Trojaner-Board - WanaCry Ransomware

Tut mir leid, ich schon wieder. Langsam wirds peinlich!
Beim Surfen im Internet hatte ich plötzlich dieses Bild am Bildschirm und eine Frauenstimme, die ich zulabberte.
Ist wohl sowas: https://www.trojaner-board.de/186209-warnung-telefonanrufen-angeblichen-microsoft-mitarbeitern.html (sorry Link einfügen geht leider nicht). Aber was mach ich nun?

Malwarebytes hat nichts gefunden.
Windows Defender muss ich erst vollständig laufen lassen.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01

durchgeführt von Karin (Administrator) auf DESKTOP-A96N3MD (17-05-2018 19:48:23)

Gestartet von C:\Users\Karin\Desktop

Geladene Profile: Karin (Verfügbare Profile: defaultuser0 & Karin & Karo)

Platform: Windows 10 Home Version 1803 17134.48 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Edge)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel Corporation) C:\Windows\System32\ibtsiva.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe

(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe

(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-0\MsMpEng.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-0\NisSrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

() C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Microsoft Corporation) C:\Users\Karin\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\FileCoAuth.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe

(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-08-24] (Realtek Semiconductor)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-15] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\windows\system32\rundll32.exe" C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (HP Inc.)

HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)

HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-11-11]

ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitchLC.vbs ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-11-11]

ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{B90CB0DE-2E60-41C4-9857-466EB98192BF}\HPlogo_blue.ico ()
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{16707bef-8497-495b-a6bd-a07002b188ea}: [DhcpNameServer] 192.168.0.1 192.168.0.2
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE

HKU\S-1-5-21-2845463136-2451505030-1697673878-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE

HKU\S-1-5-21-2845463136-2451505030-1697673878-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-04-29] (Microsoft Corporation)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-08-05] (HP Inc.)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-04-29] (Microsoft Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-08-05] (HP Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-29] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-29] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-29] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-29] (Microsoft Corporation)
 

FireFox:

========

FF DefaultProfile: 8bp4ua6v.default-1496418648180

FF ProfilePath: C:\Users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\8bp4ua6v.default-1496418648180 [2018-05-17]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-01] (Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8566448 2018-04-26] (Microsoft Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-22] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-22] (Dropbox, Inc.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-15] (NVIDIA Corporation)

R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [892928 2016-06-02] (HP Inc.) [Datei ist nicht signiert]

R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [461336 2016-07-15] (HP Inc.)

S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)

R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (HP Inc.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2017-12-06] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)

R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

R2 IRMTService; C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe [181360 2016-06-21] (Intel Corporation)

S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-10] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268928 2017-12-20] ()

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-15] (NVIDIA Corporation)

S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-15] (NVIDIA Corporation)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [314624 2016-08-24] (Realtek Semiconductor)

S3 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\NisSrv.exe [4632736 2018-04-26] (Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MsMpEng.exe [104680 2018-04-26] (Microsoft Corporation)

S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3758720 2017-12-20] (Intel® Corporation)

R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2017-12-06] (Intel Corporation)

R3 IntelReadyModeDriver; C:\WINDOWS\System32\drivers\IntelReadyModeDriver.sys [34952 2016-06-21] (Intel Corporation)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-05-17] (Malwarebytes)

R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [8623040 2018-02-05] (Intel Corporation)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdc.inf_amd64_2707c70d42c54b4e\nvlddmkm.sys [17036560 2018-02-01] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-15] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56376 2016-08-05] (NVIDIA Corporation)

R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [937728 2016-05-18] (Realtek )

R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [416472 2016-09-09] (Realsil Semiconductor Corporation)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-04-26] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [313888 2018-04-26] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61472 2018-04-26] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2018-05-17 19:48 - 2018-05-17 19:48 - 000000000 ____D C:\Users\Karin\Desktop\FRST-OlderVersion

2018-05-17 19:41 - 2018-05-17 19:41 - 000001417 _____ C:\Users\Karin\Desktop\Microsoft Edge.lnk

2018-05-17 19:39 - 2018-05-17 19:39 - 000000020 ___SH C:\Users\Karin\ntuser.ini

2018-05-17 18:06 - 2018-05-17 17:12 - 000000000 ____D C:\Windows.old

2018-05-17 18:04 - 2018-05-17 18:06 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2018-05-17 18:04 - 2018-05-17 18:04 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2018-05-17 18:04 - 2018-05-17 18:04 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2018-05-17 18:03 - 2018-05-17 18:03 - 025848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 022707712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 022002688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 019399168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 012712960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 007583232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 006569952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 005782528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 001636352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 001454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000786168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2018-05-17 18:03 - 2018-05-17 18:03 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2018-05-17 18:03 - 2018-05-17 18:03 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 009159064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 007436624 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003732800 _____ C:\WINDOWS\system32\Windows.Mirage.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003655168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 003440640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003283400 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 002835864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002700800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002486976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002422168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 002170368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001634800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001456616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2018-05-17 18:02 - 2018-05-17 18:02 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001191168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2018-05-17 18:02 - 2018-05-17 18:02 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000733992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2018-05-17 18:02 - 2018-05-17 18:02 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000559968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2018-05-17 18:02 - 2018-05-17 18:02 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000269216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2018-05-17 18:02 - 2018-05-17 18:02 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2018-05-17 18:02 - 2018-05-17 18:02 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim

2018-05-17 18:01 - 2018-05-17 18:01 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe

2018-05-17 18:01 - 2018-05-17 18:01 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2018-05-17 18:01 - 2018-05-17 18:01 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll

2018-05-17 18:01 - 2018-05-17 18:01 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml

2018-05-17 18:01 - 2018-05-17 18:01 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml

2018-05-17 18:01 - 2018-05-17 18:01 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2018-05-17 18:01 - 2018-05-17 18:01 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\Program Files\Reference Assemblies

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\Program Files\MSBuild

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\Program Files (x86)\MSBuild

2018-05-17 18:01 - 2018-05-17 18:01 - 000000000 ____D C:\inetpub

2018-05-17 17:13 - 2018-05-17 17:13 - 000001417 _____ C:\Users\Karo\Desktop\Microsoft Edge.lnk

2018-05-17 17:13 - 2018-05-17 17:13 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2018-05-17 17:12 - 2018-05-17 19:41 - 000003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2

2018-05-17 17:12 - 2018-05-17 17:12 - 000003764 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA

2018-05-17 17:12 - 2018-05-17 17:12 - 000003540 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore

2018-05-17 17:12 - 2018-05-17 17:12 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2018-05-17 17:12 - 2018-05-17 17:12 - 000003262 _____ C:\WINDOWS\System32\Tasks\HPGenoobeReminder

2018-05-17 17:12 - 2018-05-17 17:12 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification

2018-05-17 17:12 - 2018-05-17 17:12 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2845463136-2451505030-1697673878-1002

2018-05-17 17:12 - 2018-05-17 17:12 - 000002772 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-A96N3MD-Karo

2018-05-17 17:12 - 2018-05-17 17:12 - 000002590 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask

2018-05-17 17:12 - 2018-05-17 17:12 - 000002502 _____ C:\WINDOWS\System32\Tasks\HPEA3JOBS

2018-05-17 17:12 - 2018-05-17 17:12 - 000002352 _____ C:\WINDOWS\System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}

2018-05-17 17:12 - 2018-05-17 17:12 - 000002262 _____ C:\WINDOWS\System32\Tasks\DropboxOEM

2018-05-17 17:12 - 2018-05-17 17:12 - 000002252 _____ C:\WINDOWS\System32\Tasks\HPJumpStartProvider

2018-05-17 17:12 - 2018-05-17 17:12 - 000002236 _____ C:\WINDOWS\System32\Tasks\{8F12594E-22C2-4E9A-9455-7D130465C81C}

2018-05-17 17:12 - 2018-05-17 17:12 - 000002230 _____ C:\WINDOWS\System32\Tasks\{2DA71C1F-F7EA-4584-8FA1-BEEA5E3FCED1}

2018-05-17 17:12 - 2018-05-17 17:12 - 000000020 ___SH C:\Users\Karo\ntuser.ini

2018-05-17 17:12 - 2018-05-17 17:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2018-05-17 17:12 - 2018-05-17 17:12 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard

2018-05-17 17:12 - 2018-02-13 16:58 - 000003708 _____ C:\WINDOWS\System32\Tasks\NvNotifier_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2018-05-17 17:12 - 2017-06-05 10:44 - 000000000 _____ C:\WINDOWS\System32\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}

2018-05-17 17:11 - 2018-05-17 17:12 - 000015243 _____ C:\WINDOWS\diagwrn.xml

2018-05-17 17:11 - 2018-05-17 17:12 - 000015243 _____ C:\WINDOWS\diagerr.xml

2018-05-17 17:09 - 2018-05-17 17:09 - 000000000 ____D C:\ProgramData\USOShared

2018-05-17 17:08 - 2018-05-17 19:41 - 000002440 _____ C:\Users\Karin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-05-17 17:08 - 2018-05-17 19:39 - 000000000 ____D C:\Users\Karin

2018-05-17 17:08 - 2018-05-17 17:12 - 000000000 ____D C:\Users\Karo

2018-05-17 17:08 - 2018-05-17 17:10 - 000000000 ___HD C:\Users\Karin\Documents\hp.system.package.metadata

2018-05-17 17:08 - 2018-05-17 17:10 - 000000000 ___HD C:\Users\defaultuser0\Documents\hp.system.package.metadata

2018-05-17 17:08 - 2018-05-17 17:10 - 000000000 ____D C:\Users\defaultuser0

2018-05-17 17:08 - 2018-05-17 17:09 - 000000000 ___HD C:\Users\Karo\Documents\hp.system.package.metadata

2018-05-17 17:08 - 2018-05-17 17:08 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Vorlagen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Startmenü

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Netzwerkumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Lokale Einstellungen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Eigene Dateien

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Druckumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Documents\Eigene Videos

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Documents\Eigene Musik

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Documents\Eigene Bilder

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\AppData\Local\Verlauf

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\AppData\Local\Anwendungsdaten

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karo\Anwendungsdaten

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Vorlagen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Startmenü

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Netzwerkumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Lokale Einstellungen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Eigene Dateien

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Druckumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Documents\Eigene Videos

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Documents\Eigene Musik

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Documents\Eigene Bilder

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\AppData\Local\Verlauf

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\AppData\Local\Anwendungsdaten

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\Karin\Anwendungsdaten

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Vorlagen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Startmenü

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Eigene Dateien

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Druckumgebung

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten

2018-05-17 17:08 - 2018-05-17 17:08 - 000000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten

2018-05-17 17:08 - 2018-04-12 01:34 - 000001105 _____ C:\Users\Karo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-05-17 17:08 - 2018-04-12 01:34 - 000001105 _____ C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-05-17 17:08 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2018-05-17 17:08 - 2016-11-11 07:41 - 000000000 ___HD C:\Users\Karo\Documents\hp.applications.package.appdata

2018-05-17 17:08 - 2016-11-11 07:41 - 000000000 ___HD C:\Users\Karin\Documents\hp.applications.package.appdata

2018-05-17 17:08 - 2016-11-11 07:41 - 000000000 ___HD C:\Users\defaultuser0\Documents\hp.applications.package.appdata

2018-05-17 17:07 - 2018-05-17 17:14 - 001926026 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2018-05-17 17:06 - 2018-05-17 17:09 - 002030328 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2018-05-17 17:06 - 2018-05-17 17:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2018-05-15 21:31 - 2018-05-17 17:12 - 000000000 ___DC C:\WINDOWS\Panther
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2018-05-17 19:48 - 2018-03-31 19:46 - 000015259 _____ C:\Users\Karin\Desktop\FRST.txt

2018-05-17 19:48 - 2018-03-31 19:46 - 000000000 ____D C:\FRST

2018-05-17 19:48 - 2018-03-31 19:45 - 002413056 _____ (Farbar) C:\Users\Karin\Desktop\FRST64.exe

2018-05-17 19:46 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness

2018-05-17 19:43 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF

2018-05-17 19:41 - 2017-05-07 09:22 - 000000000 ____D C:\Users\Karin\AppData\LocalLow\Mozilla

2018-05-17 19:41 - 2016-12-11 18:06 - 000000000 ___RD C:\Users\Karin\OneDrive

2018-05-17 19:39 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2018-05-17 19:39 - 2018-03-31 19:39 - 000000000 ___RD C:\Users\Karin\3D Objects

2018-05-17 19:39 - 2017-12-20 15:46 - 000000000 ____D C:\Users\Karin\AppData\Local\Packages

2018-05-17 19:39 - 2016-12-11 18:04 - 000000000 ____D C:\Users\Karin\AppData\Local\ConnectedDevicesPlatform

2018-05-17 19:39 - 2016-11-11 08:23 - 000000000 ____D C:\ProgramData\NVIDIA

2018-05-17 19:39 - 2016-07-29 14:33 - 000000000 __RHD C:\Users\Public\AccountPictures

2018-05-17 19:37 - 2017-12-20 16:12 - 000000000 ____D C:\Users\Karo\AppData\Local\PlaceholderTileLogoFolder

2018-05-17 19:22 - 2016-12-11 18:20 - 000000000 ____D C:\Users\Karo\AppData\Local\ConnectedDevicesPlatform

2018-05-17 19:17 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp

2018-05-17 19:12 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps

2018-05-17 19:12 - 2017-12-20 15:46 - 000000000 ____D C:\Users\Karo\AppData\Local\Packages

2018-05-17 18:06 - 2018-04-12 18:13 - 000000000 ____D C:\WINDOWS\system32\WCN

2018-05-17 18:06 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup

2018-05-17 18:06 - 2018-04-12 01:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 __RHD C:\Users\Public\Libraries

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\IME

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help

2018-05-17 18:06 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2018-05-17 18:06 - 2018-04-05 14:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2018-05-17 18:06 - 2018-01-07 15:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2018-05-17 18:06 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2018-05-17 18:06 - 2017-05-11 19:44 - 000000000 ____D C:\Program Files\UNP

2018-05-17 18:06 - 2017-04-11 10:33 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2018-05-17 18:06 - 2017-03-12 13:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2018-05-17 18:06 - 2017-03-05 10:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2018-05-17 18:06 - 2016-11-11 08:25 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles

2018-05-17 18:06 - 2016-11-11 08:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2018-05-17 18:06 - 2016-11-11 08:23 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2018-05-17 18:06 - 2016-11-11 08:22 - 000000000 ____D C:\Program Files\Intel

2018-05-17 18:06 - 2016-11-11 08:22 - 000000000 ____D C:\Program Files (x86)\Intel

2018-05-17 18:06 - 2016-11-11 07:41 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support

