| |
| |||||||
Log-Analyse und Auswertung: Email-account gehackt, Betreffszeile: New messageWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
01.02.2016, 12:59
| #1 |
 |  Email-account gehackt, Betreffszeile: New message Hallo werte Helfer, danke schon mal für Eure Hilfe. Nun zu meinem Problem: Ich denke mein email-account wurde gehackt und zwar in aller Regelmäßigkeit so alle 5-6 Wochen. Das nervt natürlich. Das hacken erfolgt trotzdem, obwohl ich in aller Regelmäßigkeit Passwörter mit über 20Stellen (GroßkleinSonderzeicchenZahlen) verwende. Mein Provider schiebt die Schuld auf mich. Ich denke eher der Provider hat ein Problem. Mein Provider ist 1&1 und ich nutze einen email-account, den ich mit Outlook 2010 als IMAP-Synchronisation verwalte. Als Antivirus nutze ich AVIRA und AVAST. Mein System ist Win10 Home 64bit. Da ich mich bei Euch schon ein wenig umgesehen habe, habe ich das von empfohlene Tool FRST64 heruntergeladen und die Untersuchung ausgeführt. Die beiden Textdokumente FRST und Addition füge ich hier als Anlage mal bei. LG Andreas |
|
01.02.2016, 14:35
| #2 |
| /// TB-Ausbilder   | Email-account gehackt, Betreffszeile: New message Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Zur ersten Analyse bitte TDSS-Killer ausführen: Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
|
01.02.2016, 16:09
| #3 |
| | Logdatei_Teil_1Code:
ATTFilter 14:58:24.0965 0x1c78 TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
14:58:24.0965 0x1c78 UEFI system
14:58:35.0287 0x1c78 ============================================================
14:58:35.0288 0x1c78 Current date / time: 2016/02/01 14:58:35.0287
14:58:35.0288 0x1c78 SystemInfo:
14:58:35.0288 0x1c78
14:58:35.0288 0x1c78 OS Version: 10.0.10586 ServicePack: 0.0
14:58:35.0288 0x1c78 Product type: Workstation
14:58:35.0288 0x1c78 ComputerName: ASS-CO
14:58:35.0289 0x1c78 UserName: ASS-CO.de
14:58:35.0289 0x1c78 Windows directory: C:\WINDOWS
14:58:35.0289 0x1c78 System windows directory: C:\WINDOWS
14:58:35.0289 0x1c78 Running under WOW64
14:58:35.0289 0x1c78 Processor architecture: Intel x64
14:58:35.0289 0x1c78 Number of processors: 4
14:58:35.0289 0x1c78 Page size: 0x1000
14:58:35.0289 0x1c78 Boot type: Normal boot
14:58:35.0289 0x1c78 ============================================================
14:58:35.0468 0x1c78 KLMD registered as C:\WINDOWS\system32\drivers\95324488.sys
14:58:36.0018 0x1c78 System UUID: {51086F8E-64F3-1B55-BD3E-6A4CF8A66B4E}
14:58:36.0960 0x1c78 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:58:37.0033 0x1c78 ============================================================
14:58:37.0033 0x1c78 \Device\Harddisk0\DR0:
14:58:37.0034 0x1c78 GPT partitions:
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {C0DCF6BC-C34D-4C1B-8072-5410D2A12D61}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xF9800
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {481A908E-1B9E-4215-A984-671DE666217F}, Name: EFI system partition, StartLBA 0xFA000, BlocksNum 0x32000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {BA8A2EB6-1674-4867-B4EE-0CD046FC07E8}, Name: Microsoft reserved partition, StartLBA 0x12C000, BlocksNum 0x40000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {8D7F0CC6-879E-47F6-A767-0ED8FD3B0659}, UniqueGUID: {EA7ACFC9-5B75-44AD-AB3D-D43EF611EE9B}, Name: Basic data partition, StartLBA 0x16C000, BlocksNum 0x200000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C86D517E-40D8-49B9-983A-751D2EB73BC4}, Name: Basic data partition, StartLBA 0x36C000, BlocksNum 0x2361B458
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {6ED7211A-C510-402C-A3E7-C253443EE841}, Name: , StartLBA 0x23987800, BlocksNum 0x19E800
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {7E66F5DD-21EA-4BED-A3E1-AEAD61CFCE49}, Name: Basic data partition, StartLBA 0x23B26000, BlocksNum 0x124F8000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition8: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {13901E70-DD81-48ED-8DF6-CE56291B7793}, Name: Basic data partition, StartLBA 0x3601E000, BlocksNum 0xC350000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition9: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {09764A24-6349-4151-BA2D-3216DB9CF657}, Name: Basic data partition, StartLBA 0x4236E000, BlocksNum 0x124F8000
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition10: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C4B092A5-D146-4C5E-B719-CECA5E93F61A}, Name: Basic data partition, StartLBA 0x54866000, BlocksNum 0x1869F800
14:58:37.0035 0x1c78 \Device\Harddisk0\DR0\Partition11: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C3D1234A-C091-4276-9CB3-13C96F7E26DD}, Name: Basic data partition, StartLBA 0x6CF06000, BlocksNum 0x77FE000
14:58:37.0035 0x1c78 MBR partitions:
14:58:37.0035 0x1c78 ============================================================
14:58:37.0062 0x1c78 C: <-> \Device\Harddisk0\DR0\Partition5
14:58:37.0100 0x1c78 D: <-> \Device\Harddisk0\DR0\Partition11
14:58:37.0146 0x1c78 F: <-> \Device\Harddisk0\DR0\Partition7
14:58:37.0148 0x1c78 G: <-> \Device\Harddisk0\DR0\Partition8
14:58:37.0173 0x1c78 H: <-> \Device\Harddisk0\DR0\Partition9
14:58:37.0192 0x1c78 I: <-> \Device\Harddisk0\DR0\Partition10
14:58:37.0192 0x1c78 ============================================================
14:58:37.0192 0x1c78 Initialize success
14:58:37.0192 0x1c78 ============================================================
14:59:06.0474 0x14f8 ============================================================
14:59:06.0475 0x14f8 Scan started
14:59:06.0475 0x14f8 Mode: Manual;
14:59:06.0475 0x14f8 ============================================================
14:59:06.0475 0x14f8 KSN ping started
14:59:08.0865 0x14f8 KSN ping finished: true
14:59:10.0925 0x14f8 ================ Scan system memory ========================
14:59:10.0925 0x14f8 System memory - ok
14:59:10.0927 0x14f8 ================ Scan services =============================
14:59:11.0079 0x14f8 [ DF1C3D7E6C7929AD83BE22852B5B08CB, 9ECF6211CCD30273A23247E87C31B3A2ACDA623133CEF6E9B3243463C0609C5F ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys
14:59:11.0090 0x14f8 1394ohci - ok
14:59:11.0129 0x14f8 [ 2C5B3035B86770ADD2FE9BFBAF5B35A4, 19E16F9144FE3E33B5FF248CF0040AB079ACAE22290B1369CC72AE4CB5FE3A90 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys
14:59:11.0135 0x14f8 3ware - ok
14:59:11.0179 0x14f8 [ 6B6C39AB2CD7BEB6CFF624522E5449DE, 740D99D2C525FB4F81FB2754281CECEA5FF13DD2120081306728FE33859F28F2 ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys
14:59:11.0201 0x14f8 ACPI - ok
14:59:11.0215 0x14f8 [ 7EADED8087C392876521F7EBCE846EF4, 99BF1BD948F97C1ECBC049C7F949B71D73D0B41FB505B2F75B208E655F7DC8A3 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys
14:59:11.0221 0x14f8 acpiex - ok
14:59:11.0230 0x14f8 [ C498887123327CDFD73A05E7A2780920, B45392C46254FCB8D79B6C3A82C8D894063199E6167D8E5F7EA7D60C75CD16EA ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys
14:59:11.0232 0x14f8 acpipagr - ok
14:59:11.0241 0x14f8 [ C8DBE6EFFCF014CAA010B9BDDAC833EC, 96FC29340C62A6B0910DCCBF8945F32089FC300F45B451A540B8854D53734298 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
14:59:11.0244 0x14f8 AcpiPmi - ok
14:59:11.0254 0x14f8 [ 17039DBEB3B7B9ADCDB4B4533AA9771F, A4D38B144639A20B8B31E4F35FB776A028DB502FAC849FC73EECEB3CCD91830B ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys
14:59:11.0256 0x14f8 acpitime - ok
14:59:11.0283 0x14f8 [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:59:11.0288 0x14f8 AdobeARMservice - ok
14:59:11.0346 0x14f8 [ 10A03D78A40260464DDFD04B5F66ACDC, 19EA03A8003BFACF94D6E26528822F0623395AC95A387603ADA32186BAD36F39 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:59:11.0355 0x14f8 AdobeFlashPlayerUpdateSvc - ok
14:59:11.0413 0x14f8 [ F7D0CD345D2DA42E7042ABCD73662403, 03183F90A994D69066F15C3DFC1D7D7514AEAF46A5AAC059B1FB327F8C30A35C ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS
14:59:11.0451 0x14f8 ADP80XX - ok
14:59:11.0497 0x14f8 [ 70148EFA9A562E7185B75BBE7D376BF7, 8200E3349A1AFA1040B3D956A17BAF3CDC784A1A3CA396125E7872B36C03D84A ] AFD C:\WINDOWS\system32\drivers\afd.sys
14:59:11.0518 0x14f8 AFD - ok
14:59:11.0531 0x14f8 [ 870F1A2C936F92B5D053DF7EC75B352F, D617524FD5886D6D3BC2EFBBB5EA310E906454CD7CA7257C3D7BDEA8C4F2DA71 ] agp440 C:\WINDOWS\system32\drivers\agp440.sys
14:59:11.0535 0x14f8 agp440 - ok
14:59:11.0553 0x14f8 [ 3DF7751D5DC6525E7DC6617FBB45054F, 8E6D4C809DB3B66E7558C4829E01F5C227EE614AC82F33FD99DCC629770D1BE3 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
14:59:11.0562 0x14f8 ahcache - ok
14:59:11.0572 0x14f8 [ 19707ECBCEA71080A85DB2336580DB39, A09AE69C9DE2F3765417F212453B6927C317A94801AE68FBA6A8E8A7CB16CED7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll
14:59:11.0609 0x14f8 AJRouter - ok
14:59:11.0622 0x14f8 [ AA91A5E156D0364ABA7B01658C2EB014, F61055D581745023939C741CAB3370074D1416BB5A0BE0BD47642D5A75669E12 ] ALG C:\WINDOWS\System32\alg.exe
14:59:11.0627 0x14f8 ALG - ok
14:59:11.0640 0x14f8 [ B70F0F2F54B4A4DB6E9C830454752F5A, C882DEAC30812E5FA4479A8CB688603C6AF269EF08236688F4C5E7EBED1D4572 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys
14:59:11.0646 0x14f8 AmdK8 - ok
14:59:11.0659 0x14f8 [ 35E890482C9728DD5C552B85DA8A5AB2, 1E0EB7D902AB4C38E23CAFC0BEA250E7F6E180E8814385B4F29730BFC373A191 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys
14:59:11.0665 0x14f8 AmdPPM - ok
14:59:11.0677 0x14f8 [ 5B30BCFE6E02E45D3EE268FF001BC5E0, 9901DB728885CE36911F79998629B2DD42D56AF9633B5277834F498CC59B0346 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys
14:59:11.0682 0x14f8 amdsata - ok
14:59:11.0700 0x14f8 [ F20B30F35A5C7888441B4DCA001ECF8E, 695A5BC1F18B65992EB06A202AD3CBFA17228E76DDFD1AE6977FD315724F75C2 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys
14:59:11.0710 0x14f8 amdsbs - ok
14:59:11.0721 0x14f8 [ AFE838D7576C581D6483529621AB10CC, 14476A04CC64E7A0F1BBFDACCBD7A87F384BE1877C27656DBB973AF3975D4AE2 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys
14:59:11.0724 0x14f8 amdxata - ok
14:59:11.0793 0x14f8 [ 81E02299B534F61E104C1235519C37B3, B389458C13A0E0717365B7CE371A6B768EB2F98C4CDBAA6DCBBBDE3A2B1D8B14 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
14:59:11.0827 0x14f8 AntiVirMailService - ok
14:59:11.0853 0x14f8 [ 3CBE5047BB08BD363420D68364F9E829, 7A6C59E9B98C1A50CB5FB895050127C5A433BA825D3832FC6DDA2A41AE986543 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
14:59:11.0873 0x14f8 AntiVirSchedulerService - ok
14:59:11.0898 0x14f8 [ 3CBE5047BB08BD363420D68364F9E829, 7A6C59E9B98C1A50CB5FB895050127C5A433BA825D3832FC6DDA2A41AE986543 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
14:59:11.0915 0x14f8 AntiVirService - ok
14:59:11.0983 0x14f8 [ CAA9D66CA6D21AF0AE7DA01D5AC6CC2F, 827400CFB53026757B3D75B6C5AC7BBECE7E62B335160C18CBF6A41047F4A400 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
14:59:12.0035 0x14f8 AntiVirWebService - ok
14:59:12.0053 0x14f8 [ 2BBD3A492B93C7E669D01EE88977D7DE, 311EA890E555E144F4B0DDC3112B2EB5CB848DEA4F33A300942494D8989473E0 ] AppID C:\WINDOWS\system32\drivers\appid.sys
14:59:12.0059 0x14f8 AppID - ok
14:59:12.0083 0x14f8 [ 7A55F9237F726D1667073A47B0D1B90F, 7C2D9AA84F1D4CC6C1FAF6848DF9479A534E01029C4387E8C0647745F1E74603 ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
14:59:12.0087 0x14f8 AppIDSvc - ok
14:59:12.0099 0x14f8 [ 56E219DF92BE16F62308F884739BE022, FE189EE8A52BC5A0E6B76C632021F84F60307A182F2A67C0C0C7CAA72DEFC723 ] Appinfo C:\WINDOWS\System32\appinfo.dll
14:59:12.0104 0x14f8 Appinfo - ok
14:59:12.0130 0x14f8 [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:59:12.0135 0x14f8 Apple Mobile Device Service - ok
14:59:12.0178 0x14f8 [ 610499A73DF3599608EBB6B3F9929052, A9CA49C4A39A825916AB3791090BCFC7044FDB6B2C3538E01F0CFBC2A9931152 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
14:59:12.0196 0x14f8 AppReadiness - ok
14:59:12.0299 0x14f8 [ BF58041024FEF96B48F7D691003B4BCB, FAD25702256AA8E668F082E16C2C05FD7FA907DCA88787BF36121D1B073350C9 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll
14:59:12.0377 0x14f8 AppXSvc - ok
14:59:12.0397 0x14f8 [ E3FE8F610B1CC12BC3B2E6BC43DC97E2, 0E18542CF2095A9ADA1759AB8F986E78B0A50A3C6B2AD4EACD80A23D832A2C6D ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys
14:59:12.0404 0x14f8 arcsas - ok
14:59:12.0415 0x14f8 [ 7BC1F2FC2A9D79E1EBBBF6D69AC3BA1F, 236265BE3F1B2130025A3A10152893BD0D18AD8965732361058B775F010539A2 ] aswHwid C:\WINDOWS\system32\drivers\aswHwid.sys
14:59:12.0417 0x14f8 aswHwid - ok
14:59:12.0430 0x14f8 [ 68E76C1675AC171A84F5B7230652E19D, A707A4E51110B15FF7D73C95D4D9C1E457FC9D93E1479BDB67EBDDDD6AC28D8E ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
14:59:12.0435 0x14f8 aswMonFlt - ok
14:59:12.0448 0x14f8 [ 2D6B49A071216796106E7804AB2BA7DC, 6A58A3B36EA05A24333482F87CFD315F73E56A64E46493E82E0FE9115E284168 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr2.sys
14:59:12.0453 0x14f8 aswRdr - ok
14:59:12.0464 0x14f8 [ E46B51C99BB750A81AC6A68362475A5C, 2A61C09902B39696D151B9D5E6A60FFC3CF3EA02613EC64BBAB4DEE3C78838E2 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
14:59:12.0468 0x14f8 aswRvrt - ok
14:59:12.0516 0x14f8 [ 0BCDF7DF06B4407A7EB0443AADB3DD27, 3D33FFBECFE4766FE66B1269B7B218D03D7ED9E58A9C27E8D8B84474F30DBB19 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
14:59:12.0554 0x14f8 aswSnx - ok
14:59:12.0591 0x14f8 [ 619CA9F210F0F36F8162E5B7BFDDA5CD, D0D87549BD32F575E518B510085F86D434C3B948733391A6F7959918D761F29B ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
14:59:12.0608 0x14f8 aswSP - ok
14:59:12.0625 0x14f8 [ D9079E1A1C2A1F8ED5F37AF8E6CD3161, 629E3A642C5E3BEA65CDD2E08CAD69F9649A98BDA906678B51D3D2C9DB5BB253 ] aswStm C:\WINDOWS\system32\drivers\aswStm.sys
14:59:12.0632 0x14f8 aswStm - ok
14:59:12.0651 0x14f8 [ 3BEC32A0B646D914921FD56AA39998C1, 8DB7CBF3DEF8EAE1D7D28C38B3A0FCD5C2A04D772078B907F35C66451355A04A ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
14:59:12.0662 0x14f8 aswVmm - ok
14:59:12.0673 0x14f8 [ 5E00748A1AD246CAECBBB7553BED36CC, DAD2C93F0894E7BB5E5D8D767D8286A909086B49172C504A01097C3A180998C6 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys
14:59:12.0676 0x14f8 AsyncMac - ok
14:59:12.0686 0x14f8 [ 492B99D2E3D5D7BFD5F0AE1BE7BD37DD, A3F6BFC4FDC1933FBF3145019B118689A414108B04F43E2563946B2673C89324 ] atapi C:\WINDOWS\system32\drivers\atapi.sys
14:59:12.0688 0x14f8 atapi - ok
14:59:12.0712 0x14f8 [ 890BF20BDF500E4E84720EA84448EDDF, EF5EECA20FFB6B78277CE551877479DB79E91DB23B46530C1D0E746F0F51FBBF ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
14:59:12.0726 0x14f8 AudioEndpointBuilder - ok
14:59:12.0786 0x14f8 [ FAC1E762CB49992381691B00D2069B3E, 9973814BB259A370E6A17EDFB785CED9C634721E6D6FE069667B669AE60EB5F6 ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll
14:59:12.0827 0x14f8 Audiosrv - ok
14:59:12.0857 0x14f8 [ F5CB8703A4F51EE30E5C090C78073AA4, 90683F39E9AA315FFB66A9F014AD1BEBF19EA62908247C133455815F6632E578 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
14:59:12.0868 0x14f8 avast! Antivirus - ok
14:59:12.0883 0x14f8 [ CF233C89DEFF6BCA1F65BE3DA0C1A306, B718A59CFC0E3A9ED4E8C690390F54C96828C5A4C2790C2E98075DB4484240D6 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
14:59:12.0890 0x14f8 avgntflt - ok
14:59:12.0906 0x14f8 [ 4764D299855174D6B5C7DA853B490029, 6E2C8E25DC3C38EEAAA1221E515AC06C2EDC0A71CF2F7762E8DFCC55938D59B3 ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
14:59:12.0913 0x14f8 avipbb - ok
14:59:12.0930 0x14f8 [ 8E6214E8C6100222BEB6A14F9B908A7E, 268279AE0D87E4B1CC227355DF12B7E8113F8355B1D20447AA723830D706021A ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
14:59:12.0939 0x14f8 Avira.OE.ServiceHost - ok
14:59:12.0951 0x14f8 [ 79F7741A773FF194EEC64A8161AE26D5, 3DDEA5FBDCB74A2BACC895A44C8C2A947F09E2649ED61D781E99DD61DBFACA5D ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
14:59:12.0954 0x14f8 avkmgr - ok
14:59:12.0967 0x14f8 [ E477AF94ACCCF99A0E56D71D450DCCCB, C97756A4E82EC7EF8268967B10DEBAAEDB746B2846CA2BFD68E1B7DBBAE7901A ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys
14:59:12.0971 0x14f8 avnetflt - ok
14:59:12.0985 0x14f8 [ 7062CE507814D5306DCA5D6A15B7B6B6, 9D60506003A66C2E516B1FCB70CC5B26FB3A9948B95D97C828DD0328E76F2C91 ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
14:59:12.0992 0x14f8 AxInstSV - ok
14:59:13.0023 0x14f8 [ 6447BA6FA709514B6C803D159B4C7D1E, 549DDCEAD93DF333F6BBD56A9258A867E4DA219741C00D48C68F8F230A87B11A ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys
14:59:13.0043 0x14f8 b06bdrv - ok
14:59:13.0058 0x14f8 [ B4AC08B1D04D0CE085435E5CD0E663C5, 61E641388E5692B2EB351E44BA1DB86B5305DD105EE56865D59072CA9407C8AC ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys
14:59:13.0062 0x14f8 BasicDisplay - ok
14:59:13.0073 0x14f8 [ 25B5BB369DEE2BAE4BF459C978FF9035, DBC2157B2AC0BC92B4011CE5E01F2DCDAAE71E37D9D21102503C6455FAAC4DCA ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys
14:59:13.0077 0x14f8 BasicRender - ok
14:59:13.0091 0x14f8 [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\WINDOWS\System32\drivers\bcmfn.sys
14:59:13.0094 0x14f8 bcmfn - ok
14:59:13.0104 0x14f8 [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys
14:59:13.0106 0x14f8 bcmfn2 - ok
14:59:13.0141 0x14f8 [ F8F398A4AF7E0917320BC2B2CD812888, 02B9A6EA0AA750CA9B62AB09E99956C35E252A12B22C2CBFDC4E941ED5870591 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
14:59:13.0156 0x14f8 BDESVC - ok
14:59:13.0167 0x14f8 [ 5A88834AEE15D97695FAE0837B73B3E4, 03035FB51DE218B8EDB15129A0376DDED0C7E7B6DA58DD95B12E4E5C8D852ED8 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
14:59:13.0169 0x14f8 Beep - ok
14:59:13.0208 0x14f8 [ 8EA08141590CB9331FA773FB430E91E4, 0507499EF423CC9EE9AC18C2B5CBF9965E69481C69DC96E361C2184C53C3F404 ] BFE C:\WINDOWS\System32\bfe.dll
14:59:13.0238 0x14f8 BFE - ok
14:59:13.0290 0x14f8 [ 64582C924C48175D52AED0D0E64AB413, 75DC6BC01D26A4BABEDB8013F0C106780F0991CA63075798C7C24B66022F58E3 ] BITS C:\WINDOWS\System32\qmgr.dll
14:59:13.0347 0x14f8 BITS - ok
14:59:13.0380 0x14f8 [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
14:59:13.0396 0x14f8 Bonjour Service - ok
14:59:13.0409 0x14f8 [ DA2C6F7ACE392193C424FEA975C5BFFB, 668F91F3E5F8EA170C10823D6959E0EDB32434C51FAA68BEA782EDDF5618690E ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys
14:59:13.0414 0x14f8 bowser - ok
14:59:13.0453 0x14f8 [ 62C0D7CD771F26198F76F56B81D8A5B5, 3505DA8B68486D393BF7DCE5F463EA7F88387E6F06BC8175F3514BD6AFE25C37 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
14:59:13.0476 0x14f8 BrokerInfrastructure - ok
14:59:13.0492 0x14f8 [ DA4C9335434E71D6CC86A3CA567769CC, 9FE5EE3CC91CADBF952446E0A9A79A8834B03C8D4C47D6E9257AF64B2C17F518 ] Browser C:\WINDOWS\System32\browser.dll
14:59:13.0498 0x14f8 Browser - ok
14:59:13.0508 0x14f8 [ CAEC7BC11AF69A181AF7932E636E09E4, 503C69045F1E025CBEE2405043BB71CC58478985ECAF6587F73FCB57860F5709 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
14:59:13.0512 0x14f8 BthAvrcpTg - ok
14:59:13.0524 0x14f8 [ 5F2B4B32E986C058525D3BA2A475A16C, CEC5BB0B025DD9525CFBBEDF6EB6F63336534798495A4F95763CE112DF915088 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
14:59:13.0528 0x14f8 BthHFEnum - ok
14:59:13.0540 0x14f8 [ 5406289E8AE2CB52FC408154E0A64BA7, 0A3795F2E6E2B51198452CF69A99159D8E11650E95F41DF0B575CB72F9C6C6B5 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys
14:59:13.0544 0x14f8 bthhfhid - ok
14:59:13.0576 0x14f8 [ BAB101E7826BE287F79C4BA721621989, E6DD25C89267FE87253B8226292F2894F5E702075D3B23B09339D3B28744C060 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll
14:59:13.0590 0x14f8 BthHFSrv - ok
14:59:13.0602 0x14f8 [ A76F20CCCA31895A1DA78A875E50F946, ECD4B3670DA5984AA24F4354457B4E45983938A89FF6DB03B556A633B4B37E3C ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
14:59:13.0606 0x14f8 BTHMODEM - ok
14:59:13.0649 0x14f8 [ 40811857B266F02D75DE654AE92D98C9, 964A50FA4A6B0D62B9D8135B2FB9D7222216F99230849CD5478278B06ACD9A5B ] BTHPORT C:\WINDOWS\System32\drivers\BTHport.sys
14:59:13.0686 0x14f8 BTHPORT - ok
14:59:13.0700 0x14f8 [ 7A177E18AA6A6A6365E6351C2BF8EDAE, A35224A20014B1215A6824AE5E17B8869A775EA272EF7F25EAFFA18733F8D09D ] bthserv C:\WINDOWS\system32\bthserv.dll
14:59:13.0706 0x14f8 bthserv - ok
14:59:13.0719 0x14f8 [ F001B81D47CEBF96E60CE971FFCC45C4, EE419B557C52B0F1704B5D58E7FA9A996B33E78CC02EA4CA1D28CAB8CFD77D95 ] BTHUSB C:\WINDOWS\System32\drivers\BTHUSB.sys
14:59:13.0724 0x14f8 BTHUSB - ok
14:59:13.0734 0x14f8 [ BF89BDBA5D3A0B4256D3F6FC8D31880D, 940F3BF55B88261C9E9A951A092331559FC5B24FE3BA0F1E1AB3450D2CA364C1 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
14:59:13.0738 0x14f8 buttonconverter - ok
14:59:13.0752 0x14f8 [ C24C27FDF93B85A4EFCF25F830253AA2, 35C87518BB59663B57C2361A13AD4E57E37392598F1EB9F07F86CA5A6321AF5A ] CapImg C:\WINDOWS\System32\drivers\capimg.sys
14:59:13.0757 0x14f8 CapImg - ok
14:59:13.0770 0x14f8 [ 7F9C7226D743B232907ED2537B8A574F, 2211AFC30E8F8FA03020DB48EE14914CD31E50BB6A63FF20AC7C6FA481E72C18 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys
14:59:13.0775 0x14f8 cdfs - ok
14:59:13.0796 0x14f8 [ 0A92DC116CFC7F6BE8167DD25CB925CC, 50CAC7BE14FF69B10C029E049F7C441A5572540F027F95F940B185C76C689409 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
14:59:13.0809 0x14f8 CDPSvc - ok
14:59:13.0825 0x14f8 [ 82D97776BF982AA143BDC7DFB5054EA8, 954F56728371E6B3514586DCEAF15C4727BAED6CAFBF788654C4E03BD702942C ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys
14:59:13.0832 0x14f8 cdrom - ok
14:59:13.0848 0x14f8 [ 4E9158CECF77A029AB98E8FBB43FCED5, AFF8BDB8F8F8DDF4FC0D65712E031DC360856CD3CE5C8A4C8FF960388F37462F ] CertPropSvc C:\WINDOWS\System32\certprop.dll
14:59:13.0858 0x14f8 CertPropSvc - ok
14:59:13.0870 0x14f8 [ 0505C1D991D0F9D47F3353BB98597C7E, 3B801CCF4980256327A4A9FBD98007DA1E3ACE9C94E5A4C23AB21303B46E8B5A ] circlass C:\WINDOWS\System32\drivers\circlass.sys
14:59:13.0874 0x14f8 circlass - ok
14:59:13.0907 0x14f8 [ 8B4B39C507ABA09AAFE8E3932D1B392C, 734700155A658BC08FC96E8F99A01DE7F7251D7DDEFA79D258B2EEB370BA7AA8 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys
14:59:13.0922 0x14f8 CLFS - ok
14:59:13.0954 0x14f8 [ BE10905777246CA6AA74F48FE9236517, D51B13FB176D82665C91B59B3C6E229CE746E20ED1BB20DADF6184C7A29E69AF ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
14:59:13.0978 0x14f8 ClipSVC - ok
14:59:14.0010 0x14f8 [ 3E76A1547F2448BCEE3D2F4AE3931AB5, 31B41723FAA4210A86B1AE02D6C052BD8B738C4B89FB0177C1AE997D24BA5B8C ] CLVirtualDrive C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys
14:59:14.0015 0x14f8 CLVirtualDrive - ok
14:59:14.0027 0x14f8 [ 39F71BF21E7F8EBE9B4810BC95EE26D6, 6134013F918D41A1AA8C814217A272F2C428FA3FE97DB66501FA50A488B0C991 ] clwvd C:\WINDOWS\system32\DRIVERS\clwvd.sys
14:59:14.0031 0x14f8 clwvd - ok
14:59:14.0044 0x14f8 [ 95832B049E2833B9F5189823CDF946C7, 72773A42A89220B4A6AC72D1633B16F11191A44D876A44FAB5CEFB717CE3223D ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys
14:59:14.0048 0x14f8 CmBatt - ok
14:59:14.0094 0x14f8 [ 80977779A19947939D680A4899E829EC, 6D510B1EFA39D79D0A8B3CD4F00937A4DDC1411664B001D4ABC546C98345F630 ] CNG C:\WINDOWS\system32\Drivers\cng.sys
14:59:14.0115 0x14f8 CNG - ok
14:59:14.0127 0x14f8 [ 58D640BC2294C71BDE0953F12D4B432F, 0B3B7659FCB97791A2A1F895C8E6F9078F855C94C13EB47464492588C4B02B85 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
14:59:14.0131 0x14f8 cnghwassist - ok
14:59:14.0178 0x14f8 [ 14F9883588398A1BDE49C75098C75DE6, D9D82DE89FAFE60BC902683BC44C7555533A030150FD5E5A35A24542FACC5CAD ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys
14:59:14.0181 0x14f8 CompositeBus - ok
14:59:14.0190 0x14f8 COMSysApp - ok
14:59:14.0202 0x14f8 [ 02B8E49148DE5E0A2F6FDF28CE94A6AC, EEA405823F441CA604BEAA44EB71A1D20BC80E124FF7B27380D0201AAF2E0849 ] condrv C:\WINDOWS\system32\drivers\condrv.sys
14:59:14.0205 0x14f8 condrv - ok
14:59:14.0296 0x14f8 [ DE6DF2C34718EADCFF8776E597F2104D, 35D03E95853CEAC69F674FB09C819A4698EBEDFD8AC0474F0ADF02741492401E ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
