8bf

2012-06-09 10:39 - 2012-06-09 10:39 - 0000053 _____ () C:\Program Files\GMLMatting.ini

2014-08-17 13:05 - 2014-08-17 13:15 - 6010880 _____ () C:\Program Files\GUT1FAF.tmp

2014-10-03 23:16 - 2014-10-03 23:16 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe BMP Format CS5 Prefs

2012-08-11 18:35 - 2016-12-17 21:31 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe PNG Format CS5 Prefs

2012-08-15 19:00 - 2015-06-05 23:37 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe Targa Format CS5 Prefs

2014-06-11 22:30 - 2014-06-11 22:30 - 0000097 _____ () C:\Users\flkr2104\AppData\Roaming\LauncherSettings_live.cfg

2012-05-16 20:09 - 2016-09-03 14:40 - 0022328 _____ () C:\Users\flkr2104\AppData\Roaming\PnkBstrK.sys

2012-05-26 18:28 - 2012-05-26 18:28 - 0003584 _____ () C:\Users\flkr2104\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-10-27 16:02 - 2013-10-27 16:02 - 0000058 _____ () C:\Users\flkr2104\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat

2012-06-07 19:00 - 2012-06-07 19:00 - 0000096 _____ () C:\Users\flkr2104\AppData\Local\fusioncache.dat

2013-10-23 22:20 - 2013-10-23 22:20 - 0007605 _____ () C:\Users\flkr2104\AppData\Local\Resmon.ResmonCfg

2015-07-28 12:49 - 2015-07-28 12:49 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{43D810FD-CDEE-452B-9007-907ECB224905}

2015-06-07 13:10 - 2015-06-07 13:10 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{51A80C3A-0B9D-45B6-8F1E-3DE9E66F8091}

2015-06-15 12:07 - 2015-06-15 12:07 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{7B741A37-DC76-4B3B-B7D5-3526204848E8}

2016-07-28 17:08 - 2016-07-28 17:08 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{B2881FF6-5740-48F7-870C-65A198F1BB07}

2015-11-28 14:50 - 2015-11-28 14:50 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{C6B3C03C-64C9-4B05-BA05-6DF46EDEA189}

2012-06-09 10:44 - 2007-12-01 16:22 - 0315392 _____ () C:\ProgramData\GMLMatting.8bf

2012-06-09 10:44 - 2012-06-09 10:44 - 0000053 _____ () C:\ProgramData\GMLMatting.ini
 

==================== Bamital & volsnap ======================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 

LastRegBack: 2016-12-10 15:04
 

==================== End of FRST.txt ============================

--- --- ---

und die Addition

[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x86) Version: 17-12-2016

Ran by flkr2104 (19-12-2016 20:37:05)

Running from C:\Users\flkr2104\Desktop

Microsoft Windows 7 Professional  Service Pack 1 (X86) (2011-08-02 07:11:49)

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1890919210-445268223-3708981845-500 - Administrator - Enabled) => C:\Users\Administrator

ASPNET (S-1-5-21-1890919210-445268223-3708981845-1002 - Administrator - Enabled)

FKone (S-1-5-21-1890919210-445268223-3708981845-1003 - Administrator - Enabled)

Gjest (S-1-5-21-1890919210-445268223-3708981845-501 - Limited - Disabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Trend Micro OfficeScan Antivirus (Enabled - Up to date) {5D349EF8-873B-C657-917F-F1D93E101A7C}

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}

AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Trend Micro OfficeScan Anti-spyware (Enabled - Up to date) {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}

FW: Trend Micro Personal Firewall (Enabled) {49A8346C-6900-54B6-B1B3-5F678736DDE9}
 

==================== Installed Programs ======================
 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.3.0.3650 - Adobe Systems Incorporated)

Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)

Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)

Aeria Ignite (HKLM\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (HKLM\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (Version: 1.13.3296 - Aeria Games & Entertainment) Hidden

Akamai NetSession Interface (HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Akamai) (Version:  - Akamai Technologies, Inc)

Apple Application Support (32-Bit) (HKLM\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{D9F3D66A-9885-4DDD-A800-9DDF488359A1}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

BitRaider Streaming Client (HKLM\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)

Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)

EAX4 Unified Redist (HKLM\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

Echo of Soul (HKLM\...\Echo of Soul) (Version:  - )

FUSSBALL MANAGER 13 (HKLM\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)

fx-9860G Manager PLUS (HKLM\...\{F5F8D7F9-8879-439E-8292-3386CD7BF06D}) (Version:  - )

Google Chrome (HKLM\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.32.7 - Google Inc.) Hidden

HP HotKey Support (HKLM\...\{931AED5E-545A-4802-B5CF-DD3B2086235F}) (Version: 4.0.18.1 - Hewlett-Packard Company)

IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6433.0 - IDT)

iFinger (HKLM\...\{A1CA0B3B-CFDB-440D-87C5-3F0EFED61731}) (Version: 4.0.4 - iFinger LTD)

Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.10.1464 - Intel Corporation)

Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

iTunes (HKLM\...\{B62DB971-5B1E-4EAF-86DC-09B4D3A322D2}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 111 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

MEGAsync (HKLM\...\MEGAsync) (Version:  - Mega Limited)

Messenger Plus! 5 (HKLM\...\Messenger Plus!) (Version: 5.50.0.761 - Yuna Software)

Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (norsk språkpakke) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1044) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)

Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)

Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.25.00.03 - Huawei Technologies Co.,Ltd)

Mozilla Firefox 50.1.0 (x86 de) (HKLM\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

NVIDIA PhysX (HKLM\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)

OpenAL (HKLM\...\OpenAL) (Version:  - )

OpenOffice.org 3.2 (HKLM\...\{4F33D156-BF58-4BDB-A8CE-74123C7142C0}) (Version: 3.2.9502 - OpenOffice.org)

Origin (HKLM\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)

Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)

PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)

Ralink RT3592 802.11a/b/g/n 2x2 WiFi Adapter (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.01.18.0 - Ralink)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Skype™ 7.30 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM\...\SpeedFan) (Version:  - )

Språkpakke for Microsoft Visual Studio 2010 Tools for Office Runtime (x86) – NOR (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - NOR) (Version: 10.0.50903 - Microsoft Corporation)

Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

STRIKE NX GAMEPAD (HKLM\...\{DEC7CD2E-2BB5-40C3-9592-078F646F7E6C}) (Version: 1.00.0000 - speedlink)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.8 - Synaptics Incorporated)

System Requirements Lab CYRI (HKLM\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)

System Requirements Lab for Intel (HKLM\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

Trend Micro OfficeScan Client (HKLM\...\OfficeScanNT) (Version: 10.6.5162 - Trend Micro)

Unity Web Player (HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Validity Fingerprint Sensor Driver (HKLM\...\{316430AA-68D4-4468-83FE-E5E088511C6C}) (Version: 4.3.126.0 - Validity Sensors, Inc.)

Veetle TV (HKLM\...\Veetle TV) (Version: 0.9.19 - Veetle, Inc)

Virtua Tennis 4 (Version: 1.0.0001.130 - Sega) Hidden

VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

WinRAR 4.01 beta 1 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.1 - win.rar GmbH)
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF90-7B36-11d2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF91-7B36-11D2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF94-7B36-11D2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll ()

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373984C9-B845-449B-91E7-45AC83036ADE}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{379E501F-B231-11D1-ADC1-00805FC752D8}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{48123BC4-99D9-11D1-A6B3-00C04FD91555}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{550DDA30-0541-11D2-9CA9-0060B0EC3D39}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6352-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6353-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6354-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6355-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6356-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6357-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6359-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{612A8624-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{612A8628-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7E3FCEA1-31B4-11D2-AE1F-0080C7337EA1}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{AFB40FFD-B609-40A3-9828-F88BBE11E4E3}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{AFBA6B42-5692-48EA-8141-DC517DCF0EF1}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{CFC399AF-D876-11D0-9C10-00C04FC99C8E}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{D2423620-51A0-11D2-9CAF-0060B0EC3D39}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F19-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F27-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F31-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F33-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F34-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F35-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F36-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F37-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F39-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F3F-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F40-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F41-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F11-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F12-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F14-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{FC220AD8-A72A-4EE8-926E-0B7AD152A020}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {14A8A810-9A39-4BFF-88E2-3D717AB5C923} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)

Task: {1E1AE2DC-56D6-41AF-BD36-E6487C2E4E12} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)

Task: {473587FE-EE87-4C19-AF1A-8595AA63BB03} - System32\Tasks\{0927203C-0EBF-4520-A815-F850E80C4F86} => pcalua.exe -a "C:\Program Files\Trend Micro\OfficeScan Client\NTRmv.exe"

Task: {493D7DCC-B857-42E1-A4EF-776613C5B2AA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)

Task: {61BF19B3-147F-471D-A6A4-29015C250290} - System32\Tasks\{4E983F3D-CA62-4AB4-98AB-3C5DC4FF9BEC} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\World_of_Tanks\WOTLauncher.exe"

Task: {7561775F-91C7-40C6-B5DC-7F8CEC91274F} - System32\Tasks\{D4026E0E-5843-4B01-80A7-75692F195F72} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.22.0.107&amp;LastError=-9

Task: {7B9E3DBB-058A-414B-AE52-51944D3AFEA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated)

Task: {80E18999-C394-43F7-B3B0-D7803EE13670} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {9469D411-F484-4F74-8CD0-900744EC7ED0} - System32\Tasks\{A5FADF4A-2EB7-482D-BE9A-4F59DC50A02E} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=7.3.0.101&amp;LastError=-9

Task: {A6EC187B-E82C-41DF-9D86-D01C0644F620} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)

Task: {C414EB96-2334-412C-9CBC-B7FA2116181D} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)

Task: {C633C180-1ED1-4D11-9173-3C839FEFCDBA} - System32\Tasks\{015D73D5-7EF9-4344-9757-A8487F237BE9} => pcalua.exe -a "C:\Users\flkr2104\Downloads\fm bilder\FMC_2D_Spielerbilder_BorussiaDortmund.exe" -d "C:\Users\flkr2104\Downloads\fm bilder"

Task: {E6363805-31C2-441E-B0FE-A87A45036903} - System32\Tasks\{CA584D81-5E3F-4553-B31D-B85999D12BFD} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.9.0.106&amp;LastError=-9

Task: {F492ED02-CF3A-4667-B829-C24B9F2D8F3F} - System32\Tasks\{06F9D0C9-EF0D-4815-8092-909961929903} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.16.0.105&amp;LastError=-9

Task: {F5FBDC70-34C1-40BC-B7E2-D39723268801} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files\DriverToolkit\DriverToolkit.exe
 

==================== Shortcuts =============================
 

(The entries could be listed to be restored or removed.)
 

==================== Loaded Modules (Whitelisted) ==============
 

2016-10-05 18:18 - 2016-10-05 18:18 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:18 - 2016-10-05 18:18 - 01041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2012-07-04 00:17 - 2012-07-04 00:17 - 00002560 _____ () C:\Windows\runservice.exe

2012-07-04 00:17 - 2013-12-14 20:03 - 00048640 _____ () C:\Windows\mmfs.dll

2015-05-20 14:13 - 2014-02-15 07:59 - 00239184 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe

2012-03-19 14:29 - 2011-04-01 10:53 - 00499712 _____ () C:\Program Files\Trend Micro\OfficeScan Client\sqlite3.dll

2012-05-16 20:09 - 2015-03-21 22:26 - 00075136 _____ () C:\Windows\system32\PnkBstrA.exe

2016-06-30 12:24 - 2016-12-17 22:17 - 00564736 _____ () C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2011-08-02 10:19 - 2011-05-18 11:39 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll

2011-08-02 17:46 - 2011-03-26 07:28 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll

2012-12-18 01:10 - 2012-03-28 22:18 - 01198872 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 
 

==================== Safe Mode (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
 

==================== Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Control Panel\Desktop\\Wallpaper -> C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is enabled.
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

MSCONFIG\startupfolder: C:^Users^flkr2104^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun

MSCONFIG\startupreg: EADM => "C:\Program Files\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: OfficeScanNT Monitor => "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [SPPSVC-In-TCP] => %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{A622ABA6-3C92-41E6-B9A6-0180CB929627}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{E1F8A0D8-4BD6-4314-9E5F-09CFA6031C64}] => LPort=2869

FirewallRules: [{8E016B2D-F2B2-426E-8EFA-46C122E87942}] => LPort=1900

FirewallRules: [{4D7BDA48-417D-4349-A980-9CA19BEAB9E8}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{931A377F-4D8D-4BBC-94E5-8D0F49139C46}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [TCP Query User{C964F64B-B4AF-422E-84E6-F447D39FF02F}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe

FirewallRules: [UDP Query User{C9A64660-BDEF-4E85-854C-1276BBF4AADE}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe

FirewallRules: [{5BB298CC-AA84-491D-80D0-7C095E61BA2C}] => LPort=56676

FirewallRules: [{89AC9ADD-DE5F-493A-BBBE-A09925FEEA86}] => LPort=56676

FirewallRules: [{E74843CA-D546-474B-BE2F-ECD88AF21AA3}] => LPort=56676

FirewallRules: [{3AF8905E-C8AE-4A8C-9333-FA4D6D943A83}] => LPort=56676

FirewallRules: [{3CEC8038-9CB9-492F-84BC-11FC042637BB}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{797BF723-8A67-4836-928C-480FA8891719}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [{5AE9581D-14F3-4469-A752-53338A798640}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{A0723582-6F2B-43F5-8262-ABD550D5C792}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{3CBDDE4A-099C-4CE9-BC37-64F1FB39D9FA}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{9CE865C3-BEB8-4C6B-8655-306C4F5F2AD0}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{9247D1AC-E137-4A98-8136-5A6EE141EBFF}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{D69662A4-66F6-4384-88FA-FDEE02C03A6F}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{EB93B812-9B9E-418E-A0E3-69C71D1D090E}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{BA336E0C-B36B-4607-8119-9BFE68EE3BDE}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A820FB9D-B99E-4B28-8661-A19B8852A77C}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [{47817B77-3C47-4FB4-B3D0-CCA335429855}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{67463958-AB41-41AA-9083-8800F123498F}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{A4F25796-4A90-4E82-A333-45F7CC95EC65}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{984E4980-579B-47B0-BFE1-AF5D4A0C076A}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{F551A992-3141-4D89-BA76-75760F62E27C}] => LPort=57403

FirewallRules: [{1F578E27-FD89-4030-B8EC-A0BC1C526524}] => LPort=57403

FirewallRules: [{5D60EDFF-EA05-4007-8412-DFDE253D4577}] => LPort=57403

FirewallRules: [{13938A1A-81AF-4BD0-AB69-BED62589111D}] => LPort=57403

FirewallRules: [{0092FC27-0457-4EDA-AAEA-D9FFE024C45A}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [TCP Query User{02EA3E90-A44B-4F73-A943-FBD12A097465}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{62B8955A-39F2-4EF4-A52D-5A09535CE188}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [{02FA5FC8-C781-4F53-938B-78F933EA2E88}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{8F19AA17-5BB2-40B4-A6F5-E40042625635}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{7460F63E-D470-46D0-A656-8819767A619D}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{C7ADC506-CDA1-48A3-A2EF-F6FA057261AE}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{920F7FF0-D99B-4849-82C5-8BE8022DFAAE}] => LPort=80

FirewallRules: [{60E8E997-E151-4751-80E6-B7543F835BC7}] => LPort=443

FirewallRules: [{4CC79DDF-748F-47B4-BDC8-0B762A261560}] => LPort=20010

FirewallRules: [{C172F8BB-B73C-4E08-8919-C35EF9EE9C34}] => LPort=3478

FirewallRules: [{14E92C44-7822-41B8-A131-80E1F848083D}] => LPort=7850

FirewallRules: [{AB3AC8DD-BDB1-45B5-9217-4881FC7A0875}] => LPort=27022

FirewallRules: [{6A9CD13A-43B6-4631-8C68-4306185C1193}] => LPort=6881

FirewallRules: [{C717E6BE-C28A-4CB5-8DF9-FC719540A912}] => LPort=33333

FirewallRules: [{84D841DF-161C-4421-84BC-EB7E15BAA88F}] => LPort=20443

FirewallRules: [{413383F3-2547-481F-B70D-DC44AC04E62A}] => LPort=8090

FirewallRules: [TCP Query User{2FFBB76F-F899-485B-B3F0-625F7D62F4A5}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{B6DDDBD7-6C94-4A40-88DE-428852CFE2F4}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [{4EBA9F6A-0F8D-4F94-9942-73448314B269}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [{4A52C6EF-5F9A-4A0F-888F-D81C6E6E9574}] => LPort=7852

FirewallRules: [{1BE26DF6-7661-43CB-8FD0-EFDA92D6DA6F}] => LPort=7853

FirewallRules: [{93945317-811F-47F2-9275-7D616A23E298}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{1B7149FF-BBBF-4BF9-B19E-7410DF052BE8}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{153DBC7E-36C7-46CE-BDE2-85C812DBCD70}C:\program files\mozilla firefox\firefox.exe] => C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{3B373DE7-9361-4BA1-91E1-5BE01708CDF9}C:\program files\mozilla firefox\firefox.exe] => C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{B8F2D49B-2EBB-4C21-B719-02BC8571FE1B}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{97D84C21-793F-4F11-8AB5-B9DC278676BF}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B1E225C5-BF6E-47D4-B298-B7BC88640849}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{C9FE56FC-C4BB-48BF-B28B-33B6F773DCF8}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{EF400853-AAAB-49E3-8387-75161C9283ED}] => LPort=60426

FirewallRules: [{EAE60802-9EC3-4DEF-AF04-D462FD75ABA9}] => LPort=5000

FirewallRules: [{63159383-EF26-4123-BCED-CAC58630E62D}] => C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{0741EA6B-43DD-4047-BDC2-D52CD5E9A75B}] => C:\Program Files\Steam\Steam.exe

FirewallRules: [{AC6FF4E6-BF42-466C-AA44-0ED710FFD7D4}] => C:\Program Files\Steam\Steam.exe

FirewallRules: [{D778DEAD-F211-4901-82C5-1346DFC7AE9C}] => C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{0F2DE732-315A-41A0-80C3-98255C8633AA}] => C:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{AF54C738-61F5-4881-A6FD-8E55E03C30B6}] => C:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{DCF6B2FB-B87E-4E0D-94C5-23304BCFE9C2}] => C:\Program Files\Google\Chrome\Application\chrome.exe

FirewallRules: [{7DE68FF8-65F1-45C5-99E0-41708996614D}] => C:\Program Files\Origin Games\FIFA Manager 13\Manager13.exe

FirewallRules: [{C29E0871-6BA7-4629-A635-8C7155D3D475}] => C:\Program Files\Origin Games\FIFA Manager 13\Manager13.exe

FirewallRules: [{7EFAD8E4-E8F2-4546-8CFD-B7C0ABAFC648}] => LPort=12345

FirewallRules: [{497A9934-D20E-4C19-B3A1-EC9D15588491}] => LPort=49197

FirewallRules: [{016B5484-A0F1-4807-B2A6-FC5C007CBC77}] => LPort=5000
 

==================== Restore Points =========================
 

18-12-2016 14:19:09 Installed DirectX

19-12-2016 14:28:13 Windows Update
 

==================== Faulty Device Manager Devices =============
 

Name: Messenger Plus! Virtual Camera

Description: Messenger Plus! Virtual Camera

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: YunaSoftware

Service: MsgPlusDriver

Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Resolution: A registry problem was detected.

 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
 

Name: Messenger Plus! Virtual Camera

Description: Messenger Plus! Virtual Camera

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: YunaSoftware

Service: MsgPlusDriver

Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Resolution: A registry problem was detected.

 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Kan ikke initialisere indeksen.
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Kan ikke initialisere programmet.
 

Kontekst: Windows-program
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Kan ikke initialisere Innsamler-objektet.
 

Kontekst: Windows-program, SystemIndex-katalog
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Kan ikke initialisere plugin-modulen <Search.TripoliIndexer>.
 

Kontekst: Windows-program, SystemIndex-katalog
 

Detaljer:

        Elementet ble ikke funnet.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (12/19/2016 04:11:13 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Kan ikke initialisere plugin-modulen <Search.JetPropStore>.
 

Kontekst: Windows-program, SystemIndex-katalog
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:13 PM) (Source: Windows Search Service) (EventID: 9002) (User: )

Description: Windows Search-tjenesten kan ikke laste egenskapslagerinformasjonen.
 

Kontekst: Windows-program, SystemIndex-katalog
 

Detaljer:

        Innholdsindeksdatabasen er skadet.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (12/19/2016 04:11:13 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search-tjenesten blir stoppet fordi det er et problem med indeksereren,The catalog is corrupt.
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:13 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: Søketjenesten har oppdaget ødelagte datafiler i indeksen {id=4700}. Tjenesten vil forsøke å rette dette problemet automatisk ved å bygge indeksen på nytt.
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:13 PM) (Source: Windows Search Service) (EventID: 9000) (User: )

Description: Windows Search-tjenesten kan ikke åpne Jet-egenskapslageret.
 

Detaljer:

        0x%08x (0xc0041800 - Innholdsindeksdatabasen er skadet.  (HRESULT : 0xc0041800))
 

Error: (12/19/2016 04:11:13 PM) (Source: ESENT) (EventID: 455) (User: )

Description: Windows (4944) Windows: Error -1811 occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0125E.log.
 