2018-05-17 18:04 - 2018-04-12 18:13 - 000000000 ____D C:\WINDOWS\system32\winrm

2018-05-17 18:04 - 2018-04-12 18:13 - 000000000 ____D C:\WINDOWS\system32\slmgr

2018-05-17 18:04 - 2018-04-12 18:13 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\F12

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\dsc

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\en-GB

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\appcompat

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\system

2018-05-17 18:04 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2018-05-17 18:04 - 2016-11-11 08:22 - 000000000 ____D C:\WINDOWS\system32\SRSLabs

2018-05-17 18:04 - 2016-11-11 08:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2018-05-17 18:04 - 2016-11-11 08:22 - 000000000 ____D C:\Program Files\Realtek

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\vi-VN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ur-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ug-CN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tt-RU

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tk-TM

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\te-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sw-KE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sq-AL

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\quz-PE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\prs-AF

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\pa-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\or-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\nn-NO

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ne-NP

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\mt-MT

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\mr-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\mn-MN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ml-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\mk-MK

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\mi-NZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\lo-LA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\lb-LU

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ky-KG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\kok-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\kn-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\km-KH

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\kk-KZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ka-GE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\is-IS

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\id-ID

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\hy-AM

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\gu-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ga-IE

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\fil-PH

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\fa-IR

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\cy-GB

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\bn-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\bn-BD

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\be-BY

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\as-IN

2018-05-17 18:03 - 2018-04-12 18:17 - 000000000 ____D C:\WINDOWS\system32\af-ZA

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ta-in

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\si-lk

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\am-et

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Provisioning

2018-05-17 18:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\inetsrv

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\et-EE

2018-05-17 18:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\es-MX

2018-05-17 17:30 - 2016-12-11 18:20 - 000000000 ____D C:\Users\Karo\AppData\Local\Publishers

2018-05-17 17:14 - 2018-04-12 18:13 - 000819910 _____ C:\WINDOWS\system32\perfh007.dat

2018-05-17 17:14 - 2018-04-12 18:13 - 000182492 _____ C:\WINDOWS\system32\perfc007.dat

2018-05-17 17:13 - 2017-02-19 13:35 - 000000000 ____D C:\Users\Karo\AppData\LocalLow\Mozilla

2018-05-17 17:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration

2018-05-17 17:12 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\windows nt

2018-05-17 17:12 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Defender

2018-05-17 17:12 - 2018-04-11 23:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2018-05-17 17:12 - 2017-03-10 20:21 - 000000000 ___RD C:\Users\Karo\3D Objects

2018-05-17 17:11 - 2016-07-29 14:38 - 001922604 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2018-05-17 17:10 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2018-05-17 17:10 - 2017-12-20 15:49 - 000023056 _____ C:\WINDOWS\system32\emptyregdb.dat

2018-05-17 17:09 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate

2018-05-17 17:09 - 2018-04-11 23:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2018-05-17 17:09 - 2018-04-05 14:17 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2018-05-17 17:08 - 2017-12-20 15:47 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages

2018-05-17 17:07 - 2016-11-11 08:25 - 000000000 ____D C:\WINDOWS\SysWOW64\sda

2018-05-17 17:07 - 2016-11-11 08:23 - 000000000 ____D C:\Program Files\NVIDIA Corporation

2018-05-17 17:07 - 2016-11-11 08:22 - 000001851 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk

2018-05-17 17:07 - 2016-11-11 08:22 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2018-05-15 21:29 - 2017-02-20 16:16 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2018-05-14 19:50 - 2017-04-13 14:55 - 000001456 _____ C:\Users\Karo\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2018-05-14 14:41 - 2016-11-11 07:43 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2018-05-13 19:04 - 2017-03-03 21:26 - 000001390 _____ C:\Users\Public\Desktop\Skype.lnk

2018-05-10 10:40 - 2017-06-02 15:20 - 000001141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2018-05-10 10:40 - 2017-06-02 15:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2018-05-10 10:40 - 2017-06-02 15:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2018-05-08 20:36 - 2017-01-22 10:17 - 000000000 ____D C:\WINDOWS\system32\MRT

2018-05-08 20:34 - 2017-10-11 16:31 - 141696960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe

2018-05-08 20:34 - 2017-01-22 10:17 - 141696960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2018-05-01 23:22 - 2018-04-12 01:41 - 000835064 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2018-05-01 23:22 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2018-04-27 17:46 - 2017-03-23 19:28 - 000000000 ____D C:\Users\Karo\AppData\Local\Citrix

2018-04-27 17:33 - 2016-12-11 18:20 - 000000000 ___RD C:\Users\Karo\OneDrive

2018-04-26 14:07 - 2018-02-17 18:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2018-05-17 17:06
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01

durchgeführt von Karin (17-05-2018 19:48:43)

Gestartet von C:\Users\Karin\Desktop

Windows 10 Home Version 1803 17134.48 (X64) (2018-05-17 15:12:20)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2845463136-2451505030-1697673878-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2845463136-2451505030-1697673878-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-2845463136-2451505030-1697673878-1000 - Limited - Disabled) => C:\Users\defaultuser0

Gast (S-1-5-21-2845463136-2451505030-1697673878-501 - Limited - Disabled)

Karin (S-1-5-21-2845463136-2451505030-1697673878-1001 - Administrator - Enabled) => C:\Users\Karin

Karo (S-1-5-21-2845463136-2451505030-1697673878-1002 - Limited - Enabled) => C:\Users\Karo

WDAGUtilityAccount (S-1-5-21-2845463136-2451505030-1697673878-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)

Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)

Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.46 - NVIDIA Corporation) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden

Elements 11 Organizer (HKLM-x32\...\{D4D065E1-3ABF-41D0-B385-FC6F027F4D00}) (Version: 11.0 - Ihr Firmenname) Hidden

Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden

HP Audio Switch (HKLM\...\HPAudioSwitch) (Version: 1.0.111.0 - HP Inc.)

HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.2 - HP Inc.)

HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.)

HP JumpStart Bridge (HKLM-x32\...\{7DE7767C-E470-4113-8AE7-B8DB1D5F2ECD}) (Version: 1.1.0.158 - HP Inc.)

HP JumpStart Launch (HKLM-x32\...\{B90CB0DE-2E60-41C4-9857-466EB98192BF}) (Version: 1.1.158.0 - HP Inc.)

HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8357.5639 - HP Inc.)

HP Support Assistant (HKLM-x32\...\{6FA09B91-5D97-45A9-95E9-50F635C98043}) (Version: 8.3.32.23 - HP Inc.)

HP Support Solutions Framework (HKLM-x32\...\{624DA112-9F71-492E-BAF9-0E5E4224626C}) (Version: 12.5.32.203 - HP Inc.)

HP Sure Connect (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 1.0.0.26 - HP Inc.)

HP System Event Utility (HKLM-x32\...\{025C1573-2F1D-46AF-BAB8-594EBF56A889}) (Version: 1.4.11 - HP Inc.)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.11.1193 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)

Intel(R) Ready Mode Technology (HKLM\...\{91DC75C1-5D36-4AF0-913E-F45B0923CA43}) (Version: 1.1.70.525 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{35069AA3-F7B2-4759-96F0-9EE43AACB690}) (Version: 19.00.1621.3340 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel(R) Corporation) Hidden

Intel® PROSet/Wireless Software (HKLM-x32\...\{ed4a5da7-ac62-4aa5-9502-7b4de55e8cb5}) (Version: 20.20.2 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)

Malwarebytes Version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes)

Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.9226.2126 - Microsoft Corporation)

Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.9226.2126 - Microsoft Corporation)

Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.9226.2126 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2845463136-2451505030-1697673878-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

Mozilla Firefox 60.0 (x64 en-US) (HKLM\...\Mozilla Firefox 60.0 (x64 en-US)) (Version: 60.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)

Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9226.2126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9226.2126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9226.2126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.9226.2126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.9226.2126 - Microsoft Corporation) Hidden

Online Plug-in (HKLM-x32\...\{EACEB844-8CDD-4F3B-9EA2-E299741D1652}) (Version: 14.7.0.13011 - Citrix Systems, Inc.) Hidden

PSE11 STI Installer (HKLM-x32\...\{98CE8819-87AA-4814-8167-ADDDD513485F}) (Version: 11.0 - Adobe Systems Incorporated) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7910 - Realtek Semiconductor Corp.)

Self-Service Plug-in (HKLM-x32\...\{5D678EB8-64FD-4681-AACF-3D18FBCA77A3}) (Version: 4.7.0.15674 - Citrix Systems, Inc.) Hidden

SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype Version 8.21 (HKLM-x32\...\Skype_is1) (Version: 8.21 - Skype Technologies S.A.)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{DE083343-D24D-4495-919E-18C65EC0F289}) (Version: 2.8.0.0 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0B260AA3-D1ED-44A4-B591-05400947EFDF} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> Keine Datei <==== ACHTUNG

Task: {18AB1B8B-7687-48C4-8265-804EA5243754} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-05-14] (Microsoft Corporation)

Task: {18F99CF1-7200-4032-A3F4-8352E56BA80E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)

Task: {1C863C0E-60B1-4744-BDAF-39A45FDF7D2E} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> Keine Datei <==== ACHTUNG

Task: {25EBADEE-4D64-4EDA-B4ED-27FC1D6F3A37} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation)

Task: {2A1B07E0-2A68-4AE2-9586-DF27E47CE78C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-22] (Dropbox, Inc.)

Task: {2AD937E9-AEED-4EF9-B105-7C3BDE6AA762} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)

Task: {2FFDAF91-6D3D-4AE0-81E3-A24A5E45C921} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-02-07] (HP Inc.)

Task: {32932BF9-6D9C-4081-8B36-38FF3CECCDDB} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]

Task: {3A39BF39-F0B8-459F-B02F-D9C23EB53CA2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation)

Task: {3AA66928-D593-45B7-A443-45E0011858F9} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe

Task: {3EB85185-B35D-4AD1-BFBE-610F1E3BF188} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-A96N3MD-Karo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16] (Adobe Systems Incorporated)

Task: {43C7C864-1539-47FA-9737-543C36E4823F} - System32\Tasks\HPJumpStartProvider => C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe [2016-07-15] ()

Task: {5311285C-FEA0-4162-AE6F-0CC6048B363D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-04-26] (Microsoft Corporation)

Task: {55961077-D1E7-4242-ABC9-997AEACE6E04} - System32\Tasks\{2DA71C1F-F7EA-4584-8FA1-BEEA5E3FCED1} => "C:\Program Files\Internet Explorer\iexplore.exe" hxxps://ui.skype.com/ui/0/7.33.0.104/de/eula?source=lightinstaller

Task: {59D1A377-C65B-4721-94F1-C76EAAA9F226} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-05-14] (Microsoft Corporation)

Task: {62F6B938-B2CD-4E74-B15F-12612781DF09} - System32\Tasks\HPGenoobeReminder => C:\Program Files (x86)\HP\HP Registration Service\HP GenOOBE\HPGenOOBE.exe [2016-07-12] (HP Inc.)

Task: {64F0D91B-ABB2-42F1-9254-870C6EC247B9} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-22] (Dropbox, Inc.)

Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()

Task: {682796DB-8B71-4578-AB1F-E6F59E1DF4BE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Keine Datei <==== ACHTUNG

Task: {6AFEF099-AFBD-4688-BE3F-D2002136603E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-05-14] (Microsoft Corporation)

Task: {70A4F04E-4114-478A-AA33-0AA1A37720C0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-08-05] (HP Inc.)

Task: {74413A6D-7B3C-46D2-860F-177C758EF624} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-04-26] (Microsoft Corporation)

Task: {754F6F1D-239D-4A74-A166-56EA8A1FB9A8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-05-14] (Microsoft Corporation)

Task: {7684E625-4EBC-4000-A655-D8D08AA07277} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-02-07] (HP Inc.)

Task: {77CE5646-4D4E-4FB8-BEB8-971433615908} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> Keine Datei <==== ACHTUNG

Task: {79BBC35E-6470-4DA9-929B-E791BB578387} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)

Task: {8BE46C15-8942-4CC5-A87A-E98189C3EB5A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2016-08-05] (HP Inc.)

Task: {9D09F3B9-736E-49BB-B19B-3B439604B965} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-08-05] (HP Inc.)

Task: {A63A0800-3569-4D5D-BE40-FC1391394847} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-08-04] (HP Inc.)

Task: {B1C09290-5FDA-45D6-9566-F8959FF4EE17} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG

Task: {BE675D8A-50E7-4EDB-ABC7-D2BDD4E1F425} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-05-14] (Microsoft Corporation)

Task: {BF7125DB-45D1-483B-A286-9F243A9487FB} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-08-05] (HP Inc.)

Task: {CC8A7A7C-001E-42C7-937B-4F3229F85734} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation)

Task: {CEF0F4C4-C07D-49D9-A391-B19E35C0D6EE} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\windows\explorer.exe /NOUACCHECK

Task: {D2DC89AF-F1D8-4583-8B73-A4D6A1F8DD60} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation)

Task: {DA95003C-18E4-4F89-8ED1-DEFD853CA6C9} - System32\Tasks\{8F12594E-22C2-4E9A-9455-7D130465C81C} => "C:\Program Files\Internet Explorer\iexplore.exe" hxxps://ui.skype.com/ui/0/7.33.0.104/de/privacy?source=lightinstaller

Task: {DE7A077B-B06C-4450-B031-29DB98381EF8} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-09-21] ()

Task: {E29AAD4E-4961-4B0A-951B-F74050CFBCF7} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> Keine Datei <==== ACHTUNG

Task: {F42A0D29-D975-4943-8F72-8AA893371ACC} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> Keine Datei <==== ACHTUNG

Task: {F42AF5B2-208B-4D0B-8D17-4118CB80B991} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-05-25] (HP Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2017-06-05 11:13 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll

2016-07-15 17:34 - 2016-07-15 17:34 - 000843616 _____ () C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe

2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll

2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll

2018-04-12 01:35 - 2018-04-12 18:18 - 002184704 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-05-09 23:57 - 2016-05-09 23:57 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-11-11 08:23 - 2016-06-15 14:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2845463136-2451505030-1697673878-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP Backgrounds\backgroundDefault.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{9CCBF1FF-BCD5-4D37-BCF9-BA281EAC986D}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe

FirewallRules: [{E1B06F81-21B1-4DC2-8AD3-1DB7AEA4B6A9}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe

FirewallRules: [{79F1BCA0-8779-4EE3-BB34-2FCC6D6F5C56}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe

FirewallRules: [{B8D7CEBF-3650-4951-B2BA-FAE04E80C943}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe

FirewallRules: [{9CF34FA9-8221-4F75-BDE4-4792DAD4237B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{149E1BF7-A7E1-47B8-A4A1-8680A2E83CB6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{4251C712-7A97-4EF8-9B80-EC4AC33348C7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{73F2A3C2-A330-4284-BE36-109C99655328}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{C859FD90-584B-4094-B52E-21364433653A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{DD45726D-8810-4134-A9D6-C94024191319}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{7D954F3A-F831-4455-A750-EEF571333C1B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{C21F3011-5B91-4C69-AC50-0428712C1B10}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.80.474.0_x86__zpdnekdrzrea0\Spotify.exe

FirewallRules: [{B7F12EF8-BB0A-4B78-9709-F848FA9F86E6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{6D2DE8C2-E6EF-4D44-BC42-6A9D0D1F913C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{552EAB2E-72F9-4060-93F4-D624D3AA96B4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{8753025E-6BED-4BFD-947C-50A063A7C96C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{B72015A2-A3FC-4A0C-9320-451CB9B0ABF0}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{EE0671B5-3EC6-468C-9A14-8D89F426B163}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [UDP Query User{29911DC2-87D3-45C3-B6C6-4D1D3347B4F4}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{6982551E-200C-4F73-B5CF-7CC5C128D6F1}] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{23C0116E-5243-4531-A2E5-97A342950908}] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{F6CB13AC-6672-46F8-A877-3C228EA7F67D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{CB8DDE86-BDCE-4628-8BA4-5D497A8B72DA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/17/2018 05:18:11 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM CisFileRatingChange" zu registrieren, deren Zielklasse "CisFileRatingChange" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM CisStatusChange" zu registrieren, deren Zielklasse "CisStatusChange" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM CisNotification" zu registrieren, deren Zielklasse "CisNotification" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM FwAlert" zu registrieren, deren Zielklasse "FwAlert" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM DfAlert" zu registrieren, deren Zielklasse "DfAlert" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM AvAlert" zu registrieren, deren Zielklasse "AvAlert" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (05/17/2018 05:11:46 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "CisWmi" wurde versucht, die Abfrage "SELECT * FROM CisAlert" zu registrieren, deren Zielklasse "CisAlert" im Namespace "//./ROOT/cis" nicht vorhanden ist. Die Abfrage wird ignoriert.
 
