Win7 (x86) - Maus klickt mehrfach

Kagu-chan · 04.01.2015, 15:22

Hallo,

seit einiger Zeit klickt meine Maus mehrfach.
Zuerst ist das mit einer Maus aufgetreten, die dafür bekannt ist, diesen Fehler zu zeigen. Trotz entsprechendem Gegentool (vom Hersteller selbst) wurde es vor etwa ein / zwei Monaten so heftig, das ich mit einem Klick Dinge 7-8fach ausgeführt habe.

Ich habe die Maus vor etwa 3 Wochen gewechselt (normale Funkmaus) und habe das Problem seit 3 Tagen erneut (zwei - drei Klicks).
Laut bekannten wird das durch Viren o.ä. hervorgerufen.

Ich habe den Gerätemanager geprüft und gesehen, das die Maus doppelt installiert wurde.
Beide deinstalliert, neu gestartet, Problem weiterhin vorhanden, wieder zwei installierte Maustreiber.

Gemäß diesem Thread habe ich gescannt, hier die Logfiles:

defogger:

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:35 on 04/01/2015 (Kagu-chan)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

fsrt

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-01-2015 03
Ran by Kagu-chan (administrator) on KAGU-CHAN-PC on 04-01-2015 14:36:44
Running from E:\Users\Kagu-chan\Desktop
Loaded Profile: Kagu-chan (Available profiles: Kagu-chan)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\Bamboo Dock\BambooCore.exe
() C:\Program Files\puush\puush.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Spotify Ltd) E:\Users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
() C:\Program Files\Bamboo Dock\Bamboo Dock\Bamboo Dock.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BambooCore] => C:\Program Files\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Run: [puush] => C:\Program Files\puush\puush.exe [567880 2014-09-29] ()
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Run: [Spotify Web Helper] => E:\Users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-11] (Spotify Ltd)
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Run: [CCleaner Monitoring] => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\MountPoints2: {b89fa002-5ca8-11e4-a6b7-00138fb69463} - G:\install.exe
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\MountPoints2: {f3716c13-5b9b-11e4-9cdc-00138fb69463} - G:\install.exe
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-2026768166-240738973-2546325667-1001] => 192.168.0.205:3128
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\S-1-5-21-2026768166-240738973-2546325667-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: E:\Users\Kagu-chan\AppData\Roaming\Mozilla\Firefox\Profiles\z352l41s.default
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 0
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "192.168.0.205"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "192.168.0.205"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "192.168.0.205"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "192.168.0.205"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @raidcall.en/RCplugin -> E:\Users\Kagu-chan\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR DefaultSearchKeyword: Default -> 80DA302478B4558A96F4C2FF4AD01669672457E0C900CF3F699C97E0650C2BE6
CHR DefaultSearchURL: Default -> 31930FB7BBA41FB5C619BC9EF791EB41381F3482E912C7B4A41C8116268DA010
CHR Profile: E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ShowIp) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoljmemkbciolpigpabjfkagboolkcj [2014-09-29]
CHR Extension: (Google Drive) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-29]
CHR Extension: (Session Manager) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbcnbpafconjjigibnhbfmmgdbbkcjfi [2014-09-29]
CHR Extension: (Google Voice Search Hotword (Beta)) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-29]
CHR Extension: (YouTube) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-29]
CHR Extension: (Google-Suche) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-29]
CHR Extension: (SAO Theme 1920x1080) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgikfepnnphbmgngmpiflajcbmoomnll [2014-09-29]
CHR Extension: (HTTPS Everywhere) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2014-09-29]
CHR Extension: (AdBlock) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-29]
CHR Extension: (Window Resizer) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkelicaakdanhinjdeammmilcgefonfh [2014-09-29]
CHR Extension: (Lazarus: Form Recovery) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\loljledaigphbcpfhfmgopdkppkifgno [2014-09-29]
CHR Extension: (Ghostery) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-09-29]
CHR Extension: (Google Wallet) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-29]
CHR Extension: (Google Mail) - E:\Users\Kagu-chan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-29]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 FileZilla Server; E:\FZ\FileZilla Server\FileZilla Server.exe [772608 2014-09-19] (FileZilla Project) [File not signed]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5419792 2014-11-28] (TeamViewer GmbH)
S4 TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [567064 2014-08-19] (Wacom Technology, Corp.)
S4 LMIGuardianSvc; "C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-13] (VIA Technologies, Inc.              )
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 hidkmdf; C:\Windows\System32\DRIVERS\hidkmdf.sys [12088 2014-08-06] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [27136 2009-09-16] (Tunngle.net)
R3 teamviewervpn; C:\Windows\System32\DRIVERS\teamviewervpn.sys [25088 2013-10-17] (TeamViewer GmbH)
R3 WacHidRouter; C:\Windows\System32\DRIVERS\wachidrouter.sys [85304 2014-08-06] (Wacom Technology)
R3 wacomrouterfilter; C:\Windows\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-08-06] (Wacom Technology)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-04 14:36 - 2015-01-04 14:37 - 00013079 _____ () E:\Users\Kagu-chan\Desktop\FRST.txt
2015-01-04 14:36 - 2015-01-04 14:36 - 00000000 ____D () C:\FRST
2015-01-04 14:35 - 2015-01-04 14:36 - 00000480 _____ () E:\Users\Kagu-chan\Desktop\defogger_disable.log
2015-01-04 14:35 - 2015-01-04 14:35 - 00000000 _____ () E:\Users\Kagu-chan\defogger_reenable
2015-01-04 14:34 - 2015-01-04 14:34 - 00380416 _____ () E:\Users\Kagu-chan\Downloads\Gmer-19357.exe
2015-01-04 14:34 - 2015-01-04 14:34 - 00380416 _____ () E:\Users\Kagu-chan\Desktop\Gmer-19357.exe
2015-01-04 14:33 - 2015-01-04 14:33 - 01115136 _____ (Farbar) E:\Users\Kagu-chan\Downloads\FRST.exe
2015-01-04 14:33 - 2015-01-04 14:33 - 01115136 _____ (Farbar) E:\Users\Kagu-chan\Desktop\FRST.exe
2015-01-04 14:33 - 2015-01-04 14:32 - 00050477 _____ () E:\Users\Kagu-chan\Desktop\Defogger.exe
2015-01-04 14:32 - 2015-01-04 14:32 - 00050477 _____ () E:\Users\Kagu-chan\Downloads\Defogger.exe
2015-01-04 08:06 - 2015-01-04 08:11 - 661834390 _____ () E:\Users\Kagu-chan\Desktop\[Chinurarete_Subs]Fairy_Tail_S2_Folge_39_8BIT.mp4
2015-01-03 16:41 - 2015-01-03 16:41 - 00027587 _____ () E:\Users\Kagu-chan\Desktop\inami-san.jpg
2015-01-02 18:19 - 2015-01-02 18:19 - 00041472 _____ () E:\Users\Kagu-chan\Desktop\Japanisch.doc
2015-01-01 19:54 - 2015-01-01 19:54 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\leer
2014-12-31 17:49 - 2014-12-31 17:50 - 06178535 _____ () E:\Users\Kagu-chan\Desktop\Twisted Sweet Sweet Cendrillon DrugMBCB-R4 (2)_.mp3
2014-12-31 17:49 - 2014-12-31 17:49 - 00000000 ____D () C:\Program Files\Lame For Audacity
2014-12-31 17:48 - 2014-12-31 17:49 - 00527423 _____ ( ) E:\Users\Kagu-chan\Downloads\Lame_v3.99.3_for_Windows.exe
2014-12-31 17:46 - 2014-12-31 17:55 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Audacity
2014-12-31 17:46 - 2014-12-31 17:46 - 00000881 _____ () E:\Users\Public\Desktop\Audacity.lnk
2014-12-31 17:46 - 2014-12-31 17:46 - 00000000 ____D () C:\Program Files\Audacity
2014-12-31 17:45 - 2014-12-31 17:45 - 22892794 _____ (Audacity Team ) E:\Users\Kagu-chan\Downloads\audacity-win-2.0.6 (1).exe
2014-12-31 17:36 - 2014-12-31 17:36 - 15540379 _____ () E:\Users\Kagu-chan\Desktop\Desktop.rar
2014-12-31 17:36 - 2014-12-29 23:03 - 10286660 _____ () E:\Users\Kagu-chan\Desktop\Twisted Sweet Sweet Cendrillon DrugMBCB-R4 (2).mp3
2014-12-31 17:19 - 2014-12-31 17:30 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\【↑Twisted ǝʇɐɟ↓】『Sweet Sweet Cendrillon Drug』【MBCB-R4】
2014-12-31 17:19 - 2014-12-31 16:56 - 06234113 _____ () E:\Users\Kagu-chan\Desktop\Twisted Sweet Sweet Cendrillon DrugMBCB-R4.mp3
2014-12-31 16:54 - 2014-12-31 16:54 - 06234113 _____ () E:\Users\Kagu-chan\Downloads\Twisted fate Sweet Sweet Cendrillon Drug Remix.mp3
2014-12-31 16:32 - 2014-12-31 16:32 - 00040374 _____ () E:\Users\Kagu-chan\Desktop\aaa.ass
2014-12-31 15:09 - 2014-12-31 15:09 - 01564052 _____ () E:\Users\Kagu-chan\Desktop\Spielicon.tif
2014-12-31 15:09 - 2014-12-31 15:09 - 01563192 _____ () E:\Users\Kagu-chan\Desktop\Spielicon.ico
2014-12-31 08:14 - 2014-12-31 08:14 - 00000000 ____D () C:\Windows\symbols
2014-12-31 07:53 - 2014-12-31 07:53 - 00000000 ____D () E:\Users\Kagu-chan\Downloads\luajit-win-master
2014-12-30 22:59 - 2014-12-30 22:59 - 00509264 _____ (Microsoft Corporation) E:\Users\Kagu-chan\Downloads\winsdk_web.exe
2014-12-30 15:57 - 2015-01-02 04:54 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\working
2014-12-30 15:48 - 2014-12-30 15:48 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\autoload
2014-12-29 23:02 - 2014-12-29 23:03 - 10286660 _____ () E:\Users\Kagu-chan\Downloads\【↑Twisted ǝʇɐɟ↓】『Sweet Sweet Cendrillon Drug』【MBCB-R4】.mp3
2014-12-29 17:45 - 2015-01-02 22:04 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\taiyo
2014-12-29 10:20 - 2014-12-29 10:20 - 00057899 _____ () E:\Users\Kagu-chan\Desktop\Lebenslauf Kai Böse.pdf
2014-12-29 10:20 - 2014-12-29 10:20 - 00040854 _____ () E:\Users\Kagu-chan\Desktop\Lebenslauf.odt
2014-12-29 10:10 - 2014-12-29 10:10 - 00015431 _____ () E:\Users\Kagu-chan\Desktop\Lebenslauf Kai Böse (1).pdf
2014-12-29 09:07 - 2014-12-29 09:07 - 00000000 ____D () E:\Users\Kagu-chan\Downloads\Yutils-master
2014-12-28 17:31 - 2014-12-28 17:33 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\IcoFX
2014-12-28 17:31 - 2014-12-28 17:31 - 00000000 ____D () C:\Program Files\IcoFX 1.6
2014-12-28 12:16 - 2014-12-28 12:16 - 00000000 ____D () E:\Users\Kagu-chan\.config
2014-12-28 09:02 - 2014-12-28 09:02 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Beat Hazard
2014-12-28 05:41 - 2014-12-28 09:00 - 00000000 ____D () E:\Users\Kagu-chan\Downloads\Tests
2014-12-27 07:49 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-27 07:03 - 2014-12-27 07:03 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-27 07:03 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-27 07:03 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-27 07:03 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-27 06:38 - 2014-12-27 06:50 - 00000000 ____D () C:\Program Files\Optimizer Pro 3.16
2014-12-26 11:04 - 2014-12-26 11:17 - 513768341 _____ () E:\Users\Kagu-chan\Downloads\[BNFs]Fairy_Tail_S2_38_[720p].mp4
2014-12-26 11:04 - 2014-12-26 11:17 - 492697118 _____ () E:\Users\Kagu-chan\Downloads\[BNFs]Fairy_Tail_S2_37_[720p].mp4
2014-12-25 10:59 - 2014-12-25 10:59 - 00000000 ____D () E:\Users\Kagu-chan\Documents\RPGVXAce
2014-12-25 07:01 - 2014-12-25 07:01 - 00000119 _____ () E:\Users\Kagu-chan\.gitconfig
2014-12-25 07:01 - 2014-12-25 07:01 - 00000000 ____D () E:\Users\Kagu-chan\Documents\GitHub
2014-12-25 07:00 - 2014-12-25 07:00 - 00000000 ____D () E:\Users\Kagu-chan\.ssh
2014-12-25 06:59 - 2014-12-28 11:07 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\GitHub
2014-12-25 06:59 - 2014-12-28 11:07 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\GitHub
2014-12-25 06:59 - 2014-12-28 11:05 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2014-12-25 06:43 - 2014-12-28 11:10 - 00000000 ____D () C:\Program Files\Git
2014-12-24 12:04 - 2014-12-24 12:04 - 00000000 ____D () E:\Users\Kagu-chan\.gem
2014-12-23 20:18 - 2014-12-31 06:04 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\Kara
2014-12-23 02:32 - 2014-12-27 06:49 - 00000000 ____D () C:\Program Files\ScintillaNET v2.6
2014-12-22 23:20 - 2014-12-31 06:04 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\Clannad After Story FX
2014-12-21 03:56 - 2014-12-29 18:05 - 00003146 _____ () E:\Users\Kagu-chan\AppData\Roaming\ASSDraw3.cfg
2014-12-21 03:34 - 2014-12-22 20:57 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\FX
2014-12-21 00:16 - 2014-12-21 00:21 - 00000000 ____D () E:\Users\Kagu-chan\Desktop\Wichtig
2014-12-20 22:57 - 2014-12-20 22:57 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-20 22:36 - 2014-12-27 07:03 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-12-17 17:50 - 2014-12-17 17:50 - 00000000 ____D () E:\Users\Kagu-chan\Documents\MPC-HC Capture
2014-12-17 06:54 - 2014-12-17 06:54 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\assembly
2014-12-17 06:37 - 2015-01-02 07:54 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\vlc
2014-12-15 02:18 - 2014-12-15 02:18 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 2.1.5-p273
2014-12-15 02:17 - 2014-12-15 02:18 - 00000000 ____D () C:\Ruby21
2014-12-14 18:37 - 2014-12-14 18:37 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\FXSpindle
2014-12-13 19:01 - 2014-12-13 19:01 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-13 18:47 - 2015-01-03 12:06 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Battle.net
2014-12-13 18:47 - 2014-12-13 18:47 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Battle.net
2014-12-13 18:47 - 2014-12-13 18:47 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Blizzard Entertainment
2014-12-13 18:46 - 2014-12-13 18:46 - 00000000 ____D () C:\Program Files\Battle.net
2014-12-12 04:45 - 2014-12-12 04:45 - 00210701 _____ () E:\Users\Kagu-chan\AppData\Local\debuggee.mdmp
2014-12-11 20:04 - 2015-01-01 03:24 - 00000000 ____D () E:\Users\Kagu-chan\Documents\Visual Studio 2010
2014-12-11 20:04 - 2014-12-11 20:04 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2014-12-11 20:04 - 2014-12-11 20:04 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-12-11 20:04 - 2014-12-11 20:04 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-12-11 20:02 - 2014-12-11 20:05 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 10.0
2014-12-11 20:02 - 2014-12-11 20:02 - 00000000 ____D () C:\Windows\PCHEALTH
2014-12-11 20:02 - 2014-12-11 20:02 - 00000000 ____D () C:\Program Files\Microsoft SDKs
2014-12-11 20:02 - 2014-12-11 20:02 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer
2014-12-11 15:52 - 2014-12-11 15:52 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\wacomid-desktop-launcher
2014-12-11 04:34 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-11 04:34 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-11 04:34 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-11 04:34 - 2014-11-22 03:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-11 04:34 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-11 04:34 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-11 04:34 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-11 04:34 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-11 04:34 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-11 04:34 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-11 04:34 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-11 04:34 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-11 04:34 - 2014-11-22 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-11 04:34 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-11 04:34 - 2014-11-22 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-11 04:34 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-11 04:34 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-11 04:34 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-11 04:34 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-11 04:34 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-11 04:34 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-11 04:34 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-11 04:34 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-11 04:34 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-11 04:34 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-11 04:34 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-11 04:34 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-11 04:34 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-11 04:34 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-11 04:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-11 00:30 - 2014-12-11 00:30 - 00000000 ____D () E:\Users\Kagu-chan\Downloads\[SHFS] Sono Hanabira ni Kuchizuke o - Anata to Koibito Tsunagi (x264, 480p)[5FA770E1]
2014-12-08 17:25 - 2014-12-08 17:26 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\NexusFont
2014-12-05 22:09 - 2014-12-08 20:34 - 00006484 _____ () E:\Users\Kagu-chan\Desktop\Zucht.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-04 14:37 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Temp
2015-01-04 14:37 - 2014-09-29 11:20 - 10485760 ___SH () E:\Users\Kagu-chan\NTUSER.DAT
2015-01-04 14:37 - 2014-09-29 11:20 - 00262144 ___SH () E:\Users\Kagu-chan\ntuser.dat.LOG1
2015-01-04 14:36 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Desktop
2015-01-04 14:35 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan
2015-01-04 14:34 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Downloads
2015-01-04 14:29 - 2014-09-29 11:57 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Skype
2015-01-04 14:17 - 2009-07-14 05:34 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-04 14:17 - 2009-07-14 05:34 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-04 14:11 - 2014-09-29 11:12 - 02037625 _____ () C:\Windows\WindowsUpdate.log
2015-01-04 14:08 - 2014-11-26 22:24 - 00000496 ____H () C:\Windows\Tasks\BrickAugmenter-S-4223009896.job
2015-01-04 14:08 - 2014-09-29 11:37 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-04 14:08 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-04 14:08 - 2009-07-14 05:39 - 00030933 _____ () C:\Windows\setupact.log
2015-01-04 14:00 - 2014-09-29 11:37 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-04 13:57 - 2014-11-03 23:26 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Spotify
2015-01-04 13:56 - 2014-09-29 21:01 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\TSVNCache
2015-01-04 13:54 - 2014-09-29 11:28 - 02369320 ____H () E:\Users\Kagu-chan\AppData\Local\IconCache.db
2015-01-04 13:49 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming
2015-01-04 13:13 - 2014-11-03 23:26 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Spotify
2015-01-04 11:47 - 2014-09-29 11:52 - 00000000 ____D () C:\Program Files\osu!
2015-01-04 11:06 - 2014-09-30 12:30 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\FileZilla
2015-01-04 10:10 - 2014-09-29 12:00 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\TS3Client
2015-01-02 22:05 - 2014-09-30 23:19 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Aegisub
2015-01-01 22:37 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Links
2014-12-31 23:42 - 2014-09-30 22:23 - 00000000 ____D () C:\Program Files\NyuFX
2014-12-31 20:04 - 2009-07-14 03:03 - 00197632 ____H () E:\Users\Default\NTUSER.DAT.LOG1
2014-12-31 17:46 - 2014-09-29 12:33 - 00000000 __RHD () E:\Users\Public\Desktop
2014-12-31 10:11 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-12-31 08:32 - 2014-10-04 22:54 - 00000000 ____D () C:\Program Files\TeamViewer
2014-12-31 08:11 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\MSBuild
2014-12-29 18:05 - 2014-09-29 22:32 - 00000600 _____ () E:\Users\Kagu-chan\AppData\Local\PUTTY.RND
2014-12-29 08:37 - 2010-11-20 22:48 - 00027658 _____ () C:\Windows\PFRO.log
2014-12-28 18:24 - 2014-09-29 17:23 - 00000000 ____D () C:\Program Files\Steam
2014-12-28 11:06 - 2014-09-29 11:37 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Deployment
2014-12-28 05:48 - 2014-09-29 17:28 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-27 07:39 - 2014-09-29 11:57 - 00000000 ___RD () C:\Program Files\Skype
2014-12-27 07:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Globalization
2014-12-27 06:59 - 2014-09-29 12:32 - 00000000 ___RD () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2014-12-27 06:59 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local
2014-12-27 06:59 - 2014-09-29 11:21 - 00001024 _____ () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-27 06:51 - 2009-07-14 05:33 - 07670112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-27 06:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-12-27 06:49 - 2009-07-14 03:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-12-27 06:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-12-27 06:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-12-27 06:43 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-12-27 06:39 - 2014-10-29 01:13 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\uTorrent
2014-12-27 06:37 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan\AppData\LocalLow
2014-12-25 10:59 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Documents
2014-12-25 08:04 - 2014-10-29 01:22 - 00000000 ____D () E:\Users\Kagu-chan\Documents\PPSSPP
2014-12-23 00:19 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Pictures
2014-12-23 00:06 - 2014-11-26 22:39 - 00000000 ____D () C:\MoTemp
2014-12-21 06:14 - 2014-09-29 11:37 - 01311280 _____ () E:\Users\Kagu-chan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-21 03:54 - 2014-09-30 23:20 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\fontconfig
2014-12-21 03:32 - 2014-10-25 02:00 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\TeamViewer
2014-12-20 22:59 - 2014-10-26 00:43 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\DAEMON Tools Lite
2014-12-20 22:59 - 2014-09-29 12:08 - 00000000 ____D () C:\Windows\Panther
2014-12-15 17:08 - 2010-11-20 22:01 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-15 01:29 - 2014-09-29 12:33 - 00000000 ___RD () E:\Users\Kagu-chan\Music
2014-12-14 18:32 - 2014-11-12 05:13 - 00000496 _____ () C:\Windows\system32\TeamViewer10_Hooks.log
2014-12-11 20:11 - 2014-09-29 12:32 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Local\Microsoft
2014-12-11 20:04 - 2014-09-29 12:32 - 00000000 ___SD () E:\Users\Kagu-chan\AppData\Roaming\Microsoft
2014-12-11 20:02 - 2014-09-29 11:48 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-12-11 20:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-11 16:42 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-12-11 15:47 - 2014-09-29 13:37 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-12-11 15:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-12-11 04:39 - 2014-10-26 05:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-11 04:34 - 2014-10-26 05:29 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 22:53 - 2014-10-04 18:29 - 00000000 ____D () E:\Users\Kagu-chan\AppData\Roaming\.minecraft

