Windows 7: BOO/TDss.O in Masterbootsektor nach Formatierung

GlobalPen · 18.10.2013, 19:16

Hallo,

Antivir meldet das unterwünschte Programm "BOO/TDss.O" in Masterbootsektor HD0, selbst nach dem Neuaufsetzen von Windows 7 inkl. Formatierung der Festplatte.

OS: Windows 7 Pro inkl. SP 1

Vorherige Schritte:

Windows 7 auf Partition 2 neu aufgesetzt. Zuvor formatiert.
Folgende Partitionen hat die HD:

Code:

ATTFilter

Partition 1:ServiceV002      6.6 GB      Typ: OEM(reserviert)
Partition 2                105.2 GB      Typ: System
Partition 3                    2 MB      Typ: Primär

Windows Updates geladen und installiert.
Chrome Browser runtergeladen
Antivir runtergeladen und installiert
Nach Neustart hat Antivir den Fund gemeldet
Scanns und Logs erstellt

Schritt 1: Hab ich wegen der Neuinstallation weggelassen.

Schritt 2:
FRST.txt

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Steve (administrator) on LENOVO-NB on 18-10-2013 18:52:26
Running from C:\Users\Steve\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avcenter.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-09-24] (APN)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x57D2100C07CCCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\24.57772_0
CHR Extension: (Google Docs) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-10-10] (Avira Operations GmbH & Co. KG)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-18 18:51 - 2013-10-18 18:51 - 00000000 ____D C:\FRST
2013-10-18 18:50 - 2013-10-18 18:50 - 01954124 _____ (Farbar) C:\Users\Steve\Downloads\FRST64.exe
2013-10-18 18:48 - 2013-10-18 18:48 - 00377856 _____ C:\Users\Steve\Downloads\v0p4pk3w.exe
2013-10-18 18:44 - 2013-10-18 18:44 - 00000000 ____D C:\Users\Steve\AppData\Roaming\Avira
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\ProgramData\APN
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-10-18 18:32 - 2013-10-18 18:32 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-18 18:32 - 2013-10-18 18:32 - 00000000 ____D C:\ProgramData\Avira
2013-10-18 18:32 - 2013-10-18 18:32 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-18 18:32 - 2013-10-10 19:14 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-18 18:32 - 2013-10-10 19:14 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-18 18:32 - 2013-10-10 19:14 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-18 18:32 - 2013-10-10 19:14 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-18 18:24 - 2013-10-18 18:25 - 123853152 _____ C:\Users\Steve\Downloads\avira_free_antivirus_de_14b411.exe
2013-10-18 18:20 - 2013-10-18 18:20 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-18 18:18 - 2013-10-18 18:43 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-18 18:18 - 2013-10-18 18:31 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-18 18:18 - 2013-10-18 18:26 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-18 18:18 - 2013-10-18 18:26 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-18 18:18 - 2013-10-18 18:20 - 00000000 ____D C:\Users\Steve\AppData\Local\Google
2013-10-18 18:18 - 2013-10-18 18:20 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-18 18:17 - 2013-10-18 18:18 - 00000000 ____D C:\Users\Steve\AppData\Local\Deployment
2013-10-18 18:17 - 2013-10-18 18:17 - 00058016 _____ C:\Users\Steve\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-18 18:17 - 2013-10-18 18:17 - 00000000 ____D C:\Users\Steve\AppData\Local\Apps\2.0
2013-10-18 18:10 - 2013-10-18 18:10 - 00000000 ____D C:\Users\Steve\AppData\Roaming\Adobe
2013-10-18 18:09 - 2013-10-18 18:09 - 00003538 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-10-18 16:42 - 2013-10-18 16:42 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-18 16:42 - 2013-10-18 16:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-18 16:42 - 2013-10-18 16:42 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-18 16:42 - 2013-10-18 16:42 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-18 16:42 - 2013-10-18 16:42 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-10-18 16:42 - 2013-10-18 16:42 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-10-18 16:42 - 2013-10-18 16:42 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-10-18 16:42 - 2013-10-18 16:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-10-18 16:42 - 2013-10-18 16:42 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-10-18 16:42 - 2013-10-18 16:42 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-10-18 16:42 - 2013-10-18 16:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-10-18 16:35 - 2013-10-18 16:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-18 16:32 - 2013-10-18 16:52 - 00013986 _____ C:\Windows\IE10_main.log
2013-10-18 16:24 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-10-18 16:21 - 2013-10-18 16:21 - 00008192 __RSH C:\BOOTSECT.BAK
2013-10-18 16:21 - 2013-10-18 15:32 - 00000000 ____D C:\Windows\Panther
2013-10-18 16:21 - 2010-11-21 05:23 - 00383786 __RSH C:\bootmgr
2013-10-18 16:19 - 2013-10-18 16:23 - 00004135 _____ C:\Windows\IE9_main.log
2013-10-18 16:10 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-10-18 16:10 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-10-18 16:10 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-10-18 16:10 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-10-18 16:10 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-10-18 16:10 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-10-18 16:10 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-10-18 16:10 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-10-18 16:07 - 2013-10-18 16:07 - 00000000 ____D C:\Windows\SysWOW64\x64
2013-10-18 16:07 - 2009-09-23 19:30 - 01002008 _____ (Intel Corporation) C:\Windows\SysWOW64\igxpun.exe
2013-10-18 16:05 - 2013-10-18 16:05 - 00000000 ____D C:\Windows\system32\MRT
2013-10-18 16:05 - 2013-09-26 01:46 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-18 16:04 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-10-18 16:04 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-10-18 16:04 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-10-18 16:04 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-10-18 16:04 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-10-18 16:03 - 2013-10-18 16:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-10-18 16:03 - 2013-10-18 16:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-10-18 16:02 - 2013-10-18 16:02 - 00000000 ____D C:\Program Files\AuthenTec
2013-10-18 16:00 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-18 16:00 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-10-18 16:00 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-10-18 16:00 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-10-18 16:00 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-10-18 15:59 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-18 15:59 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-18 15:59 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-18 15:59 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-18 15:59 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-18 15:59 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-18 15:59 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-18 15:59 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-18 15:59 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-18 15:59 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-18 15:59 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-18 15:59 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-18 15:59 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-18 15:59 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-18 15:59 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-18 15:59 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-18 15:59 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-18 15:59 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-18 15:59 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-18 15:59 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-18 15:59 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-18 15:59 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-18 15:59 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-18 15:59 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-18 15:59 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-10-18 15:59 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-10-18 15:59 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-10-18 15:59 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-10-18 15:59 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-10-18 15:59 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-10-18 15:59 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-10-18 15:59 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-10-18 15:59 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-10-18 15:58 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-10-18 15:58 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-10-18 15:58 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-10-18 15:58 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-10-18 15:58 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-10-18 15:58 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-10-18 15:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-10-18 15:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-10-18 15:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-10-18 15:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-10-18 15:58 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-18 15:58 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-10-18 15:58 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-10-18 15:58 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-10-18 15:58 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-10-18 15:58 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-10-18 15:58 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-10-18 15:58 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-10-18 15:58 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-10-18 15:58 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-10-18 15:58 - 2012-11-30 07:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-18 15:58 - 2012-11-30 07:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-18 15:58 - 2012-11-30 07:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-18 15:58 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-10-18 15:58 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-10-18 15:58 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-18 15:58 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-10-18 15:58 - 2012-11-29 00:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-10-18 15:58 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-10-18 15:58 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-10-18 15:58 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-10-18 15:58 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-10-18 15:58 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-10-18 15:58 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-10-18 15:58 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-10-18 15:58 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-10-18 15:58 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-10-18 15:58 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-10-18 15:58 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-10-18 15:58 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-10-18 15:58 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-10-18 15:58 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-10-18 15:58 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-10-18 15:58 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-10-18 15:58 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-10-18 15:58 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-10-18 15:58 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-10-18 15:58 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-10-18 15:58 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-10-18 15:58 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-10-18 15:58 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-10-18 15:58 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-10-18 15:58 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-10-18 15:58 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-10-18 15:58 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-10-18 15:58 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-10-18 15:58 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-10-18 15:58 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-10-18 15:58 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-10-18 15:58 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-10-18 15:57 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-10-18 15:57 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-18 15:57 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-18 15:57 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-18 15:57 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-18 15:57 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-18 15:57 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-18 15:57 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-18 15:57 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-18 15:57 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-18 15:57 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-18 15:57 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-10-18 15:57 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-10-18 15:57 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-10-18 15:57 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-10-18 15:57 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-10-18 15:57 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-10-18 15:57 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-10-18 15:57 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-10-18 15:57 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-10-18 15:57 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-10-18 15:57 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-10-18 15:57 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-10-18 15:57 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-10-18 15:57 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-10-18 15:57 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-10-18 15:57 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-10-18 15:57 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-10-18 15:57 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-10-18 15:57 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-10-18 15:57 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-10-18 15:57 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-10-18 15:57 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-10-18 15:57 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-10-18 15:57 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-10-18 15:57 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-10-18 15:57 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-10-18 15:57 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-10-18 15:57 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-10-18 15:57 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-10-18 15:57 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-10-18 15:57 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-10-18 15:57 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-10-18 15:57 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-10-18 15:57 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-10-18 15:57 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-10-18 15:57 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-10-18 15:57 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-10-18 15:57 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-10-18 15:57 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-10-18 15:57 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-10-18 15:57 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-10-18 15:57 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-10-18 15:57 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-10-18 15:57 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-10-18 15:57 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-10-18 15:57 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-10-18 15:57 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-10-18 15:57 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-10-18 15:57 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-10-18 15:57 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-10-18 15:57 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-10-18 15:57 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-10-18 15:57 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-10-18 15:57 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-10-18 15:57 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-10-18 15:57 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-10-18 15:57 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-10-18 15:56 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-18 15:56 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-18 15:56 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-18 15:56 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-18 15:56 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-10-18 15:56 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-10-18 15:56 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-18 15:56 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-10-18 15:56 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-10-18 15:56 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-18 15:56 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-18 15:56 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-18 15:56 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-18 15:56 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-18 15:56 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-18 15:56 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-18 15:56 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-18 15:56 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-18 15:56 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-10-18 15:56 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-10-18 15:56 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-10-18 15:56 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-10-18 15:56 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-10-18 15:56 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-10-18 15:56 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-10-18 15:56 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-10-18 15:56 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-10-18 15:56 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-10-18 15:56 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-10-18 15:56 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-10-18 15:56 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-10-18 15:56 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-10-18 15:56 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-10-18 15:56 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-10-18 15:56 - 2012-06-02 07:50 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-10-18 15:56 - 2012-06-02 07:48 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-10-18 15:56 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-10-18 15:56 - 2012-06-02 07:45 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-10-18 15:56 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-10-18 15:56 - 2012-06-02 06:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-10-18 15:56 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-10-18 15:56 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-10-18 15:56 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-10-18 15:56 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-10-18 15:56 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-10-18 15:56 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-10-18 15:56 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-10-18 15:56 - 2011-11-17 08:35 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-10-18 15:56 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-10-18 15:56 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-10-18 15:56 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-10-18 15:56 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-10-18 15:56 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-10-18 15:56 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-10-18 15:56 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-10-18 15:56 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-10-18 15:56 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-10-18 15:56 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-10-18 15:56 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-10-18 15:56 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-10-18 15:56 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-10-18 15:56 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-10-18 15:56 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-10-18 15:56 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-10-18 15:56 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-10-18 15:56 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-10-18 15:56 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-10-18 15:56 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-10-18 15:56 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-10-18 15:56 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-10-18 15:56 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-10-18 15:56 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-10-18 15:56 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-10-18 15:56 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-10-18 15:56 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-10-18 15:56 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-10-18 15:56 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-10-18 15:56 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-10-18 15:56 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-10-18 15:56 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-10-18 15:56 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-10-18 15:56 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-10-18 15:56 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-10-18 15:56 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-10-18 15:56 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-10-18 15:56 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-10-18 15:56 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-10-18 15:56 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-10-18 15:56 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2013-10-18 15:56 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-10-18 15:56 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2013-10-18 15:56 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-10-18 15:56 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-10-18 15:56 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-10-18 15:56 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-10-18 15:56 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-10-18 15:56 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-10-18 15:56 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-10-18 15:56 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-10-18 15:56 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-10-18 15:55 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-18 15:55 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-18 15:55 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-18 15:55 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-10-18 15:55 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-10-18 15:55 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-10-18 15:55 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-10-18 15:55 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-10-18 15:55 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-10-18 15:55 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-10-18 15:55 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-10-18 15:55 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-10-18 15:55 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-10-18 15:55 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-10-18 15:55 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-18 15:47 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-18 15:44 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-10-18 15:44 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-10-18 15:41 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-10-18 15:41 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-10-18 15:35 - 2013-10-18 18:10 - 00001413 _____ C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-18 15:34 - 2013-10-18 18:10 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-18 15:34 - 2013-10-18 18:10 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-18 15:34 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-10-18 15:34 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-10-18 15:34 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-10-18 15:34 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-10-18 15:33 - 2013-10-18 15:33 - 00000020 ___SH C:\Users\Steve\ntuser.ini
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Vorlagen
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Startmenü
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Netzwerkumgebung
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Lokale Einstellungen
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Eigene Dateien
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Druckumgebung
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Documents\Eigene Musik
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Documents\Eigene Bilder
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Local\Verlauf
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Local\Anwendungsdaten
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Anwendungsdaten
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 ____D C:\Users\Steve\AppData\Local\VirtualStore
2013-10-18 15:33 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-10-18 15:33 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-10-18 15:33 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-10-18 15:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-10-18 15:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-10-18 15:33 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-18 15:33 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-18 15:32 - 2013-10-18 15:34 - 00000000 ____D C:\Users\Steve
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 __SHD C:\Recovery
2013-10-18 15:25 - 2013-10-18 18:47 - 01679119 _____ C:\Windows\WindowsUpdate.log
2013-10-18 15:25 - 2013-10-18 15:25 - 00001355 _____ C:\Windows\TSSysprep.log
2013-10-18 15:25 - 2013-10-18 15:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