 

Systemfehler:

=============

Error: (05/17/2018 05:09:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde mit folgendem Fehler beendet: 

%%2147770990
 

Error: (05/17/2018 05:09:37 PM) (Source: NetBT) (EventID: 4311) (User: )

Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.

Verwenden Sie die Zeichenfolge "30E37A283C65", um die Schnittstelle zu identifizieren, die nicht initialisiert werden

konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 

GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 

von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 

waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.
 

Error: (05/17/2018 05:09:37 PM) (Source: NetBT) (EventID: 4311) (User: )

Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.

Verwenden Sie die Zeichenfolge "30E37A283C65", um die Schnittstelle zu identifizieren, die nicht initialisiert werden

konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 

GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 

von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 

waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.
 

Error: (05/17/2018 05:09:12 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: Der Server "{A47979D2-C419-11D9-A5B4-001185AD2B89}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (05/17/2018 05:09:07 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "HPWMISVC" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/17/2018 05:08:59 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "Druckererweiterungen und -benachrichtigungen" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/17/2018 05:06:59 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "iphlpsvc" wurde mit folgendem Fehler beendet: 

Das Gerät ist nicht bereit.
 
 

Windows Defender:

===================================

Date: 2018-05-17 19:37:21.986

Description: 

Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {73F46148-9FE9-460D-B804-E563960C7549}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Vollständige Überprüfung

Benutzer: DESKTOP-A96N3MD\Karo
 

Date: 2018-05-17 19:24:43.535

Description: 

Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {44C07DB6-C78D-47E2-BDB9-D8BA2185239C}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Vollständige Überprüfung

Benutzer: DESKTOP-A96N3MD\Karo
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 21%

Installierter physikalischer RAM: 16333.2 MB

Verfügbarer physikalischer RAM: 12743.86 MB

Summe virtueller Speicher: 19277.2 MB

Verfügbarer virtueller Speicher: 14772.28 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:118.01 GB) (Free:44.78 GB) NTFS

Drive d: (DATA) (Fixed) (Total:920.25 GB) (Free:854.35 GB) NTFS

Drive e: (RECOVERY) (Fixed) (Total:11.26 GB) (Free:1.37 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
 

\\?\Volume{0e99d522-3f29-4341-8652-472452690632}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.54 GB) NTFS

\\?\Volume{d76b4e3f-a048-4782-bb26-234ef454a0dc}\ () (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 119.2 GB) (Disk ID: 18931A8E)
 

Partition: GPT.
 

========================================================

Disk: 1 (Size: 931.5 GB) (Disk ID: 602485CF)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Die Frage ist, wie ich dieses Fenster wieder wegbekomme. Ich kann es nämlich nicht schließen und was sich da auf meinem PC breit gemacht hat.

Danke vielmals für die Hilfe.

Ja wie gesagt, tut mir leid, dass ich mich unklar ausgedrückt habe.

Kaspersky TDSS-Killer hat nichts gefunden.

Code:

01:18:59.0959 0x2cec  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17

01:18:59.0959 0x2cec  UEFI system

01:19:16.0058 0x2cec  ============================================================

01:19:16.0058 0x2cec  Current date / time: 2018/05/19 01:19:16.0058

01:19:16.0058 0x2cec  SystemInfo:

01:19:16.0058 0x2cec  

01:19:16.0058 0x2cec  OS Version: 10.0.17134 ServicePack: 0.0

01:19:16.0058 0x2cec  Product type: Workstation

01:19:16.0058 0x2cec  ComputerName: DESKTOP-A96N3MD

01:19:16.0058 0x2cec  UserName: Karin

01:19:16.0058 0x2cec  Windows directory: C:\WINDOWS

01:19:16.0058 0x2cec  System windows directory: C:\WINDOWS

01:19:16.0058 0x2cec  Running under WOW64

01:19:16.0058 0x2cec  Processor architecture: Intel x64

01:19:16.0058 0x2cec  Number of processors: 8

01:19:16.0058 0x2cec  Page size: 0x1000

01:19:16.0058 0x2cec  Boot type: Normal boot

01:19:16.0058 0x2cec  CodeIntegrityOptions = 0x0000C001

01:19:16.0058 0x2cec  ============================================================

01:19:16.0089 0x2cec  KLMD registered as C:\WINDOWS\system32\drivers\33570810.sys

01:19:16.0089 0x2cec  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19

01:19:16.0151 0x2cec  System UUID: {2745A45E-E343-DC4F-7224-BEE3CDC60A95}

01:19:16.0292 0x2cec  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

01:19:16.0323 0x2cec  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

01:19:16.0323 0x2cec  ============================================================

01:19:16.0323 0x2cec  \Device\Harddisk0\DR0:

01:19:16.0323 0x2cec  GPT partitions:

01:19:16.0323 0x2cec  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {D76B4E3F-A048-4782-BB26-234EF454A0DC}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x82000

01:19:16.0323 0x2cec  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {FE45A3A4-BFDD-4E90-90DF-669CBF0011D3}, Name: Microsoft reserved partition, StartLBA 0x82800, BlocksNum 0x8000

01:19:16.0323 0x2cec  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {7DAC2211-AE3D-40E3-97E8-59C8E43C40AE}, Name: Basic data partition, StartLBA 0x8A800, BlocksNum 0xEC05000

01:19:16.0323 0x2cec  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {0E99D522-3F29-4341-8652-472452690632}, Name: Basic data partition, StartLBA 0xEC8F800, BlocksNum 0x1EA000

01:19:16.0323 0x2cec  MBR partitions:

01:19:16.0323 0x2cec  \Device\Harddisk1\DR1:

01:19:16.0323 0x2cec  GPT partitions:

01:19:16.0323 0x2cec  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {AEDE8FF2-9D90-4CB9-94AF-DE3ADBBAB6D3}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x73081000

01:19:16.0323 0x2cec  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {E337737E-3258-45CB-9E4C-65A73D8A6C61}, Name: Basic data partition, StartLBA 0x73081800, BlocksNum 0x1685000

01:19:16.0323 0x2cec  MBR partitions:

01:19:16.0323 0x2cec  ============================================================

01:19:16.0339 0x2cec  C: <-> \Device\Harddisk0\DR0\Partition3

01:19:16.0354 0x2cec  D: <-> \Device\Harddisk1\DR1\Partition1

01:19:16.0386 0x2cec  E: <-> \Device\Harddisk1\DR1\Partition2

01:19:16.0386 0x2cec  ============================================================

01:19:16.0386 0x2cec  Initialize success

01:19:16.0386 0x2cec  ============================================================

01:20:23.0704 0x0474  ============================================================

01:20:23.0704 0x0474  Scan started

01:20:23.0704 0x0474  Mode: Manual; SigCheck; TDLFS; 

01:20:23.0704 0x0474  ============================================================

01:20:23.0704 0x0474  KSN ping started

01:20:23.0876 0x0474  KSN ping finished: true

01:20:24.0471 0x0474  ================ Scan system memory ========================

01:20:24.0471 0x0474  System memory - ok

01:20:24.0471 0x0474  ================ Scan services =============================

01:20:24.0908 0x0474  1394ohci - ok

01:20:24.0924 0x0474  3ware - ok

01:20:25.0018 0x0474  ACPI - ok

01:20:25.0018 0x0474  AcpiDev - ok

01:20:25.0018 0x0474  acpiex - ok

01:20:25.0033 0x0474  acpipagr - ok

01:20:25.0033 0x0474  [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys

01:20:25.0064 0x0474  AcpiPmi - ok

01:20:25.0064 0x0474  acpitime - ok

01:20:25.0080 0x0474  [ BF3818B441955E4D438EC72F06F1FE61, 091A80D6A8887B4B5AFF8D12CB5A96AF4A04B125C13BED815B3A776778CD3190 ] AdobeActiveFileMonitor11.0 C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

01:20:25.0080 0x0474  AdobeActiveFileMonitor11.0 - ok

01:20:25.0080 0x0474  [ CA805DA983594B01F3554464B2E5158F, AC311C5D59AA1FA2B1B3CDB9CCEABEC85878BF6CA6106253186909AA9EB3C1BA ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

01:20:25.0096 0x0474  AdobeARMservice - ok

01:20:25.0096 0x0474  ADP80XX - ok

01:20:25.0096 0x0474  AFD - ok

01:20:25.0111 0x0474  [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix          C:\WINDOWS\system32\drivers\afunix.sys

01:20:25.0127 0x0474  afunix - ok

01:20:25.0127 0x0474  [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys

01:20:25.0142 0x0474  ahcache - ok

01:20:25.0142 0x0474  [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter        C:\WINDOWS\System32\AJRouter.dll

01:20:25.0174 0x0474  AJRouter - ok

01:20:25.0174 0x0474  [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG             C:\WINDOWS\System32\alg.exe

01:20:25.0189 0x0474  ALG - ok

01:20:25.0189 0x0474  AmdK8 - ok

01:20:25.0189 0x0474  AmdPPM - ok

01:20:25.0205 0x0474  amdsata - ok

01:20:25.0205 0x0474  amdsbs - ok

01:20:25.0205 0x0474  amdxata - ok

01:20:25.0205 0x0474  [ 2CCB04097E143C7F82333863343C838C, E6A79EDDF03317BEF9B25C9FA658DF6A588DC06A9AF66338ADE31D5D29E4FB3C ] AppHostSvc      C:\WINDOWS\system32\inetsrv\apphostsvc.dll

01:20:25.0221 0x0474  AppHostSvc - ok

01:20:25.0236 0x0474  [ E4A18157BF5D8D714C05169A8A8D604C, 45D8CB25A9967D634F8331070BDFB3DF4ACB6295CF1520F9AAE8753D3BF4018A ] AppID           C:\WINDOWS\system32\drivers\appid.sys

01:20:25.0236 0x0474  AppID - ok

01:20:25.0252 0x0474  [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll

01:20:25.0252 0x0474  AppIDSvc - ok

01:20:25.0267 0x0474  [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo         C:\WINDOWS\System32\appinfo.dll

01:20:25.0283 0x0474  Appinfo - ok

01:20:25.0283 0x0474  [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr   C:\WINDOWS\system32\drivers\applockerfltr.sys

01:20:25.0299 0x0474  applockerfltr - ok

01:20:25.0314 0x0474  [ 922BBB78C86D1E3B34599E6513BAD2F3, 30904E54F0CE28273EC6EFE91B6237F656A158D7B976FB3322E3A25692528747 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll

01:20:25.0346 0x0474  AppReadiness - ok

01:20:25.0346 0x0474  AppXSvc - ok

01:20:25.0346 0x0474  arcsas - ok

01:20:25.0361 0x0474  [ 9EDC7F9BB19D3F12EB05437BD5687C8A, 182772D576C3C8A9CFDADE7F75A14DD0639C0DF5C3C345F158C2DE51708A2F76 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

01:20:25.0361 0x0474  aspnet_state - ok

01:20:25.0377 0x0474  AsyncMac - ok

01:20:25.0377 0x0474  atapi - ok

01:20:25.0377 0x0474  AudioEndpointBuilder - ok

01:20:25.0377 0x0474  Audiosrv - ok

01:20:25.0377 0x0474  [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll

01:20:25.0392 0x0474  AxInstSV - ok

01:20:25.0408 0x0474  b06bdrv - ok

01:20:25.0424 0x0474  [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam             C:\WINDOWS\system32\drivers\bam.sys

01:20:25.0424 0x0474  bam - ok

01:20:25.0439 0x0474  BasicDisplay - ok

01:20:25.0455 0x0474  BasicRender - ok

01:20:25.0471 0x0474  [ 15971E9AE43AA92C6A527622F36C41A0, DD3F0B5F6231A0C32AE7135ECB5ACABD495801C0D5673D76821EA06112ED83F5 ] BcastDVRUserService C:\WINDOWS\System32\BcastDVRUserService.dll

01:20:25.0517 0x0474  BcastDVRUserService - ok

01:20:25.0517 0x0474  bcmfn2 - ok

01:20:25.0533 0x0474  [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll

01:20:25.0549 0x0474  BDESVC - ok

01:20:25.0564 0x0474  [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys

01:20:25.0580 0x0474  Beep - ok

01:20:25.0580 0x0474  BFE - ok

01:20:25.0580 0x0474  [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt         C:\WINDOWS\system32\drivers\bindflt.sys

01:20:25.0596 0x0474  bindflt - ok

01:20:25.0611 0x0474  [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS            C:\WINDOWS\System32\qmgr.dll