 

System errors:

=============

Error: (12/19/2016 08:09:08 PM) (Source: NETLOGON) (EventID: 5719) (User: )

Description: Datamaskinen kan ikke sette opp en sikker økt med en 

domenekontroller i domene OPPLAND på grunn av følgende: 

Det er ingen tilgjengelige påloggingsservere som kan behandle påloggingsforespørselen.
 
 

Dette kan føre til godkjenningsproblemer. Kontroller at datamaskinen 

er koblet til nettverket. Hvis problemet vedvarer, 

kontakt domeneadministrator.
 
 
 

MER INFORMASJON
 

Hvis denne datamaskinen er domenekontroller for det angitte domenet,

setter den opp sikre økter for primærdomenets kontrolleremulator i det angitte 

domenet. Ellers setter denne datamaskinen opp den sikre økten for enhver domenekontroller

i det angitte domenet.
 

Error: (12/19/2016 05:38:40 PM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: NT-MYNDIGHET)

Description: Behandlingen av gruppepolicyen mislyktes på grunn av manglende nettverkstilkobling til en domenekontroller. Dette kan være en forbigående tilstand. En melding om at det er utført, genereres når maskinen kobles til domenekontrolleren og gruppepolicyen har blitt behandlet. Kontakt systemansvarlig hvis du ikke får en melding om at det er utført innen noen timer.
 

Error: (12/19/2016 04:11:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Tjenesten Windows Search kan ikke starte på grunn av følgende feil: 

Tjenesten svarte ikke på start- eller kontrollforespørselen innenfor tidsrammen.
 

Error: (12/19/2016 04:11:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Det oppstod et tidsavbrudd (30000 millisekunder) under venting på at tjenesten Windows Search skal koble til.
 

Error: (12/19/2016 04:11:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Tjenesten Windows Search kan ikke starte på grunn av følgende feil: 

Tjenesten svarte ikke på start- eller kontrollforespørselen innenfor tidsrammen.
 

Error: (12/19/2016 04:11:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Det oppstod et tidsavbrudd (30000 millisekunder) under venting på at tjenesten Windows Search skal koble til.
 

Error: (12/19/2016 04:11:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Tjenesten Windows Search kan ikke starte på grunn av følgende feil: 

Tjenesten svarte ikke på start- eller kontrollforespørselen innenfor tidsrammen.
 

Error: (12/19/2016 04:11:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Det oppstod et tidsavbrudd (30000 millisekunder) under venting på at tjenesten Windows Search skal koble til.
 

Error: (12/19/2016 04:11:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Tjenesten Windows Search kan ikke starte på grunn av følgende feil: 

Tjenesten svarte ikke på start- eller kontrollforespørselen innenfor tidsrammen.
 

Error: (12/19/2016 04:11:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Det oppstod et tidsavbrudd (30000 millisekunder) under venting på at tjenesten Windows Search skal koble til.
 
 

CodeIntegrity:

===================================

  Date: 2016-12-19 20:34:37.776

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 19:16:33.237

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 19:16:05.874

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 19:12:43.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 19:11:58.159

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 18:43:56.670

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 18:43:33.949

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 18:40:11.826

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 18:40:11.691

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-19 18:40:11.560

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Celeron(R) CPU B810 @ 1.60GHz

Percentage of memory in use: 63%

Total physical RAM: 3014.37 MB

Available physical RAM: 1114.34 MB

Total Virtual: 6027.06 MB

Available Virtual: 4081.83 MB
 

==================== Drives ================================
 

Drive c: (OSDisk) (Fixed) (Total:116.44 GB) (Free:41.35 GB) NTFS

Drive d: (Data) (Fixed) (Total:116.14 GB) (Free:33.5 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 108E484F)

Partition 1: (Not Active) - (Size=116.4 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=116.1 GB) - (Type=07 NTFS)

Partition 3: (Active) - (Size=300 MB) - (Type=07 NTFS)
 

==================== End of Addition.txt ============================

--- --- ---

Bitte mal alles vom TrendMicro deinstallieren. Viel zu viel Sicherheitssoftware...

Hallo,

ich würde dies gern tun, aber ich kenne das Passwort zum deinstallieren nicht. Dies war eine Software die damals die Schule installiert hatte. Ich glaube ein Adminpasswort müsste das sein, aber dieses verfüge ich leider nicht.

OK. Dann muss Microsoft Security Essentials runter...

Dies wäre erledigt :)

OK...:)

Schritt 1
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte :)

Code:

13:56:09.0583 0x0fd8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01

13:56:15.0516 0x0fd8  ============================================================

13:56:15.0516 0x0fd8  Current date / time: 2016/12/21 13:56:15.0516

13:56:15.0516 0x0fd8  SystemInfo:

13:56:15.0516 0x0fd8  

13:56:15.0516 0x0fd8  OS Version: 6.1.7601 ServicePack: 1.0

13:56:15.0516 0x0fd8  Product type: Workstation

13:56:15.0516 0x0fd8  ComputerName: UNGOEB-U1260RT5

13:56:15.0516 0x0fd8  UserName: flkr2104

13:56:15.0516 0x0fd8  Windows directory: C:\Windows

13:56:15.0516 0x0fd8  System windows directory: C:\Windows

13:56:15.0516 0x0fd8  Processor architecture: Intel x86

13:56:15.0516 0x0fd8  Number of processors: 2

13:56:15.0516 0x0fd8  Page size: 0x1000

13:56:15.0516 0x0fd8  Boot type: Normal boot

13:56:15.0516 0x0fd8  CodeIntegrityOptions = 0x00000000

13:56:15.0516 0x0fd8  ============================================================

13:56:17.0515 0x0fd8  KLMD registered as C:\Windows\system32\drivers\74812862.sys

13:56:17.0515 0x0fd8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x0

13:56:18.0046 0x0fd8  System UUID: {4601A4C6-7290-A43C-2643-D792C0E1346C}

13:56:19.0068 0x0fd8  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

13:56:19.0068 0x0fd8  ============================================================

13:56:19.0068 0x0fd8  \Device\Harddisk0\DR0:

13:56:19.0068 0x0fd8  MBR partitions:

13:56:19.0068 0x0fd8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E2000

13:56:19.0068 0x0fd8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xE8E2800, BlocksNum 0xE847000

13:56:19.0068 0x0fd8  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1D129800, BlocksNum 0x96000

13:56:19.0068 0x0fd8  ============================================================

13:56:19.0088 0x0fd8  C: <-> \Device\Harddisk0\DR0\Partition1

13:56:19.0148 0x0fd8  D: <-> \Device\Harddisk0\DR0\Partition2

13:56:19.0148 0x0fd8  ============================================================

13:56:19.0148 0x0fd8  Initialize success

13:56:19.0148 0x0fd8  ============================================================

13:57:09.0420 0x1618  ============================================================

13:57:09.0420 0x1618  Scan started

13:57:09.0420 0x1618  Mode: Manual; SigCheck; TDLFS; 

13:57:09.0420 0x1618  ============================================================

13:57:09.0420 0x1618  KSN ping started

13:57:21.0685 0x1618  KSN ping finished: true

13:57:24.0355 0x1618  ================ Scan system memory ========================

13:57:24.0356 0x1618  System memory - ok

13:57:24.0357 0x1618  ================ Scan services =============================

13:57:24.0569 0x1618  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

13:57:24.0760 0x1618  1394ohci - ok

13:57:24.0810 0x1618  [ CC1F1D3D70DC13C2C281488D347D4415, 3AB1495F8982C727D02E9975E2E04203B918AFAA7B05B5E7FEB5142EB30D1998 ] Accelerometer   C:\Windows\system32\DRIVERS\Accelerometer.sys

13:57:24.0850 0x1618  Accelerometer - ok

13:57:24.0899 0x1618  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys

13:57:24.0990 0x1618  ACPI - ok

13:57:25.0012 0x1618  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

13:57:25.0088 0x1618  AcpiPmi - ok

13:57:25.0208 0x1618  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

13:57:25.0234 0x1618  AdobeARMservice - ok

13:57:25.0312 0x1618  [ B79750091FC0842182FE49D263791294, 32FC260A74C9C45CD1E8998523642C285866378FCD9478FEFD15A0CC42EC0E0B ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

13:57:25.0371 0x1618  AdobeFlashPlayerUpdateSvc - ok

13:57:25.0433 0x1618  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

13:57:25.0582 0x1618  adp94xx - ok

13:57:25.0611 0x1618  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\drivers\adpahci.sys

13:57:25.0711 0x1618  adpahci - ok

13:57:25.0775 0x1618  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\drivers\adpu320.sys

13:57:25.0848 0x1618  adpu320 - ok

13:57:25.0876 0x1618  [ 39AEAECE9F42407F176FE130D790BFBE, 19010DF87BDC1884268098CC04B4B15ECB710C94054A57157C0F9B7A795BDB28 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

13:57:25.0937 0x1618  AeLookupSvc - ok

13:57:26.0030 0x1618  [ 827DBC22C96EECF6D36A13162FABAFD3, EBBC04A6AD3BC83E3791569C1120BBBB59AF70512FA2CEB6A8BA2A257F3F6C32 ] AESTFilters     C:\Program Files\IDT\WDM\aestsrv.exe

13:57:26.0060 0x1618  AESTFilters - ok

13:57:26.0111 0x1618  [ 93B49FA857F7036A4EFF32371F6E7391, B9B2867D9A80E7F028E9D7C6ABCB9EC5198ACE28CEE101C5A846666B356B2843 ] AFD             C:\Windows\system32\drivers\afd.sys

13:57:26.0257 0x1618  AFD - ok

13:57:26.0291 0x1618  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys

13:57:26.0356 0x1618  agp440 - ok

13:57:26.0392 0x1618  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

13:57:26.0473 0x1618  aic78xx - ok

13:57:26.0512 0x1618  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe

13:57:26.0624 0x1618  ALG - ok

13:57:26.0661 0x1618  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys

13:57:26.0703 0x1618  aliide - ok

13:57:26.0736 0x1618  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

13:57:26.0790 0x1618  amdagp - ok

13:57:26.0808 0x1618  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys

13:57:26.0850 0x1618  amdide - ok

13:57:26.0863 0x1618  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

13:57:26.0936 0x1618  AmdK8 - ok

13:57:26.0960 0x1618  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

13:57:27.0026 0x1618  AmdPPM - ok

13:57:27.0056 0x1618  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

13:57:27.0119 0x1618  amdsata - ok

13:57:27.0161 0x1618  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

13:57:27.0281 0x1618  amdsbs - ok

13:57:27.0288 0x1618  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

13:57:27.0338 0x1618  amdxata - ok

13:57:27.0436 0x1618  [ D1AF38FBAC0DC7E6D796B0ED01707EE0, FAFD2C36594A1628293E7623C8CAB2D47EDF8C6C0E18CC2FB37F9A6CA1F0E57C ] AppHostSvc      C:\Windows\system32\inetsrv\apphostsvc.dll

13:57:27.0510 0x1618  AppHostSvc - ok

13:57:27.0540 0x1618  [ 873F0162D10893E3DF34FA2AC604E6EA, 79655CDB125DBA14DDA01E45A2F8E185788081A3DF8D9E7A6A167C9F0D5C3F62 ] AppID           C:\Windows\system32\drivers\appid.sys

13:57:27.0614 0x1618  AppID - ok

13:57:27.0657 0x1618  [ E10F22695EAC1689DED6A9A45D6C352A, 15B10D2E4AB88DE729905E9E4DD24E812163AD45806713E3883E701723D44E3A ] AppIDSvc        C:\Windows\System32\appidsvc.dll

13:57:27.0720 0x1618  AppIDSvc - ok

13:57:27.0750 0x1618  [ 7AE586A76A171B915F7BE478C7542138, B7CDA2DE9C1E3F8997FE3F7D93288C61C9199FA87D24AF541851B8AFBB584D13 ] Appinfo         C:\Windows\System32\appinfo.dll

13:57:27.0821 0x1618  Appinfo - ok

13:57:27.0881 0x1618  [ 82812A27B150D765D03B0074A8257259, C463B96F9AA8CC777AE06807D406014C39B327D29DB98F4F26B5BC90D3F4E2E4 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

13:57:27.0901 0x1618  Apple Mobile Device - ok

13:57:27.0942 0x1618  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt         C:\Windows\System32\appmgmts.dll

13:57:28.0008 0x1618  AppMgmt - ok

13:57:28.0048 0x1618  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\drivers\arc.sys

13:57:28.0106 0x1618  arc - ok

13:57:28.0122 0x1618  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\drivers\arcsas.sys

13:57:28.0173 0x1618  arcsas - ok

13:57:28.0313 0x1618  [ 753F1E09345D7B2C06B9999EA8F9AAB1, C5A53052EE78FA8DC199C77F63654F5F850C111A7DC2B056E09A7D6C2F5B2BCD ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

13:57:28.0351 0x1618  aspnet_state - ok

13:57:28.0412 0x1618  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

13:57:28.0586 0x1618  AsyncMac - ok

13:57:28.0616 0x1618  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys

13:57:28.0636 0x1618  atapi - ok

13:57:28.0686 0x1618  [ 547F07839F71A4357A5E503646CAC2B0, 05FF433B76D5DB40C073F84565D037436DA94B85ABFF1FC84F1468F6EB19C03D ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys

13:57:28.0771 0x1618  atksgt - ok

13:57:28.0822 0x1618  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

13:57:28.0924 0x1618  AudioEndpointBuilder - ok

13:57:28.0947 0x1618  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] Audiosrv        C:\Windows\System32\Audiosrv.dll

13:57:28.0991 0x1618  Audiosrv - ok

13:57:29.0024 0x1618  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll

13:57:29.0095 0x1618  AxInstSV - ok

13:57:29.0145 0x1618  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\drivers\bxvbdx.sys

13:57:29.0306 0x1618  b06bdrv - ok

13:57:29.0340 0x1618  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys

13:57:29.0444 0x1618  b57nd60x - ok

13:57:29.0475 0x1618  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll

13:57:29.0538 0x1618  BDESVC - ok

13:57:29.0559 0x1618  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys

13:57:29.0643 0x1618  Beep - ok

13:57:29.0705 0x1618  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll

13:57:30.0071 0x1618  BFE - ok

13:57:30.0111 0x1618  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll

13:57:30.0317 0x1618  BITS - ok

13:57:30.0337 0x1618  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

13:57:30.0415 0x1618  blbdrive - ok

13:57:30.0479 0x1618  [ 5EA9C80F18CBC393EA7D9A2991DED4B5, 7E5EB1CE44FEBE93686174058D51581FA00BDFF0EBB84BD74BC08F6386019253 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

13:57:30.0509 0x1618  Bonjour Service - ok

13:57:30.0542 0x1618  [ 28AF7D4427868B7CE4C00CAB1864C7F6, AAE5303878AF0F7AA18069A8FCD99639EBC34622B456AF86C5E4F27858196E06 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

13:57:30.0633 0x1618  bowser - ok

13:57:30.0693 0x1618  BRDriver - ok

13:57:30.0743 0x1618  [ 0C4D83F01A5D3A1EF88945AB70F2BB7A, 413542C46C8BCDF3802FF9F98CEC22A0A82A961DFE438CA6C2AE89F7480FFF5E ] BRDriver_1_3_3_E02B25FC C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver.sys

13:57:30.0805 0x1618  BRDriver_1_3_3_E02B25FC - ok

13:57:30.0829 0x1618  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

13:57:30.0888 0x1618  BrFiltLo - ok

13:57:30.0928 0x1618  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

13:57:31.0018 0x1618  BrFiltUp - ok

13:57:31.0152 0x1618  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll

13:57:31.0306 0x1618  Browser - ok

13:57:31.0338 0x1618  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

13:57:31.0458 0x1618  Brserid - ok

13:57:31.0488 0x1618  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

13:57:31.0565 0x1618  BrSerWdm - ok

13:57:31.0619 0x1618  [ 448917845F097FCE9D4554C3D2001EF3, BDCBEC01579D7CF28963E4E13CDC5B26E4B69CA24FA2CC4D6E24CAE0DDBCB3FE ] BRSptStub       C:\ProgramData\BitRaider\BRSptStub.exe

13:57:31.0773 0x1618  BRSptStub - ok

13:57:31.0821 0x1618  BRSptSvc - ok

13:57:31.0850 0x1618  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

13:57:31.0917 0x1618  BrUsbMdm - ok

13:57:31.0932 0x1618  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

13:57:31.0980 0x1618  BrUsbSer - ok

13:57:32.0021 0x1618  [ 2865A5C8E98C70C605F417908CEBB3A4, B1C5AC228BD7072AF8668C009C6CDC13EE9FCB9481F57524300F37C40BF1E935 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

13:57:32.0114 0x1618  BthEnum - ok

13:57:32.0146 0x1618  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

13:57:32.0327 0x1618  BTHMODEM - ok

13:57:32.0353 0x1618  [ AD1872E5829E8A2C3B5B4B641C3EAB0E, 8C2DBCAC08DDB41E2B44E257C55FA2D0272959B308EFF9EAF5FF9AE1E4A0AA39 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

13:57:32.0454 0x1618  BthPan - ok

13:57:32.0494 0x1618  [ 1153DE2E4F5941E10C399CB5592F78A1, 2B88AF246D62F72FA9F5B921B0375AE59A0F263672472D5EC9FDB5CA5EF51C31 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

13:57:32.0597 0x1618  BTHPORT - ok

13:57:32.0653 0x1618  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll

13:57:32.0715 0x1618  bthserv - ok

13:57:32.0734 0x1618  [ C81E9413A25A439F436B1D4B6A0CF9E9, A4C290163207AED22C70C7F90B28F6FC24892889643D60D915059405AC5A4A72 ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

13:57:32.0785 0x1618  BTHUSB - ok

13:57:32.0805 0x1618  BTMCOM - ok

13:57:32.0815 0x1618  BTMUSB - ok

13:57:32.0864 0x1618  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

13:57:32.0932 0x1618  cdfs - ok

13:57:32.0972 0x1618  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

13:57:33.0042 0x1618  cdrom - ok

13:57:33.0062 0x1618  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll

13:57:33.0142 0x1618  CertPropSvc - ok

13:57:33.0172 0x1618  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\drivers\circlass.sys

13:57:33.0232 0x1618  circlass - ok

13:57:33.0252 0x1618  cleanhlp - ok

13:57:33.0292 0x1618  [ 56F817905DB79573D95E84DC407B1204, 509D6B8032523B7A5C7B695DEE07F1B74E28534E1B15831F98A7ACD2B374556B ] CLFS            C:\Windows\system32\CLFS.sys

13:57:33.0386 0x1618  CLFS - ok

13:57:33.0444 0x1618  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

13:57:33.0496 0x1618  clr_optimization_v2.0.50727_32 - ok

13:57:33.0549 0x1618  [ 3CB2944297E7A762F9665A63D7876A3C, 696B8D5FD1DC5E662072CBF1C7CD6270B56643802783013C22848E1BB697625D ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

13:57:33.0567 0x1618  clr_optimization_v4.0.30319_32 - ok

13:57:33.0607 0x1618  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

13:57:33.0657 0x1618  CmBatt - ok

13:57:33.0686 0x1618  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

13:57:33.0717 0x1618  cmdide - ok

13:57:33.0773 0x1618  [ AEC572F808592750F4C0880CFF94EEA5, 51B85CE1779D45A813CD33B527F418992A9494C1F0A190C59EB091A0E683F427 ] CNG             C:\Windows\system32\Drivers\cng.sys

13:57:33.0866 0x1618  CNG - ok

13:57:33.0888 0x1618  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

13:57:33.0931 0x1618  Compbatt - ok

13:57:33.0963 0x1618  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

13:57:34.0014 0x1618  CompositeBus - ok

13:57:34.0024 0x1618  COMSysApp - ok

13:57:34.0097 0x1618  [ 9189813A43642487E70D73D848824B2C, D984BBEABB3797BC2B7401BC60968824597F9DF2B83BF51F5ACE15F1B31F24BD ] cphs            C:\Windows\system32\IntelCpHeciSvc.exe

13:57:34.0197 0x1618  cphs - ok

13:57:34.0279 0x1618  [ D01F685F8B4598D144B0CCE9FF95D8D5, A68EF814CDBD7291DEF4745FE14D5080041BD3275AB12629C7811506AF2B8E17 ] cpudrv          C:\Program Files\SystemRequirementsLab\cpudrv.sys

13:57:34.0297 0x1618  cpudrv - ok

13:57:34.0311 0x1618  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

13:57:34.0351 0x1618  crcdisk - ok

13:57:34.0391 0x1618  [ 348B3A4DD922F590EB39DB231F7AEE4D, 62341BBB263E8E72436FE008E2645692712C2143964D67CE38D58F47F5DEA8B1 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

13:57:34.0475 0x1618  CryptSvc - ok

13:57:34.0512 0x1618  [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC             C:\Windows\system32\drivers\csc.sys

13:57:34.0635 0x1618  CSC - ok

13:57:34.0675 0x1618  [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService      C:\Windows\System32\cscsvc.dll

13:57:34.0775 0x1618  CscService - ok

13:57:34.0835 0x1618  [ 1F54F58D7FA2B3442084E32CDE5E309E, F0D8124E7C9ADC88BD8C53646F2499CDB3D2105DA7C4D28F3D26F313859B3D32 ] DcomLaunch      C:\Windows\system32\rpcss.dll