2013-10-18 18:51 - 2013-10-18 18:51 - 00000000 ____D C:\FRST
2013-10-18 18:50 - 2013-10-18 18:50 - 01954124 _____ (Farbar) C:\Users\Steve\Downloads\FRST64.exe
2013-10-18 18:48 - 2013-10-18 18:48 - 00377856 _____ C:\Users\Steve\Downloads\v0p4pk3w.exe
2013-10-18 18:47 - 2013-10-18 15:25 - 01679119 _____ C:\Windows\WindowsUpdate.log
2013-10-18 18:47 - 2011-04-12 09:43 - 00643866 _____ C:\Windows\system32\perfh007.dat
2013-10-18 18:47 - 2011-04-12 09:43 - 00126394 _____ C:\Windows\system32\perfc007.dat
2013-10-18 18:47 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-18 18:45 - 2009-07-14 06:45 - 00020784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-18 18:45 - 2009-07-14 06:45 - 00020784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-18 18:44 - 2013-10-18 18:44 - 00000000 ____D C:\Users\Steve\AppData\Roaming\Avira
2013-10-18 18:43 - 2013-10-18 18:18 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-18 18:42 - 2010-11-21 05:47 - 00008640 _____ C:\Windows\PFRO.log
2013-10-18 18:42 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-18 18:42 - 2009-07-14 06:51 - 00029780 _____ C:\Windows\setupact.log
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\ProgramData\APN
2013-10-18 18:33 - 2013-10-18 18:33 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-10-18 18:32 - 2013-10-18 18:32 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-18 18:32 - 2013-10-18 18:32 - 00000000 ____D C:\ProgramData\Avira
2013-10-18 18:32 - 2013-10-18 18:32 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-18 18:31 - 2013-10-18 18:18 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-18 18:26 - 2013-10-18 18:18 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-18 18:26 - 2013-10-18 18:18 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-18 18:25 - 2013-10-18 18:24 - 123853152 _____ C:\Users\Steve\Downloads\avira_free_antivirus_de_14b411.exe
2013-10-18 18:20 - 2013-10-18 18:20 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-18 18:20 - 2013-10-18 18:18 - 00000000 ____D C:\Users\Steve\AppData\Local\Google
2013-10-18 18:20 - 2013-10-18 18:18 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-18 18:18 - 2013-10-18 18:17 - 00000000 ____D C:\Users\Steve\AppData\Local\Deployment
2013-10-18 18:17 - 2013-10-18 18:17 - 00058016 _____ C:\Users\Steve\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-18 18:17 - 2013-10-18 18:17 - 00000000 ____D C:\Users\Steve\AppData\Local\Apps\2.0
2013-10-18 18:10 - 2013-10-18 18:10 - 00000000 ____D C:\Users\Steve\AppData\Roaming\Adobe
2013-10-18 18:10 - 2013-10-18 15:35 - 00001413 _____ C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-18 18:10 - 2013-10-18 15:34 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-18 18:10 - 2013-10-18 15:34 - 00000000 ___RD C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-18 18:09 - 2013-10-18 18:09 - 00003538 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-10-18 18:08 - 2009-07-14 06:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-18 18:05 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-10-18 18:05 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-18 18:05 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-10-18 18:04 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-10-18 16:52 - 2013-10-18 16:32 - 00013986 _____ C:\Windows\IE10_main.log
2013-10-18 16:42 - 2013-10-18 16:42 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-18 16:42 - 2013-10-18 16:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-18 16:42 - 2013-10-18 16:42 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-18 16:42 - 2013-10-18 16:42 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-10-18 16:42 - 2013-10-18 16:42 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-10-18 16:42 - 2013-10-18 16:42 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-10-18 16:42 - 2013-10-18 16:42 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-10-18 16:42 - 2013-10-18 16:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-10-18 16:42 - 2013-10-18 16:42 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-10-18 16:42 - 2013-10-18 16:42 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-10-18 16:42 - 2013-10-18 16:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-10-18 16:42 - 2013-10-18 16:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-10-18 16:42 - 2013-10-18 16:42 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-10-18 16:35 - 2013-10-18 16:35 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-18 16:35 - 2013-10-18 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-18 16:23 - 2013-10-18 16:19 - 00004135 _____ C:\Windows\IE9_main.log
2013-10-18 16:21 - 2013-10-18 16:21 - 00008192 __RSH C:\BOOTSECT.BAK
2013-10-18 16:21 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-10-18 16:21 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-10-18 16:07 - 2013-10-18 16:07 - 00000000 ____D C:\Windows\SysWOW64\x64
2013-10-18 16:05 - 2013-10-18 16:05 - 00000000 ____D C:\Windows\system32\MRT
2013-10-18 16:03 - 2013-10-18 16:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-10-18 16:03 - 2013-10-18 16:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-10-18 16:02 - 2013-10-18 16:02 - 00000000 ____D C:\Program Files\AuthenTec
2013-10-18 16:02 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-10-18 15:34 - 2013-10-18 15:32 - 00000000 ____D C:\Users\Steve
2013-10-18 15:33 - 2013-10-18 15:33 - 00000020 ___SH C:\Users\Steve\ntuser.ini
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Vorlagen
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Startmenü
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Netzwerkumgebung
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Lokale Einstellungen
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Eigene Dateien
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Druckumgebung
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Documents\Eigene Musik
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Documents\Eigene Bilder
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Local\Verlauf
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\AppData\Local\Anwendungsdaten
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 _SHDL C:\Users\Steve\Anwendungsdaten
2013-10-18 15:33 - 2013-10-18 15:33 - 00000000 ____D C:\Users\Steve\AppData\Local\VirtualStore
2013-10-18 15:33 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-10-18 15:32 - 2013-10-18 16:21 - 00000000 ____D C:\Windows\Panther
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Programme
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-18 15:32 - 2013-10-18 15:32 - 00000000 __SHD C:\Recovery
2013-10-18 15:32 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-18 15:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-10-18 15:32 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-10-18 15:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-18 15:26 - 2009-07-14 06:46 - 00002790 _____ C:\Windows\DtcInstall.log
2013-10-18 15:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-10-18 15:25 - 2013-10-18 15:25 - 00001355 _____ C:\Windows\TSSysprep.log
2013-10-18 15:25 - 2013-10-18 15:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2013-10-18 15:23 - 2011-04-12 09:55 - 00000000 ____D C:\Windows\CSC
2013-10-10 19:14 - 2013-10-18 18:32 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-10 19:14 - 2013-10-18 18:32 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-10 19:14 - 2013-10-18 18:32 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-10 19:14 - 2013-10-18 18:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-09-26 01:46 - 2013-10-18 16:05 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Steve\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-18 15:22

==================== End Of Log ============================

Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Steve at 2013-10-18 18:53:38
Running from C:\Users\Steve\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Avira Free Antivirus (x32 Version: 14.0.0.411)
Avira SearchFree Toolbar (x32 Version: 12.5.1.1249)
Google Chrome (x32 Version: 30.0.1599.101)
Google Update Helper (x32 Version: 1.3.21.165)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930)
Lenovo Power Management Driver (Version: 1.67.03.13)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

==================== Restore Points  =========================

18-10-2013 13:33:02 Windows Update
18-10-2013 14:01:35 Windows Update
18-10-2013 16:36:39 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07C86738-245A-4550-BEC5-480B1B1371BD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-18] (Google Inc.)
Task: {B2B145D2-4003-4B29-A7C1-89B7D7E43B84} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-18] (Google Inc.)
Task: {C25AD036-B61E-468C-81E7-73353E1DDB90} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-18 18:32 - 2013-10-10 19:14 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-18 18:32 - 2013-10-10 19:14 - 00394824 _____ () C:\program files (x86)\avira\antivir desktop\sqlite3.dll
2013-10-18 18:20 - 2013-10-09 02:01 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
2013-10-18 18:20 - 2013-10-09 02:01 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
2013-10-18 18:20 - 2013-10-09 02:02 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
2013-10-18 18:20 - 2013-10-09 02:02 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll
2013-10-18 18:20 - 2013-10-09 02:01 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/18/2013 06:44:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:23:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:16:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:09:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:05:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 03:32:46 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler bei der Installation des Kaufnachweises. 0xC004F050
Teil-Pkey=BBBBB
ACID=?
Genauer Fehler[?]