Some content of TEMP:
====================
E:\Users\Kagu-chan\AppData\Local\Temp\0YyWZnAdrE.exe
E:\Users\Kagu-chan\AppData\Local\Temp\12A2D87C-7A03-88B4-8BD7-150D22390D4C.dll
E:\Users\Kagu-chan\AppData\Local\Temp\12A2D87C-7A03-88B4-8BD7-150D22390D4C.exe
E:\Users\Kagu-chan\AppData\Local\Temp\1mNc5PGxyV.exe
E:\Users\Kagu-chan\AppData\Local\Temp\1Rly75wBpd.exe
E:\Users\Kagu-chan\AppData\Local\Temp\3gElvKtFSt.exe
E:\Users\Kagu-chan\AppData\Local\Temp\465023F7-05B0-9F43-6663-5D1FF86E382D.exe
E:\Users\Kagu-chan\AppData\Local\Temp\8YmmxOGboc.exe
E:\Users\Kagu-chan\AppData\Local\Temp\BaVYz7TfGD.exe
E:\Users\Kagu-chan\AppData\Local\Temp\hQ0Uh1k10b.exe
E:\Users\Kagu-chan\AppData\Local\Temp\jQrsFXmDjB.exe
E:\Users\Kagu-chan\AppData\Local\Temp\optprosetup.exe
E:\Users\Kagu-chan\AppData\Local\Temp\qhXnx5OVzu.exe
E:\Users\Kagu-chan\AppData\Local\Temp\Quarantine.exe
E:\Users\Kagu-chan\AppData\Local\Temp\RpOUorNixn.exe
E:\Users\Kagu-chan\AppData\Local\Temp\sdf8569.exe
E:\Users\Kagu-chan\AppData\Local\Temp\sdf870F.exe
E:\Users\Kagu-chan\AppData\Local\Temp\sdfDC05.exe
E:\Users\Kagu-chan\AppData\Local\Temp\SkypeSetup.exe
E:\Users\Kagu-chan\AppData\Local\Temp\sprz.exe
E:\Users\Kagu-chan\AppData\Local\Temp\sqlite3.dll
E:\Users\Kagu-chan\AppData\Local\Temp\Wia5hhe3Ip.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 00:40

==================== End Of Log ============================

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-01-2015 03
Ran by Kagu-chan at 2015-01-04 14:37:58
Running from E:\Users\Kagu-chan\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

‚Í‚é‚©‚º‚Ç‚è‚ÉA‚Æ‚Ü‚è‚¬‚ðB (HKLM\...\{E3D5D575-4A71-4596-A459-B66977579446}) (Version: 1.00.000 - )
µTorrent (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Aegisub 3.2.1 (HKLM\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.1 - Aegisub Team)
Alice Madness Returns (HKLM\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
AMD Catalyst Install Manager (HKLM\...\{DC7723BE-A2BB-58A0-4820-5630F9B82198}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Audacity 2.0.6 (HKLM\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Aura Kingdom (HKLM\...\Steam App 268420) (Version:  - X-Legend)
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bamboo Dock (HKLM\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden
Battle.net (HKLM\...\Battle.net) (Version:  - Blizzard Entertainment)
Beat Hazard (HKLM\...\Steam App 49600) (Version:  - Cold Beam Games)
C9 (HKLM\...\Steam App 212390) (Version:  - Cloud 9 Studio)
ColorPicker Version 2.5 (HKLM\...\{2A999A57-4530-41AC-AF6B-E5B7A28BA357}_is1) (Version: 2.5 - Cronoxyd.de)
Combined Community Codec Pack 2014-07-13 (HKLM\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FileZilla Server (HKLM\...\FileZilla Server) (Version: beta 0.9.47 - FileZilla Project)
Gameforge Live 2.0.5 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Git version 1.9.5-preview20141217 (HKLM\...\Git_is1) (Version: 1.9.5-preview20141217 - The Git Development Community)
GitHub (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\5f7eb300e2ea4ebf) (Version: 2.6.6.2 - GitHub, Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
HF pAppLoc version 1.1.1 (HKLM\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.1.1 - Inquisitor)
Houlo Video Downloader (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Houlo Video Downloader) (Version:  - )
IcoFX 1.6.4 (HKLM\...\IcoFX_is1) (Version:  - )
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Katawa Shoujo (HKLM\...\Katawa Shoujo) (Version:  - )
K-Lite Codec Pack 10.7.5 Full (HKLM\...\KLiteCodecPack_is1) (Version: 10.7.5 - )
kSub (HKLM\...\{258C48B4-73E7-4AF0-97CF-5CD57BE44E43}_is1) (Version: 2.4.1.0 - Dako-kun)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
LibreOffice 4.2.7.2 (HKLM\...\{A313C39F-79A7-408B-97EE-8F958407D694}) (Version: 4.2.7.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++  Compilers 2010 Standard - enu - x86 (HKLM\...\{370187B9-6964-38D0-851F-6C4898B0C2B1}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )
Microsoft Windows SDK for Windows 7 (7.1) (HKLM\...\SDKSetup_7.1.7600.0.30514) (Version: 7.1.7600.0.30514 - Microsoft Corporation)
MKVCleaver x86 (HKLM\...\{6C419268-0E1E-4087-B769-B80B2539236F}) (Version: 6.0.5 - Ilia Bakhmoutski)
MKVToolNix 7.2.0 (32bit) (HKLM\...\MKVToolNix) (Version: 7.2.0 - Moritz Bunkus)
mocha Pro V3.2.1-7276 (HKLM\...\{110ABF3B-74FA-45A4-B893-8482DA52AA9D}) (Version: 3.21.7276 - Imagineer Systems)
Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
NetBeans IDE 8.0.1 (HKLM\...\nbi-nb-base-8.0.1.0.201408251540) (Version: 8.0.1 - NetBeans.org)
NexusFont 2.5 (ver 2.5.8.1582) (HKLM\...\{EFEDD205-43FE-4208-B682-0937E803E19E}_is1) (Version:  - xiles)
Notepad++ (HKLM\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA PhysX (HKLM\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
NyuFX (HKLM\...\NyuFX) (Version: 1.6.0 - Youka)
osu! (HKLM\...\{172e71de-59ac-4691-a7b2-378535218a63}) (Version: latest - ppy Pty Ltd)
piaip AppLocale (HKLM\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Pokémon Trading Card Game Online (HKLM\...\{F323157A-218F-4613-9673-F975AB9397CF}) (Version: 2.23.1 - The Pokémon Company International)
Portal (HKLM\...\Steam App 400) (Version:  - Valve)
Portal 2 (HKLM\...\Steam App 620) (Version:  - Valve)
PPSSPP version 0.9.8 (HKLM\...\PPSSPP_is1) (Version: 0.9.8 - )
puush (HKLM\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
QT Lite 4.1.0 (HKLM\...\quicktime_lite_is1) (Version: 4.1.0 - )
RaidCall (HKLM\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com)
RPG Maker VX Ace (HKLM\...\Steam App 220700) (Version:  - Enterbrain)
RPG MAKER VX Ace RTP (HKLM\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain)
RPG Maker XP (HKLM\...\Steam App 235900) (Version:  - Degica)
Ruby 2.1.5-p273 (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\{64763A89-6347-43AF-833F-3840615C62AE}_is1) (Version: 2.1.5-p273 - RubyInstaller Team)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.36244 - TeamViewer)
TERA (HKLM\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
The Legend of Heroes: Trails in the Sky (HKLM\...\Steam App 251150) (Version:  - Nihon Falcom)
Torchlight II (HKLM\...\Steam App 200710) (Version:  - Runic Games)
TortoiseSVN 1.8.8.25755 (32 bit) (HKLM\...\{E9741943-84C8-48D3-9B88-CDD9CADF9DA0}) (Version: 1.8.25755 - TortoiseSVN)
Tunngle Version Tunngle (HKLM\...\Tunngle_is1) (Version: Tunngle - Tunngle.net GmbH)
Update Service YourFileDownloader (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Update Service YourFileDownloader) (Version: 2.14.52 - hxxp://www.yourfile-downloader.com.com) <==== ATTENTION
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
Wakfu (HKLM\...\Steam App 215080) (Version:  - Ankama)
WebTablet FB Plugin 32 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WinRAR 5.11 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warcraft (HKLM\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Ys Origin (HKLM\...\Steam App 207350) (Version:  - Nihon Falcom)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2026768166-240738973-2546325667-1001_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files\Git\git-cheetah\git_shell_ext.dll ()

==================== Restore Points  =========================

07-12-2014 17:21:10 Geplanter Prüfpunkt
11-12-2014 04:34:27 Windows Update
18-12-2014 19:46:23 Windows Update
20-12-2014 23:22:58 Wiederherstellungsvorgang
21-12-2014 20:04:41 Windows Update
27-12-2014 06:47:34 Wiederherstellungsvorgang
27-12-2014 07:49:16 Windows Update
31-12-2014 08:09:52 Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2014-11-28 19:11 - 00000915 ____A C:\Windows\system32\Drivers\etc\hosts
192.168.0.1 hitronhub.home
192.168.0.205 horo
192.168.0.215 nereide
127.0.0.1 localdev


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {3BDCAE71-BDF7-4D9A-8620-C0B26AAF1EB1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-29] (Google Inc.)
Task: {529A985F-5E7A-400D-A883-BD1E0E2AC933} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-09-23] ()
Task: {6F0C10BB-397D-4A8C-8B91-AE9BF7D7EC66} - System32\Tasks\BrickAugmenter-S-4223009896 => c:\programdata\trusted publisher\enhancer\BrickAugmenter.exe <==== ATTENTION
Task: {7AD64A29-E271-426F-8AD7-1C2FD147A87B} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {A2ADE29E-F425-439D-BD79-88DA475E7A7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-29] (Google Inc.)
Task: {CDD0FB77-5187-42B4-BB8E-F7C6B45FE251} - System32\Tasks\{F394FCBC-FD6F-41A7-83AF-C61BD9C993E2} => pcalua.exe -a G:\install.exe -d G:\
Task: {FF2EE01C-E4C1-4C31-A53E-79CB9CA47B3B} - System32\Tasks\{185C16E4-7E6D-455C-B1F5-F63CC70E3C3A} => pcalua.exe -a E:\Users\Kagu-chan\Downloads\winsdk_web.exe -d E:\Users\Kagu-chan\Downloads

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\BrickAugmenter-S-4223009896.job => c:\programdata\trusted publisher\enhancer\BrickAugmenter.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-09-29 13:39 - 2014-08-19 20:12 - 01019672 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2014-08-10 14:40 - 2014-08-10 14:40 - 00065792 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2014-08-10 14:40 - 2014-08-10 14:40 - 00071936 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files\FileZilla FTP Client\libstdc++-6.dll
2012-10-16 10:39 - 2012-10-16 10:39 - 00646744 _____ () C:\Program Files\Bamboo Dock\BambooCore.exe
2012-10-16 10:39 - 2012-10-16 10:39 - 00060504 _____ () C:\Program Files\Bamboo Dock\BambooWinTab.dll
2012-01-10 13:41 - 2014-09-29 12:01 - 00567880 _____ () C:\Program Files\puush\puush.exe
2014-09-29 13:37 - 2014-09-29 13:37 - 00225792 _____ () C:\Program Files\Bamboo Dock\Bamboo Dock\Bamboo Dock.exe
2014-11-26 10:03 - 2014-11-25 07:39 - 01077064 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
2014-11-26 10:03 - 2014-11-25 07:39 - 00211272 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.71\libegl.dll
2014-11-26 10:03 - 2014-11-25 07:39 - 09009480 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.71\pdf.dll
2014-11-26 10:03 - 2014-11-25 07:39 - 01677128 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: FileZilla Server => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TabletInputService => 2
MSCONFIG\Services: TunngleService => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: FileZilla Server Interface => "E:\FZ\FileZilla Server\FileZilla Server Interface.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Spotify Web Helper => "E:\Users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

========================= Accounts: ==========================

Administrator (S-1-5-21-2026768166-240738973-2546325667-500 - Administrator - Disabled)
Gast (S-1-5-21-2026768166-240738973-2546325667-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2026768166-240738973-2546325667-1002 - Limited - Enabled)
Kagu-chan (S-1-5-21-2026768166-240738973-2546325667-1001 - Administrator - Enabled) => E:\Users\Kagu-chan

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/04/2015 02:10:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/04/2015 01:57:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/03/2015 00:34:25 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/02/2015 10:04:08 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 1512. Meldungs-ID: [0x2509].