13:57:34.0895 0x1618  DcomLaunch - ok

13:57:34.0955 0x1618  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll

13:57:35.0086 0x1618  defragsvc - ok

13:57:35.0124 0x1618  [ EA9DBD76CE9254C77BAAB4339DD4C4FB, ECEE6EB8CFE1BD20BC7B6ED29A1624DDC3E22A37A56BA43B9B14E37D4003B72D ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

13:57:35.0216 0x1618  DfsC - ok

13:57:35.0256 0x1618  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll

13:57:35.0364 0x1618  Dhcp - ok

13:57:35.0469 0x1618  [ 58F9BFBAE3C25D1A349DF0C6ECE8F9DF, FF1CFC9B323BCE2CFC06F9B2A98A29396832134FD61A570C1971A7240899E526 ] DiagTrack       C:\Windows\system32\diagtrack.dll

13:57:35.0684 0x1618  DiagTrack - ok

13:57:35.0715 0x1618  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys

13:57:35.0798 0x1618  discache - ok

13:57:35.0828 0x1618  [ B7B470F163002A0D0E381EE45834BF6B, 5B5E204341A6B1689C3F8717C41782B1A077A026F8B19DA3DE08CA44AB1D95B2 ] Disk            C:\Windows\system32\drivers\disk.sys

13:57:35.0883 0x1618  Disk - ok

13:57:35.0908 0x1618  [ 2A958EF85DB1B61FFCA65044FA4BCE9E, C83511685EE1CE85A5ADF9B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys

13:57:36.0010 0x1618  dmvsc - ok

13:57:36.0047 0x1618  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll

13:57:36.0131 0x1618  Dnscache - ok

13:57:36.0164 0x1618  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll

13:57:36.0321 0x1618  dot3svc - ok

13:57:36.0432 0x1618  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll

13:57:36.0544 0x1618  DPS - ok

13:57:36.0585 0x1618  [ A3F684B866A7D89AE396276CE7AFD416, 1E4C034B7B106FA403B13842A199D88A33B492A577B58CDDAE0B4706266B9565 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

13:57:36.0652 0x1618  drmkaud - ok

13:57:36.0676 0x1618  [ 8A32FF671D452D36CC7421171B78F939, E06CB58E561FA4B8E76763EE3D4443298906D661C4E63BAFA33103BAAB22AB9B ] dtlitescsibus   C:\Windows\system32\DRIVERS\dtlitescsibus.sys

13:57:36.0727 0x1618  dtlitescsibus - ok

13:57:36.0754 0x1618  [ 0098B71A5D28FEAF321B4AC4549765D9, FE81E958261DDFA70559B7D8238527CE54C4C3D9D7AC8E0C796070E2705D18DA ] dtliteusbbus    C:\Windows\system32\DRIVERS\dtliteusbbus.sys

13:57:36.0804 0x1618  dtliteusbbus - ok

13:57:36.0884 0x1618  [ 6461E57BB51A848AAE26F52427B7CF9E, A5730998362CB5C3A7B288A3DCD02E3165ACBBB98AB39F7A0FE2029D946EA95D ] dtscsi          C:\Windows\System32\Drivers\dtscsi.sys

13:57:36.0971 0x1618  dtscsi - detected UnsignedFile.Multi.Generic ( 1 )

13:57:37.0222 0x1618  Detect skipped due to KSN trusted

13:57:37.0222 0x1618  dtscsi - ok

13:57:37.0288 0x1618  [ 4B21D102E49E9D44C478D6766A7FCBE5, 7CEEBCF81EE23876F039ED1222020D6F45FE6B3A5CE3BB93DDA3B8BBEAA15E47 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

13:57:37.0438 0x1618  DXGKrnl - ok

13:57:37.0468 0x1618  EagleXNt - ok

13:57:37.0503 0x1618  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll

13:57:37.0597 0x1618  EapHost - ok

13:57:37.0802 0x1618  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\drivers\evbdx.sys

13:57:38.0236 0x1618  ebdrv - ok

13:57:38.0263 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] EFS             C:\Windows\System32\lsass.exe

13:57:38.0370 0x1618  EFS - ok

13:57:38.0425 0x1618  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

13:57:38.0561 0x1618  ehRecvr - ok

13:57:38.0576 0x1618  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe

13:57:38.0675 0x1618  ehSched - ok

13:57:38.0724 0x1618  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

13:57:38.0833 0x1618  elxstor - ok

13:57:38.0858 0x1618  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

13:57:38.0930 0x1618  ErrDev - ok

13:57:38.0972 0x1618  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll

13:57:39.0146 0x1618  EventSystem - ok

13:57:39.0167 0x1618  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys

13:57:39.0306 0x1618  exfat - ok

13:57:39.0332 0x1618  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

13:57:39.0509 0x1618  fastfat - ok

13:57:39.0572 0x1618  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe

13:57:39.0750 0x1618  Fax - ok

13:57:39.0776 0x1618  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\drivers\fdc.sys

13:57:39.0853 0x1618  fdc - ok

13:57:39.0877 0x1618  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll

13:57:39.0961 0x1618  fdPHost - ok

13:57:39.0981 0x1618  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll

13:57:40.0061 0x1618  FDResPub - ok

13:57:40.0071 0x1618  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

13:57:40.0144 0x1618  FileInfo - ok

13:57:40.0169 0x1618  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

13:57:40.0293 0x1618  Filetrace - ok

13:57:40.0315 0x1618  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

13:57:40.0385 0x1618  flpydisk - ok

13:57:40.0409 0x1618  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

13:57:40.0483 0x1618  FltMgr - ok

13:57:40.0552 0x1618  [ DF15E8426D02C15422EBFF28BA83F03A, 51BEB315B0E5114906684FB3F460FA7BEA326C1B589C5C35D29795A7C13AB4FB ] FontCache       C:\Windows\system32\FntCache.dll

13:57:40.0723 0x1618  FontCache - ok

13:57:40.0785 0x1618  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

13:57:40.0851 0x1618  FontCache3.0.0.0 - ok

13:57:40.0878 0x1618  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

13:57:40.0927 0x1618  FsDepends - ok

13:57:40.0952 0x1618  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

13:57:41.0059 0x1618  Fs_Rec - ok

13:57:41.0105 0x1618  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

13:57:41.0190 0x1618  fvevol - ok

13:57:41.0222 0x1618  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

13:57:41.0285 0x1618  gagp30kx - ok

13:57:41.0313 0x1618  [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

13:57:41.0359 0x1618  GEARAspiWDM - ok

13:57:41.0413 0x1618  [ 77EBF3E9386DAA51551AF429052D88D0, 94C3294BB9E14B07448734AE65B37801D3FF15BEC987D182A929A017FEF7B276 ] giveio          C:\Windows\system32\giveio.sys

13:57:41.0488 0x1618  giveio - detected UnsignedFile.Multi.Generic ( 1 )

13:57:41.0766 0x1618  Detect skipped due to KSN trusted

13:57:41.0766 0x1618  giveio - ok

13:57:41.0811 0x1618  [ 8DA745095F6B73BB5B8266BF773DA1FA, 3EA614A9B8D4F61704A8754B014C8F6AC60551435BC4D9F2E761955905DA89F3 ] gpsvc           C:\Windows\System32\gpsvc.dll

13:57:41.0925 0x1618  gpsvc - ok

13:57:42.0002 0x1618  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe

13:57:42.0022 0x1618  gupdate - ok

13:57:42.0042 0x1618  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

13:57:42.0063 0x1618  gupdatem - ok

13:57:42.0103 0x1618  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

13:57:42.0167 0x1618  hcw85cir - ok

13:57:42.0184 0x1618  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

13:57:42.0271 0x1618  HDAudBus - ok

13:57:42.0311 0x1618  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

13:57:42.0411 0x1618  HidBatt - ok

13:57:42.0431 0x1618  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\drivers\hidbth.sys

13:57:42.0523 0x1618  HidBth - ok

13:57:42.0553 0x1618  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\drivers\hidir.sys

13:57:42.0627 0x1618  HidIr - ok

13:57:42.0647 0x1618  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll

13:57:42.0727 0x1618  hidserv - ok

13:57:42.0767 0x1618  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

13:57:42.0857 0x1618  HidUsb - ok

13:57:42.0897 0x1618  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll

13:57:42.0977 0x1618  hkmsvc - ok

13:57:42.0997 0x1618  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll

13:57:43.0083 0x1618  HomeGroupListener - ok

13:57:43.0108 0x1618  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

13:57:43.0278 0x1618  HomeGroupProvider - ok

13:57:43.0528 0x1618  [ BCC4A8B2E2E902F52E7F2E7D8E125765, 4253DEABF5E4613E42BFC921BF4E2DD5BDF80A640250F41BDA7DD2711A6BA8A1 ] HPDrvMntSvc.exe C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe

13:57:43.0569 0x1618  HPDrvMntSvc.exe - ok

13:57:43.0672 0x1618  [ 4EF10B866C62ABBEAF7511CDD05A19BE, B758DCB9CD8C7E6ED4DEFB666A94B0F749CB86964D2CA9004DF94C5E321F5151 ] hpdskflt        C:\Windows\system32\drivers\hpdskflt.sys

13:57:43.0680 0x1618  hpdskflt - ok

13:57:43.0900 0x1618  [ 9DCFDDECC54FC813E7C0C8EDF6E99E1C, 3BCCF8835224B6FF81794BF34277917BBDFE24CA6A575CAFCD55979C39B6BF3D ] hpHotkeyMonitor C:\Program Files\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe

13:57:43.0920 0x1618  hpHotkeyMonitor - ok

13:57:43.0992 0x1618  [ EE9F88368739554DCCA142AE0214BCB1, 1D48FE1A0D633E998F382C3FC3455FCF7E6CF73EE1B624BEEEC8F82EF45003D6 ] HpqKbFiltr      C:\Windows\system32\DRIVERS\HpqKbFiltr.sys

13:57:44.0052 0x1618  HpqKbFiltr - ok

13:57:44.0114 0x1618  [ EC9739A46F1F83C6E52A7A4697F44A65, CF4E93D3E8CA607DDEF87C6996F6C7326316144A61C1B4F83EA1B4B2F9BDC69B ] hpqwmiex        C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe

13:57:44.0162 0x1618  hpqwmiex - ok

13:57:44.0204 0x1618  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

13:57:44.0266 0x1618  HpSAMD - ok

13:57:44.0306 0x1618  [ C0BEB56ED79B59B7B33D0AA6C38A0BA6, 8A21DB7B51BF533CBA08640498C132560641244B9218C483E2053502DF88313D ] hpsrv           C:\Windows\system32\Hpservice.exe

13:57:44.0356 0x1618  hpsrv - ok

13:57:44.0408 0x1618  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys

13:57:44.0620 0x1618  HTTP - ok

13:57:44.0650 0x1618  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

13:57:44.0700 0x1618  hwpolicy - ok

13:57:44.0747 0x1618  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

13:57:44.0882 0x1618  i8042prt - ok

13:57:45.0002 0x1618  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

13:57:45.0146 0x1618  iaStorV - ok

13:57:45.0316 0x1618  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

13:57:45.0356 0x1618  ICCS - ok

13:57:45.0466 0x1618  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

13:57:45.0767 0x1618  idsvc - ok

13:57:45.0797 0x1618  IEEtwCollectorService - ok

13:57:46.0027 0x1618  [ C520DD440B57DBD54A4FD1838058879A, 6A81772290C21721603892E66104E33FFAA5B7B03323036B7D46DA4EB4D70E37 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys

13:57:46.0397 0x1618  igfx - ok

13:57:46.0427 0x1618  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\drivers\iirsp.sys

13:57:46.0478 0x1618  iirsp - ok

13:57:46.0539 0x1618  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll

13:57:46.0631 0x1618  IKEEXT - ok

13:57:46.0681 0x1618  [ 6A6E1B319A47FA7AF2AE6B6815AE9854, 812C9BFBB8207137A3CED5E24B36BCAAA26EFBD66E18CAEE36E23CE6D6B858F8 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys

13:57:46.0791 0x1618  IntcDAud - ok

13:57:46.0911 0x1618  [ CD0943496A57B1DCDBDDA588FA432A2F, 107DE411A0827137A81D96BE53400C0DACD4A8DDB57C00B12AF62E2A6A4DDF3C ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe

13:57:46.0951 0x1618  Intel(R) Capability Licensing Service Interface - ok

13:57:47.0013 0x1618  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys

13:57:47.0053 0x1618  intelide - ok

13:57:47.0095 0x1618  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

13:57:47.0165 0x1618  intelppm - ok

13:57:47.0185 0x1618  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

13:57:47.0255 0x1618  IPBusEnum - ok

13:57:47.0285 0x1618  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

13:57:47.0385 0x1618  IpFilterDriver - ok

13:57:47.0455 0x1618  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

13:57:47.0555 0x1618  iphlpsvc - ok

13:57:47.0587 0x1618  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

13:57:47.0697 0x1618  IPMIDRV - ok

13:57:47.0717 0x1618  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

13:57:47.0807 0x1618  IPNAT - ok

13:57:47.0897 0x1618  [ ABC734A5AF3D65DA23E0333EF775E6BE, E093C53230D22D337EAF4CA6FE29B625CDB746D4D8901553430F14FDB85CC98F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

13:57:47.0937 0x1618  iPod Service - ok

13:57:47.0967 0x1618  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

13:57:48.0027 0x1618  IRENUM - ok

13:57:48.0037 0x1618  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

13:57:48.0091 0x1618  isapnp - ok

13:57:48.0129 0x1618  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

13:57:48.0229 0x1618  iScsiPrt - ok

13:57:48.0309 0x1618  [ 23D375DFE73C2DE7C2A76C6C705D6D96, 3AA0AC46BE33E885AB91364199C031E87334FE9B422AF3FC7AC74B0E9CDB93D1 ] jhi_service     C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

13:57:48.0349 0x1618  jhi_service - ok

13:57:48.0399 0x1618  [ 5C2F34F60AAEC9DB4DAA973915CBAEDC, 34B4E5A097477C0E2BE475980B4A516DCB5895040E7C2A827EC10AB2B5DEBC93 ] JMCR            C:\Windows\system32\DRIVERS\jmcr.sys

13:57:48.0469 0x1618  JMCR - ok

13:57:48.0519 0x1618  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

13:57:48.0571 0x1618  kbdclass - ok

13:57:48.0600 0x1618  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

13:57:48.0692 0x1618  kbdhid - ok

13:57:48.0702 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] KeyIso          C:\Windows\system32\lsass.exe

13:57:48.0752 0x1618  KeyIso - ok

13:57:48.0787 0x1618  [ 64285B5EF4DC58C71B81BD946BCCA1D7, AEB6FAD269606149956033EE6FB8999EABA04EDBD1B53F2844072A38470AEE88 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

13:57:48.0837 0x1618  KSecDD - ok

13:57:48.0867 0x1618  [ BA8668FF7A452E271A36ABBB60FA08E0, 9E4163D0C82F981EBFFADA42DF73AE0B69B0CA249A9288594E6470BAD207529A ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

13:57:48.0937 0x1618  KSecPkg - ok

13:57:48.0967 0x1618  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll

13:57:49.0080 0x1618  KtmRm - ok

13:57:49.0100 0x1618  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll

13:57:49.0214 0x1618  LanmanServer - ok

13:57:49.0234 0x1618  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

13:57:49.0322 0x1618  LanmanWorkstation - ok

13:57:49.0352 0x1618  [ 29FAB5363138F6E322F4CD780ED9D337, 39AE6E21D116AEC9EA65632F3325E848FFBEC6169A88ADC4814639F97A290D91 ] LicCtrlService  C:\Windows\runservice.exe

13:57:49.0412 0x1618  LicCtrlService - detected UnsignedFile.Multi.Generic ( 1 )

13:57:49.0677 0x1618  Detect skipped due to KSN trusted

13:57:49.0677 0x1618  LicCtrlService - ok

13:57:49.0717 0x1618  [ F8A7212D0864EF5E9185FB95E6623F4D, 277EAA06BD3D1CB31E6CD7B9ECD3A4B7D4AB7A369DB5FFF04EC7D749DF26E3D2 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys

13:57:49.0757 0x1618  lirsgt - ok

13:57:49.0787 0x1618  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

13:57:49.0869 0x1618  lltdio - ok

13:57:49.0899 0x1618  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

13:57:50.0001 0x1618  lltdsvc - ok

13:57:50.0022 0x1618  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll

13:57:50.0093 0x1618  lmhosts - ok

13:57:50.0163 0x1618  [ 1536D1C328E1B32E962DDBCEA70C74A6, B1690DEA89C8BFF432FB19535A1E216F8321FDB952794EF395231FA057ECBAA0 ] LMS             C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

13:57:50.0183 0x1618  LMS - ok

13:57:50.0243 0x1618  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

13:57:50.0324 0x1618  LSI_FC - ok

13:57:50.0355 0x1618  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

13:57:50.0417 0x1618  LSI_SAS - ok

13:57:50.0437 0x1618  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

13:57:50.0487 0x1618  LSI_SAS2 - ok

13:57:50.0507 0x1618  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

13:57:50.0572 0x1618  LSI_SCSI - ok

13:57:50.0602 0x1618  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys

13:57:50.0702 0x1618  luafv - ok

13:57:50.0732 0x1618  [ A1D52DB330E18B5A7A718D31D950CA87, D3BE0C13EB0001841B0BA3B401783C0CDA247023BAF8351EBDDB48264AB2E20C ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

13:57:50.0772 0x1618  MBAMProtector - ok

13:57:50.0902 0x1618  [ 9611577752E293259C7DCE19E9026362, 8CB5DFD63FA15603BB6FA6B501E09ED7F4DE0E8F68CB28B78CECAC3711BEFD24 ] MBAMScheduler   C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

13:57:50.0982 0x1618  MBAMScheduler - ok

13:57:51.0077 0x1618  [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService     C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

13:57:51.0137 0x1618  MBAMService - ok

13:57:51.0177 0x1618  [ 66DDF98174707CBADBCA6BBABDA1231C, 18B4D1FB27CAF2A360A0B0803015F5D88A7DE9A8BCEAFD2FB769554DDC4505F2 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

13:57:51.0227 0x1618  MBAMWebAccessControl - ok

13:57:51.0257 0x1618  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

13:57:51.0317 0x1618  Mcx2Svc - ok

13:57:51.0347 0x1618  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\drivers\megasas.sys

13:57:51.0387 0x1618  megasas - ok

13:57:51.0427 0x1618  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

13:57:51.0520 0x1618  MegaSR - ok

13:57:51.0547 0x1618  [ 240D715CFE4FB8F4CDA76F6863E62334, B410C88F0D4749AB843E03BB8BA215A8E3F291404C1B68824A5963A2381188FB ] MEI             C:\Windows\system32\DRIVERS\HECI.sys

13:57:51.0727 0x1618  MEI - ok

13:57:51.0926 0x1618  Microsoft SharePoint Workspace Audit Service - ok

13:57:51.0948 0x1618  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll

13:57:52.0031 0x1618  MMCSS - ok

13:57:52.0098 0x1618  [ C36ED33F9AFC5A9772E6C6A9E5B4D183, DFA5075FFAC29E8AAD05A7CED9F6D339C434801D5FF7418B6C4DA3240AAD8E2D ] Mobile Broadband HL Service C:\ProgramData\MobileBrServ\mbbservice.exe

13:57:52.0131 0x1618  Mobile Broadband HL Service - ok

13:57:52.0148 0x1618  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys

13:57:52.0233 0x1618  Modem - ok

13:57:52.0269 0x1618  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

13:57:52.0325 0x1618  monitor - ok

13:57:52.0342 0x1618  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

13:57:52.0392 0x1618  mouclass - ok

13:57:52.0402 0x1618  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

13:57:52.0468 0x1618  mouhid - ok

13:57:52.0488 0x1618  [ D1BDF813C9FE5ED53134EDF360927735, 0FC422513A9C98C32A90C7C5B2635DA6104C6425A2E2A8746B110A07AFB1B539 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

13:57:52.0588 0x1618  mountmgr - ok

13:57:52.0613 0x1618  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys

13:57:52.0676 0x1618  mpio - ok

13:57:52.0700 0x1618  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

13:57:52.0789 0x1618  mpsdrv - ok

13:57:52.0930 0x1618  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll

13:57:53.0085 0x1618  MpsSvc - ok

13:57:53.0150 0x1618  [ 06AC0310138E4B2C35AF7344D18BC686, FCDB6CC851EC47F92FFF764717A44FF5D5D0E179C215B3C6E77FB9BEA4DE1908 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

13:57:53.0249 0x1618  MRxDAV - ok

13:57:53.0280 0x1618  [ 661FCC2CC72EC1F42D7AA29972E57E24, 6D4F84249EF83E82E5F3B4526415D61C26D87F76D7A209BB71373B89CE18662D ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

13:57:53.0350 0x1618  mrxsmb - ok

13:57:53.0377 0x1618  [ D5CC6F07B6491E8DAC8E701185DDF506, 22A77A56BF8A0C239A29DE09F23137F9451D0614AD015AB9E3D7AF2816C7DEBB ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