Error: (10/18/2013 03:30:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (10/18/2013 06:11:54 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für Internet Explorer*8 für Windows 7 für x64-basierte Systeme (KB2598845)

Error: (10/18/2013 06:09:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 
%%16405

Error: (10/18/2013 06:06:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde mit folgendem Fehler beendet: 
%%32

Error: (10/18/2013 06:06:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/18/2013 06:01:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Modules Installer konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (10/18/2013 03:35:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================
Error: (10/18/2013 06:44:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:23:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:16:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:09:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 06:05:29 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/18/2013 03:32:46 PM) (Source: Software Protection Platform Service)(User: )
Description: 0xC004F050BBBBB??

Error: (10/18/2013 03:30:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 53%
Total physical RAM: 2006.3 MB
Available physical RAM: 925.39 MB
Total Pagefile: 4012.59 MB
Available Pagefile: 2482.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:105.24 GB) (Free:88.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 16EECC16)
Partition 1: (Not Active) - (Size=7 GB) - (Type=27)
Partition 2: (Active) - (Size=105 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 MB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 3

==================== End Of Log ============================

Schritt 3:
Gmer.txt

Code:

ATTFilter

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-18 19:12:26
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 HITACHI_HTS542512K9SA00 rev.BB2ZC3HP 111,79GB
Running: v0p4pk3w.exe; Driver: C:\Users\Steve\AppData\Local\Temp\pxdcypog.sys


---- Registry - GMER 2.1 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002269c6a558                      
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002269c6a558 (not active ControlSet)  

---- EOF - GMER 2.1 ----

Schritt 4:
Avira.txt

Code:

ATTFilter

Exportierte Ereignisse:

18.10.2013 19:22 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Masterbootsektor von Laufwerk 'Masterbootsektor HD0' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

18.10.2013 19:22 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Bootsektor von Laufwerk 'C:' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

18.10.2013 18:43 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Masterbootsektor von Laufwerk 'Masterbootsektor HD0' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

18.10.2013 18:43 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Bootsektor von Laufwerk 'C:' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

18.10.2013 18:36 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Masterbootsektor von Laufwerk 'Masterbootsektor HD0' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

18.10.2013 18:36 [Echtzeit-Scanner] Malware in Bootsektor gefunden
      Im Bootsektor von Laufwerk 'C:' wurde ein Virus oder 
      unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
      Ausgeführte Aktion: Zugriff verweigern

Könnt ihr mir bitte helfen den Virus zu entfernen?

Schon mal Danke.

Beste Grüße
GlobalPen

aharonov · 18.10.2013, 19:56

Hallo,

Zitat:

Folgende Partitionen hat die HD:

Code:

ATTFilter

Partition 3                    2 MB      Typ: Primär

Und genau diese Partition gehört da nicht hin..

Schritt 1

Downloade dir ListParts (von Farbar) herunter und speichere es auf den Desktop.

Starte die ListParts64.exe.
Drücke auf den Scan Button.
Wenn der Scan abgeschlossen ist, wird eine Logdatei Result.txt auf den Desktop gespeichert.
Post deren Inhalt bitte hier.

Schritt 2

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

GlobalPen · 18.10.2013, 20:21

Danke für die schnelle Antwort.

Ich hab mir schon fast gedacht, dass es was mit der kleinen Partition zu tun hat. Wusste aber nicht seit wann die da ist und ob die nicht doch zum Recovery oder so gehört.

Schritt 1:
ListParts

Code:

ATTFilter

ListParts by Farbar Version: 10-05-2013
Ran by Steve (administrator) on 18-10-2013 at 21:10:35
Windows 7 (X64)
Running From: C:\Users\Steve\Desktop
Language: 0407
************************************************************

========================= Memory info ====================== 

Percentage of memory in use: 53%
Total physical RAM: 2006.3 MB
Available physical RAM: 932.3 MB
Total Pagefile: 4012.59 MB
Available Pagefile: 2477.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

======================= Partitions =========================

1 Drive c: () (Fixed) (Total:105.24 GB) (Free:85.34 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

  Datentr„ger ###  Status         Gr”áe    Frei     Dyn  GPT
  ---------------  -------------  -------  -------  ---  ---
  Datentr„ger 0    Online          111 GB      0 B         

Partitions of Disk 0:
===============

Datentr„ger-ID: 16EECC16

  Partition ###  Typ               Gr”áe    Offset
  -------------  ----------------  -------  -------
  Partition 1    Wiederherstellun  6708 MB  1024 KB
  Partition 2    Prim„r             105 GB  6709 MB
  Partition 3    Prim„r            3016 KB   111 GB

======================================================================================================

Disk: 0
Partition 1
Typ      : 27
Versteckt: Ja
Aktiv    : Nein

  Volume ###  Bst  Bezeichnung  DS     Typ         Gr”áe    Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 2         ServiceV002  NTFS   Partition   6708 MB  Fehlerfre  Versteck

======================================================================================================

Disk: 0
Partition 2
Typ      : 07
Versteckt: Nein
Aktiv    : Ja

  Volume ###  Bst  Bezeichnung  DS     Typ         Gr”áe    Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 1     C                NTFS   Partition    105 GB  Fehlerfre  System (partition with boot components)  

======================================================================================================

Disk: 0
Partition 3
Typ      : 17
Versteckt: Ja
Aktiv    : Nein

Dieser Partition ist kein Volume zugewiesen.

======================================================================================================
============================== MBR Partition Table ==================

==============================
Partitions of Disk 0:
===============
Disk ID: 16EECC16
Partition 1: (Not Active) - (Size=7 GB) - (Type=27)
Partition 2: (Active) - (Size=105 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 MB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 3


****** End Of Log ******

Schritt 2:
TDSSKiller

Code:

ATTFilter

21:13:37.0173 0x03c4  TDSS rootkit removing tool 3.0.0.14 Oct 15 2013 15:35:38
21:13:42.0269 0x03c4  ============================================================
21:13:42.0269 0x03c4  Current date / time: 2013/10/18 21:13:42.0269
21:13:42.0269 0x03c4  SystemInfo:
21:13:42.0269 0x03c4  
21:13:42.0269 0x03c4  OS Version: 6.1.7601 ServicePack: 1.0
21:13:42.0269 0x03c4  Product type: Workstation
21:13:42.0270 0x03c4  ComputerName: LENOVO-NB
21:13:42.0270 0x03c4  UserName: Steve
21:13:42.0270 0x03c4  Windows directory: C:\Windows
21:13:42.0270 0x03c4  System windows directory: C:\Windows
21:13:42.0270 0x03c4  Running under WOW64
21:13:42.0270 0x03c4  Processor architecture: Intel x64
21:13:42.0270 0x03c4  Number of processors: 2
21:13:42.0270 0x03c4  Page size: 0x1000
21:13:42.0270 0x03c4  Boot type: Normal boot
21:13:42.0270 0x03c4  ============================================================
21:13:44.0957 0x03c4  System UUID: {1D4F100E-D071-E6A6-683A-61DD6DB771B3}
21:13:45.0985 0x03c4  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
21:13:46.0002 0x03c4  ============================================================
21:13:46.0002 0x03c4  \Device\Harddisk0\DR0:
21:13:46.0002 0x03c4  MBR partitions:
21:13:46.0002 0x03c4  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xD1A800, BlocksNum 0xD278800
21:13:46.0002 0x03c4  ============================================================
21:13:46.0024 0x03c4  C: <-> \Device\Harddisk0\DR0\Partition1
21:13:46.0024 0x03c4  ============================================================
21:13:46.0025 0x03c4  Initialize success
21:13:46.0025 0x03c4  ============================================================
21:13:58.0447 0x0cc0  ============================================================
21:13:58.0447 0x0cc0  Scan started
21:13:58.0447 0x0cc0  Mode: Manual; SigCheck; TDLFS; 
21:13:58.0447 0x0cc0  ============================================================
21:13:58.0447 0x0cc0  KSN ping started
21:14:02.0066 0x0cc0  KSN ping finished: true
21:14:02.0624 0x0cc0  ================ Scan system memory ========================
21:14:02.0624 0x0cc0  System memory - ok
21:14:02.0625 0x0cc0  ================ Scan services =============================
21:14:03.0178 0x0cc0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
21:14:03.0334 0x0cc0  1394ohci - ok
21:14:03.0365 0x0cc0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:14:03.0412 0x0cc0  ACPI - ok
21:14:03.0443 0x0cc0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
21:14:03.0568 0x0cc0  AcpiPmi - ok
21:14:03.0646 0x0cc0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
21:14:03.0708 0x0cc0  adp94xx - ok
21:14:03.0755 0x0cc0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
21:14:03.0786 0x0cc0  adpahci - ok
21:14:03.0818 0x0cc0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
21:14:03.0849 0x0cc0  adpu320 - ok
21:14:03.0880 0x0cc0  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
21:14:04.0067 0x0cc0  AeLookupSvc - ok
21:14:04.0114 0x0cc0  [ 314C17917AC8523EC77A710215012A65, 725CF2D5F63C06F7704C24FE0CFA696215DADC6C0EC445D9671E82F8E23E56AD ] AFD             C:\Windows\system32\drivers\afd.sys
21:14:04.0192 0x0cc0  AFD - ok
21:14:04.0239 0x0cc0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
21:14:04.0254 0x0cc0  agp440 - ok
21:14:04.0301 0x0cc0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
21:14:04.0442 0x0cc0  ALG - ok
21:14:04.0504 0x0cc0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
21:14:04.0551 0x0cc0  aliide - ok
21:14:04.0582 0x0cc0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
21:14:04.0613 0x0cc0  amdide - ok
21:14:04.0660 0x0cc0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
21:14:04.0738 0x0cc0  AmdK8 - ok
21:14:04.0754 0x0cc0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
21:14:04.0832 0x0cc0  AmdPPM - ok
21:14:04.0863 0x0cc0  [ 6EC6D772EAE38DC17C14AED9B178D24B, B4FB936B31B1265B8CC6B426C64965C34D0CCF1638E645ACD65E88F4AFFC57A6 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
21:14:04.0910 0x0cc0  amdsata - ok
21:14:04.0941 0x0cc0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
21:14:05.0003 0x0cc0  amdsbs - ok
21:14:05.0003 0x0cc0  [ 1142A21DB581A84EA5597B03A26EBAA0, F94EB140D0CD068760D7EB081FF75154C75DAC75E5E24B6DE4E4F9CE65A70343 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
21:14:05.0034 0x0cc0  amdxata - ok
21:14:05.0159 0x0cc0  [ 3478F48B23A0D9F6EADD4A2405BA70EF, 421BDDCEFEF491915EF8D9BFB756A56778437D98B136758A15AE5A0672738C9D ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:14:05.0206 0x0cc0  AntiVirSchedulerService - ok
21:14:05.0284 0x0cc0  [ AFFE7C21A4FCA1963371F10066911D3A, DC7A94A784C9389792F3C9A1F435CD9B2D5F74AC9E56F35831B65820FA6A0EDE ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:14:05.0315 0x0cc0  AntiVirService - ok
21:14:05.0362 0x0cc0  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys
21:14:05.0456 0x0cc0  AppID - ok
21:14:05.0471 0x0cc0  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:14:05.0643 0x0cc0  AppIDSvc - ok
21:14:05.0705 0x0cc0  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
21:14:05.0783 0x0cc0  Appinfo - ok
21:14:05.0908 0x0cc0  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
21:14:06.0080 0x0cc0  AppMgmt - ok
21:14:06.0095 0x0cc0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
21:14:06.0142 0x0cc0  arc - ok
21:14:06.0173 0x0cc0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
21:14:06.0189 0x0cc0  arcsas - ok
21:14:06.0220 0x0cc0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:14:06.0298 0x0cc0  AsyncMac - ok
21:14:06.0345 0x0cc0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
21:14:06.0376 0x0cc0  atapi - ok
21:14:06.0470 0x0cc0  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:14:06.0579 0x0cc0  AudioEndpointBuilder - ok
21:14:06.0610 0x0cc0  [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
21:14:06.0672 0x0cc0  AudioSrv - ok
21:14:06.0719 0x0cc0  [ 29F9901C22E7BFE23DF8389AFC530D3D, DBD3537AF3E4BF9AC033E109C8CA737A2EC1EE1F95EDC31E2855F9A9595B03DE ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
21:14:06.0782 0x0cc0  avgntflt - ok
21:14:06.0828 0x0cc0  [ 033CA7F2EABD7EFDC482FE45DD7E1B60, 5D02BB7ED45AA64F8A9D8F29E25D29FE26881EEE55B2962AD99F655EB22692DB ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
21:14:06.0875 0x0cc0  avipbb - ok
21:14:06.0922 0x0cc0  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
21:14:06.0938 0x0cc0  avkmgr - ok
21:14:07.0000 0x0cc0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:14:07.0078 0x0cc0  AxInstSV - ok
21:14:07.0140 0x0cc0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
21:14:07.0265 0x0cc0  b06bdrv - ok
21:14:07.0343 0x0cc0  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
21:14:07.0437 0x0cc0  b57nd60a - ok
21:14:07.0499 0x0cc0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:14:07.0562 0x0cc0  BDESVC - ok
21:14:07.0593 0x0cc0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:14:07.0718 0x0cc0  Beep - ok
21:14:07.0811 0x0cc0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
21:14:07.0920 0x0cc0  BFE - ok
21:14:07.0983 0x0cc0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
21:14:08.0076 0x0cc0  BITS - ok
21:14:08.0123 0x0cc0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:14:08.0170 0x0cc0  blbdrive - ok
21:14:08.0217 0x0cc0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:14:08.0310 0x0cc0  bowser - ok
21:14:08.0326 0x0cc0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
21:14:08.0404 0x0cc0  BrFiltLo - ok
21:14:08.0435 0x0cc0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
21:14:08.0498 0x0cc0  BrFiltUp - ok
21:14:08.0544 0x0cc0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
21:14:08.0622 0x0cc0  Browser - ok
21:14:08.0685 0x0cc0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
21:14:08.0810 0x0cc0  Brserid - ok
21:14:08.0825 0x0cc0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:14:08.0888 0x0cc0  BrSerWdm - ok
21:14:08.0903 0x0cc0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:14:08.0997 0x0cc0  BrUsbMdm - ok
21:14:09.0028 0x0cc0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:14:09.0059 0x0cc0  BrUsbSer - ok
21:14:09.0122 0x0cc0  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys
21:14:09.0200 0x0cc0  BthEnum - ok
21:14:09.0262 0x0cc0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
21:14:09.0324 0x0cc0  BTHMODEM - ok
21:14:09.0356 0x0cc0  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
21:14:09.0434 0x0cc0  BthPan - ok
21:14:09.0496 0x0cc0  [ 0D25B6D300BA26A5F2C3B2A8E96B158B, 45C4D18367BDBD85D442221286FE4E9EBC053F1927A32403B2DEBF95AD4E6676 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
21:14:09.0590 0x0cc0  BTHPORT - ok
21:14:09.0636 0x0cc0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
21:14:09.0683 0x0cc0  bthserv - ok
21:14:09.0699 0x0cc0  [ 1F9912F8EC5BFA53432E71E150636A8A, D8DE353FA5A6B95EA1CBC79731657044C09BED38B831B8365DCCA8A6DEA67111 ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
21:14:09.0730 0x0cc0  BTHUSB - ok
21:14:09.0761 0x0cc0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:14:09.0886 0x0cc0  cdfs - ok
21:14:09.0917 0x0cc0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
21:14:09.0964 0x0cc0  cdrom - ok
21:14:10.0011 0x0cc0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
21:14:10.0120 0x0cc0  CertPropSvc - ok
21:14:10.0136 0x0cc0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
21:14:10.0167 0x0cc0  circlass - ok
21:14:10.0214 0x0cc0  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
21:14:10.0245 0x0cc0  CLFS - ok
21:14:10.0323 0x0cc0  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:14:10.0370 0x0cc0  clr_optimization_v2.0.50727_32 - ok
21:14:10.0432 0x0cc0  [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:14:10.0463 0x0cc0  clr_optimization_v2.0.50727_64 - ok
21:14:10.0541 0x0cc0  [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:14:10.0572 0x0cc0  clr_optimization_v4.0.30319_32 - ok
21:14:10.0650 0x0cc0  [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:14:10.0682 0x0cc0  clr_optimization_v4.0.30319_64 - ok
21:14:10.0728 0x0cc0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:14:10.0775 0x0cc0  CmBatt - ok
21:14:10.0806 0x0cc0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
21:14:10.0853 0x0cc0  cmdide - ok
21:14:10.0916 0x0cc0  [ 9AC4F97C2D3E93367E2148EA940CD2CD, 530E089E5CF868AECDB2B5548EBE76E0CA98FC74A72897292AB2485734402E3B ] CNG             C:\Windows\system32\Drivers\cng.sys
21:14:11.0009 0x0cc0  CNG - ok
21:14:11.0056 0x0cc0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:14:11.0134 0x0cc0  Compbatt - ok
21:14:11.0150 0x0cc0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
21:14:11.0228 0x0cc0  CompositeBus - ok
21:14:11.0243 0x0cc0  COMSysApp - ok
21:14:11.0243 0x0cc0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
21:14:11.0274 0x0cc0  crcdisk - ok
21:14:11.0306 0x0cc0  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:14:11.0384 0x0cc0  CryptSvc - ok
21:14:11.0462 0x0cc0  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
21:14:11.0586 0x0cc0  CSC - ok
21:14:11.0664 0x0cc0  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
21:14:11.0742 0x0cc0  CscService - ok
21:14:11.0820 0x0cc0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:14:11.0945 0x0cc0  DcomLaunch - ok
21:14:12.0008 0x0cc0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
21:14:12.0101 0x0cc0  defragsvc - ok
21:14:12.0117 0x0cc0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
21:14:12.0164 0x0cc0  DfsC - ok
21:14:12.0210 0x0cc0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:14:12.0288 0x0cc0  Dhcp - ok
21:14:12.0320 0x0cc0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
21:14:12.0429 0x0cc0  discache - ok
21:14:12.0476 0x0cc0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
21:14:12.0507 0x0cc0  Disk - ok
21:14:12.0538 0x0cc0  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
21:14:12.0616 0x0cc0  dmvsc - ok
21:14:12.0678 0x0cc0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:14:12.0756 0x0cc0  Dnscache - ok
21:14:12.0803 0x0cc0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
21:14:12.0881 0x0cc0  dot3svc - ok
21:14:12.0928 0x0cc0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
21:14:12.0975 0x0cc0  DPS - ok
21:14:13.0006 0x0cc0  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
21:14:13.0053 0x0cc0  drmkaud - ok
21:14:13.0178 0x0cc0  [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
21:14:13.0271 0x0cc0  DXGKrnl - ok
21:14:13.0334 0x0cc0  [ 416A2007878ED1D6FC5DDDB9E1F6DB3E, 2B8FE69BFCE48CFD25E0B9FEBA0F15EE144F3565B5D208509FCF548DD2CC4EF7 ] e1express       C:\Windows\system32\DRIVERS\e1e6032e.sys
21:14:13.0412 0x0cc0  e1express - ok
21:14:13.0458 0x0cc0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