Error: (01/02/2015 06:19:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2015 00:34:20 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/01/2015 08:18:02 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4804. Meldungs-ID: [0x2509].

Error: (01/01/2015 07:59:16 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 6184. Meldungs-ID: [0x2509].

Error: (01/01/2015 09:52:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: luajit32.exe, Version: 0.0.0.0, Zeitstempel: 0x549f8592
Name des fehlerhaften Moduls: msvcrt-ruby210.dll, Version: 2.1.5.273, Zeitstempel: 0x5467dfd4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00194a68
ID des fehlerhaften Prozesses: 0x1d90
Startzeit der fehlerhaften Anwendung: 0xluajit32.exe0
Pfad der fehlerhaften Anwendung: luajit32.exe1
Pfad des fehlerhaften Moduls: luajit32.exe2
Berichtskennung: luajit32.exe3

Error: (01/01/2015 09:51:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: luajit32.exe, Version: 0.0.0.0, Zeitstempel: 0x549f8592
Name des fehlerhaften Moduls: msvcrt-ruby210.dll, Version: 2.1.5.273, Zeitstempel: 0x5467dfd4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00194a68
ID des fehlerhaften Prozesses: 0x1888
Startzeit der fehlerhaften Anwendung: 0xluajit32.exe0
Pfad der fehlerhaften Anwendung: luajit32.exe1
Pfad des fehlerhaften Moduls: luajit32.exe2
Berichtskennung: luajit32.exe3


System errors:
=============
Error: (01/04/2015 02:08:27 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (01/04/2015 02:08:37 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎04.‎01.‎2015 um 14:07:03 unerwartet heruntergefahren.

Error: (01/04/2015 01:55:33 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (01/02/2015 06:17:32 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (01/02/2015 10:05:28 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (12/30/2014 01:15:04 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (12/29/2014 08:37:56 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (12/27/2014 07:38:27 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (12/27/2014 07:01:08 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeltaFix erreicht.

Error: (12/27/2014 07:00:23 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.


Microsoft Office Sessions:
=========================
Error: (01/04/2015 02:10:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/04/2015 01:57:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/03/2015 00:34:25 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\X64\msvsmon.exe

Error: (01/02/2015 10:04:08 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 1512. Meldungs-ID: [0x2509].

Error: (01/02/2015 06:19:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/02/2015 00:34:20 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\X64\msvsmon.exe

Error: (01/01/2015 08:18:02 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4804. Meldungs-ID: [0x2509].

Error: (01/01/2015 07:59:16 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 6184. Meldungs-ID: [0x2509].

Error: (01/01/2015 09:52:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: luajit32.exe0.0.0.0549f8592msvcrt-ruby210.dll2.1.5.2735467dfd4c000000500194a681d9001d025a04da83f40E:\GitProjects\FXSpindle\src\FXSpindle\bin\Debug\script\bin\luajit32.exeE:\GitProjects\FXSpindle\src\FXSpindle\bin\Debug\script\bin\msvcrt-ruby210.dll8b84c66e-9193-11e4-92a3-00138fb69463

Error: (01/01/2015 09:51:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: luajit32.exe0.0.0.0549f8592msvcrt-ruby210.dll2.1.5.2735467dfd4c000000500194a68188801d025a01d8869feE:\GitProjects\FXSpindle\src\FXSpindle\bin\Debug\script\bin\luajit32.exeE:\GitProjects\FXSpindle\src\FXSpindle\bin\Debug\script\bin\msvcrt-ruby210.dll5b7ab2a1-9193-11e4-92a3-00138fb69463


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) D CPU 2.80GHz
Percentage of memory in use: 46%
Total physical RAM: 3007.3 MB
Available physical RAM: 1601.02 MB
Total Pagefile: 6010.84 MB
Available Pagefile: 4310.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1893.93 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:146.39 GB) (Free:65.74 GB) NTFS
Drive d: (Osu) (Fixed) (Total:48.83 GB) (Free:32.12 GB) NTFS
Drive e: (Daten) (Fixed) (Total:270.45 GB) (Free:169.63 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 8E14D438)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=146.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=48.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=270.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Gmer

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-01-04 15:18:42
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 WDC_WD5000AAKS-007AA0 rev.05.01D05 465,76GB
Running: Gmer-19357.exe; Driver: E:\Users\KAGU-C~1\AppData\Local\Temp\kflyiuob.sys


---- Kernel code sections - GMER 2.1 ----

.text  ntoskrnl.exe!ZwRollbackEnlistment + 1409                                                             81C3C9A5 1 Byte  [06]
.text  ntoskrnl.exe!KiDispatchInterrupt + 5A2                                                               81C5C512 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  C:\Windows\system32\DRIVERS\atikmdag.sys                                                             section is writeable [0x8FC2A000, 0x16640A, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtCreateFile + 6                76E2560E 4 Bytes  [28, 70, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtCreateFile + B                76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtMapViewOfSection + 6          76E25C6E 4 Bytes  [28, 73, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtMapViewOfSection + B          76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenFile + 6                  76E25D1E 4 Bytes  [68, 70, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenFile + B                  76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcess + 6               76E25DCE 4 Bytes  [A8, 71, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcess + B               76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcessToken + 6          76E25DDE 4 Bytes  CALL 75E2F054 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcessToken + B          76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcessTokenEx + 6        76E25DEE 4 Bytes  [A8, 72, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenProcessTokenEx + B        76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThread + 6                76E25E4E 4 Bytes  [68, 71, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThread + B                76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThreadToken + 6           76E25E5E 4 Bytes  [68, 72, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThreadToken + B           76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThreadTokenEx + 6         76E25E6E 4 Bytes  CALL 75E2F0E5 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtOpenThreadTokenEx + B         76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtQueryAttributesFile + 6       76E25F7E 4 Bytes  [A8, 70, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtQueryAttributesFile + B       76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtQueryFullAttributesFile + 6   76E2602E 4 Bytes  CALL 75E2F2A3 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtQueryFullAttributesFile + B   76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtSetInformationFile + 6        76E2667E 4 Bytes  [28, 71, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtSetInformationFile + B        76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtSetInformationThread + 6      76E266DE 4 Bytes  [28, 72, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtSetInformationThread + B      76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtUnmapViewOfSection + 6        76E269FE 4 Bytes  [68, 73, 92, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[320] ntdll.dll!NtUnmapViewOfSection + B        76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 40, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 43, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 40, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 41, 09, 00] {TEST AL, 0x41; OR [EAX], EAX}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E26724 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 42, 09, 00] {TEST AL, 0x42; OR [EAX], EAX}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 41, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 42, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E267B5 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 40, 09, 00] {TEST AL, 0x40; OR [EAX], EAX}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E26973 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 41, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 42, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 43, 09, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1140] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 58, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 5B, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 58, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 59, 24, 00] {TEST AL, 0x59; AND AL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E2823C C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 5A, 24, 00] {TEST AL, 0x5a; AND AL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 59, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 5A, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E282CD C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 58, 24, 00] {TEST AL, 0x58; AND AL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E2848B C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 59, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 5A, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 5B, 24, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1732] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 80, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 83, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 80, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 81, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E34764 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 82, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 81, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 82, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E347F5 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 80, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E349B3 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 81, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 82, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 83, E9, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, B8, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, BB, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, B8, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, B9, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E3589C C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, BA, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, B9, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, BA, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E3592D C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, B8, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E35AEB C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, B9, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, BA, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, BB, FA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1888] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, EC, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, EF, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, EC, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, ED, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E305D0 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, EE, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, ED, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, EE, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E30661 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, EC, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E3081F C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, ED, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, EE, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, EF, A7, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[1940] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 94, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 97, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 94, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 95, 13, 00] {TEST AL, 0x95; ADC EAX, [EAX]}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E27178 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 96, 13, 00] {TEST AL, 0x96; ADC EAX, [EAX]}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 95, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 96, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E27209 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 94, 13, 00] {TEST AL, 0x94; ADC EAX, [EAX]}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E273C7 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 95, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 96, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 97, 13, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2136] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2272] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [18, 20, 9C, 61] {SBB [EAX], AH; PUSHF ; POPA }
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2272] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 64, 41, 00] {SUB [ECX+EAX*2+0x0], AH}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 67, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 64, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 65, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E29F48 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 66, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 65, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 66, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E29FD9 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 64, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E2A197 C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 65, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 66, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 67, 41, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3596] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtCreateFile + 6               76E2560E 4 Bytes  [28, 58, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtCreateFile + B               76E25613 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtMapViewOfSection + 6         76E25C6E 4 Bytes  [28, 5B, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtMapViewOfSection + B         76E25C73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenFile + 6                 76E25D1E 4 Bytes  [68, 58, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenFile + B                 76E25D23 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcess + 6              76E25DCE 4 Bytes  [A8, 59, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcess + B              76E25DD3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcessToken + 6         76E25DDE 4 Bytes  CALL 75E3483C C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcessToken + B         76E25DE3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcessTokenEx + 6       76E25DEE 4 Bytes  [A8, 5A, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenProcessTokenEx + B       76E25DF3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThread + 6               76E25E4E 4 Bytes  [68, 59, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThread + B               76E25E53 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThreadToken + 6          76E25E5E 4 Bytes  [68, 5A, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThreadToken + B          76E25E63 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThreadTokenEx + 6        76E25E6E 4 Bytes  CALL 75E348CD C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtOpenThreadTokenEx + B        76E25E73 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtQueryAttributesFile + 6      76E25F7E 4 Bytes  [A8, 58, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtQueryAttributesFile + B      76E25F83 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtQueryFullAttributesFile + 6  76E2602E 4 Bytes  CALL 75E34A8B C:\Windows\system32\SHELL32.dll
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtQueryFullAttributesFile + B  76E26033 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtSetInformationFile + 6       76E2667E 4 Bytes  [28, 59, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtSetInformationFile + B       76E26683 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtSetInformationThread + 6     76E266DE 4 Bytes  [28, 5A, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtSetInformationThread + B     76E266E3 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtUnmapViewOfSection + 6       76E269FE 4 Bytes  [68, 5B, EA, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[4964] ntdll.dll!NtUnmapViewOfSection + B       76E26A03 1 Byte  [E2]

---- EOF - GMER 2.1 ----

Hinweis:

Antivirenprogramm wird derzeit keins genutzt. Avira frisst zu viel Performance, Avast blockiert mir ständig meine Programme, wenn ich am Programmieren bin...

Der unleserliche Titel bei den Installierten Programmen ist ein Japanisches Spiel, hab es installiert bevor ich die lokals drauf hatte.
Bei den Systemfehlern sind die mit luajit.exe / luajit32.exe nicht von Bedeutung, fehlgeschlagener Testbuild meinerseits.

Danke im Voraus für die Hilfe.

schrauber · 04.01.2015, 15:32

Hi,

was passiert wenn Du ne normale Kabelmaus nutzt?

Proxy im IE ist mit Absicht drin?

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Update Service YourFileDownloader (HKU\S-1-5-21-2026768166-240738973-2546325667-1001\...\Update Service YourFileDownloader) (Version: 2.14.52 - hxxp://www.yourfile-downloader.com.com) <==== ATTENTION
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Zitat:

Antivirenprogramm wird derzeit keins genutzt

klar, brauch man ja auch nit......dann hoffen wir mal du machst keinerlei logins und Geldgeschäfte an dem PC.

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Kagu-chan · 04.01.2015, 15:43

Hallo und Danke für die Antwort.

Proxy ist bewusst drin (sofern er auf ne lokale Adresse zeigt), das ist mein eigener Testserver.
Kabelmaus hab ich keine außer die wo ohnehin nen Fehler hat.

Uninstall fehlgeschlagen:

Code:

ATTFilter

---------------------------
Warnung
---------------------------
Uninstall ist fehlgeschlagen!
Vermutlich ungültiger deinstall Befehl!
---------------------------
OK   
---------------------------

Danach hat er normal weiter gemacht.

tdsskiller gibt es bei Kaspersky nicht. Wurde hier her weitergeleitet.
hxxp://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe (Der BB-Code mag mich net :< )

schrauber · 04.01.2015, 16:53

Dann lade TDSSKiller bitte direkt auf der Kaspersky Seite.

Kagu-chan · 04.01.2015, 17:39

Hast du evtl. einen Downloadlink alternativ zu Kasperski selbst? Alle Links, die ich auf deren Seite oder sonst wo finde, sind Deadlinks.

Bei Chip o.ä. möchte ich nicht unbedingt runterladen, da die mit ihrem Downloader irgendnen Mist installieren und ich das mit der Maus aktuell nicht richtig kontrollieren / steuern kann (da ich stellenweiße dreimal JA drücke ohne es zu merken). Komplett per Tastatur steuern lassen sich die auch nicht :/

schrauber · 04.01.2015, 19:54

TDSSKiller Download

Kagu-chan · 05.01.2015, 08:04

Die Leiten ebenfalls auf Kaspersky weiter :/

Chip hat doch einen direkten Download ohne Installer angeboten. Hier der Log:

Code:

ATTFilter

08:02:41.0288 0x0524  TDSS rootkit removing tool 3.0.0.42 Dec 12 2014 00:35:20
08:02:45.0931 0x0524  ============================================================
08:02:45.0931 0x0524  Current date / time: 2015/01/05 08:02:45.0931
08:02:45.0931 0x0524  SystemInfo:
08:02:45.0931 0x0524  
08:02:45.0931 0x0524  OS Version: 6.1.7601 ServicePack: 1.0
08:02:45.0931 0x0524  Product type: Workstation
08:02:45.0931 0x0524  ComputerName: KAGU-CHAN-PC
08:02:45.0939 0x0524  UserName: Kagu-chan
08:02:45.0939 0x0524  Windows directory: C:\Windows
08:02:45.0939 0x0524  System windows directory: C:\Windows
08:02:45.0939 0x0524  Processor architecture: Intel x86
08:02:45.0939 0x0524  Number of processors: 2
08:02:45.0939 0x0524  Page size: 0x1000
08:02:45.0939 0x0524  Boot type: Normal boot
08:02:45.0939 0x0524  ============================================================
08:02:47.0662 0x0524  KLMD registered as C:\Windows\system32\drivers\72784554.sys
08:02:47.0818 0x0524  System UUID: {2BAF6363-4370-6530-AF4B-E95BA254F1CE}
08:02:48.0375 0x0524  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0x38080, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000050
08:02:48.0383 0x0524  ============================================================
08:02:48.0383 0x0524  \Device\Harddisk0\DR0:
08:02:48.0383 0x0524  MBR partitions:
08:02:48.0383 0x0524  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
08:02:48.0383 0x0524  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x124C6000
08:02:48.0383 0x0524  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x124F8800, BlocksNum 0x61A8000
08:02:48.0383 0x0524  \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x186A0800, BlocksNum 0x21CE4800
08:02:48.0383 0x0524  ============================================================
08:02:48.0391 0x0524  C: <-> \Device\Harddisk0\DR0\Partition2
08:02:48.0407 0x0524  D: <-> \Device\Harddisk0\DR0\Partition3
08:02:48.0438 0x0524  E: <-> \Device\Harddisk0\DR0\Partition4
08:02:48.0438 0x0524  ============================================================
08:02:48.0438 0x0524  Initialize success
08:02:48.0438 0x0524  ============================================================
08:02:57.0997 0x0ea4  ============================================================
08:02:57.0997 0x0ea4  Scan started
08:02:57.0997 0x0ea4  Mode: Manual; SigCheck; TDLFS; 
08:02:57.0997 0x0ea4  ============================================================
08:02:57.0997 0x0ea4  KSN ping started
08:03:00.0379 0x0ea4  KSN ping finished: true
08:03:01.0137 0x0ea4  ================ Scan system memory ========================
08:03:01.0137 0x0ea4  Scan was interrupted by user!
08:03:01.0184 0x0ea4  Win FW state via NFP2: disabled
08:03:03.0586 0x0ea4  ============================================================
08:03:03.0586 0x0ea4  Scan finished
08:03:03.0586 0x0ea4  ============================================================
08:03:03.0610 0x0c4c  Detected object count: 0
08:03:03.0610 0x0c4c  Actual detected object count: 0

Ich hab den Scan wiederholt, weil es mir spanisch vorkam, das er sowenig scannt. Bin wohl auf Stop gekommen (Wie oben erwähnt ._.)