14:59:14.0325 0x14f8 CoreMessagingRegistrar - ok
14:59:14.0385 0x14f8 [ BB812787B838A74943DEF209350C3883, 2C168F48A68644AA3CB6167BEC2A260E3E9C78D0766A15AA0FAA39CDBD7FA040 ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
14:59:14.0404 0x14f8 cphs - ok
14:59:14.0420 0x14f8 [ 2CE0D74AED86A372997E9D77AE10B9F5, 1AFAA22C68FD0B81F73CE0EB763AD77AB97E78916752843A5056E1352F0FEA82 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll
14:59:14.0426 0x14f8 CryptSvc - ok
14:59:14.0464 0x14f8 [ 9FF6436D65CD8C798691373E28FBFB3B, 7A9ACD14679FB82E71EF4C47E43DAD931EC4FD727A5656AF8A3CC3B95D67EB5B ] CyberLink PowerDVD 10 MS Monitor Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
14:59:14.0469 0x14f8 CyberLink PowerDVD 10 MS Monitor Service - ok
14:59:14.0488 0x14f8 [ 06B5C625CB915E9A7A1F08A43E332FA1, 66F0BFE088B44ED3D36E62DC05200CD09F135FF63C447846C603D6246FABB9BE ] CyberLink PowerDVD 10 MS Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
14:59:14.0500 0x14f8 CyberLink PowerDVD 10 MS Service - ok
14:59:14.0511 0x14f8 [ 2619DC483579DB9FE804044C1ADFFD1A, 23A5420288735A980917091532BE7BB36EB51660AA4555C615AF736357EB02EC ] dam C:\WINDOWS\system32\drivers\dam.sys
14:59:14.0515 0x14f8 dam - ok
14:59:14.0569 0x14f8 [ B339861C6A2A86FBCA67C2006B461473, 228ADC8A8603C0A4342C6CBC6F2CC919271D42391365061AF660E0D7151C66A4 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
14:59:14.0607 0x14f8 DcomLaunch - ok
14:59:14.0625 0x14f8 [ 620921E77351FB651632322AD2C195C4, 5A98971995D7A2B5AE6BEA69344FCC6687B582FEF74BDA206D32FB2E6CEB0478 ] DcpSvc C:\WINDOWS\system32\dcpsvc.dll
14:59:14.0637 0x14f8 DcpSvc - ok
14:59:14.0666 0x14f8 [ 6129EA4294C5C69E4665801E95B16AB2, CE419186CF0F57434426FF925A09F13BE87639679CBB5F2074B0E1A243349D27 ] defragsvc C:\WINDOWS\System32\defragsvc.dll
14:59:14.0686 0x14f8 defragsvc - ok
14:59:14.0718 0x14f8 [ D12B9B6A6C4885824876422AACC89954, 5853ED5CAF84B7AAFF3EDC5C71FE23EB121DB681D81267D77118424BA9AB6F88 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
14:59:14.0739 0x14f8 DeviceAssociationService - ok
14:59:14.0753 0x14f8 [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll
14:59:14.0766 0x14f8 DeviceInstall - ok
14:59:14.0776 0x14f8 [ 5BF8BD9B19D665452494C8D56DF4B28D, E5FC649207EF42C04B6737D442FECD3383E82F8998B140319FF400773F1D0978 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
14:59:14.0782 0x14f8 DevQueryBroker - ok
14:59:14.0796 0x14f8 [ C9478D7DB7BE5D7ACE65CB1167F07320, D5082D09EE62E34A195768040B741E22ACC9421CFF315423D77A63ABF8F5E39E ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys
14:59:14.0803 0x14f8 Dfsc - ok
14:59:14.0830 0x14f8 [ 5841A361D28069DFC82E1E98040FDC3F, 3A48DB7ADE90654242CB54DAD07F5FF0CD5CABF372C50D5B2C4D7AED068986E1 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll
14:59:14.0847 0x14f8 Dhcp - ok
14:59:14.0858 0x14f8 [ 9F5AC03F5A0000DD96FA29CD68A6605B, 6964E077635E65DA902CA6C69E704A9DCD5856D22BA75E1CF823E63E62266AF7 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
14:59:14.0862 0x14f8 diagnosticshub.standardcollector.service - ok
14:59:14.0927 0x14f8 [ 7AE76C7BC60B53999AD07F6A8AFF15C0, 8DC5DA1FAE508D03433C051C877657038BA346707D37FDBC2FE74B4C1F3509A0 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll
14:59:14.0985 0x14f8 DiagTrack - ok
14:59:15.0025 0x14f8 [ 68BFCCC1EC25F0F942EA32AD9D67A131, CF19DA2816262D9D532249970581E55DF595A5FD0ABE44C5124A40F42A9B28B4 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
14:59:15.0040 0x14f8 DigitalWave.Update.Service - ok
14:59:15.0054 0x14f8 [ 4904B152E4942BF700F2D73228B4D477, 0E5646DCA05A24C71F057C9F9F64AE992D338DA72DF3126175C2FA178854C30F ] disk C:\WINDOWS\system32\drivers\disk.sys
14:59:15.0060 0x14f8 disk - ok
14:59:15.0089 0x14f8 [ 49F069E2D22F33955A69D44DFD1B5179, 739C52C7B961BA683E8C7CCDB0E95423C17561B2F1F506BAE923DC53DB96B067 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
14:59:15.0108 0x14f8 DmEnrollmentSvc - ok
14:59:15.0119 0x14f8 [ 0197AE4B9790A4E73751CACFAA480126, 86BBB398F1A93754B2C329271F13A88FD2F285F30225C38F068F565CCA14EB9F ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys
14:59:15.0122 0x14f8 dmvsc - ok
14:59:15.0133 0x14f8 [ 5EF8EC71A7A91F3DF7798BEFE6786B0E, A3A56B43C72926881C66B7A17C9EAA35C2D9603C8D3849438838536BCD3F4633 ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
14:59:15.0138 0x14f8 dmwappushservice - ok
14:59:15.0172 0x14f8 [ 570BB222E3AFC4407636B53F6EABFA70, D0194A128370BB0A337B61402F9EEDD6F7942ADB19BF672D0F92DA2DA563D0DD ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
14:59:15.0186 0x14f8 Dnscache - ok
14:59:15.0209 0x14f8 [ 1B15297A3A2CAB6BD586676154F389D8, 623D5F5FC8622B7D9AEEEB1787E6846C1570F0EEF94341239440B616D09D672A ] dot3svc C:\WINDOWS\System32\dot3svc.dll
14:59:15.0222 0x14f8 dot3svc - ok
14:59:15.0239 0x14f8 [ 316C2D8B8E3C0727969F1C3790EF7193, 631F8578FDB26578C8436E4B9C4DF21E1F58FCFE6DA66E5769AAC3739005D465 ] DPS C:\WINDOWS\system32\dps.dll
14:59:15.0249 0x14f8 DPS - ok
14:59:15.0258 0x14f8 [ 25FA06D3B49D6ADF8E874FFCDCD76B50, 9AF09B96ED79D94EA36581ABE6CC73313A72891779774B15860D018BEA2BBA0F ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys
14:59:15.0262 0x2b48 Object required for P2P: [ 81E02299B534F61E104C1235519C37B3 ] AntiVirMailService
14:59:15.0263 0x14f8 drmkaud - ok
14:59:15.0280 0x14f8 [ 16EE6701115BECF8C657D9D6E123F6A1, 16E115B5245C3C988F8B58B90D30F183021C7C7792D3D1C74BEC606E49672B2A ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
14:59:15.0291 0x14f8 DsmSvc - ok
14:59:15.0309 0x14f8 [ 120BECF7452992DAEBD3878BFE5B2412, A1FE8FC039835A5B59ABD789F5C1BFEA2C091A29978CE386C9880E13178930E5 ] DsSvc C:\WINDOWS\System32\DsSvc.dll
14:59:15.0317 0x14f8 DsSvc - ok
14:59:15.0412 0x14f8 [ A2512BC5F2ABD84D8B3CB0D76ADB749A, 14A1FBF606ED537B9E1B7A939C010A2BA9D609D147FB89AE52D116E59A21D99E ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys
14:59:15.0484 0x14f8 DXGKrnl - ok
14:59:15.0501 0x14f8 [ 0CDF6B61D7F7FFCD195AF0113B9B2C16, 828D3FA31742B54075EAED2E67BBB5166D2EF4F84B791077E96DC0BD5557F11E ] Eaphost C:\WINDOWS\System32\eapsvc.dll
14:59:15.0509 0x14f8 Eaphost - ok
14:59:15.0542 0x14f8 [ 04A83E99978F4BBB063074FF99D9E5D6, 0FAAFBD958D5A563EC9656F875B6ABE7B320EA85A92C062FE934E8EDFE38135F ] EaseUS Agent C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
14:59:15.0549 0x14f8 EaseUS Agent - ok
14:59:15.0564 0x2674 Object required for P2P: [ 4764D299855174D6B5C7DA853B490029 ] avipbb
14:59:15.0712 0x14f8 [ 491275B864B704B54EC08168344E0F38, B4849400C3F819CF7809A2001EA2ECB527022483F7DFE31C3930F951EAFE50CE ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys
14:59:15.0856 0x14f8 ebdrv - ok
14:59:15.0874 0x14f8 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] EFS C:\WINDOWS\System32\lsass.exe
14:59:15.0883 0x14f8 EFS - ok
14:59:15.0895 0x14f8 [ CEF108FCE06892CFA5F1B49527D4BF49, FA337584024B6E6EE4AF519F57FFA4C0FCA19EDC148FF309336C4CCA8F9C9CE8 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys
14:59:15.0899 0x14f8 EhStorClass - ok
14:59:15.0912 0x14f8 [ 5B1EAAE3001A7A320C106FC3859F4111, 700BA2C7D4DFAFFEB78D3804B310A4EE5B4295C84600442665693FF661673951 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
14:59:15.0918 0x14f8 EhStorTcgDrv - ok
14:59:15.0932 0x14f8 [ E34DEFC09F2843C2C24C2248F1ABE6D8, 1FD67EB5820A1D2F4402DE9D95DE288DB69D421A8473074FF23491D7CA8B5ACE ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
14:59:15.0939 0x14f8 embeddedmode - ok
14:59:15.0960 0x14f8 [ 062152DD5B225518A991DFCD8536770C, 5C8EF4E0C7DE3B24387FF239A8D0CDA39C2376826F16EAFF09739A6C7EDA01E0 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
14:59:15.0975 0x14f8 EntAppSvc - ok
14:59:15.0985 0x14f8 [ 1B677389760689A11241884C700B48E0, 75EC4D16F3F6004D2697AE25E029B95D8B9611911039777B781C5707DA6048C6 ] epmntdrv C:\Windows\system32\epmntdrv.sys
14:59:15.0990 0x14f8 epmntdrv - ok
14:59:16.0000 0x14f8 [ 7A2705148A4BB3CA255F81624338B461, 68AC8F8D2DD8AA4E8F2224A0054DE2AF67EA199217E87CD3C7299B021048F14F ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys
14:59:16.0005 0x14f8 ErrDev - ok
14:59:16.0022 0x14f8 [ E47A0ECA90AF393983EF30E458606BB5, 1EB07711968ADBAB63A993FC54795DAAA9514F6E58FDED9EE9CA2DA3CCD620E1 ] EUBAKUP C:\WINDOWS\system32\drivers\eubakup.sys
14:59:16.0026 0x14f8 EUBAKUP - ok
14:59:16.0037 0x14f8 [ 17696B5ACDBDFFC7D26C4B56BF132AD5, 3D2499FE2406300357B746AF82F69CBF1A1039B1F2DD755018F2185FDE26EA7E ] EUBKMON C:\WINDOWS\system32\drivers\EUBKMON.sys
14:59:16.0040 0x14f8 EUBKMON - ok
14:59:16.0051 0x14f8 [ FCFD172899D0A026E5BD29F4775BFA76, CC651EAA870D9107B9FAC84B2FA2B8F166C5CA8FBDA803AFBDE07F523FA8C667 ] EUDSKACS C:\Windows\system32\drivers\eudskacs.sys
14:59:16.0053 0x14f8 EUDSKACS - ok
14:59:16.0070 0x14f8 [ 1D866B50C9B1BA3FE90CC81E0DBC0E15, 07606693CA155EC3BA2FEF6B1C70263AD0F6C2935E1C99572BB2152260F33E28 ] EUFDDISK C:\Windows\system32\drivers\EuFdDisk.sys
14:59:16.0078 0x14f8 EUFDDISK - ok
14:59:16.0087 0x14f8 [ 08C997734B2CECE882656BB2855E6E76, B3C1DEF26C9C9123D34395717220B450C705B5FA9FC8E321ADC444A4D63E6F36 ] EuGdiDrv C:\Windows\system32\EuGdiDrv.sys
14:59:16.0092 0x14f8 EuGdiDrv - ok
14:59:16.0162 0x14f8 [ 17BE4A35829B37C742084DC02D48E5F0, 7FDA62B56DF585C3F2C6FFB10AC7C0D8F70FA921C4DEA47B2789745CFE2618CE ] EventSystem C:\WINDOWS\system32\es.dll
14:59:16.0180 0x14f8 EventSystem - ok
14:59:16.0201 0x14f8 [ DFE8A33FBCF6F38182631A4D6097B92D, F9D06780830E74FD5309E6DC5C3EEDB9334A8AE284F381FA91EF2729297F8632 ] exfat C:\WINDOWS\system32\drivers\exfat.sys
14:59:16.0213 0x14f8 exfat - ok
14:59:16.0235 0x14f8 [ 03DE0EC072C5EBD5B018CAD83F1E522A, 9D0B30A2870FBA20B95017CE3A4205F2DD53FE169A0D16715E962D83DE040FB3 ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys
14:59:16.0248 0x14f8 fastfat - ok
14:59:16.0293 0x14f8 [ 952F10D2116B91BA433842D07879AE7A, 9E1EC0C719877EF198AA4DDBE896E9DDEAD360AAC1FC6DF305E7C5C73C7A761D ] Fax C:\WINDOWS\system32\fxssvc.exe
14:59:16.0322 0x14f8 Fax - ok
14:59:16.0336 0x14f8 [ 9D299AE86D671488926126A84DF77BFD, C076EEDD0524B7D88BC56C97089E0A836CC1AD725E1A544CC4F8DDBB6670C366 ] fdc C:\WINDOWS\System32\drivers\fdc.sys
14:59:16.0339 0x14f8 fdc - ok
14:59:16.0348 0x14f8 [ 47D09B8C312658ACE433E46DDF51C3A5, E76948DA0F51C7DC6D69B7E36D63CE6E98FDE619FA30E91637F75B5084107D22 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
14:59:16.0353 0x14f8 fdPHost - ok
14:59:16.0374 0x14f8 [ 177AC945B20C81400A1525ED7B49A425, FD215A2E718EA38A95D985F53AB3DD44B50C2549AA67F44BA98C4709E492051F ] FDResPub C:\WINDOWS\system32\fdrespub.dll
14:59:16.0380 0x14f8 FDResPub - ok
14:59:16.0394 0x14f8 [ 3E78BEC276DA5A062E4D55F3291B3463, 62983457F506C70D1F89F527AB61C1C0F4D1B002631256A2708F9AF092A8C95E ] fhsvc C:\WINDOWS\system32\fhsvc.dll
14:59:16.0403 0x14f8 fhsvc - ok
14:59:16.0416 0x14f8 [ 8F12AB59336143B680F71B217B495AD2, A28F62F065C68CC1A7EEF0CA52F83C3284B001565D8E154BF8568DE4A525104E ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
14:59:16.0420 0x14f8 FileCrypt - ok
14:59:16.0432 0x14f8 [ 92ECCFA58C8195B8EA33ED942469D4E6, 8DB12E8CF80ECA22182F9A1F4CA922336A430297F1F596F204ECF4D9D19F30D9 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys
14:59:16.0437 0x14f8 FileInfo - ok
14:59:16.0448 0x14f8 [ 87C51FDD50C17882BA93E28BBABB9847, 8987D80FB77D1D3F9E89B491B1287B027DA26FFC4E4BA7B01E07D4D4FC69E236 ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys
14:59:16.0451 0x14f8 Filetrace - ok
14:59:16.0460 0x14f8 [ E99261DD76D1C9E05AF575939CAE5AC5, A789724FD2E22AFB2F921836F5C19A21D17F4BBD604771E2908C2651BD31989C ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys
14:59:16.0463 0x14f8 flpydisk - ok
14:59:16.0490 0x14f8 [ 25D7A58625E1453E40D36825DE74E4F1, 74119803D35E3C3CC349B44C6CD9EDF6B797F88584B847F0BF9EED542719B86B ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
14:59:16.0506 0x14f8 FltMgr - ok
14:59:16.0576 0x14f8 [ 4387DE200BF8DD0E2EE828E655434B9A, 9148D65E54663EEC139E754091F47ABF439A637BEA83F600D30736522DAA845D ] FontCache C:\WINDOWS\system32\FntCache.dll
14:59:16.0636 0x14f8 FontCache - ok
14:59:16.0661 0x14f8 [ E79DAC43A5E191FC4DDB04197A704BFA, 2FA6C8B5B2DFE66C05828E3F55DFD6268A8210E9BD083F2D09367AD59AF1C6C1 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:59:16.0665 0x14f8 FontCache3.0.0.0 - ok
14:59:16.0676 0x14f8 [ B4175E8BE60B099686FF55CA7D692316, 3158FC5B4D1A2F1FC1346754392AE24AE58999B9061B1CE78A65E785BFFADD52 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys
14:59:16.0681 0x14f8 FsDepends - ok
14:59:16.0691 0x14f8 [ CC71372CEB811A72F1DC99089C5CBF53, BB9DDE74D60E534A6F8A51B63DDBB441245F06A00A0AFD37DBBE86255690946D ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:59:16.0694 0x14f8 Fs_Rec - ok
14:59:16.0728 0x14f8 [ 421497634C86EF4B8F86D0EBC076728F, E0D1449555D8849364E00AA747DBC820EF914A9F5B796E35070072FCBC532ADE ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys
14:59:16.0752 0x14f8 fvevol - ok
14:59:16.0764 0x14f8 [ B9981A4CB9F728B3312A3885BFAA7204, 12FB2EB2E5D2A912769823DD9C1B33DB358CD0B7FBFC788529EF83DD584334F8 ] gagp30kx C:\WINDOWS\system32\drivers\gagp30kx.sys
14:59:16.0769 0x14f8 gagp30kx - ok
14:59:16.0780 0x14f8 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
14:59:16.0783 0x14f8 GEARAspiWDM - ok
14:59:16.0792 0x14f8 [ 77555B11B264991DDC26872FFCF1AB97, D5F230EEF74EB869F771F8A4AB19C1E6C845BB0EF4A1234882EBDA4FDC431E44 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
14:59:16.0796 0x14f8 gencounter - ok
14:59:16.0806 0x14f8 [ F3AC9652D88BF87BA6596CBEA28CE10F, 115F3C0A5B9903B17ADEA80E1825FE927B7361F5BDDF80CE3685EF2D327EDF4F ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys
14:59:16.0809 0x14f8 genericusbfn - ok
14:59:16.0833 0x14f8 [ BE50C7FD9C390FA277516B166D16725F, F4295AABDEA348C182C9D690427BB8FC99F4F6CE16E29C310079B8C70DED9A21 ] GladFileMonSvc C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
14:59:16.0840 0x14f8 GladFileMonSvc - ok
14:59:16.0870 0x14f8 [ F802FBABF0C4DF1BAA733187B2E476F5, E2533284CEBBB872196B013DD1FBBCA794DB1CAAA37D64849BD9264ECDD2CEE6 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys
14:59:16.0879 0x14f8 GPIOClx0101 - ok
14:59:16.0937 0x14f8 [ B55458A83395A2CFD4E745E9EC4AB5F2, EAB06B089D8A7DBC9AE2A1C919B489911690D341013A5F8F906819C68431CA85 ] gpsvc C:\WINDOWS\System32\gpsvc.dll
14:59:16.0987 0x14f8 gpsvc - ok
14:59:16.0998 0x14f8 [ D011B0ADB15F4815310CE1BF4780B33E, 3860630917F83A89FE7A6407CC544505FA4BD754619CF273DD630ABFBAAE42EE ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
14:59:17.0000 0x14f8 GpuEnergyDrv - ok
14:59:17.0024 0x14f8 [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:59:17.0030 0x14f8 gupdate - ok
14:59:17.0041 0x14f8 [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:59:17.0047 0x14f8 gupdatem - ok
14:59:17.0059 0x14f8 [ 84BC034B6BB763733C1949B7B9BAF976, 18C2C0F15BAFA46197F0BB629C4F585D893C2A78324CA198F88A04527D524F23 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys
14:59:17.0063 0x14f8 HDAudBus - ok
14:59:17.0074 0x14f8 [ 6B8CB114B8E64C0636EB49F7B914D1FC, 1AD7A43CC5CD99DCEF60C61242B6843D4AD925CE93BA5D75CD8395C7125EF5A7 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys
14:59:17.0077 0x14f8 HidBatt - ok
14:59:17.0090 0x14f8 [ D1AD197CCDAAC0CB4819DA1D6EB17BAE, C370F974D0A1F7B60F47EAFF57B6CCABE82913187F8BFEE169B8237AE91247B1 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
14:59:17.0096 0x14f8 HidBth - ok
14:59:17.0107 0x14f8 [ 64909DECCFCC6FB5D9A5BAFDCCB31FEE, E19C91FD8D5102A8C4F6C6FF70CA058BB272FEC1B6E9CBA3A473C49948E6AC7E ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys
14:59:17.0111 0x14f8 hidi2c - ok
14:59:17.0122 0x14f8 [ F510F7B7BF61DEAAC04E65C3B65E8D59, 11566086B06FB08B6A179E3068E022DA381C762DC8962D1E1D63DC646DD4D301 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys
14:59:17.0126 0x14f8 hidinterrupt - ok
14:59:17.0135 0x14f8 [ 90F3ED42D423C942BA5EA54E2FFE7AC7, BF7DE0C8141CD20A6235657BA897A019ABEFF6A01AA3FB202C73C33433CDEAF8 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
14:59:17.0139 0x14f8 HidIr - ok
14:59:17.0149 0x14f8 [ 46DE2EF6382DD9613CB506760648F262, 419555220794380134A64E1956B83B2FD1D1B6E403C5FC729A9107E14A12E968 ] hidserv C:\WINDOWS\system32\hidserv.dll
14:59:17.0155 0x14f8 hidserv - ok
14:59:17.0165 0x14f8 [ 128DEDDD61915DBA4D451D91D21F0513, 961A0DDA02B0879989300C15E4FF9022882A4CD895D65335C263AC0DD1918314 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys
14:59:17.0168 0x14f8 HidUsb - ok
14:59:17.0188 0x14f8 [ 2FEF4D90C0CAED258C93CFF72A8FFD71, 56473D90E9FE52849067D080FD88B29C0BBE76E5266657E2ABD6366B7A4E9474 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
14:59:17.0203 0x14f8 HomeGroupListener - ok
14:59:17.0230 0x14f8 [ E2145534FB853921788F52701BED0CAB, DF71F842772FAC21DD8994C97F578A78AC43D06C5F26F752FB69B47DFE3BB112 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
14:59:17.0252 0x14f8 HomeGroupProvider - ok
14:59:17.0264 0x14f8 [ FF442DCDCE1F6E9FAA9C8AD0CD1D199B, A239414E97B310C9545995B0E723B5E792B08D71F651450EB006AD4D1765E4F7 ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys
14:59:17.0268 0x14f8 HpSAMD - ok
14:59:17.0283 0x14f8 [ 5C8BC8A28798FD010E7ABC4E0D588CAA, 622CAFD3DCBB05E15539589FDD4002DA6F24790FC55BDF05AA3D043E8A34E53E ] HTCMonitorService C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
14:59:17.0287 0x14f8 HTCMonitorService - ok
14:59:17.0298 0x14f8 [ B8B1B284362E1D8135112573395D5DA5, 97BC6A7B2DCD7CC854B912A85BB2FCF199592E8E16A7C405EAF89B02D5DE4AEE ] htcnprot C:\WINDOWS\system32\DRIVERS\htcnprot.sys
14:59:17.0301 0x14f8 htcnprot - ok
14:59:17.0315 0x14f8 [ 7C7C986776D00E575BFBDE5DCBDC615D, 4CF12851A5A45917C3A9139B19D79434F2038611B617F83A714506CC7A1A6C61 ] HtcVCom32 C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys
14:59:17.0322 0x14f8 HtcVCom32 - ok
14:59:17.0372 0x14f8 [ A403DAE4B083EB96BC6CEDB47639B4F8, 6F5709CEA93789C075E4BE4041EC43C94910617DA4123DEE178E74E4A9B26708 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys
14:59:17.0410 0x14f8 HTTP - ok
14:59:17.0422 0x14f8 [ CBA5E88A0F0475B7F49653BB72150BEF, 0F03560D9C30E069D117A555AEE729C81E6BCAE443FA25172D0E9E6903695C67 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys
14:59:17.0425 0x14f8 hwpolicy - ok
14:59:17.0435 0x14f8 [ D668FAB4B0397B426EE3D41683B9A1C0, 66F3E3B2ABC3C9B25A0DADBF09818547ED301230374AC5302B4794629A95DDF8 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys
14:59:17.0437 0x14f8 hyperkbd - ok
14:59:17.0450 0x14f8 [ 53FDD9E69189E546DE4740F8C4D8AB2F, 45ED5B229ED5FD0CEE8BF52EFF88FD8B1889BF348ED7187926F290B3AD48A76D ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys
14:59:17.0456 0x14f8 i8042prt - ok
14:59:17.0467 0x14f8 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys
14:59:17.0472 0x14f8 iai2c - ok
14:59:17.0488 0x14f8 [ 59A20F5AD9F4AE54098154359519408E, E27B7389C9D123CDDA4EC9CBDB06C4AA5000012391F940EE1492419B593608FE ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
14:59:17.0495 0x14f8 iaLPSS2i_I2C - ok
14:59:17.0505 0x14f8 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
14:59:17.0509 0x14f8 iaLPSSi_GPIO - ok
14:59:17.0522 0x14f8 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
14:59:17.0528 0x14f8 iaLPSSi_I2C - ok
14:59:17.0565 0x14f8 [ 6B0029A0253098CCE28EACCFDB9E7208, E33AD69644E1683A971DA1169B704FBCFD9F715E9550816058E420BB5DE4D946 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys
14:59:17.0591 0x14f8 iaStorAV - ok
14:59:17.0617 0x14f8 [ 9652E1E35A92D8C75710C17A63B15796, 72F8C4A49B874226DEE9B7C9704F0E0A98DAA2DF4EAE2F2258E8324ACBD242E4 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys
14:59:17.0635 0x14f8 iaStorV - ok
14:59:17.0674 0x14f8 [ FFADF691F7BF727AF5C863454A372723, FCF5A5595E8C9C937BE9F1C3AB5D9BD0EFE82DE1298D12085E0CCD84A186D2F2 ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys
14:59:17.0692 0x14f8 ibbus - ok
14:59:17.0707 0x14f8 [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
14:59:17.0715 0x14f8 ICCS - ok
14:59:17.0731 0x14f8 [ 80BF2990E01E774D64F6E13F30661942, ADFEA2280D29F2C7B0A556C61709301D6327C288064FF5A4D29358403DF41DCE ] icssvc C:\WINDOWS\System32\tetheringservice.dll
14:59:17.0742 0x2b48 Object send P2P result: true
14:59:17.0742 0x2b48 Object required for P2P: [ 3CBE5047BB08BD363420D68364F9E829 ] AntiVirSchedulerService
14:59:17.0746 0x14f8 icssvc - ok
Code:
ATTFilter 14:59:17.0755 0x14f8 IEEtwCollectorService - ok
14:59:17.0990 0x14f8 [ CEFA6BDB4789F3DA003ACBDCC64F5877, 0FE78AEFA9A75B4A99AD6B73AC3252E4C6DFA9D306FEC02D26C1FD574108BFBA ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
14:59:18.0086 0x2674 Object send P2P result: true
14:59:18.0087 0x2674 Object required for P2P: [ E477AF94ACCCF99A0E56D71D450DCCCB ] avnetflt
14:59:18.0122 0x14f8 igfx - ok
14:59:18.0151 0x14f8 [ 75909533EECD0CD9D5974B59474AA6C0, F81D0F949F1F01D09C91735C79288395B82C27B8FB78804752E5A678D7EF3860 ] igfxCUIService1.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
14:59:18.0167 0x14f8 igfxCUIService1.0.0.0 - ok
14:59:18.0214 0x14f8 [ 12F8D27ED8623DDDC09A549EDADCBAC9, D3A3F0588D9CAF1027D8BC14601E2A6AB7E5924A2C23C90D38A9E14538DB02A9 ] IKEEXT C:\WINDOWS\System32\ikeext.dll
14:59:18.0253 0x14f8 IKEEXT - ok
14:59:18.0271 0x14f8 [ B1F193AB8FB72E9FC34B3A39314ED872, 408E98D9C8ABB928090DD9E5D1BB227EFBC997BF168437BAEF0461EB0D1DAE3D ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
14:59:18.0276 0x14f8 intaud_WaveExtensible - ok
14:59:18.0451 0x14f8 [ F45DDE64E87418F62BA75EFDB776F9B5, BE981697E58F4268DDBC0A2439EC182309EEA71897F6ECEB15BC767B9B7DE572 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
14:59:18.0589 0x14f8 IntcAzAudAddService - ok
14:59:18.0624 0x14f8 [ 87871AB7AC797F922A6F3D4C874CED96, 2BCD89911E42827CD294DD7D1486A7845D1F98019E51958E0F488384401B2944 ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
14:59:18.0642 0x14f8 IntcDAud - ok
14:59:18.0689 0x14f8 [ 768DD5CB66952BC4A3BD474757AEE34F, 5A1F91FC8028D84FD83591D60CB7E3B24425C3B0FFF5A9BB0F7CE2E17AAB92D4 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
14:59:18.0715 0x14f8 Intel(R) Capability Licensing Service Interface - ok
14:59:18.0753 0x14f8 [ 7C9ED65324CF268ACBA8024257F782D8, 1DC43DBA3612E26454D7786DEB0538B44A736B67EC99642B4CC574D8A03E0DC7 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
14:59:18.0784 0x14f8 Intel(R) Capability Licensing Service TCP IP Interface - ok
14:59:18.0796 0x14f8 [ ECDB27420D3A98424666904525A8562A, BDA98C3C95F2AD79945EF8213D5C65064052C09C82DD36F0D6724E1D21DCC30A ] intelide C:\WINDOWS\system32\drivers\intelide.sys
14:59:18.0800 0x14f8 intelide - ok
14:59:18.0812 0x14f8 [ 8FF1978643EFD219C5BA49690191D701, 6FD78A8490107C80090D7125644B8C910855374BE1373D1D6B199307C79680BA ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
14:59:18.0815 0x14f8 intelpep - ok
14:59:18.0830 0x14f8 [ B61B60F36E1C8022FA8166ABF0F66B07, 23161F1DA51D44D936329E62DF4C2DAEE3DDD4B3D62CC501A888C0E149788968 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys
14:59:18.0837 0x14f8 intelppm - ok
14:59:18.0847 0x14f8 [ CA0D42029AFFC4514D295E1EF823D02D, F2A05CB2B2E8C843FD02DC37E86F23CF928A4B2F9044424A60DE4E82B87DF5C3 ] IoQos C:\WINDOWS\system32\drivers\ioqos.sys
14:59:18.0850 0x14f8 IoQos - ok
14:59:18.0863 0x14f8 [ 6E3F9D95235DFC9417384080A216F310, 6F13D72661038A91CFABB360621F4B169D78955C3EAD64956A7C825ABAEC5121 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:59:18.0867 0x14f8 IpFilterDriver - ok
14:59:18.0926 0x14f8 [ 6E75B731A8A7EFED0821327B08DAB46D, A77B746447824BD3C68B82D7329B82D62098B2409F8AEE4738FA23CB1561E629 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
14:59:18.0963 0x14f8 iphlpsvc - ok
14:59:18.0977 0x14f8 [ 4F527ECB5EAB47D8EAF34A469666C469, 8FFBEEF42515B6A7758BE579ED69E3911856CBF7710D9785011332C5E3DFE495 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys
14:59:18.0981 0x14f8 IPMIDRV - ok
14:59:18.0997 0x14f8 [ 9E5E8F2A1996F23B7E9687846AA81B01, 29E59384A4F92B3B4F2974942C91A12380113C13D3800900B5F44E2355D05455 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
14:59:19.0003 0x14f8 IPNAT - ok
14:59:19.0034 0x14f8 [ BD713ED20CFD71C32C4BE1928423AE9A, E0EE95FEA3930EA335D9B1FF74EEFAA61ECEC89AEBB1D0E43A1E1088F9990273 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