21:14:13.0583 0x0cc0  EapHost - ok
21:14:13.0786 0x0cc0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
21:14:14.0114 0x0cc0  ebdrv - ok
21:14:14.0160 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] EFS             C:\Windows\System32\lsass.exe
21:14:14.0238 0x0cc0  EFS - ok
21:14:14.0332 0x0cc0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
21:14:14.0410 0x0cc0  ehRecvr - ok
21:14:14.0426 0x0cc0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
21:14:14.0457 0x0cc0  ehSched - ok
21:14:14.0550 0x0cc0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
21:14:14.0597 0x0cc0  elxstor - ok
21:14:14.0613 0x0cc0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
21:14:14.0628 0x0cc0  ErrDev - ok
21:14:14.0706 0x0cc0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
21:14:14.0800 0x0cc0  EventSystem - ok
21:14:14.0831 0x0cc0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
21:14:14.0909 0x0cc0  exfat - ok
21:14:14.0940 0x0cc0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
21:14:14.0987 0x0cc0  fastfat - ok
21:14:15.0065 0x0cc0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
21:14:15.0174 0x0cc0  Fax - ok
21:14:15.0190 0x0cc0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
21:14:15.0237 0x0cc0  fdc - ok
21:14:15.0268 0x0cc0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
21:14:15.0330 0x0cc0  fdPHost - ok
21:14:15.0346 0x0cc0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
21:14:15.0393 0x0cc0  FDResPub - ok
21:14:15.0408 0x0cc0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:14:15.0424 0x0cc0  FileInfo - ok
21:14:15.0440 0x0cc0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
21:14:15.0486 0x0cc0  Filetrace - ok
21:14:15.0502 0x0cc0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
21:14:15.0518 0x0cc0  flpydisk - ok
21:14:15.0533 0x0cc0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:14:15.0564 0x0cc0  FltMgr - ok
21:14:15.0674 0x0cc0  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
21:14:15.0767 0x0cc0  FontCache - ok
21:14:15.0830 0x0cc0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:14:15.0892 0x0cc0  FontCache3.0.0.0 - ok
21:14:15.0923 0x0cc0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
21:14:15.0970 0x0cc0  FsDepends - ok
21:14:16.0001 0x0cc0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:14:16.0048 0x0cc0  Fs_Rec - ok
21:14:16.0079 0x0cc0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:14:16.0126 0x0cc0  fvevol - ok
21:14:16.0204 0x0cc0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
21:14:16.0282 0x0cc0  gagp30kx - ok
21:14:16.0360 0x0cc0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
21:14:16.0454 0x0cc0  gpsvc - ok
21:14:16.0532 0x0cc0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:14:16.0563 0x0cc0  gupdate - ok
21:14:16.0578 0x0cc0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:14:16.0610 0x0cc0  gupdatem - ok
21:14:16.0641 0x0cc0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:14:16.0672 0x0cc0  hcw85cir - ok
21:14:16.0719 0x0cc0  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:14:16.0781 0x0cc0  HdAudAddService - ok
21:14:16.0797 0x0cc0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
21:14:16.0844 0x0cc0  HDAudBus - ok
21:14:16.0859 0x0cc0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
21:14:16.0890 0x0cc0  HidBatt - ok
21:14:16.0906 0x0cc0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
21:14:16.0937 0x0cc0  HidBth - ok
21:14:16.0953 0x0cc0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
21:14:16.0968 0x0cc0  HidIr - ok
21:14:17.0000 0x0cc0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
21:14:17.0031 0x0cc0  hidserv - ok
21:14:17.0078 0x0cc0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
21:14:17.0156 0x0cc0  HidUsb - ok
21:14:17.0187 0x0cc0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:14:17.0296 0x0cc0  hkmsvc - ok
21:14:17.0327 0x0cc0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:14:17.0374 0x0cc0  HomeGroupListener - ok
21:14:17.0405 0x0cc0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:14:17.0436 0x0cc0  HomeGroupProvider - ok
21:14:17.0483 0x0cc0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:14:17.0530 0x0cc0  HpSAMD - ok
21:14:17.0592 0x0cc0  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:14:17.0733 0x0cc0  HTTP - ok
21:14:17.0748 0x0cc0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:14:17.0764 0x0cc0  hwpolicy - ok
21:14:17.0780 0x0cc0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
21:14:17.0811 0x0cc0  i8042prt - ok
21:14:17.0858 0x0cc0  [ 3DF4395A7CF8B7A72A5F4606366B8C2D, 483588B8FC6E05488ED631C4E1CFC398553FEBFA2CD2BB527B4DF12D19774F80 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
21:14:17.0889 0x0cc0  iaStorV - ok
21:14:17.0920 0x0cc0  [ A410235155EAC4D43262532B53F229E3, A4C40F513CB56BC11DCD40F8B5EDC0D575FD7503A04A72803AD324ECDB2282DD ] IBMPMDRV        C:\Windows\system32\DRIVERS\ibmpmdrv.sys
21:14:17.0936 0x0cc0  IBMPMDRV - ok
21:14:17.0951 0x0cc0  [ A0680FF223F055DE508E72B185A41484, 7FFB4F9B7F4395CFDF059D5744BDEACF91C70C08B6C399A17BDDA5610D879B15 ] IBMPMSVC        C:\Windows\system32\ibmpmsvc.exe
21:14:17.0967 0x0cc0  IBMPMSVC - ok
21:14:18.0045 0x0cc0  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:14:18.0185 0x0cc0  idsvc - ok
21:14:18.0497 0x0cc0  [ 24CC43ECDEEFD4C19FBBEE4951B647F1, 416799965E6602F8F03E2A92E8BB42B1D5643C65EF09815FC5A56A2FA73E6773 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
21:14:18.0918 0x0cc0  igfx - ok
21:14:18.0950 0x0cc0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
21:14:18.0965 0x0cc0  iirsp - ok
21:14:19.0059 0x0cc0  [ FCD84C381E0140AF901E58D48882D26B, 76955FFC230C801E8ED890E32076075F04CD6E5EC79E594FDE6D23797A36B406 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:14:19.0137 0x0cc0  IKEEXT - ok
21:14:19.0184 0x0cc0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
21:14:19.0230 0x0cc0  intelide - ok
21:14:19.0277 0x0cc0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:14:19.0324 0x0cc0  intelppm - ok
21:14:19.0355 0x0cc0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
21:14:19.0449 0x0cc0  IPBusEnum - ok
21:14:19.0464 0x0cc0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:14:19.0496 0x0cc0  IpFilterDriver - ok
21:14:19.0574 0x0cc0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:14:19.0698 0x0cc0  iphlpsvc - ok
21:14:19.0730 0x0cc0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
21:14:19.0808 0x0cc0  IPMIDRV - ok
21:14:19.0823 0x0cc0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
21:14:19.0886 0x0cc0  IPNAT - ok
21:14:19.0886 0x0cc0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:14:19.0917 0x0cc0  IRENUM - ok
21:14:19.0917 0x0cc0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:14:19.0932 0x0cc0  isapnp - ok
21:14:19.0964 0x0cc0  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
21:14:19.0995 0x0cc0  iScsiPrt - ok
21:14:19.0995 0x0cc0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:14:20.0010 0x0cc0  kbdclass - ok
21:14:20.0026 0x0cc0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
21:14:20.0073 0x0cc0  kbdhid - ok
21:14:20.0073 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] KeyIso          C:\Windows\system32\lsass.exe
21:14:20.0088 0x0cc0  KeyIso - ok
21:14:20.0120 0x0cc0  [ 97A7070AEA4C058B6418519E869A63B4, 15345C2D6CA159BD498002974A0BD21CAB611124D85E3320248B47652AEF23C8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:14:20.0135 0x0cc0  KSecDD - ok
21:14:20.0151 0x0cc0  [ 26C43A7C2862447EC59DEDA188D1DA07, 5363BF87E650FE2010ACA9417D6920FF4ED752256FF47732882E9B2BA1ED154B ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
21:14:20.0182 0x0cc0  KSecPkg - ok
21:14:20.0213 0x0cc0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
21:14:20.0291 0x0cc0  ksthunk - ok
21:14:20.0322 0x0cc0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
21:14:20.0385 0x0cc0  KtmRm - ok
21:14:20.0432 0x0cc0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:14:20.0541 0x0cc0  LanmanServer - ok
21:14:20.0572 0x0cc0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:14:20.0634 0x0cc0  LanmanWorkstation - ok
21:14:20.0666 0x0cc0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:14:20.0712 0x0cc0  lltdio - ok
21:14:20.0759 0x0cc0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
21:14:20.0822 0x0cc0  lltdsvc - ok
21:14:20.0837 0x0cc0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
21:14:20.0884 0x0cc0  lmhosts - ok
21:14:20.0915 0x0cc0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
21:14:20.0978 0x0cc0  LSI_FC - ok
21:14:20.0993 0x0cc0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
21:14:21.0056 0x0cc0  LSI_SAS - ok
21:14:21.0056 0x0cc0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
21:14:21.0087 0x0cc0  LSI_SAS2 - ok
21:14:21.0087 0x0cc0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
21:14:21.0118 0x0cc0  LSI_SCSI - ok
21:14:21.0134 0x0cc0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
21:14:21.0290 0x0cc0  luafv - ok
21:14:21.0321 0x0cc0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
21:14:21.0461 0x0cc0  Mcx2Svc - ok
21:14:21.0461 0x0cc0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
21:14:21.0492 0x0cc0  megasas - ok
21:14:21.0524 0x0cc0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
21:14:21.0555 0x0cc0  MegaSR - ok
21:14:21.0602 0x0cc0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
21:14:21.0648 0x0cc0  MMCSS - ok
21:14:21.0664 0x0cc0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
21:14:21.0711 0x0cc0  Modem - ok
21:14:21.0726 0x0cc0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
21:14:21.0773 0x0cc0  monitor - ok
21:14:21.0789 0x0cc0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:14:21.0820 0x0cc0  mouclass - ok
21:14:21.0851 0x0cc0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\drivers\mouhid.sys
21:14:21.0882 0x0cc0  mouhid - ok
21:14:21.0898 0x0cc0  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:14:21.0929 0x0cc0  mountmgr - ok
21:14:21.0929 0x0cc0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
21:14:21.0960 0x0cc0  mpio - ok
21:14:21.0992 0x0cc0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:14:22.0038 0x0cc0  mpsdrv - ok
21:14:22.0085 0x0cc0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:14:22.0163 0x0cc0  MpsSvc - ok
21:14:22.0194 0x0cc0  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:14:22.0241 0x0cc0  MRxDAV - ok
21:14:22.0272 0x0cc0  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:14:22.0350 0x0cc0  mrxsmb - ok
21:14:22.0382 0x0cc0  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:14:22.0460 0x0cc0  mrxsmb10 - ok
21:14:22.0475 0x0cc0  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:14:22.0538 0x0cc0  mrxsmb20 - ok
21:14:22.0553 0x0cc0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
21:14:22.0584 0x0cc0  msahci - ok
21:14:22.0616 0x0cc0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
21:14:22.0647 0x0cc0  msdsm - ok
21:14:22.0662 0x0cc0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
21:14:22.0709 0x0cc0  MSDTC - ok
21:14:22.0725 0x0cc0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:14:22.0787 0x0cc0  Msfs - ok
21:14:22.0787 0x0cc0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
21:14:22.0834 0x0cc0  mshidkmdf - ok
21:14:22.0850 0x0cc0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:14:22.0850 0x0cc0  msisadrv - ok
21:14:22.0896 0x0cc0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
21:14:23.0006 0x0cc0  MSiSCSI - ok
21:14:23.0006 0x0cc0  msiserver - ok
21:14:23.0021 0x0cc0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
21:14:23.0068 0x0cc0  MSKSSRV - ok
21:14:23.0084 0x0cc0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:14:23.0115 0x0cc0  MSPCLOCK - ok
21:14:23.0115 0x0cc0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
21:14:23.0162 0x0cc0  MSPQM - ok
21:14:23.0193 0x0cc0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
21:14:23.0271 0x0cc0  MsRPC - ok
21:14:23.0286 0x0cc0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
21:14:23.0302 0x0cc0  mssmbios - ok
21:14:23.0302 0x0cc0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
21:14:23.0364 0x0cc0  MSTEE - ok
21:14:23.0380 0x0cc0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
21:14:23.0411 0x0cc0  MTConfig - ok
21:14:23.0411 0x0cc0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
21:14:23.0442 0x0cc0  Mup - ok
21:14:23.0489 0x0cc0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
21:14:23.0583 0x0cc0  napagent - ok
21:14:23.0645 0x0cc0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
21:14:23.0754 0x0cc0  NativeWifiP - ok
21:14:23.0864 0x0cc0  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:14:23.0910 0x0cc0  NDIS - ok
21:14:23.0957 0x0cc0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