Code:

ATTFilter

08:16:30.0550 0x063c  TDSS rootkit removing tool 3.0.0.42 Dec 12 2014 00:35:20
08:16:32.0472 0x063c  ============================================================
08:16:32.0472 0x063c  Current date / time: 2015/01/05 08:16:32.0472
08:16:32.0472 0x063c  SystemInfo:
08:16:32.0472 0x063c  
08:16:32.0472 0x063c  OS Version: 6.1.7601 ServicePack: 1.0
08:16:32.0472 0x063c  Product type: Workstation
08:16:32.0472 0x063c  ComputerName: KAGU-CHAN-PC
08:16:32.0472 0x063c  UserName: Kagu-chan
08:16:32.0472 0x063c  Windows directory: C:\Windows
08:16:32.0472 0x063c  System windows directory: C:\Windows
08:16:32.0472 0x063c  Processor architecture: Intel x86
08:16:32.0472 0x063c  Number of processors: 2
08:16:32.0472 0x063c  Page size: 0x1000
08:16:32.0472 0x063c  Boot type: Normal boot
08:16:32.0472 0x063c  ============================================================
08:16:34.0238 0x063c  KLMD registered as C:\Windows\system32\drivers\30283932.sys
08:16:34.0355 0x063c  System UUID: {2BAF6363-4370-6530-AF4B-E95BA254F1CE}
08:16:34.0891 0x063c  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0x38080, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000050
08:16:34.0891 0x063c  ============================================================
08:16:34.0891 0x063c  \Device\Harddisk0\DR0:
08:16:34.0891 0x063c  MBR partitions:
08:16:34.0891 0x063c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
08:16:34.0891 0x063c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x124C6000
08:16:34.0891 0x063c  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x124F8800, BlocksNum 0x61A8000
08:16:34.0891 0x063c  \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x186A0800, BlocksNum 0x21CE4800
08:16:34.0891 0x063c  ============================================================
08:16:34.0915 0x063c  C: <-> \Device\Harddisk0\DR0\Partition2
08:16:34.0930 0x063c  D: <-> \Device\Harddisk0\DR0\Partition3
08:16:34.0961 0x063c  E: <-> \Device\Harddisk0\DR0\Partition4
08:16:34.0961 0x063c  ============================================================
08:16:34.0961 0x063c  Initialize success
08:16:34.0961 0x063c  ============================================================
08:16:42.0146 0x06f0  ============================================================
08:16:42.0146 0x06f0  Scan started
08:16:42.0146 0x06f0  Mode: Manual; SigCheck; TDLFS; 
08:16:42.0146 0x06f0  ============================================================
08:16:42.0146 0x06f0  KSN ping started
08:16:44.0521 0x06f0  KSN ping finished: true
08:16:45.0321 0x06f0  ================ Scan system memory ========================
08:16:45.0321 0x06f0  System memory - ok
08:16:45.0321 0x06f0  ================ Scan services =============================
08:16:45.0461 0x06f0  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
08:16:45.0571 0x06f0  1394ohci - ok
08:16:45.0602 0x06f0  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
08:16:45.0633 0x06f0  ACPI - ok
08:16:45.0641 0x06f0  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
08:16:45.0696 0x06f0  AcpiPmi - ok
08:16:45.0743 0x06f0  [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
08:16:45.0758 0x06f0  AdobeARMservice - ok
08:16:45.0790 0x06f0  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
08:16:45.0821 0x06f0  adp94xx - ok
08:16:45.0848 0x06f0  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\drivers\adpahci.sys
08:16:45.0877 0x06f0  adpahci - ok
08:16:45.0901 0x06f0  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\drivers\adpu320.sys
08:16:45.0924 0x06f0  adpu320 - ok
08:16:45.0956 0x06f0  [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
08:16:46.0049 0x06f0  AeLookupSvc - ok
08:16:46.0096 0x06f0  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys
08:16:46.0151 0x06f0  AFD - ok
08:16:46.0166 0x06f0  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
08:16:46.0190 0x06f0  aic78xx - ok
08:16:46.0213 0x06f0  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
08:16:46.0245 0x06f0  ALG - ok
08:16:46.0276 0x06f0  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
08:16:46.0291 0x06f0  aliide - ok
08:16:46.0323 0x06f0  [ 90EC928E9542B166583D865F99F85BE8, F484697A6D0FE6E1DC7CAE3D21BEC8041D45111109E887FE6754817ADFCF6DDA ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
08:16:46.0385 0x06f0  AMD External Events Utility - ok
08:16:46.0401 0x06f0  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
08:16:46.0416 0x06f0  amdagp - ok
08:16:46.0440 0x06f0  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
08:16:46.0456 0x06f0  amdide - ok
08:16:46.0463 0x06f0  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
08:16:46.0495 0x06f0  AmdK8 - ok
08:16:46.0963 0x06f0  [ D4EF00B622EBEBEF85AB53C51A509A14, AFDFF78D61D1495BD51197CF26EB34F77871DA0A13E9056DE3776C9364FBC9A9 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
08:16:47.0448 0x06f0  amdkmdag - ok
08:16:47.0526 0x06f0  [ 0A536B713BF916E62A14D48B0C1739A3, 425184896AD276AD45822655ADEC9EC499A9574E5815426AD6231029B46DD194 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
08:16:47.0565 0x06f0  amdkmdap - ok
08:16:47.0581 0x06f0  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
08:16:47.0612 0x06f0  AmdPPM - ok
08:16:47.0651 0x06f0  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
08:16:47.0674 0x06f0  amdsata - ok
08:16:47.0690 0x06f0  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
08:16:47.0706 0x06f0  amdsbs - ok
08:16:47.0729 0x06f0  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
08:16:47.0745 0x06f0  amdxata - ok
08:16:47.0752 0x06f0  [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID           C:\Windows\system32\drivers\appid.sys
08:16:47.0791 0x06f0  AppID - ok
08:16:47.0807 0x06f0  [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc        C:\Windows\System32\appidsvc.dll
08:16:47.0854 0x06f0  AppIDSvc - ok
08:16:47.0877 0x06f0  [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo         C:\Windows\System32\appinfo.dll
08:16:47.0916 0x06f0  Appinfo - ok
08:16:47.0948 0x06f0  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt         C:\Windows\System32\appmgmts.dll
08:16:48.0002 0x06f0  AppMgmt - ok
08:16:48.0018 0x06f0  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\drivers\arc.sys
08:16:48.0041 0x06f0  arc - ok
08:16:48.0073 0x06f0  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
08:16:48.0088 0x06f0  arcsas - ok
08:16:48.0159 0x06f0  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
08:16:48.0182 0x06f0  aspnet_state - ok
08:16:48.0213 0x06f0  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
08:16:48.0299 0x06f0  AsyncMac - ok
08:16:48.0331 0x06f0  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
08:16:48.0346 0x06f0  atapi - ok
08:16:48.0385 0x06f0  [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
08:16:48.0432 0x06f0  AudioEndpointBuilder - ok
08:16:48.0456 0x06f0  [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
08:16:48.0495 0x06f0  Audiosrv - ok
08:16:48.0518 0x06f0  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
08:16:48.0573 0x06f0  AxInstSV - ok
08:16:48.0604 0x06f0  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\drivers\bxvbdx.sys
08:16:48.0643 0x06f0  b06bdrv - ok
08:16:48.0659 0x06f0  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
08:16:48.0698 0x06f0  b57nd60x - ok
08:16:48.0737 0x06f0  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
08:16:48.0791 0x06f0  BDESVC - ok
08:16:48.0799 0x06f0  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
08:16:48.0838 0x06f0  Beep - ok
08:16:48.0877 0x06f0  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
08:16:48.0924 0x06f0  BFE - ok
08:16:48.0971 0x06f0  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
08:16:49.0034 0x06f0  BITS - ok
08:16:49.0041 0x06f0  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
08:16:49.0065 0x06f0  blbdrive - ok
08:16:49.0081 0x06f0  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
08:16:49.0135 0x06f0  bowser - ok
08:16:49.0151 0x06f0  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
08:16:49.0182 0x06f0  BrFiltLo - ok
08:16:49.0190 0x06f0  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
08:16:49.0213 0x06f0  BrFiltUp - ok
08:16:49.0252 0x06f0  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
08:16:49.0291 0x06f0  Browser - ok
08:16:49.0315 0x06f0  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
08:16:49.0370 0x06f0  Brserid - ok
08:16:49.0377 0x06f0  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
08:16:49.0409 0x06f0  BrSerWdm - ok
08:16:49.0424 0x06f0  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
08:16:49.0456 0x06f0  BrUsbMdm - ok
08:16:49.0463 0x06f0  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
08:16:49.0495 0x06f0  BrUsbSer - ok
08:16:49.0502 0x06f0  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
08:16:49.0534 0x06f0  BTHMODEM - ok
08:16:49.0557 0x06f0  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
08:16:49.0604 0x06f0  bthserv - ok
08:16:49.0635 0x06f0  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
08:16:49.0682 0x06f0  cdfs - ok
08:16:49.0706 0x06f0  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
08:16:49.0729 0x06f0  cdrom - ok
08:16:49.0745 0x06f0  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
08:16:49.0784 0x06f0  CertPropSvc - ok
08:16:49.0799 0x06f0  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\drivers\circlass.sys
08:16:49.0823 0x06f0  circlass - ok
08:16:49.0846 0x06f0  [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS            C:\Windows\system32\CLFS.sys
08:16:49.0870 0x06f0  CLFS - ok
08:16:49.0924 0x06f0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
08:16:49.0940 0x06f0  clr_optimization_v2.0.50727_32 - ok
08:16:49.0979 0x06f0  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
08:16:50.0002 0x06f0  clr_optimization_v4.0.30319_32 - ok
08:16:50.0010 0x06f0  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
08:16:50.0049 0x06f0  CmBatt - ok
08:16:50.0073 0x06f0  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
08:16:50.0088 0x06f0  cmdide - ok
08:16:50.0120 0x06f0  [ 85449EEBE8F8EBD6481EFBF0F352B4EB, E6FF04970C5A5BFDE7297A86C1C7B9BFE2E0F976A1A1AFB874CEB488DC6151CC ] CNG             C:\Windows\system32\Drivers\cng.sys
08:16:50.0159 0x06f0  CNG - ok
08:16:50.0166 0x06f0  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
08:16:50.0190 0x06f0  Compbatt - ok
08:16:50.0198 0x06f0  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
08:16:50.0229 0x06f0  CompositeBus - ok
08:16:50.0245 0x06f0  COMSysApp - ok
08:16:50.0252 0x06f0  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
08:16:50.0268 0x06f0  crcdisk - ok
08:16:50.0307 0x06f0  [ 7CA1BECEA5DE2643ADDAD32670E7A4C9, E3AB4CC52A97E3855D7EAB87363F807FDD2162ED8C76A036CD71549ED64E7797 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
08:16:50.0338 0x06f0  CryptSvc - ok
08:16:50.0377 0x06f0  [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC             C:\Windows\system32\drivers\csc.sys
08:16:50.0432 0x06f0  CSC - ok
08:16:50.0487 0x06f0  [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService      C:\Windows\System32\cscsvc.dll
08:16:50.0526 0x06f0  CscService - ok
08:16:50.0565 0x06f0  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
08:16:50.0620 0x06f0  DcomLaunch - ok
08:16:50.0643 0x06f0  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
08:16:50.0698 0x06f0  defragsvc - ok
08:16:50.0721 0x06f0  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
08:16:50.0768 0x06f0  DfsC - ok
08:16:50.0791 0x06f0  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
08:16:50.0838 0x06f0  Dhcp - ok
08:16:50.0854 0x06f0  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
08:16:50.0885 0x06f0  discache - ok
08:16:50.0901 0x06f0  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\drivers\disk.sys
08:16:50.0916 0x06f0  Disk - ok
08:16:50.0948 0x06f0  [ 2A958EF85DB1B61FFCA65044FA4BCE9E, C83511685EE1CE85A5ADF9B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
08:16:50.0987 0x06f0  dmvsc - ok
08:16:51.0002 0x06f0  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
08:16:51.0049 0x06f0  Dnscache - ok
08:16:51.0073 0x06f0  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
08:16:51.0120 0x06f0  dot3svc - ok
08:16:51.0135 0x06f0  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
08:16:51.0190 0x06f0  DPS - ok
08:16:51.0213 0x06f0  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
08:16:51.0245 0x06f0  drmkaud - ok
08:16:51.0291 0x06f0  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
08:16:51.0331 0x06f0  DXGKrnl - ok
08:16:51.0346 0x06f0  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
08:16:51.0393 0x06f0  EapHost - ok
08:16:51.0502 0x06f0  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\drivers\evbdx.sys
08:16:51.0674 0x06f0  ebdrv - ok
08:16:51.0706 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] EFS             C:\Windows\System32\lsass.exe
08:16:51.0729 0x06f0  EFS - ok
08:16:51.0791 0x06f0  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
08:16:51.0838 0x06f0  ehRecvr - ok
08:16:51.0862 0x06f0  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
08:16:51.0885 0x06f0  ehSched - ok
08:16:51.0924 0x06f0  [ B83BDCCBACB65BAA9E20888DD0083A16, A38B29C768DF9153E704C92A410663A8CFFB29BDB5E6622881DEB7FFFEF0CB38 ] ElbyCDIO        C:\Windows\system32\Drivers\ElbyCDIO.sys
08:16:51.0956 0x06f0  ElbyCDIO - ok
08:16:51.0979 0x06f0  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
08:16:52.0010 0x06f0  elxstor - ok
08:16:52.0026 0x06f0  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
08:16:52.0057 0x06f0  ErrDev - ok
08:16:52.0096 0x06f0  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
08:16:52.0159 0x06f0  EventSystem - ok
08:16:52.0166 0x06f0  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
08:16:52.0213 0x06f0  exfat - ok
08:16:52.0229 0x06f0  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
08:16:52.0276 0x06f0  fastfat - ok
08:16:52.0315 0x06f0  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
08:16:52.0370 0x06f0  Fax - ok
08:16:52.0377 0x06f0  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\drivers\fdc.sys
08:16:52.0401 0x06f0  fdc - ok
08:16:52.0416 0x06f0  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
08:16:52.0456 0x06f0  fdPHost - ok
08:16:52.0471 0x06f0  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
08:16:52.0510 0x06f0  FDResPub - ok
08:16:52.0534 0x06f0  [ F5CB6CB6D12F495516BE27CFFCCDE4BF, 52F61636E9C7CD967A78DC4401C4CF7D7768B9C940F1DCC01EB4DD1A48837E89 ] FETNDIS         C:\Windows\system32\DRIVERS\fetnd6.sys
08:16:52.0549 0x06f0  FETNDIS - ok
08:16:52.0565 0x06f0  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
08:16:52.0581 0x06f0  FileInfo - ok
08:16:52.0596 0x06f0  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
08:16:52.0643 0x06f0  Filetrace - ok
08:16:52.0706 0x06f0  [ A72F0D77AE04010735415D70103695F1, 347928FC2E405E5CE6AF507779746106497DA96EA03BCBB9CEFEDC7811A562B1 ] FileZilla Server E:\FZ\FileZilla Server\FileZilla Server.exe
08:16:52.0752 0x06f0  FileZilla Server - detected UnsignedFile.Multi.Generic ( 1 )
08:16:55.0276 0x06f0  Detect skipped due to KSN trusted
08:16:55.0276 0x06f0  FileZilla Server - ok
08:16:55.0291 0x06f0  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
08:16:55.0307 0x06f0  flpydisk - ok
08:16:55.0338 0x06f0  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
08:16:55.0362 0x06f0  FltMgr - ok
08:16:55.0416 0x06f0  [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache       C:\Windows\system32\FntCache.dll
08:16:55.0495 0x06f0  FontCache - ok
08:16:55.0549 0x06f0  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
08:16:55.0565 0x06f0  FontCache3.0.0.0 - ok
08:16:55.0588 0x06f0  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
08:16:55.0604 0x06f0  FsDepends - ok
08:16:55.0627 0x06f0  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
08:16:55.0651 0x06f0  Fs_Rec - ok
08:16:55.0682 0x06f0  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
08:16:55.0713 0x06f0  fvevol - ok
08:16:55.0729 0x06f0  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
08:16:55.0745 0x06f0  gagp30kx - ok
08:16:55.0776 0x06f0  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll
08:16:55.0838 0x06f0  gpsvc - ok
08:16:55.0870 0x06f0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
08:16:55.0885 0x06f0  gupdate - ok
08:16:55.0901 0x06f0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
08:16:55.0916 0x06f0  gupdatem - ok
08:16:55.0940 0x06f0  [ 833051C6C6C42117191935F734CFBD97, 5EB5672ABC7994A4AFF855A572158B8BE4FC6E541CFD4B9BE4FF2739A9A6AFB8 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
08:16:55.0956 0x06f0  hamachi - ok
08:16:55.0971 0x06f0  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
08:16:56.0002 0x06f0  hcw85cir - ok
08:16:56.0034 0x06f0  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
08:16:56.0073 0x06f0  HdAudAddService - ok
08:16:56.0104 0x06f0  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
08:16:56.0135 0x06f0  HDAudBus - ok
08:16:56.0143 0x06f0  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
08:16:56.0174 0x06f0  HidBatt - ok
08:16:56.0182 0x06f0  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\drivers\hidbth.sys
08:16:56.0213 0x06f0  HidBth - ok
08:16:56.0237 0x06f0  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\drivers\hidir.sys
08:16:56.0268 0x06f0  HidIr - ok
08:16:56.0291 0x06f0  [ 17EA65E6496FD6BB627175FB838A82A4, 4C454DEF56C24329006C570EDB267F3D6CB82E140DB605FB736E285B0E2249B0 ] hidkmdf         C:\Windows\system32\DRIVERS\hidkmdf.sys
08:16:56.0307 0x06f0  hidkmdf - ok
08:16:56.0315 0x06f0  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
08:16:56.0354 0x06f0  hidserv - ok
08:16:56.0393 0x06f0  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
08:16:56.0424 0x06f0  HidUsb - ok
08:16:56.0440 0x06f0  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
08:16:56.0479 0x06f0  hkmsvc - ok
08:16:56.0502 0x06f0  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
08:16:56.0541 0x06f0  HomeGroupListener - ok
08:16:56.0565 0x06f0  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
08:16:56.0596 0x06f0  HomeGroupProvider - ok
08:16:56.0620 0x06f0  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
08:16:56.0643 0x06f0  HpSAMD - ok
08:16:56.0674 0x06f0  [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
08:16:56.0729 0x06f0  HTTP - ok
08:16:56.0737 0x06f0  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
08:16:56.0752 0x06f0  hwpolicy - ok
08:16:56.0768 0x06f0  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
08:16:56.0799 0x06f0  i8042prt - ok