13:57:53.0477 0x1618  mrxsmb10 - ok

13:57:53.0497 0x1618  [ 06BF94F9E8D74CE0BC1B8660D37969F8, 7E583024FF71A290655566A9704A943D2CD240F1AEB3C07ADB41E97299DB0958 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

13:57:53.0585 0x1618  mrxsmb20 - ok

13:57:53.0625 0x1618  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys

13:57:53.0710 0x1618  msahci - ok

13:57:53.0740 0x1618  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

13:57:53.0798 0x1618  msdsm - ok

13:57:53.0838 0x1618  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe

13:57:53.0925 0x1618  MSDTC - ok

13:57:53.0948 0x1618  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys

13:57:54.0015 0x1618  Msfs - ok

13:57:54.0035 0x1618  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

13:57:54.0095 0x1618  mshidkmdf - ok

13:57:54.0115 0x1618  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

13:57:54.0155 0x1618  msisadrv - ok

13:57:54.0196 0x1618  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

13:57:54.0292 0x1618  MSiSCSI - ok

13:57:54.0297 0x1618  msiserver - ok

13:57:54.0333 0x1618  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

13:57:54.0406 0x1618  MSKSSRV - ok

13:57:54.0424 0x1618  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

13:57:54.0474 0x1618  MSPCLOCK - ok

13:57:54.0493 0x1618  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

13:57:54.0543 0x1618  MSPQM - ok

13:57:54.0577 0x1618  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

13:57:54.0640 0x1618  MsRPC - ok

13:57:54.0670 0x1618  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

13:57:54.0713 0x1618  mssmbios - ok

13:57:54.0743 0x1618  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

13:57:54.0813 0x1618  MSTEE - ok

13:57:54.0832 0x1618  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

13:57:54.0896 0x1618  MTConfig - ok

13:57:54.0919 0x1618  [ E7EB93F16956C1BE56CB9B865802F696, 823185D58EDDD9ADF7662EF122A2035E076F2EF42586B3735A07F9215C72D5E1 ] Mup             C:\Windows\system32\Drivers\mup.sys

13:57:54.0982 0x1618  Mup - ok

13:57:55.0022 0x1618  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll

13:57:55.0089 0x1618  napagent - ok

13:57:55.0137 0x1618  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

13:57:55.0248 0x1618  NativeWifiP - ok

13:57:55.0298 0x1618  [ 9804FB2E46077F2977552347DFCA7E05, A34B703462C6998AB2B3EA6389F4B89616CDC257D44C400C92663E6FB4A8F196 ] NDIS            C:\Windows\system32\drivers\ndis.sys

13:57:55.0434 0x1618  NDIS - ok

13:57:55.0459 0x1618  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

13:57:55.0533 0x1618  NdisCap - ok

13:57:55.0555 0x1618  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

13:57:55.0624 0x1618  NdisTapi - ok

13:57:55.0640 0x1618  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

13:57:55.0709 0x1618  Ndisuio - ok

13:57:55.0735 0x1618  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

13:57:55.0838 0x1618  NdisWan - ok

13:57:55.0863 0x1618  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

13:57:55.0951 0x1618  NDProxy - ok

13:57:55.0967 0x1618  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

13:57:56.0047 0x1618  NetBIOS - ok

13:57:56.0067 0x1618  [ A00996C9BFEF29A93B9F21DBE1DC502D, A97982CBBC2E240B0CD884ED3ED5D11B207DA8E7BEF73DCEA44E16E1CD84222F ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

13:57:56.0161 0x1618  NetBT - ok

13:57:56.0175 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] Netlogon        C:\Windows\system32\lsass.exe

13:57:56.0193 0x1618  Netlogon - ok

13:57:56.0223 0x1618  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll

13:57:56.0333 0x1618  Netman - ok

13:57:56.0353 0x1618  [ AC8B816873227930B391B40C6EC4835E, FCAB6E9254AF10536D1D2A2E08C24A21D30516BC64BDBE7E529C618E8CCCB5BA ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:57:56.0383 0x1618  NetMsmqActivator - ok

13:57:56.0391 0x1618  [ AC8B816873227930B391B40C6EC4835E, FCAB6E9254AF10536D1D2A2E08C24A21D30516BC64BDBE7E529C618E8CCCB5BA ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:57:56.0411 0x1618  NetPipeActivator - ok

13:57:56.0431 0x1618  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll

13:57:56.0489 0x1618  netprofm - ok

13:57:56.0612 0x1618  [ B0BFAAF4C780C19D2B78531FC6AEE10C, 7193E6CD5BC66EBE1F293A26E669D0700DEFE592F46C6D65A9BE93C8C7FA1067 ] netr28          C:\Windows\system32\DRIVERS\netr28.sys

13:57:56.0818 0x1618  netr28 - ok

13:57:56.0848 0x1618  [ AC8B816873227930B391B40C6EC4835E, FCAB6E9254AF10536D1D2A2E08C24A21D30516BC64BDBE7E529C618E8CCCB5BA ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:57:56.0868 0x1618  NetTcpActivator - ok

13:57:56.0878 0x1618  [ AC8B816873227930B391B40C6EC4835E, FCAB6E9254AF10536D1D2A2E08C24A21D30516BC64BDBE7E529C618E8CCCB5BA ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

13:57:56.0910 0x1618  NetTcpPortSharing - ok

13:57:56.0985 0x1618  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

13:57:57.0067 0x1618  nfrd960 - ok

13:57:57.0195 0x1618  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll

13:57:57.0237 0x1618  NlaSvc - ok

13:57:57.0257 0x1618  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

13:57:57.0344 0x1618  Npfs - ok

13:57:57.0372 0x1618  npggsvc - ok

13:57:57.0392 0x1618  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll

13:57:57.0453 0x1618  nsi - ok

13:57:57.0483 0x1618  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

13:57:57.0565 0x1618  nsiproxy - ok

13:57:57.0644 0x1618  [ 978E7A2E4BF4E8E70D0776EF0D9E97FB, B6C82BB9B3025FD2D37B6AB6FA9C2944F8B3020CD4588BE464CE73A992B7FF00 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

13:57:57.0820 0x1618  Ntfs - ok

13:57:57.0971 0x1618  [ FF9BAFC84105D51F66BAD6463A77952A, 11EC4484DD717672774B81F5D35286553DDE8B78F0A0DCFB6D6E20B9083E45DF ] ntrtscan        C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe

13:57:58.0092 0x1618  ntrtscan - ok

13:57:58.0115 0x1618  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys

13:57:58.0174 0x1618  Null - ok

13:57:58.0194 0x1618  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

13:57:58.0266 0x1618  nvraid - ok

13:57:58.0301 0x1618  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

13:57:58.0321 0x1618  nvstor - ok

13:57:58.0344 0x1618  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

13:57:58.0402 0x1618  nv_agp - ok

13:57:58.0422 0x1618  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

13:57:58.0492 0x1618  ohci1394 - ok

13:57:58.0667 0x1618  [ AD851D818F399DD946A9C17AB2156F22, 4A541E7A3A3164581BFB9080DE0976E18F6DD00E39458EBBCBD3B2445708BEB5 ] Origin Client Service C:\Program Files\Origin\OriginClientService.exe

13:57:58.0788 0x1618  Origin Client Service - ok

13:57:58.0964 0x1618  [ 788363C87EBD90AC1EAD2DC5A9A40759, B565663B459414C5C9F81451D9A127D62CDF605BC2A9E686F74A2E4FD44A9B43 ] Origin Web Helper Service C:\Program Files\Origin\OriginWebHelperService.exe

13:57:59.0086 0x1618  Origin Web Helper Service - ok

13:57:59.0147 0x1618  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

13:57:59.0174 0x1618  ose - ok

13:57:59.0417 0x1618  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

13:57:59.0637 0x1618  osppsvc - ok

13:57:59.0684 0x1618  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

13:57:59.0758 0x1618  p2pimsvc - ok

13:57:59.0796 0x1618  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll

13:57:59.0878 0x1618  p2psvc - ok

13:57:59.0902 0x1618  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\drivers\parport.sys

13:57:59.0955 0x1618  Parport - ok

13:57:59.0985 0x1618  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

13:58:00.0035 0x1618  partmgr - ok

13:58:00.0045 0x1618  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

13:58:00.0095 0x1618  Parvdm - ok

13:58:00.0125 0x1618  [ 84752B402BF64CCDDF11816FEDF12DB4, 184DDFCEEE8C5B492415270FC640B8D584B3D79E7BADCE4DE7CDD74CC8C60130 ] PcaSvc          C:\Windows\System32\pcasvc.dll

13:58:00.0190 0x1618  PcaSvc - ok

13:58:00.0218 0x1618  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys

13:58:00.0282 0x1618  pci - ok

13:58:00.0324 0x1618  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys

13:58:00.0362 0x1618  pciide - ok

13:58:00.0392 0x1618  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

13:58:00.0469 0x1618  pcmcia - ok

13:58:00.0479 0x1618  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys

13:58:00.0540 0x1618  pcw - ok

13:58:00.0591 0x1618  [ 0C941A3F148B4228867908F98F394461, 6D5F575F2E796C5EA8F9F3F96F9ACD935E274210A105C9365102B448E9AE2031 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

13:58:00.0700 0x1618  PEAUTH - ok

13:58:00.0772 0x1618  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

13:58:00.0887 0x1618  PeerDistSvc - ok

13:58:00.0969 0x1618  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll

13:58:01.0124 0x1618  pla - ok

13:58:01.0164 0x1618  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

13:58:01.0241 0x1618  PlugPlay - ok

13:58:01.0287 0x1618  [ 3A2BDD76E7D2A5F40A7174793D1BA794, 029EE2C2F71AEC7906600EEC4F855DC5648C1ECF53F11426079B04591F24D067 ] PnkBstrA        C:\Windows\system32\PnkBstrA.exe

13:58:01.0351 0x1618  PnkBstrA - ok

13:58:01.0371 0x1618  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

13:58:01.0443 0x1618  PNRPAutoReg - ok

13:58:01.0453 0x1618  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

13:58:01.0496 0x1618  PNRPsvc - ok

13:58:01.0538 0x1618  [ 896D916DE06F5502D301E8C4DC442AE8, 7B5C5FA075BA680B990A0A78A690CF2DE04EF7EB1457781E38D0EE4A95CEFDCA ] Point32         C:\Windows\system32\DRIVERS\point32.sys

13:58:01.0577 0x1618  Point32 - ok

13:58:01.0620 0x1618  [ A2FEA7E16D8D056D2FF1EE93F9C73FB1, 6BC8C1B37274B50573F3DAC043DBD9B29B93F527290392842CD94910014D0C74 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

13:58:01.0697 0x1618  PolicyAgent - ok

13:58:01.0729 0x1618  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll

13:58:01.0829 0x1618  Power - ok

13:58:01.0846 0x1618  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

13:58:01.0937 0x1618  PptpMiniport - ok

13:58:01.0956 0x1618  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\drivers\processr.sys

13:58:02.0016 0x1618  Processor - ok

13:58:02.0046 0x1618  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll

13:58:02.0113 0x1618  ProfSvc - ok

13:58:02.0133 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] ProtectedStorage C:\Windows\system32\lsass.exe

13:58:02.0163 0x1618  ProtectedStorage - ok

13:58:02.0183 0x1618  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

13:58:02.0340 0x1618  Psched - ok

13:58:02.0471 0x1618  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\drivers\ql2300.sys

13:58:02.0655 0x1618  ql2300 - ok

13:58:02.0691 0x1618  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

13:58:02.0751 0x1618  ql40xx - ok

13:58:02.0786 0x1618  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll

13:58:02.0869 0x1618  QWAVE - ok

13:58:02.0880 0x1618  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

13:58:02.0948 0x1618  QWAVEdrv - ok

13:58:02.0958 0x1618  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

13:58:03.0035 0x1618  RasAcd - ok

13:58:03.0051 0x1618  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

13:58:03.0135 0x1618  RasAgileVpn - ok

13:58:03.0155 0x1618  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll

13:58:03.0245 0x1618  RasAuto - ok

13:58:03.0276 0x1618  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

13:58:03.0355 0x1618  Rasl2tp - ok

13:58:03.0375 0x1618  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll

13:58:03.0467 0x1618  RasMan - ok

13:58:03.0477 0x1618  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

13:58:03.0581 0x1618  RasPppoe - ok

13:58:03.0591 0x1618  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

13:58:03.0709 0x1618  RasSstp - ok

13:58:03.0743 0x1618  [ B15D1178AD7AA2D4F32E88B68C7E2DA2, 0FC3137F28548B7A25F7F6837FC5984547BE49E9D92399B2B78D1919EC95FD73 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

13:58:03.0850 0x1618  rdbss - ok

13:58:03.0870 0x1618  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

13:58:03.0928 0x1618  rdpbus - ok

13:58:03.0939 0x1618  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

13:58:04.0001 0x1618  RDPCDD - ok

13:58:04.0033 0x1618  [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

13:58:04.0101 0x1618  RDPDR - ok

13:58:04.0137 0x1618  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

13:58:04.0199 0x1618  RDPENCDD - ok

13:58:04.0229 0x1618  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

13:58:04.0297 0x1618  RDPREFMP - ok

13:58:04.0355 0x1618  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

13:58:04.0394 0x1618  RdpVideoMiniport - ok

13:58:04.0434 0x1618  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

13:58:04.0525 0x1618  RDPWD - ok

13:58:04.0570 0x1618  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

13:58:04.0646 0x1618  rdyboost - ok

13:58:04.0688 0x1618  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll

13:58:04.0770 0x1618  RemoteAccess - ok

13:58:04.0798 0x1618  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll

13:58:04.0889 0x1618  RemoteRegistry - ok

13:58:04.0919 0x1618  [ CB928D9E6DAF51879DD6BA8D02F01321, DFD263B67DDF98AE09AF6D6986CBC7BE3206BCE8403AAC51BCF9459E78233D12 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

13:58:04.0999 0x1618  RFCOMM - ok

13:58:05.0008 0x1618  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

13:58:05.0092 0x1618  RpcEptMapper - ok

13:58:05.0117 0x1618  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe

13:58:05.0159 0x1618  RpcLocator - ok

13:58:05.0189 0x1618  [ 1F54F58D7FA2B3442084E32CDE5E309E, F0D8124E7C9ADC88BD8C53646F2499CDB3D2105DA7C4D28F3D26F313859B3D32 ] RpcSs           C:\Windows\system32\rpcss.dll

13:58:05.0236 0x1618  RpcSs - ok

13:58:05.0266 0x1618  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

13:58:05.0356 0x1618  rspndr - ok

13:58:05.0428 0x1618  [ 5283B9A27FF230F2FF70D92451FF409A, B8BAC70E1DE4485C79CA7B47D4DCFE0223CECEA8ED75CE4F128D47051F95FE5D ] RTL8167         C:\Windows\system32\DRIVERS\Rt86win7.sys

13:58:05.0531 0x1618  RTL8167 - ok

13:58:05.0566 0x1618  [ A492CEE016B50FBA6A127589A525BF96, A345196547243C213A5F2ABE341F472F2BCFD9FDA94BA60C4D6203E48607DD53 ] RTLE8023xp      C:\Windows\system32\DRIVERS\Rtenicxp.sys

13:58:05.0648 0x1618  RTLE8023xp - ok

13:58:05.0671 0x1618  [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

13:58:05.0721 0x1618  s3cap - ok

13:58:05.0742 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] SamSs           C:\Windows\system32\lsass.exe

13:58:05.0774 0x1618  SamSs - ok

13:58:05.0814 0x1618  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

13:58:05.0879 0x1618  sbp2port - ok

13:58:05.0908 0x1618  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

13:58:06.0001 0x1618  SCardSvr - ok

13:58:06.0011 0x1618  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

13:58:06.0091 0x1618  scfilter - ok

13:58:06.0158 0x1618  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\Windows\system32\schedsvc.dll

13:58:06.0268 0x1618  Schedule - ok

13:58:06.0289 0x1618  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll

13:58:06.0329 0x1618  SCPolicySvc - ok

13:58:06.0364 0x1618  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

13:58:06.0439 0x1618  SDRSVC - ok

13:58:06.0479 0x1618  [ 72DFFA33F8ED1C847075EEE2C1E790EE, 9449F4E725103E61809A75DD3370F222DD84E066A874E2CF9485EDFA19CCF858 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

13:58:06.0526 0x1618  secdrv - detected UnsignedFile.Multi.Generic ( 1 )

13:58:06.0704 0x1618  Detect skipped due to KSN trusted

13:58:06.0704 0x1618  secdrv - ok

13:58:06.0726 0x1618  [ 38CBFFED5FC39CDFE6B4014401ED2629, 7BA730E2EDB8387190E45DA2F475BFE42AB3B12319DE088BD8E9F59227EDA4DD ] seclogon        C:\Windows\system32\seclogon.dll

13:58:06.0801 0x1618  seclogon - ok

13:58:06.0833 0x1618  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll

13:58:06.0917 0x1618  SENS - ok

13:58:06.0927 0x1618  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

13:58:06.0985 0x1618  SensrSvc - ok

13:58:07.0015 0x1618  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\drivers\serenum.sys

13:58:07.0054 0x1618  Serenum - ok

13:58:07.0074 0x1618  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\drivers\serial.sys

13:58:07.0144 0x1618  Serial - ok

13:58:07.0154 0x1618  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\drivers\sermouse.sys

13:58:07.0215 0x1618  sermouse - ok

13:58:07.0251 0x1618  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll

13:58:07.0549 0x1618  SessionEnv - ok

13:58:07.0564 0x1618  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

13:58:07.0609 0x1618  sffdisk - ok

13:58:07.0637 0x1618  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

13:58:07.0685 0x1618  sffp_mmc - ok

13:58:07.0704 0x1618  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

13:58:07.0777 0x1618  sffp_sd - ok

13:58:07.0792 0x1618  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

13:58:07.0902 0x1618  sfloppy - ok

13:58:07.0940 0x1618  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll

13:58:08.0054 0x1618  SharedAccess - ok

13:58:08.0089 0x1618  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

13:58:08.0189 0x1618  ShellHWDetection - ok

13:58:08.0203 0x1618  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys

13:58:08.0263 0x1618  sisagp - ok

13:58:08.0296 0x1618  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

13:58:08.0336 0x1618  SiSRaid2 - ok

13:58:08.0360 0x1618  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

13:58:08.0406 0x1618  SiSRaid4 - ok

13:58:08.0471 0x1618  [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe

13:58:08.0493 0x1618  SkypeUpdate - ok

13:58:08.0523 0x1618  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

13:58:08.0604 0x1618  Smb - ok

13:58:08.0652 0x1618  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

13:58:08.0735 0x1618  SNMPTRAP - ok

13:58:08.0864 0x1618  [ AA0D91A77B14447F4ABACEA4E42C44AD, 25C4C8F94C4D76614B576AC0831E56D4BC2E1BA1394396A37F3FAF467DCD465C ] SNP2UVC         C:\Windows\system32\DRIVERS\snp2uvc.sys

13:58:09.0061 0x1618  SNP2UVC - ok

13:58:09.0105 0x1618  [ DC8D2952FB6FFBAEC67BD1B93A34DF11, 0BD1523A68900B80ED1BCCB967643525CCA55D4FF4622D0128913690E6BB619E ] speedfan        C:\Windows\system32\speedfan.sys

13:58:09.0141 0x1618  speedfan - ok

13:58:09.0161 0x1618  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys

13:58:09.0214 0x1618  spldr - ok

13:58:09.0238 0x1618  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe

13:58:09.0348 0x1618  Spooler - ok

13:58:09.0513 0x1618  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe

13:58:09.0689 0x1618  sppsvc - ok

13:58:09.0709 0x1618  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll

13:58:09.0803 0x1618  sppuinotify - ok

13:58:09.0856 0x1618  [ F7C7CCA6B6B60AC336DC15F15524FCCE, B3EDB0B2AE7D6A6E547D190052A163F924A6382B404C4E0B8F17D2C355B455D7 ] sptd            C:\Windows\System32\Drivers\sptd.sys

13:58:09.0886 0x1618  sptd - ok

13:58:09.0916 0x1618  [ D86EA722F3337AA3F0253B6E359E6796, BA4C2DF629CBECFA1C1D589FFA6AEF8C5853C427B6B007793FD432B4AA8DA593 ] srv             C:\Windows\system32\DRIVERS\srv.sys

13:58:10.0052 0x1618  srv - ok

13:58:10.0074 0x1618  [ 1931823AC05967E5F79B791E9FFC2398, 255E6278F476F1D488199B0AD2004C3860CC74971AC3C0AB4B1DB4E42B329E94 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

13:58:10.0174 0x1618  srv2 - ok

13:58:10.0184 0x1618  [ 50A2FC7B0408F15B77E056076BBB6252, 801AD15B4CDFC09EE4909B7180A5CE562D54D4F08A9C0B7D9CA067ADC42A6C9D ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

13:58:10.0260 0x1618  srvnet - ok

13:58:10.0291 0x1618  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

13:58:10.0391 0x1618  SSDPSRV - ok

13:58:10.0457 0x1618  [ F0BE373861A3F34CFAB55C1B7CE1FEB5, 0FEFD1F28C80CCAC83A181ED68B5DBEE9DF102676167153977F2205B688289B4 ] SSHDRV85        C:\Windows\system32\drivers\SSHDRV85.sys