01:20:25.0658 0x0474  BITS - ok

01:20:25.0658 0x0474  [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll

01:20:25.0689 0x0474  BluetoothUserService - ok

01:20:25.0705 0x0474  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

01:20:25.0720 0x0474  Bonjour Service - ok

01:20:25.0720 0x0474  bowser - ok

01:20:25.0830 0x0474  [ 53C4AF4DA254AED8D3EEBA4A319960FA, 707D27136D96044C2C964F34731D43CF94C583059414CFD9033276F999D4BEC0 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll

01:20:26.0189 0x0474  BrokerInfrastructure - ok

01:20:26.0465 0x0474  [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService     C:\WINDOWS\System32\BTAGService.dll

01:20:26.0778 0x0474  BTAGService - ok

01:20:26.0825 0x0474  [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc     C:\WINDOWS\System32\BthAvctpSvc.dll

01:20:26.0840 0x0474  BthAvctpSvc - ok

01:20:26.0840 0x0474  [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys

01:20:26.0856 0x0474  BthHFEnum - ok

01:20:26.0856 0x0474  [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys

01:20:26.0887 0x0474  BTHMODEM - ok

01:20:27.0106 0x0474  [ EF105DBEB81F14EBDBA5F7977AD8FA91, A4D20038B72361CD95446854F2E538314C4C8B5EA4618AC7B18A43D8AF777A34 ] BTHPORT         C:\WINDOWS\system32\DRIVERS\BTHport.sys

01:20:27.0184 0x0474  BTHPORT - ok

01:20:27.0215 0x0474  [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv         C:\WINDOWS\system32\bthserv.dll

01:20:27.0293 0x0474  bthserv - ok

01:20:27.0371 0x0474  [ 0D5ECDF2601312025811F6AC413F851A, B7E99CF02C6B511BD643E7F8BB59E983D8B65073D9B55ED44457EDC2BBBBC419 ] BTHUSB          C:\WINDOWS\system32\DRIVERS\BTHUSB.sys

01:20:27.0434 0x0474  BTHUSB - ok

01:20:27.0434 0x0474  bttflt - ok

01:20:27.0449 0x0474  buttonconverter - ok

01:20:27.0449 0x0474  [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD             C:\WINDOWS\System32\drivers\CAD.sys

01:20:27.0449 0x0474  CAD - ok

01:20:27.0465 0x0474  [ 91EACB2FCD384C2D71EAF2BAB3FAA5C5, A3BB724570A9E882E8E6AF8CF29BC03DB77B3D31B87DDF6187C101E1B9C2617F ] camsvc          C:\WINDOWS\system32\CapabilityAccessManager.dll

01:20:27.0481 0x0474  camsvc - ok

01:20:27.0481 0x0474  CapImg - ok

01:20:27.0481 0x0474  cdfs - ok

01:20:27.0496 0x0474  [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll

01:20:27.0528 0x0474  CDPSvc - ok

01:20:27.0528 0x0474  [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll

01:20:27.0559 0x0474  CDPUserSvc - ok

01:20:27.0559 0x0474  cdrom - ok

01:20:27.0559 0x0474  [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll

01:20:27.0574 0x0474  CertPropSvc - ok

01:20:27.0574 0x0474  cht4iscsi - ok

01:20:27.0590 0x0474  cht4vbd - ok

01:20:27.0590 0x0474  [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys

01:20:27.0590 0x0474  circlass - ok

01:20:27.0606 0x0474  [ 5619FC2A3AE4F43D4B20D95472ED948E, A5D530FB6AC493FC01489A1D32C311F7D28F0D7B49C950E71F4ADF4FBA302689 ] CldFlt          C:\WINDOWS\system32\drivers\cldflt.sys

01:20:27.0621 0x0474  CldFlt - ok

01:20:27.0621 0x0474  CLFS - ok

01:20:27.0762 0x0474  [ A78E02F198A89C477C08C8C3442A2E00, 8C79387C4828F2D5CDC5874DE31F84D56E716F5D6C4FD5DC5EAAC29D30BA7F3D ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe

01:20:27.0902 0x0474  ClickToRunSvc - ok

01:20:27.0934 0x0474  [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC         C:\WINDOWS\System32\ClipSVC.dll

01:20:27.0965 0x0474  ClipSVC - ok

01:20:27.0965 0x0474  CmBatt - ok

01:20:27.0965 0x0474  CNG - ok

01:20:27.0965 0x0474  [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist     C:\WINDOWS\system32\DRIVERS\cnghwassist.sys

01:20:27.0981 0x0474  cnghwassist - ok

01:20:28.0012 0x0474  [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys

01:20:28.0012 0x0474  CompositeBus - ok

01:20:28.0012 0x0474  COMSysApp - ok

01:20:28.0012 0x0474  condrv - ok

01:20:28.0027 0x0474  CoreMessagingRegistrar - ok

01:20:28.0027 0x0474  CryptSvc - ok

01:20:28.0027 0x0474  [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam             C:\WINDOWS\system32\drivers\dam.sys

01:20:28.0043 0x0474  dam - ok

01:20:28.0043 0x0474  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate        C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

01:20:28.0059 0x0474  dbupdate - ok

01:20:28.0059 0x0474  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem       C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

01:20:28.0059 0x0474  dbupdatem - ok

01:20:28.0059 0x0474  DcomLaunch - ok

01:20:28.0074 0x0474  defragsvc - ok

01:20:28.0090 0x0474  [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll

01:20:28.0106 0x0474  DeviceAssociationService - ok

01:20:28.0106 0x0474  DeviceInstall - ok

01:20:28.0121 0x0474  [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll

01:20:28.0152 0x0474  DevicePickerUserSvc - ok

01:20:28.0152 0x0474  [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll

01:20:28.0199 0x0474  DevicesFlowUserSvc - ok

01:20:28.0199 0x0474  [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll

01:20:28.0215 0x0474  DevQueryBroker - ok

01:20:28.0215 0x0474  Dfsc - ok

01:20:28.0215 0x0474  Dhcp - ok

01:20:28.0215 0x0474  diagnosticshub.standardcollector.service - ok

01:20:28.0230 0x0474  [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc         C:\WINDOWS\system32\DiagSvc.dll

01:20:28.0246 0x0474  diagsvc - ok

01:20:28.0246 0x0474  DiagTrack - ok

01:20:28.0246 0x0474  Disk - ok

01:20:28.0262 0x0474  [ 89FC056F9CEFB85FC7159AA063904AFF, 6B6F86F87C48EE92F616D4EEE624C9711D0606FD651F3B1D4DD5EF3767B76750 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll

01:20:28.0293 0x0474  DmEnrollmentSvc - ok

01:20:28.0293 0x0474  dmvsc - ok

01:20:28.0293 0x0474  [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll

01:20:28.0309 0x0474  dmwappushservice - ok

01:20:28.0309 0x0474  Dnscache - ok

01:20:28.0324 0x0474  [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc         C:\WINDOWS\System32\dot3svc.dll

01:20:28.0340 0x0474  dot3svc - ok

01:20:28.0340 0x0474  [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS             C:\WINDOWS\system32\dps.dll

01:20:28.0355 0x0474  DPS - ok

01:20:28.0355 0x0474  drmkaud - ok

01:20:28.0371 0x0474  [ 5242DC5849014BCFBB3147B76A899783, 759542B42D9DCC224D9CBD19A0C6B8939417F2F08B547BE07FFA3356918C1ED7 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll

01:20:28.0387 0x0474  DsmSvc - ok

01:20:28.0402 0x0474  [ A8923D6A577D176A90A36A9EC0BD4BCB, 5EC87DA3DF7F1869D9542416651606C7731F4D1BDEC42C8A0D5285292EC7EF7C ] DsSvc           C:\WINDOWS\System32\DsSvc.dll

01:20:28.0402 0x0474  DsSvc - ok

01:20:28.0418 0x0474  [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc         C:\WINDOWS\System32\dusmsvc.dll

01:20:28.0434 0x0474  DusmSvc - ok

01:20:28.0434 0x0474  DXGKrnl - ok

01:20:28.0434 0x0474  Eaphost - ok

01:20:28.0449 0x0474  ebdrv - ok

01:20:28.0449 0x0474  EFS - ok

01:20:28.0449 0x0474  EhStorClass - ok

01:20:28.0449 0x0474  EhStorTcgDrv - ok

01:20:28.0449 0x0474  [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll

01:20:28.0465 0x0474  embeddedmode - ok

01:20:28.0480 0x0474  [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc       C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

01:20:28.0496 0x0474  EntAppSvc - ok

01:20:28.0496 0x0474  ErrDev - ok

01:20:28.0512 0x0474  [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem     C:\WINDOWS\system32\es.dll

01:20:28.0527 0x0474  EventSystem - ok

01:20:28.0543 0x0474  [ DDA34282ADCD44D120FF98F07D527DD4, 7C88181A63739E2093574B4972E40AB9DCF811580334D439C8AFC0C72E4EE571 ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe

01:20:28.0559 0x0474  EvtEng - ok

01:20:28.0559 0x0474  exfat - ok

01:20:28.0559 0x0474  fastfat - ok

01:20:28.0574 0x0474  [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax             C:\WINDOWS\system32\fxssvc.exe

01:20:28.0605 0x0474  Fax - ok

01:20:28.0605 0x0474  fdc - ok

01:20:28.0605 0x0474  [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost         C:\WINDOWS\system32\fdPHost.dll

01:20:28.0621 0x0474  fdPHost - ok

01:20:28.0637 0x0474  [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub        C:\WINDOWS\system32\fdrespub.dll

01:20:28.0637 0x0474  FDResPub - ok

01:20:28.0637 0x0474  [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc           C:\WINDOWS\system32\fhsvc.dll

01:20:28.0668 0x0474  fhsvc - ok

01:20:28.0668 0x0474  [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt       C:\WINDOWS\system32\drivers\filecrypt.sys

01:20:28.0684 0x0474  FileCrypt - ok

01:20:28.0684 0x0474  FileInfo - ok

01:20:28.0684 0x0474  Filetrace - ok

01:20:28.0684 0x0474  flpydisk - ok

01:20:28.0684 0x0474  FltMgr - ok

01:20:28.0684 0x0474  FontCache - ok

01:20:28.0699 0x0474  FontCache3.0.0.0 - ok

01:20:28.0730 0x0474  [ 4B5B18BF7E060A7FC7B80D79D542529C, 483E4D96D2E44A135FAD3B9D1AFA05B571418B3BA9864BE751DDA1DAE9D02D77 ] FrameServer     C:\WINDOWS\system32\FrameServer.dll

01:20:28.0793 0x0474  FrameServer - ok

01:20:28.0793 0x0474  FsDepends - ok

01:20:28.0793 0x0474  Fs_Rec - ok

01:20:28.0793 0x0474  fvevol - ok

01:20:28.0793 0x0474  [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys

01:20:28.0808 0x0474  gencounter - ok

01:20:28.0808 0x0474  genericusbfn - ok

01:20:28.0824 0x0474  [ F78BC07DCED5EDDD6D477E923620F8EA, ABE28155100A38A5E1B58FFC8099EF416145278B440A67B8DAFD7715FE412624 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

01:20:28.0855 0x0474  GfExperienceService - ok

01:20:28.0855 0x0474  GPIOClx0101 - ok

01:20:28.0871 0x0474  gpsvc - ok

01:20:28.0871 0x0474  [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys

01:20:28.0871 0x0474  GpuEnergyDrv - ok

01:20:28.0887 0x0474  [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll

01:20:28.0887 0x0474  GraphicsPerfSvc - ok

01:20:28.0902 0x0474  HDAudBus - ok

01:20:28.0902 0x0474  HidBatt - ok

01:20:28.0902 0x0474  [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys

01:20:28.0918 0x0474  HidBth - ok

01:20:28.0918 0x0474  hidi2c - ok

01:20:28.0918 0x0474  hidinterrupt - ok

01:20:28.0918 0x0474  [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys

01:20:28.0933 0x0474  HidIr - ok

01:20:28.0933 0x0474  hidserv - ok

01:20:28.0933 0x0474  HidUsb - ok

01:20:28.0949 0x0474  [ D2D1B7807E14F604CFC6CA260B764D6D, 968288B34D9138AE967B9AC151E6D868B82593FCDBB984FEF59F9D2DC111CFE9 ] HP Comm Recover C:\Program Files\HPCommRecovery\HPCommRecovery.exe

01:20:28.0980 0x0474  HP Comm Recover - detected UnsignedFile.Multi.Generic ( 1 )

01:20:29.0090 0x0474  Detect skipped due to KSN trusted

01:20:29.0090 0x0474  HP Comm Recover - ok

01:20:29.0105 0x0474  [ 87FE7BE97EB16CB1B2E48F88457EBE35, 15EDA9282EDCB7DD26035DD072C68B4E0C21730099EB428F9B6FEF491692BEC6 ] HPJumpStartBridge c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe

01:20:29.0121 0x0474  HPJumpStartBridge - ok

01:20:29.0152 0x0474  [ 0E0E87820BB4431B176A00FB95B5503F, 91D35BEDEAEFA32F8B6A31318E70B954CFA1AFA74D02E3918FEF8135C82C57B3 ] hpqcaslwmiex    C:\Program Files (x86)\HP\Shared\hpqwmiex.exe

01:20:29.0168 0x0474  hpqcaslwmiex - ok

01:20:29.0168 0x0474  HpSAMD - ok

01:20:29.0168 0x0474  [ EC80F3ECC5F8543E22BBCB037D837CA9, 23A4AE80A6C317CE77BD9D352CD9CED8649E3AD98A7C0A2044138BB20B46F398 ] HPSupportSolutionsFrameworkService C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

01:20:29.0183 0x0474  HPSupportSolutionsFrameworkService - ok

01:20:29.0183 0x0474  [ 7109608928D8AB470D60F47BAD5D153A, 6BB4BC1BC35EF506A65D711E39E26362ADDF95D7FAEFCA536D0F512B60F7E03C ] HPWMISVC        c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe

01:20:29.0199 0x0474  HPWMISVC - ok

01:20:29.0199 0x0474  HTTP - ok

01:20:29.0199 0x0474  [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash         C:\WINDOWS\System32\drivers\hvcrash.sys

01:20:29.0215 0x0474  hvcrash - ok

01:20:29.0215 0x0474  [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll

01:20:29.0230 0x0474  HvHost - ok

01:20:29.0230 0x0474  [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice       C:\WINDOWS\system32\drivers\hvservice.sys

01:20:29.0230 0x0474  hvservice - ok

01:20:29.0230 0x0474  [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101      C:\WINDOWS\system32\Drivers\mshwnclx.sys