08:16:56.0831 0x06f0  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
08:16:56.0862 0x06f0  iaStorV - ok
08:16:56.0924 0x06f0  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
08:16:56.0979 0x06f0  idsvc - ok
08:16:56.0987 0x06f0  IEEtwCollectorService - ok
08:16:57.0018 0x06f0  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\drivers\iirsp.sys
08:16:57.0034 0x06f0  iirsp - ok
08:16:57.0088 0x06f0  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
08:16:57.0151 0x06f0  IKEEXT - ok
08:16:57.0190 0x06f0  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
08:16:57.0206 0x06f0  intelide - ok
08:16:57.0229 0x06f0  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
08:16:57.0245 0x06f0  intelppm - ok
08:16:57.0276 0x06f0  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
08:16:57.0315 0x06f0  IPBusEnum - ok
08:16:57.0323 0x06f0  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
08:16:57.0362 0x06f0  IpFilterDriver - ok
08:16:57.0409 0x06f0  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
08:16:57.0456 0x06f0  iphlpsvc - ok
08:16:57.0471 0x06f0  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
08:16:57.0495 0x06f0  IPMIDRV - ok
08:16:57.0502 0x06f0  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
08:16:57.0541 0x06f0  IPNAT - ok
08:16:57.0557 0x06f0  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
08:16:57.0588 0x06f0  IRENUM - ok
08:16:57.0604 0x06f0  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
08:16:57.0620 0x06f0  isapnp - ok
08:16:57.0643 0x06f0  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
08:16:57.0674 0x06f0  iScsiPrt - ok
08:16:57.0698 0x06f0  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
08:16:57.0713 0x06f0  kbdclass - ok
08:16:57.0737 0x06f0  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
08:16:57.0768 0x06f0  kbdhid - ok
08:16:57.0784 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] KeyIso          C:\Windows\system32\lsass.exe
08:16:57.0807 0x06f0  KeyIso - ok
08:16:57.0831 0x06f0  [ 4120DA10AA42A9996F4575DB9E3E6E6E, 1C6E790772EA327ACB885D731A030408160534997DD56FEE4D6CEE6929873BB8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
08:16:57.0846 0x06f0  KSecDD - ok
08:16:57.0877 0x06f0  [ 1E1845606C5A4579F7F3D95796CC1ED1, 26A478A0B5417CBC880A7F2D977AAC5FBF40EC4296426B757D6ACCBBC09486CC ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
08:16:57.0901 0x06f0  KSecPkg - ok
08:16:57.0948 0x06f0  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
08:16:57.0995 0x06f0  KtmRm - ok
08:16:58.0034 0x06f0  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
08:16:58.0081 0x06f0  LanmanServer - ok
08:16:58.0104 0x06f0  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
08:16:58.0143 0x06f0  LanmanWorkstation - ok
08:16:58.0174 0x06f0  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
08:16:58.0221 0x06f0  lltdio - ok
08:16:58.0252 0x06f0  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
08:16:58.0299 0x06f0  lltdsvc - ok
08:16:58.0315 0x06f0  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
08:16:58.0362 0x06f0  lmhosts - ok
08:16:58.0377 0x06f0  LMIGuardianSvc - ok
08:16:58.0409 0x06f0  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
08:16:58.0424 0x06f0  LSI_FC - ok
08:16:58.0448 0x06f0  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
08:16:58.0463 0x06f0  LSI_SAS - ok
08:16:58.0479 0x06f0  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
08:16:58.0502 0x06f0  LSI_SAS2 - ok
08:16:58.0510 0x06f0  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
08:16:58.0534 0x06f0  LSI_SCSI - ok
08:16:58.0557 0x06f0  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
08:16:58.0596 0x06f0  luafv - ok
08:16:58.0620 0x06f0  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
08:16:58.0643 0x06f0  Mcx2Svc - ok
08:16:58.0659 0x06f0  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\drivers\megasas.sys
08:16:58.0674 0x06f0  megasas - ok
08:16:58.0690 0x06f0  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
08:16:58.0721 0x06f0  MegaSR - ok
08:16:58.0737 0x06f0  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
08:16:58.0776 0x06f0  MMCSS - ok
08:16:58.0791 0x06f0  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
08:16:58.0846 0x06f0  Modem - ok
08:16:58.0862 0x06f0  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
08:16:58.0893 0x06f0  monitor - ok
08:16:58.0924 0x06f0  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
08:16:58.0940 0x06f0  mouclass - ok
08:16:58.0956 0x06f0  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
08:16:58.0987 0x06f0  mouhid - ok
08:16:59.0010 0x06f0  [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
08:16:59.0026 0x06f0  mountmgr - ok
08:16:59.0057 0x06f0  [ DEA022193DF8C88F6E2B3E33D148A5DB, 97DFC47DB83E04A975A1969AA120385463FCAF4E1A9984FD3220442D7026B45A ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
08:16:59.0073 0x06f0  MozillaMaintenance - ok
08:16:59.0088 0x06f0  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
08:16:59.0112 0x06f0  mpio - ok
08:16:59.0127 0x06f0  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
08:16:59.0159 0x06f0  mpsdrv - ok
08:16:59.0198 0x06f0  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
08:16:59.0276 0x06f0  MpsSvc - ok
08:16:59.0307 0x06f0  [ 21F4B24ACFC79A483515BD986DD9043F, 22681907E02E0B723ABE2CEF0602D36C8EF862E7E2B62A9B40A5EF582E58D7BA ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
08:16:59.0346 0x06f0  MRxDAV - ok
08:16:59.0370 0x06f0  [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
08:16:59.0409 0x06f0  mrxsmb - ok
08:16:59.0432 0x06f0  [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
08:16:59.0456 0x06f0  mrxsmb10 - ok
08:16:59.0471 0x06f0  [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
08:16:59.0510 0x06f0  mrxsmb20 - ok
08:16:59.0541 0x06f0  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
08:16:59.0557 0x06f0  msahci - ok
08:16:59.0573 0x06f0  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
08:16:59.0596 0x06f0  msdsm - ok
08:16:59.0612 0x06f0  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
08:16:59.0651 0x06f0  MSDTC - ok
08:16:59.0674 0x06f0  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
08:16:59.0713 0x06f0  Msfs - ok
08:16:59.0729 0x06f0  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
08:16:59.0760 0x06f0  mshidkmdf - ok
08:16:59.0784 0x06f0  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
08:16:59.0799 0x06f0  msisadrv - ok
08:16:59.0823 0x06f0  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
08:16:59.0870 0x06f0  MSiSCSI - ok
08:16:59.0877 0x06f0  msiserver - ok
08:16:59.0901 0x06f0  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
08:16:59.0940 0x06f0  MSKSSRV - ok
08:16:59.0956 0x06f0  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
08:17:00.0002 0x06f0  MSPCLOCK - ok
08:17:00.0010 0x06f0  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
08:17:00.0049 0x06f0  MSPQM - ok
08:17:00.0065 0x06f0  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
08:17:00.0081 0x06f0  MsRPC - ok
08:17:00.0104 0x06f0  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
08:17:00.0127 0x06f0  mssmbios - ok
08:17:00.0135 0x06f0  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
08:17:00.0174 0x06f0  MSTEE - ok
08:17:00.0190 0x06f0  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
08:17:00.0229 0x06f0  MTConfig - ok
08:17:00.0245 0x06f0  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
08:17:00.0260 0x06f0  Mup - ok
08:17:00.0299 0x06f0  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
08:17:00.0346 0x06f0  napagent - ok
08:17:00.0377 0x06f0  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
08:17:00.0416 0x06f0  NativeWifiP - ok
08:17:00.0463 0x06f0  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
08:17:00.0510 0x06f0  NDIS - ok
08:17:00.0534 0x06f0  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
08:17:00.0581 0x06f0  NdisCap - ok
08:17:00.0596 0x06f0  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
08:17:00.0643 0x06f0  NdisTapi - ok
08:17:00.0651 0x06f0  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
08:17:00.0690 0x06f0  Ndisuio - ok
08:17:00.0706 0x06f0  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
08:17:00.0745 0x06f0  NdisWan - ok
08:17:00.0768 0x06f0  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
08:17:00.0799 0x06f0  NDProxy - ok
08:17:00.0815 0x06f0  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
08:17:00.0854 0x06f0  NetBIOS - ok
08:17:00.0877 0x06f0  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
08:17:00.0924 0x06f0  NetBT - ok
08:17:00.0948 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] Netlogon        C:\Windows\system32\lsass.exe
08:17:00.0963 0x06f0  Netlogon - ok
08:17:00.0995 0x06f0  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
08:17:01.0041 0x06f0  Netman - ok
08:17:01.0088 0x06f0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
08:17:01.0112 0x06f0  NetMsmqActivator - ok
08:17:01.0127 0x06f0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
08:17:01.0151 0x06f0  NetPipeActivator - ok
08:17:01.0174 0x06f0  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
08:17:01.0245 0x06f0  netprofm - ok
08:17:01.0252 0x06f0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
08:17:01.0276 0x06f0  NetTcpActivator - ok
08:17:01.0291 0x06f0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
08:17:01.0307 0x06f0  NetTcpPortSharing - ok
08:17:01.0338 0x06f0  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
08:17:01.0354 0x06f0  nfrd960 - ok
08:17:01.0377 0x06f0  [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc          C:\Windows\System32\nlasvc.dll
08:17:01.0424 0x06f0  NlaSvc - ok
08:17:01.0440 0x06f0  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
08:17:01.0479 0x06f0  Npfs - ok
08:17:01.0495 0x06f0  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
08:17:01.0534 0x06f0  nsi - ok
08:17:01.0541 0x06f0  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
08:17:01.0581 0x06f0  nsiproxy - ok
08:17:01.0651 0x06f0  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
08:17:01.0713 0x06f0  Ntfs - ok
08:17:01.0737 0x06f0  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
08:17:01.0768 0x06f0  Null - ok
08:17:01.0799 0x06f0  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
08:17:01.0815 0x06f0  nvraid - ok
08:17:01.0846 0x06f0  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
08:17:01.0870 0x06f0  nvstor - ok
08:17:01.0885 0x06f0  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
08:17:01.0909 0x06f0  nv_agp - ok
08:17:01.0924 0x06f0  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
08:17:01.0948 0x06f0  ohci1394 - ok
08:17:01.0987 0x06f0  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
08:17:02.0026 0x06f0  p2pimsvc - ok
08:17:02.0049 0x06f0  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
08:17:02.0088 0x06f0  p2psvc - ok
08:17:02.0104 0x06f0  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
08:17:02.0127 0x06f0  Parport - ok
08:17:02.0159 0x06f0  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
08:17:02.0174 0x06f0  partmgr - ok
08:17:02.0182 0x06f0  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
08:17:02.0206 0x06f0  Parvdm - ok
08:17:02.0221 0x06f0  [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc          C:\Windows\System32\pcasvc.dll
08:17:02.0260 0x06f0  PcaSvc - ok
08:17:02.0284 0x06f0  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
08:17:02.0307 0x06f0  pci - ok
08:17:02.0370 0x06f0  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
08:17:02.0409 0x06f0  pciide - ok
08:17:02.0424 0x06f0  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
08:17:02.0448 0x06f0  pcmcia - ok
08:17:02.0471 0x06f0  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
08:17:02.0487 0x06f0  pcw - ok
08:17:02.0534 0x06f0  [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
08:17:02.0588 0x06f0  PEAUTH - ok
08:17:02.0643 0x06f0  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
08:17:02.0721 0x06f0  PeerDistSvc - ok
08:17:02.0807 0x06f0  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll
08:17:02.0924 0x06f0  pla - ok
08:17:02.0971 0x06f0  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
08:17:03.0018 0x06f0  PlugPlay - ok
08:17:03.0034 0x06f0  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
08:17:03.0057 0x06f0  PNRPAutoReg - ok
08:17:03.0081 0x06f0  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
08:17:03.0104 0x06f0  PNRPsvc - ok
08:17:03.0143 0x06f0  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
08:17:03.0198 0x06f0  PolicyAgent - ok
08:17:03.0229 0x06f0  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
08:17:03.0284 0x06f0  Power - ok
08:17:03.0315 0x06f0  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
08:17:03.0362 0x06f0  PptpMiniport - ok
08:17:03.0385 0x06f0  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\drivers\processr.sys
08:17:03.0416 0x06f0  Processor - ok
08:17:03.0440 0x06f0  [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc         C:\Windows\system32\profsvc.dll
08:17:03.0502 0x06f0  ProfSvc - ok
08:17:03.0510 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] ProtectedStorage C:\Windows\system32\lsass.exe
08:17:03.0534 0x06f0  ProtectedStorage - ok
08:17:03.0549 0x06f0  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
08:17:03.0588 0x06f0  Psched - ok
08:17:03.0659 0x06f0  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\drivers\ql2300.sys
08:17:03.0791 0x06f0  ql2300 - ok
08:17:03.0815 0x06f0  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
08:17:03.0838 0x06f0  ql40xx - ok
08:17:03.0862 0x06f0  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
08:17:03.0916 0x06f0  QWAVE - ok
08:17:03.0940 0x06f0  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
08:17:03.0963 0x06f0  QWAVEdrv - ok
08:17:03.0971 0x06f0  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
08:17:04.0026 0x06f0  RasAcd - ok
08:17:04.0049 0x06f0  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
08:17:04.0081 0x06f0  RasAgileVpn - ok
08:17:04.0096 0x06f0  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
08:17:04.0143 0x06f0  RasAuto - ok
08:17:04.0151 0x06f0  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
08:17:04.0206 0x06f0  Rasl2tp - ok
08:17:04.0237 0x06f0  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
08:17:04.0284 0x06f0  RasMan - ok
08:17:04.0299 0x06f0  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
08:17:04.0338 0x06f0  RasPppoe - ok
08:17:04.0354 0x06f0  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
08:17:04.0401 0x06f0  RasSstp - ok
08:17:04.0432 0x06f0  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
08:17:04.0479 0x06f0  rdbss - ok
08:17:04.0495 0x06f0  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
08:17:04.0518 0x06f0  rdpbus - ok
08:17:04.0534 0x06f0  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
08:17:04.0565 0x06f0  RDPCDD - ok
08:17:04.0596 0x06f0  [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
08:17:04.0635 0x06f0  RDPDR - ok
08:17:04.0651 0x06f0  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
08:17:04.0690 0x06f0  RDPENCDD - ok
08:17:04.0706 0x06f0  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
08:17:04.0752 0x06f0  RDPREFMP - ok
08:17:04.0807 0x06f0  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
08:17:04.0831 0x06f0  RdpVideoMiniport - ok
08:17:04.0870 0x06f0  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
08:17:04.0901 0x06f0  RDPWD - ok
08:17:04.0916 0x06f0  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
08:17:04.0940 0x06f0  rdyboost - ok
08:17:04.0963 0x06f0  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
08:17:05.0002 0x06f0  RemoteAccess - ok
08:17:05.0018 0x06f0  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
08:17:05.0057 0x06f0  RemoteRegistry - ok
08:17:05.0073 0x06f0  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
08:17:05.0112 0x06f0  RpcEptMapper - ok
08:17:05.0135 0x06f0  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
08:17:05.0166 0x06f0  RpcLocator - ok
08:17:05.0190 0x06f0  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll
08:17:05.0245 0x06f0  RpcSs - ok
08:17:05.0268 0x06f0  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
08:17:05.0307 0x06f0  rspndr - ok
08:17:05.0323 0x06f0  [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
08:17:05.0346 0x06f0  s3cap - ok
08:17:05.0362 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] SamSs           C:\Windows\system32\lsass.exe
08:17:05.0385 0x06f0  SamSs - ok
08:17:05.0409 0x06f0  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
08:17:05.0424 0x06f0  sbp2port - ok
08:17:05.0448 0x06f0  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
08:17:05.0495 0x06f0  SCardSvr - ok
08:17:05.0510 0x06f0  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
08:17:05.0549 0x06f0  scfilter - ok
08:17:05.0588 0x06f0  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll
08:17:05.0666 0x06f0  Schedule - ok
08:17:05.0682 0x06f0  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
08:17:05.0713 0x06f0  SCPolicySvc - ok
08:17:05.0729 0x06f0  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
08:17:05.0760 0x06f0  SDRSVC - ok
08:17:05.0776 0x06f0  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
08:17:05.0807 0x06f0  secdrv - ok
08:17:05.0831 0x06f0  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
08:17:05.0877 0x06f0  seclogon - ok
08:17:05.0885 0x06f0  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
08:17:05.0932 0x06f0  SENS - ok
08:17:05.0956 0x06f0  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
08:17:05.0995 0x06f0  SensrSvc - ok
08:17:06.0010 0x06f0  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
08:17:06.0034 0x06f0  Serenum - ok
08:17:06.0049 0x06f0  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
08:17:06.0073 0x06f0  Serial - ok
08:17:06.0088 0x06f0  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\drivers\sermouse.sys
08:17:06.0112 0x06f0  sermouse - ok
08:17:06.0143 0x06f0  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
08:17:06.0182 0x06f0  SessionEnv - ok
08:17:06.0190 0x06f0  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
08:17:06.0213 0x06f0  sffdisk - ok
08:17:06.0221 0x06f0  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
08:17:06.0245 0x06f0  sffp_mmc - ok
08:17:06.0252 0x06f0  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
08:17:06.0276 0x06f0  sffp_sd - ok
08:17:06.0284 0x06f0  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
08:17:06.0307 0x06f0  sfloppy - ok
08:17:06.0338 0x06f0  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