13:58:11.0090 0x1618  SSHDRV85 - detected UnsignedFile.Multi.Generic ( 1 )

13:58:11.0538 0x1618  SSHDRV85 ( UnsignedFile.Multi.Generic ) - warning

13:58:11.0761 0x1618  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

13:58:11.0861 0x1618  SstpSvc - ok

13:58:11.0939 0x1618  [ BB4C6ABDE2E8034680FB3A77414B55CC, 40925CDC5FF6BB8FF6CBB1BB955313A7A65D69DBDA798A4453ED4D86ABC5E9A3 ] STacSV          C:\Program Files\IDT\WDM\STacSV.exe

13:58:11.0967 0x1618  STacSV - detected UnsignedFile.Multi.Generic ( 1 )

13:58:12.0205 0x1618  Detect skipped due to KSN trusted

13:58:12.0205 0x1618  STacSV - ok

13:58:12.0295 0x1618  [ 0A3544D7E9AF7D8C991C904339157EDC, 1E1DE4D808AE1174B0CB37E93EBADFC98FEBCD70D612CFE393DDA513581CD123 ] Steam Client Service C:\Program Files\Common Files\Steam\SteamService.exe

13:58:12.0345 0x1618  Steam Client Service - ok

13:58:12.0379 0x1618  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\drivers\stexstor.sys

13:58:12.0418 0x1618  stexstor - ok

13:58:12.0458 0x1618  [ E2E776F435B7D0691C6FDF4B66D4032C, 1AE6D78AC811E7D976D0BFE7040ACA9FB5D33AB59AD45FEE869287CF0A4F9854 ] STHDA           C:\Windows\system32\DRIVERS\stwrt.sys

13:58:12.0654 0x1618  STHDA - ok

13:58:12.0698 0x1618  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll

13:58:12.0791 0x1618  StiSvc - ok

13:58:12.0803 0x1618  [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

13:58:12.0843 0x1618  storflt - ok

13:58:12.0873 0x1618  [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69CAA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc         C:\Windows\system32\storsvc.dll

13:58:12.0920 0x1618  StorSvc - ok

13:58:12.0960 0x1618  [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

13:58:13.0005 0x1618  storvsc - ok

13:58:13.0020 0x1618  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

13:58:13.0050 0x1618  swenum - ok

13:58:13.0090 0x1618  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll

13:58:13.0187 0x1618  swprv - ok

13:58:13.0257 0x1618  [ 456BE69261F91148BE1E00AD1F11C08B, 1C049698920C28D74437BC16666EADE9EEB97F56D68E3DD678E49D23A78D4E77 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

13:58:13.0354 0x1618  SynTP - ok

13:58:13.0425 0x1618  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain         C:\Windows\system32\sysmain.dll

13:58:13.0563 0x1618  SysMain - ok

13:58:13.0581 0x1618  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll

13:58:13.0651 0x1618  TabletInputService - ok

13:58:13.0669 0x1618  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll

13:58:13.0770 0x1618  TapiSrv - ok

13:58:13.0846 0x1618  [ C7E41209132B9CF084CCEA8593F61328, 441E44C3C4803FA9304111E58AE7A2927EEB6584CEC9CBF81DC508E73A99033E ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

13:58:13.0999 0x1618  Tcpip - ok

13:58:14.0064 0x1618  [ C7E41209132B9CF084CCEA8593F61328, 441E44C3C4803FA9304111E58AE7A2927EEB6584CEC9CBF81DC508E73A99033E ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

13:58:14.0130 0x1618  TCPIP6 - ok

13:58:14.0150 0x1618  [ A4BF8BE9D1F7D563C7868AC7B2561545, E3C2FFE53373E5255DC388E0C81CCE965E432EFAF52C85B5B3B3918815114073 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

13:58:14.0209 0x1618  tcpipreg - ok

13:58:14.0249 0x1618  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

13:58:14.0302 0x1618  TDPIPE - ok

13:58:14.0326 0x1618  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

13:58:14.0382 0x1618  TDTCP - ok

13:58:14.0416 0x1618  [ BB8817D0508DD5EA69C770C8DEF5AB67, C55671524EEF6E16BBCC92556E83FD1D6457E707EA9330FC1CDD28FB11D99B77 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

13:58:14.0489 0x1618  tdx - ok

13:58:14.0510 0x1618  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

13:58:14.0553 0x1618  TermDD - ok

13:58:14.0609 0x1618  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll

13:58:14.0714 0x1618  TermService - ok

13:58:14.0734 0x1618  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll

13:58:14.0802 0x1618  Themes - ok

13:58:14.0823 0x1618  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll

13:58:14.0859 0x1618  THREADORDER - ok

13:58:14.0909 0x1618  [ 7B8E49D03ECE5CAC523C8D56DB61C845, 36D156DB5E14ABA5B836223BA32247F5AB3AF1BED7B7D3C48585E0C7DCE7BCE4 ] tmactmon        C:\Windows\system32\DRIVERS\tmactmon.sys

13:58:14.0954 0x1618  tmactmon - ok

13:58:14.0994 0x1618  [ DAA41DD0FEA2999F95A93CD660E479F8, AF56BEDE0D61977A4826644AE50DCE6A0D61488B907AF5CB36DE1189F9569EB7 ] TMBMServer      C:\Program Files\Trend Micro\BM\TMBMSRV.exe

13:58:15.0029 0x1618  TMBMServer - ok

13:58:15.0041 0x1618  [ 4C6D311E0B13C4F469F717DB4AB4D0E7, 80A59CA71FC20961CCAFC0686051E86AE4AFBBD4578CB26AD4570B9207651085 ] tmcomm          C:\Windows\system32\DRIVERS\tmcomm.sys

13:58:15.0115 0x1618  tmcomm - ok

13:58:15.0122 0x1618  [ 8BE895EC50E6F0B6167671405581B414, 05AD08DDB073583C52CBCF6A5CCE4A9FE23C45B70B000D434000428599239624 ] tmevtmgr        C:\Windows\system32\DRIVERS\tmevtmgr.sys

13:58:15.0161 0x1618  tmevtmgr - ok

13:58:15.0201 0x1618  [ 97A567392A48211BD2FD37807702D911, 0FB41B503870D26E12E5F9D6123156A0290589B430274920DA88B163B70235D5 ] TmFilter        C:\Program Files\Trend Micro\OfficeScan Client\TmXPFlt.sys

13:58:15.0230 0x1618  TmFilter - ok

13:58:15.0339 0x1618  [ 9AB412E52D57ADFA0A906B4FD8BD3055, 1E47432C2214AA8DAB985844BA23DB7EC3ECE8C2AE27A4D521001524DE3683D1 ] tmlisten        C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

13:58:15.0450 0x1618  tmlisten - ok

13:58:15.0488 0x1618  [ 7697034EBCE2528796DF5D7C55B52CC8, AA915A7DC07AF3422288B6E26FA2F9E30F0FF7CEBF45B5BCD8E3C101257F5621 ] TmLwf           C:\Windows\system32\DRIVERS\tmlwf.sys

13:58:15.0546 0x1618  TmLwf - ok

13:58:15.0595 0x1618  [ 141FF68169F065D2038C56821F742D8B, 06A76A9F1D4342350D9F670C8D6FE6D10337C14327C23CD4777502C1A0D1FF7A ] TmPfw           C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe

13:58:15.0625 0x1618  TmPfw - ok

13:58:15.0646 0x1618  [ F6E50E46697F232F667C426C936A4047, 391AC0CDA1A74C743C00279406F15063F8C58977BB2FD447F5BF25916DD79E85 ] TmPreFilter     C:\Program Files\Trend Micro\OfficeScan Client\TmPreFlt.sys

13:58:15.0663 0x1618  TmPreFilter - ok

13:58:15.0700 0x1618  [ D9940A1D80833008A3195D44C5B72379, F00AB8F353F5E8C8757FF4F5C5047B360BD667D9AC82A79F6399163A3910B4F2 ] TmProxy         C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe

13:58:15.0739 0x1618  TmProxy - ok

13:58:15.0767 0x1618  [ E70EB577845B05DB02779A150E4A92E7, F51CD7820CEA980FBF19290CA2354AF09C95DF0FEE565EE22E6CE73030B057D8 ] tmtdi           C:\Windows\system32\DRIVERS\tmtdi.sys

13:58:15.0806 0x1618  tmtdi - ok

13:58:15.0849 0x1618  [ A56279BBA7AD6F78FB7C9E5B75EB562C, E15263C3850DBDBDA371F500ADAEAEAD49ADFB265497D1B43EA2883B9CC94568 ] tmWfp           C:\Windows\system32\DRIVERS\tmwfp.sys

13:58:15.0972 0x1618  tmWfp - ok

13:58:16.0006 0x1618  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll

13:58:16.0093 0x1618  TrkWks - ok

13:58:16.0133 0x1618  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

13:58:16.0253 0x1618  TrustedInstaller - ok

13:58:16.0291 0x1618  [ B89F89A2308E9569A1022A50F78C5506, 375C4A11F78A1335269657012DC57093C6E1A7B1460094B0C265179409F01554 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

13:58:16.0340 0x1618  tssecsrv - ok

13:58:16.0360 0x1618  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

13:58:16.0421 0x1618  TsUsbFlt - ok

13:58:16.0451 0x1618  [ 57C527AF84748B5C2F5178C499C0B81F, 2FF1F25BA16F8984E9F2CE4DE663F261BAF267EDF10D466A52BB211C567F763C ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

13:58:16.0511 0x1618  TsUsbGD - ok

13:58:16.0551 0x1618  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

13:58:16.0642 0x1618  tunnel - ok

13:58:16.0662 0x1618  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

13:58:16.0723 0x1618  uagp35 - ok

13:58:16.0749 0x1618  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

13:58:16.0862 0x1618  udfs - ok

13:58:16.0899 0x1618  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe

13:58:16.0969 0x1618  UI0Detect - ok

13:58:17.0010 0x1618  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

13:58:17.0060 0x1618  uliagpkx - ok

13:58:17.0082 0x1618  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

13:58:17.0130 0x1618  umbus - ok

13:58:17.0150 0x1618  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\drivers\umpass.sys

13:58:17.0190 0x1618  UmPass - ok

13:58:17.0219 0x1618  [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService    C:\Windows\System32\umrdp.dll

13:58:17.0287 0x1618  UmRdpService - ok

13:58:17.0367 0x1618  [ 3D9D81B434031EB92744AFB329D6E4F1, 93ED1C7487F001011C7AA81759C9CDCE0267E8C16D7467B9E8426CC503240210 ] UNS             C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

13:58:17.0418 0x1618  UNS - ok

13:58:17.0448 0x1618  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll

13:58:17.0555 0x1618  upnphost - ok

13:58:17.0588 0x1618  [ EC1C23779BB41A8B2AB2AA6FCE308BDE, D027A2B472CAE97AECB16F69BE52E06CB61E1C61AE196C22662050B711C1C72D ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys

13:58:17.0656 0x1618  USBAAPL - detected UnsignedFile.Multi.Generic ( 1 )

13:58:17.0825 0x1618  Detect skipped due to KSN trusted

13:58:17.0825 0x1618  USBAAPL - ok

13:58:17.0859 0x1618  [ 325A69967CC7B4BFB170F5636143A94A, E0341360827B9B3E244F24D0BC01D3B3C0CC97E232A361960849F799A16AD540 ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys

13:58:17.0932 0x1618  usbccgp - ok

13:58:17.0965 0x1618  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys

13:58:18.0022 0x1618  usbcir - ok

13:58:18.0032 0x1618  [ 5D57798CAE5A0DD0B8F61C52B8E7C3D1, 5097997508E1406AD5B018C5006D82F8BFC7B157C6CAF1B4D80C7D6DB722A77A ] usbehci         C:\Windows\system32\drivers\usbehci.sys

13:58:18.0097 0x1618  usbehci - ok

13:58:18.0136 0x1618  [ 3835ECC1E928042F92D7AA1963D40523, 60237CB8C3F935544006621255FFD53C9E09C0AF4741D0C50968CB4D647336D5 ] usbhub          C:\Windows\system32\drivers\usbhub.sys

13:58:18.0232 0x1618  usbhub - ok

13:58:18.0252 0x1618  [ 81E1E90305A4C7A13BADC5DFA22ABA37, 9EF3F5CD2FCF22A5BCC668778C8340D8C80719E9B43FB6C4484BFC98280B8BD9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

13:58:18.0309 0x1618  usbohci - ok

13:58:18.0329 0x1618  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\drivers\usbprint.sys

13:58:18.0389 0x1618  usbprint - ok

13:58:18.0409 0x1618  [ 144DA53294922A84FFAA3D90B1453745, A8DC6B534E4526E2226CF6C9D53A4B6B251D2F23728E41737063D24024C5266F ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

13:58:18.0484 0x1618  USBSTOR - ok

13:58:18.0510 0x1618  [ B4A1789BE90403D9549EF9DBAD37A429, 1F590F8DE0081953B944A076FFEB5FF3BCF7E2BEE4ABD97236A29C00B9242163 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

13:58:18.0576 0x1618  usbuhci - ok

13:58:18.0610 0x1618  [ AF77716205C97E902E6C5B78DECE2CCA, ED99EABED1C7F323EE2A76413E2B260F8EE1D76FDF1E60EE35136D060E756735 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys

13:58:18.0662 0x1618  usb_rndisx - ok

13:58:18.0693 0x1618  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll

13:58:18.0747 0x1618  UxSms - ok

13:58:18.0768 0x1618  [ CD3B239873248431ACEFBDBE5827524A, 68A6A2B018B3F277B7D640DA18EAA4552F0C10ABDB4704B170271A8DB7BD4622 ] VaultSvc        C:\Windows\system32\lsass.exe

13:58:18.0806 0x1618  VaultSvc - ok

13:58:18.0857 0x1618  [ C2D1B1671F9C1C66E0DF1B5D2DC87616, 577E0EC66E6D751B6521E7E35D8102CE0EC1A9B006B64BEFB75A5D0A15DC5370 ] VClone          C:\Windows\system32\DRIVERS\VClone.sys

13:58:18.0933 0x1618  VClone - ok

13:58:19.0054 0x1618  [ 60CF5CBC7F5349E1400B6554E0F040A7, AC4058F903205B0F1AB34C62704AEE8107817B84D1C42A919C6BA8874956257D ] vcsFPService    C:\Windows\system32\vcsFPService.exe

13:58:19.0197 0x1618  vcsFPService - ok

13:58:19.0228 0x1618  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

13:58:19.0277 0x1618  vdrvroot - ok

13:58:19.0315 0x1618  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe

13:58:19.0445 0x1618  vds - ok

13:58:19.0471 0x1618  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

13:58:19.0531 0x1618  vga - ok

13:58:19.0547 0x1618  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys

13:58:19.0631 0x1618  VgaSave - ok

13:58:19.0657 0x1618  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

13:58:19.0735 0x1618  vhdmp - ok

13:58:19.0762 0x1618  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys

13:58:19.0812 0x1618  viaagp - ok

13:58:19.0840 0x1618  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

13:58:19.0892 0x1618  ViaC7 - ok

13:58:19.0928 0x1618  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys

13:58:19.0977 0x1618  viaide - ok

13:58:19.0993 0x1618  [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus           C:\Windows\system32\drivers\vmbus.sys

13:58:20.0053 0x1618  vmbus - ok

13:58:20.0083 0x1618  [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

13:58:20.0152 0x1618  VMBusHID - ok

13:58:20.0163 0x1618  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

13:58:20.0258 0x1618  volmgr - ok

13:58:20.0279 0x1618  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

13:58:20.0372 0x1618  volmgrx - ok

13:58:20.0390 0x1618  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

13:58:20.0482 0x1618  volsnap - ok

13:58:20.0561 0x1618  [ 994354C06FC4C23912728C22D0B86356, A51EFD28E1CE51F60AA1319F22510D89D07EAFA2FD21B06B02DB12CD8AA1E871 ] VSApiNt         C:\Program Files\Trend Micro\OfficeScan Client\VSApiNt.sys

13:58:20.0641 0x1618  VSApiNt - ok

13:58:20.0691 0x1618  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

13:58:20.0741 0x1618  vsmraid - ok

13:58:20.0814 0x1618  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe

13:58:20.0986 0x1618  VSS - ok

13:58:21.0138 0x1618  vtany - ok

13:58:21.0168 0x1618  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

13:58:21.0287 0x1618  vwifibus - ok

13:58:21.0307 0x1618  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

13:58:21.0632 0x1618  vwififlt - ok

13:58:21.0664 0x1618  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

13:58:21.0695 0x1618  vwifimp - ok

13:58:21.0718 0x1618  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll

13:58:21.0837 0x1618  W32Time - ok

13:58:21.0937 0x1618  [ 57C8C20BFA5BEF6BD851EBAC67A8CED0, D5968069D934400A46B9FF92ECA9D7660BDC30C6909BA588AD49F7656246EE98 ] W3SVC           C:\Windows\system32\inetsrv\iisw3adm.dll

13:58:22.0039 0x1618  W3SVC - ok

13:58:22.0059 0x1618  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

13:58:22.0119 0x1618  WacomPen - ok

13:58:22.0142 0x1618  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

13:58:22.0228 0x1618  WANARP - ok

13:58:22.0234 0x1618  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

13:58:22.0288 0x1618  Wanarpv6 - ok

13:58:22.0345 0x1618  [ 57C8C20BFA5BEF6BD851EBAC67A8CED0, D5968069D934400A46B9FF92ECA9D7660BDC30C6909BA588AD49F7656246EE98 ] WAS             C:\Windows\system32\inetsrv\iisw3adm.dll

13:58:22.0388 0x1618  WAS - ok

13:58:22.0510 0x1618  [ 353A04C273EC58475D8633E75CCD5604, FFAE53B6B53AEFC9E8A10BF27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

13:58:22.0733 0x1618  WatAdminSvc - ok

13:58:22.0806 0x1618  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe

13:58:23.0004 0x1618  wbengine - ok

13:58:23.0045 0x1618  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

13:58:23.0151 0x1618  WbioSrvc - ok

13:58:23.0183 0x1618  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll

13:58:23.0306 0x1618  wcncsvc - ok

13:58:23.0319 0x1618  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

13:58:23.0396 0x1618  WcsPlugInService - ok

13:58:23.0428 0x1618  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\drivers\wd.sys

13:58:23.0486 0x1618  Wd - ok

13:58:23.0540 0x1618  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

13:58:23.0874 0x1618  Wdf01000 - ok

13:58:23.0905 0x1618  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll

13:58:24.0006 0x1618  WdiServiceHost - ok

13:58:24.0013 0x1618  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll

13:58:24.0057 0x1618  WdiSystemHost - ok

13:58:24.0095 0x1618  [ DC54D7A40B6E18E5C7F592F836D163FF, 436AF3B94EAE6CBD2516A63235AE1D6EC4F1FCAA0F974A9672BB5AB2A846BB2C ] WebClient       C:\Windows\System32\webclnt.dll

13:58:24.0205 0x1618  WebClient - ok

13:58:24.0236 0x1618  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll

13:58:24.0346 0x1618  Wecsvc - ok

13:58:24.0362 0x1618  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

13:58:24.0425 0x1618  wercplsupport - ok

13:58:24.0437 0x1618  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll

13:58:24.0520 0x1618  WerSvc - ok

13:58:24.0540 0x1618  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

13:58:24.0612 0x1618  WfpLwf - ok

13:58:24.0628 0x1618  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

13:58:24.0660 0x1618  WIMMount - ok

13:58:24.0750 0x1618  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

13:58:24.0851 0x1618  WinDefend - ok

13:58:24.0861 0x1618  WinHttpAutoProxySvc - ok

13:58:24.0901 0x1618  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

13:58:24.0981 0x1618  Winmgmt - ok

13:58:25.0051 0x1618  [ 8949A93520F7008C3B7AD320A0EEA267, F77C6BF73B300347FEB3D02C7A1F98807546D95E10E499D385B7F00D1366CC59 ] WinRM           C:\Windows\system32\WsmSvc.dll

13:58:25.0385 0x1618  WinRM - ok

13:58:25.0430 0x1618  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

13:58:25.0498 0x1618  WinUsb - ok

13:58:25.0548 0x1618  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll

13:58:25.0675 0x1618  Wlansvc - ok

13:58:25.0795 0x1618  [ FB01D4AE207B9EFDBABFC55DC95C7E31, E0EFDBBE0BAC275230C8C1A053948C21BCF20B99B92E50939E95FFB9DC87F6BA ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

13:58:25.0885 0x1618  wlidsvc - ok

13:58:25.0915 0x1618  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

13:58:25.0965 0x1618  WmiAcpi - ok

13:58:25.0995 0x1618  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

13:58:26.0075 0x1618  wmiApSrv - ok

13:58:26.0165 0x1618  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

13:58:26.0296 0x1618  WMPNetworkSvc - ok

13:58:26.0317 0x1618  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

13:58:26.0357 0x1618  WPCSvc - ok

13:58:26.0367 0x1618  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

13:58:26.0427 0x1618  WPDBusEnum - ok

13:58:26.0447 0x1618  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

13:58:26.0517 0x1618  ws2ifsl - ok

13:58:26.0517 0x1618  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll

13:58:26.0588 0x1618  wscsvc - ok

13:58:26.0592 0x1618  WSearch - ok

13:58:26.0697 0x1618  [ FAC7617DD8A8CCCBBB9D36C39AFA5ABE, 64BB658523F4610B6D092BD390D24307F0A545ABA5C78B5DB50B7AA9E65C6A51 ] wuauserv        C:\Windows\system32\wuaueng.dll