21:14:24.0035 0x0cc0  NdisCap - ok
21:14:24.0051 0x0cc0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:14:24.0098 0x0cc0  NdisTapi - ok
21:14:24.0113 0x0cc0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
21:14:24.0176 0x0cc0  Ndisuio - ok
21:14:24.0191 0x0cc0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
21:14:24.0238 0x0cc0  NdisWan - ok
21:14:24.0238 0x0cc0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
21:14:24.0347 0x0cc0  NDProxy - ok
21:14:24.0378 0x0cc0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
21:14:24.0472 0x0cc0  NetBIOS - ok
21:14:24.0503 0x0cc0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
21:14:24.0550 0x0cc0  NetBT - ok
21:14:24.0581 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] Netlogon        C:\Windows\system32\lsass.exe
21:14:24.0612 0x0cc0  Netlogon - ok
21:14:24.0675 0x0cc0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
21:14:24.0784 0x0cc0  Netman - ok
21:14:24.0815 0x0cc0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
21:14:24.0878 0x0cc0  netprofm - ok
21:14:24.0909 0x0cc0  [ 3E5A36127E201DDF663176B66828FAFE, 5A08BA9EFB1A72DF1DD839BA5FA2B8994012BA62A515588FF62333B33B60045B ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:14:24.0971 0x0cc0  NetTcpPortSharing - ok
21:14:25.0299 0x0cc0  [ 64428DFDAF6E88366CB51F45A79C5F69, 31187D38C1AB52120A3CB7AC3CE47ED9682AC37B0F06B9A9610C0065DD4E7B13 ] netw5v64        C:\Windows\system32\DRIVERS\netw5v64.sys
21:14:25.0798 0x0cc0  netw5v64 - ok
21:14:25.0845 0x0cc0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
21:14:25.0892 0x0cc0  nfrd960 - ok
21:14:25.0938 0x0cc0  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:14:26.0016 0x0cc0  NlaSvc - ok
21:14:26.0032 0x0cc0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:14:26.0110 0x0cc0  Npfs - ok
21:14:26.0141 0x0cc0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
21:14:26.0250 0x0cc0  nsi - ok
21:14:26.0250 0x0cc0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:14:26.0297 0x0cc0  nsiproxy - ok
21:14:26.0438 0x0cc0  [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:14:26.0531 0x0cc0  Ntfs - ok
21:14:26.0547 0x0cc0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
21:14:26.0640 0x0cc0  Null - ok
21:14:26.0687 0x0cc0  [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48, 7738785DE8B50D69993F4408498B812D0283FEE5C04FF5B89C20F149B44E9737 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:14:26.0765 0x0cc0  nvraid - ok
21:14:26.0781 0x0cc0  [ F7CD50FE7139F07E77DA8AC8033D1832, DA96F4B15C8165E6AE1D00E03A062C66CA3A3089E4FF0E9E11CE00B154DD12EC ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:14:26.0843 0x0cc0  nvstor - ok
21:14:26.0859 0x0cc0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:14:26.0890 0x0cc0  nv_agp - ok
21:14:26.0906 0x0cc0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
21:14:26.0937 0x0cc0  ohci1394 - ok
21:14:26.0984 0x0cc0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:14:27.0046 0x0cc0  p2pimsvc - ok
21:14:27.0077 0x0cc0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
21:14:27.0108 0x0cc0  p2psvc - ok
21:14:27.0140 0x0cc0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys
21:14:27.0171 0x0cc0  Parport - ok
21:14:27.0202 0x0cc0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
21:14:27.0218 0x0cc0  partmgr - ok
21:14:27.0233 0x0cc0  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:14:27.0264 0x0cc0  PcaSvc - ok
21:14:27.0296 0x0cc0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
21:14:27.0311 0x0cc0  pci - ok
21:14:27.0327 0x0cc0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
21:14:27.0342 0x0cc0  pciide - ok
21:14:27.0374 0x0cc0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:14:27.0467 0x0cc0  pcmcia - ok
21:14:27.0467 0x0cc0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
21:14:27.0498 0x0cc0  pcw - ok
21:14:27.0530 0x0cc0  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:14:27.0623 0x0cc0  PEAUTH - ok
21:14:27.0717 0x0cc0  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
21:14:27.0810 0x0cc0  PeerDistSvc - ok
21:14:27.0888 0x0cc0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
21:14:27.0951 0x0cc0  PerfHost - ok
21:14:28.0076 0x0cc0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
21:14:28.0185 0x0cc0  pla - ok
21:14:28.0247 0x0cc0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:14:28.0325 0x0cc0  PlugPlay - ok
21:14:28.0341 0x0cc0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
21:14:28.0372 0x0cc0  PNRPAutoReg - ok
21:14:28.0403 0x0cc0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
21:14:28.0434 0x0cc0  PNRPsvc - ok
21:14:28.0481 0x0cc0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
21:14:28.0559 0x0cc0  PolicyAgent - ok
21:14:28.0590 0x0cc0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
21:14:28.0668 0x0cc0  Power - ok
21:14:28.0700 0x0cc0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:14:28.0809 0x0cc0  PptpMiniport - ok
21:14:28.0824 0x0cc0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
21:14:28.0902 0x0cc0  Processor - ok
21:14:28.0949 0x0cc0  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc         C:\Windows\system32\profsvc.dll
21:14:29.0027 0x0cc0  ProfSvc - ok
21:14:29.0043 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] ProtectedStorage C:\Windows\system32\lsass.exe
21:14:29.0090 0x0cc0  ProtectedStorage - ok
21:14:29.0121 0x0cc0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:14:29.0199 0x0cc0  Psched - ok
21:14:29.0355 0x0cc0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
21:14:29.0433 0x0cc0  ql2300 - ok
21:14:29.0448 0x0cc0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
21:14:29.0464 0x0cc0  ql40xx - ok
21:14:29.0495 0x0cc0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
21:14:29.0511 0x0cc0  QWAVE - ok
21:14:29.0542 0x0cc0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:14:29.0604 0x0cc0  QWAVEdrv - ok
21:14:29.0604 0x0cc0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:14:29.0651 0x0cc0  RasAcd - ok
21:14:29.0682 0x0cc0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
21:14:29.0729 0x0cc0  RasAgileVpn - ok
21:14:29.0745 0x0cc0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
21:14:29.0792 0x0cc0  RasAuto - ok
21:14:29.0807 0x0cc0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
21:14:29.0854 0x0cc0  Rasl2tp - ok
21:14:29.0885 0x0cc0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
21:14:29.0963 0x0cc0  RasMan - ok
21:14:29.0979 0x0cc0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:14:30.0026 0x0cc0  RasPppoe - ok
21:14:30.0041 0x0cc0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
21:14:30.0104 0x0cc0  RasSstp - ok
21:14:30.0119 0x0cc0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
21:14:30.0166 0x0cc0  rdbss - ok
21:14:30.0197 0x0cc0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:14:30.0213 0x0cc0  rdpbus - ok
21:14:30.0244 0x0cc0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:14:30.0275 0x0cc0  RDPCDD - ok
21:14:30.0306 0x0cc0  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
21:14:30.0353 0x0cc0  RDPDR - ok
21:14:30.0369 0x0cc0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:14:30.0447 0x0cc0  RDPENCDD - ok
21:14:30.0478 0x0cc0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:14:30.0509 0x0cc0  RDPREFMP - ok
21:14:30.0540 0x0cc0  [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
21:14:30.0634 0x0cc0  RDPWD - ok
21:14:30.0665 0x0cc0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:14:30.0728 0x0cc0  rdyboost - ok
21:14:30.0759 0x0cc0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:14:30.0806 0x0cc0  RemoteAccess - ok
21:14:30.0837 0x0cc0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:14:30.0930 0x0cc0  RemoteRegistry - ok
21:14:30.0962 0x0cc0  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
21:14:31.0055 0x0cc0  RFCOMM - ok
21:14:31.0071 0x0cc0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:14:31.0149 0x0cc0  RpcEptMapper - ok
21:14:31.0164 0x0cc0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
21:14:31.0211 0x0cc0  RpcLocator - ok
21:14:31.0242 0x0cc0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
21:14:31.0289 0x0cc0  RpcSs - ok
21:14:31.0336 0x0cc0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:14:31.0414 0x0cc0  rspndr - ok
21:14:31.0445 0x0cc0  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
21:14:31.0461 0x0cc0  s3cap - ok
21:14:31.0476 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] SamSs           C:\Windows\system32\lsass.exe
21:14:31.0492 0x0cc0  SamSs - ok
21:14:31.0492 0x0cc0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:14:31.0523 0x0cc0  sbp2port - ok
21:14:31.0570 0x0cc0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:14:31.0601 0x0cc0  SCardSvr - ok
21:14:31.0617 0x0cc0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:14:31.0664 0x0cc0  scfilter - ok
21:14:31.0710 0x0cc0  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
21:14:31.0788 0x0cc0  Schedule - ok
21:14:31.0804 0x0cc0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
21:14:31.0851 0x0cc0  SCPolicySvc - ok
21:14:31.0882 0x0cc0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:14:31.0960 0x0cc0  SDRSVC - ok
21:14:32.0007 0x0cc0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:14:32.0100 0x0cc0  secdrv - ok
21:14:32.0116 0x0cc0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
21:14:32.0163 0x0cc0  seclogon - ok
21:14:32.0178 0x0cc0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
21:14:32.0210 0x0cc0  SENS - ok
21:14:32.0241 0x0cc0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:14:32.0272 0x0cc0  SensrSvc - ok
21:14:32.0272 0x0cc0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys
21:14:32.0319 0x0cc0  Serenum - ok
21:14:32.0350 0x0cc0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
21:14:32.0397 0x0cc0  Serial - ok
21:14:32.0412 0x0cc0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
21:14:32.0444 0x0cc0  sermouse - ok
21:14:32.0490 0x0cc0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
21:14:32.0553 0x0cc0  SessionEnv - ok
21:14:32.0568 0x0cc0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
21:14:32.0600 0x0cc0  sffdisk - ok
21:14:32.0600 0x0cc0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
21:14:32.0631 0x0cc0  sffp_mmc - ok
21:14:32.0646 0x0cc0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
21:14:32.0693 0x0cc0  sffp_sd - ok
21:14:32.0693 0x0cc0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
21:14:32.0724 0x0cc0  sfloppy - ok
21:14:32.0771 0x0cc0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:14:32.0880 0x0cc0  SharedAccess - ok
21:14:32.0943 0x0cc0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:14:33.0036 0x0cc0  ShellHWDetection - ok
21:14:33.0083 0x0cc0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
21:14:33.0130 0x0cc0  SiSRaid2 - ok
21:14:33.0146 0x0cc0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
21:14:33.0192 0x0cc0  SiSRaid4 - ok
21:14:33.0208 0x0cc0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
21:14:33.0302 0x0cc0  Smb - ok
21:14:33.0348 0x0cc0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:14:33.0395 0x0cc0  SNMPTRAP - ok
21:14:33.0411 0x0cc0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
21:14:33.0458 0x0cc0  spldr - ok
21:14:33.0536 0x0cc0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
21:14:33.0598 0x0cc0  Spooler - ok
21:14:33.0816 0x0cc0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
21:14:34.0050 0x0cc0  sppsvc - ok
21:14:34.0050 0x0cc0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
21:14:34.0113 0x0cc0  sppuinotify - ok
21:14:34.0175 0x0cc0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
21:14:34.0253 0x0cc0  srv - ok
21:14:34.0284 0x0cc0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:14:34.0347 0x0cc0  srv2 - ok
21:14:34.0409 0x0cc0  [ 0C4540311E11664B245A263E1154CEF8, 63376322BFFAFF2F166AF3FDD3F1A346C21FAE21F406F659F8630779D1D6525D ] SrvHsfHDA       C:\Windows\system32\DRIVERS\VSTAZL6.SYS
21:14:34.0487 0x0cc0  SrvHsfHDA - ok
21:14:34.0565 0x0cc0  [ 02071D207A9858FBE3A48CBFD59C4A04, FEA4DEBAEC3465E0C7C1E8B721805922F6BBCB96A60A193B11688F4252F4B89E ] SrvHsfV92       C:\Windows\system32\DRIVERS\VSTDPV6.SYS
21:14:34.0659 0x0cc0  SrvHsfV92 - ok
21:14:34.0721 0x0cc0  [ 18E40C245DBFAF36FD0134A7EF2DF396, 0138A68958112101A5D3BD94114F320CE80B0C9A93E009AC78DE7415FCCC7DE7 ] SrvHsfWinac     C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
21:14:34.0799 0x0cc0  SrvHsfWinac - ok
21:14:34.0830 0x0cc0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:14:34.0877 0x0cc0  srvnet - ok
21:14:34.0908 0x0cc0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
21:14:34.0971 0x0cc0  SSDPSRV - ok
21:14:34.0971 0x0cc0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
21:14:35.0018 0x0cc0  SstpSvc - ok