08:17:06.0393 0x06f0  SharedAccess - ok
08:17:06.0424 0x06f0  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
08:17:06.0471 0x06f0  ShellHWDetection - ok
08:17:06.0487 0x06f0  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
08:17:06.0502 0x06f0  SiSRaid2 - ok
08:17:06.0518 0x06f0  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
08:17:06.0541 0x06f0  SiSRaid4 - ok
08:17:06.0573 0x06f0  [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
08:17:06.0604 0x06f0  SkypeUpdate - ok
08:17:06.0620 0x06f0  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
08:17:06.0666 0x06f0  Smb - ok
08:17:06.0690 0x06f0  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
08:17:06.0713 0x06f0  SNMPTRAP - ok
08:17:06.0729 0x06f0  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
08:17:06.0752 0x06f0  spldr - ok
08:17:06.0784 0x06f0  [ 866A43013535DC8587C258E43579C764, B2BE846B5167A2ECD1E30C69A81385FCC6EAE6033394D08458A5583D311C4D82 ] Spooler         C:\Windows\System32\spoolsv.exe
08:17:06.0831 0x06f0  Spooler - ok
08:17:06.0948 0x06f0  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
08:17:07.0134 0x06f0  sppsvc - ok
08:17:07.0158 0x06f0  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
08:17:07.0197 0x06f0  sppuinotify - ok
08:17:07.0228 0x06f0  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
08:17:07.0267 0x06f0  srv - ok
08:17:07.0314 0x06f0  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
08:17:07.0353 0x06f0  srv2 - ok
08:17:07.0384 0x06f0  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
08:17:07.0400 0x06f0  srvnet - ok
08:17:07.0423 0x06f0  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
08:17:07.0478 0x06f0  SSDPSRV - ok
08:17:07.0494 0x06f0  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
08:17:07.0533 0x06f0  SstpSvc - ok
08:17:07.0595 0x06f0  [ CC7ED069C2FC82B5B1555C2044C765CC, CE43363544A3EE2C5133CD0D47BF34AFAFA4EAD6AC9EB9A772EE55E89D4D89D4 ] Steam Client Service C:\Program Files\Common Files\Steam\SteamService.exe
08:17:07.0650 0x06f0  Steam Client Service - ok
08:17:07.0673 0x06f0  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\drivers\stexstor.sys
08:17:07.0689 0x06f0  stexstor - ok
08:17:07.0728 0x06f0  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
08:17:07.0783 0x06f0  StiSvc - ok
08:17:07.0814 0x06f0  [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
08:17:07.0830 0x06f0  storflt - ok
08:17:07.0845 0x06f0  [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69CAA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc         C:\Windows\system32\storsvc.dll
08:17:07.0869 0x06f0  StorSvc - ok
08:17:07.0892 0x06f0  [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
08:17:07.0908 0x06f0  storvsc - ok
08:17:07.0916 0x06f0  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
08:17:07.0931 0x06f0  swenum - ok
08:17:07.0955 0x06f0  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
08:17:08.0009 0x06f0  swprv - ok
08:17:08.0064 0x06f0  [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain         C:\Windows\system32\sysmain.dll
08:17:08.0142 0x06f0  SysMain - ok
08:17:08.0150 0x06f0  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
08:17:08.0181 0x06f0  TabletInputService - ok
08:17:08.0205 0x06f0  [ B7AEE68D2E867CBF69B649B18FCEDBBB, 82814EEDBD2908DC2D6A2162C647FB323F95EA7D9EA49265DB44CA72468753A0 ] tap0901t        C:\Windows\system32\DRIVERS\tap0901t.sys
08:17:08.0236 0x06f0  tap0901t - ok
08:17:08.0259 0x06f0  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
08:17:08.0322 0x06f0  TapiSrv - ok
08:17:08.0351 0x06f0  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
08:17:08.0398 0x06f0  TBS - ok
08:17:08.0468 0x06f0  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
08:17:08.0531 0x06f0  Tcpip - ok
08:17:08.0601 0x06f0  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
08:17:08.0648 0x06f0  TCPIP6 - ok
08:17:08.0695 0x06f0  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
08:17:08.0718 0x06f0  tcpipreg - ok
08:17:08.0750 0x06f0  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
08:17:08.0796 0x06f0  TDPIPE - ok
08:17:08.0812 0x06f0  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
08:17:08.0835 0x06f0  TDTCP - ok
08:17:08.0859 0x06f0  [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
08:17:08.0898 0x06f0  tdx - ok
08:17:09.0152 0x06f0  [ 6EC042A004268B3EA2FB96D939303095, 0E889FB317AF484DA4A8529C5569350C69F4587C2B455C0F559E8061ECC2247B ] TeamViewer      C:\Program Files\TeamViewer\TeamViewer_Service.exe
08:17:09.0332 0x06f0  TeamViewer - ok
08:17:09.0378 0x06f0  [ 9101FFFCFCCD1A30E870A5B8A9091B10, 58AAB0F6FF78FD0ECDD8D9DA1B6852E9E57E3DAA39489ABDDBA106ECE0B3BCA7 ] teamviewervpn   C:\Windows\system32\DRIVERS\teamviewervpn.sys
08:17:09.0425 0x06f0  teamviewervpn - ok
08:17:09.0433 0x06f0  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
08:17:09.0457 0x06f0  TermDD - ok
08:17:09.0480 0x06f0  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
08:17:09.0550 0x06f0  TermService - ok
08:17:09.0566 0x06f0  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
08:17:09.0597 0x06f0  Themes - ok
08:17:09.0613 0x06f0  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
08:17:09.0644 0x06f0  THREADORDER - ok
08:17:09.0667 0x06f0  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
08:17:09.0722 0x06f0  TrkWks - ok
08:17:09.0761 0x06f0  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
08:17:09.0816 0x06f0  TrustedInstaller - ok
08:17:09.0839 0x06f0  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
08:17:09.0855 0x06f0  tssecsrv - ok
08:17:09.0878 0x06f0  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
08:17:09.0910 0x06f0  TsUsbFlt - ok
08:17:09.0917 0x06f0  [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
08:17:09.0957 0x06f0  TsUsbGD - ok
08:17:09.0972 0x06f0  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
08:17:10.0011 0x06f0  tunnel - ok
08:17:10.0089 0x06f0  [ A96BE6F92EDE53BA5997B2AE7367EACD, D2CE331F0BBA15C19A66BEF91FBDA96536F656C89DC9FE1A2F88D0C368986BB2 ] TunngleService  C:\Program Files\Tunngle\TnglCtrl.exe
08:17:10.0136 0x06f0  TunngleService - ok
08:17:10.0160 0x06f0  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
08:17:10.0175 0x06f0  uagp35 - ok
08:17:10.0199 0x06f0  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
08:17:10.0253 0x06f0  udfs - ok
08:17:10.0277 0x06f0  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
08:17:10.0308 0x06f0  UI0Detect - ok
08:17:10.0324 0x06f0  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
08:17:10.0347 0x06f0  uliagpkx - ok
08:17:10.0363 0x06f0  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
08:17:10.0386 0x06f0  umbus - ok
08:17:10.0394 0x06f0  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\drivers\umpass.sys
08:17:10.0417 0x06f0  UmPass - ok
08:17:10.0449 0x06f0  [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService    C:\Windows\System32\umrdp.dll
08:17:10.0488 0x06f0  UmRdpService - ok
08:17:10.0519 0x06f0  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
08:17:10.0574 0x06f0  upnphost - ok
08:17:10.0597 0x06f0  [ A1977C315BF5691DA99235AA4A6907AF, 34B52FBA83F0E1C6B001D0AD1808B00152F731D18AAECC3C53B9918AA89BACEC ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
08:17:10.0644 0x06f0  usbaudio - ok
08:17:10.0667 0x06f0  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
08:17:10.0699 0x06f0  usbccgp - ok
08:17:10.0730 0x06f0  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
08:17:10.0760 0x06f0  usbcir - ok
08:17:10.0835 0x06f0  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
08:17:10.0890 0x06f0  usbehci - ok
08:17:10.0953 0x06f0  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
08:17:11.0007 0x06f0  usbhub - ok
08:17:11.0031 0x06f0  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
08:17:11.0062 0x06f0  usbohci - ok
08:17:11.0070 0x06f0  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\drivers\usbprint.sys
08:17:11.0101 0x06f0  usbprint - ok
08:17:11.0125 0x06f0  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
08:17:11.0156 0x06f0  USBSTOR - ok
08:17:11.0171 0x06f0  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
08:17:11.0203 0x06f0  usbuhci - ok
08:17:11.0242 0x06f0  [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
08:17:11.0265 0x06f0  usbvideo - ok
08:17:11.0289 0x06f0  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
08:17:11.0335 0x06f0  UxSms - ok
08:17:11.0351 0x06f0  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] VaultSvc        C:\Windows\system32\lsass.exe
08:17:11.0367 0x06f0  VaultSvc - ok
08:17:11.0398 0x06f0  [ DAEF3AC067094497402C77476BBC3540, BE2CD4AB987BCB9258E97C48450399D6A3D610A199AE2A6BF91CDC7F54DF490A ] VClone          C:\Windows\system32\DRIVERS\VClone.sys
08:17:11.0421 0x06f0  VClone - ok
08:17:11.0429 0x06f0  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
08:17:11.0445 0x06f0  vdrvroot - ok
08:17:11.0476 0x06f0  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
08:17:11.0531 0x06f0  vds - ok
08:17:11.0554 0x06f0  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
08:17:11.0570 0x06f0  vga - ok
08:17:11.0585 0x06f0  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
08:17:11.0625 0x06f0  VgaSave - ok
08:17:11.0632 0x06f0  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
08:17:11.0656 0x06f0  vhdmp - ok
08:17:11.0671 0x06f0  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
08:17:11.0695 0x06f0  viaagp - ok
08:17:11.0703 0x06f0  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\drivers\viac7.sys
08:17:11.0726 0x06f0  ViaC7 - ok
08:17:11.0750 0x06f0  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
08:17:11.0765 0x06f0  viaide - ok
08:17:11.0796 0x06f0  [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus           C:\Windows\system32\drivers\vmbus.sys
08:17:11.0820 0x06f0  vmbus - ok
08:17:11.0835 0x06f0  [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
08:17:11.0851 0x06f0  VMBusHID - ok
08:17:11.0875 0x06f0  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
08:17:11.0890 0x06f0  volmgr - ok
08:17:11.0914 0x06f0  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
08:17:11.0945 0x06f0  volmgrx - ok
08:17:11.0960 0x06f0  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
08:17:11.0992 0x06f0  volsnap - ok
08:17:12.0007 0x06f0  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
08:17:12.0031 0x06f0  vsmraid - ok
08:17:12.0078 0x06f0  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
08:17:12.0171 0x06f0  VSS - ok
08:17:12.0187 0x06f0  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
08:17:12.0210 0x06f0  vwifibus - ok
08:17:12.0234 0x06f0  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
08:17:12.0296 0x06f0  W32Time - ok
08:17:12.0343 0x06f0  [ 0DC36E066294B88F3EC1F9F97AD0F9D4, 87966571D6580BAB3F787500F92DCCAC85F34AD4D1A626AF1BE316B74DF41339 ] WacHidRouter    C:\Windows\system32\DRIVERS\wachidrouter.sys
08:17:12.0351 0x06f0  WacHidRouter - ok
08:17:12.0367 0x06f0  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
08:17:12.0398 0x06f0  WacomPen - ok
08:17:12.0414 0x06f0  [ B54A60581FB7BFEEE9368951C34472E7, E5C59B5000C5B40E0685DB25E65F18DE0A2A98F852CB383C7946E3AE7ECC6201 ] wacomrouterfilter C:\Windows\system32\DRIVERS\wacomrouterfilter.sys
08:17:12.0429 0x06f0  wacomrouterfilter - ok
08:17:12.0445 0x06f0  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
08:17:12.0492 0x06f0  WANARP - ok
08:17:12.0500 0x06f0  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
08:17:12.0531 0x06f0  Wanarpv6 - ok
08:17:12.0578 0x06f0  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
08:17:12.0664 0x06f0  wbengine - ok
08:17:12.0695 0x06f0  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
08:17:12.0734 0x06f0  WbioSrvc - ok
08:17:12.0757 0x06f0  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
08:17:12.0804 0x06f0  wcncsvc - ok
08:17:12.0828 0x06f0  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
08:17:12.0859 0x06f0  WcsPlugInService - ok
08:17:12.0875 0x06f0  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\drivers\wd.sys
08:17:12.0898 0x06f0  Wd - ok
08:17:12.0929 0x06f0  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
08:17:12.0968 0x06f0  Wdf01000 - ok
08:17:12.0984 0x06f0  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost  C:\Windows\system32\wdi.dll
08:17:13.0046 0x06f0  WdiServiceHost - ok
08:17:13.0054 0x06f0  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost   C:\Windows\system32\wdi.dll
08:17:13.0078 0x06f0  WdiSystemHost - ok
08:17:13.0109 0x06f0  [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient       C:\Windows\System32\webclnt.dll
08:17:13.0140 0x06f0  WebClient - ok
08:17:13.0164 0x06f0  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
08:17:13.0203 0x06f0  Wecsvc - ok
08:17:13.0218 0x06f0  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
08:17:13.0257 0x06f0  wercplsupport - ok
08:17:13.0273 0x06f0  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
08:17:13.0312 0x06f0  WerSvc - ok
08:17:13.0335 0x06f0  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
08:17:13.0367 0x06f0  WfpLwf - ok
08:17:13.0375 0x06f0  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
08:17:13.0398 0x06f0  WIMMount - ok
08:17:13.0445 0x06f0  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
08:17:13.0515 0x06f0  WinDefend - ok
08:17:13.0523 0x06f0  WinHttpAutoProxySvc - ok
08:17:13.0562 0x06f0  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
08:17:13.0601 0x06f0  Winmgmt - ok
08:17:13.0664 0x06f0  [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM           C:\Windows\system32\WsmSvc.dll
08:17:13.0750 0x06f0  WinRM - ok
08:17:13.0804 0x06f0  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
08:17:13.0882 0x06f0  Wlansvc - ok
08:17:13.0890 0x06f0  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
08:17:13.0937 0x06f0  WmiAcpi - ok
08:17:13.0960 0x06f0  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
08:17:14.0000 0x06f0  wmiApSrv - ok
08:17:14.0070 0x06f0  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
08:17:14.0148 0x06f0  WMPNetworkSvc - ok
08:17:14.0164 0x06f0  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
08:17:14.0195 0x06f0  WPCSvc - ok
08:17:14.0218 0x06f0  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
08:17:14.0250 0x06f0  WPDBusEnum - ok
08:17:14.0265 0x06f0  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
08:17:14.0312 0x06f0  ws2ifsl - ok
08:17:14.0328 0x06f0  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
08:17:14.0359 0x06f0  wscsvc - ok
08:17:14.0367 0x06f0  WSearch - ok
08:17:14.0406 0x06f0  [ 398F2927880FC18C1A07C359C745DE1A, 759C2C31B5293CFF8DA8F95259E5F68AC67FE09A6BDC1A151D98881FC55B1A33 ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
08:17:14.0445 0x06f0  WTabletServiceCon - ok
08:17:14.0539 0x06f0  [ D9B0134913E5EF007AF82A418C503322, 7418DD28C8E968674382F8352AAFFC4DE77887E2B71B8844D615F19432B4C55A ] wuauserv        C:\Windows\system32\wuaueng.dll
08:17:14.0632 0x06f0  wuauserv - ok
08:17:14.0671 0x06f0  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
08:17:14.0753 0x06f0  WudfPf - ok
08:17:14.0786 0x06f0  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
08:17:14.0833 0x06f0  WUDFRd - ok
08:17:14.0864 0x06f0  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
08:17:14.0887 0x06f0  wudfsvc - ok
08:17:14.0918 0x06f0  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
08:17:14.0958 0x06f0  WwanSvc - ok
08:17:14.0989 0x06f0  ================ Scan global ===============================
08:17:15.0012 0x06f0  [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
08:17:15.0036 0x06f0  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
08:17:15.0059 0x06f0  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
08:17:15.0090 0x06f0  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
08:17:15.0114 0x06f0  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
08:17:15.0122 0x06f0  [ Global ] - ok
08:17:15.0122 0x06f0  ================ Scan MBR ==================================
08:17:15.0145 0x06f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
08:17:15.0390 0x06f0  \Device\Harddisk0\DR0 - ok
08:17:15.0390 0x06f0  ================ Scan VBR ==================================
08:17:15.0390 0x06f0  [ 8C459065FBCC3D23E193893A3109BCA8 ] \Device\Harddisk0\DR0\Partition1
08:17:15.0398 0x06f0  \Device\Harddisk0\DR0\Partition1 - ok
08:17:15.0398 0x06f0  [ 7E7F58F300E9760BFBD31C157B8E4D03 ] \Device\Harddisk0\DR0\Partition2
08:17:15.0406 0x06f0  \Device\Harddisk0\DR0\Partition2 - ok
08:17:15.0414 0x06f0  [ EEA0D56B460067EBB9711FA2D1C57800 ] \Device\Harddisk0\DR0\Partition3
08:17:15.0414 0x06f0  \Device\Harddisk0\DR0\Partition3 - ok
08:17:15.0421 0x06f0  [ 7F6909BC88DBBCD7E6552E975A042676 ] \Device\Harddisk0\DR0\Partition4
08:17:15.0421 0x06f0  \Device\Harddisk0\DR0\Partition4 - ok
08:17:15.0421 0x06f0  ================ Scan generic autorun ======================
08:17:15.0476 0x06f0  [ C6352C29C56077749CEEDD08680D347D, DF520DA9E9F8D34004E497969FC4AB0D9F057EEE5D8A0BBB91C5EBC983011ABD ] C:\Program Files\Bamboo Dock\BambooCore.exe
08:17:15.0515 0x06f0  BambooCore - ok
08:17:15.0593 0x06f0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
08:17:15.0679 0x06f0  Sidebar - ok
08:17:15.0703 0x06f0  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
08:17:15.0726 0x06f0  mctadmin - ok
08:17:15.0773 0x06f0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
08:17:15.0828 0x06f0  Sidebar - ok
08:17:15.0843 0x06f0  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
08:17:15.0867 0x06f0  mctadmin - ok
08:17:15.0906 0x06f0  [ 9A0ABBB44CBDF1F35D9657E9BF141898, B5D7822EE77998EBA4A4F08998B387BC8BE835C6668615F88C9910FFFD96A421 ] C:\Program Files\puush\puush.exe
08:17:15.0937 0x06f0  puush - ok
08:17:15.0960 0x06f0  Skype - ok
08:17:16.0085 0x06f0  [ 08DFA176E4FC0E63ACD8EC854449D2B0, B8CA204C3F318CD9D12F61CDDA5C66184A48D6206F019AD11DB2605FDBEB288D ] E:\Users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
08:17:16.0171 0x06f0  Spotify Web Helper - ok
08:17:16.0187 0x06f0  CCleaner Monitoring - ok
08:17:16.0187 0x06f0  Waiting for KSN requests completion. In queue: 46
08:17:17.0191 0x06f0  Waiting for KSN requests completion. In queue: 46
08:17:18.0191 0x06f0  Waiting for KSN requests completion. In queue: 46
08:17:19.0214 0x06f0  Win FW state via NFP2: disabled
08:17:21.0605 0x06f0  ============================================================
08:17:21.0605 0x06f0  Scan finished
08:17:21.0605 0x06f0  ============================================================
08:17:21.0613 0x0de8  Detected object count: 0
08:17:21.0613 0x0de8  Actual detected object count: 0