14:59:19.0058 0x14f8 iPod Service - ok
14:59:19.0068 0x14f8 [ C317EB660138BC9CBFE37CCDE56351AE, F3AF6C573419D7F65C96A4841D4F056CA281CD5AFACDC7A5F586A390DC6E615B ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
14:59:19.0071 0x14f8 IRENUM - ok
14:59:19.0080 0x14f8 [ 531994A6D9399D9B74BE12B5BB58A81E, 6D5CF540C777F4828E1D4C5FE58EE41E6C2F5F399C554DC85F19D1E52229B094 ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys
14:59:19.0083 0x14f8 isapnp - ok
14:59:19.0104 0x14f8 [ 68D5354A4A9692EEC24664C60F47D4A2, 92124E98B6E286B6127DC6D0BFACC9C6D293D58EAE2B47B45532714CE6A6D0CD ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys
14:59:19.0116 0x14f8 iScsiPrt - ok
14:59:19.0128 0x14f8 [ DD1F43B86AD84E53203F92FD3EF3AEB6, 9DE2BA80B315E56DF2E74EAA65F4ECB8324DFC19E30EB56EDDF08340AB100E87 ] iwdbus C:\WINDOWS\System32\drivers\iwdbus.sys
14:59:19.0131 0x14f8 iwdbus - ok
14:59:19.0142 0x14f8 [ 701D7DB13B0815E7076EF4CB4CE981F8, 02585661656C0069AC318B82DE83DAC660451A0B970FDBCA0F7A8B4CBF7D93A9 ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys
14:59:19.0147 0x14f8 kbdclass - ok
14:59:19.0157 0x14f8 [ 884EBBDDBF5968003B40185BD96FF0E6, E3934D0FF0BEDDF5526AF529F7D15BA8BE479383894975B1AF1A1818C394A6E3 ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys
14:59:19.0160 0x14f8 kbdhid - ok
14:59:19.0169 0x14f8 [ 6B3A0C7902811E6372643447E41F7048, 30667B56A306CFD5D15BC46F8E7D9E167612E71B6C8F554406E706A6330F5B94 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys
14:59:19.0172 0x14f8 kdnic - ok
14:59:19.0183 0x14f8 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] KeyIso C:\WINDOWS\system32\lsass.exe
14:59:19.0191 0x14f8 KeyIso - ok
14:59:19.0204 0x14f8 [ 982C795DE20CED7AEDD2E7899B5D9BC1, 9F4E7536DB253CD83AA2AB89E9F3311714CD70F13AFD16F9B4D4CD86A70FC164 ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys
14:59:19.0210 0x14f8 KSecDD - ok
14:59:19.0225 0x14f8 [ 7D8B9214692C4D0F1646215D9984E19A, DC73503A8CA67F4E167DEA69AADDEA5F2D756E1C1F4FF42B6ECEA7E637BB80AB ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys
14:59:19.0232 0x14f8 KSecPkg - ok
14:59:19.0242 0x14f8 [ E9BB0023D730701BB5D9839B44F5E6B5, 19D4BAC09424D331922472CFD2D0E32BEFA9188A6AF194C8D1F93FD77CE36691 ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys
14:59:19.0245 0x14f8 ksthunk - ok
14:59:19.0270 0x14f8 [ 71DE1AD9B23661EEC4F2A6EAA5A7D33D, 3219AEF3D6AE5933AE669FD2ED9ED95A8780612E39F31DB3DB9ED6B6244C5F7B ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
14:59:19.0289 0x14f8 KtmRm - ok
14:59:19.0309 0x14f8 [ 8BBB2B4429AF340481520C20C17FC5B6, 9E32815349195FC4B1BE213600FD407F2EAEEC8368289EB3E6B769125A739C08 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll
14:59:19.0327 0x14f8 LanmanServer - ok
14:59:19.0346 0x14f8 [ 1F5D48B1DA1B812BD2411CA44D75DD32, D1BDB8142CB13E8C6DD6F42E07C9D19BBBF6410D5122A04C01B34B95B442DD95 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
14:59:19.0365 0x14f8 LanmanWorkstation - ok
14:59:19.0394 0x14f8 [ AA97872166AB4201540FB92C0BD6683F, 20AEB2BD7AE35167902B8FDACE060756E0952EBADC795A5E82AF7E2CDDE9DFFE ] Lexware_Update_Service C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
14:59:19.0397 0x14f8 Lexware_Update_Service - ok
14:59:19.0407 0x14f8 [ 02C54C5C7EBE371EC0C59795ED22213F, 712AFE0EDF40436124F3FD55ED9B5A3A33A8761A58F4D482BB65229741B1C270 ] lfsvc C:\WINDOWS\System32\lfsvc.dll
14:59:19.0414 0x14f8 lfsvc - ok
14:59:19.0425 0x14f8 [ 01BF128CC327A2E53898F732AF52B3DB, D62ACDA69D9942F9CEF400874DBB6EAF9811D9657CBFEF89174F88D76BB8D8EA ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
14:59:19.0431 0x14f8 LicenseManager - ok
14:59:19.0442 0x14f8 [ EC34EED89C34B27C292166B725AC7A7B, 58F1BA0CB7743314AC012A82F8CE4072CBDD05D9570C52BC18DC551882F5B1BA ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
14:59:19.0446 0x14f8 lltdio - ok
14:59:19.0466 0x14f8 [ 2C23283A0815B048C06D8C0ED76AAD95, 4335546939C1A98CFE9A4403CC82D79CC713439E4DFD1F4760FDD867305151E0 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
14:59:19.0482 0x14f8 lltdsvc - ok
14:59:19.0492 0x14f8 [ CB6365E995F4DB856866500EDD8F61C1, 717ED387F245CAC68217B0F393D7B8AB3805721AB2C4D2D43430FE6E740F0856 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll
14:59:19.0499 0x14f8 lmhosts - ok
14:59:19.0515 0x14f8 [ 961F28D879D345BFA50AF51285C90F2E, F9931A436651F695B746BC0C07E833D9C9F64126746DF976E691E6CAE26DAC9B ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys
14:59:19.0522 0x14f8 LSI_SAS - ok
14:59:19.0534 0x14f8 [ 6BFB8D1B3407518BE06B6F81F92FA0F5, DE0818DCC0D8D1D30A29AB167C65461A78100ABE2368637CEB9D0ED2B4E88D8E ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys
14:59:19.0540 0x14f8 LSI_SAS2i - ok
14:59:19.0553 0x14f8 [ BE0E47988D78F731DEC2C0CB03E765CB, CA0015E87A3962611DBF714253FA618A6568346BAE640884432C1D44DE4C8684 ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys
14:59:19.0559 0x14f8 LSI_SAS3i - ok
14:59:19.0571 0x14f8 [ F99BF02BE9219986817BF094981EEB18, 4303C772366065885C5D937B2E9AC0BF80C84BFB2737716055AD57BF6AADD673 ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys
14:59:19.0576 0x14f8 LSI_SSS - ok
14:59:19.0617 0x14f8 [ FFAA37FBBDD161E8C200C83B40F7872E, 0637B3119FC220CB8E23EE6694A9F1F25CF8D61008B14F6E30FDC17DCF9E077E ] LSM C:\WINDOWS\System32\lsm.dll
14:59:19.0647 0x14f8 LSM - ok
14:59:19.0661 0x14f8 [ 2FCF837196082864F66CFD9CAB256275, 8BE01C3BCBC1E6E5D1FD7F49E936482E61ACB805F397AB81B8D39C2F0F1083BD ] luafv C:\WINDOWS\system32\drivers\luafv.sys
14:59:19.0668 0x14f8 luafv - ok
14:59:19.0679 0x14f8 [ 88B38A7435DFA9B7E8F94F5D5FE999D2, FF4EBB6CE013D0EA62FEDA5FBBD1205D9A6F684E701F40039A95A4EF4145DC16 ] MapsBroker C:\WINDOWS\System32\moshost.dll
14:59:19.0688 0x14f8 MapsBroker - ok
14:59:19.0701 0x14f8 [ 2ED29B635F35E31A1C0D3DDB7DD2AD03, F70CC20B98C2DBCD13B0D509D92B3BC3828D1B88F3ACD60C860E163064844181 ] megasas C:\WINDOWS\system32\drivers\megasas.sys
14:59:19.0706 0x14f8 megasas - ok
14:59:19.0735 0x14f8 [ 22E3CB85870879CBAE13C5095A8B12E3, 5FA5A8EFBA117089CFDBE09743A16BC3A7CC2042C96ABA1F57901747493106BF ] megasr C:\WINDOWS\system32\drivers\megasr.sys
14:59:19.0756 0x14f8 megasr - ok
14:59:19.0798 0x14f8 [ F2C23E25636BCA3543E6AD7858E861B7, 0CAB0A037471B4858CE9477E49BF50A5E3E6685E05F8A4BD2D9238551D5073A6 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
14:59:19.0807 0x14f8 MessagingService - ok
14:59:19.0978 0x14f8 Microsoft SharePoint Workspace Audit Service - ok
14:59:20.0013 0x14f8 [ D41920FBFFF2BBCBBC69A5B383AD022E, E66218A8303422EA10C19BA12343740B9A1A70B11B39E185E805B4F74CD2B75E ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys
14:59:20.0040 0x14f8 mlx4_bus - ok
14:59:20.0052 0x14f8 [ 64BD0C87064EA20C2D3DC4199F9C239C, ED69706277A58ED2C5F2B1B4E9A4A9C7C20173D46EB57FB31D8B63340BA23193 ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys
14:59:20.0056 0x14f8 MMCSS - ok
14:59:20.0066 0x14f8 [ 8D4B46FA84A3A3702EDADD37FAC6EDBA, E3B9E12BD324FE637C365FDC5E490C41889047004D4FC8F7D78339484F2F717B ] Modem C:\WINDOWS\system32\drivers\modem.sys
14:59:20.0069 0x14f8 Modem - ok
14:59:20.0080 0x14f8 [ 78FEC1BDB168370F131BFBFEA0A04E9D, E07B1BC429C2CFBD6162F89A6502C67A4BAD904ADC05D3505D87A0B2BCE1061B ] monitor C:\WINDOWS\System32\drivers\monitor.sys
14:59:20.0083 0x14f8 monitor - ok
14:59:20.0095 0x14f8 [ D1CC0833CFBC4222A95CAA5D0C8C78FF, 54F04374C6D3EFF5C1B794C069870458F10757E5773AEE911957089EAF51EC8D ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys
14:59:20.0099 0x14f8 mouclass - ok
14:59:20.0109 0x14f8 [ C2E05EC6B80BCF5AE362DA873E1BCE64, 4ABE5CA2005A54E92259EDB52205A5C59BDB83026FC0CD7CBB1E3A003C2B535B ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys
14:59:20.0113 0x14f8 mouhid - ok
14:59:20.0125 0x14f8 [ D5B7668A8F6C67C51FA5C6C513396D6C, 35985AD89344A8464BD78B8DA6A772E4E60A2EB93072AC23673A86EFD0B2270A ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys
14:59:20.0131 0x14f8 mountmgr - ok
14:59:20.0150 0x14f8 [ C34AB4280614658903BE848CE79ACDB5, 9A943D9B3CF941DAE4EA4E2771B5EC5DA37AB16AD43095EF092B4259D62FF810 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:59:20.0158 0x14f8 MozillaMaintenance - ok
14:59:20.0169 0x14f8 [ 5FBCB85D127BE21E3A9DAF11A13C00EA, D00AB99CC813E26B0BD2D39161D4138AB89A06B3E3A28712F2D5BCA60905BEC4 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys
14:59:20.0174 0x14f8 mpsdrv - ok
14:59:20.0214 0x2b48 Object send P2P result: true
14:59:20.0214 0x2b48 Object required for P2P: [ 3CBE5047BB08BD363420D68364F9E829 ] AntiVirService
14:59:20.0217 0x14f8 [ 3B3906F069DB567C3D092F195FEA5F87, 1EAD704AD8E81D083FE3D458B529F8ECBE99569EFD20F7B520339F054E2F6515 ] MpsSvc C:\WINDOWS\system32\mpssvc.dll
14:59:20.0254 0x14f8 MpsSvc - ok
14:59:20.0270 0x14f8 [ 37C9EC0398BFC22C616711E41AE157D5, C8DD6B6B47513696CD4BD376C5D9F82C0F52F5A351FFAFE149E3B13C4684D40E ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
14:59:20.0277 0x14f8 MRxDAV - ok
14:59:20.0302 0x14f8 [ 61F9F27A8C3D7BCD287FE98A440421CE, 773208951BD0B8C0B9510F4C317484D5FCF36D09310D4E20F2BDB85D61088BA5 ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:59:20.0319 0x14f8 mrxsmb - ok
14:59:20.0339 0x14f8 [ CCAD845F4D21D0E0E0468205EE865473, 8F93B61F407BCE5910A7A9F01F8A51FDB7A3C4F03E59C144C1D4FD974D10C2D4 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
14:59:20.0350 0x14f8 mrxsmb10 - ok
14:59:20.0369 0x14f8 [ 0F47A6C09F0A7FB5513D322A2B9BE4EC, 00A17CB55D232E11F3D24D0B43FE4FA9E55F7EF5E5607B26ED84C13108AAC4FA ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
14:59:20.0378 0x14f8 mrxsmb20 - ok
14:59:20.0392 0x14f8 [ A934DF064C503A31683DD7EECDBD327A, 3ED943A2CFE9BB00898A4FCE08D3A5C814FE6E546FC10E9F30E6C2619B1AD162 ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
14:59:20.0399 0x14f8 MsBridge - ok
14:59:20.0413 0x14f8 [ 807A6636828E5F43C10A01474B8907EE, F275645F4F0D0A796C33C03EA7FA563A0B890AB3A93E5F99C5EA166F91D249B1 ] MSDTC C:\WINDOWS\System32\msdtc.exe
14:59:20.0425 0x14f8 MSDTC - ok
14:59:20.0443 0x14f8 [ D123343DDB02E372B02BF2C4293F835F, 8E02D9F7E5DA717B64538444B3FE1C55AA4B0F26F51DA20947E971D27EA09D12 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
14:59:20.0446 0x14f8 Msfs - ok
14:59:20.0458 0x14f8 [ B3358F380BA3F29F56BE0F7734C24D5F, 229D9E72C429AC51BF6E7C8306218620CB1AA50FE39BA6C11ED0F643E7AF90E5 ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
14:59:20.0462 0x14f8 msgpiowin32 - ok
14:59:20.0471 0x14f8 [ B2044D5D125F249680508EC0B2AAEFAC, 9631FF42DA5A7CEE1F2607AA8972EF0A67616F0EEEBC95F97B1C8F5A577ED5C4 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys
14:59:20.0473 0x14f8 mshidkmdf - ok
14:59:20.0482 0x14f8 [ 36ABE7FC80BED4FE44754AE5CFB51432, FB89DF3A50C52B69D4E831A370157D1901810093A0D7D7120A120FC5C6E14BF5 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
14:59:20.0484 0x14f8 mshidumdf - ok
14:59:20.0494 0x14f8 [ 59307FEAFC9E72EEEC56B7FD7D294F4C, 56576635870FC68980977FFA0E7F8E8D69A7981DECF5B52D0B2A82E3BA6685EA ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys
14:59:20.0497 0x14f8 msisadrv - ok
14:59:20.0512 0x14f8 [ 236A38F5CB0A23BF0ACCD70ED0BD7F70, 8106B528458E6C8E4437D9064D58F10FF195E67CD308AEBBD5F860AD2D59DCC4 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll
14:59:20.0522 0x14f8 MSiSCSI - ok
14:59:20.0531 0x14f8 msiserver - ok
14:59:20.0543 0x14f8 [ E9457EDFEBC774199F907395C6D09CA2, C3655CE83F4AD1258382722E9A99C33FDD3AA40B62CFEB8DFDD141E254E6DCE2 ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
14:59:20.0546 0x14f8 MSKSSRV - ok
14:59:20.0560 0x14f8 [ C85D79735641D27C5821C35ECDDC2334, C1BAFD98122B04665870171C143EC119181351D10777A83680A63BF305703FF3 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
14:59:20.0564 0x14f8 MsLldp - ok
14:59:20.0574 0x14f8 [ EF75184B64356850D0F04D049C253526, 325476F53372BD70201347F044C8EFEC0DB939E1926454B6DCC0CF7864969650 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
14:59:20.0577 0x14f8 MSPCLOCK - ok
14:59:20.0596 0x14f8 [ 543933D166C618E7588EA77707EC1683, 84A65D277E28FDD7CE2345188891093AC88B577E4C528AD39AB629E341199688 ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys
14:59:20.0598 0x14f8 MSPQM - ok
14:59:20.0606 0x2674 Object send P2P result: true
14:59:20.0633 0x14f8 [ 182711E9DDF70121A20EBB61B2DFB9E8, 70606503F6280EA3175B9AEC8370A8F461575755DA86EF6E9C9D04EAD61481FA ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys
14:59:20.0647 0x14f8 MsRPC - ok
14:59:20.0662 0x14f8 [ E887FFDD6734C496407E9219225CB6FF, 0EC9A79224BCE5D0A782E62CC38E3494E8FB65DFC07C66D25C5A1A351121C27D ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys
14:59:20.0666 0x14f8 mssmbios - ok
14:59:20.0676 0x14f8 [ 83A2AB75951000D681FABDB80C07AEFC, 3B2F582F097E3F934C4587B27CB05525350F36924B74CA6BCD364878FA8EC273 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys
14:59:20.0679 0x14f8 MSTEE - ok
14:59:20.0689 0x14f8 [ 4FA0483896FC16583851EFB733FCB083, BB59243ABE32FBE92EC1B04D24239BE2DF7C2354A407C2EFF97623F07DCBDA35 ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys
14:59:20.0692 0x14f8 MTConfig - ok
14:59:20.0705 0x14f8 [ 60F88248608315E13391C2F1C3B4473F, 99E8B74118A01FC281A1C6B323EFD1A8EA1997B81A013442205066F55327D555 ] Mup C:\WINDOWS\system32\Drivers\mup.sys
14:59:20.0711 0x14f8 Mup - ok
14:59:20.0722 0x14f8 [ 218705233D02776AE4D19CC37D985C1B, 3D92925867B6B8FFAF78E4080139DCB3D45E1E6E1D0AFB6A4FE248B002BD8471 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys
14:59:20.0727 0x14f8 mvumis - ok
14:59:20.0761 0x14f8 [ 536A0806CE2061A2157E65D4D8ABF30C, F9893F66505E3F748365CD4625B34357531804BDFE33E57285C0106C03F7916C ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys
14:59:20.0780 0x14f8 NativeWifiP - ok
14:59:20.0809 0x14f8 [ A340A4B27CC7DEDDF953B7E2C9699747, 4C5AB23BD0C69B17E9BD29CAFEDC100A6EFC78BAB645B007FCAE4318C459D345 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
14:59:20.0823 0x14f8 NcaSvc - ok
14:59:20.0850 0x14f8 [ 7467BD76D6ED5981E6C3DBFEB50F0F4D, 237E1C2E15D5F3BAC49B09E1CD0EAE56A6998AE1FF560A4F7A7EFFEB46884798 ] NcbService C:\WINDOWS\System32\ncbservice.dll
14:59:20.0869 0x14f8 NcbService - ok
14:59:20.0880 0x14f8 [ 476466DC3AB2327E2DBFAEC11798E2EE, 9ACD74720664CF3F239601DF0BE80AC443AF0FBF666CBB8509169364FB22B95D ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
14:59:20.0890 0x14f8 NcdAutoSetup - ok
14:59:20.0902 0x14f8 [ B57CE307DA101C739885B7CC0678077F, F7F45DB6D306060F0FE0E59F39C3B95F6A9B6173930F22C5C41B2003895D6642 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys
14:59:20.0907 0x14f8 ndfltr - ok
14:59:20.0957 0x14f8 [ AFAECF904F1C343EBD50F91BC8D0DBE8, FABAE70F62895708415B8E176A880D2D20D46D9A14C3D41D371B905CE4D64BA0 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys
14:59:20.0997 0x14f8 NDIS - ok
14:59:21.0010 0x14f8 [ 202260E7CDD731A32AF62ABD1ABEE008, 0E019FAE09B2659CC3267756DB962CCD69172BA67E3288B491F7B455287A5392 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
14:59:21.0014 0x14f8 NdisCap - ok
14:59:21.0028 0x14f8 [ A1D473D0CF10561F29B58EA7C5412A92, 3DBFC1D769E03E30C87FF4F30A9B523A69A7E0CD4EB87F8A9ECE190FEB84C569 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
14:59:21.0034 0x14f8 NdisImPlatform - ok
14:59:21.0043 0x14f8 [ 1A0AE283B8DE6BB76412A0F8213D45AC, 91AFFDC7A9277EB59CD54021049BEA715078F90470B8A12F3E9F1386DF068D2D ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:59:21.0047 0x14f8 NdisTapi - ok
14:59:21.0057 0x14f8 [ A74EE2D2C0BFF5EC3A6185791868C4CA, A346320DEBEAE890575B4C6594FB3A3A9890A0E86881ADD8376E442282C88D38 ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys
14:59:21.0062 0x14f8 Ndisuio - ok
14:59:21.0073 0x14f8 [ 32A9BD1342640D48AD85C8B3E812B984, B702B05A0180472139B35B105DD3B6B6F75AEDC9DD1EE342FB576259076455AE ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
14:59:21.0076 0x14f8 NdisVirtualBus - ok
14:59:21.0093 0x14f8 [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys
14:59:21.0103 0x14f8 NdisWan - ok
14:59:21.0122 0x14f8 [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:59:21.0129 0x14f8 ndiswanlegacy - ok
14:59:21.0141 0x14f8 [ 50AEF8EF0064A91ABB08D858D039C9DE, 16F1CBE1EC3778D157CC054261068C8D7F8A72D85853CB70178F8DF81D238C8F ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys
14:59:21.0145 0x14f8 ndproxy - ok
14:59:21.0158 0x14f8 [ D358DF634F52247CB43F0781218F4D6E, D375E9E681551467FC5F7AB2AC053C9F22AAC541C0BCBA57090211F45009342C ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
14:59:21.0164 0x14f8 Ndu - ok
14:59:21.0175 0x14f8 [ 026618ECF6C4BEBDCB7885D42EC0DBE4, 8E7E13361DCF8748FA3AD518B3DE0A3DCE932316EE32E5529E75785BC5395AD1 ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys
14:59:21.0179 0x14f8 NetBIOS - ok
14:59:21.0203 0x14f8 [ F51C02D992A8D6BC5EC4D990F227D4C7, DBBDA422BFA82219403689637BE8D6B0D0A893895143E807FA5A007C166454CB ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
14:59:21.0214 0x14f8 NetBT - ok
14:59:21.0253 0x14f8 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] Netlogon C:\WINDOWS\system32\lsass.exe
14:59:21.0261 0x14f8 Netlogon - ok
14:59:21.0280 0x14f8 [ 7FD4C3D32DAE890608F44074A3437CD8, 5B7D9E9AEE26896B818F3C5DBE4C96A33D43CE2CF7716B95AAB7203611C03BFE ] Netman C:\WINDOWS\System32\netman.dll
14:59:21.0296 0x14f8 Netman - ok
14:59:21.0325 0x14f8 [ A059F75402710535A90A8D043674A514, E98536DF74A2B75FDBA6B866DC1909544292DFE5E14F984941470FBA6E8D810C ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
14:59:21.0350 0x14f8 netprofm - ok
14:59:21.0367 0x14f8 [ 01C759FD50DFD46E30CC56B2B672B1A7, 88F46C89DCE1869D9932E809A24718B50C3B0161A1DD63DED899C0AFA8C7CFF5 ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll
14:59:21.0381 0x14f8 NetSetupSvc - ok
14:59:21.0437 0x14f8 [ 9E9BEB22644CE1DA521A1D7821BF891F, 5480D52AE1942205B513F916DBCBF5B5F2FFF92D927F4E598FBA618E75BBC2E9 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:59:21.0468 0x14f8 NetTcpPortSharing - ok
14:59:21.0521 0x14f8 [ 91B32D7036700BEED5343E1F6A7122CC, 8123CA398A79F0E69126F962AA29C2464FAB50182E961CB6A6ADB6CEA09A6732 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
14:59:21.0539 0x14f8 NgcCtnrSvc - ok
14:59:21.0582 0x14f8 [ 4547118EADA9FDBB054A211CD01866BB, 51656BDAD78B4CC452B2AE06061247BECD07307BB31B9D6AA615917EC97342E0 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
14:59:21.0612 0x14f8 NgcSvc - ok
14:59:21.0636 0x14f8 [ 1B8F07B59F7DAE02264FB8A16088C467, 1795DA9F72C34A9F47D9AAF5E95D40C3296948EB89D9600679AB4660671A5C65 ] NlaSvc C:\WINDOWS\System32\nlasvc.dll
14:59:21.0655 0x14f8 NlaSvc - ok
14:59:21.0666 0x14f8 [ 465DC580170CD844206D7E3EF1DBF2A1, 5A14001029BE154C708CCA34449B280905DB79978FC7F0BE0CF20B20E47752CF ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
14:59:21.0671 0x14f8 Npfs - ok
14:59:21.0681 0x14f8 [ 29395C214D2CD4C81F73166AB988A797, 3631EB2EA17E455ECD151C0BC9A3DF6EC87C75B15DC9B607CFB68D7C463E04B7 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys
14:59:21.0684 0x14f8 npsvctrig - ok
14:59:21.0694 0x14f8 [ AF8B7848E102A83AAECCD24B181CEBE5, B2AAE3567EE3A7975CDFCB3FE41D33C74D4486BFF35FF56E0516A01C744BA52B ] nsi C:\WINDOWS\system32\nsisvc.dll
14:59:21.0703 0x14f8 nsi - ok
14:59:21.0713 0x14f8 [ 2871225495F832A8C8A7DD1A17EDB3DC, 2F6664C7F5FB2341B2AAF3C5A258FA0D7AEEE447562D7F39FD5A4EE905C18C6D ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys
14:59:21.0716 0x14f8 nsiproxy - ok
14:59:21.0839 0x14f8 [ EFEFC245B884B1BE0401931398DCD707, 43A7BDB9BF523791EC41E76F51E7DC56EFC55CCDA0D130ECFCD9990C43D67587 ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys
14:59:21.0915 0x14f8 NTFS - ok
14:59:21.0944 0x14f8 [ 6DBD703320484C37CEA9E4E2D266A8CE, 85D6F73C0E3FDE16829C9BC0D13DD89E64183EAE02F84607F6B8440CB7F366E6 ] Null C:\WINDOWS\system32\drivers\Null.sys
14:59:21.0947 0x14f8 Null - ok
14:59:21.0962 0x14f8 [ 604D27CC38CC23493F218D0BB834B3FF, EF5E5759CCF16DD97271C82DAF47FB2086EBCA5DE7D05177B70CA1197B95F41E ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys
14:59:21.0969 0x14f8 nvraid - ok
14:59:21.0984 0x14f8 [ 8B50D897657AB4A15FD9E251BBF7D107, 36036130DD46D9BF105AC7176E219F3BE7D1168A660A0F8DFF76F61FBFA4B417 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys
14:59:21.0993 0x14f8 nvstor - ok
14:59:22.0005 0x14f8 [ 31F990B2B6B91E9D7A667405CE12FCB1, 907E095D1E83CDAFF34BE789FC41CDD7BB4DEE23261E1D03C1CF0D4D030534AC ] nv_agp C:\WINDOWS\system32\drivers\nv_agp.sys
14:59:22.0011 0x14f8 nv_agp - ok
14:59:22.0034 0x14f8 [ 7F3A0D052B8E00E730316210B1DD092F, 14BD026EA759F6C81ED6B4DBB04E0584B7F6456725503FC73CD4347B7743005F ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
14:59:22.0047 0x14f8 OneSyncSvc - ok
14:59:22.0099 0x14f8 [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:59:22.0107 0x14f8 ose64 - ok
14:59:22.0312 0x14f8 [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:59:22.0515 0x14f8 osppsvc - ok
14:59:22.0555 0x14f8 [ 334131C162B118EF49930D41B0E17825, 10EF08870B6E118AED2E0E3F45E06BA8A485439823BE98F44E34E7D2B65AA2EF ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
14:59:22.0574 0x14f8 p2pimsvc - ok
14:59:22.0623 0x14f8 [ 4A5634915AF62C983E08425905D0C04C, 09BC3F7AD9F79C5FF59520933D06FE155AC21CD0ABAFE66B81C9F87D83A2339F ] p2psvc C:\WINDOWS\system32\p2psvc.dll
14:59:22.0646 0x14f8 p2psvc - ok
14:59:22.0674 0x14f8 [ D61B764B27BF05CCCADCC5E1E7B73A21, 14636C5D470E4E87B8C6ED4E34906072D8D631E566DECADF5E2FFC0535DF8989 ] PAC7302 C:\WINDOWS\system32\DRIVERS\PAC7302.SYS
14:59:22.0693 0x2b48 Object send P2P result: true
14:59:22.0694 0x2b48 Object required for P2P: [ CAA9D66CA6D21AF0AE7DA01D5AC6CC2F ] AntiVirWebService
14:59:22.0695 0x14f8 PAC7302 - ok
14:59:22.0709 0x14f8 [ 7D0FC96264C0F8F2C1321E33E8EB646C, 82A06437B9B096BCCF5CE31BDF3539696E2E41DFA9870C358566EEE2F7D3B447 ] Parport C:\WINDOWS\System32\drivers\parport.sys
14:59:22.0715 0x14f8 Parport - ok
14:59:22.0727 0x14f8 [ 24AC0FD10325FBC2303B29A5F237AEB0, D94B26A36EBE4EFE8EA270FA6600811206830480BE953809F74FAB80628DF879 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys
14:59:22.0733 0x14f8 partmgr - ok
14:59:22.0746 0x14f8 [ 446462BBA744DA60379574926FD51EAB, 4A79E8EF28670333F4733FA0016508DC88E9BDC566B455DA5EDEDC514612180A ] PassThru Service C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
14:59:22.0753 0x14f8 PassThru Service - ok
14:59:22.0782 0x14f8 [ 0ECA2ADD5FBCE73183A68935C71B40B7, 08CC5F2F10D1DD1A1396CC29196314003491D3AF3DE59CADB281F252577F1860 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
14:59:22.0807 0x14f8 PcaSvc - ok
14:59:22.0829 0x14f8 [ 1D4E995955BDAE781C46CB97AE1CFB58, FF7475F19782CA253AA839DDB86E5AC20C5785D5CC1DD57D9FECBE4F5A5C0BFB ] pci C:\WINDOWS\system32\drivers\pci.sys
14:59:22.0842 0x14f8 pci - ok
14:59:22.0853 0x14f8 [ 2B4D98DF0CA57FB9536DBC80D2449D1F, AB34FA8585A20854369C0FAEB18BF5C7734D7E3C791F644B0576E40D609FCD09 ] pciide C:\WINDOWS\system32\drivers\pciide.sys
14:59:22.0855 0x14f8 pciide - ok
14:59:22.0870 0x14f8 [ F4D5793BF2E58AF15C6CF2FEEF9E73EB, 9B5A40AF8838063F8F0A2B1480B39A2711AAE78BD972CDA60CCA0EB2BA211A87 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys
14:59:22.0877 0x14f8 pcmcia - ok
14:59:22.0888 0x14f8 [ 22A53744CEEADFFFD33BA010FAD95229, 30B775EC9795105B8BF785BD63115C160955E7EFF74B995D3EC288138D1825A3 ] pcw C:\WINDOWS\system32\drivers\pcw.sys
14:59:22.0892 0x14f8 pcw - ok
14:59:22.0905 0x14f8 [ 48F3A3222CF340FE31535CB6D49C6D6F, 5F8904871219FA6C1BD74747583855B0FBCE42F340A3BE10270D8D3F02766E9D ] pdc C:\WINDOWS\system32\drivers\pdc.sys
14:59:22.0911 0x14f8 pdc - ok
14:59:23.0025 0x14f8 [ A279FC9BE4D1DA5DA3E79B5EAE0FDCF4, 0CC9A413E2BFE30421A74610300F6AD29769EF45557137F6FD7B7FAF0E0A241C ] PDF Architect 3 C:\Program Files (x86)\PDF Architect 3\ws.exe
14:59:23.0131 0x14f8 PDF Architect 3 - ok
14:59:23.0179 0x14f8 [ 29D993E6AABC958032ED9620D232C521, 68F6581BB8A856561BAD22B5EB5CAB25B3F9473228B553D133ECFB4BDCEB2A3F ] PDF Architect 3 CrashHandler C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe
14:59:23.0213 0x14f8 PDF Architect 3 CrashHandler - ok
14:59:23.0249 0x14f8 [ 9EC3A20048C2E53B98E3617B7D6EB1DE, 8C2A11FFE65C062E8091135ECE4E392C2F18BB48C565E47DA08BF344B2587061 ] PDF Architect 3 Creator C:\Program Files (x86)\PDF Architect 3\creator-ws.exe
14:59:23.0277 0x14f8 PDF Architect 3 Creator - ok