21:14:35.0033 0x0cc0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
21:14:35.0049 0x0cc0  stexstor - ok
21:14:35.0127 0x0cc0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
21:14:35.0205 0x0cc0  stisvc - ok
21:14:35.0236 0x0cc0  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
21:14:35.0252 0x0cc0  storflt - ok
21:14:35.0283 0x0cc0  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
21:14:35.0314 0x0cc0  StorSvc - ok
21:14:35.0330 0x0cc0  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
21:14:35.0345 0x0cc0  storvsc - ok
21:14:35.0392 0x0cc0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
21:14:35.0423 0x0cc0  swenum - ok
21:14:35.0501 0x0cc0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
21:14:35.0610 0x0cc0  swprv - ok
21:14:35.0735 0x0cc0  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
21:14:35.0829 0x0cc0  SysMain - ok
21:14:35.0844 0x0cc0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:14:35.0907 0x0cc0  TabletInputService - ok
21:14:35.0954 0x0cc0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
21:14:36.0047 0x0cc0  TapiSrv - ok
21:14:36.0047 0x0cc0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
21:14:36.0094 0x0cc0  TBS - ok
21:14:36.0250 0x0cc0  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
21:14:36.0359 0x0cc0  Tcpip - ok
21:14:36.0500 0x0cc0  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:14:36.0546 0x0cc0  TCPIP6 - ok
21:14:36.0578 0x0cc0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:14:36.0624 0x0cc0  tcpipreg - ok
21:14:36.0671 0x0cc0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:14:36.0749 0x0cc0  TDPIPE - ok
21:14:36.0780 0x0cc0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
21:14:36.0843 0x0cc0  TDTCP - ok
21:14:36.0858 0x0cc0  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
21:14:36.0968 0x0cc0  tdx - ok
21:14:36.0968 0x0cc0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
21:14:37.0014 0x0cc0  TermDD - ok
21:14:37.0077 0x0cc0  [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService     C:\Windows\System32\termsrv.dll
21:14:37.0170 0x0cc0  TermService - ok
21:14:37.0186 0x0cc0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
21:14:37.0202 0x0cc0  Themes - ok
21:14:37.0217 0x0cc0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
21:14:37.0248 0x0cc0  THREADORDER - ok
21:14:37.0280 0x0cc0  [ DBCC20C02E8A3E43B03C304A4E40A84F, BF5F3ACCB0342304A6870E94D2576644B08DBF307C853C7DBA4B82B0C7309DA4 ] TPM             C:\Windows\system32\drivers\tpm.sys
21:14:37.0311 0x0cc0  TPM - ok
21:14:37.0326 0x0cc0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
21:14:37.0420 0x0cc0  TrkWks - ok
21:14:37.0482 0x0cc0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:14:37.0545 0x0cc0  TrustedInstaller - ok
21:14:37.0576 0x0cc0  [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:14:37.0623 0x0cc0  tssecsrv - ok
21:14:37.0670 0x0cc0  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:14:37.0732 0x0cc0  TsUsbFlt - ok
21:14:37.0732 0x0cc0  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
21:14:37.0810 0x0cc0  TsUsbGD - ok
21:14:37.0841 0x0cc0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:14:37.0935 0x0cc0  tunnel - ok
21:14:37.0950 0x0cc0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
21:14:37.0966 0x0cc0  uagp35 - ok
21:14:37.0997 0x0cc0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:14:38.0091 0x0cc0  udfs - ok
21:14:38.0106 0x0cc0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
21:14:38.0138 0x0cc0  UI0Detect - ok
21:14:38.0153 0x0cc0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:14:38.0169 0x0cc0  uliagpkx - ok
21:14:38.0200 0x0cc0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
21:14:38.0216 0x0cc0  umbus - ok
21:14:38.0231 0x0cc0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
21:14:38.0262 0x0cc0  UmPass - ok
21:14:38.0294 0x0cc0  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
21:14:38.0356 0x0cc0  UmRdpService - ok
21:14:38.0387 0x0cc0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
21:14:38.0465 0x0cc0  upnphost - ok
21:14:38.0496 0x0cc0  [ 481DFF26B4DCA8F4CBAC1F7DCE1D6829, 5D6E404FE0AB875202CA1A3E8E9D2F4368DF6ACCFA1C872ECFAF8399CBA3A485 ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys
21:14:38.0543 0x0cc0  usbccgp - ok
21:14:38.0590 0x0cc0  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
21:14:38.0684 0x0cc0  usbcir - ok
21:14:38.0699 0x0cc0  [ 74EE782B1D9C241EFE425565854C661C, E8258EA65B0FCAD4E077B176E9D9324646B652D6E651241E397346A39770D065 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
21:14:38.0762 0x0cc0  usbehci - ok
21:14:38.0808 0x0cc0  [ DC96BD9CCB8403251BCF25047573558E, 66EBF8A6B3BC0634F32DDCC8BA31F1EB5987E8C6853E1DC26005E3EED0945565 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
21:14:38.0902 0x0cc0  usbhub - ok
21:14:38.0918 0x0cc0  [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
21:14:38.0949 0x0cc0  usbohci - ok
21:14:38.0980 0x0cc0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
21:14:39.0027 0x0cc0  usbprint - ok
21:14:39.0042 0x0cc0  [ D76510CFA0FC09023077F22C2F979D86, 5662281C6D515423255D3C262EA368DBAFC250235E535FBFA3E59D3487695439 ] USBSTOR         C:\Windows\system32\drivers\USBSTOR.SYS
21:14:39.0120 0x0cc0  USBSTOR - ok
21:14:39.0120 0x0cc0  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
21:14:39.0183 0x0cc0  usbuhci - ok
21:14:39.0230 0x0cc0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
21:14:39.0308 0x0cc0  UxSms - ok
21:14:39.0339 0x0cc0  [ C118A82CD78818C29AB228366EBF81C3, 00820F3065871DCBA52A27C7F73BA470C4F2CB26EFB7F76FEF8B1207F81B284D ] VaultSvc        C:\Windows\system32\lsass.exe
21:14:39.0354 0x0cc0  VaultSvc - ok
21:14:39.0401 0x0cc0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:14:39.0448 0x0cc0  vdrvroot - ok
21:14:39.0510 0x0cc0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
21:14:39.0604 0x0cc0  vds - ok
21:14:39.0635 0x0cc0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
21:14:39.0698 0x0cc0  vga - ok
21:14:39.0698 0x0cc0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
21:14:39.0791 0x0cc0  VgaSave - ok
21:14:39.0807 0x0cc0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
21:14:39.0822 0x0cc0  vhdmp - ok
21:14:39.0854 0x0cc0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
21:14:39.0869 0x0cc0  viaide - ok
21:14:39.0900 0x0cc0  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
21:14:39.0916 0x0cc0  vmbus - ok
21:14:39.0932 0x0cc0  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
21:14:39.0963 0x0cc0  VMBusHID - ok
21:14:39.0978 0x0cc0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:14:39.0994 0x0cc0  volmgr - ok
21:14:40.0025 0x0cc0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
21:14:40.0041 0x0cc0  volmgrx - ok
21:14:40.0072 0x0cc0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
21:14:40.0088 0x0cc0  volsnap - ok
21:14:40.0103 0x0cc0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
21:14:40.0134 0x0cc0  vsmraid - ok
21:14:40.0259 0x0cc0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
21:14:40.0353 0x0cc0  VSS - ok
21:14:40.0384 0x0cc0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
21:14:40.0400 0x0cc0  vwifibus - ok
21:14:40.0446 0x0cc0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
21:14:40.0493 0x0cc0  W32Time - ok
21:14:40.0509 0x0cc0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
21:14:40.0524 0x0cc0  WacomPen - ok
21:14:40.0556 0x0cc0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:14:40.0602 0x0cc0  WANARP - ok
21:14:40.0602 0x0cc0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:14:40.0634 0x0cc0  Wanarpv6 - ok
21:14:40.0743 0x0cc0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
21:14:40.0868 0x0cc0  wbengine - ok
21:14:40.0899 0x0cc0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:14:40.0930 0x0cc0  WbioSrvc - ok
21:14:40.0946 0x0cc0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
21:14:40.0992 0x0cc0  wcncsvc - ok
21:14:40.0992 0x0cc0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:14:41.0039 0x0cc0  WcsPlugInService - ok
21:14:41.0070 0x0cc0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
21:14:41.0086 0x0cc0  Wd - ok
21:14:41.0164 0x0cc0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:14:41.0242 0x0cc0  Wdf01000 - ok
21:14:41.0289 0x0cc0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:14:41.0414 0x0cc0  WdiServiceHost - ok
21:14:41.0429 0x0cc0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
21:14:41.0476 0x0cc0  WdiSystemHost - ok
21:14:41.0523 0x0cc0  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
21:14:41.0554 0x0cc0  WebClient - ok
21:14:41.0601 0x0cc0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:14:41.0679 0x0cc0  Wecsvc - ok
21:14:41.0694 0x0cc0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
21:14:41.0741 0x0cc0  wercplsupport - ok
21:14:41.0772 0x0cc0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:14:41.0850 0x0cc0  WerSvc - ok
21:14:41.0882 0x0cc0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:14:41.0975 0x0cc0  WfpLwf - ok
21:14:41.0975 0x0cc0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:14:42.0006 0x0cc0  WIMMount - ok
21:14:42.0038 0x0cc0  WinDefend - ok
21:14:42.0053 0x0cc0  WinHttpAutoProxySvc - ok
21:14:42.0131 0x0cc0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
21:14:42.0225 0x0cc0  Winmgmt - ok
21:14:42.0381 0x0cc0  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll
21:14:42.0474 0x0cc0  WinRM - ok
21:14:42.0521 0x0cc0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUSB.sys
21:14:42.0599 0x0cc0  WinUsb - ok
21:14:42.0693 0x0cc0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
21:14:42.0771 0x0cc0  Wlansvc - ok
21:14:42.0802 0x0cc0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
21:14:42.0833 0x0cc0  WmiAcpi - ok
21:14:42.0880 0x0cc0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:14:42.0927 0x0cc0  wmiApSrv - ok
21:14:42.0958 0x0cc0  WMPNetworkSvc - ok
21:14:42.0974 0x0cc0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:14:43.0036 0x0cc0  WPCSvc - ok
21:14:43.0052 0x0cc0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:14:43.0083 0x0cc0  WPDBusEnum - ok
21:14:43.0098 0x0cc0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
21:14:43.0161 0x0cc0  ws2ifsl - ok
21:14:43.0176 0x0cc0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
21:14:43.0208 0x0cc0  wscsvc - ok
21:14:43.0208 0x0cc0  WSearch - ok
21:14:43.0566 0x0cc0  [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv        C:\Windows\system32\wuaueng.dll
21:14:43.0660 0x0cc0  wuauserv - ok
21:14:43.0676 0x0cc0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:14:43.0754 0x0cc0  WudfPf - ok
21:14:43.0785 0x0cc0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:14:43.0847 0x0cc0  WUDFRd - ok
21:14:43.0894 0x0cc0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
21:14:43.0941 0x0cc0  wudfsvc - ok
21:14:43.0988 0x0cc0  [ FE90B750AB808FB9DD8FBB428B5FF83B, 3F8F592EC813BE292D305A87C5BA852F8BC3D7CE610612D9871F209A17326AA8 ] WwanSvc         C:\Windows\System32\wwansvc.dll
21:14:44.0066 0x0cc0  WwanSvc - ok
21:14:44.0113 0x0cc0  ================ Scan global ===============================
21:14:44.0128 0x0cc0  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
21:14:44.0175 0x0cc0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
21:14:44.0206 0x0cc0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
21:14:44.0253 0x0cc0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
21:14:44.0300 0x0cc0  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
21:14:44.0331 0x0cc0  [ Global ] - ok
21:14:44.0331 0x0cc0  ================ Scan MBR ==================================
21:14:44.0347 0x0cc0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:14:44.0799 0x0cc0  \Device\Harddisk0\DR0 - detected TDSS File System ( 1 )
21:14:44.0799 0x0cc0  \Device\Harddisk0\DR0 ( TDSS File System ) - warning
21:15:04.0845 0x0cc0  ================ Scan VBR ==================================
21:15:04.0845 0x0cc0  [ 4B645D7B9C56658CC5F5B457644ED787 ] \Device\Harddisk0\DR0\Partition1
21:15:04.0845 0x0cc0  \Device\Harddisk0\DR0\Partition1 - ok
21:15:04.0892 0x0cc0  AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 14.0.0.307 ), 0x40000 ( disabled : updated )
21:15:04.0892 0x0cc0  Win FW state via NFP2: enabled
21:15:24.0907 0x0cc0  ============================================================
21:15:24.0907 0x0cc0  Scan finished
21:15:24.0907 0x0cc0  ============================================================
21:15:24.0922 0x0fcc  Detected object count: 1
21:15:24.0922 0x0fcc  Actual detected object count: 1
21:15:38.0728 0x0fcc  \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
21:15:38.0728 0x0fcc  \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip 
21:15:53.0176 0x0b64  Deinitialize success