01:20:29.0246 0x0474  HwNClx0101 - ok

01:20:29.0246 0x0474  hwpolicy - ok

01:20:29.0246 0x0474  hyperkbd - ok

01:20:29.0246 0x0474  HyperVideo - ok

01:20:29.0261 0x0474  i8042prt - ok

01:20:29.0261 0x0474  iagpio - ok

01:20:29.0261 0x0474  iai2c - ok

01:20:29.0261 0x0474  iaLPSS2i_GPIO2 - ok

01:20:29.0261 0x0474  iaLPSS2i_GPIO2_BXT_P - ok

01:20:29.0261 0x0474  iaLPSS2i_I2C - ok

01:20:29.0277 0x0474  iaLPSS2i_I2C_BXT_P - ok

01:20:29.0277 0x0474  iaLPSSi_GPIO - ok

01:20:29.0277 0x0474  iaLPSSi_I2C - ok

01:20:29.0308 0x0474  [ 5C9AAE902452EF47D8C9EA5838E666B9, 9171558EE78B555312FD8D99EDF85849A4CDE87142EB91DB9E8AF92A1DDF664E ] iaStorA         C:\WINDOWS\system32\drivers\iaStorA.sys

01:20:29.0324 0x0474  iaStorA - ok

01:20:29.0324 0x0474  iaStorAVC - ok

01:20:29.0340 0x0474  [ 31BD488EE7F6ED608A7418F6A7C6948D, BB7DC889C0F73FDE089FC0E52D321F29CBB5A65A3D9F90B0B3A730EF938B6178 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

01:20:29.0340 0x0474  IAStorDataMgrSvc - ok

01:20:29.0340 0x0474  iaStorV - ok

01:20:29.0340 0x0474  ibbus - ok

01:20:29.0340 0x0474  ibtsiva - ok

01:20:29.0355 0x0474  [ 3EECA07B4232AC95A43A7BA3D54FE910, DE9776B9779D221BDE9CDF63B033AEDAAE4EA1D6961E5CB794E99198DD5689C5 ] ibtusb          C:\WINDOWS\system32\DRIVERS\ibtusb.sys

01:20:29.0355 0x0474  ibtusb - ok

01:20:29.0355 0x0474  [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc          C:\WINDOWS\System32\tetheringservice.dll

01:20:29.0386 0x0474  icssvc - ok

01:20:29.0386 0x0474  IKEEXT - ok

01:20:29.0386 0x0474  [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd     C:\WINDOWS\System32\drivers\IndirectKmd.sys

01:20:29.0402 0x0474  IndirectKmd - ok

01:20:29.0418 0x0474  [ CC03A8D6443D1BB148A499366612683E, 1EF1A69B60CAB33F63C9A58B2DA0B0FCD8F21AA122F4CE8D953682C20A4BA585 ] InstallService  C:\WINDOWS\system32\InstallService.dll

01:20:29.0465 0x0474  InstallService - ok

01:20:29.0543 0x0474  [ 13AD818FFE1E7524D85E1AA0531C9EA7, 2B10B7BBA88BF04D3863246625E3F4F546AFCA10EB0F078EACC8FDEC301927A1 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys

01:20:29.0636 0x0474  IntcAzAudAddService - ok

01:20:29.0668 0x0474  [ AE32376564771525DCDD2F0280619E1A, 233B7B272DCD9080DE7C9593EB7993745D1037EA87B69617E7176F074DFD5968 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

01:20:29.0683 0x0474  Intel(R) Capability Licensing Service TCP IP Interface - ok

01:20:29.0699 0x0474  [ 56BA2118E48D0BBB980ADAA830220C1D, 88FF0A1E7A87D1B50F90D3088436BE91CFEC6BB3B888EB536D6537468DDC8C29 ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

01:20:29.0714 0x0474  Intel(R) Security Assist - detected UnsignedFile.Multi.Generic ( 1 )

01:20:29.0808 0x0474  Detect skipped due to KSN trusted

01:20:29.0808 0x0474  Intel(R) Security Assist - ok

01:20:29.0824 0x0474  intelide - ok

01:20:29.0824 0x0474  [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys

01:20:29.0839 0x0474  intelpep - ok

01:20:29.0839 0x0474  intelppm - ok

01:20:29.0839 0x0474  [ 94BC499B1EE387370D4BAF8E184066CA, 8FD684CA09E4C295772E5800C5957600F2EFF1C23449704AB95C278B25BD5B47 ] IntelReadyModeDriver C:\WINDOWS\System32\drivers\IntelReadyModeDriver.sys

01:20:29.0855 0x0474  IntelReadyModeDriver - ok

01:20:29.0855 0x0474  [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys

01:20:29.0855 0x0474  iorate - ok

01:20:29.0871 0x0474  [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

01:20:29.0886 0x0474  IpFilterDriver - ok

01:20:29.0902 0x0474  [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll

01:20:29.0918 0x0474  iphlpsvc - ok

01:20:29.0933 0x0474  IPMIDRV - ok

01:20:29.0933 0x0474  [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys

01:20:29.0949 0x0474  IPNAT - ok

01:20:29.0949 0x0474  [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT             C:\WINDOWS\System32\drivers\ipt.sys

01:20:29.0964 0x0474  IPT - ok

01:20:29.0964 0x0474  [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc    C:\WINDOWS\System32\IpxlatCfg.dll

01:20:29.0980 0x0474  IpxlatCfgSvc - ok

01:20:29.0980 0x0474  [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda            C:\WINDOWS\system32\drivers\irda.sys

01:20:29.0996 0x0474  irda - ok

01:20:29.0996 0x0474  [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys

01:20:29.0996 0x0474  IRENUM - ok

01:20:30.0011 0x0474  [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon           C:\WINDOWS\System32\irmon.dll

01:20:30.0011 0x0474  irmon - ok

01:20:30.0027 0x0474  [ E4A28E3298A7209747A199FDE619FFCC, E809D6D37FFAC050B759B6BC125AB502FD5EDF054FA4316EDBA6671EE24DBF2C ] IRMTService     C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe

01:20:30.0027 0x0474  IRMTService - ok

01:20:30.0027 0x0474  [ 8CA2C261AB69D0195BED81E58EDF167D, B192B7E42543C277BF8F6D48649DA4C121E6C23BDD0B51A973BA7A2D95525478 ] isaHelperSvc    C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe

01:20:30.0043 0x0474  isaHelperSvc - detected UnsignedFile.Multi.Generic ( 1 )

01:20:30.0136 0x0474  Detect skipped due to KSN trusted

01:20:30.0136 0x0474  isaHelperSvc - ok

01:20:30.0152 0x0474  isapnp - ok

01:20:30.0152 0x0474  iScsiPrt - ok

01:20:30.0152 0x0474  ItSas35i - ok

01:20:30.0152 0x0474  [ 735E3E8507957F426CB7D93B35741C91, 386956AD22513DF3A10C7BA7C9503F2DBD5262A3CBD0C4EEFE540E3CFC27D348 ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

01:20:30.0168 0x0474  jhi_service - ok

01:20:30.0168 0x0474  kbdclass - ok

01:20:30.0168 0x0474  kbdhid - ok

01:20:30.0168 0x0474  kdnic - ok

01:20:30.0183 0x0474  KeyIso - ok

01:20:30.0183 0x0474  KSecDD - ok

01:20:30.0183 0x0474  KSecPkg - ok

01:20:30.0183 0x0474  ksthunk - ok

01:20:30.0199 0x0474  [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll

01:20:30.0214 0x0474  KtmRm - ok

01:20:30.0214 0x0474  LanmanServer - ok

01:20:30.0214 0x0474  LanmanWorkstation - ok

01:20:30.0214 0x0474  [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc           C:\WINDOWS\System32\lfsvc.dll

01:20:30.0230 0x0474  lfsvc - ok

01:20:30.0230 0x0474  [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll

01:20:30.0246 0x0474  LicenseManager - ok

01:20:30.0246 0x0474  [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys

01:20:30.0261 0x0474  lltdio - ok

01:20:30.0277 0x0474  [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll

01:20:30.0293 0x0474  lltdsvc - ok

01:20:30.0293 0x0474  lmhosts - ok

01:20:30.0293 0x0474  [ 2F085AF4E4E70B59F50A0948A6E2972B, BB24C11BDD069E8DF5140593D957D45146B36D411B10A79355EDFBE8180C8C84 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

01:20:30.0308 0x0474  LMS - ok

01:20:30.0308 0x0474  LSI_SAS - ok

01:20:30.0324 0x0474  LSI_SAS2i - ok

01:20:30.0324 0x0474  LSI_SAS3i - ok

01:20:30.0324 0x0474  LSI_SSS - ok

01:20:30.0324 0x0474  LSM - ok

01:20:30.0324 0x0474  [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys

01:20:30.0339 0x0474  luafv - ok

01:20:30.0339 0x0474  [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc          C:\WINDOWS\System32\LanguageOverlayServer.dll

01:20:30.0355 0x0474  LxpSvc - ok

01:20:30.0371 0x0474  [ 1C1FF36E51F73989FB4DD2DBAFAE11EC, B5C0B169BFEF5FD769745F924B3F30C960A555F8B0C0C7315B273435D9F246D5 ] MapsBroker      C:\WINDOWS\System32\moshost.dll

01:20:30.0371 0x0474  MapsBroker - ok

01:20:30.0386 0x0474  mausbhost - ok

01:20:30.0386 0x0474  mausbip - ok

01:20:30.0480 0x0474  [ 96FA5B38DD94C8D49289CE75150D97C3, 31D2435E026B0425D47B479E7E58CAF7BEF5C2D23F9D164A59FF2BF27D49489F ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe

01:20:30.0574 0x0474  MBAMService - ok

01:20:30.0589 0x0474  [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy   C:\WINDOWS\System32\Drivers\mbamswissarmy.sys

01:20:30.0605 0x0474  MBAMSwissArmy - ok

01:20:30.0605 0x0474  megasas - ok

01:20:30.0605 0x0474  megasas2i - ok

01:20:30.0605 0x0474  megasas35i - ok

01:20:30.0605 0x0474  megasr - ok

01:20:30.0621 0x0474  [ 8EC6459491D8508BBA5E3CEC5C930914, E01AEE2E6F569429BC5582AEB63A2CB288499A878B0806D21CC9D78F00E0B284 ] MEIx64          C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys

01:20:30.0621 0x0474  MEIx64 - ok

01:20:30.0636 0x0474  [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll

01:20:30.0636 0x0474  MessagingService - ok

01:20:30.0652 0x0474  mlx4_bus - ok

01:20:30.0652 0x0474  MMCSS - ok

01:20:30.0652 0x0474  [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem           C:\WINDOWS\system32\drivers\modem.sys

01:20:30.0667 0x0474  Modem - ok

01:20:30.0667 0x0474  [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor         C:\WINDOWS\System32\drivers\monitor.sys

01:20:30.0683 0x0474  monitor - ok

01:20:30.0683 0x0474  mouclass - ok

01:20:30.0683 0x0474  mouhid - ok

01:20:30.0683 0x0474  mountmgr - ok

01:20:30.0683 0x0474  [ 1D8121F646343BD58B25ACBD0E5E9A8A, 5189E054F64159931B11699AAB3B0F9C21170253BED8B9271B74FDB452FBD263 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

01:20:30.0699 0x0474  MozillaMaintenance - ok

01:20:30.0699 0x0474  [ BF2513029E231BE96D82F7C3ABFF87F4, F6DB64112CC50EEE495E2D7C61B8BDBE757A31B03144B0396615FD38C312824E ] MpKsl485ced0d   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{48C8469B-B924-4406-8720-0A026AF42543}\MpKsl485ced0d.sys

01:20:30.0714 0x0474  MpKsl485ced0d - ok

01:20:30.0714 0x0474  mpsdrv - ok

01:20:30.0714 0x0474  mpssvc - ok

01:20:30.0714 0x0474  [ 1E49E45D68E4E7779B9E36F39407C5D9, 08E422BE41A69EE3D9AC482DED2A35D0EF1F366CCC7E6675720479D28E23B6A8 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys

01:20:30.0730 0x0474  MRxDAV - ok

01:20:30.0730 0x0474  mrxsmb - ok

01:20:30.0730 0x0474  mrxsmb20 - ok

01:20:30.0746 0x0474  [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys

01:20:30.0746 0x0474  MsBridge - ok

01:20:30.0761 0x0474  [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC           C:\WINDOWS\System32\msdtc.exe

01:20:30.0777 0x0474  MSDTC - ok

01:20:30.0777 0x0474  Msfs - ok

01:20:30.0777 0x0474  [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys

01:20:30.0792 0x0474  msgpiowin32 - ok

01:20:30.0792 0x0474  mshidkmdf - ok

01:20:30.0792 0x0474  [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys

01:20:30.0808 0x0474  mshidumdf - ok

01:20:30.0808 0x0474  msisadrv - ok

01:20:30.0808 0x0474  MSiSCSI - ok

01:20:30.0808 0x0474  msiserver - ok

01:20:30.0808 0x0474  MSKSSRV - ok

01:20:30.0808 0x0474  [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys

01:20:30.0824 0x0474  MsLldp - ok

01:20:30.0824 0x0474  MSPCLOCK - ok

01:20:30.0839 0x0474  MSPQM - ok

01:20:30.0839 0x0474  MsRPC - ok

01:20:30.0839 0x0474  mssmbios - ok

01:20:30.0839 0x0474  MSTEE - ok

01:20:30.0839 0x0474  MTConfig - ok

01:20:30.0839 0x0474  Mup - ok

01:20:30.0855 0x0474  mvumis - ok

01:20:30.0855 0x0474  [ E0C3F5D83B8C78CFB58CB858573141C3, C8378584FD478CB00CE833DB257AAE7226064343E2DFB9453BF0270626022357 ] MyWiFiDHCPDNS   C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

01:20:30.0855 0x0474  MyWiFiDHCPDNS - ok

01:20:30.0870 0x0474  NativeWifiP - ok

01:20:30.0886 0x0474  [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll

01:20:30.0917 0x0474  NaturalAuthentication - ok

01:20:30.0917 0x0474  [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll

01:20:30.0933 0x0474  NcaSvc - ok

01:20:30.0933 0x0474  [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService      C:\WINDOWS\System32\ncbservice.dll

01:20:30.0964 0x0474  NcbService - ok

01:20:30.0964 0x0474  [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll

01:20:30.0980 0x0474  NcdAutoSetup - ok

01:20:30.0980 0x0474  ndfltr - ok

01:20:30.0980 0x0474  NDIS - ok

01:20:30.0980 0x0474  [ AF73B18F3096B165A6F4417C5ED36B01, B0FA9E52D7208F756103E2E853F1D17F594C9FDD2E76304743C581613E612449 ] NdisCap         C:\WINDOWS\system32\drivers\ndiscap.sys