14:59:23.0346 0x14f8 [ 20C9518D18927FA01F42309CC6BF433E, 112CB468C682E179CE16275E9748A035BCBF5E5970A095E3C83C9C14865D6548 ] PDF Architect Helper Service C:\Program Files (x86)\PDF Architect\HelperService.exe
14:59:23.0394 0x14f8 PDF Architect Helper Service - ok
14:59:23.0437 0x14f8 [ EB69C64D06CB162602F7C3E389255334, 091D14BDD2585A40EF316547F1E0EDA007833A00ECDC062827E40FC2CCBF9DFF ] PDF Architect Service C:\Program Files (x86)\PDF Architect\ConversionService.exe
14:59:23.0467 0x14f8 PDF Architect Service - ok
14:59:23.0501 0x14f8 [ A32028F7CDC08C44E91A2E83E42463C8, EB5C74EB309950407F22FCE4F59963313D9BCCA49BF4DA1B13421CC1C1015E6F ] PDFProFiltSrvPP C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
14:59:23.0510 0x14f8 PDFProFiltSrvPP - ok
14:59:23.0553 0x14f8 [ E2F8376F9731D12A009C522036C6073A, 5B8B68D3C013AAA8ED368C97042984C35E8D023542DBA404E7A03E89F2357E66 ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
14:59:23.0582 0x14f8 PEAUTH - ok
14:59:23.0601 0x14f8 [ EE926C59CBD4DC4DC9FBB85014A2F1A5, 777459BD30A480E03EA5D0BBA431C2CD573403687FAA0B29F172086A0304E230 ] PEGAGFN C:\Program Files (x86)\PHotkey\PEGAGFN.sys
14:59:23.0606 0x14f8 PEGAGFN - ok
14:59:23.0617 0x14f8 [ 7BB4BD4E20221B6BFC0038851CF3A4F0, 29EECB0C2A8BFC315C5212AD26B871B02DF7B76B5097FF45BA5E5C78891F357C ] PegaRadioSwitch C:\WINDOWS\System32\drivers\PegaRadioSwitch.sys
14:59:23.0620 0x14f8 PegaRadioSwitch - ok
14:59:23.0634 0x14f8 [ 1398A85E59698067CBBE1D66A9C13ADF, E3609F183068BFAED756B2F9237181D60A6F6D78691248B8BF5B0AEB6A367E3D ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys
14:59:23.0639 0x14f8 percsas2i - ok
14:59:23.0651 0x14f8 [ 35F7C7AD709D909D618D9EDF987FC3ED, EE713E33688E74C5A2546CC58EBD8EA8F8116F25E42DCF8DA21DCBC7C7590E0E ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys
14:59:23.0655 0x14f8 percsas3i - ok
14:59:23.0707 0x14f8 [ 0DAF7B7D85F7AF38E29161460899C63F, F2609F2BD02C714857F5D5E6EF580643429C54E175AA72D38467F8F3A4E7F59F ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
14:59:23.0715 0x14f8 PerfHost - ok
14:59:23.0742 0x14f8 [ C182C1477F8D730D84CC74A213F72D11, 6E9197332544B39776D37A6C6283DC26CC139723C36FA79422F3FA9CD3CC8C5E ] PGFNEXSrv C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
14:59:23.0748 0x14f8 PGFNEXSrv - ok
14:59:23.0788 0x14f8 [ 57606281E23B0F53347527691E947B2B, 7030182E706CEBE6BD52BDC71CA8F2230AD445AE6554188E76F09A5E2612BD2E ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll
14:59:23.0822 0x14f8 PhoneSvc - ok
14:59:23.0844 0x14f8 [ 940BD7A32391F325A1A4285F91FAF7AC, A0FE4B8705B268E1978D9C66EB39B3DBBCB2A70F02F380C7062FE72E92DDF964 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
14:59:23.0860 0x14f8 PimIndexMaintenanceSvc - ok
14:59:23.0949 0x14f8 [ A546F72EFFE5CBBC98003A0CA19DA0F8, 89AE396676A37D851F46427E421E8E8ED5B4BADC33023F1E215CC352A4110F44 ] pla C:\WINDOWS\system32\pla.dll
14:59:24.0006 0x14f8 pla - ok
14:59:24.0025 0x14f8 [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll
14:59:24.0037 0x14f8 PlugPlay - ok
14:59:24.0046 0x14f8 [ 6BF7093B27EA90FD9222845D19C1BE5F, CF8A6764BB6B369258F21FD303E4CAE08632195620A0BD66B62F62F5D7B762B8 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
14:59:24.0055 0x14f8 PNRPAutoReg - ok
14:59:24.0077 0x14f8 [ 334131C162B118EF49930D41B0E17825, 10EF08870B6E118AED2E0E3F45E06BA8A485439823BE98F44E34E7D2B65AA2EF ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
14:59:24.0094 0x14f8 PNRPsvc - ok
14:59:24.0118 0x14f8 [ 5A91C28F99043215121499257468C4BD, 816D2AEBA29B8A050747E01CE11EB12A05C1CDDF91835C44BBB6A7B9D348B15A ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll
14:59:24.0136 0x14f8 PolicyAgent - ok
14:59:24.0155 0x14f8 [ AE3B1056FC1795F18D990C4908A6ECBF, 1C41F7714EBF54DF358D9B19D6AFE7281D3EABE20038B568A12031B76E1D50D9 ] Power C:\WINDOWS\system32\umpo.dll
14:59:24.0168 0x14f8 Power - ok
14:59:24.0180 0x14f8 [ 5BA6B9AD03B81546BA64E488C4EF9D17, C43442577685FA1A7C32094B2F14FC92BA6B511FD9FDBA6FD82473A1B165FC61 ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys
14:59:24.0186 0x14f8 PptpMiniport - ok
14:59:24.0351 0x14f8 [ 959F94AD1255BC749884EDDD14EC29C4, 2CD6DA9778EA36FA0B4080F6DB1C634712238E014E47546403CD3CDB35A1DCA8 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
14:59:24.0470 0x14f8 PrintNotify - ok
14:59:24.0491 0x14f8 [ 21AECFF3EB5748CBE12538A2500EFDE5, A1679F21363E99E3698B9C6F7E7E3BB2877D47089BC381AF0C51B1DD8B24325B ] Processor C:\WINDOWS\System32\drivers\processr.sys
14:59:24.0497 0x14f8 Processor - ok
14:59:24.0519 0x14f8 [ A08AAC62EF7A1E291B3E895B5864BB86, 340E6648F9A5F4B7543FDEC5BDAFBDA3DE319B8F998FF2EF60D02EE5EF3D56CB ] ProfSvc C:\WINDOWS\system32\profsvc.dll
14:59:24.0538 0x14f8 ProfSvc - ok
14:59:24.0554 0x14f8 [ 596FB6C5A72F34B7566930985E543806, 870B43783DB4CF845FA72BC5E40CE76BE6DFC66FE9E9B4B0A52D6B7FE7EA65FC ] Psched C:\WINDOWS\system32\drivers\pacer.sys
14:59:24.0561 0x14f8 Psched - ok
14:59:24.0571 0x14f8 [ C32ECB99AD25E9A04F01C8665DF29EF8, 0489B3DEC6A33E50D8A48A8DAD3F5B923A81F7300E4A71358D90D2879BAC9AA2 ] pwdrvio C:\WINDOWS\system32\pwdrvio.sys
14:59:24.0579 0x14f8 pwdrvio - ok
14:59:24.0590 0x14f8 [ D619356B955EEFA642F5FF72755E8B3C, 1FD54978A77ACD6FBF1236E177ED074894743A9141E4169FE9AFE28680FC93C5 ] pwdspio C:\WINDOWS\system32\pwdspio.sys
14:59:24.0598 0x14f8 pwdspio - ok
14:59:24.0619 0x14f8 [ E84F66BA185934C166F8DF0FA8F88455, 2E0380E98DA29B3F43FB3FE0E1ECA52B3C9AEF54CE982D5514F70FAE81758449 ] QWAVE C:\WINDOWS\system32\qwave.dll
14:59:24.0637 0x14f8 QWAVE - ok
14:59:24.0647 0x14f8 [ CFBA9C976CBF6796E5DC39EF59984021, A1C956AD828FC70ED92D702516E0F88A4BDAF8C93C571D7CA20F1695FD8E70C2 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
14:59:24.0651 0x14f8 QWAVEdrv - ok
14:59:24.0660 0x14f8 [ 7B2AD8C55217B514C14281AB97B4E21D, A1E295897B864B9C0177FF1C502EB060084A1783C0E7E53636291F901C2E2AA8 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:59:24.0664 0x14f8 RasAcd - ok
14:59:24.0676 0x14f8 [ E15A9CE1E2E7D1C8DF97A4FC1FFE6289, 44B53418D6BC51ACC567CF6917A0981889B44AE420489C9C03F5A30418B37267 ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys
14:59:24.0681 0x14f8 RasAgileVpn - ok
14:59:24.0693 0x14f8 [ 2976970887157CBB05747CBCD0793354, 43499D90B6340BD679CA51FDAB4ABCD0CF7E995367876716B7879422D206D677 ] RasAuto C:\WINDOWS\System32\rasauto.dll
14:59:24.0704 0x14f8 RasAuto - ok
14:59:24.0716 0x14f8 [ 381B8F2311A0375676B635EA5E7C8AB0, F64697F75894844E72F260E9E88CCFE6B882BC89F6124DCA187771A29C3EF929 ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys
14:59:24.0722 0x14f8 Rasl2tp - ok
14:59:24.0757 0x14f8 [ 3655D86C5E2982B131FC0935DE24F98F, 0386B31FECDDED77450609A807097B2307361CB59B236DEC41037BDC95897463 ] RasMan C:\WINDOWS\System32\rasmans.dll
14:59:24.0788 0x14f8 RasMan - ok
14:59:24.0801 0x14f8 [ 3369023EB5790A75BA7DABA14B75D922, 36B63D5B74FDC932AAF1A876514024602D2F3EAF2CA33D1247CBA1E52FDB0418 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:59:24.0806 0x14f8 RasPppoe - ok
14:59:24.0817 0x14f8 [ 1E32A8CD65C4AD0A827CFEB13034DA29, 5D9A92E13020D994CCD39F701BACAFE2177A40A9CC89649441B91E3F3DECD911 ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys
14:59:24.0823 0x14f8 RasSstp - ok
14:59:24.0857 0x14f8 [ 2B648363E4C5E34B469C58596F377DD9, 30F82770468BBA562CEA0E9E39B24ACEFBE022343D0180C82E2ACE8957B73E44 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:59:24.0874 0x14f8 rdbss - ok
14:59:24.0890 0x14f8 [ D0221C13960E274CC539D72D5A842ED0, A5A961506B9D7429D97D0635FD69E74736C0E8405487E1D22BB5CD978A60044C ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
14:59:24.0893 0x14f8 rdpbus - ok
14:59:24.0908 0x14f8 [ 1DC2CC74B51E4DC4CD5A20C1021E4010, 46B7D17EE27439F2191504D1C6F6C70B2540BD4F2261DBB1F4BE783BEA99B04C ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
14:59:24.0917 0x14f8 RDPDR - ok
14:59:24.0935 0x14f8 [ 177DF954D0DEC0465A380C75F6E7F65F, 6B30C78223029BD5DBA586BF961968F85762209BA55CD031460A215B20F93AB2 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
14:59:24.0939 0x14f8 RdpVideoMiniport - ok
14:59:24.0957 0x14f8 [ 5D1680871054D2B0B8A971BC8AB3B837, 9CAB0B2E3857829D34A82A78B120D07E292D4D5060168D964295EB23339B7DE7 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
14:59:24.0967 0x14f8 rdyboost - ok
14:59:25.0027 0x14f8 [ 341E6830DA70F65730300DAB4CB0B490, 341EC8DB5E39963EF89E726F08730AFB2356C3BAD71CCE9EECCAB4D9B31C4863 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys
14:59:25.0062 0x14f8 ReFSv1 - ok
14:59:25.0091 0x14f8 [ 8355BCA85B0928382DFCDD02FCD1681A, F306F038DA09C8D2095C311818E2F991B55BCD96B40B95D2A53A60EA6AC37014 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
14:59:25.0115 0x14f8 RemoteAccess - ok
14:59:25.0131 0x14f8 [ 2C82F4DCABAB389CEBB1C9E86C715C9C, 70354621D3D467616A419A818C54D2C89EA013C5050BA9944E3A7A4F25CAD6BA ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
14:59:25.0144 0x14f8 RemoteRegistry - ok
14:59:25.0179 0x2b48 Object send P2P result: true
14:59:25.0192 0x14f8 [ AD43141CE6D5074DA1D28B5BCD4E4507, C1A9AA856DD4FEE00BBA329C150E0CBCD1CE13ED0BB7B4AC9B152321CD854212 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
14:59:25.0235 0x14f8 RetailDemo - ok
14:59:25.0273 0x14f8 [ 27A3A6BF6EE99AB61BF6F1147542F6AA, EA77F391067BF597E2E9A5A915CED91694B34624CD7BC87531C1610659C28748 ] RichVideo64 C:\Program Files\CyberLink\Shared files\RichVideo64.exe
14:59:25.0287 0x14f8 RichVideo64 - ok
14:59:25.0300 0x14f8 [ 176D8470B15CD9080861594F9A33FA01, CFB66D7FEB9465985C2866D64EA03B7E7BE830DCF6C02B3FE2244D7F7E5343E2 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll
14:59:25.0310 0x14f8 RpcEptMapper - ok
14:59:25.0319 0x14f8 [ 1A563653DAEDFE4CA81936E0D2FD8B56, 308B0DFEBA63333D407093C449A08ABFECE118C9274100809356BDAF7FA32EB6 ] RpcLocator C:\WINDOWS\system32\locator.exe
14:59:25.0326 0x14f8 RpcLocator - ok
14:59:25.0373 0x14f8 [ B339861C6A2A86FBCA67C2006B461473, 228ADC8A8603C0A4342C6CBC6F2CC919271D42391365061AF660E0D7151C66A4 ] RpcSs C:\WINDOWS\system32\rpcss.dll
14:59:25.0408 0x14f8 RpcSs - ok
14:59:25.0423 0x14f8 [ 0AC5FCDC29ED97ECDEF1276425EE2059, 8A12D1732D4AA18A9ED8416F4D4A49B81CE7C4C86ABCEE8FF28A16EA61993CFE ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
14:59:25.0428 0x14f8 rspndr - ok
14:59:25.0461 0x14f8 [ 8CF15A5A9FC24323E2B63DDF9788C74E, 4E91D45DB6E811B5DC75DD96EEE8813414F243D82AA789F7C2D464463B4DE7F4 ] RtkBtFilter C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys
14:59:25.0484 0x14f8 RtkBtFilter - ok
14:59:25.0524 0x14f8 [ CFE738C524F35B6E523A4D0F54840C30, 73E051DEA744EEC5202693C11EDABB36DE2D086160648D4E41F1F299CBAD8409 ] RTL8168 C:\WINDOWS\System32\drivers\Rt630x64.sys
14:59:25.0555 0x14f8 RTL8168 - ok
14:59:25.0582 0x14f8 [ 3940780911A7BD1793B7CEEC9E4429C2, 539511D26D2EE348F80D9EFA414FD731983B14D8218E498217E7A0A0E439E41C ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
14:59:25.0597 0x14f8 RTSUER - ok
14:59:25.0736 0x14f8 [ 52BFDF19FBFDC7C8E811C73350CA2B52, E8385F78C133B06D6A7F488DAB7308A7D3ED7181C7CE02D150912CA9ABFC4C94 ] RTWlanE C:\WINDOWS\System32\drivers\rtwlane.sys
14:59:25.0853 0x14f8 RTWlanE - ok
14:59:25.0877 0x14f8 [ 044890BB0D6CF1E23C1087234D320509, FA6C79D24BE4ACCFAC617D2850B922BFAA7C2766AE625C725F3ACF43C934EFAF ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
14:59:25.0880 0x14f8 s3cap - ok
14:59:25.0892 0x14f8 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] SamSs C:\WINDOWS\system32\lsass.exe
14:59:25.0900 0x14f8 SamSs - ok
14:59:25.0912 0x14f8 [ 530F797129776AA7E81994783A97E2AD, F131EF036702C6E741E5A6851AE07E81043CE8BAEED0768838C0F31CE14FEC1A ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys
14:59:25.0918 0x14f8 sbp2port - ok
14:59:25.0936 0x14f8 [ 0C12493B333B96797AFC5F3C7831C051, BEE786D7ED14221B1A9450060597393AC44116D776B913E045B5F6066D720F74 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
14:59:25.0952 0x14f8 SCardSvr - ok
14:59:25.0967 0x14f8 [ 40110802D217FE1CB581D9A70B1FD16F, CCB920593CCC6663676039F3F731536DFEF535C3F715F6DB6F34D0D733BEF89B ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
14:59:25.0981 0x14f8 ScDeviceEnum - ok
14:59:25.0991 0x14f8 [ 9B6B1D4DB35A3D9BEAF023BC95E1F49D, CA44124CA3E9958FB77A891CD234A993B63E8AC6632AE801CDEC6666267E7C7E ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
14:59:25.0995 0x14f8 scfilter - ok
14:59:26.0042 0x14f8 [ 5A459E0585FF3A980D10604B6D4BA03D, 3DF9CB96258A44458DF98EA4C6D57342D1207B7BFB94174461B347BE3B5CA317 ] Schedule C:\WINDOWS\system32\schedsvc.dll
14:59:26.0084 0x14f8 Schedule - ok
14:59:26.0101 0x14f8 [ 4E9158CECF77A029AB98E8FBB43FCED5, AFF8BDB8F8F8DDF4FC0D65712E031DC360856CD3CE5C8A4C8FF960388F37462F ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
14:59:26.0111 0x14f8 SCPolicySvc - ok
14:59:26.0143 0x14f8 [ E1137E39C3BB3EF9AF2243745D901D60, 0BE86E4E48DA6D25AF0E71F09E55A5C4E525C61831EDC5135DEB240CCD02335D ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys
14:59:26.0155 0x14f8 sdbus - ok
14:59:26.0170 0x14f8 [ 811EC0B1221402FCED0BA37E112BF627, 366EB8AF04C603BED6CF53652CC937099B247D5DD8C58D699D0D8DA22F8FDD51 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
14:59:26.0183 0x14f8 SDRSVC - ok
14:59:26.0196 0x14f8 [ DE6D7DC78D956928F59F7415A0F41E13, C0F8EEED29BF63A0D8FB5A0286C1C768BFEF598EC52715D910B5BB1A76231805 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys
14:59:26.0202 0x14f8 sdstor - ok
14:59:26.0212 0x14f8 [ 286450F698EBD81A8AC1B22CF6BABF11, ED05C2723FCD399FD085AE7AB1178D24F9745A4F31DD711DE896D15412B82BA2 ] seclogon C:\WINDOWS\system32\seclogon.dll
14:59:26.0222 0x14f8 seclogon - ok
14:59:26.0234 0x14f8 [ B7B9EEBCB7466338403A75D15AC120D7, B8F79DA71F8CD0F30983F7D92B625A431C212DD543DE2B3DC03EC5A68C41B00D ] SENS C:\WINDOWS\System32\sens.dll
14:59:26.0244 0x14f8 SENS - ok
14:59:26.0301 0x14f8 [ D14DD7D766664F880FECF44CE6017966, ECF966E3ACF4EBD5A3259468A076619A539E35F1B97AB6A98FBD7882F1FBBBAB ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
14:59:26.0353 0x14f8 SensorDataService - ok
14:59:26.0377 0x14f8 [ A74C62AE99A015CD6275F0D8D8843886, DF08E0BB1160E054C6B000BC5F62DEF77C6D9E4B5679AD013C313BA14207B589 ] SensorService C:\WINDOWS\system32\SensorService.dll
14:59:26.0397 0x14f8 SensorService - ok
14:59:26.0413 0x14f8 [ 7363A65C738F5A5292D7BDBE55D8C3C2, C53C10A0AE58613DFCC91E62E004D9B188E4793C2A19B4BE871A705EEE77048E ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
14:59:26.0427 0x14f8 SensrSvc - ok
14:59:26.0440 0x14f8 [ 67585C295FF2D221679E376B68893B35, 4B5E9A8DA8C6F7B1F7129F80A0603503D467E5650306FB4C309977D74037E46B ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys
14:59:26.0445 0x14f8 SerCx - ok
14:59:26.0459 0x14f8 [ B8C4852CBCAAC1374C08EC7445443824, DDE577A81B3E11B5B56096317BC47AA6E286573042407B96A9D29BE981F3FA4D ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys
14:59:26.0467 0x14f8 SerCx2 - ok
14:59:26.0486 0x14f8 [ D3A103944A8FCD78FD48B2B19092790C, 252DB8395DA8639E748658D3BE7863C1700E27AA5C41BB700CFCE193FE3F04E9 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys
14:59:26.0490 0x14f8 Serenum - ok
14:59:26.0514 0x14f8 [ 88D58E1DAA6C5062DD3A26273106961F, D1E2FF37C888245BD0BABCD7C6B76AD5A87415B68FEFE37B5FA29AE3342AE50B ] Serial C:\WINDOWS\System32\drivers\serial.sys
14:59:26.0519 0x14f8 Serial - ok
14:59:26.0529 0x14f8 [ 0F5B43074AE731D2C6F061241C9D84A6, 05CFEB30A4FC11441552D37687608C8C2FD6DC2F2266AE9D6526753E26283DE6 ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys
14:59:26.0533 0x14f8 sermouse - ok
14:59:26.0620 0x14f8 [ CD90E445F6458512A5BA884D561EFCF1, E792FAB8AFF4126C1977024060842D788A06475139782896AFD7B39C85FCDF3F ] SessionEnv C:\WINDOWS\system32\sessenv.dll
14:59:26.0642 0x14f8 SessionEnv - ok
14:59:26.0652 0x14f8 [ D9FE59276BD56A9643C32D5FACE2F251, 591862D868A545F468496DE97DEE42C9DB3AFBFC0881CBA79EB6641A254AF033 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys
14:59:26.0655 0x14f8 sfloppy - ok
14:59:26.0696 0x14f8 [ 2C7B006EB0B5479ED389D0CA5DE6AB83, 2E7C6E3E99A2668CB361A31567A4DB81021530E78213B39983D14197DB72E43C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
14:59:26.0717 0x14f8 SharedAccess - ok
14:59:26.0806 0x14f8 [ AE6E4D3172FBF45B944668CB3998B8A8, E7D7F98CB464C236A17069987F7B678D7688D9D577334151EF09DF5C6F22AFFC ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:59:26.0835 0x14f8 ShellHWDetection - ok
14:59:26.0847 0x14f8 [ ABBE803FE0BDAE0E5BE74DDEFBE62F23, 5009F489F7A6D66628C23A0FA3D7632399D0AD72BD11A1B70D7E768ED507377D ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys
14:59:26.0851 0x14f8 SiSRaid2 - ok
14:59:26.0862 0x14f8 [ 6043DF55CFE3C7ACF477645FA64DEA98, 0E18EF8EC589841BC319C17FBABA7383FD247C9441ABF64A0D830976F3E611AE ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys
14:59:26.0867 0x14f8 SiSRaid4 - ok
14:59:26.0896 0x14f8 [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
14:59:26.0909 0x14f8 SkypeUpdate - ok
14:59:26.0919 0x14f8 [ 629F6CDD71F284EB2A519B2C95CCCD78, E521374890C19F36EFA7C2B5240DCDE6316A31F4C454957D50878BD28BD437F0 ] SmbDrv C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys
14:59:26.0923 0x14f8 SmbDrv - ok
14:59:26.0933 0x14f8 [ 426AEE15F4E6C900C0C30E29B2D86361, D5916F590BD2E1F3CC474D6E10C2AE8F858C2A439ADF93CB61AD55875124DB43 ] SmbDrvI C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys
14:59:26.0937 0x14f8 SmbDrvI - ok
14:59:26.0963 0x14f8 [ B922D32039A3B5991E64429EC4EE52A9, 5EB7EB1F6D2C25F06044D8CA9F3BA0471FB40C8C96432BDC2C80CC36DC49BA0B ] smphost C:\WINDOWS\System32\smphost.dll
14:59:26.0972 0x14f8 smphost - ok
14:59:27.0002 0x14f8 [ 0BA53B01A02848A1545E2A743FF17B2F, ADAD55B9E0172BD7FBA92C5CD4870419FE9EF16F907DA1EEF2A9AE6492DE1909 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
14:59:27.0030 0x14f8 SmsRouter - ok
14:59:27.0051 0x14f8 [ 0B6BECB2651EF947249CDC3715E8B9CC, EB7281AF3529DE16FE8CD0C0C0C8877641865A5864D58628DBAB865B510B0D0B ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
14:59:27.0060 0x14f8 SNMPTRAP - ok
14:59:27.0098 0x14f8 [ 1A6CB30F0EFC1632E6F1B852CA892583, 0E6BDCEE837AEC3D02C437478143C75550C94A50E36895DDB095F54A2FA18E2A ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys
14:59:27.0117 0x14f8 spaceport - ok
14:59:27.0129 0x14f8 [ E1C158F6C00359278727A2CEE5D2ED71, 1591F942C6DD99D3BA7FD4D72D957864117B2263F205468A15F1D1417C6F799D ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys
14:59:27.0135 0x14f8 SpbCx - ok
14:59:27.0175 0x14f8 [ DC520253EC32B515E7792DB05DB43EB2, 8A614286522CA637EF0D58F79143146D5FB40DCD0CA1333752989BCD51DE00C0 ] Spooler C:\WINDOWS\System32\spoolsv.exe
14:59:27.0208 0x14f8 Spooler - ok
14:59:27.0510 0x14f8 [ 7C58AFEC26E9F7730A8AA7FD40225937, 546EAD8889F2A1BB6DCCB7781976B975F34DA1C9047F95FEAA52CF38EC60C6DD ] sppsvc C:\WINDOWS\system32\sppsvc.exe
14:59:27.0744 0x14f8 sppsvc - ok
14:59:27.0791 0x14f8 [ ACC1709EC7FE6EB8999DBC91C50C2B34, 83ABF51751A264291C53A32B86239A607361E56CB045CD2CBE6E41DBB8A01F54 ] srv C:\WINDOWS\system32\DRIVERS\srv.sys
14:59:27.0807 0x14f8 srv - ok
14:59:27.0842 0x14f8 [ AFBCFC946FAE7483E27BD316D03F94A5, CC9478EA717E85C38304957E923997821DFE2A995D7C8DF98C15267D952BEFBE ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys
14:59:27.0867 0x14f8 srv2 - ok
14:59:27.0887 0x14f8 [ 107C1EBE79710E4A759449BD6604245A, 963D693F4E61EDC7B3AA9006CC274D56E577CE0035A61DDB2A6DE72116D5C52B ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys
14:59:27.0897 0x14f8 srvnet - ok
14:59:27.0932 0x14f8 [ 8C1786C073A496B8C0C8A5450A4FFD5B, 13BF3B42A63CE6C461259D4CE767FB0DE1F10433512A11D2B2C033E36E652542 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
14:59:27.0947 0x14f8 SSDPSRV - ok
14:59:27.0965 0x14f8 [ 217A982201052EFC8C3C0C88D229791C, 11509E3446ED7B75C9A05CDC4A7AF18926CB463E0D98BAE1CD5DB43E88F94F90 ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll
14:59:27.0981 0x14f8 SstpSvc - ok
14:59:28.0017 0x14f8 [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
14:59:28.0043 0x14f8 ss_conn_service - ok
14:59:28.0170 0x14f8 [ 58863C57E4598C4F9DA967C5C36CFA5D, BB34FBC324E84E05128258CE3755241ECB63F7F2AE7F96716AC373931FAF92A8 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
14:59:28.0280 0x14f8 StateRepository - ok
14:59:28.0296 0x14f8 [ CCDA497C880AD16D87EDFAEFCFB2EDF5, 622599AA35ACFF0375DA252210BE42E7E90F30EDFEFF2F62FDB14AE6E45B5F88 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys
14:59:28.0299 0x14f8 stexstor - ok
14:59:28.0308 0x14f8 [ 2834415C4EDD6CE35CB3CFEC50E08469, 28426616C709457DF38B5E2B4B9666C1255B81D2097589A95AAABD1BFACD302A ] StillCam C:\WINDOWS\system32\DRIVERS\serscan.sys
14:59:28.0312 0x14f8 StillCam - ok
14:59:28.0361 0x14f8 [ 75476CAA8FA0A4E573948CDE8C7F0304, 68C4405CACA77AEED71761875A9AF60BCFBDD39E356BEA1BA8226E099BAA5FA4 ] stisvc C:\WINDOWS\System32\wiaservc.dll
14:59:28.0392 0x14f8 stisvc - ok
14:59:28.0409 0x14f8 [ BF8EA6FC3358C2F69678E3E94F764F84, D274DAD7B5756DD49CA44277C73497F1EC465C8E365CC730CD194932C3825920 ] storahci C:\WINDOWS\system32\drivers\storahci.sys
14:59:28.0414 0x14f8 storahci - ok
14:59:28.0425 0x14f8 [ 32FF460DA8C1F370F5C08B7654899B73, 0C9D5D38D033109BA672ABAFEF0F0CD295E9FFA108ACFCA9044429D9B2CA9057 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys
14:59:28.0430 0x14f8 storflt - ok
14:59:28.0441 0x14f8 [ CC21DB3EF619B9480FE31A4EFE92CBEB, 256EFCA2F231F41D34250E1460BF88894D943EAE83A0B153FCADE700AB4DE11E ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys
14:59:28.0446 0x14f8 stornvme - ok
14:59:28.0459 0x14f8 [ 390B8A75768E2689586539C224520895, D72F52E6D7AC5DC318FF9C1DF1F4E8A435D65B6BB59D7F1642222EC026BC54DB ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys
14:59:28.0464 0x14f8 storqosflt - ok
14:59:28.0495 0x14f8 [ B1305CDD98D5FC49863279D4B51DB510, 4B745E8D14591CA69429CA579467B9528B94C54EBD2FCFD446000C9C1BCB3B07 ] StorSvc C:\WINDOWS\system32\storsvc.dll
14:59:28.0524 0x14f8 StorSvc - ok
14:59:28.0537 0x14f8 [ 770A92D9D3A0BF61C97C3AFCB36847D9, 21A8CC3F8E63B971C4FF8DDED5C7032E093A7B0F16E2128A9BD2E890BA76A1D9 ] storufs C:\WINDOWS\system32\drivers\storufs.sys
14:59:28.0540 0x14f8 storufs - ok
14:59:28.0551 0x14f8 [ 736A2418E3E7F3DB3CF6EB0A55D1D581, 2D3BBC4E0C7B51EDE7479A978E4BCD5F47A7257745179F01D2D9ECFD83CCCC82 ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys
14:59:28.0555 0x14f8 storvsc - ok
14:59:28.0566 0x14f8 [ FA8F6E3AD3F92B35D2673CC9FD20429C, 62F81CBACF7E16FEF9DE3BE95FA5C9BDB51BAE4667AE5AE71399864A390FF6D5 ] svsvc C:\WINDOWS\system32\svsvc.dll
14:59:28.0576 0x14f8 svsvc - ok
14:59:28.0586 0x14f8 [ BD98B0225BCD49E8A62F4F8EE1D1F613, CDAD11969B2DA417079547724BECC3DB4FC4711B3C01590EB0D02774B69B6D90 ] swenum C:\WINDOWS\System32\drivers\swenum.sys
14:59:28.0589 0x14f8 swenum - ok
14:59:28.0616 0x14f8 [ 22E539A9B96C66A713583EC017562616, 210DA61DFC7AA9AD23277D9CC0239B781F4EABD322D0803AEC9434D68B81FABD ] swprv C:\WINDOWS\System32\swprv.dll
14:59:28.0640 0x14f8 swprv - ok
14:59:28.0651 0x14f8 [ CAE4B27B469C583131EA5AAE622F5D76, 3979006EB22489D1AAD2EC2E9F32C286EEDCDB83B37B97E58BA831263EC33B84 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
14:59:28.0656 0x14f8 Synth3dVsc - ok
14:59:28.0688 0x14f8 [ 1DEB6BC29F9B183528A21BA522AC3278, 8518527A9DDFD8B58AED1A7C1A1CFB4153DA34B634117AC91A94993EC5F76A80 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
14:59:28.0711 0x14f8 SynTP - ok
14:59:28.0762 0x14f8 [ 34A3EB84B2A830E6F450B8F885AE4E6E, E61AC6D17B815CB71F26D71CA3CCAFD9E66A170E3ED2E64A4F20D097A0C683B5 ] SysMain C:\WINDOWS\system32\sysmain.dll
14:59:28.0807 0x14f8 SysMain - ok
14:59:28.0845 0x14f8 [ AF2C8D7C1D4DCFD5C31501F009DF42B7, 3DDF9353F014EE99B031BBC969620CA07647FBB8D78EB4697C8D633021B46B11 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
14:59:28.0868 0x14f8 SystemEventsBroker - ok
14:59:28.0883 0x14f8 [ 6979A147C0D5C5CAB621ADC394D32B80, C30B8E3D271A1591D965559EA4A11A1BE63A34D832ED53B26CE91799C888DF77 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
14:59:28.0897 0x14f8 TabletInputService - ok
14:59:28.0919 0x14f8 [ 86B62FC8CB89946446F9B24FE49A66FD, 7B095310D1C78B82E5ACAC4713E101DD1323A3CF6FB39218C2E78ABE2B0385B5 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
14:59:28.0939 0x14f8 TapiSrv - ok