schrauber · 05.01.2015, 13:27

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Kagu-chan · 05.01.2015, 16:19

Log unten im Post.
Kurze Frage: Die Sachen bezüglich github und tortoise-svn - was hat er da getan? Brauch die zwei Programme unbedingt zum Programmieren...

Code:

ATTFilter

ComboFix 15-01-05.01 - Kagu-chan 05.01.2015  16:04:10.1.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3007.2281 [GMT 1:00]
ausgeführt von:: e:\users\Kagu-chan\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\apppatch\AppLoc.exe
c:\windows\apppatch\AppLocA.exe
c:\windows\apppatch\unins000.dat
c:\windows\apppatch\unins000.exe
e:\users\Kagu-chan\AppData\Local\assembly\tmp
.
----- Datei Replikatoren -----
.
c:\program files\Git\bin\git.exe
c:\program files\Git\libexec\git-core\git-add.exe
c:\program files\Git\libexec\git-core\git-annotate.exe
c:\program files\Git\libexec\git-core\git-apply.exe
c:\program files\Git\libexec\git-core\git-archive.exe
c:\program files\Git\libexec\git-core\git-bisect--helper.exe
c:\program files\Git\libexec\git-core\git-blame.exe
c:\program files\Git\libexec\git-core\git-branch.exe
c:\program files\Git\libexec\git-core\git-bundle.exe
c:\program files\Git\libexec\git-core\git-cat-file.exe
c:\program files\Git\libexec\git-core\git-check-attr.exe
c:\program files\Git\libexec\git-core\git-check-ignore.exe
c:\program files\Git\libexec\git-core\git-check-mailmap.exe
c:\program files\Git\libexec\git-core\git-check-ref-format.exe
c:\program files\Git\libexec\git-core\git-checkout-index.exe
c:\program files\Git\libexec\git-core\git-checkout.exe
c:\program files\Git\libexec\git-core\git-cherry-pick.exe
c:\program files\Git\libexec\git-core\git-cherry.exe
c:\program files\Git\libexec\git-core\git-clean.exe
c:\program files\Git\libexec\git-core\git-clone.exe
c:\program files\Git\libexec\git-core\git-column.exe
c:\program files\Git\libexec\git-core\git-commit-tree.exe
c:\program files\Git\libexec\git-core\git-commit.exe
c:\program files\Git\libexec\git-core\git-config.exe
c:\program files\Git\libexec\git-core\git-count-objects.exe
c:\program files\Git\libexec\git-core\git-credential.exe
c:\program files\Git\libexec\git-core\git-describe.exe
c:\program files\Git\libexec\git-core\git-diff-files.exe
c:\program files\Git\libexec\git-core\git-diff-index.exe
c:\program files\Git\libexec\git-core\git-diff-tree.exe
c:\program files\Git\libexec\git-core\git-diff.exe
c:\program files\Git\libexec\git-core\git-fast-export.exe
c:\program files\Git\libexec\git-core\git-fetch-pack.exe
c:\program files\Git\libexec\git-core\git-fetch.exe
c:\program files\Git\libexec\git-core\git-fmt-merge-msg.exe
c:\program files\Git\libexec\git-core\git-for-each-ref.exe
c:\program files\Git\libexec\git-core\git-format-patch.exe
c:\program files\Git\libexec\git-core\git-fsck-objects.exe
c:\program files\Git\libexec\git-core\git-fsck.exe
c:\program files\Git\libexec\git-core\git-gc.exe
c:\program files\Git\libexec\git-core\git-get-tar-commit-id.exe
c:\program files\Git\libexec\git-core\git-grep.exe
c:\program files\Git\libexec\git-core\git-hash-object.exe
c:\program files\Git\libexec\git-core\git-help.exe
c:\program files\Git\libexec\git-core\git-index-pack.exe
c:\program files\Git\libexec\git-core\git-init-db.exe
c:\program files\Git\libexec\git-core\git-init.exe
c:\program files\Git\libexec\git-core\git-log.exe
c:\program files\Git\libexec\git-core\git-ls-files.exe
c:\program files\Git\libexec\git-core\git-ls-remote.exe
c:\program files\Git\libexec\git-core\git-ls-tree.exe
c:\program files\Git\libexec\git-core\git-mailinfo.exe
c:\program files\Git\libexec\git-core\git-mailsplit.exe
c:\program files\Git\libexec\git-core\git-merge-base.exe
c:\program files\Git\libexec\git-core\git-merge-file.exe
c:\program files\Git\libexec\git-core\git-merge-index.exe
c:\program files\Git\libexec\git-core\git-merge-ours.exe
c:\program files\Git\libexec\git-core\git-merge-recursive.exe
c:\program files\Git\libexec\git-core\git-merge-subtree.exe
c:\program files\Git\libexec\git-core\git-merge-tree.exe
c:\program files\Git\libexec\git-core\git-merge.exe
c:\program files\Git\libexec\git-core\git-mktag.exe
c:\program files\Git\libexec\git-core\git-mktree.exe
c:\program files\Git\libexec\git-core\git-mv.exe
c:\program files\Git\libexec\git-core\git-name-rev.exe
c:\program files\Git\libexec\git-core\git-notes.exe
c:\program files\Git\libexec\git-core\git-pack-objects.exe
c:\program files\Git\libexec\git-core\git-pack-redundant.exe
c:\program files\Git\libexec\git-core\git-pack-refs.exe
c:\program files\Git\libexec\git-core\git-patch-id.exe
c:\program files\Git\libexec\git-core\git-prune-packed.exe
c:\program files\Git\libexec\git-core\git-prune.exe
c:\program files\Git\libexec\git-core\git-push.exe
c:\program files\Git\libexec\git-core\git-read-tree.exe
c:\program files\Git\libexec\git-core\git-receive-pack.exe
c:\program files\Git\libexec\git-core\git-reflog.exe
c:\program files\Git\libexec\git-core\git-remote-ext.exe
c:\program files\Git\libexec\git-core\git-remote-fd.exe
c:\program files\Git\libexec\git-core\git-remote.exe
c:\program files\Git\libexec\git-core\git-repack.exe
c:\program files\Git\libexec\git-core\git-replace.exe
c:\program files\Git\libexec\git-core\git-rerere.exe
c:\program files\Git\libexec\git-core\git-reset.exe
c:\program files\Git\libexec\git-core\git-rev-list.exe
c:\program files\Git\libexec\git-core\git-rev-parse.exe
c:\program files\Git\libexec\git-core\git-revert.exe
c:\program files\Git\libexec\git-core\git-rm.exe
c:\program files\Git\libexec\git-core\git-send-pack.exe
c:\program files\Git\libexec\git-core\git-shortlog.exe
c:\program files\Git\libexec\git-core\git-show-branch.exe
c:\program files\Git\libexec\git-core\git-show-ref.exe
c:\program files\Git\libexec\git-core\git-show.exe
c:\program files\Git\libexec\git-core\git-stage.exe
c:\program files\Git\libexec\git-core\git-status.exe
c:\program files\Git\libexec\git-core\git-stripspace.exe
c:\program files\Git\libexec\git-core\git-symbolic-ref.exe
c:\program files\Git\libexec\git-core\git-tag.exe
c:\program files\Git\libexec\git-core\git-unpack-file.exe
c:\program files\Git\libexec\git-core\git-unpack-objects.exe
c:\program files\Git\libexec\git-core\git-update-index.exe
c:\program files\Git\libexec\git-core\git-update-ref.exe
c:\program files\Git\libexec\git-core\git-update-server-info.exe
c:\program files\Git\libexec\git-core\git-upload-archive.exe
c:\program files\Git\libexec\git-core\git-var.exe
c:\program files\Git\libexec\git-core\git-verify-pack.exe
c:\program files\Git\libexec\git-core\git-verify-tag.exe
c:\program files\Git\libexec\git-core\git-whatchanged.exe
c:\program files\Git\libexec\git-core\git-write-tree.exe
c:\program files\Git\libexec\git-core\git.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\bin\git-receive-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\bin\git-upload-archive.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\bin\git.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-add.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-annotate.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-apply.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-archive.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-bisect--helper.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-blame.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-branch.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-bundle.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-cat-file.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-check-attr.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-check-ignore.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-check-mailmap.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-check-ref-format.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-checkout-index.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-checkout.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-cherry-pick.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-cherry.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-clean.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-clone.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-column.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-commit-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-commit.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-config.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-count-objects.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-credential.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-describe.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-diff-files.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-diff-index.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-diff-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-diff.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fast-export.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fetch-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fetch.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fmt-merge-msg.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-for-each-ref.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-format-patch.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fsck-objects.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-fsck.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-gc.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-get-tar-commit-id.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-grep.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-hash-object.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-help.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-index-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-init-db.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-init.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-log.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-ls-files.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-ls-remote.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-ls-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-mailinfo.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-mailsplit.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-base.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-file.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-index.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-ours.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-recursive.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-subtree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-merge.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-mktag.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-mktree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-mv.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-name-rev.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-notes.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-pack-objects.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-pack-redundant.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-pack-refs.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-patch-id.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-prune-packed.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-prune.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-push.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-read-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-receive-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-reflog.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-remote-ext.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-remote-fd.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-remote.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-repack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-replace.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-rerere.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-reset.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-rev-list.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-rev-parse.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-revert.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-rm.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-send-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-shortlog.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-show-branch.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-show-ref.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-show.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-stage.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-status.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-stripspace.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-symbolic-ref.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-tag.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-unpack-file.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-unpack-objects.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-update-index.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-update-ref.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-update-server-info.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-upload-archive.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-var.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-verify-pack.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-verify-tag.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-whatchanged.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git-write-tree.exe
e:\users\Kagu-chan\AppData\Local\GitHub\PortableGit_c2ba306e536fdf878271f7fe636a147ff37326ad\libexec\git-core\git.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-12-05 bis 2015-01-05  ))))))))))))))))))))))))))))))
.
.
2015-01-05 15:13 . 2015-01-05 15:13	--------	d-----w-	e:\users\Default\AppData\Local\temp
2015-01-04 14:37 . 2015-01-04 14:37	--------	d-----w-	c:\program files\VS Revo Group
2015-01-04 13:36 . 2015-01-04 13:38	--------	d-----w-	C:\FRST
2014-12-31 16:49 . 2014-12-31 16:49	--------	d-----w-	c:\program files\Lame For Audacity
2014-12-31 16:46 . 2014-12-31 16:55	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Audacity
2014-12-31 16:46 . 2014-12-31 16:46	--------	d-----w-	c:\program files\Audacity
2014-12-31 07:14 . 2014-12-31 07:14	--------	d-----w-	c:\windows\symbols
2014-12-28 16:31 . 2014-12-28 16:33	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\IcoFX
2014-12-28 16:31 . 2014-12-28 16:31	--------	d-----w-	c:\program files\IcoFX 1.6
2014-12-28 11:16 . 2014-12-28 11:16	--------	d-----w-	e:\users\Kagu-chan\.config
2014-12-28 08:02 . 2014-12-28 08:02	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Beat Hazard
2014-12-27 06:49 . 2014-12-13 03:33	115712	----a-w-	c:\windows\system32\ieUnatt.exe
2014-12-20 21:36 . 2014-12-20 21:36	--------	d-----w-	c:\programdata\Malwarebytes
2014-12-17 05:54 . 2015-01-05 15:13	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\assembly
2014-12-17 05:37 . 2015-01-02 06:54	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\vlc
2014-12-15 01:17 . 2014-12-15 01:18	--------	d-----w-	C:\Ruby21
2014-12-14 17:37 . 2014-12-14 17:37	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\FXSpindle
2014-12-13 17:47 . 2014-12-13 17:47	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\Blizzard Entertainment
2014-12-13 17:47 . 2015-01-03 11:06	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\Battle.net
2014-12-13 17:47 . 2014-12-13 17:47	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Battle.net
2014-12-13 17:46 . 2014-12-13 17:46	--------	d-----w-	c:\program files\Battle.net
2014-12-13 17:46 . 2014-12-13 17:46	--------	d-----w-	c:\programdata\Blizzard Entertainment
2014-12-13 17:40 . 2014-12-13 17:40	--------	d-----w-	c:\programdata\Battle.net
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft SQL Server
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft Synchronization Services
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2014-12-11 19:04 . 2014-12-11 19:05	207008	----a-w-	c:\programdata\Microsoft\VBExpress\10.0\1031\ResourceCache.dll
2014-12-11 19:02 . 2014-12-11 19:05	--------	d-----w-	c:\program files\Microsoft Visual Studio 10.0
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\program files\Microsoft SDKs
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\program files\Microsoft Help Viewer
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\windows\PCHEALTH
2014-12-11 14:52 . 2014-12-11 14:52	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\wacomid-desktop-launcher
2014-12-08 16:25 . 2014-12-08 16:26	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\NexusFont
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-11 02:44 . 2014-11-21 05:32	186880	----a-w-	c:\windows\system32\pku2u.dll
2014-11-11 02:44 . 2014-11-21 05:32	550912	----a-w-	c:\windows\system32\kerberos.dll
2014-11-06 03:29 . 2014-10-04 17:28	96680	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2014-10-29 19:57 . 2014-10-27 12:52	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-10-29 19:57 . 2014-10-27 12:52	701104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-10-25 01:32 . 2014-11-12 05:32	67584	----a-w-	c:\windows\system32\packager.dll
2014-10-18 01:33 . 2014-11-12 05:32	571904	----a-w-	c:\windows\system32\oleaut32.dll
2014-10-16 14:44 . 2014-10-16 14:44	773968	----a-w-	c:\windows\system32\msvcr100.dll
2014-10-16 14:44 . 2014-10-16 14:44	421200	----a-w-	c:\windows\system32\msvcp100.dll
2014-10-14 01:56 . 2014-11-12 05:32	136632	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2014-10-14 01:50 . 2014-11-12 05:32	523776	----a-w-	c:\windows\system32\termsrv.dll
2014-10-14 01:50 . 2014-11-12 05:32	1059840	----a-w-	c:\windows\system32\lsasrv.dll
2014-10-14 01:47 . 2014-11-12 05:32	146432	----a-w-	c:\windows\system32\msaudite.dll
2014-10-14 01:46 . 2014-11-12 05:32	681984	----a-w-	c:\windows\system32\adtschema.dll
2014-10-10 00:45 . 2014-11-12 05:32	2379264	----a-w-	c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"puush"="c:\program files\puush\puush.exe" [2014-09-29 567880]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-12-11 30877280]
"Spotify Web Helper"="e:\users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-12-11 1676344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BambooCore"="c:\program files\Bamboo Dock\BambooCore.exe" [2012-10-16 646744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2014-09-12 09:43	959176	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
2014-09-19 09:50	2448896	----a-w-	e:\fz\FileZilla Server\FileZilla Server Interface.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2014-12-11 14:46	1676344	----a-w-	e:\users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2014-10-07 14:39	507776	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
2013-03-10 17:08	88984	----a-w-	c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-22 102912]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R4 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R4 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2014-11-04 762320]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2014-04-18 208896]
S2 WTabletServiceCon;Wacom Consumer Service;c:\program files\Tablet\Pen\WTabletServiceCon.exe [2014-08-19 567064]
S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys [2014-08-06 12088]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2013-10-17 25088]
S3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys [2014-08-06 85304]
S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys [2014-08-06 13112]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 66389157
*NewlyCreated* - 94675842
*Deregistered* - 66389157
*Deregistered* - 94675842
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-26 09:02	1087304	----a-w-	c:\program files\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-09-29 10:37]
.
2015-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-09-29 10:37]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyServer = 192.168.0.205:3128
uInternet Settings,ProxyOverride = local;hitronhub;<local>
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - e:\users\Kagu-chan\AppData\Roaming\Mozilla\Firefox\Profiles\z352l41s.default\
FF - prefs.js: network.proxy.ftp - 192.168.0.205
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.http - 192.168.0.205
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - 192.168.0.205
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - 192.168.0.205
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-CCleaner Monitoring - c:\program files\CCleaner\CCleaner.exe
MSConfigStartUp-LogMeIn Hamachi Ui - c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
AddRemove-{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1 - c:\windows\AppPatch\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_15_0_0_189_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_15_0_0_189_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-01-05  16:15:59
ComboFix-quarantined-files.txt  2015-01-05 15:15
.
Vor Suchlauf: 10 Verzeichnis(se), 73.825.542.144 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 73.354.616.832 Bytes frei
.
- - End Of File - - B9C58DA16E0427CEC9F777481F7ACA7A
A36C5E4F47E84449FF07ED3517B43A31