13:58:26.0877 0x1618  wuauserv - ok

13:58:26.0907 0x1618  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

13:58:26.0967 0x1618  WudfPf - ok

13:58:26.0997 0x1618  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

13:58:27.0067 0x1618  WUDFRd - ok

13:58:27.0087 0x1618  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

13:58:27.0167 0x1618  wudfsvc - ok

13:58:27.0197 0x1618  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll

13:58:27.0277 0x1618  WwanSvc - ok

13:58:27.0277 0x1618  XDva404 - ok

13:58:27.0287 0x1618  xhunter1 - ok

13:58:27.0337 0x1618  [ CE0C846127D6ABB1E2A22E59682B2527, 9FDDECDC964A2E0AD306C68E1CF6B8B77388BBD0EC7642B61EE03273381777F7 ] xnacc           C:\Windows\system32\DRIVERS\xnacc.sys

13:58:27.0459 0x1618  xnacc - ok

13:58:27.0489 0x1618  [ C26C68BCBAC1F33F890C226769759209, 15FCBDF391C68D440A61512CF236C328A540DBC155D252FB7E97E14D0E99AA40 ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys

13:58:27.0551 0x1618  xusb21 - ok

13:58:27.0588 0x1618  ================ Scan global ===============================

13:58:27.0605 0x1618  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll

13:58:27.0649 0x1618  [ 090FF4D4A003291D7579A81089D06981, 2713E190F10A96E977C0BA5D38D89E8D123F7CB7D0180CFC0A4073EC42EDB2DB ] C:\Windows\system32\winsrv.dll

13:58:27.0709 0x1618  [ 090FF4D4A003291D7579A81089D06981, 2713E190F10A96E977C0BA5D38D89E8D123F7CB7D0180CFC0A4073EC42EDB2DB ] C:\Windows\system32\winsrv.dll

13:58:27.0749 0x1618  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll

13:58:27.0799 0x1618  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe

13:58:27.0889 0x1618  [ Global ] - ok

13:58:27.0889 0x1618  ================ Scan MBR ==================================

13:58:27.0899 0x1618  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

13:58:28.0179 0x1618  \Device\Harddisk0\DR0 - ok

13:58:28.0179 0x1618  ================ Scan VBR ==================================

13:58:28.0179 0x1618  [ FA9E8AC6AF30A837F4BC1839E8626C77 ] \Device\Harddisk0\DR0\Partition1

13:58:28.0179 0x1618  \Device\Harddisk0\DR0\Partition1 - ok

13:58:28.0189 0x1618  [ 72163DE070982ABD068E7869F3001FD3 ] \Device\Harddisk0\DR0\Partition2

13:58:28.0189 0x1618  \Device\Harddisk0\DR0\Partition2 - ok

13:58:28.0189 0x1618  [ EEEFC098432D460E8F997B89B44B7F19 ] \Device\Harddisk0\DR0\Partition3

13:58:28.0189 0x1618  \Device\Harddisk0\DR0\Partition3 - ok

13:58:28.0199 0x1618  ================ Scan generic autorun ======================

13:58:28.0259 0x1618  [ F4ACFDF73D22071793A677CEE93EA8FA, EB50F2513A314576E810970513601C88603FC14C0C13F7B1A493E1F4F3CCEC6E ] C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe

13:58:28.0289 0x1618  QLBController - ok

13:58:28.0339 0x1618  [ 187F4C75A89E3F412322C94526320074, D78FA7EF93C8C7B4326A5B6DB04A92ADD091DF00658FA8731D07C5D3BE29ED04 ] C:\Program Files\Microsoft Office\Office14\BCSSync.exe

13:58:28.0369 0x1618  BCSSync - ok

13:58:28.0449 0x1618  [ 1E7184C8F7A52AD3A2184178540ACC98, 41264A7B4157B3A219D1AE6C6D14134E89C6F726ECF6E847E2FB9C4F0A325ED2 ] C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe

13:58:28.0532 0x1618  OfficeScanNT Monitor - ok

13:58:28.0631 0x1618  [ E774F875819DEE4A312A921A88F779FE, 793AE0F4C6173EAABC6A0B533735984ECFAFF7715D5BA8F0CF3F467660DFFC1B ] c:\Program Files\Microsoft IntelliPoint\ipoint.exe

13:58:28.0721 0x1618  IntelliPoint - ok

13:58:28.0741 0x1618  [ 6A509389A59C15C1954D2D026CE5F05A, B3D06EB6C75E4951406EB824AAA7F49FF6FB896D3D24031A4B6E156907A2FDCC ] C:\Windows\system32\igfxtray.exe

13:58:28.0761 0x1618  IgfxTray - ok

13:58:28.0791 0x1618  [ 17BCDA9369D7E6A2770A56D0E2418285, 00368CAA08834E33239F3AA99294210F254048CBDCD34A29A5DD7B0E3979ED7C ] C:\Windows\system32\hkcmd.exe

13:58:28.0811 0x1618  HotKeysCmds - ok

13:58:28.0831 0x1618  [ 819D6AE35E535B4E0FE6FC91D8E39DE9, AA5C443687F771B62AB8A28E72DEEE6030FA7248914B07BC85A8CADDC62F1032 ] C:\Windows\system32\igfxpers.exe

13:58:28.0851 0x1618  Persistence - ok

13:58:28.0991 0x1618  [ D8BEBD7AC47303792A2CE0819DB4BD16, 89BFF46B96DB6DDC370DBEAB67DD5B2FD4BB9DD1D5596DA6F62311FA01A45D92 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

13:58:29.0101 0x1618  SynTPEnh - ok

13:58:29.0211 0x1618  [ 2A4EA4C20FA9C6896EB51BD3A81BB1DD, 91CCE465710E789988BFC4C8F7269F1E274BCDF6069E08034E0C8C6C2DE4F498 ] C:\Program Files\IDT\WDM\sttray.exe

13:58:29.0281 0x1618  SysTrayApp - detected UnsignedFile.Multi.Generic ( 1 )

13:58:39.0288 0x1618  SysTrayApp ( UnsignedFile.Multi.Generic ) - warning

13:58:39.0288 0x1618  Force sending object to P2P due to detect: C:\Program Files\IDT\WDM\sttray.exe

13:58:40.0592 0x1618  Object send P2P result: true

13:58:40.0919 0x1618  [ 5153C06FC9D4D094D1A785545928B134, 0037C935722663F9EF028F841DE222FC6418E9D60939AB60C965807E67A458DC ] C:\Program Files\Common Files\Java\Java Update\jusched.exe

13:58:40.0957 0x1618  SunJavaUpdateSched - ok

13:58:41.0025 0x1618  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

13:58:41.0092 0x1618  Sidebar - ok

13:58:41.0122 0x1618  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

13:58:41.0212 0x1618  mctadmin - ok

13:58:41.0262 0x1618  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

13:58:41.0329 0x1618  Sidebar - ok

13:58:41.0329 0x1618  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

13:58:41.0359 0x1618  mctadmin - ok

13:58:41.0676 0x1618  [ F2AD1B265908797F8A5E21E0312F2F25, 2A6A612F7D52D297385C43E77AD0CD37B28F33ED2AF89098F5E66B812B838A52 ] C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe

13:58:41.0884 0x1618  Akamai NetSession Interface - ok

13:58:42.0209 0x1618  [ BA90221541E206773C2662083B72ED5E, F862280E221D047C009C162AA485C57A79CA88BD6E97228B657B6F0DB3AC44AD ] C:\Program Files\CCleaner\CCleaner.exe

13:58:42.0582 0x1618  CCleaner Monitoring - ok

13:58:42.0654 0x1618  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

13:58:42.0712 0x1618  Sidebar - ok

13:58:42.0732 0x1618  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

13:58:42.0772 0x1618  mctadmin - ok

13:58:42.0774 0x1618  Waiting for KSN requests completion. In queue: 9

13:58:43.0794 0x1618  AV detected via SS2: Trend Micro OfficeScan Antivirus, C:\Program Files\Trend Micro\OfficeScan Client\Pccntmon.exe ( 10.6.0.5372 ), 0x41000 ( enabled : updated )

13:58:43.0795 0x1618  FW detected via SS2: Trend Micro Personal Firewall,  (  ), 0x41010 ( enabled )

13:58:43.0978 0x1618  ============================================================

13:58:43.0978 0x1618  Scan finished

13:58:43.0978 0x1618  ============================================================

13:58:43.0988 0x102c  Detected object count: 2

13:58:43.0988 0x102c  Actual detected object count: 2

13:59:40.0283 0x102c  SSHDRV85 ( UnsignedFile.Multi.Generic ) - skipped by user

13:59:40.0284 0x102c  SSHDRV85 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

13:59:40.0285 0x102c  SysTrayApp ( UnsignedFile.Multi.Generic ) - skipped by user

13:59:40.0285 0x102c  SysTrayApp ( UnsignedFile.Multi.Generic ) - User select action: Skip

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Jetzt bitte Suchscan durchführen:

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

So da bin ich wieder :)

ADWCleaner

Code:

# AdwCleaner v6.041 - Bericht erstellt am 21/12/2016 um 19:18:18

# Aktualisiert am 16/12/2016 von Malwarebytes

# Datenbank : 2016-12-21.1 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (X86)

# Benutzername : flkr2104 - UNGOEB-U1260RT5

# Gestartet von : C:\Users\flkr2104\Desktop\AdwCleaner_6.041.exe

# Modus: Löschen

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht: C:\Users\flkr2104\Documents\messenger plus! for skype

[-] Ordner gelöscht: C:\ProgramData\Trymedia

[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\Trymedia

[-] Ordner gelöscht: C:\ProgramData\Microsoft\Windows\Start Menu\messenger plus! for skype

[-] Ordner gelöscht: C:\Program Files\yuna software
 
 

***** [ Dateien ] *****
 

[-] Datei gelöscht: C:\END

[-] Datei gelöscht: C:\Windows\system32\ComputerUpdaterLM.ocx

[-] Datei gelöscht: C:\Windows\system32\CUUpdateComponent.ocx
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 

[-] Aufgabe gelöscht: DRIVERTOOLKIT AUTORUN
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ComputerUpdater Service

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{82443621-A29A-473E-8335-F5C958A7A4CA}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{E7BC34A1-BA86-11CF-84B1-CBC2DA68BF6C}

[-] Schlüssel gelöscht: HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\vShare.tv

[-] Schlüssel gelöscht: HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\yuna software

[-] Schlüssel gelöscht: HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\AppDataLow\Software\Mail.Ru

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1113328611-58381748-87005590-109325\Software\bbrs_002.tb

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\vShare.tv

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\yuna software

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\Software\Mail.Ru

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Trymedia Systems

[-] Schlüssel gelöscht: HKLM\SOFTWARE\yuna software

[-] Wert gelöscht: HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]

[#] Wert mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
 
 

***** [ Browser ] *****
 

[-] [C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: www.plusnetwork.com
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C0].txt - [3181 Bytes] - [21/12/2016 19:18:18]

C:\AdwCleaner\AdwCleaner[S0].txt - [3143 Bytes] - [21/12/2016 19:16:04]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [3327 Bytes] ##########

und ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=init

# utc_time=2016-12-21 06:26:18

# local_time=2016-12-21 07:26:18 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 31812

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=updated

# utc_time=2016-12-21 06:33:49

# local_time=2016-12-21 07:33:49 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=restart

# utc_time=2016-12-21 09:53:40

# local_time=2016-12-21 10:53:40 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 32632 233988410 0 0

# scanned=238926

# found=2

# cleaned=0

# scan_time=11989

sh=013705749E298AE16E29EF893E238E57063AA47D ft=1 fh=45f98596765756d6 vn="Variante von Win32/MessengerPlus.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\ewzlisjiodgfzkdgxtjyfbqkddslvmzg\Messenger Plus! for Skype\Settings\Settings.exe"

sh=C75D645E200CCFC65A334FD202664D494CDA461A ft=1 fh=6f35bd8bd276a456 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\flkr2104\AppData\Local\Temp\Tc3PN+Lb.exe.part"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=init

# utc_time=2016-12-22 01:02:27

# local_time=2016-12-22 02:02:27 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 31822

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=updated

# utc_time=2016-12-22 01:03:23

# local_time=2016-12-22 02:03:23 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# engine=31822

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-12-22 01:05:32

# local_time=2016-12-22 02:05:32 (+0100, Vest-Europa (normaltid))

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 66834 234043123 0 0

# scanned=2412

# found=1

# cleaned=0

# scan_time=128

sh=013705749E298AE16E29EF893E238E57063AA47D ft=1 fh=45f98596765756d6 vn="Variante von Win32/MessengerPlus.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\ewzlisjiodgfzkdgxtjyfbqkddslvmzg\Messenger Plus! for Skype\Settings\Settings.exe"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=init

# utc_time=2016-12-22 01:32:27

# local_time=2016-12-22 02:32:27 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 31822

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# end=updated

# utc_time=2016-12-22 01:32:43

# local_time=2016-12-22 02:32:43 (+0100, Vest-Europa (normaltid))

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=88613eba26b7fc429606eaa52c0d4740

# engine=31822

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-12-22 04:49:52

# local_time=2016-12-22 05:49:52 (+0100, Vest-Europa (normaltid))

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 83894 234056583 0 0

# scanned=246685

# found=2

# cleaned=0

# scan_time=11828

sh=013705749E298AE16E29EF893E238E57063AA47D ft=1 fh=45f98596765756d6 vn="Variante von Win32/MessengerPlus.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\ewzlisjiodgfzkdgxtjyfbqkddslvmzg\Messenger Plus! for Skype\Settings\Settings.exe"

sh=C75D645E200CCFC65A334FD202664D494CDA461A ft=1 fh=6f35bd8bd276a456 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\flkr2104\AppData\Local\Temp\Tc3PN+Lb.exe.part"

http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Hallo,

Also der Laptop läuft ohne zu hängen aktuell. Wenn ich fragen darf, hast du eine grobe Ahnung woran es lag? :)

Lg

War halt auch Müll drauf...

Bitte nochmals frische Logs:

Schritt 1

http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...e/frst/sn1.PNG

Bitte starte FRST erneut, markiere auch die checkbox http://deeprybka.trojaner-board.de/b...t/addition.pngund drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Alles klar, hier die beiden

FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-12-2016

Ran by flkr2104 (administrator) on UNGOEB-U1260RT5 (23-12-2016 22:14:45)

Running from C:\Users\flkr2104\Desktop

Loaded Profiles: flkr2104 (Available Profiles: flkr2104 & Administrator & DefaultAppPool)

Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Language: Norsk, bokmål (Norge)

Internet Explorer Version 11 (Default browser not detected!)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSrv.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Windows\Runservice.exe

() C:\ProgramData\MobileBrServ\mbbService.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe

() C:\Windows\System32\PnkBstrA.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmListen.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Akamai Technologies, Inc.) C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\BM\TMBMSRV.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ====================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [QLBController] => C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [318520 2011-05-13] (Hewlett-Packard Company)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [OfficeScanNT Monitor] => C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe [1533720 2013-11-20] (Trend Micro Inc.)

HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2444016 2013-10-30] (Synaptics Incorporated)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [1667164 2000-01-01] (IDT, Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)

HKLM\...\Policies\Explorer: [NoAutorun] 1

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Run: [Akamai NetSession Interface] => C:\Users\flkr2104\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6775512 2016-06-10] (Piriform Ltd)

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {020048ac-b58c-11e6-9e05-68a3c484513c} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {1788b050-b8af-11e6-9092-68a3c484513c} - E:\setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {2bf59e40-ca7f-11e1-8c9d-806e6f6e6963} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {45cf754d-af17-11e5-83e2-68a3c484513c} - E:\setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {5a673a96-e715-11e4-83ac-68a3c484513c} - E:\Setup.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {5a673a9a-e715-11e4-83ac-68a3c484513c} - F:\RunGame.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {8973e3ae-fe4c-11e4-a044-68a3c484513c} - E:\AutoRun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {a055b961-4b69-11e6-9d5e-68a3c484513c} - F:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {b2286f40-32fb-11e1-bea2-806e6f6e6963} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {dec291b3-db35-11e4-a209-68a3c484513c} - E:\Autorun.exe

HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\MountPoints2: {ff282818-2118-11e3-b096-68a3c484513c} - E:\PCSTART.exe

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll [2016-12-17] ()

Startup: C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-12-17]

ShortcutTarget: MEGAsync.lnk -> C:\Users\flkr2104\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{2F6908F7-5324-4907-AB61-36D8C47D8549}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{F3075377-C443-41F3-883B-A8B479B982D7}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{FA72C645-2B03-425E-AAB6-80878F656836}: [DhcpNameServer] 192.168.8.1 192.168.8.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.oppland.no

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/

URLSearchHook: HKU\S-1-5-21-1113328611-58381748-87005590-109325 - (No Name) - {37483b40-c254-4a72-bda4-22ee90182c1e} -  No File

SearchScopes: HKLM -> DefaultScope value is missing

SearchScopes: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\OfficeScan Client\TmIEPlg.dll [2013-07-01] (Trend Micro Inc.)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-1113328611-58381748-87005590-109325 -> No Name - {37483B40-C254-4A72-BDA4-22EE90182C1E} -  No File

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\OfficeScan Client\TmIEPlg.dll [2013-07-01] (Trend Micro Inc.)
 

FireFox:

========

FF DefaultProfile: 8wvhcelo.default

FF ProfilePath: C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default [2016-12-20]

FF Extension: (DOM Inspector) - C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default\Extensions\inspector@mozilla.org [2016-05-08]

FF Extension: (ChatZilla) - C:\Users\flkr2104\AppData\Roaming\Mozilla\SeaMonkey\Profiles\8wvhcelo.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2015-12-06]

FF ProfilePath: C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788 [2016-12-22]

FF Homepage: Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788 -> hxxps://www.google.de/

FF Extension: (YouTube Download Plus) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\addon@ytdownloader.info.xpi [2016-09-03]

FF Extension: (MEGA) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\firefox@mega.co.nz.xpi [2016-12-08]

FF Extension: (WebSocket Monitor) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\websocketmonitor@getfirebug.com.xpi [2016-09-28]

FF Extension: (Adblock Plus) - C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Profiles\5azmg5ch.default-1466284182788\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]

FF HKLM\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\OfficeScan Client\FirefoxExtension

FF Extension: (Trend Micro NSC Firefox Extension) - C:\Program Files\Trend Micro\OfficeScan Client\FirefoxExtension [2016-11-04] [not signed]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-13] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)

FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)

FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)

FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-09-27] ()

FF Plugin: @raidcall.com/RCplugin -> C:\Users\flkr2104\AppData\LocalLow\raidcall\plugins\webplugin.dll [No File]

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 -> C:\Program Files\Veetle\plugins\npVeetle.dll [2012-01-14] (Veetle Inc)

FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 -> C:\Program Files\Veetle\Player\npvlc.dll [2012-01-14] (Veetle Inc)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1113328611-58381748-87005590-109325: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-28] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1113328611-58381748-87005590-109325: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-09-27] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2016-10-29]
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\pdf.dll => No File

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\55.0.2883.87\gcswf32.dll => No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll => No File

CHR Plugin: (vShare.tv plug-in) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll => No File

CHR Plugin: (vShare.tv plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll => No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File

CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => No File

CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll => No File

CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll ()

CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll => No File

CHR Plugin: (Unity Player) - C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

CHR Plugin: (Raidcall plugin) - C:\Users\flkr2104\AppData\LocalLow\raidcall\plugins\webplugin.dll => No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File

CHR Profile: C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default [2016-12-23]

CHR Extension: (Adblock Plus) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-30]

CHR Extension: (Chrome Web Store Payments) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]

CHR Extension: (Chrome Media Router) - C:\Users\flkr2104\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-17]

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>
 

==================== Services (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-10-04] (BitRaider, LLC)

S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279024 2014-01-30] (Intel Corporation)

R2 hpHotkeyMonitor; C:\Program Files\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [317496 2011-05-13] (Hewlett-Packard Company)

R3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [461024 2012-03-07] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-04-10] (Intel Corporation)

R2 LicCtrlService; C:\Windows\runservice.exe [2560 2012-07-04] () [File not signed]

S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)

S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)

R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2014-02-15] ()

S3 npggsvc; C:\Windows\system32\GameMon.des [5150552 2013-03-19] (INCA Internet Co., Ltd.)

R2 ntrtscan; C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe [2320640 2013-11-16] (Trend Micro Inc.)

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2119688 2016-12-12] (Electronic Arts)

S2 Origin Web Helper Service; C:\Program Files\Origin\OriginWebHelperService.exe [2180624 2016-12-12] (Electronic Arts)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2015-03-21] ()

R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [307282 2000-01-01] (IDT, Inc.) [File not signed]

R3 TMBMServer; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [345112 2013-10-23] (Trend Micro Inc.)

R2 tmlisten; C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe [2272488 2013-12-17] (Trend Micro Inc.)

R3 TmPfw; C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe [497272 2011-04-15] (Trend Micro Inc.)