14:59:29.0048 0x14f8 [ 892F30506DCCF230C5A57019C1D8D31B, 52C83A963E2D05770B6A281E8E559C8203E102D6B4C9C37801B1F58CB4B92D2F ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys
14:59:29.0145 0x14f8 Tcpip - ok
14:59:29.0248 0x14f8 [ 892F30506DCCF230C5A57019C1D8D31B, 52C83A963E2D05770B6A281E8E559C8203E102D6B4C9C37801B1F58CB4B92D2F ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys
14:59:29.0320 0x14f8 Tcpip6 - ok
14:59:29.0349 0x14f8 [ 17F37EC9042D84561C550620643D9A85, B01620BA319A1383D403E6E50C7724879520F3267654556D975CAFFF91A82C78 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
14:59:29.0353 0x14f8 tcpipreg - ok
14:59:29.0372 0x14f8 [ 91D3F2A6253EF83EFBD7903028F58C4D, C15768CCCF734093B0F8A5E76882B35927B716E4F14D91ACEE897E1C078D43D1 ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys
14:59:29.0378 0x14f8 tdx - ok
14:59:29.0388 0x14f8 [ E730D0EB1B84EBC98423FC8D285EDBC0, 442DD433F9D22304E64EC7ACFC4E04892D4D92D8AC545A3530FC932A2EEC4767 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
14:59:29.0392 0x14f8 terminpt - ok
14:59:29.0439 0x14f8 [ 14307D4801C8CEF0A615907C09E886B3, C7F34C294D70DE689F673E0B5E9253B27EFEBBE6FA38B68B3B0B0374A896407E ] TermService C:\WINDOWS\System32\termsrv.dll
14:59:29.0482 0x14f8 TermService - ok
14:59:29.0496 0x14f8 [ D009D1BC14FD5F2AC93D1878735F6C39, D8BCE505B66E05BC00075E46B38359CA4D0FA484EB7981A74221885E8A1FFB87 ] Themes C:\WINDOWS\system32\themeservice.dll
14:59:29.0507 0x14f8 Themes - ok
14:59:29.0526 0x14f8 [ 5F27DE2082E16D4C1D6C627C8ECBD341, 08DA3EB3EF2B2006B6F9F2C8C149DF55DE6738975D556206A814096CAB5C1411 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
14:59:29.0545 0x14f8 TieringEngineService - ok
14:59:29.0575 0x14f8 [ FC971E1D1B5900C231591A7720FCD8B8, DF58C350977019E4A8F381FB35702E9BEA89F6A8C6BF36C56376D36BC8FE630F ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
14:59:29.0600 0x14f8 tiledatamodelsvc - ok
14:59:29.0635 0x14f8 [ 4BA0AB760971A0109A3442BD8B4F9AA0, 681171ECE155B7B1048525AA9BF14E4FDB437EE6BD91B6C5C9FFE122757D6BEB ] TimeBroker C:\WINDOWS\System32\TimeBrokerServer.dll
14:59:29.0651 0x14f8 TimeBroker - ok
14:59:29.0679 0x14f8 [ 169B0A246067457FEF8A18EED7EED9D5, BF5AC0CB29E1E456253B881CD0608B578D7343E9DFE1738A14598D1DFFE1AB66 ] TPM C:\WINDOWS\System32\drivers\tpm.sys
14:59:29.0689 0x14f8 TPM - ok
14:59:29.0703 0x14f8 [ AA84AF93CE5AF1F05838B51D20295419, 85B3EE773C691EEDFA080CD9C59D31CB58A5BC577AEE91A929F5DFBE1368AB6D ] TrkWks C:\WINDOWS\System32\trkwks.dll
14:59:29.0716 0x14f8 TrkWks - ok
14:59:29.0729 0x14f8 [ E50DD57F496CED8873FA3E7D38BCCD42, 36B95F6F2CF48078C6B19FB452C87BB07E95C8804A5C6B526D349AC6227CAB26 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
14:59:29.0734 0x14f8 TrustedInstaller - ok
14:59:29.0749 0x14f8 [ 48E828C66AB016E48F2CB4DD585315FD, 063809B610F6B177B65D62D12605FB94F108DB26A9FD3067E6D6C51F0D92E774 ] tsusbflt C:\WINDOWS\system32\drivers\TsUsbFlt.sys
14:59:29.0755 0x14f8 tsusbflt - ok
14:59:29.0767 0x14f8 [ 267C76EE60736EA5A1811A53FA02AABE, 28D4C4CB972534204B8336D0403B70E4EFE4F8369ABDE7401FFCCF7D4E3EA165 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
14:59:29.0770 0x14f8 TsUsbGD - ok
14:59:29.0784 0x14f8 [ 8CE72F094B822AD5EE9C3A3AFC0C16B6, 827CCD849544E1DA364B03DBC82A848D2F93AD32BA14ED52709C609BC70CE5CA ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys
14:59:29.0791 0x14f8 tunnel - ok
14:59:29.0803 0x14f8 [ 72E24CD1662577B38779B5E768C48FEE, 66BFD18CEDEEF358B04B81C65BC12606632FB1B2DAD4EC8405962DE1054D08CA ] TXEIx64 C:\WINDOWS\System32\drivers\TXEIx64.sys
14:59:29.0808 0x14f8 TXEIx64 - ok
14:59:29.0821 0x14f8 [ 1A9A77ACDAC29C39F50D2A492FD0DB16, E21F2E2BA6EABE0F6B5A1930DDB2CE5A921389A58C08A2D3F66D245E8698E6B4 ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
14:59:29.0834 0x14f8 tzautoupdate - ok
14:59:29.0845 0x14f8 [ 42C546414F80BD6C0137FC3A106F8A69, 067FFCAF0059935851888BD984E848E4E1A6CC1941A8F4534067CCF0B2A3B2E6 ] uagp35 C:\WINDOWS\system32\drivers\uagp35.sys
14:59:29.0850 0x14f8 uagp35 - ok
14:59:29.0863 0x14f8 [ 1686DBC81748B096232B15F16C302985, 63D72D1838C42A95599AF3C0B19A069E310ADB091208011D7D6FBAC968D1A59A ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys
14:59:29.0868 0x14f8 UASPStor - ok
14:59:29.0879 0x14f8 [ 3995CC3DEDED258768B8EBC2F4C0DC73, 130E99EF13EB494B8BB6A8E037DD8D59C195190EA3C27CA9E3A695AF4349DC7C ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
14:59:29.0883 0x14f8 UcmCx0101 - ok
14:59:29.0895 0x14f8 [ 1C95F7CE37D9EFB90EBE987A9712356C, B9EE7743ADA50276F05D735C5C29E44039D630A7DC93766A0EAF400DA037E4AF ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
14:59:29.0899 0x14f8 UcmUcsi - ok
14:59:29.0932 0x14f8 [ AED081772091C98173905E2DF28C223B, 08541CF3354EBB634BD590E0019128F70A6FCA9075B7E785A9E9BD82EC234DD3 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys
14:59:29.0941 0x14f8 Ucx01000 - ok
14:59:29.0951 0x14f8 [ DCA34A111C29E4578DF2B8CEA3C7CDBD, 86BCE4C8EC228724D5896067A85A4768B6069D10A482ECC51A8F828DBD3880C9 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys
14:59:29.0955 0x14f8 UdeCx - ok
14:59:29.0976 0x14f8 [ 718A956AE00CE086F381044AB66CC29C, E4EED1600C72CECE1D4507827C329A93D356BBA027470FCF6C4B5C1651DED643 ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys
14:59:29.0989 0x14f8 udfs - ok
14:59:30.0000 0x14f8 [ BA760F8E66428BA9FF1E8BFBC6248136, BE7DCBB293B12672CB3653E640C46F669BD738D320F34F4FA4A26F6B248561F0 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys
14:59:30.0003 0x14f8 UEFI - ok
14:59:30.0021 0x14f8 [ 5F0D997E6FC5A418D7673148CEF72887, 6C142CB8F06E5958045451253C9188CE876A84D08266FFD7F64AAE09964D8431 ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
14:59:30.0033 0x14f8 Ufx01000 - ok
14:59:30.0046 0x14f8 [ 2B1DABA97DDF5365FC66EE7DEDD86A13, 2FF3355862938B37EE63FCA149415CE5032BF54747B07517BB21460733B65AD8 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys
14:59:30.0051 0x14f8 UfxChipidea - ok
14:59:30.0065 0x14f8 [ DB630FC660443D63EBAB2C830C298EFE, 7698772FF9C988DF752DF3FAF1B154E923EBA425B92F288ABB6EF0805ABD3296 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys
14:59:30.0072 0x14f8 ufxsynopsys - ok
14:59:30.0094 0x14f8 [ 63451BD694651307254B8DD37A3D79C7, C781E2D876AF42D5972CCDCF86B7A59F6AF8AF0C6350647F3FA1B209119B5EF9 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe
14:59:30.0105 0x14f8 UI0Detect - ok
14:59:30.0117 0x14f8 [ 6DE78C04BF32ECA7AF3064F53687C9A5, 164D3BB24EBA3EAF613799928063FE75220A4E583D985F53A895017782C18600 ] uliagpkx C:\WINDOWS\system32\drivers\uliagpkx.sys
14:59:30.0122 0x14f8 uliagpkx - ok
14:59:30.0133 0x14f8 [ 67D1E0E6E4D5D33AF0AEF0E33B4DA0F4, BA2E6F16B6B3B54C943F1E7B9F79A6D1332A7ED228D754CC5AE70E3CD78B1F37 ] umbus C:\WINDOWS\System32\drivers\umbus.sys
14:59:30.0137 0x14f8 umbus - ok
14:59:30.0147 0x14f8 [ 11680607944A719EF20E0E740785712A, 1567C2B3AAD702DCC2DC9C6B7B92EE5B681C06701A39DAC3AA7E2BE9E1E04F47 ] UmPass C:\WINDOWS\System32\drivers\umpass.sys
14:59:30.0150 0x14f8 UmPass - ok
14:59:30.0182 0x14f8 [ FD949725D9EB52C0B87435CDE1134668, 96E2B3D3379E9AE225E5A4C5251207F1E7DA573901F4F026758EDE9FAEF4F2C5 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
14:59:30.0201 0x14f8 UmRdpService - ok
14:59:30.0259 0x14f8 [ 87E291D9CC3ECE9AA56ABFD8063C4050, 781958969DB79454C91156473B4DA363F6D540D99974C2924ED81604CF45C3E0 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
14:59:30.0309 0x14f8 UnistoreSvc - ok
14:59:30.0353 0x14f8 [ B85A8CF2BE74DFF1E80097AC94584112, B1DBACC33A4143FEE2CF54E567590A69580312AD7A053BCC85B487C4D451FBDA ] upnphost C:\WINDOWS\System32\upnphost.dll
14:59:30.0376 0x14f8 upnphost - ok
14:59:30.0386 0x14f8 [ 2410A0C20D21A25E6C01979FA886BE90, DD3F92D8CF110D47B9E36BA0EB10EB34C0FDD28FE0D57E4B60F9326703388F75 ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
14:59:30.0390 0x14f8 UrsChipidea - ok
14:59:30.0400 0x14f8 [ 6E59CE43B6BA5AA1ADCF36A4DBBB92BB, 647D66775A90F67D803043DE8C8AE8BC2F7A042A8DCF9C95BF5458C79609481B ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
14:59:30.0405 0x14f8 UrsCx01000 - ok
14:59:30.0416 0x14f8 [ E8A59FA109A22FC07E44BDFCC9727DBD, 0DC5928C0FF7E5B38917660D6EFECCC22172DB0BB9B23216F33E750790529C16 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
14:59:30.0420 0x14f8 UrsSynopsys - ok
14:59:30.0434 0x14f8 [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64 C:\WINDOWS\System32\Drivers\usbaapl64.sys
14:59:30.0439 0x14f8 USBAAPL64 - ok
14:59:30.0454 0x14f8 [ 9F9D5E2086BB9AEEA96E9BF73B7B2D32, AFA84CE1E96C07EBFB7A05D0181C876E027B848AF6C6DB932765912B814CAF56 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
14:59:30.0462 0x14f8 usbaudio - ok
14:59:30.0477 0x14f8 [ D8A44550ECE102B6443F5D54DCE7DAB3, 97F5AE7B17DAC4A4F3186C77116BC8E49874FB0018C99D8E2CDA29D89E8B0912 ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys
14:59:30.0485 0x14f8 usbccgp - ok
|
|
01.02.2016, 16:16
| #4 |
| | Logdatei_Teil_3Code:
ATTFilter 14:59:30.0498 0x14f8 [ 66B3D22DAB5312FF238ABF5C6D9F8FAB, 4A644AFC1C27D692D352BEB8801398A00EA5B4055476063AF905A0A46DDBF8BB ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
14:59:30.0504 0x14f8 usbcir - ok
14:59:30.0517 0x14f8 [ 3E4F20DB902D2E2914F3FF3DB9772200, F3D32BE06A26164B5F6E8DB67160D1DBBDC6D14666EEF84EA43C78CB7706E31C ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys
14:59:30.0523 0x14f8 usbehci - ok
14:59:30.0560 0x14f8 [ 41F7F00D76904416EF1F9EFA1A4C37A2, 7A4250EB2E2E0037B3AE1480C13B229ECFF5C575E68E4F934EE011DB1833B46A ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys
14:59:30.0579 0x14f8 usbhub - ok
14:59:30.0625 0x14f8 [ 12A0B486EA13DF46C27B90CC2CE92FE5, 643D8B906F02FBC0802B3468C24D6C6A0BDB07FEA894B68E0F404AB5287C4409 ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys
14:59:30.0648 0x14f8 USBHUB3 - ok
14:59:30.0659 0x14f8 [ DAB35CCA86F5FBE77D870A40089BC4A1, 4A47D59D882D0F2B93F2EE7F10995E7D68B58009434E2CBD04C659E0D1F059D8 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys
14:59:30.0663 0x14f8 usbohci - ok
14:59:30.0673 0x14f8 [ 21162F65C7756AAECAEBED9E67D0A5FE, DE3B43964171DB5B0464DA5E7A674A5D200A8695E6EF1AE2030681066ABA2688 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
14:59:30.0676 0x14f8 usbprint - ok
14:59:30.0688 0x14f8 [ CA6369870F91F3D367D26278E0AD0DDF, 651B97E73AFC615C80DE2076872DEB49DCD775B5C9988AB4AC0A0162DAB09F70 ] usbser C:\WINDOWS\System32\drivers\usbser.sys
14:59:30.0693 0x14f8 usbser - ok
14:59:30.0707 0x14f8 [ 37C2CD8587BF7F785381EB7B26916B52, E8F65BF7BBDEF82BD97629921A1148304CA44DCD03E079E28D75D04244B71C39 ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS
14:59:30.0714 0x14f8 USBSTOR - ok
14:59:30.0725 0x14f8 [ 8B3E458A8851F9A3B2109B1680EE1159, 753AC8F82F65564F00EA2F60B43E4B815FEAABE0DA35B6356210A5F4B1CA3EFC ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys
14:59:30.0729 0x14f8 usbuhci - ok
14:59:30.0746 0x14f8 [ 4B13B61CBB9CC3CB373C60B930D648F5, C79D10A1BF2B6BF141DD37A90BCCA0E1F2AF31B5028BB21537A8EE6EED630F5B ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys
14:59:30.0756 0x14f8 usbvideo - ok
14:59:30.0792 0x14f8 [ 325727F01F03C504CF788618A13DC266, 9F685113F714ADBC6DCD423CCD205F71E00D1AA9B5DD045B95E61E53B0F8E9AF ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS
14:59:30.0808 0x14f8 USBXHCI - ok
14:59:30.0818 0x14f8 [ FECB9A2BDE6DB505C346490C3746FEEA, F2CFAC58DE3F467B74B660F68F44EE72AEDAE33499DCF92C7AACD108803C62A9 ] usb_rndisx C:\WINDOWS\System32\drivers\usb8023x.sys
14:59:30.0822 0x14f8 usb_rndisx - ok
14:59:30.0889 0x14f8 [ ED06681482E0B9B4D573684CD5FB18F5, 1CCFBD37F8B895900B860AAF107130C5890C01F5327A4AEBB910F6B2BB0BA61D ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
14:59:30.0949 0x14f8 UserDataSvc - ok
14:59:31.0037 0x14f8 [ 36EC82F0E399F36BD25F593D63DC144A, 2A9E916A098ACD5A5074A5FD053ECAB027A0932A348C728F20CD63EF16289533 ] UserManager C:\WINDOWS\System32\usermgr.dll
14:59:31.0077 0x14f8 UserManager - ok
14:59:31.0103 0x14f8 [ 05F4CB5991D897E4253BF61FA5E828F8, 25B5B6751B4455491E9A050DF5C12F788B5677F70FB4844E0BF851090AC1F74C ] UsoSvc C:\WINDOWS\system32\usocore.dll
14:59:31.0124 0x14f8 UsoSvc - ok
14:59:31.0136 0x14f8 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] VaultSvc C:\WINDOWS\system32\lsass.exe
14:59:31.0144 0x14f8 VaultSvc - ok
14:59:31.0154 0x14f8 [ E1BE37312785A71862516F66B3FD24CE, D248C513DBEACB192653C6E46809209F341771B146544BBF43B86369280B4F8B ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys
14:59:31.0159 0x14f8 vdrvroot - ok
14:59:31.0193 0x14f8 [ 67A6E949395A09914AD8B38FE14B8D15, 593F2FAA880B2E0468F98BD58B5214A170E5890907B25294D7A47C66505A3D45 ] vds C:\WINDOWS\System32\vds.exe
14:59:31.0223 0x14f8 vds - ok
14:59:31.0241 0x14f8 [ E42C0F2850735FF9D908B9DB581E6314, E2204A56BF37FC57CD2ED96E3F908882D72B4BFF1BFB97C5172C851F1E4F9650 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys
14:59:31.0250 0x14f8 VerifierExt - ok
14:59:31.0294 0x14f8 [ EC15FD6A28757793E2DA394CD94ABD52, DC758BBEE9C6952D7B3F7171EF67B037B4068E88189A2C4A894122D1D1209468 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys
14:59:31.0321 0x14f8 vhdmp - ok
14:59:31.0334 0x14f8 [ D0C9632C350F46786643A069251BC249, CF65BA0D3F3D2B821C10E2D4F53F5B6BF6236CA9767419392A561CFA79254C3B ] vhf C:\WINDOWS\System32\drivers\vhf.sys
14:59:31.0338 0x14f8 vhf - ok
14:59:31.0350 0x14f8 [ E886CB75DA2B6EB35469EF10135624C7, 3AFC59A0709B984F517A918D5BBEBEB1C80001BEC87C133447DCEAEDE00E516D ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys
14:59:31.0356 0x14f8 vmbus - ok
14:59:31.0366 0x14f8 [ 46D2EC27820EC0F798F85821E53C2942, D298A7D6AC16F76A069F843C8DD323ECB340D361733CB9B076BCDE8FC5F1FEFC ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys
14:59:31.0369 0x14f8 VMBusHID - ok
14:59:31.0398 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
14:59:31.0421 0x14f8 vmicguestinterface - ok
14:59:31.0447 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicheartbeat C:\WINDOWS\System32\ICSvc.dll
14:59:31.0465 0x14f8 vmicheartbeat - ok
14:59:31.0492 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
14:59:31.0511 0x14f8 vmickvpexchange - ok
14:59:31.0541 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicrdv C:\WINDOWS\System32\ICSvc.dll
14:59:31.0560 0x14f8 vmicrdv - ok
14:59:31.0587 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicshutdown C:\WINDOWS\System32\ICSvc.dll
14:59:31.0606 0x14f8 vmicshutdown - ok
14:59:31.0641 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmictimesync C:\WINDOWS\System32\ICSvc.dll
14:59:31.0660 0x14f8 vmictimesync - ok
14:59:31.0687 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvmsession C:\WINDOWS\System32\ICSvc.dll
14:59:31.0706 0x14f8 vmicvmsession - ok
14:59:31.0732 0x14f8 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvss C:\WINDOWS\System32\ICSvc.dll
14:59:31.0751 0x14f8 vmicvss - ok
14:59:31.0763 0x14f8 [ B9265F47E7A354BAAA0AF5CBA3F8F7CE, F836E7BEDC7CAB1C01225164D171A0210D8F909F52992E4C0BF3C92B365BCD52 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys
14:59:31.0768 0x14f8 volmgr - ok
14:59:31.0800 0x14f8 [ BEE9C8B72AB752B794F69C2B9B3678AA, 49A5093C26F3CDCD60577F7F2D7F936C7B2BD010B27F2C49A7B6AA41E42DF98D ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys
14:59:31.0816 0x14f8 volmgrx - ok
14:59:31.0853 0x14f8 [ E1F91A727A04C9F8199D04FF3BBBF63C, 076CAEE621DBF7DE24ED92BA239C440879FDB674CF3213DF3E35AEC03D0D2031 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys
14:59:31.0871 0x14f8 volsnap - ok
14:59:31.0883 0x14f8 [ F7B1B1101271E31F43CC76E890704F51, 2282D82B220C3D13FF980ED8E40443C83816D3DA9557EACEA137873F92BB9CF4 ] vpci C:\WINDOWS\System32\drivers\vpci.sys
14:59:31.0888 0x14f8 vpci - ok
14:59:31.0904 0x14f8 [ D48ED0A08BD2FD25A833E6AC99623091, 6CA7580878D3893E14B4938023A00CDFC9BE215A0CE4ED59A94F95DFD9FDF4D8 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys
14:59:31.0912 0x14f8 vsmraid - ok
14:59:31.0976 0x14f8 [ 4CF5A1E0C4FCA956ACD6C654E2A8610E, 57F3C7200C25E8717AF92AF2ED7615C6605179D3514B432220FA6EA94CAB4F2E ] VSS C:\WINDOWS\system32\vssvc.exe
14:59:32.0035 0x14f8 VSS - ok
14:59:32.0070 0x14f8 [ 6990D4AFDF545669D4E6C232F26DE1FB, 9B8F99A035188FD96BA79E935E8EF387BEA2223ECA0B74CF64AB993DABAA5722 ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys
14:59:32.0084 0x14f8 VSTXRAID - ok
14:59:32.0095 0x14f8 [ 1EE11F0508C58EF081F4176E66D6970B, 9069B3FC8850C7CF617909C6DBFC3753FEB59A9E708379CC57190F4097FB374E ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys
14:59:32.0098 0x14f8 vwifibus - ok
14:59:32.0110 0x14f8 [ 938E4EF58E42D252B742B0E243011B90, AC0C21FBAF15924CB271CA43ACB7A86287936C78B4852BCFC59EC7EC703E036C ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys
14:59:32.0115 0x14f8 vwififlt - ok
14:59:32.0126 0x14f8 [ 3BE5AAC930447FD18D4A8255A2FEC95C, A517357188FE4A5BD98A3CDB2165ACCE96CCE4BE2B90DDBEAF70B6DDF393F506 ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys
14:59:32.0129 0x14f8 vwifimp - ok
14:59:32.0160 0x14f8 [ 48C1A256591297C43ECFC4E30D144EAA, 8E66833ED2CEB6D7E499EB2E4282B4F9DFA28B6D21757BB88EC52FD069D7FACE ] W32Time C:\WINDOWS\system32\w32time.dll
14:59:32.0187 0x14f8 W32Time - ok
14:59:32.0198 0x14f8 [ 00C27B64C758C111E5D78A70DE6CA2B6, C99761B9B671B3A1FF1C52796CCA3F4F825BF50D9657D13B551E849CDD82055D ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys
14:59:32.0202 0x14f8 WacomPen - ok
14:59:32.0244 0x14f8 [ D76D1AC4F2C642D09A68227D129A4726, D14D6C4D94E9660848C74B220359683D91A4A3D70750E781A20B6D86D46794CE ] WalletService C:\WINDOWS\system32\WalletService.dll
14:59:32.0270 0x14f8 WalletService - ok
14:59:32.0283 0x14f8 [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:59:32.0288 0x14f8 wanarp - ok
14:59:32.0297 0x14f8 [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:59:32.0302 0x14f8 wanarpv6 - ok
14:59:32.0364 0x0758 Object required for P2P: [ A403DAE4B083EB96BC6CEDB47639B4F8 ] HTTP
14:59:32.0396 0x14f8 [ 2598BBF11C9E7D0885DCA52E7FD5BCBD, 46B1FB080A2CD88C89A0EB8BA2594A1FA2C341ED77A6C6835CBFFE42907FAC55 ] wbengine C:\WINDOWS\system32\wbengine.exe
14:59:32.0458 0x14f8 wbengine - ok
14:59:32.0498 0x14f8 [ 6950271D0C75A33BD05F7155EF1B2DD4, C6959972D490710CA7539EA8F51B5CC1FA64FF9799242075719C4FD394B6F9C7 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
14:59:32.0528 0x14f8 WbioSrvc - ok
14:59:32.0563 0x14f8 [ 39E07EE74F50C39C1EB315152F03199C, 053562C2656A76265AE09045952A4C9473BE2B4426D9ECC1A025ED4BC204AC25 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
14:59:32.0592 0x14f8 Wcmsvc - ok
14:59:32.0621 0x14f8 [ 53A036CED1270F2459E708A05922FD49, 2F281A72E4B0408DE6C8153F5988C9AA38591FB1E72558767D389637D0666A85 ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll
14:59:32.0646 0x14f8 wcncsvc - ok
14:59:32.0658 0x14f8 [ 965B6197A659782B6A0F68411A180AAD, 5541AB78B71E4FA655BCBF2D80D574B2A3B4AA8871F65D26620BDE549FA5459A ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
14:59:32.0669 0x14f8 WcsPlugInService - ok
14:59:32.0680 0x14f8 [ 069D3D6E20AD753B34FCE856F0436869, CF8C12295DDAA56E7350019AADBA533D7857CFB3F20DEE14E557963645A9331B ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
14:59:32.0685 0x14f8 WdBoot - ok
14:59:32.0726 0x14f8 [ 6CC727E94CD84E9720FDCDA8089CABCC, BCF66056B06DED6BC2D329E910FCD3E685D627BAD3B5D7F4B0E970B45CD9CEF4 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys
14:59:32.0756 0x14f8 Wdf01000 - ok
14:59:32.0778 0x14f8 [ E3E97151A1D1E87BB2D5371F66C5F169, 0ED0B9852FE0533816F5EE2F06045B3964A00FD749A7011DB3C663AB6FA369E2 ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
14:59:32.0790 0x14f8 WdFilter - ok
14:59:32.0804 0x14f8 [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
14:59:32.0816 0x14f8 WdiServiceHost - ok
14:59:32.0827 0x14f8 [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
14:59:32.0840 0x14f8 WdiSystemHost - ok
14:59:32.0875 0x14f8 [ E70DDD8E2245CC67547B0861983912D8, 64C73B1496FFF1F6BB3D877CB5BE54DE35C303AE234B11FC90038DC4F73241D9 ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
14:59:32.0901 0x14f8 wdiwifi - ok
14:59:32.0918 0x14f8 [ 07B043160399AF4009054E2EA3464BF4, 8D652D7CD75F8FB2B5414155355F0C970015914E1AC6522DBB8387BB8662F542 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
14:59:32.0924 0x14f8 WdNisDrv - ok
14:59:32.0933 0x14f8 WdNisSvc - ok
14:59:32.0954 0x14f8 [ 9972D395DBD05D91DA5EDADEB9325680, 9382D846793F285721A1A0FED42F914035A53D856B902FADB0B7144C471BDA91 ] WebClient C:\WINDOWS\System32\webclnt.dll
14:59:32.0971 0x14f8 WebClient - ok
14:59:33.0000 0x14f8 [ B6BF579761489720BCE787F723F596E5, 879B17F6A4F23F5E85A09126B7B407955DDCEB1BA4A8FFC0A418B7F47311C056 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
14:59:33.0017 0x14f8 Wecsvc - ok
14:59:33.0028 0x14f8 [ 10C9CF8771A2A87F575F9FB56821474E, 15E3DFFE9CF6777F67E426ECF797D2DF743EA152DEE336DCC9C2F92A0E6EB9A3 ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
14:59:33.0038 0x14f8 WEPHOSTSVC - ok
14:59:33.0051 0x14f8 [ 357C083FE35D030D991D163AAF622A06, F301852D49DBDEF0D28F56CD74CBDC71CA003EBD07D3F46EA5C870DC1BD07896 ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
14:59:33.0064 0x14f8 wercplsupport - ok
14:59:33.0079 0x14f8 [ 2235AF716D15D9DFE4C59DC2AC0C440C, 2DCFCEBEA77E7E40CEF9A785BE1A794B390B36E40FBCF49B494F9CEA3F6A28C4 ] WerSvc C:\WINDOWS\System32\WerSvc.dll
14:59:33.0092 0x14f8 WerSvc - ok
14:59:33.0107 0x14f8 [ C11272713719922DE5711094333BD166, 61D4F07E02AECF04964FF51EEA31069A2B0EAA549AD2B29B5FD3E1E6BB543593 ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys
14:59:33.0115 0x14f8 WFPLWFS - ok
14:59:33.0130 0x14f8 [ 205A1FAE910F5C493D236245850BB62A, DBA4D1D734BAA3CDEB8A7F9C81A8DAA88CEA55AF5C4C5908E76FB8E522C5EC8A ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
14:59:33.0142 0x14f8 WiaRpc - ok
14:59:33.0166 0x14f8 [ EF536C54AB9281FDC4E83B07279FCFC4, 22E4F133170682EE14413CA8FDC2DBE73AB31960D6ACB728A6B398229FDDFD3B ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys
14:59:33.0170 0x14f8 WIMMount - ok
14:59:33.0177 0x14f8 WinDefend - ok
14:59:33.0205 0x14f8 [ D8966A76408107224C6013993135DD78, 6159F69BC26FF817078E68C70E6DFC9075FEBF9EF9F4F046C7A65BC377544AE6 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
14:59:33.0211 0x14f8 WindowsTrustedRT - ok
14:59:33.0221 0x14f8 [ 8B102A7B6CE326FD4208CC7C2D183343, E47C1D76CBFD2A382C3A7BB048D752FB6DD4616FADDEB1C3ADD5DDAE149742AF ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
14:59:33.0225 0x14f8 WindowsTrustedRTProxy - ok
14:59:33.0265 0x14f8 [ 1859EEE0BAFDF8F20B7B3C40708B1CD3, C17792B9B41D384751A601A3B2CC3C35089257C6D4B63FC5CC0ABC7A34814688 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
14:59:33.0301 0x14f8 WinHttpAutoProxySvc - ok
14:59:33.0314 0x14f8 [ 4A53441C1C4D2878BEF27E381138BB2D, C221E74491E6FD2AF472B53876B46788D5CF62F4E645457F3B3816FD0ED2BAA1 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys
14:59:33.0317 0x14f8 WinMad - ok
14:59:33.0352 0x14f8 [ 1033C37122C7404C3B926ADF84874832, 163B3A7112F13AE7BB2655A28C6B19AF9B263F2AD2FF1B75314BE3E2B9118903 ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
14:59:33.0362 0x14f8 Winmgmt - ok
14:59:33.0483 0x14f8 [ 703D0F62C5AA4D08EE8756516C0D125D, 02015A5E62490C11EC968160C528C2AFD1D7194AACA27F407B06EB462657511F ] WinRM C:\WINDOWS\system32\WsmSvc.dll
14:59:33.0593 0x14f8 WinRM - ok
14:59:33.0638 0x14f8 [ 260907CE034FE327AC99BDA4153AB22F, B96501F43248713C2E153B9D22B78D51412A3C6989A2FB5F53A406C6CDC98D30 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
14:59:33.0643 0x14f8 WINUSB - ok
14:59:33.0656 0x14f8 [ 40A3E8D729F458B2C9A8BD9380FF83D5, CD42FFC138969EF8C9588FD113F0B9A98FBA282D46A5B6BCFA765F55ED6E97A1 ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys
14:59:33.0660 0x14f8 WinVerbs - ok
14:59:33.0777 0x14f8 [ EF0A5EFFBC78F7677D3591BB58AC5A52, 0860B9D0F1A1FFE14F1A0FDFD3B66C90CED90092D9CF9AA35D6D6D088E2DC4A9 ] WlanSvc C:\WINDOWS\System32\wlansvc.dll
14:59:33.0864 0x14f8 WlanSvc - ok
14:59:33.0961 0x14f8 [ 58A8B8B2A343829602AC105F66988583, 46D142A3A7D74F6383B8D7E642E796535CE15BEDAF82AEFB4BEF46F0355411FD ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
14:59:34.0040 0x14f8 wlidsvc - ok
14:59:34.0054 0x14f8 [ 8F010BF65238F3F822D22BA12831796E, 2CA830F259B742D2F5CDD0437960BF512D40FB4A4C2342E3BABB38D468F79694 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys
14:59:34.0057 0x14f8 WmiAcpi - ok
14:59:34.0079 0x14f8 [ 74ACA5A7880C1F0BB9D60E32E1705A70, A89817BCCBFF94D7394614DA81D1C6C4F53AF47A539E674EEF6DC3FC496BF702 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe
14:59:34.0088 0x14f8 wmiApSrv - ok
14:59:34.0096 0x14f8 WMPNetworkSvc - ok
14:59:34.0115 0x14f8 [ 2A9650FCC696DB28E45EA8B33B99B8E6, FBEBC6C05D50F578C6EEE0A7285EBE1DEADB08DD21FA3232630FD8D5A68FC3FB ] Wof C:\WINDOWS\system32\drivers\Wof.sys
14:59:34.0124 0x14f8 Wof - ok
14:59:34.0210 0x14f8 [ 4090C6738AA92B428220857B4D44F638, 4A3EE47494051E5BA8393F2AC8226EF434DA3AA1895CF4BADC9BC1BC378647C6 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
14:59:34.0285 0x14f8 workfolderssvc - ok
14:59:34.0302 0x14f8 [ 22C52D7EE7C7D0E02C8EFD8CAE8E3A71, 126605A12CEC9CC07DE3050F12E43CECABEAF0D00DF12300AF70F34700F7FE8E ] wpcfltr C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
14:59:34.0307 0x14f8 wpcfltr - ok
14:59:34.0322 0x14f8 [ D282ECA35ADAC7A93D6B4943E775010B, A76A9698A95646FA63AC18DFFA02B744D7C6043934CBF6C37832ED2E6B21F570 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
14:59:34.0335 0x14f8 WPDBusEnum - ok
14:59:34.0346 0x14f8 [ 1C08E424CBDD5065BB7266F8C048C1B1, 0452C85EDA6CBAB75C2617886C5D8117ED25D91F1BE0F8377B08D55B6629B028 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
14:59:34.0350 0x14f8 WpdUpFltr - ok
14:59:34.0363 0x14f8 [ 2C6EEFFBB7FB1C51CCD3737C77AB9109, 8C2ED309FAF4312512E7BCCBBC51B1353603A3499077A1DE21991F0692AF1620 ] WpnService C:\WINDOWS\system32\WpnService.dll
14:59:34.0377 0x14f8 WpnService - ok
14:59:34.0389 0x14f8 [ 638B43D39A3D0B47024555CF1095E6F1, C7EA0A6ED227A5256EB02CA76FEC538DF196B8DC38DA2A567757D2B221C9473E ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys
14:59:34.0392 0x14f8 ws2ifsl - ok
14:59:34.0411 0x14f8 [ FB45052D7C13963465DFF8D56746B10B, 21B0DC0D383061CEF079586AE8E2FD5E8BBA22B8494666F14D5A8591275943E5 ] wscsvc C:\WINDOWS\System32\wscsvc.dll
14:59:34.0429 0x14f8 wscsvc - ok
14:59:34.0440 0x14f8 [ F517CB0182B1DA5C0E0FC6B548FF60CC, F09CA4172D611487F157973C808627F04B0CF0A71CE19D49280BFBEA4AE6027B ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys
14:59:34.0443 0x14f8 WSDPrintDevice - ok
14:59:34.0458 0x14f8 WSearch - ok
14:59:34.0620 0x14f8 [ A904D7950ED275273357AA7B1EAE445F, 0E41EA26A923FCE7072CC7DDDDB852E54C95992E01A79C67D1D544B1CB1E18DA ] WSService C:\WINDOWS\System32\WSService.dll
14:59:34.0772 0x14f8 WSService - ok
14:59:34.0906 0x14f8 [ C46159A366C6AA90F1B742999745FA36, AE55797A1C703726359B0B609BEDB7F3C59BE3E81FF736987CD8E5E23195B42E ] wuauserv C:\WINDOWS\system32\wuaueng.dll
14:59:34.0996 0x14f8 wuauserv - ok
14:59:35.0016 0x14f8 [ A928F25CB62232F413EE655352856E10, 1D2B278A24DDDE8792ADE7649FF90A98E186B79F13AA296C30E4180293BE906A ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
14:59:35.0022 0x14f8 WudfPf - ok
14:59:35.0040 0x14f8 [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
14:59:35.0050 0x14f8 WUDFRd - ok
14:59:35.0065 0x14f8 [ 1336DA39FE006EAB2733CA4DE5B3560C, F0D6C71ADCB66D4D14EC6D09FD43F5521A3A8CA53F248DFD01696FB4F033BE77 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll
14:59:35.0079 0x14f8 wudfsvc - ok
14:59:35.0114 0x14f8 [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
14:59:35.0122 0x14f8 WUDFWpdFs - ok
14:59:35.0178 0x14f8 [ 2D7E3C2913AAE063774795E6790BCC48, 686CF1CE1CF2553236E0983CBF283D841FB5FBB998C33D97FBB5D7A83EF83867 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
14:59:35.0231 0x14f8 WwanSvc - ok
14:59:35.0279 0x14f8 [ 7443938BC4B8DCE1D8E6C51BC3F9DBFE, F2D41BFB2303AEAE39A33E6873A9C07DEF9090CA6D5602B2D232C59D1899D620 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
14:59:35.0325 0x14f8 XblAuthManager - ok
14:59:35.0378 0x14f8 [ FACC53D144952319038FAE7442FCC045, 8BCA4ADC5162FC12AF2A88A8A570DA9DAB80AE9B62C873A2121EBAF8AA9FBA98 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
14:59:35.0427 0x14f8 XblGameSave - ok
14:59:35.0448 0x14f8 [ 80BC02A73A3949A7AEF34791206C7D7F, 41E547EFC722D3E01CD8E261FA233D8C799FC59A9C5320B7FD65B09831373CDB ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
14:59:35.0458 0x14f8 xboxgip - ok
14:59:35.0507 0x14f8 [ 69E727F94BEA64E66C284F3C482F33E6, B3E0F287E7A251E0FC17C41089C45737027E54F0213BDE847356AC882B4D3700 ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
14:59:35.0552 0x14f8 XboxNetApiSvc - ok
14:59:35.0567 0x14f8 [ 1F1EF8E701859581251B52035C1C1CEF, 3A7D3EC619A7F45FBB04EDA6963E3C55DC50358CF2D71ED66EE4BB07ACC0EE3C ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
14:59:35.0571 0x14f8 xinputhid - ok
14:59:35.0577 0x14f8 ================ Scan global ===============================
14:59:35.0623 0x14f8 [ D923EC03E24F7633DED3F2D46AD59A28, C635DB4483E24BE0188583E63B06D0F37BDE7AD944E4D0246A7D19CBC3EA3A6B ] C:\WINDOWS\system32\basesrv.dll
14:59:35.0664 0x14f8 [ E2899695BD30B5F93EC626EBBEF2CB69, B190D2903A109D2C146D881F90769060A0E971942F4AA61AEAD81861032D89C3 ] C:\WINDOWS\system32\winsrv.dll
14:59:35.0703 0x14f8 [ 09E92888FFF86F3334E59778724DCA6F, 2344763B52395EF565A9DE5F55BEDCA026AD2E8072FFD06F826BF366B3BA2AB4 ] C:\WINDOWS\system32\sxssrv.dll
14:59:35.0741 0x0758 Object send P2P result: true
14:59:35.0742 0x0758 Object required for P2P: [ 9A2A2F3C69B9A30B6E78536F6D258BAD ] iai2c
14:59:35.0752 0x14f8 [ 2AB2C72D88CE2BC73E6F708D0B1A9657, 8DF9D8C83BC2078D88FE7B2E9CDD5ABA9A2075F40D30CD344595DA217ECCCB3B ] C:\WINDOWS\system32\services.exe
14:59:35.0774 0x14f8 [ Global ] - ok
14:59:35.0775 0x14f8 ================ Scan MBR ==================================
14:59:35.0792 0x14f8 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
14:59:35.0872 0x14f8 \Device\Harddisk0\DR0 - ok
14:59:35.0873 0x14f8 ================ Scan VBR ==================================
14:59:35.0880 0x14f8 [ B217A32B5F8DAE2736B8B8B95610F542 ] \Device\Harddisk0\DR0\Partition1
14:59:35.0926 0x14f8 \Device\Harddisk0\DR0\Partition1 - ok
14:59:35.0933 0x14f8 [ 5B5E61635DA3B62040CF2FF00471ED71 ] \Device\Harddisk0\DR0\Partition2
14:59:35.0952 0x14f8 \Device\Harddisk0\DR0\Partition2 - ok
14:59:35.0959 0x14f8 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
14:59:35.0959 0x14f8 \Device\Harddisk0\DR0\Partition3 - ok
14:59:35.0968 0x14f8 [ 0ABA2A788E2A06BD6677AA1214BEE087 ] \Device\Harddisk0\DR0\Partition4
14:59:35.0987 0x14f8 \Device\Harddisk0\DR0\Partition4 - ok
14:59:35.0994 0x14f8 [ 7D35943F8D8BBC4792417A62BEE4E844 ] \Device\Harddisk0\DR0\Partition5
14:59:36.0045 0x14f8 \Device\Harddisk0\DR0\Partition5 - ok
14:59:36.0071 0x14f8 [ E1C1932A638C90F62A583364AC00F2FF ] \Device\Harddisk0\DR0\Partition6
14:59:36.0083 0x14f8 \Device\Harddisk0\DR0\Partition6 - ok
14:59:36.0089 0x14f8 [ 845A652928A6C7A6786B7F7013F008E6 ] \Device\Harddisk0\DR0\Partition7
14:59:36.0139 0x14f8 \Device\Harddisk0\DR0\Partition7 - ok
14:59:36.0146 0x14f8 [ 8174D599EFEE97C0E97DB30FC20DA906 ] \Device\Harddisk0\DR0\Partition8
14:59:36.0159 0x14f8 \Device\Harddisk0\DR0\Partition8 - ok
14:59:36.0166 0x14f8 [ E54A5E77FCF0F43DEC3195D6DAA7070F ] \Device\Harddisk0\DR0\Partition9
14:59:36.0184 0x14f8 \Device\Harddisk0\DR0\Partition9 - ok
14:59:36.0190 0x14f8 [ E13A9539827D336D91D16C94BA4E657D ] \Device\Harddisk0\DR0\Partition10
14:59:36.0212 0x14f8 \Device\Harddisk0\DR0\Partition10 - ok
14:59:36.0220 0x14f8 [ 620CB0D9B1076A810A8024C5577B2EFE ] \Device\Harddisk0\DR0\Partition11
14:59:36.0245 0x14f8 \Device\Harddisk0\DR0\Partition11 - ok
14:59:36.0246 0x14f8 ================ Scan generic autorun ======================
14:59:36.0850 0x14f8 [ 7068A2E090D56297A476C289CD2ABA41, 48FA908A5352B777FA0AB546AADEBD47DCA117FDFDF1D75E2A2D3E2F0B3DD83B ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
14:59:37.0388 0x14f8 RtHDVCpl - ok
14:59:37.0488 0x14f8 [ 668469AF43FD603610A56D91DC201F30, C6385B462CE5EEA5F6EB63B5646F413AE21DE4EFBA4C914E6FD7AEFAF487C11F ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
14:59:37.0536 0x14f8 RtHDVBg_Dolby - ok
14:59:37.0562 0x14f8 [ 39CF316EB5842AE27CC0D3CC4E2840DE, BC4D4ED926F988B7B70CC87B7EC92D148DA6BC39C5C514751F1B0CA69D0F9081 ] C:\Program Files\Microsoft Office\Office14\BCSSync.exe
14:59:37.0569 0x14f8 BCSSync - ok
14:59:37.0570 0x14f8 SynTPEnh - ok
14:59:37.0587 0x14f8 [ C7F017C9B163E7DAB864649E8241F683, F007F107FCA0E3A12D7E900101EBF02C2453D4AA56BE18769E86B592C88C5106 ] C:\Program Files\iTunes\iTunesHelper.exe
14:59:37.0594 0x14f8 iTunesHelper - ok
14:59:37.0618 0x14f8 [ 72334F906C2E2B002CDD2FF9022FD957, 991F7C606E122BBD388BA37E56B37CC6D2DCA304784E4CE06018D698C57F320F ] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
14:59:37.0630 0x14f8 PAC7302_Monitor - ok
14:59:37.0650 0x14f8 [ 4E9AF25BA5E8219310E384AEA5B0EED8, 743062F755E7A88BA394E96CA26A988CCFDF73B441B779B3149D54A769CBC411 ] C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
14:59:37.0656 0x14f8 CLMLServer_For_P2G8 - ok
14:59:37.0690 0x14f8 [ 806222C9B0B8606061830527296328ED, 93E241CA93177D63120A97BF72B91A1EA3D14BE4ADB210181AF975074268183F ] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe
14:59:37.0708 0x14f8 CLVirtualDrive - ok
14:59:37.0728 0x14f8 [ 0966408A384E8B0FE57B0008E18D561C, 045AB5798CAFA7D27E7D02F780B3508EBF34C0991C8EF166A61CF869D9399B70 ] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
14:59:37.0733 0x14f8 RemoteControl10 - ok
14:59:37.0752 0x14f8 [ 249348AC5BF38938B713756DBA286956, 5F8A441D9DD617A28F6BB8522957A718FDBFF4D031EE7D5796D77BA720FB6694 ] C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
14:59:37.0762 0x14f8 YouCam Service - ok
14:59:37.0836 0x14f8 [ 4E8C895616B22D8A7AFA6AC52E02E996, 41589C10705E36B08A661E48BB8058D5E80671A7522C3B9441F29C9345AC8EF7 ] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
14:59:37.0879 0x14f8 BrMfcWnd - ok
14:59:37.0894 0x14f8 [ 4DE3EF07E0854547309C6B40235A9D44, F73D8E6D98583865D1C8DB728058D83C72A3908E21E04EF313FCB829C040A1EC ] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe
14:59:37.0901 0x14f8 ControlCenter3 - ok
14:59:37.0960 0x14f8 [ 5668994A6AE925189C7D7F03BFE19C66, 269146783422D06BE2BA5D358D22B03339C102D0D5970894625C9C03BFCCB773 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
14:59:37.0988 0x14f8 avgnt - ok
14:59:38.0088 0x14f8 [ 6F5C9785C05D23DABE407653C12B8A05, 3EC2AACE39D47BC3C34CC8F53DA652A5FFE3A09304AB77AFCF17D4E5CC10F82E ] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe
14:59:38.0157 0x14f8 ISUSPM - ok
14:59:38.0199 0x14f8 [ 5ABDB69094C3595524165649B5DA6ADA, B644C7CAF439C76E7F476FB15A0AFA09CF3C7B81C1E4F19B821E732D2E2D3B0D ] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
14:59:38.0203 0x14f8 PaperPort PTD - ok
14:59:38.0212 0x14f8 [ 4492AFBDBC42D5E3EA219A9092976861, D0B4BA8A468EE82568D1672DB6B3294DACF8D5D182373629C4E090195B714B1C ] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe
14:59:38.0215 0x14f8 IndexSearch - ok
14:59:38.0277 0x14f8 [ 9C68BA857191DE7B45651D6773036870, 1BB1A2B56F071BAAF60551877F8215BB6F011E8E21AD5F81BF80FCFBE45A5F36 ] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe
14:59:38.0291 0x14f8 PPort14reminder - ok
14:59:38.0348 0x0758 Object send P2P result: true
14:59:38.0348 0x0758 Object required for P2P: [ 59A20F5AD9F4AE54098154359519408E ] iaLPSS2i_I2C
14:59:38.0628 0x14f8 [ 8A312D5764B4FC4C55CEDDEED4652CF1, C4E726C9C77614CD32D5B76DA2E9A049EC490C2392D9A94B84712BCBF47BA7C6 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
14:59:38.0857 0x14f8 AvastUI.exe - ok
14:59:38.0946 0x14f8 [ D19951000FC9E45A62BE182B79D7FF3A, 1156E8D9B1A13350F57F010C48EE30138CB04C69B3F9FFBD6F6F2B8D4C8AC148 ] C:\Program Files (x86)\Nuance\PDFCreate\pdfcreate7hook.exe
14:59:38.0972 0x14f8 PDFCreHook - ok
14:59:38.0986 0x14f8 [ 3D77D293E0A533F24A3FD21BA3293D0D, 43A88384C71160032A1E5A740DBA1E25E36ACE4C6FA7FE6204292C5D07B60052 ] C:\Program Files (x86)\Nuance\PDFCreate\RegistryController.exe
14:59:38.0993 0x14f8 PDF7 Registry Controller - ok
14:59:39.0005 0x14f8 [ BB10E34B162FBEAE5636474A79026A0D, 700629C7497ED01E5B7DF99F0D8F56FF30BBA067ED65AC7A0D77B3765C596ECB ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
14:59:39.0011 0x14f8 Avira Systray - ok
14:59:39.0047 0x14f8 [ F655E4A1AED366E96E5D5AA397E0F255, F8573CCA72FA25079B8CE2FC5D30379487E2905B109C73C741FAB31589FA49E1 ] C:\Program Files (x86)\QuickTime\QTTask.exe
14:59:39.0063 0x14f8 QuickTime Task - ok
14:59:39.0169 0x14f8 [ E76F43260D050DE1D5370AEF266EB3C8, DB30811E46BB55B03BEE97414A561B8DE2136E16764514CC3A4DF056BD5E0859 ] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
14:59:39.0242 0x14f8 EaseUS EPM tray - ok
14:59:39.0388 0x14f8 [ DEF92CF2964226C10D3F91453471328B, 62F4B119154E382B93244319D47A6C75FA093E8EB29BD47C625CB6C56D0B1D15 ] C:\Program Files (x86)\Forum Verlag\Unternehmensbewertung direkt\ForumUpdater.exe
14:59:39.0485 0x14f8 Forum Updater - ok
14:59:39.0515 0x14f8 [ 7EE1757A50F7C13C0A1BFE58763A2AD3, 322091A9F2287A6782143D2D5D962E7A7C08467D749F0811DBE8F14856B5B817 ] C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
14:59:39.0527 0x14f8 LexwareInfoService - ok
14:59:39.0596 0x14f8 [ 2677033DA8C3447B00DA64C7D338A07B, 0409976C64F42038DE60006497AFD1CAC3B7DB440C338F80E06B3FB269E6CAD3 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
14:59:39.0618 0x14f8 SunJavaUpdateSched - ok
14:59:39.0991 0x14f8 [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:59:40.0295 0x14f8 OneDriveSetup - ok
14:59:40.0646 0x14f8 [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:59:40.0822 0x0758 Object send P2P result: true
14:59:40.0828 0x0758 Object required for P2P: [ AA97872166AB4201540FB92C0BD6683F ] Lexware_Update_Service
14:59:40.0947 0x14f8 OneDriveSetup - ok
14:59:41.0184 0x14f8 [ 781DCED079ABD884DF8CA22B6FA30F05, 392C39D4E26AAE801786EE9A2671FDFFF18991A27046853B13ACA90E4B2D3998 ] C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe
14:59:41.0293 0x14f8 Spotify Web Helper - ok
14:59:41.0443 0x14f8 [ 4FF9A9F17E5722357EA1F614155F7BCB, 6E43F9269383FEDDE31CC1D3F7268DB2910079550CC2CA440ABB8C3A1E31F2A0 ] C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
14:59:41.0563 0x14f8 MyDriveConnect.exe - ok
14:59:41.0643 0x14f8 [ 7C6D524C78A1722AD987B9E47AC1FEE2, FFDC6C92ABB547D0DCD2621EC423C755A78079B061A41FA1751A56799D1A79A5 ] C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe
14:59:41.0649 0x14f8 Dropbox Update - ok
14:59:41.0693 0x14f8 [ 2010CA459E5EC8F9D5FC8B000D130294, 058FF215A3AAD04F2A4CF23B2CC62A5EA28F5A705EFA689DCE9126720CF33229 ] C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\OneDrive.exe
14:59:41.0713 0x14f8 OneDrive - ok
14:59:41.0756 0x14f8 [ 527CF721F78B2DF6A1570F93899A0AA8, 1F08074DA90593E7EDC63C072B784BE438C5EC94FE992433053D6B75CDEE78EB ] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
14:59:41.0795 0x14f8 OfficeSyncProcess - ok
14:59:41.0903 0x14f8 [ 41E25E514D90E9C8BC570484DBAFF62B, E6C49F7CE186DC4C9DA2C393469B070C0F1B95A01D281AE2B89538DA453D1583 ] C:\WINDOWS\system32\cmd.exe
14:59:41.0913 0x14f8 Uninstall C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64 - ok
14:59:41.0915 0x14f8 Waiting for KSN requests completion. In queue: 383
14:59:42.0917 0x14f8 Waiting for KSN requests completion. In queue: 383
14:59:43.0308 0x0758 Object send P2P result: true
14:59:43.0313 0x0758 Object required for P2P: [ 807A6636828E5F43C10A01474B8907EE ] MSDTC
14:59:43.0917 0x14f8 Waiting for KSN requests completion. In queue: 352
14:59:44.0460 0x0974 Object required for P2P: [ 4CF5A1E0C4FCA956ACD6C654E2A8610E ] VSS
14:59:44.0918 0x14f8 Waiting for KSN requests completion. In queue: 288
14:59:45.0919 0x14f8 Waiting for KSN requests completion. In queue: 288
14:59:46.0096 0x0758 Object send P2P result: true
14:59:46.0119 0x0758 Object required for P2P: [ 7C58AFEC26E9F7730A8AA7FD40225937 ] sppsvc
14:59:46.0919 0x14f8 Waiting for KSN requests completion. In queue: 136
14:59:46.0958 0x0974 Object send P2P result: true
14:59:46.0971 0x0974 Object required for P2P: [ 8A312D5764B4FC4C55CEDDEED4652CF1 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
14:59:47.0919 0x14f8 Waiting for KSN requests completion. In queue: 57
14:59:48.0630 0x0758 Object send P2P result: true
14:59:48.0635 0x0758 Object required for P2P: [ 34A3EB84B2A830E6F450B8F885AE4E6E ] SysMain
14:59:48.0920 0x14f8 Waiting for KSN requests completion. In queue: 34
14:59:49.0920 0x14f8 Waiting for KSN requests completion. In queue: 34
14:59:50.0921 0x14f8 Waiting for KSN requests completion. In queue: 34
14:59:51.0119 0x0758 Object send P2P result: true
14:59:51.0921 0x14f8 Waiting for KSN requests completion. In queue: 17
14:59:52.0823 0x0974 Object send P2P result: true
14:59:52.0825 0x0974 Object required for P2P: [ 781DCED079ABD884DF8CA22B6FA30F05 ] C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe
14:59:52.0922 0x14f8 Waiting for KSN requests completion. In queue: 6
14:59:53.0923 0x14f8 Waiting for KSN requests completion. In queue: 6
14:59:54.0923 0x14f8 Waiting for KSN requests completion. In queue: 6
14:59:55.0303 0x0974 Object send P2P result: true
14:59:55.0304 0x0974 Object required for P2P: [ 4FF9A9F17E5722357EA1F614155F7BCB ] C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
14:59:55.0924 0x14f8 Waiting for KSN requests completion. In queue: 5
14:59:56.0925 0x14f8 Waiting for KSN requests completion. In queue: 5
14:59:57.0772 0x0974 Object send P2P result: true
14:59:57.0772 0x0974 Object required for P2P: [ 2010CA459E5EC8F9D5FC8B000D130294 ] C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\OneDrive.exe
14:59:57.0925 0x14f8 Waiting for KSN requests completion. In queue: 3
14:59:58.0925 0x14f8 Waiting for KSN requests completion. In queue: 3
14:59:59.0926 0x14f8 Waiting for KSN requests completion. In queue: 3
15:00:00.0252 0x0974 Object send P2P result: true
15:00:00.0252 0x0974 Object required for P2P: [ 41E25E514D90E9C8BC570484DBAFF62B ] C:\WINDOWS\system32\cmd.exe
15:00:00.0926 0x14f8 Waiting for KSN requests completion. In queue: 1
15:00:01.0926 0x14f8 Waiting for KSN requests completion. In queue: 1
15:00:02.0730 0x0974 Object send P2P result: true
15:00:03.0043 0x14f8 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.15.106 ), 0x41000 ( enabled : updated )
15:00:03.0067 0x14f8 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.9.10586.0 ), 0x60100 ( disabled : updated )
15:00:03.0074 0x14f8 AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 11.1.2245.1540 ), 0x41000 ( enabled : updated )
15:00:03.0083 0x14f8 Win FW state via NFP2: enabled ( trusted )
15:00:05.0489 0x14f8 ============================================================
15:00:05.0489 0x14f8 Scan finished
15:00:05.0489 0x14f8 ============================================================
15:00:05.0507 0x1070 Detected object count: 0
15:00:05.0507 0x1070 Actual detected object count: 0
15:19:38.0690 0x13fc ============================================================
15:19:38.0690 0x13fc Scan started
15:19:38.0690 0x13fc Mode: Manual; SigCheck; TDLFS;
15:19:38.0690 0x13fc ============================================================
15:19:38.0690 0x13fc KSN ping started
15:19:42.0401 0x13fc KSN ping finished: true
15:19:42.0796 0x13fc ================ Scan system memory ========================
15:19:42.0796 0x13fc System memory - ok
15:19:42.0797 0x13fc ================ Scan services =============================
15:19:42.0922 0x13fc [ DF1C3D7E6C7929AD83BE22852B5B08CB, 9ECF6211CCD30273A23247E87C31B3A2ACDA623133CEF6E9B3243463C0609C5F ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys
15:19:43.0150 0x13fc 1394ohci - ok
15:19:43.0164 0x13fc [ 2C5B3035B86770ADD2FE9BFBAF5B35A4, 19E16F9144FE3E33B5FF248CF0040AB079ACAE22290B1369CC72AE4CB5FE3A90 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys
15:19:43.0243 0x13fc 3ware - ok
15:19:43.0273 0x13fc [ 6B6C39AB2CD7BEB6CFF624522E5449DE, 740D99D2C525FB4F81FB2754281CECEA5FF13DD2120081306728FE33859F28F2 ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys
15:19:43.0403 0x13fc ACPI - ok
15:19:43.0418 0x13fc [ 7EADED8087C392876521F7EBCE846EF4, 99BF1BD948F97C1ECBC049C7F949B71D73D0B41FB505B2F75B208E655F7DC8A3 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys
15:19:43.0499 0x13fc acpiex - ok
15:19:43.0508 0x13fc [ C498887123327CDFD73A05E7A2780920, B45392C46254FCB8D79B6C3A82C8D894063199E6167D8E5F7EA7D60C75CD16EA ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys
15:19:43.0581 0x13fc acpipagr - ok
15:19:43.0590 0x13fc [ C8DBE6EFFCF014CAA010B9BDDAC833EC, 96FC29340C62A6B0910DCCBF8945F32089FC300F45B451A540B8854D53734298 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
15:19:43.0651 0x13fc AcpiPmi - ok
15:19:43.0662 0x13fc [ 17039DBEB3B7B9ADCDB4B4533AA9771F, A4D38B144639A20B8B31E4F35FB776A028DB502FAC849FC73EECEB3CCD91830B ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys
15:19:43.0720 0x13fc acpitime - ok
15:19:43.0735 0x13fc [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:19:43.0761 0x13fc AdobeARMservice - ok
15:19:43.0830 0x13fc [ 10A03D78A40260464DDFD04B5F66ACDC, 19EA03A8003BFACF94D6E26528822F0623395AC95A387603ADA32186BAD36F39 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:19:43.0861 0x13fc AdobeFlashPlayerUpdateSvc - ok
15:19:43.0918 0x13fc [ F7D0CD345D2DA42E7042ABCD73662403, 03183F90A994D69066F15C3DFC1D7D7514AEAF46A5AAC059B1FB327F8C30A35C ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS
15:19:44.0058 0x13fc ADP80XX - ok
15:19:44.0095 0x13fc [ 70148EFA9A562E7185B75BBE7D376BF7, 8200E3349A1AFA1040B3D956A17BAF3CDC784A1A3CA396125E7872B36C03D84A ] AFD C:\WINDOWS\system32\drivers\afd.sys
15:19:44.0215 0x13fc AFD - ok
15:19:44.0229 0x13fc [ 870F1A2C936F92B5D053DF7EC75B352F, D617524FD5886D6D3BC2EFBBB5EA310E906454CD7CA7257C3D7BDEA8C4F2DA71 ] agp440 C:\WINDOWS\system32\drivers\agp440.sys
15:19:44.0285 0x13fc agp440 - ok
15:19:44.0302 0x13fc [ 3DF7751D5DC6525E7DC6617FBB45054F, 8E6D4C809DB3B66E7558C4829E01F5C227EE614AC82F33FD99DCC629770D1BE3 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
15:19:44.0384 0x13fc ahcache - ok
15:19:44.0394 0x13fc [ 19707ECBCEA71080A85DB2336580DB39, A09AE69C9DE2F3765417F212453B6927C317A94801AE68FBA6A8E8A7CB16CED7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll
15:19:44.0435 0x13fc AJRouter - ok
15:19:44.0447 0x13fc [ AA91A5E156D0364ABA7B01658C2EB014, F61055D581745023939C741CAB3370074D1416BB5A0BE0BD47642D5A75669E12 ] ALG C:\WINDOWS\System32\alg.exe
15:19:44.0490 0x13fc ALG - ok
15:19:44.0503 0x13fc [ B70F0F2F54B4A4DB6E9C830454752F5A, C882DEAC30812E5FA4479A8CB688603C6AF269EF08236688F4C5E7EBED1D4572 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys
15:19:44.0566 0x13fc AmdK8 - ok
15:19:44.0579 0x13fc [ 35E890482C9728DD5C552B85DA8A5AB2, 1E0EB7D902AB4C38E23CAFC0BEA250E7F6E180E8814385B4F29730BFC373A191 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys
15:19:44.0640 0x13fc AmdPPM - ok
15:19:44.0652 0x13fc [ 5B30BCFE6E02E45D3EE268FF001BC5E0, 9901DB728885CE36911F79998629B2DD42D56AF9633B5277834F498CC59B0346 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys
15:19:44.0719 0x13fc amdsata - ok
15:19:44.0738 0x13fc [ F20B30F35A5C7888441B4DCA001ECF8E, 695A5BC1F18B65992EB06A202AD3CBFA17228E76DDFD1AE6977FD315724F75C2 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys
15:19:44.0821 0x13fc amdsbs - ok
15:19:44.0831 0x13fc [ AFE838D7576C581D6483529621AB10CC, 14476A04CC64E7A0F1BBFDACCBD7A87F384BE1877C27656DBB973AF3975D4AE2 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys
15:19:44.0904 0x13fc amdxata - ok
15:19:44.0967 0x13fc [ 81E02299B534F61E104C1235519C37B3, B389458C13A0E0717365B7CE371A6B768EB2F98C4CDBAA6DCBBBDE3A2B1D8B14 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
15:19:45.0125 0x13fc AntiVirMailService - ok
15:19:45.0127 0x13fc Object required for P2P: [ 81E02299B534F61E104C1235519C37B3 ] AntiVirMailService
15:19:47.0606 0x13fc Object send P2P result: true
15:19:47.0631 0x13fc [ 3CBE5047BB08BD363420D68364F9E829, 7A6C59E9B98C1A50CB5FB895050127C5A433BA825D3832FC6DDA2A41AE986543 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
15:19:47.0669 0x13fc AntiVirSchedulerService - ok
15:19:47.0670 0x13fc Object required for P2P: [ 3CBE5047BB08BD363420D68364F9E829 ] AntiVirSchedulerService
15:19:50.0142 0x13fc Object send P2P result: true