schrauber · 05.01.2015, 17:32

Die wurden gekillt. Können wir aber easy wiederherstellen.

Poste mal bitte die Combofix-Quarantined-Files.txt.

Kagu-chan · 05.01.2015, 19:03

Wo find ich die? O.o
Unter C: ist sie mal nicht...

schrauber · 06.01.2015, 00:35

Sorry, im Ordner C:\Qoobox

Kagu-chan · 06.01.2015, 10:47

Code:

ATTFilter

2015-01-05 15:14:58 . 2015-01-05 15:14:58            2,026 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\AddRemove-{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1.reg.dat
2015-01-05 15:14:43 . 2015-01-05 15:14:43              964 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\MSConfigStartUp-LogMeIn Hamachi Ui.reg.dat
2015-01-05 15:14:33 . 2015-01-05 15:14:33              159 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-CCleaner Monitoring.reg.dat
2015-01-05 15:13:02 . 2014-12-19 04:57:25        1,503,744 ----a-w-  C:\Qoobox\Quarantine\Replicators\0A24FB92F83FC8A58B466695963F3A35
2015-01-05 15:13:02 . 2014-12-28 10:10:43        1,503,744 ----a-w-  C:\Qoobox\Quarantine\Replicators\73B9D72ADED81014CDAA257CF6696393
2015-01-05 15:09:49 . 2015-01-05 15:09:49            7,070 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2015-01-05 15:04:09 . 2015-01-05 15:04:09              512 ----a-w-  C:\Qoobox\Quarantine\MBR_HardDisk0.mbr
2015-01-05 15:02:16 . 2015-01-05 15:04:10               82 ----a-w-  C:\Qoobox\Quarantine\catchme.log
2014-10-26 00:59:28 . 2014-10-26 00:59:21        1,194,185 ----a-w-  C:\Qoobox\Quarantine\C\Windows\AppPatch\unins000.exe.vir
2014-10-26 00:19:15 . 2003-06-13 16:23:06           50,176 ----a-w-  C:\Qoobox\Quarantine\C\Windows\AppPatch\AppLocA.exe.vir
2014-10-26 00:19:15 . 2014-10-26 00:59:29           14,114 ----a-w-  C:\Qoobox\Quarantine\C\Windows\AppPatch\unins000.dat.vir
2003-06-13 15:23:06 . 2003-06-13 15:23:06           50,176 ----a-w-  C:\Qoobox\Quarantine\C\Windows\AppPatch\AppLoc.exe.vir

schrauber · 06.01.2015, 15:43

Hinweis für Mitleser:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm vom folgenden Download-Spiegel neu herunter:

BleepingComputer.com

und speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!

Drücke die Windows + R Taste --> Notepad (hinein schreiben) --> OK

Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.

Code:

ATTFilter

DeQuarantine:
C:\Qoobox\Quarantine\Replicators\0A24FB92F83FC8A58B466695963F3A35
C:\Qoobox\Quarantine\Replicators\73B9D72ADED81014CDAA257CF6696393
Quit:

Speichere dies als CFScript.txt auf Deinem Desktop.

Wichtig:

Stelle deine Anti Viren Software temprär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
Danach wieder anstellen nicht vergessen!
Bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein.
Dies kann dazu führen, dass ComboFix sich aufhängt.
Schließe alle laufenden Programme. Gehe sicher das ComboFix ungehindert arbeiten kann.
Mache nichts am PC solange ComboFix läuft.

In Bezug auf obiges Bild, ziehe CFScript.txt in die ComboFix.exe
Wenn ComboFix fertig ist, wird es ein Log erstellen, C:\ComboFix.txt. Bitte füge es hier als Antwort ein.

Falls im Skript die Anweisung Suspect:: oder Collect:: enthalten ist, wird eine Message-Box erscheinen, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen.

Kagu-chan · 06.01.2015, 16:20

Code:

ATTFilter

ComboFix 15-01-05.01 - Kagu-chan 06.01.2015  16:05:02.2.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3007.2181 [GMT 1:00]
ausgeführt von:: e:\users\Kagu-chan\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: e:\users\Kagu-chan\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
e:\users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MouseFixDll.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-12-06 bis 2015-01-06  ))))))))))))))))))))))))))))))
.
.
2015-01-06 15:14 . 2015-01-06 15:14	--------	d-----w-	e:\users\Default\AppData\Local\temp
2015-01-06 03:57 . 2015-01-06 03:57	62576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{D5D874B2-D8EC-497F-B7CD-81B45B8872CC}\offreg.dll
2015-01-05 15:34 . 2014-10-10 21:48	40960	----a-w-	e:\users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MouseFix.exe
2015-01-04 14:37 . 2015-01-04 14:37	--------	d-----w-	c:\program files\VS Revo Group
2015-01-04 13:36 . 2015-01-04 13:38	--------	d-----w-	C:\FRST
2014-12-31 16:49 . 2014-12-31 16:49	--------	d-----w-	c:\program files\Lame For Audacity
2014-12-31 16:46 . 2014-12-31 16:55	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Audacity
2014-12-31 16:46 . 2014-12-31 16:46	--------	d-----w-	c:\program files\Audacity
2014-12-31 07:14 . 2014-12-31 07:14	--------	d-----w-	c:\windows\symbols
2014-12-28 16:31 . 2014-12-28 16:33	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\IcoFX
2014-12-28 16:31 . 2014-12-28 16:31	--------	d-----w-	c:\program files\IcoFX 1.6
2014-12-28 11:16 . 2014-12-28 11:16	--------	d-----w-	e:\users\Kagu-chan\.config
2014-12-28 08:02 . 2014-12-28 08:02	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Beat Hazard
2014-12-27 06:49 . 2014-12-13 03:33	115712	----a-w-	c:\windows\system32\ieUnatt.exe
2014-12-20 21:36 . 2014-12-20 21:36	--------	d-----w-	c:\programdata\Malwarebytes
2014-12-17 05:54 . 2015-01-05 15:13	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\assembly
2014-12-17 05:37 . 2015-01-02 06:54	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\vlc
2014-12-15 01:17 . 2014-12-15 01:18	--------	d-----w-	C:\Ruby21
2014-12-14 17:37 . 2014-12-14 17:37	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\FXSpindle
2014-12-13 17:47 . 2014-12-13 17:47	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\Blizzard Entertainment
2014-12-13 17:47 . 2015-01-03 11:06	--------	d-----w-	e:\users\Kagu-chan\AppData\Local\Battle.net
2014-12-13 17:47 . 2014-12-13 17:47	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\Battle.net
2014-12-13 17:46 . 2014-12-13 17:46	--------	d-----w-	c:\program files\Battle.net
2014-12-13 17:46 . 2014-12-13 17:46	--------	d-----w-	c:\programdata\Blizzard Entertainment
2014-12-13 17:40 . 2014-12-13 17:40	--------	d-----w-	c:\programdata\Battle.net
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft SQL Server
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft Synchronization Services
2014-12-11 19:04 . 2014-12-11 19:04	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2014-12-11 19:04 . 2014-12-11 19:05	207008	----a-w-	c:\programdata\Microsoft\VBExpress\10.0\1031\ResourceCache.dll
2014-12-11 19:02 . 2014-12-11 19:05	--------	d-----w-	c:\program files\Microsoft Visual Studio 10.0
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\program files\Microsoft SDKs
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\program files\Microsoft Help Viewer
2014-12-11 19:02 . 2014-12-11 19:02	--------	d-----w-	c:\windows\PCHEALTH
2014-12-11 14:52 . 2014-12-11 14:52	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\wacomid-desktop-launcher
2014-12-08 16:25 . 2014-12-08 16:26	--------	d-----w-	e:\users\Kagu-chan\AppData\Roaming\NexusFont
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-11 02:44 . 2014-11-21 05:32	186880	----a-w-	c:\windows\system32\pku2u.dll
2014-11-11 02:44 . 2014-11-21 05:32	550912	----a-w-	c:\windows\system32\kerberos.dll
2014-11-06 03:29 . 2014-10-04 17:28	96680	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2014-10-29 19:57 . 2014-10-27 12:52	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-10-29 19:57 . 2014-10-27 12:52	701104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-10-25 01:32 . 2014-11-12 05:32	67584	----a-w-	c:\windows\system32\packager.dll
2014-10-18 01:33 . 2014-11-12 05:32	571904	----a-w-	c:\windows\system32\oleaut32.dll
2014-10-16 14:44 . 2014-10-16 14:44	773968	----a-w-	c:\windows\system32\msvcr100.dll
2014-10-16 14:44 . 2014-10-16 14:44	421200	----a-w-	c:\windows\system32\msvcp100.dll
2014-10-14 01:56 . 2014-11-12 05:32	136632	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2014-10-14 01:50 . 2014-11-12 05:32	523776	----a-w-	c:\windows\system32\termsrv.dll
2014-10-14 01:50 . 2014-11-12 05:32	1059840	----a-w-	c:\windows\system32\lsasrv.dll
2014-10-14 01:47 . 2014-11-12 05:32	146432	----a-w-	c:\windows\system32\msaudite.dll
2014-10-14 01:46 . 2014-11-12 05:32	681984	----a-w-	c:\windows\system32\adtschema.dll
2014-10-10 00:45 . 2014-11-12 05:32	2379264	----a-w-	c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20	64792	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"puush"="c:\program files\puush\puush.exe" [2014-09-29 567880]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-12-11 30877280]
"Spotify Web Helper"="e:\users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-12-11 1676344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BambooCore"="c:\program files\Bamboo Dock\BambooCore.exe" [2012-10-16 646744]
.
e:\users\Kagu-chan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MouseFix.exe [2014-10-10 40960]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2014-09-12 09:43	959176	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
2014-09-19 09:50	2448896	----a-w-	e:\fz\FileZilla Server\FileZilla Server Interface.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2014-12-11 14:46	1676344	----a-w-	e:\users\Kagu-chan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2014-10-07 14:39	507776	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
2013-03-10 17:08	88984	----a-w-	c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-22 102912]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R4 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R4 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2014-11-04 762320]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2014-04-18 208896]
S2 WTabletServiceCon;Wacom Consumer Service;c:\program files\Tablet\Pen\WTabletServiceCon.exe [2014-08-19 567064]
S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys [2014-08-06 12088]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2013-10-17 25088]
S3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys [2014-08-06 85304]
S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys [2014-08-06 13112]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-26 09:02	1087304	----a-w-	c:\program files\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-09-29 10:37]
.
2015-01-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-09-29 10:37]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyServer = 192.168.0.205:3128
uInternet Settings,ProxyOverride = local;hitronhub;<local>
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - e:\users\Kagu-chan\AppData\Roaming\Mozilla\Firefox\Profiles\z352l41s.default\
FF - prefs.js: network.proxy.ftp - 192.168.0.205
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.http - 192.168.0.205
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - 192.168.0.205
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - 192.168.0.205
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 1
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_15_0_0_189_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_15_0_0_189_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-01-06  16:16:32
ComboFix-quarantined-files.txt  2015-01-06 15:16
ComboFix2.txt  2015-01-05 15:15
.
Vor Suchlauf: 12 Verzeichnis(se), 73.532.661.760 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 73.348.841.472 Bytes frei
.
- - End Of File - - EAAA77D2EA0D27452435DE81F693640F
A36C5E4F47E84449FF07ED3517B43A31

Die Mausfix.dll war im Autostartordner weil ich ausversehen da rein kopiert hatte (Da ich aktuell wieder die Maus benutze, die den Fehler ohnehin hat), derzeit funktioniert die Maus fast normal.

Combofix hat genauso gescannt wie beim letzten mal, es war nicht ersichtlich, dass es irgendwas mit dem gegebenen Script getan hätte...

04.01.2015, 16:53	#4
schrauber /// the machine /// TB-Ausbilder	Win7 (x86) - Maus klickt mehrfach Dann lade TDSSKiller bitte direkt auf der Kaspersky Seite. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

04.01.2015, 19:54	#6
schrauber /// the machine /// TB-Ausbilder	Win7 (x86) - Maus klickt mehrfach TDSSKiller Download __________________ --> Win7 (x86) - Maus klickt mehrfach

05.01.2015, 17:32	#10
schrauber /// the machine /// TB-Ausbilder	Win7 (x86) - Maus klickt mehrfach Die wurden gekillt. Können wir aber easy wiederherstellen. Poste mal bitte die Combofix-Quarantined-Files.txt. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

06.01.2015, 00:35	#12
schrauber /// the machine /// TB-Ausbilder	Win7 (x86) - Maus klickt mehrfach Sorry, im Ordner C:\Qoobox __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Win7 (x86) - Maus klickt mehrfach

Log-Analyse und Auswertung: Win7 (x86) - Maus klickt mehrfach