R3 TmProxy; C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe [689176 2013-07-01] (Trend Micro Inc.)

R2 vcsFPService; C:\Windows\system32\vcsFPService.exe [2762032 2011-03-24] (Validity Sensors, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S3 BRSptSvc; "C:\ProgramData\BitRaider\BRSptSvc.exe" [X]
 

===================== Drivers (Whitelisted) ======================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2016-08-27] ()

S3 BRDriver_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver.sys [66824 2016-10-15] (BitRaider)

S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()

S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2015-12-31] (Disc Soft Ltd)

S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [40504 2016-07-18] (Disc Soft Ltd)

S3 dtscsi; C:\Windows\System32\Drivers\dtscsi.sys [223128 2013-02-26] (DT Soft Ltd.) [File not signed]

S3 eapihdrv; C:\Windows\TEMP\ehdrv.sys [135760 2016-12-22] (ESET)

R2 giveio; C:\Windows\system32\giveio.sys [5248 1996-04-03] () [File not signed]

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2016-08-27] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation)

R3 netr28; C:\Windows\System32\DRIVERS\netr28.sys [2075792 2014-12-10] (MediaTek Inc.)

S4 secdrv; C:\Windows\system32\Drivers\secdrv.sys [11973 2016-07-23] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [2484552 2015-07-16] (Sonix Tech. Co., Ltd.)

R2 speedfan; C:\Windows\system32\speedfan.sys [24184 2012-12-29] (Almico Software)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324152 2016-07-18] (Duplex Secure Ltd.)

R1 SSHDRV85; C:\Windows\system32\drivers\SSHDRV85.sys [78848 2013-12-29] () [File not signed]

R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [75600 2013-08-29] (Trend Micro Inc.)

R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [263072 2013-09-02] (Trend Micro Inc.)

R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [62704 2013-08-29] (Trend Micro Inc.)

R2 TmFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmXPFlt.sys [294152 2015-07-02] (Trend Micro Inc.)

R1 TmLwf; C:\Windows\System32\DRIVERS\tmlwf.sys [146232 2012-06-21] (Trend Micro Inc.)

R2 TmPreFilter; C:\Program Files\Trend Micro\OfficeScan Client\TmPreFlt.sys [38152 2015-07-02] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [90712 2013-06-18] (Trend Micro Inc.)

R2 tmWfp; C:\Windows\System32\DRIVERS\tmwfp.sys [282936 2012-06-21] (Trend Micro Inc.)

S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2014-07-28] (Apple, Inc.) [File not signed]

R2 VSApiNt; C:\Program Files\Trend Micro\OfficeScan Client\VSApiNt.sys [1608744 2015-07-02] (Trend Micro Inc.)

S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [465408 2009-07-14] (Microsoft Corporation)

S3 BRDriver; \??\C:\ProgramData\BitRaider\BRDriver.sys [X]

S3 BTMCOM; System32\Drivers\btmcom.sys [X]

S3 BTMUSB; System32\Drivers\btmusb.sys [X]

S3 cleanhlp; \??\C:\EEK\bin\cleanhlp32.sys [X]

S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]

S3 vtany; \??\C:\Windows\vtany.sys [X]

S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2016-12-23 22:14 - 2016-12-23 22:16 - 00025401 _____ C:\Users\flkr2104\Desktop\FRST.txt

2016-12-23 22:14 - 2016-12-23 22:14 - 00000000 ____D C:\Users\flkr2104\Desktop\FRST-OlderVersion

2016-12-21 19:25 - 2016-12-21 19:25 - 02870984 _____ (ESET) C:\Users\flkr2104\Desktop\esetsmartinstaller_deu.exe

2016-12-21 19:10 - 2016-12-21 19:18 - 00000000 ____D C:\AdwCleaner

2016-12-21 19:04 - 2016-12-21 19:05 - 03977168 _____ C:\Users\flkr2104\Desktop\AdwCleaner_6.041.exe

2016-12-21 13:56 - 2016-12-21 14:01 - 00230474 _____ C:\TDSSKiller.3.1.0.12_21.12.2016_13.56.09_log.txt

2016-12-21 13:55 - 2016-12-21 13:55 - 04747704 _____ (AO Kaspersky Lab) C:\Users\flkr2104\Desktop\tdsskiller.exe

2016-12-19 20:33 - 2016-12-23 22:14 - 00000000 ____D C:\FRST

2016-12-19 20:32 - 2016-12-23 22:14 - 01762816 _____ (Farbar) C:\Users\flkr2104\Desktop\FRST.exe

2016-12-19 16:17 - 2016-12-19 16:19 - 00002071 _____ C:\Users\flkr2104\Desktop\Scan.txt

2016-12-18 15:48 - 2016-12-18 16:28 - 00000000 ____D C:\Users\flkr2104\Documents\FUSSBALL MANAGER 16-17

2016-12-18 15:48 - 2016-12-18 15:48 - 00001169 _____ C:\Users\flkr2104\Desktop\FM17 Editor.lnk

2016-12-18 15:48 - 2016-12-18 15:48 - 00001159 _____ C:\Users\flkr2104\Desktop\FIFA Manager  17.lnk

2016-12-18 15:48 - 2016-12-18 15:48 - 00001149 _____ C:\Users\flkr2104\Desktop\FM17 Auflösung.lnk

2016-12-18 15:26 - 2016-12-18 15:26 - 00000000 ____D C:\Users\flkr2104\Documents\FUSSBALL MANAGER 13

2016-12-18 14:26 - 2016-12-18 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUSSBALL MANAGER 13

2016-12-17 22:10 - 2016-12-17 22:10 - 00000000 ____D C:\ProgramData\Electronic Arts

2016-12-16 20:49 - 2016-12-16 20:49 - 00000000 ____D C:\Users\flkr2104\Downloads\FC Basel

2016-12-13 16:53 - 2016-12-13 16:53 - 00191002 _____ C:\Users\flkr2104\Downloads\2016-11-24--Uebersichtsplan-Linie-10-via-Kauslund.pdf

2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\AeriaGames

2016-12-12 09:03 - 2016-12-12 09:03 - 00000000 ____D C:\ProgramData\Aeria Games

2016-12-12 09:01 - 2016-12-12 09:01 - 00001952 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk

2016-12-12 09:01 - 2016-12-12 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames

2016-12-12 09:01 - 2016-12-12 09:01 - 00000000 ____D C:\Program Files\Aeria Games

2016-12-12 08:59 - 2016-12-12 08:59 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Aeria Games & Entertainment

2016-12-12 08:49 - 2016-12-18 13:48 - 00000000 ____D C:\Program Files\Origin Games

2016-12-10 15:44 - 2016-09-12 21:54 - 00067816 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-12-10 15:44 - 2016-09-12 21:49 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-12-10 15:44 - 2016-09-09 16:53 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-12-10 15:43 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2016-12-10 15:43 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-12-10 15:43 - 2016-10-11 16:24 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-12-10 15:43 - 2016-10-11 16:24 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-12-10 15:43 - 2016-10-11 16:21 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-12-10 15:43 - 2016-10-11 16:18 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-12-10 15:43 - 2016-10-11 15:55 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-12-10 15:43 - 2016-10-11 15:55 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-12-10 15:43 - 2016-10-11 15:55 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-12-10 15:43 - 2016-10-11 15:55 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-12-10 15:43 - 2016-10-11 15:53 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-12-10 15:43 - 2016-10-11 15:51 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe

2016-12-10 15:43 - 2016-10-11 15:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-12-10 15:43 - 2016-10-11 15:51 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-12-10 15:43 - 2016-10-11 15:51 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-12-10 15:43 - 2016-10-11 15:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-12-10 15:43 - 2016-10-11 15:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-12-10 15:43 - 2016-10-11 15:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-12-10 15:43 - 2016-10-11 14:18 - 00419648 _____ C:\Windows\system32\locale.nls

2016-12-10 15:43 - 2016-10-08 14:05 - 00534600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-12-10 15:43 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2016-12-10 15:43 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-12-10 15:42 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-12-10 15:42 - 2016-10-11 15:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-12-10 15:42 - 2016-10-11 15:50 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-12-10 15:42 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2016-12-10 15:42 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2016-12-10 15:40 - 2016-11-02 16:22 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2016-12-10 15:40 - 2016-11-02 16:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2016-12-10 15:40 - 2016-11-02 15:53 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-12-10 15:40 - 2016-10-28 04:14 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-12-10 15:40 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-12-10 15:40 - 2016-10-27 15:16 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-12-10 15:40 - 2016-10-25 15:54 - 02399744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-12-10 15:40 - 2016-10-22 18:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-12-10 15:40 - 2016-10-22 18:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-12-10 15:40 - 2016-10-22 18:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-12-10 15:40 - 2016-10-22 18:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-12-10 15:40 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-12-10 15:40 - 2016-10-22 18:35 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-12-10 15:40 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-12-10 15:40 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-12-10 15:40 - 2016-10-22 18:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-12-10 15:40 - 2016-10-22 18:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-12-10 15:40 - 2016-10-22 18:22 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-12-10 15:40 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-12-10 15:40 - 2016-10-22 18:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-12-10 15:40 - 2016-10-22 18:21 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-12-10 15:40 - 2016-10-22 18:20 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-12-10 15:40 - 2016-10-22 18:13 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-12-10 15:40 - 2016-10-22 18:09 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-12-10 15:40 - 2016-10-22 18:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-12-10 15:40 - 2016-10-22 18:03 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-12-10 15:40 - 2016-10-22 17:59 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-12-10 15:40 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-12-10 15:40 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-12-10 15:40 - 2016-10-22 17:54 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-12-10 15:40 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-12-10 15:40 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-12-10 15:40 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-12-10 15:40 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-12-10 15:40 - 2016-10-22 17:43 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-12-10 15:40 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-12-10 15:40 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-12-10 15:40 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-12-10 15:40 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-12-10 15:40 - 2016-10-15 16:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2016-12-10 15:40 - 2016-10-15 16:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll

2016-12-10 15:40 - 2016-10-11 16:24 - 00250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2016-12-10 15:40 - 2016-10-11 16:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME

2016-12-10 15:40 - 2016-10-11 16:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-12-10 15:40 - 2016-10-11 16:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2016-12-10 15:40 - 2016-10-11 16:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll

2016-12-10 15:40 - 2016-10-11 16:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime

2016-12-10 15:40 - 2016-10-11 16:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime

2016-12-10 15:40 - 2016-10-11 14:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll

2016-12-10 15:40 - 2016-10-07 16:12 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-12-10 15:40 - 2016-10-05 15:50 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2016-12-10 15:40 - 2016-09-15 15:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2016-12-10 15:40 - 2016-09-13 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-12-10 15:40 - 2016-09-12 21:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll

2016-12-10 15:40 - 2016-09-12 20:08 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2016-12-10 15:40 - 2016-09-12 20:08 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2016-12-10 15:40 - 2016-09-09 19:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-12-10 15:40 - 2016-09-08 21:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2016-12-10 15:40 - 2016-09-08 21:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2016-12-10 15:40 - 2016-09-08 15:49 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2016-12-10 15:40 - 2016-09-08 15:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2016-12-10 15:40 - 2016-08-21 14:05 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-12-03 12:00 - 2016-11-15 21:44 - 00014299 _____ C:\Users\flkr2104\Downloads\Saison 3.xlsx

2016-12-03 12:00 - 2016-11-13 11:59 - 00012272 _____ C:\Users\flkr2104\Downloads\MeinUmfeld.xlsx
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2016-12-23 21:50 - 2012-04-03 08:46 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-12-23 21:33 - 2010-11-21 00:42 - 00661468 _____ C:\Windows\system32\perfh014.dat

2016-12-23 21:33 - 2010-11-21 00:42 - 00153528 _____ C:\Windows\system32\perfc014.dat

2016-12-23 21:33 - 2010-11-20 22:01 - 01808420 _____ C:\Windows\system32\PerfStringBackup.INI

2016-12-23 21:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf

2016-12-23 21:27 - 2016-08-25 17:44 - 00000000 ____D C:\Users\flkr2104\Documents\MEGAsync Downloads

2016-12-23 17:14 - 2012-08-11 18:35 - 00000132 _____ C:\Users\flkr2104\AppData\Roaming\Adobe PNG Format CS5 Prefs

2016-12-23 13:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache

2016-12-23 12:29 - 2009-07-14 05:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-12-23 12:29 - 2009-07-14 05:34 - 00032224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-12-23 12:18 - 2012-07-04 00:17 - 00002689 ___SH C:\Windows\system32\mmf.sys

2016-12-23 12:17 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-12-22 20:01 - 2012-01-14 21:49 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Skype

2016-12-21 13:37 - 2016-11-18 18:14 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-12-20 23:10 - 2013-03-16 19:22 - 00001912 _____ C:\Windows\epplauncher.mif

2016-12-20 21:21 - 2012-05-04 20:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2016-12-20 21:20 - 2016-11-19 10:48 - 00000000 ____D C:\Users\flkr2104\AppData\LocalLow\Mozilla

2016-12-19 16:14 - 2014-12-08 23:37 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-12-19 15:50 - 2016-08-24 08:18 - 00000000 ____D C:\Program Files\Steam

2016-12-18 15:27 - 2014-09-19 22:39 - 00000000 ____D C:\ProgramData\Origin

2016-12-18 15:26 - 2016-09-10 18:56 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Origin

2016-12-18 14:26 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-12-15 21:41 - 2012-07-19 15:19 - 00002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-12-14 16:28 - 2013-12-28 23:17 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-13 21:50 - 2012-04-03 08:46 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2016-12-13 21:50 - 2011-09-15 07:55 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2016-12-13 21:50 - 2011-08-02 09:22 - 00000000 ____D C:\Windows\system32\Macromed

2016-12-13 15:38 - 2012-05-16 20:09 - 00183112 _____ C:\Windows\system32\PnkBstrB.exe

2016-12-13 15:38 - 2012-05-16 20:09 - 00183112 _____ C:\Windows\system32\PnkBstrB.ex0

2016-12-13 15:38 - 2012-05-16 20:09 - 00138184 _____ C:\Windows\system32\Drivers\PnkBstrK.sys

2016-12-12 09:54 - 2016-06-17 23:23 - 00000000 ____D C:\Users\flkr2104\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames

2016-12-12 09:01 - 2012-09-12 17:53 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin

2016-12-12 08:45 - 2016-09-10 18:46 - 00000000 ____D C:\Program Files\Origin

2016-12-10 16:58 - 2011-09-22 20:10 - 00000000 ____D C:\Program Files\GIMP-2.0

2016-12-10 16:58 - 2011-08-24 10:03 - 00000000 ____D C:\Users\flkr2104

2016-12-10 16:31 - 2009-07-14 05:33 - 00543848 _____ C:\Windows\system32\FNTCACHE.DAT

2016-12-10 16:28 - 2014-12-26 03:45 - 00000000 ____D C:\Windows\system32\appraiser

2016-12-10 16:28 - 2014-04-24 15:00 - 00000000 ___SD C:\Windows\system32\CompatTel

2016-12-10 16:20 - 2013-09-06 11:43 - 00000000 ____D C:\Windows\system32\MRT

2016-12-10 16:02 - 2011-10-11 22:28 - 138444440 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-12-03 23:00 - 2011-08-08 10:23 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2016-12-03 20:19 - 2012-01-25 14:32 - 00330240 _____ (Trend Micro Inc.) C:\Windows\RegBootClean.exe

2016-12-02 21:26 - 2012-03-21 13:00 - 00000000 ____D C:\Windows\system32\directx

2016-12-02 21:23 - 2012-03-21 13:00 - 00000000 ___HD C:\Windows\msdownld.tmp

2016-11-25 14:39 - 2015-10-12 11:25 - 00000000 ___HD C:\Program Files\Common Files\EAInstaller

2016-11-23 20:40 - 2016-02-17 22:03 - 00000000 ___RD C:\Program Files\Skype

2016-11-23 20:40 - 2012-01-14 21:49 - 00000000 ____D C:\ProgramData\Skype
 

==================== Files in the root of some directories =======
 

2012-09-15 19:30 - 2012-09-14 07:30 - 0000044 ____H () C:\Program Files\e1697bb7.tmp

2012-06-09 10:39 - 2007-12-01 16:22 - 0315392 _____ () C:\Program Files\GMLMatting.8bf

2012-06-09 10:39 - 2012-06-09 10:39 - 0000053 _____ () C:\Program Files\GMLMatting.ini

2014-08-17 13:05 - 2014-08-17 13:15 - 6010880 _____ () C:\Program Files\GUT1FAF.tmp

2014-10-03 23:16 - 2014-10-03 23:16 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe BMP Format CS5 Prefs

2012-08-11 18:35 - 2016-12-23 17:14 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe PNG Format CS5 Prefs

2012-08-15 19:00 - 2015-06-05 23:37 - 0000132 _____ () C:\Users\flkr2104\AppData\Roaming\Adobe Targa Format CS5 Prefs

2014-06-11 22:30 - 2014-06-11 22:30 - 0000097 _____ () C:\Users\flkr2104\AppData\Roaming\LauncherSettings_live.cfg

2012-05-16 20:09 - 2016-09-03 14:40 - 0022328 _____ () C:\Users\flkr2104\AppData\Roaming\PnkBstrK.sys

2012-05-26 18:28 - 2012-05-26 18:28 - 0003584 _____ () C:\Users\flkr2104\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-10-27 16:02 - 2013-10-27 16:02 - 0000058 _____ () C:\Users\flkr2104\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat

2012-06-07 19:00 - 2012-06-07 19:00 - 0000096 _____ () C:\Users\flkr2104\AppData\Local\fusioncache.dat

2013-10-23 22:20 - 2013-10-23 22:20 - 0007605 _____ () C:\Users\flkr2104\AppData\Local\Resmon.ResmonCfg

2015-07-28 12:49 - 2015-07-28 12:49 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{43D810FD-CDEE-452B-9007-907ECB224905}

2015-06-07 13:10 - 2015-06-07 13:10 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{51A80C3A-0B9D-45B6-8F1E-3DE9E66F8091}

2015-06-15 12:07 - 2015-06-15 12:07 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{7B741A37-DC76-4B3B-B7D5-3526204848E8}

2016-07-28 17:08 - 2016-07-28 17:08 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{B2881FF6-5740-48F7-870C-65A198F1BB07}

2015-11-28 14:50 - 2015-11-28 14:50 - 0000000 _____ () C:\Users\flkr2104\AppData\Local\{C6B3C03C-64C9-4B05-BA05-6DF46EDEA189}

2012-06-09 10:44 - 2007-12-01 16:22 - 0315392 _____ () C:\ProgramData\GMLMatting.8bf

2012-06-09 10:44 - 2012-06-09 10:44 - 0000053 _____ () C:\ProgramData\GMLMatting.ini
 

==================== Bamital & volsnap ======================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 

LastRegBack: 2016-12-23 12:51
 

==================== End of FRST.txt ============================

--- --- ---

und Addition

[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x86) Version: 21-12-2016

Ran by flkr2104 (23-12-2016 22:17:14)

Running from C:\Users\flkr2104\Desktop

Microsoft Windows 7 Professional  Service Pack 1 (X86) (2011-08-02 07:11:49)

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1890919210-445268223-3708981845-500 - Administrator - Enabled) => C:\Users\Administrator

ASPNET (S-1-5-21-1890919210-445268223-3708981845-1002 - Administrator - Enabled)

FKone (S-1-5-21-1890919210-445268223-3708981845-1003 - Administrator - Enabled)

Gjest (S-1-5-21-1890919210-445268223-3708981845-501 - Limited - Disabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Trend Micro OfficeScan Antivirus (Enabled - Up to date) {5D349EF8-873B-C657-917F-F1D93E101A7C}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Trend Micro OfficeScan Anti-spyware (Enabled - Up to date) {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}

FW: Trend Micro Personal Firewall (Enabled) {49A8346C-6900-54B6-B1B3-5F678736DDE9}
 

==================== Installed Programs ======================
 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.3.0.3650 - Adobe Systems Incorporated)

Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)

Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)

Aeria Ignite (HKLM\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (HKLM\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (Version: 1.13.3296 - Aeria Games & Entertainment) Hidden

Akamai NetSession Interface (HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\Akamai) (Version:  - Akamai Technologies, Inc)

Apple Application Support (32-Bit) (HKLM\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{D9F3D66A-9885-4DDD-A800-9DDF488359A1}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

BitRaider Streaming Client (HKLM\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)

Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)

D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)

EAX4 Unified Redist (HKLM\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

Echo of Soul (HKLM\...\Echo of Soul) (Version:  - )

FUSSBALL MANAGER 13 (HKLM\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)

fx-9860G Manager PLUS (HKLM\...\{F5F8D7F9-8879-439E-8292-3386CD7BF06D}) (Version:  - )

Google Chrome (HKLM\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.32.7 - Google Inc.) Hidden

HP HotKey Support (HKLM\...\{931AED5E-545A-4802-B5CF-DD3B2086235F}) (Version: 4.0.18.1 - Hewlett-Packard Company)

IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6433.0 - IDT)

iFinger (HKLM\...\{A1CA0B3B-CFDB-440D-87C5-3F0EFED61731}) (Version: 4.0.4 - iFinger LTD)

Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.10.1464 - Intel Corporation)

Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

iTunes (HKLM\...\{B62DB971-5B1E-4EAF-86DC-09B4D3A322D2}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 111 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

MEGAsync (HKLM\...\MEGAsync) (Version:  - Mega Limited)

Messenger Plus! 5 (HKLM\...\Messenger Plus!) (Version: 5.50.0.761 - Yuna Software)

Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (norsk språkpakke) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1044) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)

Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)

Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.25.00.03 - Huawei Technologies Co.,Ltd)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

NVIDIA PhysX (HKLM\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)

OpenAL (HKLM\...\OpenAL) (Version:  - )

OpenOffice.org 3.2 (HKLM\...\{4F33D156-BF58-4BDB-A8CE-74123C7142C0}) (Version: 3.2.9502 - OpenOffice.org)

Origin (HKLM\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)

Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)

PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)

Ralink RT3592 802.11a/b/g/n 2x2 WiFi Adapter (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.01.18.0 - Ralink)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Skype™ 7.30 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SpeedFan (remove only) (HKLM\...\SpeedFan) (Version:  - )

Språkpakke for Microsoft Visual Studio 2010 Tools for Office Runtime (x86) – NOR (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - NOR) (Version: 10.0.50903 - Microsoft Corporation)

Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

STRIKE NX GAMEPAD (HKLM\...\{DEC7CD2E-2BB5-40C3-9592-078F646F7E6C}) (Version: 1.00.0000 - speedlink)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.8 - Synaptics Incorporated)

System Requirements Lab CYRI (HKLM\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)

System Requirements Lab for Intel (HKLM\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

Trend Micro OfficeScan Client (HKLM\...\OfficeScanNT) (Version: 10.6.5162 - Trend Micro)

Unity Web Player (HKU\S-1-5-21-1113328611-58381748-87005590-109325\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Validity Fingerprint Sensor Driver (HKLM\...\{316430AA-68D4-4468-83FE-E5E088511C6C}) (Version: 4.3.126.0 - Validity Sensors, Inc.)