15:19:50.0169 0x13fc [ 3CBE5047BB08BD363420D68364F9E829, 7A6C59E9B98C1A50CB5FB895050127C5A433BA825D3832FC6DDA2A41AE986543 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
15:19:50.0205 0x13fc AntiVirService - ok
15:19:50.0206 0x13fc Object required for P2P: [ 3CBE5047BB08BD363420D68364F9E829 ] AntiVirService
15:19:53.0056 0x13fc Object send P2P result: true
15:19:53.0146 0x13fc [ CAA9D66CA6D21AF0AE7DA01D5AC6CC2F, 827400CFB53026757B3D75B6C5AC7BBECE7E62B335160C18CBF6A41047F4A400 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
15:19:53.0221 0x13fc AntiVirWebService - ok
15:19:53.0224 0x13fc Object required for P2P: [ CAA9D66CA6D21AF0AE7DA01D5AC6CC2F ] AntiVirWebService
15:19:55.0703 0x13fc Object send P2P result: true
15:19:55.0719 0x13fc [ 2BBD3A492B93C7E669D01EE88977D7DE, 311EA890E555E144F4B0DDC3112B2EB5CB848DEA4F33A300942494D8989473E0 ] AppID C:\WINDOWS\system32\drivers\appid.sys
15:19:55.0812 0x13fc AppID - ok
15:19:55.0823 0x13fc [ 7A55F9237F726D1667073A47B0D1B90F, 7C2D9AA84F1D4CC6C1FAF6848DF9479A534E01029C4387E8C0647745F1E74603 ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
15:19:55.0878 0x13fc AppIDSvc - ok
15:19:55.0890 0x13fc [ 56E219DF92BE16F62308F884739BE022, FE189EE8A52BC5A0E6B76C632021F84F60307A182F2A67C0C0C7CAA72DEFC723 ] Appinfo C:\WINDOWS\System32\appinfo.dll
15:19:55.0940 0x13fc Appinfo - ok
15:19:55.0959 0x13fc [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
15:19:55.0981 0x13fc Apple Mobile Device Service - ok
15:19:56.0010 0x13fc [ 610499A73DF3599608EBB6B3F9929052, A9CA49C4A39A825916AB3791090BCFC7044FDB6B2C3538E01F0CFBC2A9931152 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
15:19:56.0084 0x13fc AppReadiness - ok
15:19:56.0199 0x13fc [ BF58041024FEF96B48F7D691003B4BCB, FAD25702256AA8E668F082E16C2C05FD7FA907DCA88787BF36121D1B073350C9 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll
15:19:56.0380 0x13fc AppXSvc - ok
15:19:56.0400 0x13fc [ E3FE8F610B1CC12BC3B2E6BC43DC97E2, 0E18542CF2095A9ADA1759AB8F986E78B0A50A3C6B2AD4EACD80A23D832A2C6D ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys
15:19:56.0464 0x13fc arcsas - ok
15:19:56.0476 0x13fc [ 7BC1F2FC2A9D79E1EBBBF6D69AC3BA1F, 236265BE3F1B2130025A3A10152893BD0D18AD8965732361058B775F010539A2 ] aswHwid C:\WINDOWS\system32\drivers\aswHwid.sys
15:19:56.0565 0x13fc aswHwid - ok
15:19:56.0579 0x13fc [ 68E76C1675AC171A84F5B7230652E19D, A707A4E51110B15FF7D73C95D4D9C1E457FC9D93E1479BDB67EBDDDD6AC28D8E ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys
15:19:56.0650 0x13fc aswMonFlt - ok
15:19:56.0667 0x13fc [ 2D6B49A071216796106E7804AB2BA7DC, 6A58A3B36EA05A24333482F87CFD315F73E56A64E46493E82E0FE9115E284168 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr2.sys
15:19:56.0741 0x13fc aswRdr - ok
15:19:56.0754 0x13fc [ E46B51C99BB750A81AC6A68362475A5C, 2A61C09902B39696D151B9D5E6A60FFC3CF3EA02613EC64BBAB4DEE3C78838E2 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys
15:19:56.0796 0x13fc aswRvrt - ok
15:19:56.0847 0x13fc [ 0BCDF7DF06B4407A7EB0443AADB3DD27, 3D33FFBECFE4766FE66B1269B7B218D03D7ED9E58A9C27E8D8B84474F30DBB19 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
15:19:56.0965 0x13fc aswSnx - ok
15:19:56.0998 0x13fc [ 619CA9F210F0F36F8162E5B7BFDDA5CD, D0D87549BD32F575E518B510085F86D434C3B948733391A6F7959918D761F29B ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
15:19:57.0039 0x13fc aswSP - ok
15:19:57.0057 0x13fc [ D9079E1A1C2A1F8ED5F37AF8E6CD3161, 629E3A642C5E3BEA65CDD2E08CAD69F9649A98BDA906678B51D3D2C9DB5BB253 ] aswStm C:\WINDOWS\system32\drivers\aswStm.sys
15:19:57.0084 0x13fc aswStm - ok
15:19:57.0103 0x13fc [ 3BEC32A0B646D914921FD56AA39998C1, 8DB7CBF3DEF8EAE1D7D28C38B3A0FCD5C2A04D772078B907F35C66451355A04A ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys
15:19:57.0192 0x13fc aswVmm - ok
15:19:57.0203 0x13fc [ 5E00748A1AD246CAECBBB7553BED36CC, DAD2C93F0894E7BB5E5D8D767D8286A909086B49172C504A01097C3A180998C6 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys
15:19:57.0270 0x13fc AsyncMac - ok
15:19:57.0281 0x13fc [ 492B99D2E3D5D7BFD5F0AE1BE7BD37DD, A3F6BFC4FDC1933FBF3145019B118689A414108B04F43E2563946B2673C89324 ] atapi C:\WINDOWS\system32\drivers\atapi.sys
15:19:57.0331 0x13fc atapi - ok
15:19:57.0349 0x13fc [ 890BF20BDF500E4E84720EA84448EDDF, EF5EECA20FFB6B78277CE551877479DB79E91DB23B46530C1D0E746F0F51FBBF ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
15:19:57.0438 0x13fc AudioEndpointBuilder - ok
15:19:57.0489 0x13fc [ FAC1E762CB49992381691B00D2069B3E, 9973814BB259A370E6A17EDFB785CED9C634721E6D6FE069667B669AE60EB5F6 ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll
15:19:57.0588 0x13fc Audiosrv - ok
15:19:57.0612 0x13fc [ F5CB8703A4F51EE30E5C090C78073AA4, 90683F39E9AA315FFB66A9F014AD1BEBF19EA62908247C133455815F6632E578 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
15:19:57.0643 0x13fc avast! Antivirus - ok
15:19:57.0658 0x13fc [ CF233C89DEFF6BCA1F65BE3DA0C1A306, B718A59CFC0E3A9ED4E8C690390F54C96828C5A4C2790C2E98075DB4484240D6 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
15:19:57.0712 0x13fc avgntflt - ok
15:19:57.0726 0x13fc [ 4764D299855174D6B5C7DA853B490029, 6E2C8E25DC3C38EEAAA1221E515AC06C2EDC0A71CF2F7762E8DFCC55938D59B3 ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
15:19:57.0768 0x13fc avipbb - ok
15:19:57.0768 0x13fc Object required for P2P: [ 4764D299855174D6B5C7DA853B490029 ] avipbb
15:20:00.0253 0x13fc Object send P2P result: true
15:20:00.0270 0x13fc [ 8E6214E8C6100222BEB6A14F9B908A7E, 268279AE0D87E4B1CC227355DF12B7E8113F8355B1D20447AA723830D706021A ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
15:20:00.0297 0x13fc Avira.OE.ServiceHost - ok
15:20:00.0308 0x13fc [ 79F7741A773FF194EEC64A8161AE26D5, 3DDEA5FBDCB74A2BACC895A44C8C2A947F09E2649ED61D781E99DD61DBFACA5D ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
15:20:00.0345 0x13fc avkmgr - ok
15:20:00.0357 0x13fc [ E477AF94ACCCF99A0E56D71D450DCCCB, C97756A4E82EC7EF8268967B10DEBAAEDB746B2846CA2BFD68E1B7DBBAE7901A ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys
15:20:00.0394 0x13fc avnetflt - ok
15:20:00.0394 0x13fc Object required for P2P: [ E477AF94ACCCF99A0E56D71D450DCCCB ] avnetflt
15:20:03.0657 0x13fc Object send P2P result: true
15:20:03.0669 0x13fc [ 7062CE507814D5306DCA5D6A15B7B6B6, 9D60506003A66C2E516B1FCB70CC5B26FB3A9948B95D97C828DD0328E76F2C91 ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
15:20:03.0717 0x13fc AxInstSV - ok
15:20:03.0746 0x13fc [ 6447BA6FA709514B6C803D159B4C7D1E, 549DDCEAD93DF333F6BBD56A9258A867E4DA219741C00D48C68F8F230A87B11A ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys
15:20:03.0924 0x13fc b06bdrv - ok
15:20:03.0937 0x13fc [ B4AC08B1D04D0CE085435E5CD0E663C5, 61E641388E5692B2EB351E44BA1DB86B5305DD105EE56865D59072CA9407C8AC ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys
15:20:03.0999 0x13fc BasicDisplay - ok
15:20:04.0026 0x13fc [ 25B5BB369DEE2BAE4BF459C978FF9035, DBC2157B2AC0BC92B4011CE5E01F2DCDAAE71E37D9D21102503C6455FAAC4DCA ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys
15:20:04.0095 0x13fc BasicRender - ok
15:20:04.0113 0x13fc [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\WINDOWS\System32\drivers\bcmfn.sys
15:20:04.0149 0x13fc bcmfn - ok
15:20:04.0158 0x13fc [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys
15:20:04.0220 0x13fc bcmfn2 - ok
15:20:04.0242 0x13fc [ F8F398A4AF7E0917320BC2B2CD812888, 02B9A6EA0AA750CA9B62AB09E99956C35E252A12B22C2CBFDC4E941ED5870591 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
15:20:04.0303 0x13fc BDESVC - ok
15:20:04.0312 0x13fc [ 5A88834AEE15D97695FAE0837B73B3E4, 03035FB51DE218B8EDB15129A0376DDED0C7E7B6DA58DD95B12E4E5C8D852ED8 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
15:20:04.0381 0x13fc Beep - ok
15:20:04.0419 0x13fc [ 8EA08141590CB9331FA773FB430E91E4, 0507499EF423CC9EE9AC18C2B5CBF9965E69481C69DC96E361C2184C53C3F404 ] BFE C:\WINDOWS\System32\bfe.dll
15:20:04.0506 0x13fc BFE - ok
15:20:04.0560 0x13fc [ 64582C924C48175D52AED0D0E64AB413, 75DC6BC01D26A4BABEDB8013F0C106780F0991CA63075798C7C24B66022F58E3 ] BITS C:\WINDOWS\System32\qmgr.dll
15:20:04.0668 0x13fc BITS - ok
15:20:04.0696 0x13fc [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
15:20:04.0730 0x13fc Bonjour Service - ok
15:20:04.0745 0x13fc [ DA2C6F7ACE392193C424FEA975C5BFFB, 668F91F3E5F8EA170C10823D6959E0EDB32434C51FAA68BEA782EDDF5618690E ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys
15:20:04.0839 0x13fc bowser - ok
15:20:04.0871 0x13fc [ 62C0D7CD771F26198F76F56B81D8A5B5, 3505DA8B68486D393BF7DCE5F463EA7F88387E6F06BC8175F3514BD6AFE25C37 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
15:20:04.0942 0x13fc BrokerInfrastructure - ok
15:20:04.0957 0x13fc [ DA4C9335434E71D6CC86A3CA567769CC, 9FE5EE3CC91CADBF952446E0A9A79A8834B03C8D4C47D6E9257AF64B2C17F518 ] Browser C:\WINDOWS\System32\browser.dll
15:20:05.0002 0x13fc Browser - ok
15:20:05.0013 0x13fc [ CAEC7BC11AF69A181AF7932E636E09E4, 503C69045F1E025CBEE2405043BB71CC58478985ECAF6587F73FCB57860F5709 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
15:20:05.0066 0x13fc BthAvrcpTg - ok
15:20:05.0077 0x13fc [ 5F2B4B32E986C058525D3BA2A475A16C, CEC5BB0B025DD9525CFBBEDF6EB6F63336534798495A4F95763CE112DF915088 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
15:20:05.0141 0x13fc BthHFEnum - ok
15:20:05.0151 0x13fc [ 5406289E8AE2CB52FC408154E0A64BA7, 0A3795F2E6E2B51198452CF69A99159D8E11650E95F41DF0B575CB72F9C6C6B5 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys
15:20:05.0226 0x13fc bthhfhid - ok
15:20:05.0247 0x13fc [ BAB101E7826BE287F79C4BA721621989, E6DD25C89267FE87253B8226292F2894F5E702075D3B23B09339D3B28744C060 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll
15:20:05.0303 0x13fc BthHFSrv - ok
15:20:05.0315 0x13fc [ A76F20CCCA31895A1DA78A875E50F946, ECD4B3670DA5984AA24F4354457B4E45983938A89FF6DB03B556A633B4B37E3C ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
15:20:05.0411 0x13fc BTHMODEM - ok
15:20:05.0457 0x13fc [ 40811857B266F02D75DE654AE92D98C9, 964A50FA4A6B0D62B9D8135B2FB9D7222216F99230849CD5478278B06ACD9A5B ] BTHPORT C:\WINDOWS\System32\drivers\BTHport.sys
15:20:05.0603 0x13fc BTHPORT - ok
15:20:05.0617 0x13fc [ 7A177E18AA6A6A6365E6351C2BF8EDAE, A35224A20014B1215A6824AE5E17B8869A775EA272EF7F25EAFFA18733F8D09D ] bthserv C:\WINDOWS\system32\bthserv.dll
Code:
ATTFilter 15:20:05.0659 0x13fc bthserv - ok
15:20:05.0670 0x13fc [ F001B81D47CEBF96E60CE971FFCC45C4, EE419B557C52B0F1704B5D58E7FA9A996B33E78CC02EA4CA1D28CAB8CFD77D95 ] BTHUSB C:\WINDOWS\System32\drivers\BTHUSB.sys
15:20:05.0743 0x13fc BTHUSB - ok
15:20:05.0755 0x13fc [ BF89BDBA5D3A0B4256D3F6FC8D31880D, 940F3BF55B88261C9E9A951A092331559FC5B24FE3BA0F1E1AB3450D2CA364C1 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
15:20:05.0818 0x13fc buttonconverter - ok
15:20:05.0832 0x13fc [ C24C27FDF93B85A4EFCF25F830253AA2, 35C87518BB59663B57C2361A13AD4E57E37392598F1EB9F07F86CA5A6321AF5A ] CapImg C:\WINDOWS\System32\drivers\capimg.sys
15:20:05.0958 0x13fc CapImg - ok
15:20:05.0970 0x13fc [ 7F9C7226D743B232907ED2537B8A574F, 2211AFC30E8F8FA03020DB48EE14914CD31E50BB6A63FF20AC7C6FA481E72C18 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys
15:20:06.0055 0x13fc cdfs - ok
15:20:06.0073 0x13fc [ 0A92DC116CFC7F6BE8167DD25CB925CC, 50CAC7BE14FF69B10C029E049F7C441A5572540F027F95F940B185C76C689409 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
15:20:06.0134 0x13fc CDPSvc - ok
15:20:06.0149 0x13fc [ 82D97776BF982AA143BDC7DFB5054EA8, 954F56728371E6B3514586DCEAF15C4727BAED6CAFBF788654C4E03BD702942C ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys
15:20:06.0238 0x13fc cdrom - ok
15:20:06.0255 0x13fc [ 4E9158CECF77A029AB98E8FBB43FCED5, AFF8BDB8F8F8DDF4FC0D65712E031DC360856CD3CE5C8A4C8FF960388F37462F ] CertPropSvc C:\WINDOWS\System32\certprop.dll
15:20:06.0311 0x13fc CertPropSvc - ok
15:20:06.0321 0x13fc [ 0505C1D991D0F9D47F3353BB98597C7E, 3B801CCF4980256327A4A9FBD98007DA1E3ACE9C94E5A4C23AB21303B46E8B5A ] circlass C:\WINDOWS\System32\drivers\circlass.sys
15:20:06.0377 0x13fc circlass - ok
15:20:06.0402 0x13fc [ 8B4B39C507ABA09AAFE8E3932D1B392C, 734700155A658BC08FC96E8F99A01DE7F7251D7DDEFA79D258B2EEB370BA7AA8 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys
15:20:06.0471 0x13fc CLFS - ok
15:20:06.0505 0x13fc [ BE10905777246CA6AA74F48FE9236517, D51B13FB176D82665C91B59B3C6E229CE746E20ED1BB20DADF6184C7A29E69AF ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
15:20:06.0565 0x13fc ClipSVC - ok
15:20:06.0596 0x13fc [ 3E76A1547F2448BCEE3D2F4AE3931AB5, 31B41723FAA4210A86B1AE02D6C052BD8B738C4B89FB0177C1AE997D24BA5B8C ] CLVirtualDrive C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys
15:20:06.0647 0x13fc CLVirtualDrive - ok
15:20:06.0658 0x13fc [ 39F71BF21E7F8EBE9B4810BC95EE26D6, 6134013F918D41A1AA8C814217A272F2C428FA3FE97DB66501FA50A488B0C991 ] clwvd C:\WINDOWS\system32\DRIVERS\clwvd.sys
15:20:06.0706 0x13fc clwvd - ok
15:20:06.0716 0x13fc [ 95832B049E2833B9F5189823CDF946C7, 72773A42A89220B4A6AC72D1633B16F11191A44D876A44FAB5CEFB717CE3223D ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys
15:20:06.0791 0x13fc CmBatt - ok
15:20:06.0825 0x13fc [ 80977779A19947939D680A4899E829EC, 6D510B1EFA39D79D0A8B3CD4F00937A4DDC1411664B001D4ABC546C98345F630 ] CNG C:\WINDOWS\system32\Drivers\cng.sys
15:20:06.0938 0x13fc CNG - ok
15:20:06.0950 0x13fc [ 58D640BC2294C71BDE0953F12D4B432F, 0B3B7659FCB97791A2A1F895C8E6F9078F855C94C13EB47464492588C4B02B85 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
15:20:07.0006 0x13fc cnghwassist - ok
15:20:07.0053 0x13fc [ 14F9883588398A1BDE49C75098C75DE6, D9D82DE89FAFE60BC902683BC44C7555533A030150FD5E5A35A24542FACC5CAD ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys
15:20:07.0104 0x13fc CompositeBus - ok
15:20:07.0112 0x13fc COMSysApp - ok
15:20:07.0125 0x13fc [ 02B8E49148DE5E0A2F6FDF28CE94A6AC, EEA405823F441CA604BEAA44EB71A1D20BC80E124FF7B27380D0201AAF2E0849 ] condrv C:\WINDOWS\system32\drivers\condrv.sys
15:20:07.0171 0x13fc condrv - ok
15:20:07.0208 0x13fc [ DE6DF2C34718EADCFF8776E597F2104D, 35D03E95853CEAC69F674FB09C819A4698EBEDFD8AC0474F0ADF02741492401E ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
15:20:07.0276 0x13fc CoreMessagingRegistrar - ok
15:20:07.0339 0x13fc [ BB812787B838A74943DEF209350C3883, 2C168F48A68644AA3CB6167BEC2A260E3E9C78D0766A15AA0FAA39CDBD7FA040 ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
15:20:07.0382 0x13fc cphs - ok
15:20:07.0403 0x13fc [ 2CE0D74AED86A372997E9D77AE10B9F5, 1AFAA22C68FD0B81F73CE0EB763AD77AB97E78916752843A5056E1352F0FEA82 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll
15:20:07.0448 0x13fc CryptSvc - ok
15:20:07.0466 0x13fc [ 9FF6436D65CD8C798691373E28FBFB3B, 7A9ACD14679FB82E71EF4C47E43DAD931EC4FD727A5656AF8A3CC3B95D67EB5B ] CyberLink PowerDVD 10 MS Monitor Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
15:20:07.0488 0x13fc CyberLink PowerDVD 10 MS Monitor Service - ok
15:20:07.0507 0x13fc [ 06B5C625CB915E9A7A1F08A43E332FA1, 66F0BFE088B44ED3D36E62DC05200CD09F135FF63C447846C603D6246FABB9BE ] CyberLink PowerDVD 10 MS Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
15:20:07.0541 0x13fc CyberLink PowerDVD 10 MS Service - ok
15:20:07.0554 0x13fc [ 2619DC483579DB9FE804044C1ADFFD1A, 23A5420288735A980917091532BE7BB36EB51660AA4555C615AF736357EB02EC ] dam C:\WINDOWS\system32\drivers\dam.sys
15:20:07.0603 0x13fc dam - ok
15:20:07.0652 0x13fc [ B339861C6A2A86FBCA67C2006B461473, 228ADC8A8603C0A4342C6CBC6F2CC919271D42391365061AF660E0D7151C66A4 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
15:20:07.0774 0x13fc DcomLaunch - ok
15:20:07.0794 0x13fc [ 620921E77351FB651632322AD2C195C4, 5A98971995D7A2B5AE6BEA69344FCC6687B582FEF74BDA206D32FB2E6CEB0478 ] DcpSvc C:\WINDOWS\system32\dcpsvc.dll
15:20:07.0859 0x13fc DcpSvc - ok
15:20:07.0888 0x13fc [ 6129EA4294C5C69E4665801E95B16AB2, CE419186CF0F57434426FF925A09F13BE87639679CBB5F2074B0E1A243349D27 ] defragsvc C:\WINDOWS\System32\defragsvc.dll
15:20:07.0968 0x13fc defragsvc - ok
15:20:07.0996 0x13fc [ D12B9B6A6C4885824876422AACC89954, 5853ED5CAF84B7AAFF3EDC5C71FE23EB121DB681D81267D77118424BA9AB6F88 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
15:20:08.0061 0x13fc DeviceAssociationService - ok
15:20:08.0074 0x13fc [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll
15:20:08.0133 0x13fc DeviceInstall - ok
15:20:08.0143 0x13fc [ 5BF8BD9B19D665452494C8D56DF4B28D, E5FC649207EF42C04B6737D442FECD3383E82F8998B140319FF400773F1D0978 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
15:20:08.0182 0x13fc DevQueryBroker - ok
15:20:08.0196 0x13fc [ C9478D7DB7BE5D7ACE65CB1167F07320, D5082D09EE62E34A195768040B741E22ACC9421CFF315423D77A63ABF8F5E39E ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys
15:20:08.0255 0x13fc Dfsc - ok
15:20:08.0278 0x13fc [ 5841A361D28069DFC82E1E98040FDC3F, 3A48DB7ADE90654242CB54DAD07F5FF0CD5CABF372C50D5B2C4D7AED068986E1 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll
15:20:08.0340 0x13fc Dhcp - ok
15:20:08.0352 0x13fc [ 9F5AC03F5A0000DD96FA29CD68A6605B, 6964E077635E65DA902CA6C69E704A9DCD5856D22BA75E1CF823E63E62266AF7 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
15:20:08.0391 0x13fc diagnosticshub.standardcollector.service - ok
15:20:08.0468 0x13fc [ 7AE76C7BC60B53999AD07F6A8AFF15C0, 8DC5DA1FAE508D03433C051C877657038BA346707D37FDBC2FE74B4C1F3509A0 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll
15:20:08.0578 0x13fc DiagTrack - ok
15:20:08.0609 0x13fc [ 68BFCCC1EC25F0F942EA32AD9D67A131, CF19DA2816262D9D532249970581E55DF595A5FD0ABE44C5124A40F42A9B28B4 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
15:20:08.0642 0x13fc DigitalWave.Update.Service - ok
15:20:08.0656 0x13fc [ 4904B152E4942BF700F2D73228B4D477, 0E5646DCA05A24C71F057C9F9F64AE992D338DA72DF3126175C2FA178854C30F ] disk C:\WINDOWS\system32\drivers\disk.sys
15:20:08.0711 0x13fc disk - ok
15:20:08.0731 0x13fc [ 49F069E2D22F33955A69D44DFD1B5179, 739C52C7B961BA683E8C7CCDB0E95423C17561B2F1F506BAE923DC53DB96B067 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
15:20:08.0797 0x13fc DmEnrollmentSvc - ok
15:20:08.0809 0x13fc [ 0197AE4B9790A4E73751CACFAA480126, 86BBB398F1A93754B2C329271F13A88FD2F285F30225C38F068F565CCA14EB9F ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys
15:20:08.0865 0x13fc dmvsc - ok
15:20:08.0876 0x13fc [ 5EF8EC71A7A91F3DF7798BEFE6786B0E, A3A56B43C72926881C66B7A17C9EAA35C2D9603C8D3849438838536BCD3F4633 ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
15:20:08.0921 0x13fc dmwappushservice - ok
15:20:08.0941 0x13fc [ 570BB222E3AFC4407636B53F6EABFA70, D0194A128370BB0A337B61402F9EEDD6F7942ADB19BF672D0F92DA2DA563D0DD ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
15:20:08.0999 0x13fc Dnscache - ok
15:20:09.0023 0x13fc [ 1B15297A3A2CAB6BD586676154F389D8, 623D5F5FC8622B7D9AEEEB1787E6846C1570F0EEF94341239440B616D09D672A ] dot3svc C:\WINDOWS\System32\dot3svc.dll
15:20:09.0081 0x13fc dot3svc - ok
15:20:09.0096 0x13fc [ 316C2D8B8E3C0727969F1C3790EF7193, 631F8578FDB26578C8436E4B9C4DF21E1F58FCFE6DA66E5769AAC3739005D465 ] DPS C:\WINDOWS\system32\dps.dll
15:20:09.0169 0x13fc DPS - ok
15:20:09.0179 0x13fc [ 25FA06D3B49D6ADF8E874FFCDCD76B50, 9AF09B96ED79D94EA36581ABE6CC73313A72891779774B15860D018BEA2BBA0F ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys
15:20:09.0240 0x13fc drmkaud - ok
15:20:09.0255 0x13fc [ 16EE6701115BECF8C657D9D6E123F6A1, 16E115B5245C3C988F8B58B90D30F183021C7C7792D3D1C74BEC606E49672B2A ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
15:20:09.0306 0x13fc DsmSvc - ok
15:20:09.0321 0x13fc [ 120BECF7452992DAEBD3878BFE5B2412, A1FE8FC039835A5B59ABD789F5C1BFEA2C091A29978CE386C9880E13178930E5 ] DsSvc C:\WINDOWS\System32\DsSvc.dll
15:20:09.0368 0x13fc DsSvc - ok
15:20:09.0451 0x13fc [ A2512BC5F2ABD84D8B3CB0D76ADB749A, 14A1FBF606ED537B9E1B7A939C010A2BA9D609D147FB89AE52D116E59A21D99E ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys
15:20:09.0660 0x13fc DXGKrnl - ok
15:20:09.0678 0x13fc [ 0CDF6B61D7F7FFCD195AF0113B9B2C16, 828D3FA31742B54075EAED2E67BBB5166D2EF4F84B791077E96DC0BD5557F11E ] Eaphost C:\WINDOWS\System32\eapsvc.dll
15:20:09.0726 0x13fc Eaphost - ok
15:20:09.0749 0x13fc [ 04A83E99978F4BBB063074FF99D9E5D6, 0FAAFBD958D5A563EC9656F875B6ABE7B320EA85A92C062FE934E8EDFE38135F ] EaseUS Agent C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
15:20:09.0767 0x13fc EaseUS Agent - ok
15:20:09.0918 0x13fc [ 491275B864B704B54EC08168344E0F38, B4849400C3F819CF7809A2001EA2ECB527022483F7DFE31C3930F951EAFE50CE ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys
15:20:10.0230 0x13fc ebdrv - ok
15:20:10.0251 0x13fc [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] EFS C:\WINDOWS\System32\lsass.exe
15:20:10.0286 0x13fc EFS - ok
15:20:10.0298 0x13fc [ CEF108FCE06892CFA5F1B49527D4BF49, FA337584024B6E6EE4AF519F57FFA4C0FCA19EDC148FF309336C4CCA8F9C9CE8 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys
15:20:10.0365 0x13fc EhStorClass - ok
15:20:10.0378 0x13fc [ 5B1EAAE3001A7A320C106FC3859F4111, 700BA2C7D4DFAFFEB78D3804B310A4EE5B4295C84600442665693FF661673951 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
15:20:10.0436 0x13fc EhStorTcgDrv - ok
15:20:10.0450 0x13fc [ E34DEFC09F2843C2C24C2248F1ABE6D8, 1FD67EB5820A1D2F4402DE9D95DE288DB69D421A8473074FF23491D7CA8B5ACE ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
15:20:10.0495 0x13fc embeddedmode - ok
15:20:10.0516 0x13fc [ 062152DD5B225518A991DFCD8536770C, 5C8EF4E0C7DE3B24387FF239A8D0CDA39C2376826F16EAFF09739A6C7EDA01E0 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
15:20:10.0574 0x13fc EntAppSvc - ok
15:20:10.0585 0x13fc [ 1B677389760689A11241884C700B48E0, 75EC4D16F3F6004D2697AE25E029B95D8B9611911039777B781C5707DA6048C6 ] epmntdrv C:\Windows\system32\epmntdrv.sys
15:20:10.0649 0x13fc epmntdrv - ok
15:20:10.0659 0x13fc [ 7A2705148A4BB3CA255F81624338B461, 68AC8F8D2DD8AA4E8F2224A0054DE2AF67EA199217E87CD3C7299B021048F14F ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys
15:20:10.0713 0x13fc ErrDev - ok
15:20:10.0729 0x13fc [ E47A0ECA90AF393983EF30E458606BB5, 1EB07711968ADBAB63A993FC54795DAAA9514F6E58FDED9EE9CA2DA3CCD620E1 ] EUBAKUP C:\WINDOWS\system32\drivers\eubakup.sys
15:20:10.0789 0x13fc EUBAKUP - ok
15:20:10.0800 0x13fc [ 17696B5ACDBDFFC7D26C4B56BF132AD5, 3D2499FE2406300357B746AF82F69CBF1A1039B1F2DD755018F2185FDE26EA7E ] EUBKMON C:\WINDOWS\system32\drivers\EUBKMON.sys
15:20:10.0837 0x13fc EUBKMON - ok
15:20:10.0846 0x13fc [ FCFD172899D0A026E5BD29F4775BFA76, CC651EAA870D9107B9FAC84B2FA2B8F166C5CA8FBDA803AFBDE07F523FA8C667 ] EUDSKACS C:\Windows\system32\drivers\eudskacs.sys
15:20:10.0896 0x13fc EUDSKACS - ok
15:20:10.0912 0x13fc [ 1D866B50C9B1BA3FE90CC81E0DBC0E15, 07606693CA155EC3BA2FEF6B1C70263AD0F6C2935E1C99572BB2152260F33E28 ] EUFDDISK C:\Windows\system32\drivers\EuFdDisk.sys
15:20:10.0954 0x13fc EUFDDISK - ok
15:20:10.0963 0x13fc [ 08C997734B2CECE882656BB2855E6E76, B3C1DEF26C9C9123D34395717220B450C705B5FA9FC8E321ADC444A4D63E6F36 ] EuGdiDrv C:\Windows\system32\EuGdiDrv.sys
15:20:10.0999 0x13fc EuGdiDrv - ok
15:20:11.0030 0x13fc [ 17BE4A35829B37C742084DC02D48E5F0, 7FDA62B56DF585C3F2C6FFB10AC7C0D8F70FA921C4DEA47B2789745CFE2618CE ] EventSystem C:\WINDOWS\system32\es.dll
15:20:11.0095 0x13fc EventSystem - ok
15:20:11.0117 0x13fc [ DFE8A33FBCF6F38182631A4D6097B92D, F9D06780830E74FD5309E6DC5C3EEDB9334A8AE284F381FA91EF2729297F8632 ] exfat C:\WINDOWS\system32\drivers\exfat.sys
15:20:11.0217 0x13fc exfat - ok
15:20:11.0241 0x13fc [ 03DE0EC072C5EBD5B018CAD83F1E522A, 9D0B30A2870FBA20B95017CE3A4205F2DD53FE169A0D16715E962D83DE040FB3 ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys
15:20:11.0342 0x13fc fastfat - ok
15:20:11.0376 0x13fc [ 952F10D2116B91BA433842D07879AE7A, 9E1EC0C719877EF198AA4DDBE896E9DDEAD360AAC1FC6DF305E7C5C73C7A761D ] Fax C:\WINDOWS\system32\fxssvc.exe
15:20:11.0454 0x13fc Fax - ok
15:20:11.0465 0x13fc [ 9D299AE86D671488926126A84DF77BFD, C076EEDD0524B7D88BC56C97089E0A836CC1AD725E1A544CC4F8DDBB6670C366 ] fdc C:\WINDOWS\System32\drivers\fdc.sys
15:20:11.0549 0x13fc fdc - ok