01:20:30.0995 0x0474  NdisCap - ok

01:20:30.0995 0x0474  [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys

01:20:31.0011 0x0474  NdisImPlatform - ok

01:20:31.0011 0x0474  NdisTapi - ok

01:20:31.0011 0x0474  Ndisuio - ok

01:20:31.0011 0x0474  NdisVirtualBus - ok

01:20:31.0027 0x0474  NdisWan - ok

01:20:31.0027 0x0474  ndiswanlegacy - ok

01:20:31.0027 0x0474  ndproxy - ok

01:20:31.0027 0x0474  [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys

01:20:31.0042 0x0474  Ndu - ok

01:20:31.0042 0x0474  NetAdapterCx - ok

01:20:31.0042 0x0474  NetBIOS - ok

01:20:31.0058 0x0474  NetBT - ok

01:20:31.0058 0x0474  Netlogon - ok

01:20:31.0058 0x0474  Netman - ok

01:20:31.0058 0x0474  [ E9931F57F05696CBF53A086449D97BF6, 986C99033AA10A258F0CC42727B14C5812BC76AB535CDF54FCA1B038C4BF9546 ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll

01:20:31.0089 0x0474  netprofm - ok

01:20:31.0089 0x0474  NetSetupSvc - ok

01:20:31.0105 0x0474  [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

01:20:31.0105 0x0474  NetTcpPortSharing - ok

01:20:31.0105 0x0474  netvsc - ok

01:20:31.0230 0x0474  [ 6F6112C8432B9D634D5F1E03C6F52EDF, 903DA106626CB68F19050A3E9CF7DC6A450F9C893D262A8C0DD8B848C807A019 ] Netwtw04        C:\WINDOWS\system32\DRIVERS\Netwtw04.sys

01:20:31.0370 0x0474  Netwtw04 - ok

01:20:31.0402 0x0474  [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll

01:20:31.0417 0x0474  NgcCtnrSvc - ok

01:20:31.0433 0x0474  [ DB3589FF79F06EC1967EBA56C7249E3C, C3F1B4687F2AAE869C8566B38DCFE507F8E7201A2241BD5342AAC22A2370D5E4 ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll

01:20:31.0464 0x0474  NgcSvc - ok

01:20:31.0464 0x0474  NlaSvc - ok

01:20:31.0464 0x0474  Npfs - ok

01:20:31.0464 0x0474  npsvctrig - ok

01:20:31.0480 0x0474  nsi - ok

01:20:31.0480 0x0474  nsiproxy - ok

01:20:31.0480 0x0474  Ntfs - ok

01:20:31.0480 0x0474  Null - ok

01:20:31.0480 0x0474  nvdimm - ok

01:20:31.0495 0x0474  [ 444736386FC240A8B6FCEFC149550A08, 9FD8963CE638A8FB3E3B6D6B54F38545467172F3D92F6CF191F4C09A94B1ADCF ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys

01:20:31.0495 0x0474  NVHDA - ok

01:20:31.0792 0x0474  [ 28C065442D11A167D19196B7E9A71B66, B3B0FC5CC8D7828A3D05C3FEC415B1056D54F8FF5FA0027E3C93D91B8EE33147 ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nvhdc.inf_amd64_2707c70d42c54b4e\nvlddmkm.sys

01:20:32.0058 0x0474  nvlddmkm - ok

01:20:32.0167 0x0474  [ 020F45E362D3B57CCC5735582BB1A6EC, E2D953CEF208528382153D06FED8394BEB52657C547E4D2D2954E537C9A382DC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

01:20:32.0198 0x0474  NvNetworkService - ok

01:20:32.0198 0x0474  nvraid - ok

01:20:32.0198 0x0474  nvstor - ok

01:20:32.0198 0x0474  [ F82BCEB9F57B2959F6AAE2A3DDA892A8, 5B02C74BAF0E12B84F239B1449DAA955B28BD5BA7D35D315DB57F45E042E0DB3 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

01:20:32.0214 0x0474  NvStreamKms - ok

01:20:32.0245 0x0474  [ 0EDF9504CA5174075BA5902AFC1F57C8, 8E210E71BA91813D3BB6B59E5F6AD0889711336AD12B1B1C67CCC882A6ED3E53 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

01:20:32.0292 0x0474  NvStreamSvc - ok

01:20:32.0292 0x0474  [ 38175904276F86EA4704EC13B77FB4B0, 4965BCF17E3D9EE4CE2E4DC158C5E7179C3ABBAE9D640FBCFFBCA973F21DDDF6 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys

01:20:32.0292 0x0474  nvvad_WaveExtensible - ok

01:20:32.0308 0x0474  [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll

01:20:32.0323 0x0474  OneSyncSvc - ok

01:20:32.0323 0x0474  [ 27F958F36ED7757D8579E7028DC2B5D3, F99336B951CE5DC89C6B16F37ABC29C3F511E784874B21B97042023EA816D468 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

01:20:32.0339 0x0474  ose - ok

01:20:32.0339 0x0474  [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll

01:20:32.0370 0x0474  p2pimsvc - ok

01:20:32.0370 0x0474  [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc          C:\WINDOWS\system32\p2psvc.dll

01:20:32.0401 0x0474  p2psvc - ok

01:20:32.0401 0x0474  Parport - ok

01:20:32.0401 0x0474  partmgr - ok

01:20:32.0417 0x0474  [ 0CF87FC2DA60940031D553F8FDF5066B, 95F8A15210D6F431B84C6E18643F93C9D16F53D3FF4873F9A327A77924B4B9F8 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll

01:20:32.0433 0x0474  PcaSvc - ok

01:20:32.0433 0x0474  pci - ok

01:20:32.0433 0x0474  pciide - ok

01:20:32.0433 0x0474  pcmcia - ok

01:20:32.0433 0x0474  pcw - ok

01:20:32.0433 0x0474  pdc - ok

01:20:32.0448 0x0474  [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys

01:20:32.0479 0x0474  PEAUTH - ok

01:20:32.0479 0x0474  percsas2i - ok

01:20:32.0479 0x0474  percsas3i - ok

01:20:32.0511 0x0474  [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe

01:20:32.0542 0x0474  PerfHost - ok

01:20:32.0558 0x0474  [ 630C3D645133B759CFC0E354E2A55D11, 094465C2DB324A784EA505C9C2CF06A12326F105EF767126BBDFBFE3D081E6E0 ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll

01:20:32.0589 0x0474  PhoneSvc - ok

01:20:32.0604 0x0474  [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll

01:20:32.0620 0x0474  PimIndexMaintenanceSvc - ok

01:20:32.0636 0x0474  [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla             C:\WINDOWS\system32\pla.dll

01:20:32.0683 0x0474  pla - ok

01:20:32.0698 0x0474  PlugPlay - ok

01:20:32.0698 0x0474  pmem - ok

01:20:32.0698 0x0474  [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM          C:\WINDOWS\System32\drivers\pnpmem.sys

01:20:32.0698 0x0474  PNPMEM - ok

01:20:32.0714 0x0474  [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll

01:20:32.0714 0x0474  PNRPAutoReg - ok

01:20:32.0729 0x0474  [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll

01:20:32.0745 0x0474  PNRPsvc - ok

01:20:32.0745 0x0474  PolicyAgent - ok

01:20:32.0745 0x0474  Power - ok

01:20:32.0745 0x0474  PptpMiniport - ok

01:20:32.0808 0x0474  [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll

01:20:32.0901 0x0474  PrintNotify - ok

01:20:32.0917 0x0474  [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll

01:20:32.0932 0x0474  PrintWorkflowUserSvc - ok

01:20:32.0932 0x0474  Processor - ok

01:20:32.0932 0x0474  ProfSvc - ok

01:20:32.0932 0x0474  [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys

01:20:32.0948 0x0474  Psched - ok

01:20:32.0948 0x0474  [ 29F12CD3F77B65C7E37F8517395B13D2, 690517756A21B3DE4CF4A027AA712FC62DB6F5F2E89B4D2DE220A29C4A36878B ] PushToInstall   C:\WINDOWS\system32\PushToInstall.dll

01:20:32.0964 0x0474  PushToInstall - ok

01:20:32.0979 0x0474  [ 07D57B890DD5693A6AB660CBAE8F91B4, 934895A41C116056E22FE3298418332A9F4280F96E96EEE06C977A4925395674 ] PxHlpa64        C:\WINDOWS\system32\Drivers\PxHlpa64.sys

01:20:32.0979 0x0474  PxHlpa64 - ok

01:20:32.0979 0x0474  [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE           C:\WINDOWS\system32\qwave.dll

01:20:32.0995 0x0474  QWAVE - ok

01:20:33.0011 0x0474  [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys

01:20:33.0011 0x0474  QWAVEdrv - ok

01:20:33.0011 0x0474  Ramdisk - ok

01:20:33.0026 0x0474  RasAcd - ok

01:20:33.0026 0x0474  RasAgileVpn - ok

01:20:33.0026 0x0474  RasAuto - ok

01:20:33.0026 0x0474  Rasl2tp - ok

01:20:33.0026 0x0474  RasMan - ok

01:20:33.0026 0x0474  RasPppoe - ok

01:20:33.0042 0x0474  RasSstp - ok

01:20:33.0042 0x0474  rdbss - ok

01:20:33.0042 0x0474  [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys

01:20:33.0057 0x0474  rdpbus - ok

01:20:33.0057 0x0474  [ 52A6CC99F5934CFAE88353C47B6193E7, 37F6991FA526036866E8CFC938A16750644AD764FA52BB102B11B5D594DB7E96 ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys

01:20:33.0073 0x0474  RDPDR - ok

01:20:33.0073 0x0474  [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys

01:20:33.0089 0x0474  RdpVideoMiniport - ok

01:20:33.0089 0x0474  [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys

01:20:33.0104 0x0474  rdyboost - ok

01:20:33.0104 0x0474  ReFS - ok

01:20:33.0104 0x0474  ReFSv1 - ok

01:20:33.0104 0x0474  [ 2C07420FA14E4F10AEA3B9184C53FA49, 4221812D97F2E8BFE76D04A53226AEC9D87E947D86B44AEFE22785BD79AE818E ] RegSrvc         C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

01:20:33.0120 0x0474  RegSrvc - ok

01:20:33.0120 0x0474  [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll

01:20:33.0151 0x0474  RemoteAccess - ok

01:20:33.0151 0x0474  [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll

01:20:33.0167 0x0474  RemoteRegistry - ok

01:20:33.0182 0x0474  [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo      C:\WINDOWS\system32\RDXService.dll

01:20:33.0198 0x0474  RetailDemo - ok

01:20:33.0214 0x0474  [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy         C:\WINDOWS\System32\drivers\rhproxy.sys

01:20:33.0214 0x0474  rhproxy - ok

01:20:33.0229 0x0474  [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc           C:\WINDOWS\System32\RMapi.dll

01:20:33.0245 0x0474  RmSvc - ok

01:20:33.0245 0x0474  RpcEptMapper - ok

01:20:33.0245 0x0474  [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator      C:\WINDOWS\system32\locator.exe

01:20:33.0261 0x0474  RpcLocator - ok

01:20:33.0261 0x0474  RpcSs - ok

01:20:33.0261 0x0474  [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys

01:20:33.0276 0x0474  rspndr - ok

01:20:33.0292 0x0474  [ D23AF14A8C26855B3D6CB5F8E32B08F3, 6B903B9C97CECE2AD41614F5129EB9E5DC5BC3AB6A3E28D51940CD1F414041FA ] rt640x64        C:\WINDOWS\System32\drivers\rt640x64.sys

01:20:33.0307 0x0474  rt640x64 - ok

01:20:33.0323 0x0474  [ D1469836D54BB8D40663172D6CDB4270, A0A5F2C0BC6C2A82580D052176D9514EDEF090721D6CB5749DBE1A73E4E461AB ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

01:20:33.0323 0x0474  RtkAudioService - ok

01:20:33.0339 0x0474  [ 9B78249A7866242755C866CE3CA9CA72, 4A19C8E3DCA6E4437FB7E6EA3723D6E9EE0B75C65E69BDA514E97813E207149A ] RTSUER          C:\WINDOWS\system32\Drivers\RtsUer.sys

01:20:33.0339 0x0474  RTSUER - ok

01:20:33.0339 0x0474  [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys

01:20:33.0354 0x0474  s3cap - ok

01:20:33.0354 0x0474  SamSs - ok

01:20:33.0370 0x0474  sbp2port - ok

01:20:33.0370 0x0474  [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll

01:20:33.0386 0x0474  SCardSvr - ok

01:20:33.0401 0x0474  [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll

01:20:33.0417 0x0474  ScDeviceEnum - ok

01:20:33.0417 0x0474  [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys

01:20:33.0432 0x0474  scfilter - ok

01:20:33.0448 0x0474  [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule        C:\WINDOWS\system32\schedsvc.dll

01:20:33.0479 0x0474  Schedule - ok

01:20:33.0479 0x0474  scmbus - ok

01:20:33.0479 0x0474  [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll

01:20:33.0495 0x0474  SCPolicySvc - ok

01:20:33.0510 0x0474  sdbus - ok

01:20:33.0510 0x0474  [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd           C:\WINDOWS\System32\drivers\SDFRd.sys

01:20:33.0510 0x0474  SDFRd - ok

01:20:33.0510 0x0474  [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll

01:20:33.0542 0x0474  SDRSVC - ok

01:20:33.0542 0x0474  sdstor - ok

01:20:33.0542 0x0474  [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon        C:\WINDOWS\system32\seclogon.dll

01:20:33.0557 0x0474  seclogon - ok

01:20:33.0573 0x0474  [ 1E8CC4964FEECEE44D720A5130075F79, 75656541633FE90045183C68F4A81F1AA305E4A03CFBF7C50F226F18000924D5 ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe

01:20:33.0589 0x0474  SecurityHealthService - ok

01:20:33.0604 0x0474  [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc        C:\WINDOWS\system32\SEMgrSvc.dll

01:20:33.0651 0x0474  SEMgrSvc - ok

01:20:33.0651 0x0474  [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS            C:\WINDOWS\System32\sens.dll

01:20:33.0667 0x0474  SENS - ok

01:20:33.0698 0x0474  [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe

01:20:33.0729 0x0474  SensorDataService - ok

01:20:33.0745 0x0474  [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService   C:\WINDOWS\system32\SensorService.dll

01:20:33.0776 0x0474  SensorService - ok

01:20:33.0792 0x0474  [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll

01:20:33.0807 0x0474  SensrSvc - ok

01:20:33.0807 0x0474  SerCx - ok

01:20:33.0807 0x0474  SerCx2 - ok

01:20:33.0807 0x0474  Serenum - ok

01:20:33.0807 0x0474  Serial - ok

01:20:33.0807 0x0474  sermouse - ok

01:20:33.0823 0x0474  [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv      C:\WINDOWS\system32\sessenv.dll