Veetle TV (HKLM\...\Veetle TV) (Version: 0.9.19 - Veetle, Inc)

Virtua Tennis 4 (Version: 1.0.0001.130 - Sega) Hidden

VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)

Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

WinRAR 4.01 beta 1 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.1 - win.rar GmbH)
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}\InprocServer32 -> C:\Windows\system32\comct232.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF90-7B36-11d2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF91-7B36-11D2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{2933BF94-7B36-11D2-B20E-00C04F983E60}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll ()

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373984C9-B845-449B-91E7-45AC83036ADE}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{379E501F-B231-11D1-ADC1-00805FC752D8}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\flkr2104\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{48123BC4-99D9-11D1-A6B3-00C04FD91555}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{550DDA30-0541-11D2-9CA9-0060B0EC3D39}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6352-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6353-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6354-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6355-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6356-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6357-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{586A6359-87C8-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{612A8624-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{612A8628-0FB3-11CE-8747-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{7E3FCEA1-31B4-11D2-AE1F-0080C7337EA1}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{AFB40FFD-B609-40A3-9828-F88BBE11E4E3}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{AFBA6B42-5692-48EA-8141-DC517DCF0EF1}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}\InprocServer32 -> C:\Windows\system32\comctl32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{CFC399AF-D876-11D0-9C10-00C04FC99C8E}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{D2423620-51A0-11D2-9CAF-0060B0EC3D39}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F19-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F27-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F31-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F33-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F34-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F35-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F36-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F37-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F39-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F3F-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F40-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F5078F41-C551-11D3-89B9-0000F81FE221}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F11-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F12-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F14-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{FC220AD8-A72A-4EE8-926E-0B7AD152A020}\InprocServer32 -> C:\Windows\system32\msxml3.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1113328611-58381748-87005590-109325_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\Windows\system32\mscomct2.ocx (Microsoft Corporation)
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {14A8A810-9A39-4BFF-88E2-3D717AB5C923} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)

Task: {1E1AE2DC-56D6-41AF-BD36-E6487C2E4E12} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)

Task: {473587FE-EE87-4C19-AF1A-8595AA63BB03} - System32\Tasks\{0927203C-0EBF-4520-A815-F850E80C4F86} => pcalua.exe -a "C:\Program Files\Trend Micro\OfficeScan Client\NTRmv.exe"

Task: {493D7DCC-B857-42E1-A4EF-776613C5B2AA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)

Task: {61BF19B3-147F-471D-A6A4-29015C250290} - System32\Tasks\{4E983F3D-CA62-4AB4-98AB-3C5DC4FF9BEC} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\World_of_Tanks\WOTLauncher.exe"

Task: {7561775F-91C7-40C6-B5DC-7F8CEC91274F} - System32\Tasks\{D4026E0E-5843-4B01-80A7-75692F195F72} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.22.0.107&amp;LastError=-9

Task: {7B9E3DBB-058A-414B-AE52-51944D3AFEA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated)

Task: {80E18999-C394-43F7-B3B0-D7803EE13670} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {9469D411-F484-4F74-8CD0-900744EC7ED0} - System32\Tasks\{A5FADF4A-2EB7-482D-BE9A-4F59DC50A02E} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=7.3.0.101&amp;LastError=-9

Task: {A6EC187B-E82C-41DF-9D86-D01C0644F620} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)

Task: {C633C180-1ED1-4D11-9173-3C839FEFCDBA} - System32\Tasks\{015D73D5-7EF9-4344-9757-A8487F237BE9} => pcalua.exe -a "C:\Users\flkr2104\Downloads\fm bilder\FMC_2D_Spielerbilder_BorussiaDortmund.exe" -d "C:\Users\flkr2104\Downloads\fm bilder"

Task: {E6363805-31C2-441E-B0FE-A87A45036903} - System32\Tasks\{CA584D81-5E3F-4553-B31D-B85999D12BFD} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.9.0.106&amp;LastError=-9

Task: {F492ED02-CF3A-4667-B829-C24B9F2D8F3F} - System32\Tasks\{06F9D0C9-EF0D-4815-8092-909961929903} => Firefox.exe hxxp://www.skype.com/go/downloading?source=installer&amp;ver=6.16.0.105&amp;LastError=-9

Task: {F5FBDC70-34C1-40BC-B7E2-D39723268801} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Shortcuts =============================
 

(The entries could be listed to be restored or removed.)
 

==================== Loaded Modules (Whitelisted) ==============
 

2016-10-05 18:18 - 2016-10-05 18:18 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:18 - 2016-10-05 18:18 - 01041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2012-07-04 00:17 - 2012-07-04 00:17 - 00002560 _____ () C:\Windows\runservice.exe

2012-07-04 00:17 - 2013-12-14 20:03 - 00048640 _____ () C:\Windows\mmfs.dll

2015-05-20 14:13 - 2014-02-15 07:59 - 00239184 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe

2012-03-19 14:29 - 2011-04-01 10:53 - 00499712 _____ () C:\Program Files\Trend Micro\OfficeScan Client\sqlite3.dll

2012-05-16 20:09 - 2015-03-21 22:26 - 00075136 _____ () C:\Windows\system32\PnkBstrA.exe

2016-06-30 12:24 - 2016-12-17 22:17 - 00564736 _____ () C:\Users\flkr2104\AppData\Local\MEGAsync\ShellExtX32.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2011-08-02 10:19 - 2011-05-18 11:39 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll

2011-08-02 17:46 - 2011-03-26 07:28 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll

2012-12-18 01:10 - 2012-03-28 22:18 - 01198872 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2016-12-15 21:41 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-15 21:41 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files\Google\Chrome\Application\55.0.2883.87\libegl.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 
 

==================== Safe Mode (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
 

==================== Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1113328611-58381748-87005590-109325\Control Panel\Desktop\\Wallpaper -> C:\Users\flkr2104\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is enabled.
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

MSCONFIG\startupfolder: C:^Users^flkr2104^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun

MSCONFIG\startupreg: EADM => "C:\Program Files\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: OfficeScanNT Monitor => "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [SPPSVC-In-TCP] => %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{A622ABA6-3C92-41E6-B9A6-0180CB929627}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{E1F8A0D8-4BD6-4314-9E5F-09CFA6031C64}] => LPort=2869

FirewallRules: [{8E016B2D-F2B2-426E-8EFA-46C122E87942}] => LPort=1900

FirewallRules: [{4D7BDA48-417D-4349-A980-9CA19BEAB9E8}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{931A377F-4D8D-4BBC-94E5-8D0F49139C46}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [TCP Query User{C964F64B-B4AF-422E-84E6-F447D39FF02F}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe

FirewallRules: [UDP Query User{C9A64660-BDEF-4E85-854C-1276BBF4AADE}C:\program files\internet explorer\iexplore.exe] => C:\program files\internet explorer\iexplore.exe

FirewallRules: [{5BB298CC-AA84-491D-80D0-7C095E61BA2C}] => LPort=56676

FirewallRules: [{89AC9ADD-DE5F-493A-BBBE-A09925FEEA86}] => LPort=56676

FirewallRules: [{E74843CA-D546-474B-BE2F-ECD88AF21AA3}] => LPort=56676

FirewallRules: [{3AF8905E-C8AE-4A8C-9333-FA4D6D943A83}] => LPort=56676

FirewallRules: [{3CEC8038-9CB9-492F-84BC-11FC042637BB}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{797BF723-8A67-4836-928C-480FA8891719}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [{5AE9581D-14F3-4469-A752-53338A798640}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{A0723582-6F2B-43F5-8262-ABD550D5C792}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{3CBDDE4A-099C-4CE9-BC37-64F1FB39D9FA}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{9CE865C3-BEB8-4C6B-8655-306C4F5F2AD0}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{9247D1AC-E137-4A98-8136-5A6EE141EBFF}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{D69662A4-66F6-4384-88FA-FDEE02C03A6F}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{EB93B812-9B9E-418E-A0E3-69C71D1D090E}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{BA336E0C-B36B-4607-8119-9BFE68EE3BDE}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A820FB9D-B99E-4B28-8661-A19B8852A77C}C:\users\flkr2104\appdata\local\akamai\netsession_win.exe] => C:\users\flkr2104\appdata\local\akamai\netsession_win.exe

FirewallRules: [{47817B77-3C47-4FB4-B3D0-CCA335429855}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{67463958-AB41-41AA-9083-8800F123498F}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{A4F25796-4A90-4E82-A333-45F7CC95EC65}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{984E4980-579B-47B0-BFE1-AF5D4A0C076A}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [{F551A992-3141-4D89-BA76-75760F62E27C}] => LPort=57403

FirewallRules: [{1F578E27-FD89-4030-B8EC-A0BC1C526524}] => LPort=57403

FirewallRules: [{5D60EDFF-EA05-4007-8412-DFDE253D4577}] => LPort=57403

FirewallRules: [{13938A1A-81AF-4BD0-AB69-BED62589111D}] => LPort=57403

FirewallRules: [{0092FC27-0457-4EDA-AAEA-D9FFE024C45A}] => C:\Program Files\Pando Networks\Media Booster\PMB.exe

FirewallRules: [TCP Query User{02EA3E90-A44B-4F73-A943-FBD12A097465}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{62B8955A-39F2-4EF4-A52D-5A09535CE188}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [{02FA5FC8-C781-4F53-938B-78F933EA2E88}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{8F19AA17-5BB2-40B4-A6F5-E40042625635}] => C:\Windows\System32\PnkBstrA.exe

FirewallRules: [{7460F63E-D470-46D0-A656-8819767A619D}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{C7ADC506-CDA1-48A3-A2EF-F6FA057261AE}] => C:\Windows\System32\PnkBstrB.exe

FirewallRules: [{920F7FF0-D99B-4849-82C5-8BE8022DFAAE}] => LPort=80

FirewallRules: [{60E8E997-E151-4751-80E6-B7543F835BC7}] => LPort=443

FirewallRules: [{4CC79DDF-748F-47B4-BDC8-0B762A261560}] => LPort=20010

FirewallRules: [{C172F8BB-B73C-4E08-8919-C35EF9EE9C34}] => LPort=3478

FirewallRules: [{14E92C44-7822-41B8-A131-80E1F848083D}] => LPort=7850

FirewallRules: [{AB3AC8DD-BDB1-45B5-9217-4881FC7A0875}] => LPort=27022

FirewallRules: [{6A9CD13A-43B6-4631-8C68-4306185C1193}] => LPort=6881

FirewallRules: [{C717E6BE-C28A-4CB5-8DF9-FC719540A912}] => LPort=33333

FirewallRules: [{84D841DF-161C-4421-84BC-EB7E15BAA88F}] => LPort=20443

FirewallRules: [{413383F3-2547-481F-B70D-DC44AC04E62A}] => LPort=8090

FirewallRules: [TCP Query User{2FFBB76F-F899-485B-B3F0-625F7D62F4A5}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{B6DDDBD7-6C94-4A40-88DE-428852CFE2F4}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe

FirewallRules: [{4EBA9F6A-0F8D-4F94-9942-73448314B269}] => C:\Program Files\Veetle\Player\VeetleNet.exe

FirewallRules: [{4A52C6EF-5F9A-4A0F-888F-D81C6E6E9574}] => LPort=7852

FirewallRules: [{1BE26DF6-7661-43CB-8FD0-EFDA92D6DA6F}] => LPort=7853

FirewallRules: [{B8F2D49B-2EBB-4C21-B719-02BC8571FE1B}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{97D84C21-793F-4F11-8AB5-B9DC278676BF}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{EF400853-AAAB-49E3-8387-75161C9283ED}] => LPort=60426

FirewallRules: [{EAE60802-9EC3-4DEF-AF04-D462FD75ABA9}] => LPort=5000

FirewallRules: [{63159383-EF26-4123-BCED-CAC58630E62D}] => C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{0741EA6B-43DD-4047-BDC2-D52CD5E9A75B}] => C:\Program Files\Steam\Steam.exe

FirewallRules: [{AC6FF4E6-BF42-466C-AA44-0ED710FFD7D4}] => C:\Program Files\Steam\Steam.exe

FirewallRules: [{D778DEAD-F211-4901-82C5-1346DFC7AE9C}] => C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{0F2DE732-315A-41A0-80C3-98255C8633AA}] => C:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{AF54C738-61F5-4881-A6FD-8E55E03C30B6}] => C:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{DCF6B2FB-B87E-4E0D-94C5-23304BCFE9C2}] => C:\Program Files\Google\Chrome\Application\chrome.exe

FirewallRules: [{7DE68FF8-65F1-45C5-99E0-41708996614D}] => C:\Program Files\Origin Games\FIFA Manager 13\Manager13.exe

FirewallRules: [{C29E0871-6BA7-4629-A635-8C7155D3D475}] => C:\Program Files\Origin Games\FIFA Manager 13\Manager13.exe

FirewallRules: [{E3A21C6E-D9C6-4FEB-BB71-B515D4D68FB9}] => LPort=12345

FirewallRules: [{204EF0C2-5BDB-448E-BF9B-81CEB5B2C21F}] => LPort=49210

FirewallRules: [{EF4E3B63-763D-4155-8C90-3F26EFEB33E6}] => LPort=5000
 

==================== Restore Points =========================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Messenger Plus! Virtual Camera

Description: Messenger Plus! Virtual Camera

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: YunaSoftware

Service: MsgPlusDriver

Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Resolution: A registry problem was detected.

 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
 

Name: Messenger Plus! Virtual Camera

Description: Messenger Plus! Virtual Camera

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: YunaSoftware

Service: MsgPlusDriver

Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Resolution: A registry problem was detected.

 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/23/2016 12:18:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/22/2016 01:59:40 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/21/2016 07:21:31 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/21/2016 01:39:16 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/20/2016 07:41:39 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/20/2016 07:35:38 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/20/2016 01:40:53 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Kan ikke initialisere indeksen.
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Kan ikke initialisere programmet.
 

Kontekst: Windows-program
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/19/2016 04:11:16 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Kan ikke initialisere Innsamler-objektet.
 

Kontekst: Windows-program, SystemIndex-katalog
 

Detaljer:

        Innholdsindekskatalogen er skadet.  (HRESULT : 0xc0041801) (0xc0041801)
 
 

System errors:

=============

Error: (12/23/2016 08:18:48 PM) (Source: NETLOGON) (EventID: 5719) (User: )

Description: Datamaskinen kan ikke sette opp en sikker økt med en 

domenekontroller i domene OPPLAND på grunn av følgende: 

Det er ingen tilgjengelige påloggingsservere som kan behandle påloggingsforespørselen.
 
 

Dette kan føre til godkjenningsproblemer. Kontroller at datamaskinen 

er koblet til nettverket. Hvis problemet vedvarer, 

kontakt domeneadministrator.
 
 
 

MER INFORMASJON
 

Hvis denne datamaskinen er domenekontroller for det angitte domenet,

setter den opp sikre økter for primærdomenets kontrolleremulator i det angitte 

domenet. Ellers setter denne datamaskinen opp den sikre økten for enhver domenekontroller

i det angitte domenet.
 

Error: (12/23/2016 04:18:25 PM) (Source: NETLOGON) (EventID: 5719) (User: )

Description: Datamaskinen kan ikke sette opp en sikker økt med en 

domenekontroller i domene OPPLAND på grunn av følgende: 

Det er ingen tilgjengelige påloggingsservere som kan behandle påloggingsforespørselen.
 
 

Dette kan føre til godkjenningsproblemer. Kontroller at datamaskinen 

er koblet til nettverket. Hvis problemet vedvarer, 

kontakt domeneadministrator.
 
 
 

MER INFORMASJON
 

Hvis denne datamaskinen er domenekontroller for det angitte domenet,

setter den opp sikre økter for primærdomenets kontrolleremulator i det angitte 

domenet. Ellers setter denne datamaskinen opp den sikre økten for enhver domenekontroller

i det angitte domenet.
 

Error: (12/23/2016 01:18:12 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Skyggekopiene av volum C: ble avbrutt fordi skyggekopilageret ikke kunne vokse på grunn av en brukerdefinert grense.
 

Error: (12/23/2016 12:19:32 PM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: OPPLAND)

Description: Behandlingen av gruppepolicyen mislyktes på grunn av manglende nettverkstilkobling til en domenekontroller. Dette kan være en forbigående tilstand. En melding om at det er utført, genereres når maskinen kobles til domenekontrolleren og gruppepolicyen har blitt behandlet. Kontakt systemansvarlig hvis du ikke får en melding om at det er utført innen noen timer.
 

Error: (12/23/2016 12:18:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Følgende oppstarts- eller systemstartdriver(e) kan ikke lastes inn: 

cdrom
 

Error: (12/23/2016 12:18:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Tjenesten Origin Web Helper Service kan ikke starte på grunn av følgende feil: 

Tjenesten svarte ikke på start- eller kontrollforespørselen innenfor tidsrammen.
 

Error: (12/23/2016 12:18:34 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Det oppstod et tidsavbrudd (30000 millisekunder) under venting på at tjenesten Origin Web Helper Service skal koble til.
 

Error: (12/23/2016 12:18:04 PM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: NT-MYNDIGHET)

Description: Behandlingen av gruppepolicyen mislyktes på grunn av manglende nettverkstilkobling til en domenekontroller. Dette kan være en forbigående tilstand. En melding om at det er utført, genereres når maskinen kobles til domenekontrolleren og gruppepolicyen har blitt behandlet. Kontakt systemansvarlig hvis du ikke får en melding om at det er utført innen noen timer.
 

Error: (12/23/2016 12:17:59 PM) (Source: NETLOGON) (EventID: 5719) (User: )

Description: Datamaskinen kan ikke sette opp en sikker økt med en 

domenekontroller i domene OPPLAND på grunn av følgende: 

Det er ingen tilgjengelige påloggingsservere som kan behandle påloggingsforespørselen.
 
 

Dette kan føre til godkjenningsproblemer. Kontroller at datamaskinen 

er koblet til nettverket. Hvis problemet vedvarer, 

kontakt domeneadministrator.
 
 
 

MER INFORMASJON
 

Hvis denne datamaskinen er domenekontroller for det angitte domenet,

setter den opp sikre økter for primærdomenets kontrolleremulator i det angitte 

domenet. Ellers setter denne datamaskinen opp den sikre økten for enhver domenekontroller

i det angitte domenet.
 

Error: (12/23/2016 12:25:11 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: Serveren {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5} ble ikke registrert hos DCOM innen fristen for tidsavbrudd.
 
 

CodeIntegrity:

===================================

  Date: 2016-12-23 21:53:03.336

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 21:45:34.268

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 21:37:54.329

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 20:17:55.417

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 20:13:35.930

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 18:51:35.331

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 18:22:00.039

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 17:26:03.691

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 17:25:37.621

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-23 13:44:06.382

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\aestaren.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Celeron(R) CPU B810 @ 1.60GHz

Percentage of memory in use: 49%

Total physical RAM: 3014.37 MB

Available physical RAM: 1516.77 MB

Total Virtual: 6027.06 MB

Available Virtual: 4020.76 MB
 

==================== Drives ================================
 

Drive c: (OSDisk) (Fixed) (Total:116.44 GB) (Free:42.54 GB) NTFS

Drive d: (Data) (Fixed) (Total:116.14 GB) (Free:33.5 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 108E484F)

Partition 1: (Not Active) - (Size=116.4 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=116.1 GB) - (Type=07 NTFS)

Partition 3: (Active) - (Size=300 MB) - (Type=07 NTFS)
 

==================== End of Addition.txt ============================

--- --- ---