aharonov · 18.10.2013, 21:33

Ok, dann bitte so weiter.
Mach danach einen Neustart - meldet Avira dann immer noch was oder findet es nichts mehr?

Schritt 1

Starte bitte TDSSkiller.exe.
Vista und Win7 User mit Rechtsklick "als Administrator ausführen".

Stelle über Change Paramters die Optionen wieder gleich ein wie beim vorherigen Scan.
Drücke dann auf Start Scan.
Mache während des Scans nichts am Rechner!
Gehe sicher, dass bei TDSS File System die Option Cure (default) oder Delete angehakt ist.
Drücke Continue --> Reboot.
TDSSKiller wird ein Logfile auf deinem Systemlaufwerk speichern (C:\TDSSKiller.<version_date_time>log.txt).
Poste bitte den Inhalt dieses Logfiles in deinen Thread.

Schritt 2

Drücke die

+ R Taste und schreibe "notepad" in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument:

Code:

ATTFilter

Disk=0 Partition=3 delete

Speichere dieses dann bitte unter dem Dateinamen Fix.txt ebenfalls auf deinen Desktop neben ListParts.

Starte nun ListParts und klicke den Fix Button.
Nachdem der Fix durchgelaufen ist, drücke den Scan Button.
Das Tool erstellt eine neue Result.txt auf dem Desktop.
Poste deren Inhalt bitte hier.

GlobalPen · 18.10.2013, 22:28

Schritt 1:
TDSSKiller

Code:

ATTFilter

23:11:45.0664 0x0e98  TDSS rootkit removing tool 3.0.0.14 Oct 15 2013 15:35:38
23:11:58.0366 0x0e98  ============================================================
23:11:58.0366 0x0e98  Current date / time: 2013/10/18 23:11:58.0366
23:11:58.0366 0x0e98  SystemInfo:
23:11:58.0366 0x0e98  
23:11:58.0366 0x0e98  OS Version: 6.1.7601 ServicePack: 1.0
23:11:58.0366 0x0e98  Product type: Workstation
23:11:58.0367 0x0e98  ComputerName: LENOVO-NB
23:11:58.0367 0x0e98  UserName: Steve
23:11:58.0367 0x0e98  Windows directory: C:\Windows
23:11:58.0367 0x0e98  System windows directory: C:\Windows
23:11:58.0367 0x0e98  Running under WOW64
23:11:58.0367 0x0e98  Processor architecture: Intel x64
23:11:58.0367 0x0e98  Number of processors: 2
23:11:58.0367 0x0e98  Page size: 0x1000
23:11:58.0367 0x0e98  Boot type: Normal boot
23:11:58.0367 0x0e98  ============================================================
23:12:01.0155 0x0e98  System UUID: {1D4F100E-D071-E6A6-683A-61DD6DB771B3}
23:12:01.0982 0x0e98  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
23:12:01.0993 0x0e98  ============================================================
23:12:01.0993 0x0e98  \Device\Harddisk0\DR0:
23:12:01.0993 0x0e98  MBR partitions:
23:12:01.0993 0x0e98  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xD1A800, BlocksNum 0xD278800
23:12:01.0993 0x0e98  ============================================================
23:12:02.0020 0x0e98  C: <-> \Device\Harddisk0\DR0\Partition1
23:12:02.0021 0x0e98  ============================================================
23:12:02.0021 0x0e98  Initialize success
23:12:02.0021 0x0e98  ============================================================
23:13:05.0051 0x0e04  ============================================================
23:13:05.0051 0x0e04  Scan started
23:13:05.0051 0x0e04  Mode: Manual; SigCheck; TDLFS; 
23:13:05.0051 0x0e04  ============================================================
23:13:05.0051 0x0e04  KSN ping started
23:13:10.0574 0x0e04  KSN ping finished: true
23:13:10.0574 0x0e04  ================ Scan system memory ========================
23:13:10.0574 0x0e04  System memory - ok
23:13:10.0574 0x0e04  ================ Scan MBR ==================================
23:13:10.0605 0x0e04  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:13:11.0042 0x0e04  \Device\Harddisk0\DR0 - detected TDSS File System ( 1 )
23:13:11.0042 0x0e04  \Device\Harddisk0\DR0 ( TDSS File System ) - warning
23:13:31.0119 0x0e04  ================ Scan VBR ==================================
23:13:31.0166 0x0e04  [ 4B645D7B9C56658CC5F5B457644ED787 ] \Device\Harddisk0\DR0\Partition1
23:13:31.0228 0x0e04  \Device\Harddisk0\DR0\Partition1 - ok
23:13:31.0337 0x0e04  AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 14.0.0.307 ), 0x40000 ( disabled : updated )
23:13:31.0353 0x0e04  Win FW state via NFP2: enabled
23:13:44.0316 0x0e04  ============================================================
23:13:44.0316 0x0e04  Scan finished
23:13:44.0316 0x0e04  ============================================================
23:13:44.0332 0x0b48  Detected object count: 1
23:13:44.0332 0x0b48  Actual detected object count: 1
23:14:19.0853 0x0b48  \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
23:14:19.0853 0x0b48  \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
23:14:19.0853 0x0b48  \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
23:14:19.0869 0x0b48  \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
23:14:19.0869 0x0b48  \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
23:14:19.0884 0x0b48  \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
23:14:19.0884 0x0b48  \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
23:14:19.0884 0x0b48  \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
23:14:19.0884 0x0b48  \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
23:14:19.0900 0x0b48  \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
23:14:19.0900 0x0b48  \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
23:14:19.0900 0x0b48  \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
23:14:19.0962 0x0b48  \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
23:14:19.0962 0x0b48  \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
23:14:19.0978 0x0b48  \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
23:14:19.0978 0x0b48  \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
23:14:19.0994 0x0b48  \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
23:14:20.0025 0x0b48  \Device\Harddisk0\DR0\TDLFS\com32 - copied to quarantine
23:14:20.0040 0x0b48  \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
23:14:20.0056 0x0b48  \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quarantine
23:14:21.0632 0x0b48  \Device\Harddisk0\DR0\TDLFS\sant32 - copied to quarantine
23:14:21.0710 0x0b48  \Device\Harddisk0\DR0\TDLFS\serf_conf - copied to quarantine
23:14:21.0741 0x0b48  \Device\Harddisk0\DR0\TDLFS\bbr_conf - copied to quarantine
23:14:21.0756 0x0b48  \Device\Harddisk0\DR0\TDLFS - deleted
23:14:21.0756 0x0b48  \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete 
23:14:27.0653 0x0e94  Deinitialize success

Schritt 2:
PLfix

Code:

ATTFilter

Script used: "Disk=0 Partition=3 delete"

Danke!

Antivir hat nach einem Neustart keine Meldung mehr gebracht. Der Virus schein weg zu sein oder fehlt noch was?

aharonov · 18.10.2013, 23:10

Hallo,

wenn Avira nichts mehr meldet und diese zusätzliche winzige Partition gelöscht ist, wären wir durch.
(Das Ding war nach der Windows-Neuinstallation sowieso nicht mehr aktiv, Avira hat nur noch die Resten gesehen, welche überlebt hatten.)

aharonov · 17.11.2013, 22:02

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten.
Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.

18.10.2013, 23:10	#6
aharonov /// TB-Ausbilder	Windows 7: BOO/TDss.O in Masterbootsektor nach Formatierung Hallo, wenn Avira nichts mehr meldet und diese zusätzliche winzige Partition gelöscht ist, wären wir durch. (Das Ding war nach der Windows-Neuinstallation sowieso nicht mehr aktiv, Avira hat nur noch die Resten gesehen, welche überlebt hatten.) __________________ --> Windows 7: BOO/TDss.O in Masterbootsektor nach Formatierung

Windows 7: BOO/TDss.O in Masterbootsektor nach Formatierung

Log-Analyse und Auswertung: Windows 7: BOO/TDss.O in Masterbootsektor nach Formatierung