01:20:33.0839 0x0474  SessionEnv - ok

01:20:33.0854 0x0474  sfloppy - ok

01:20:33.0854 0x0474  [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent       C:\WINDOWS\system32\drivers\SgrmAgent.sys

01:20:33.0854 0x0474  SgrmAgent - ok

01:20:33.0870 0x0474  [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker      C:\WINDOWS\system32\SgrmBroker.exe

01:20:33.0870 0x0474  SgrmBroker - ok

01:20:33.0885 0x0474  [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll

01:20:33.0917 0x0474  SharedAccess - ok

01:20:33.0932 0x0474  [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll

01:20:33.0948 0x0474  SharedRealitySvc - ok

01:20:33.0964 0x0474  [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll

01:20:33.0995 0x0474  ShellHWDetection - ok

01:20:33.0995 0x0474  [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll

01:20:34.0010 0x0474  shpamsvc - ok

01:20:34.0010 0x0474  SiSRaid2 - ok

01:20:34.0010 0x0474  SiSRaid4 - ok

01:20:34.0026 0x0474  smphost - ok

01:20:34.0026 0x0474  [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter       C:\WINDOWS\system32\SmsRouterSvc.dll

01:20:34.0057 0x0474  SmsRouter - ok

01:20:34.0057 0x0474  [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe

01:20:34.0073 0x0474  SNMPTRAP - ok

01:20:34.0073 0x0474  spaceport - ok

01:20:34.0073 0x0474  [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys

01:20:34.0088 0x0474  SpatialGraphFilter - ok

01:20:34.0088 0x0474  SpbCx - ok

01:20:34.0088 0x0474  spectrum - ok

01:20:34.0104 0x0474  [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler         C:\WINDOWS\System32\spoolsv.exe

01:20:34.0135 0x0474  Spooler - ok

01:20:34.0198 0x0474  [ FEEC8055C5986182C717DD888000AEF6, E09B7B1DE43A226842A4B8C591D712E51585BC7E8A39CFB8852CBF16D234C3A6 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe

01:20:34.0292 0x0474  sppsvc - ok

01:20:34.0307 0x0474  srv2 - ok

01:20:34.0307 0x0474  srvnet - ok

01:20:34.0307 0x0474  [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll

01:20:34.0323 0x0474  SSDPSRV - ok

01:20:34.0338 0x0474  [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent       C:\WINDOWS\System32\OpenSSH\ssh-agent.exe

01:20:34.0354 0x0474  ssh-agent - ok

01:20:34.0370 0x0474  SstpSvc - ok

01:20:34.0432 0x0474  [ BDFDF0A5B3622E4320C72D5B9619C9B2, EC0B8A80302B118D6148B9B4488D3E0D220B23FFC9F28F9956F3D46265CBEF14 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll

01:20:34.0526 0x0474  StateRepository - ok

01:20:34.0541 0x0474  stexstor - ok

01:20:34.0557 0x0474  [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc          C:\WINDOWS\System32\wiaservc.dll

01:20:34.0573 0x0474  stisvc - ok

01:20:34.0588 0x0474  storahci - ok

01:20:34.0588 0x0474  storflt - ok

01:20:34.0588 0x0474  stornvme - ok

01:20:34.0588 0x0474  storqosflt - ok

01:20:34.0588 0x0474  StorSvc - ok

01:20:34.0588 0x0474  storufs - ok

01:20:34.0588 0x0474  storvsc - ok

01:20:34.0604 0x0474  svsvc - ok

01:20:34.0620 0x0474  swenum - ok

01:20:34.0635 0x0474  swprv - ok

01:20:34.0635 0x0474  [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys

01:20:34.0651 0x0474  Synth3dVsc - ok

01:20:34.0666 0x0474  [ 62492FAAC26223E8A21E79A2331A3F10, 164C2650EAD344B6DFF95B8275436231E7994B7F06ACB3DA19054849BED61FD2 ] SysMain         C:\WINDOWS\system32\sysmain.dll

01:20:34.0698 0x0474  SysMain - ok

01:20:34.0698 0x0474  SystemEventsBroker - ok

01:20:34.0698 0x0474  [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll

01:20:34.0729 0x0474  TabletInputService - ok

01:20:34.0729 0x0474  [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll

01:20:34.0745 0x0474  TapiSrv - ok

01:20:34.0760 0x0474  Tcpip - ok

01:20:34.0760 0x0474  Tcpip6 - ok

01:20:34.0760 0x0474  [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys

01:20:34.0776 0x0474  tcpipreg - ok

01:20:34.0776 0x0474  tdx - ok

01:20:34.0776 0x0474  [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys

01:20:34.0776 0x0474  terminpt - ok

01:20:34.0807 0x0474  [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService     C:\WINDOWS\System32\termsrv.dll

01:20:34.0838 0x0474  TermService - ok

01:20:34.0838 0x0474  [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes          C:\WINDOWS\system32\themeservice.dll

01:20:34.0854 0x0474  Themes - ok

01:20:34.0854 0x0474  [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe

01:20:34.0885 0x0474  TieringEngineService - ok

01:20:34.0885 0x0474  TimeBrokerSvc - ok

01:20:34.0901 0x0474  [ 673FB0E68AADCCF840AC7A56A9B38150, A9A1CF08D544A488ECABBFBD994C3A8CEB8CFE86A098DAB8533430BABDEA27EB ] TokenBroker     C:\WINDOWS\System32\TokenBroker.dll

01:20:34.0948 0x0474  TokenBroker - ok

01:20:34.0948 0x0474  TPM - ok

01:20:34.0963 0x0474  [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks          C:\WINDOWS\System32\trkwks.dll

01:20:34.0979 0x0474  TrkWks - ok

01:20:34.0979 0x0474  TrustedInstaller - ok

01:20:34.0979 0x0474  [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys

01:20:34.0995 0x0474  TsUsbFlt - ok

01:20:34.0995 0x0474  [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys

01:20:35.0010 0x0474  TsUsbGD - ok

01:20:35.0010 0x0474  [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel          C:\WINDOWS\system32\drivers\tunnel.sys

01:20:35.0026 0x0474  tunnel - ok

01:20:35.0026 0x0474  [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll

01:20:35.0041 0x0474  tzautoupdate - ok

01:20:35.0041 0x0474  UASPStor - ok

01:20:35.0057 0x0474  [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101       C:\WINDOWS\system32\Drivers\UcmCx.sys

01:20:35.0057 0x0474  UcmCx0101 - ok

01:20:35.0073 0x0474  [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys

01:20:35.0088 0x0474  UcmTcpciCx0101 - ok

01:20:35.0088 0x0474  [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi         C:\WINDOWS\System32\drivers\UcmUcsi.sys

01:20:35.0104 0x0474  UcmUcsi - ok

01:20:35.0104 0x0474  Ucx01000 - ok

01:20:35.0104 0x0474  UdeCx - ok

01:20:35.0104 0x0474  udfs - ok

01:20:35.0104 0x0474  UEFI - ok

01:20:35.0120 0x0474  [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys

01:20:35.0120 0x0474  Ufx01000 - ok

01:20:35.0135 0x0474  UfxChipidea - ok

01:20:35.0135 0x0474  ufxsynopsys - ok

01:20:35.0135 0x0474  umbus - ok

01:20:35.0135 0x0474  UmPass - ok

01:20:35.0151 0x0474  [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll

01:20:35.0166 0x0474  UmRdpService - ok

01:20:35.0182 0x0474  [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc     C:\WINDOWS\System32\unistore.dll

01:20:35.0229 0x0474  UnistoreSvc - ok

01:20:35.0244 0x0474  [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost        C:\WINDOWS\System32\upnphost.dll

01:20:35.0260 0x0474  upnphost - ok

01:20:35.0260 0x0474  [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea     C:\WINDOWS\System32\drivers\urschipidea.sys

01:20:35.0276 0x0474  UrsChipidea - ok

01:20:35.0276 0x0474  [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys

01:20:35.0291 0x0474  UrsCx01000 - ok

01:20:35.0291 0x0474  [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys     C:\WINDOWS\System32\drivers\urssynopsys.sys

01:20:35.0291 0x0474  UrsSynopsys - ok

01:20:35.0291 0x0474  usbccgp - ok

01:20:35.0307 0x0474  [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys

01:20:35.0307 0x0474  usbcir - ok

01:20:35.0307 0x0474  usbehci - ok

01:20:35.0323 0x0474  usbhub - ok

01:20:35.0323 0x0474  USBHUB3 - ok

01:20:35.0323 0x0474  usbohci - ok

01:20:35.0323 0x0474  [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys

01:20:35.0338 0x0474  usbprint - ok

01:20:35.0338 0x0474  usbser - ok

01:20:35.0338 0x0474  USBSTOR - ok

01:20:35.0338 0x0474  usbuhci - ok

01:20:35.0338 0x0474  USBXHCI - ok

01:20:35.0369 0x0474  [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc     C:\WINDOWS\System32\userdataservice.dll

01:20:35.0416 0x0474  UserDataSvc - ok

01:20:35.0416 0x0474  UserManager - ok

01:20:35.0448 0x0474  [ 6103984EBC387D6D27BA003EED63217D, 7F9BD12F75F98E593C753A3397EE8F9E59D944BC4EFBC52279A14BA93A7FA9AE ] UsoSvc          C:\WINDOWS\system32\usocore.dll

01:20:35.0479 0x0474  UsoSvc - ok

01:20:35.0494 0x0474  [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc          C:\WINDOWS\System32\vac.dll

01:20:35.0510 0x0474  VacSvc - ok

01:20:35.0510 0x0474  VaultSvc - ok

01:20:35.0510 0x0474  vdrvroot - ok

01:20:35.0510 0x0474  vds - ok

01:20:35.0526 0x0474  VerifierExt - ok

01:20:35.0526 0x0474  vhdmp - ok

01:20:35.0526 0x0474  vhf - ok

01:20:35.0526 0x0474  vmbus - ok

01:20:35.0526 0x0474  VMBusHID - ok

01:20:35.0526 0x0474  [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid           C:\WINDOWS\System32\drivers\vmgid.sys

01:20:35.0541 0x0474  vmgid - ok

01:20:35.0557 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll

01:20:35.0573 0x0474  vmicguestinterface - ok

01:20:35.0573 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat   C:\WINDOWS\System32\icsvc.dll

01:20:35.0588 0x0474  vmicheartbeat - ok

01:20:35.0588 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll

01:20:35.0604 0x0474  vmickvpexchange - ok

01:20:35.0619 0x0474  [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv         C:\WINDOWS\System32\icsvcext.dll

01:20:35.0635 0x0474  vmicrdv - ok

01:20:35.0635 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll

01:20:35.0651 0x0474  vmicshutdown - ok

01:20:35.0666 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll

01:20:35.0666 0x0474  vmictimesync - ok

01:20:35.0682 0x0474  [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession   C:\WINDOWS\System32\icsvc.dll

01:20:35.0697 0x0474  vmicvmsession - ok

01:20:35.0697 0x0474  [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss         C:\WINDOWS\System32\icsvcext.dll

01:20:35.0713 0x0474  vmicvss - ok

01:20:35.0713 0x0474  volmgr - ok

01:20:35.0713 0x0474  volmgrx - ok

01:20:35.0729 0x0474  volsnap - ok

01:20:35.0729 0x0474  volume - ok

01:20:35.0729 0x0474  [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci            C:\WINDOWS\System32\drivers\vpci.sys

01:20:35.0729 0x0474  vpci - ok

01:20:35.0744 0x0474  vsmraid - ok

01:20:35.0744 0x0474  VSS - ok

01:20:35.0744 0x0474  VSTXRAID - ok

01:20:35.0744 0x0474  vwifibus - ok

01:20:35.0744 0x0474  vwififlt - ok

01:20:35.0744 0x0474  vwifimp - ok

01:20:35.0760 0x0474  W32Time - ok

01:20:35.0760 0x0474  [ 244BA3FE721EAF5377634A4A39EB323D, A009894399149AC3442462DDB44C31E5E7012B43489E8458D48E30485763D0B9 ] w3logsvc        C:\WINDOWS\system32\inetsrv\w3logsvc.dll

01:20:35.0760 0x0474  w3logsvc - ok

01:20:35.0776 0x0474  [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc    C:\WINDOWS\System32\WaaSMedicSvc.dll

01:20:35.0791 0x0474  WaaSMedicSvc - ok

01:20:35.0807 0x0474  WacomPen - ok

01:20:35.0807 0x0474  [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService   C:\WINDOWS\system32\WalletService.dll

01:20:35.0822 0x0474  WalletService - ok

01:20:35.0838 0x0474  wanarp - ok

01:20:35.0838 0x0474  wanarpv6 - ok

01:20:35.0838 0x0474  [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc      C:\WINDOWS\System32\Windows.WARP.JITService.dll

01:20:35.0854 0x0474  WarpJITSvc - ok

01:20:35.0869 0x0474  [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] WAS             C:\WINDOWS\system32\inetsrv\iisw3adm.dll

01:20:35.0885 0x0474  WAS - ok

01:20:35.0885 0x0474  wbengine - ok

01:20:35.0901 0x0474  [ A7C39DF528040967C2C281AB5A9DB5D0, B300F663DD45393BB86A1BFBE2EF47CD2315552B2410E3AE3F60E8294DC3E4A9 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll

01:20:35.0932 0x0474  WbioSrvc - ok

01:20:35.0947 0x0474  [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs           C:\WINDOWS\system32\drivers\wcifs.sys

01:20:35.0947 0x0474  wcifs - ok

01:20:35.0963 0x0474  [ 2BCA9BABB5CEC329E604AE9C1DBA9D5B, 315C72B80A5E6278A725E7BD2DE0C8A2751C2A3F9B4D82F7A034B1ADDE687507 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll

01:20:35.0994 0x0474  Wcmsvc - ok

01:20:36.0010 0x0474  wcncsvc - ok

01:20:36.0010 0x0474  [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs           C:\WINDOWS\system32\drivers\wcnfs.sys

01:20:36.0026 0x0474  wcnfs - ok

01:20:36.0026 0x0474  [ 45545A0E3ECDC23C4E2C104674885F51, DC6042F4A10AA564461623440A6F5A63931D28643131047CF23E4CE1A9461893 ] WdBoot          C:\WINDOWS\system32\drivers\wd\WdBoot.sys

01:20:36.0041 0x0474  WdBoot - ok

01:20:36.0041 0x0474  [ A556768CC1FA4F36022BEE2F0EDE2566, 3A4BC9DE614F43CD94FA354A565C66B2E1E36C0608D84C6288010B97B9D811AA ] WDC_SAM         C:\WINDOWS\System32\drivers\wdcsam64.sys

01:20:36.0057 0x0474  WDC_SAM - ok

01:20:36.0057 0x0474  Wdf01000 - ok

01:20:36.0057 0x0474  [ 9A3299DA5B85B13C38C3DAB8F80B608D, E39361AEB53A5E6C5C21A3E708088870B7080EA0CC822E8518DCB579A729FDAA ] WdFilter        C:\WINDOWS\system32\drivers\wd\WdFilter.sys

01:20:36.0072 0x0474  WdFilter - ok

01:20:36.0072 0x0474  [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll

01:20:36.0088 0x0474  WdiServiceHost - ok

01:20:36.0104 0x0474  [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll

01:20:36.0104 0x0474  WdiSystemHost - ok

01:20:36.0119 0x0474  wdiwifi - ok

01:20:36.0119 0x0474  [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys

01:20:36.0119 0x0474  WdmCompanionFilter - ok

01:20:36.0119 0x0474  [ BB1DD5254A7BBFE88F85B7EDCA3BE92A, 7B5721AAF9B8D96A2E73C50F873ACD95C0ED8F6915A16D258BDE199CC6FC9851 ] WdNisDrv        C:\WINDOWS\system32\drivers\wd\WdNisDrv.sys

01:20:36.0135 0x0474  WdNisDrv - ok

01:20:36.0197 0x0474  [ 3769FB7454F9BFD2860D6E1CA0D3DD24, 2E0E9650F1BE1F20D106EC38ACA36B35658F161E1901E412E5AE535F72F5B5DB ] WdNisSvc        C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\NisSrv.exe

01:20:36.0275 0x0474  WdNisSvc - ok

01:20:36.0291 0x0474  [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient       C:\WINDOWS\System32\webclnt.dll

01:20:36.0322 0x0474  WebClient - ok

01:20:36.0322 0x0474  [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll

01:20:36.0338 0x0474  Wecsvc - ok

01:20:36.0338 0x0474  [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll

01:20:36.0354 0x0474  WEPHOSTSVC - ok

01:20:36.0354 0x0474  [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll

01:20:36.0369 0x0474  wercplsupport - ok

01:20:36.0369 0x0474  WerSvc - ok

01:20:36.0385 0x0474  [ 0427A785512BB39BEA530DC5367A9A03, 8ED29AE0FDB65D4E1D8CD3FA1783D74EF7B01AB30DD1090C917A74AC88FD4C3E ] WFDSConMgrSvc   C:\WINDOWS\System32\wfdsconmgrsvc.dll

01:20:36.0416 0x0474  WFDSConMgrSvc - ok

01:20:36.0416 0x0474  [ C16F011763DF92A6B62705DE8FEAB5B9, EAB25EBC9910F5A6C9F082B11D68F9A616B7349590BDB8F1C1040802E4ADF97C ] WFPLWFS         C:\WINDOWS\system32\drivers\wfplwfs.sys

01:20:36.0432 0x0474  WFPLWFS - ok

01:20:36.0432 0x0474  [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll

01:20:36.0447 0x0474  WiaRpc - ok

01:20:36.0447 0x0474  WIMMount - ok

01:20:36.0447 0x0474  [ B9AD53D60DA72C194F0AA2C89136FA35, DE0DC4F2E623A2F3AB5F57010765954A77E52D995AF74F6D8A52841C941C041B ] WinDefend       C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MsMpEng.exe

01:20:36.0463 0x0474  WinDefend - ok

01:20:36.0463 0x0474  [ EC7C1A7397988EFAF37BF685CA25525D, 50DA7D63CDE618D6426649AED250CEBE229CBBAC718C4E3CD882D816839B4CE9 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys

01:20:36.0479 0x0474  WindowsTrustedRT - ok

01:20:36.0479 0x0474  [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys

01:20:36.0479 0x0474  WindowsTrustedRTProxy - ok

01:20:36.0479 0x0474  WinHttpAutoProxySvc - ok

01:20:36.0494 0x0474  WinMad - ok

01:20:36.0494 0x0474  Winmgmt - ok

01:20:36.0494 0x0474  [ 48194110C410B335AC985D9194275A1C, 1CE64B9DD2DB4CCB3916AA4F4C5F8C71C647ABF7845D284019725761138B8A8B ] WinNat          C:\WINDOWS\system32\drivers\winnat.sys

01:20:36.0510 0x0474  WinNat - ok

01:20:36.0557 0x0474  [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll

01:20:36.0635 0x0474  WinRM - ok

01:20:36.0650 0x0474  [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS

01:20:36.0650 0x0474  WINUSB - ok

01:20:36.0666 0x0474  WinVerbs - ok

01:20:36.0666 0x0474  wisvc - ok

01:20:36.0666 0x0474  WlanSvc - ok

01:20:36.0697 0x0474  [ DB98D3F6AA7655AC8AE76745E553BD46, F5DA82BC6DFC3ADCAEB6634A976C15451382B5535F78EE267B5F8E37A9135FDC ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll

01:20:36.0775 0x0474  wlidsvc - ok

01:20:36.0791 0x0474  [ 59F6A50CD336D0ADD22E3F1FC0D73957, A62469B30325965735FE76AE7D83E5D829AE09D7F0996CC0B42604E68426B088 ] wlpasvc         C:\WINDOWS\System32\lpasvc.dll

01:20:36.0838 0x0474  wlpasvc - ok

01:20:36.0838 0x0474  WmiAcpi - ok

01:20:36.0838 0x0474  wmiApSrv - ok

01:20:36.0838 0x0474  WMPNetworkSvc - ok

01:20:36.0853 0x0474  [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof             C:\WINDOWS\system32\drivers\Wof.sys

01:20:36.0853 0x0474  Wof - ok

01:20:36.0900 0x0474  [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll

01:20:36.0947 0x0474  workfolderssvc - ok

01:20:36.0963 0x0474  [ 7328299647F28A62D39F9B546BD10C02, 0BD08E05D7FF1D4BF122FF4043B4AFC019183A22FF1E6F0C973DC87471D2EB7E ] WpcMonSvc       C:\WINDOWS\System32\WpcDesktopMonSvc.dll

01:20:37.0010 0x0474  WpcMonSvc - ok

01:20:37.0010 0x0474  [ 25180559693250D7B7FF16A6BE7AC9BE, 1872BC298C3ED6A204B3BA2AB13D08EB9DAE5B30B7F83CA7A67BFDECA8D043AD ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll

01:20:37.0041 0x0474  WPDBusEnum - ok

01:20:37.0041 0x0474  [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys

01:20:37.0041 0x0474  WpdUpFltr - ok

01:20:37.0057 0x0474  [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService      C:\WINDOWS\system32\WpnService.dll

01:20:37.0072 0x0474  WpnService - ok

01:20:37.0072 0x0474  [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll

01:20:37.0088 0x0474  WpnUserService - ok

01:20:37.0103 0x0474  ws2ifsl - ok

01:20:37.0103 0x0474  [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc          C:\WINDOWS\System32\wscsvc.dll

01:20:37.0119 0x0474  wscsvc - ok

01:20:37.0119 0x0474  WSearch - ok

01:20:37.0135 0x0474  wuauserv - ok

01:20:37.0135 0x0474  [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys

01:20:37.0150 0x0474  WudfPf - ok

01:20:37.0150 0x0474  [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd          C:\WINDOWS\system32\drivers\WudfRd.sys

01:20:37.0166 0x0474  WUDFRd - ok

01:20:37.0166 0x0474  [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys

01:20:37.0181 0x0474  WUDFWpdFs - ok

01:20:37.0213 0x0474  [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll

01:20:37.0260 0x0474  WwanSvc - ok

01:20:37.0275 0x0474  [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm            C:\WINDOWS\system32\xbgmsvc.exe

01:20:37.0275 0x0474  xbgm - ok

01:20:37.0291 0x0474  [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll

01:20:37.0338 0x0474  XblAuthManager - ok

01:20:37.0353 0x0474  [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave     C:\WINDOWS\System32\XblGameSave.dll

01:20:37.0400 0x0474  XblGameSave - ok

01:20:37.0400 0x0474  [ 0AA38B54EB292CB3EB13FFF948473DBA, C5256ABC0A4A2117EC6F1C88B5BFDBECAE673AD47639A274BFFF92A46452E9B0 ] xboxgip         C:\WINDOWS\System32\drivers\xboxgip.sys

01:20:37.0416 0x0474  xboxgip - ok

01:20:37.0431 0x0474  [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc      C:\WINDOWS\System32\XboxGipSvc.dll

01:20:37.0447 0x0474  XboxGipSvc - ok

01:20:37.0463 0x0474  [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc   C:\WINDOWS\system32\XboxNetApiSvc.dll

01:20:37.0494 0x0474  XboxNetApiSvc - ok

01:20:37.0494 0x0474  [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid       C:\WINDOWS\System32\drivers\xinputhid.sys

01:20:37.0510 0x0474  xinputhid - ok

01:20:37.0572 0x0474  [ EB62D8843FB1669B30D28046E63932F8, 0317419FC6F719670D6095109EA461DE39DA4284082F533A398E05F64E5CCDC9 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

01:20:37.0635 0x0474  ZeroConfigService - ok

01:20:37.0635 0x0474  ================ Scan global ===============================

01:20:37.0635 0x0474  [ Global ] - ok

01:20:37.0650 0x0474  ================ Scan MBR ==================================

01:20:37.0650 0x0474  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0

01:20:37.0681 0x0474  \Device\Harddisk0\DR0 - ok

01:20:37.0681 0x0474  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1

01:20:37.0775 0x0474  \Device\Harddisk1\DR1 - ok

01:20:37.0775 0x0474  ================ Scan VBR ==================================

01:20:37.0775 0x0474  [ 54451CBAFBD2D18D1AB8765D5281FAEA ] \Device\Harddisk0\DR0\Partition1

01:20:37.0775 0x0474  \Device\Harddisk0\DR0\Partition1 - ok

01:20:37.0791 0x0474  [ 44C82E04738B7C449464558AAADF73E6 ] \Device\Harddisk0\DR0\Partition2

01:20:37.0791 0x0474  \Device\Harddisk0\DR0\Partition2 - ok

01:20:37.0791 0x0474  [ A5A0F3180AED5B0E6F0B989FC0735DC7 ] \Device\Harddisk0\DR0\Partition3

01:20:37.0791 0x0474  \Device\Harddisk0\DR0\Partition3 - ok

01:20:37.0791 0x0474  [ B892947335450E6854EF8986B8C56EFD ] \Device\Harddisk0\DR0\Partition4

01:20:37.0791 0x0474  \Device\Harddisk0\DR0\Partition4 - ok

01:20:37.0791 0x0474  [ 7694D66D734637EA5723DF12525E0DFD ] \Device\Harddisk1\DR1\Partition1

01:20:37.0791 0x0474  \Device\Harddisk1\DR1\Partition1 - ok

01:20:37.0791 0x0474  [ AFB87DC774456E1FDBD1D43B3DE57688 ] \Device\Harddisk1\DR1\Partition2

01:20:37.0806 0x0474  \Device\Harddisk1\DR1\Partition2 - ok

01:20:37.0806 0x0474  ================ Scan generic autorun ======================

01:20:37.0806 0x0474  SecurityHealth - ok

01:20:37.0931 0x0474  [ 7F1D9A8ADFA040DBF7D23B7338DB77F3, A71CF7325333E6073A58C70245548AAC6569D2296DCEDC326ABE8F55611A2F99 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

01:20:38.0072 0x0474  RTHDVCPL - ok

01:20:38.0119 0x0474  [ 94A8196066774252DF015EEDF02CCA44, AD2DFDA427E3CCB5C8404F0AFAFE71C64B862D2E26A67E1BFC2B40738FD0B873 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

01:20:38.0150 0x0474  NvBackend - ok

01:20:38.0150 0x0474  ShadowPlay - ok

01:20:38.0166 0x0474  [ F9C48B76DA59CF5FF2ED937B62F5ED39, BABC2638F6C92947C79C918DFD3E605B196672B23745226DFA64F68867B7C257 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe

01:20:38.0181 0x0474  AdobeAAMUpdater-1.0 - ok

01:20:38.0181 0x0474  [ 0834375437F84215117725DD7C803916, B3FFE5CD569A12BA8915DB1826CC4CA23077D35D859E1B5428A4985E3F680F61 ] C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe

01:20:38.0197 0x0474  HPMessageService - ok

01:20:38.0494 0x0474  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe

01:20:38.0822 0x0474  OneDriveSetup - ok

01:20:38.0837 0x0474  [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe

01:20:38.0884 0x0474  WAB Migrate - ok

01:20:39.0150 0x0474  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe

01:20:39.0415 0x0474  OneDriveSetup - ok

01:20:39.0447 0x0474  [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe

01:20:39.0462 0x0474  WAB Migrate - ok

01:20:39.0728 0x0474  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe

01:20:40.0009 0x0474  OneDriveSetup - ok

01:20:40.0040 0x0474  [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe

01:20:40.0056 0x0474  WAB Migrate - ok

01:20:40.0087 0x0474  [ A9620DF3B8AE68B0DD2881BF1805B86B, 1895C0A5B049CC2C9C9AC92AF103E1703379AD84766352E83F98A088B5A6612E ] C:\Users\Karin\AppData\Local\Microsoft\OneDrive\OneDrive.exe

01:20:40.0103 0x0474  OneDrive - ok

01:20:40.0134 0x0474  [ A9620DF3B8AE68B0DD2881BF1805B86B, 1895C0A5B049CC2C9C9AC92AF103E1703379AD84766352E83F98A088B5A6612E ] C:\Users\Karo\AppData\Local\Microsoft\OneDrive\OneDrive.exe

01:20:40.0165 0x0474  OneDrive - ok

01:20:40.0181 0x0474  [ 510C28BA392EDD2E5BDFC93C95B0A15C, 73B9C22DF2E654A722D8D24A345133CB3523F8E9FFB502A12CCD34804116ECE4 ] C:\Users\Karo\AppData\Local\Citrix\ICA Client\concentr.exe

01:20:40.0196 0x0474  ConnectionCenter - ok

01:20:40.0196 0x0474  Waiting for KSN requests completion. In queue: 288

01:20:41.0212 0x0474  AV detected via SS2: Windows Defender, windowsdefender:// (  ), 0x61100 ( enabled : updated )

01:20:41.0227 0x0474  Win FW state via NFP2: enabled ( trusted )

01:20:41.0352 0x0474  ============================================================

01:20:41.0352 0x0474  Scan finished

01:20:41.0352 0x0474  ============================================================

01:20:41.0352 0x1c0c  Detected object count: 0

01:20:41.0352 0x1c0c  Actual detected object count: 0