15:20:11.0559 0x13fc [ 47D09B8C312658ACE433E46DDF51C3A5, E76948DA0F51C7DC6D69B7E36D63CE6E98FDE619FA30E91637F75B5084107D22 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
15:20:11.0605 0x13fc fdPHost - ok
15:20:11.0614 0x13fc [ 177AC945B20C81400A1525ED7B49A425, FD215A2E718EA38A95D985F53AB3DD44B50C2549AA67F44BA98C4709E492051F ] FDResPub C:\WINDOWS\system32\fdrespub.dll
15:20:11.0662 0x13fc FDResPub - ok
15:20:11.0675 0x13fc [ 3E78BEC276DA5A062E4D55F3291B3463, 62983457F506C70D1F89F527AB61C1C0F4D1B002631256A2708F9AF092A8C95E ] fhsvc C:\WINDOWS\system32\fhsvc.dll
15:20:11.0726 0x13fc fhsvc - ok
15:20:11.0739 0x13fc [ 8F12AB59336143B680F71B217B495AD2, A28F62F065C68CC1A7EEF0CA52F83C3284B001565D8E154BF8568DE4A525104E ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
15:20:11.0826 0x13fc FileCrypt - ok
15:20:11.0839 0x13fc [ 92ECCFA58C8195B8EA33ED942469D4E6, 8DB12E8CF80ECA22182F9A1F4CA922336A430297F1F596F204ECF4D9D19F30D9 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys
15:20:11.0886 0x13fc FileInfo - ok
15:20:11.0895 0x13fc [ 87C51FDD50C17882BA93E28BBABB9847, 8987D80FB77D1D3F9E89B491B1287B027DA26FFC4E4BA7B01E07D4D4FC69E236 ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys
15:20:11.0979 0x13fc Filetrace - ok
15:20:11.0991 0x13fc [ E99261DD76D1C9E05AF575939CAE5AC5, A789724FD2E22AFB2F921836F5C19A21D17F4BBD604771E2908C2651BD31989C ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys
15:20:12.0046 0x13fc flpydisk - ok
15:20:12.0068 0x13fc [ 25D7A58625E1453E40D36825DE74E4F1, 74119803D35E3C3CC349B44C6CD9EDF6B797F88584B847F0BF9EED542719B86B ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
15:20:12.0145 0x13fc FltMgr - ok
15:20:12.0217 0x13fc [ 4387DE200BF8DD0E2EE828E655434B9A, 9148D65E54663EEC139E754091F47ABF439A637BEA83F600D30736522DAA845D ] FontCache C:\WINDOWS\system32\FntCache.dll
15:20:12.0363 0x13fc FontCache - ok
15:20:12.0378 0x13fc [ E79DAC43A5E191FC4DDB04197A704BFA, 2FA6C8B5B2DFE66C05828E3F55DFD6268A8210E9BD083F2D09367AD59AF1C6C1 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:20:12.0410 0x13fc FontCache3.0.0.0 - ok
15:20:12.0421 0x13fc [ B4175E8BE60B099686FF55CA7D692316, 3158FC5B4D1A2F1FC1346754392AE24AE58999B9061B1CE78A65E785BFFADD52 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys
15:20:12.0466 0x13fc FsDepends - ok
15:20:12.0476 0x13fc [ CC71372CEB811A72F1DC99089C5CBF53, BB9DDE74D60E534A6F8A51B63DDBB441245F06A00A0AFD37DBBE86255690946D ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
15:20:12.0520 0x13fc Fs_Rec - ok
15:20:12.0552 0x13fc [ 421497634C86EF4B8F86D0EBC076728F, E0D1449555D8849364E00AA747DBC820EF914A9F5B796E35070072FCBC532ADE ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys
15:20:12.0641 0x13fc fvevol - ok
15:20:12.0654 0x13fc [ B9981A4CB9F728B3312A3885BFAA7204, 12FB2EB2E5D2A912769823DD9C1B33DB358CD0B7FBFC788529EF83DD584334F8 ] gagp30kx C:\WINDOWS\system32\drivers\gagp30kx.sys
15:20:12.0728 0x13fc gagp30kx - ok
15:20:12.0738 0x13fc [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
15:20:12.0790 0x13fc GEARAspiWDM - ok
15:20:12.0800 0x13fc [ 77555B11B264991DDC26872FFCF1AB97, D5F230EEF74EB869F771F8A4AB19C1E6C845BB0EF4A1234882EBDA4FDC431E44 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
15:20:12.0852 0x13fc gencounter - ok
15:20:12.0863 0x13fc [ F3AC9652D88BF87BA6596CBEA28CE10F, 115F3C0A5B9903B17ADEA80E1825FE927B7361F5BDDF80CE3685EF2D327EDF4F ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys
15:20:12.0917 0x13fc genericusbfn - ok
15:20:12.0939 0x13fc [ BE50C7FD9C390FA277516B166D16725F, F4295AABDEA348C182C9D690427BB8FC99F4F6CE16E29C310079B8C70DED9A21 ] GladFileMonSvc C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
15:20:12.0960 0x13fc GladFileMonSvc - ok
15:20:12.0979 0x13fc [ F802FBABF0C4DF1BAA733187B2E476F5, E2533284CEBBB872196B013DD1FBBCA794DB1CAAA37D64849BD9264ECDD2CEE6 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys
15:20:13.0039 0x13fc GPIOClx0101 - ok
15:20:13.0100 0x13fc [ B55458A83395A2CFD4E745E9EC4AB5F2, EAB06B089D8A7DBC9AE2A1C919B489911690D341013A5F8F906819C68431CA85 ] gpsvc C:\WINDOWS\System32\gpsvc.dll
15:20:13.0237 0x13fc gpsvc - ok
15:20:13.0251 0x13fc [ D011B0ADB15F4815310CE1BF4780B33E, 3860630917F83A89FE7A6407CC544505FA4BD754619CF273DD630ABFBAAE42EE ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
15:20:13.0348 0x13fc GpuEnergyDrv - ok
15:20:13.0362 0x13fc [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:20:13.0386 0x13fc gupdate - ok
15:20:13.0398 0x13fc [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:20:13.0422 0x13fc gupdatem - ok
15:20:13.0433 0x13fc [ 84BC034B6BB763733C1949B7B9BAF976, 18C2C0F15BAFA46197F0BB629C4F585D893C2A78324CA198F88A04527D524F23 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys
15:20:13.0489 0x13fc HDAudBus - ok
15:20:13.0499 0x13fc [ 6B8CB114B8E64C0636EB49F7B914D1FC, 1AD7A43CC5CD99DCEF60C61242B6843D4AD925CE93BA5D75CD8395C7125EF5A7 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys
15:20:13.0549 0x13fc HidBatt - ok
15:20:13.0562 0x13fc [ D1AD197CCDAAC0CB4819DA1D6EB17BAE, C370F974D0A1F7B60F47EAFF57B6CCABE82913187F8BFEE169B8237AE91247B1 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
15:20:13.0619 0x13fc HidBth - ok
15:20:13.0631 0x13fc [ 64909DECCFCC6FB5D9A5BAFDCCB31FEE, E19C91FD8D5102A8C4F6C6FF70CA058BB272FEC1B6E9CBA3A473C49948E6AC7E ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys
15:20:13.0698 0x13fc hidi2c - ok
15:20:13.0709 0x13fc [ F510F7B7BF61DEAAC04E65C3B65E8D59, 11566086B06FB08B6A179E3068E022DA381C762DC8962D1E1D63DC646DD4D301 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys
15:20:13.0763 0x13fc hidinterrupt - ok
15:20:13.0773 0x13fc [ 90F3ED42D423C942BA5EA54E2FFE7AC7, BF7DE0C8141CD20A6235657BA897A019ABEFF6A01AA3FB202C73C33433CDEAF8 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
15:20:13.0825 0x13fc HidIr - ok
15:20:13.0836 0x13fc [ 46DE2EF6382DD9613CB506760648F262, 419555220794380134A64E1956B83B2FD1D1B6E403C5FC729A9107E14A12E968 ] hidserv C:\WINDOWS\system32\hidserv.dll
15:20:13.0891 0x13fc hidserv - ok
15:20:13.0901 0x13fc [ 128DEDDD61915DBA4D451D91D21F0513, 961A0DDA02B0879989300C15E4FF9022882A4CD895D65335C263AC0DD1918314 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys
15:20:13.0952 0x13fc HidUsb - ok
15:20:13.0972 0x13fc [ 2FEF4D90C0CAED258C93CFF72A8FFD71, 56473D90E9FE52849067D080FD88B29C0BBE76E5266657E2ABD6366B7A4E9474 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
15:20:14.0029 0x13fc HomeGroupListener - ok
15:20:14.0055 0x13fc [ E2145534FB853921788F52701BED0CAB, DF71F842772FAC21DD8994C97F578A78AC43D06C5F26F752FB69B47DFE3BB112 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
15:20:14.0123 0x13fc HomeGroupProvider - ok
15:20:14.0136 0x13fc [ FF442DCDCE1F6E9FAA9C8AD0CD1D199B, A239414E97B310C9545995B0E723B5E792B08D71F651450EB006AD4D1765E4F7 ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys
15:20:14.0219 0x13fc HpSAMD - ok
15:20:14.0233 0x13fc [ 5C8BC8A28798FD010E7ABC4E0D588CAA, 622CAFD3DCBB05E15539589FDD4002DA6F24790FC55BDF05AA3D043E8A34E53E ] HTCMonitorService C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
15:20:14.0254 0x13fc HTCMonitorService - ok
15:20:14.0265 0x13fc [ B8B1B284362E1D8135112573395D5DA5, 97BC6A7B2DCD7CC854B912A85BB2FCF199592E8E16A7C405EAF89B02D5DE4AEE ] htcnprot C:\WINDOWS\system32\DRIVERS\htcnprot.sys
15:20:14.0303 0x13fc htcnprot - ok
15:20:14.0316 0x13fc [ 7C7C986776D00E575BFBDE5DCBDC615D, 4CF12851A5A45917C3A9139B19D79434F2038611B617F83A714506CC7A1A6C61 ] HtcVCom32 C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys
15:20:14.0402 0x13fc HtcVCom32 - ok
15:20:14.0452 0x13fc [ A403DAE4B083EB96BC6CEDB47639B4F8, 6F5709CEA93789C075E4BE4041EC43C94910617DA4123DEE178E74E4A9B26708 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys
15:20:14.0570 0x13fc HTTP - ok
15:20:14.0572 0x13fc Object required for P2P: [ A403DAE4B083EB96BC6CEDB47639B4F8 ] HTTP
15:20:17.0688 0x13fc Object send P2P result: true
15:20:17.0699 0x13fc [ CBA5E88A0F0475B7F49653BB72150BEF, 0F03560D9C30E069D117A555AEE729C81E6BCAE443FA25172D0E9E6903695C67 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys
15:20:17.0753 0x13fc hwpolicy - ok
15:20:17.0762 0x13fc [ D668FAB4B0397B426EE3D41683B9A1C0, 66F3E3B2ABC3C9B25A0DADBF09818547ED301230374AC5302B4794629A95DDF8 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys
15:20:17.0821 0x13fc hyperkbd - ok
15:20:17.0833 0x13fc [ 53FDD9E69189E546DE4740F8C4D8AB2F, 45ED5B229ED5FD0CEE8BF52EFF88FD8B1889BF348ED7187926F290B3AD48A76D ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys
15:20:17.0897 0x13fc i8042prt - ok
15:20:17.0910 0x13fc [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys
15:20:17.0964 0x13fc iai2c - ok
15:20:17.0965 0x13fc Object required for P2P: [ 9A2A2F3C69B9A30B6E78536F6D258BAD ] iai2c
15:20:20.0462 0x13fc Object send P2P result: true
15:20:20.0477 0x13fc [ 59A20F5AD9F4AE54098154359519408E, E27B7389C9D123CDDA4EC9CBDB06C4AA5000012391F940EE1492419B593608FE ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
15:20:20.0535 0x13fc iaLPSS2i_I2C - ok
15:20:20.0535 0x13fc Object required for P2P: [ 59A20F5AD9F4AE54098154359519408E ] iaLPSS2i_I2C
15:20:23.0015 0x13fc Object send P2P result: true
15:20:23.0025 0x13fc [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
15:20:23.0073 0x13fc iaLPSSi_GPIO - ok
15:20:23.0085 0x13fc [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
15:20:23.0128 0x13fc iaLPSSi_I2C - ok
15:20:23.0160 0x13fc [ 6B0029A0253098CCE28EACCFDB9E7208, E33AD69644E1683A971DA1169B704FBCFD9F715E9550816058E420BB5DE4D946 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys
15:20:23.0253 0x13fc iaStorAV - ok
15:20:23.0280 0x13fc [ 9652E1E35A92D8C75710C17A63B15796, 72F8C4A49B874226DEE9B7C9704F0E0A98DAA2DF4EAE2F2258E8324ACBD242E4 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys
15:20:23.0383 0x13fc iaStorV - ok
15:20:23.0410 0x13fc [ FFADF691F7BF727AF5C863454A372723, FCF5A5595E8C9C937BE9F1C3AB5D9BD0EFE82DE1298D12085E0CCD84A186D2F2 ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys
15:20:23.0492 0x13fc ibbus - ok
15:20:23.0508 0x13fc [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
15:20:23.0535 0x13fc ICCS - ok
15:20:23.0549 0x13fc [ 80BF2990E01E774D64F6E13F30661942, ADFEA2280D29F2C7B0A556C61709301D6327C288064FF5A4D29358403DF41DCE ] icssvc C:\WINDOWS\System32\tetheringservice.dll
15:20:23.0626 0x13fc icssvc - ok
15:20:23.0635 0x13fc IEEtwCollectorService - ok
15:20:23.0793 0x13fc [ CEFA6BDB4789F3DA003ACBDCC64F5877, 0FE78AEFA9A75B4A99AD6B73AC3252E4C6DFA9D306FEC02D26C1FD574108BFBA ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
15:20:23.0987 0x13fc igfx - ok
15:20:24.0023 0x13fc [ 75909533EECD0CD9D5974B59474AA6C0, F81D0F949F1F01D09C91735C79288395B82C27B8FB78804752E5A678D7EF3860 ] igfxCUIService1.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
15:20:24.0061 0x13fc igfxCUIService1.0.0.0 - ok
15:20:24.0120 0x13fc [ 12F8D27ED8623DDDC09A549EDADCBAC9, D3A3F0588D9CAF1027D8BC14601E2A6AB7E5924A2C23C90D38A9E14538DB02A9 ] IKEEXT C:\WINDOWS\System32\ikeext.dll
15:20:24.0218 0x13fc IKEEXT - ok
15:20:24.0239 0x13fc [ B1F193AB8FB72E9FC34B3A39314ED872, 408E98D9C8ABB928090DD9E5D1BB227EFBC997BF168437BAEF0461EB0D1DAE3D ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
15:20:24.0307 0x13fc intaud_WaveExtensible - ok
15:20:24.0479 0x13fc [ F45DDE64E87418F62BA75EFDB776F9B5, BE981697E58F4268DDBC0A2439EC182309EEA71897F6ECEB15BC767B9B7DE572 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
15:20:24.0760 0x13fc IntcAzAudAddService - ok
15:20:24.0795 0x13fc [ 87871AB7AC797F922A6F3D4C874CED96, 2BCD89911E42827CD294DD7D1486A7845D1F98019E51958E0F488384401B2944 ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
15:20:24.0836 0x13fc IntcDAud - ok
15:20:24.0876 0x13fc [ 768DD5CB66952BC4A3BD474757AEE34F, 5A1F91FC8028D84FD83591D60CB7E3B24425C3B0FFF5A9BB0F7CE2E17AAB92D4 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
15:20:24.0937 0x13fc Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
15:20:24.0937 0x13fc Detect skipped due to KSN trusted
15:20:24.0937 0x13fc Intel(R) Capability Licensing Service Interface - ok
15:20:24.0975 0x13fc [ 7C9ED65324CF268ACBA8024257F782D8, 1DC43DBA3612E26454D7786DEB0538B44A736B67EC99642B4CC574D8A03E0DC7 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
15:20:25.0032 0x13fc Intel(R) Capability Licensing Service TCP IP Interface - ok
15:20:25.0047 0x13fc [ ECDB27420D3A98424666904525A8562A, BDA98C3C95F2AD79945EF8213D5C65064052C09C82DD36F0D6724E1D21DCC30A ] intelide C:\WINDOWS\system32\drivers\intelide.sys
15:20:25.0094 0x13fc intelide - ok
15:20:25.0104 0x13fc [ 8FF1978643EFD219C5BA49690191D701, 6FD78A8490107C80090D7125644B8C910855374BE1373D1D6B199307C79680BA ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
15:20:25.0167 0x13fc intelpep - ok
15:20:25.0180 0x13fc [ B61B60F36E1C8022FA8166ABF0F66B07, 23161F1DA51D44D936329E62DF4C2DAEE3DDD4B3D62CC501A888C0E149788968 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys
15:20:25.0292 0x13fc intelppm - ok
15:20:25.0302 0x13fc [ CA0D42029AFFC4514D295E1EF823D02D, F2A05CB2B2E8C843FD02DC37E86F23CF928A4B2F9044424A60DE4E82B87DF5C3 ] IoQos C:\WINDOWS\system32\drivers\ioqos.sys
15:20:25.0369 0x13fc IoQos - ok
15:20:25.0381 0x13fc [ 6E3F9D95235DFC9417384080A216F310, 6F13D72661038A91CFABB360621F4B169D78955C3EAD64956A7C825ABAEC5121 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:20:25.0454 0x13fc IpFilterDriver - ok
15:20:25.0498 0x13fc [ 6E75B731A8A7EFED0821327B08DAB46D, A77B746447824BD3C68B82D7329B82D62098B2409F8AEE4738FA23CB1561E629 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
15:20:25.0616 0x13fc iphlpsvc - ok
15:20:25.0630 0x13fc [ 4F527ECB5EAB47D8EAF34A469666C469, 8FFBEEF42515B6A7758BE579ED69E3911856CBF7710D9785011332C5E3DFE495 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys
15:20:25.0688 0x13fc IPMIDRV - ok
15:20:25.0702 0x13fc [ 9E5E8F2A1996F23B7E9687846AA81B01, 29E59384A4F92B3B4F2974942C91A12380113C13D3800900B5F44E2355D05455 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
15:20:25.0763 0x13fc IPNAT - ok
15:20:25.0795 0x13fc [ BD713ED20CFD71C32C4BE1928423AE9A, E0EE95FEA3930EA335D9B1FF74EEFAA61ECEC89AEBB1D0E43A1E1088F9990273 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
15:20:25.0840 0x13fc iPod Service - ok
15:20:25.0850 0x13fc [ C317EB660138BC9CBFE37CCDE56351AE, F3AF6C573419D7F65C96A4841D4F056CA281CD5AFACDC7A5F586A390DC6E615B ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
15:20:25.0904 0x13fc IRENUM - ok
15:20:25.0913 0x13fc [ 531994A6D9399D9B74BE12B5BB58A81E, 6D5CF540C777F4828E1D4C5FE58EE41E6C2F5F399C554DC85F19D1E52229B094 ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys
15:20:25.0998 0x13fc isapnp - ok
15:20:26.0018 0x13fc [ 68D5354A4A9692EEC24664C60F47D4A2, 92124E98B6E286B6127DC6D0BFACC9C6D293D58EAE2B47B45532714CE6A6D0CD ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys
15:20:26.0079 0x13fc iScsiPrt - ok
15:20:26.0089 0x13fc [ DD1F43B86AD84E53203F92FD3EF3AEB6, 9DE2BA80B315E56DF2E74EAA65F4ECB8324DFC19E30EB56EDDF08340AB100E87 ] iwdbus C:\WINDOWS\System32\drivers\iwdbus.sys
15:20:26.0158 0x13fc iwdbus - ok
15:20:26.0169 0x13fc [ 701D7DB13B0815E7076EF4CB4CE981F8, 02585661656C0069AC318B82DE83DAC660451A0B970FDBCA0F7A8B4CBF7D93A9 ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys
15:20:26.0217 0x13fc kbdclass - ok
15:20:26.0227 0x13fc [ 884EBBDDBF5968003B40185BD96FF0E6, E3934D0FF0BEDDF5526AF529F7D15BA8BE479383894975B1AF1A1818C394A6E3 ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys
15:20:26.0304 0x13fc kbdhid - ok
15:20:26.0314 0x13fc [ 6B3A0C7902811E6372643447E41F7048, 30667B56A306CFD5D15BC46F8E7D9E167612E71B6C8F554406E706A6330F5B94 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys
15:20:26.0365 0x13fc kdnic - ok
15:20:26.0376 0x13fc [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] KeyIso C:\WINDOWS\system32\lsass.exe
15:20:26.0409 0x13fc KeyIso - ok
15:20:26.0423 0x13fc [ 982C795DE20CED7AEDD2E7899B5D9BC1, 9F4E7536DB253CD83AA2AB89E9F3311714CD70F13AFD16F9B4D4CD86A70FC164 ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys
15:20:26.0480 0x13fc KSecDD - ok
15:20:26.0495 0x13fc [ 7D8B9214692C4D0F1646215D9984E19A, DC73503A8CA67F4E167DEA69AADDEA5F2D756E1C1F4FF42B6ECEA7E637BB80AB ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys
15:20:26.0558 0x13fc KSecPkg - ok
15:20:26.0567 0x13fc [ E9BB0023D730701BB5D9839B44F5E6B5, 19D4BAC09424D331922472CFD2D0E32BEFA9188A6AF194C8D1F93FD77CE36691 ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys
15:20:26.0619 0x13fc ksthunk - ok
15:20:26.0642 0x13fc [ 71DE1AD9B23661EEC4F2A6EAA5A7D33D, 3219AEF3D6AE5933AE669FD2ED9ED95A8780612E39F31DB3DB9ED6B6244C5F7B ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
15:20:26.0706 0x13fc KtmRm - ok
15:20:26.0725 0x13fc [ 8BBB2B4429AF340481520C20C17FC5B6, 9E32815349195FC4B1BE213600FD407F2EAEEC8368289EB3E6B769125A739C08 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll
15:20:26.0786 0x13fc LanmanServer - ok
15:20:26.0805 0x13fc [ 1F5D48B1DA1B812BD2411CA44D75DD32, D1BDB8142CB13E8C6DD6F42E07C9D19BBBF6410D5122A04C01B34B95B442DD95 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
15:20:26.0866 0x13fc LanmanWorkstation - ok
15:20:26.0913 0x13fc [ AA97872166AB4201540FB92C0BD6683F, 20AEB2BD7AE35167902B8FDACE060756E0952EBADC795A5E82AF7E2CDDE9DFFE ] Lexware_Update_Service C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
15:20:26.0934 0x13fc Lexware_Update_Service - ok
15:20:26.0935 0x13fc Object required for P2P: [ AA97872166AB4201540FB92C0BD6683F ] Lexware_Update_Service
15:20:29.0425 0x13fc Object send P2P result: true
15:20:29.0435 0x13fc [ 02C54C5C7EBE371EC0C59795ED22213F, 712AFE0EDF40436124F3FD55ED9B5A3A33A8761A58F4D482BB65229741B1C270 ] lfsvc C:\WINDOWS\System32\lfsvc.dll
15:20:29.0477 0x13fc lfsvc - ok
15:20:29.0487 0x13fc [ 01BF128CC327A2E53898F732AF52B3DB, D62ACDA69D9942F9CEF400874DBB6EAF9811D9657CBFEF89174F88D76BB8D8EA ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
15:20:29.0530 0x13fc LicenseManager - ok
15:20:29.0542 0x13fc [ EC34EED89C34B27C292166B725AC7A7B, 58F1BA0CB7743314AC012A82F8CE4072CBDD05D9570C52BC18DC551882F5B1BA ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
15:20:29.0606 0x13fc lltdio - ok
15:20:29.0626 0x13fc [ 2C23283A0815B048C06D8C0ED76AAD95, 4335546939C1A98CFE9A4403CC82D79CC713439E4DFD1F4760FDD867305151E0 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
15:20:29.0687 0x13fc lltdsvc - ok
15:20:29.0697 0x13fc [ CB6365E995F4DB856866500EDD8F61C1, 717ED387F245CAC68217B0F393D7B8AB3805721AB2C4D2D43430FE6E740F0856 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll
15:20:29.0737 0x13fc lmhosts - ok
15:20:29.0756 0x13fc [ 961F28D879D345BFA50AF51285C90F2E, F9931A436651F695B746BC0C07E833D9C9F64126746DF976E691E6CAE26DAC9B ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys
15:20:29.0804 0x13fc LSI_SAS - ok
15:20:29.0816 0x13fc [ 6BFB8D1B3407518BE06B6F81F92FA0F5, DE0818DCC0D8D1D30A29AB167C65461A78100ABE2368637CEB9D0ED2B4E88D8E ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys
15:20:29.0907 0x13fc LSI_SAS2i - ok
15:20:29.0919 0x13fc [ BE0E47988D78F731DEC2C0CB03E765CB, CA0015E87A3962611DBF714253FA618A6568346BAE640884432C1D44DE4C8684 ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys
15:20:29.0977 0x13fc LSI_SAS3i - ok
15:20:29.0989 0x13fc [ F99BF02BE9219986817BF094981EEB18, 4303C772366065885C5D937B2E9AC0BF80C84BFB2737716055AD57BF6AADD673 ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys
15:20:30.0075 0x13fc LSI_SSS - ok
15:20:30.0111 0x13fc [ FFAA37FBBDD161E8C200C83B40F7872E, 0637B3119FC220CB8E23EE6694A9F1F25CF8D61008B14F6E30FDC17DCF9E077E ] LSM C:\WINDOWS\System32\lsm.dll
15:20:30.0207 0x13fc LSM - ok
15:20:30.0221 0x13fc [ 2FCF837196082864F66CFD9CAB256275, 8BE01C3BCBC1E6E5D1FD7F49E936482E61ACB805F397AB81B8D39C2F0F1083BD ] luafv C:\WINDOWS\system32\drivers\luafv.sys
15:20:30.0338 0x13fc luafv - ok
15:20:30.0350 0x13fc [ 88B38A7435DFA9B7E8F94F5D5FE999D2, FF4EBB6CE013D0EA62FEDA5FBBD1205D9A6F684E701F40039A95A4EF4145DC16 ] MapsBroker C:\WINDOWS\System32\moshost.dll
15:20:30.0406 0x13fc MapsBroker - ok
15:20:30.0417 0x13fc [ 2ED29B635F35E31A1C0D3DDB7DD2AD03, F70CC20B98C2DBCD13B0D509D92B3BC3828D1B88F3ACD60C860E163064844181 ] megasas C:\WINDOWS\system32\drivers\megasas.sys
15:20:30.0461 0x13fc megasas - ok
15:20:30.0491 0x13fc [ 22E3CB85870879CBAE13C5095A8B12E3, 5FA5A8EFBA117089CFDBE09743A16BC3A7CC2042C96ABA1F57901747493106BF ] megasr C:\WINDOWS\system32\drivers\megasr.sys
15:20:30.0588 0x13fc megasr - ok
15:20:30.0601 0x13fc [ F2C23E25636BCA3543E6AD7858E861B7, 0CAB0A037471B4858CE9477E49BF50A5E3E6685E05F8A4BD2D9238551D5073A6 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
15:20:30.0648 0x13fc MessagingService - ok
15:20:30.0685 0x13fc Microsoft SharePoint Workspace Audit Service - ok
15:20:30.0722 0x13fc [ D41920FBFFF2BBCBBC69A5B383AD022E, E66218A8303422EA10C19BA12343740B9A1A70B11B39E185E805B4F74CD2B75E ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys
15:20:30.0787 0x13fc mlx4_bus - ok
15:20:30.0801 0x13fc [ 64BD0C87064EA20C2D3DC4199F9C239C, ED69706277A58ED2C5F2B1B4E9A4A9C7C20173D46EB57FB31D8B63340BA23193 ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys
15:20:30.0861 0x13fc MMCSS - ok
15:20:30.0870 0x13fc [ 8D4B46FA84A3A3702EDADD37FAC6EDBA, E3B9E12BD324FE637C365FDC5E490C41889047004D4FC8F7D78339484F2F717B ] Modem C:\WINDOWS\system32\drivers\modem.sys
15:20:30.0974 0x13fc Modem - ok
15:20:30.0985 0x13fc [ 78FEC1BDB168370F131BFBFEA0A04E9D, E07B1BC429C2CFBD6162F89A6502C67A4BAD904ADC05D3505D87A0B2BCE1061B ] monitor C:\WINDOWS\System32\drivers\monitor.sys
15:20:31.0041 0x13fc monitor - ok
15:20:31.0053 0x13fc [ D1CC0833CFBC4222A95CAA5D0C8C78FF, 54F04374C6D3EFF5C1B794C069870458F10757E5773AEE911957089EAF51EC8D ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys
15:20:31.0098 0x13fc mouclass - ok
15:20:31.0107 0x13fc [ C2E05EC6B80BCF5AE362DA873E1BCE64, 4ABE5CA2005A54E92259EDB52205A5C59BDB83026FC0CD7CBB1E3A003C2B535B ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys
15:20:31.0200 0x13fc mouhid - ok
15:20:31.0212 0x13fc [ D5B7668A8F6C67C51FA5C6C513396D6C, 35985AD89344A8464BD78B8DA6A772E4E60A2EB93072AC23673A86EFD0B2270A ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys
15:20:31.0266 0x13fc mountmgr - ok
15:20:31.0280 0x13fc [ C34AB4280614658903BE848CE79ACDB5, 9A943D9B3CF941DAE4EA4E2771B5EC5DA37AB16AD43095EF092B4259D62FF810 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:20:31.0308 0x13fc MozillaMaintenance - ok
15:20:31.0320 0x13fc [ 5FBCB85D127BE21E3A9DAF11A13C00EA, D00AB99CC813E26B0BD2D39161D4138AB89A06B3E3A28712F2D5BCA60905BEC4 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys
15:20:31.0382 0x13fc mpsdrv - ok
15:20:31.0422 0x13fc [ 3B3906F069DB567C3D092F195FEA5F87, 1EAD704AD8E81D083FE3D458B529F8ECBE99569EFD20F7B520339F054E2F6515 ] MpsSvc C:\WINDOWS\system32\mpssvc.dll
15:20:31.0513 0x13fc MpsSvc - ok
15:20:31.0532 0x13fc [ 37C9EC0398BFC22C616711E41AE157D5, C8DD6B6B47513696CD4BD376C5D9F82C0F52F5A351FFAFE149E3B13C4684D40E ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
15:20:31.0604 0x13fc MRxDAV - ok
15:20:31.0630 0x13fc [ 61F9F27A8C3D7BCD287FE98A440421CE, 773208951BD0B8C0B9510F4C317484D5FCF36D09310D4E20F2BDB85D61088BA5 ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:20:31.0705 0x13fc mrxsmb - ok
15:20:31.0726 0x13fc [ CCAD845F4D21D0E0E0468205EE865473, 8F93B61F407BCE5910A7A9F01F8A51FDB7A3C4F03E59C144C1D4FD974D10C2D4 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
15:20:31.0827 0x13fc mrxsmb10 - ok
15:20:31.0845 0x13fc [ 0F47A6C09F0A7FB5513D322A2B9BE4EC, 00A17CB55D232E11F3D24D0B43FE4FA9E55F7EF5E5607B26ED84C13108AAC4FA ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
15:20:31.0928 0x13fc mrxsmb20 - ok
15:20:31.0941 0x13fc [ A934DF064C503A31683DD7EECDBD327A, 3ED943A2CFE9BB00898A4FCE08D3A5C814FE6E546FC10E9F30E6C2619B1AD162 ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
15:20:32.0004 0x13fc MsBridge - ok
15:20:32.0019 0x13fc [ 807A6636828E5F43C10A01474B8907EE, F275645F4F0D0A796C33C03EA7FA563A0B890AB3A93E5F99C5EA166F91D249B1 ] MSDTC C:\WINDOWS\System32\msdtc.exe
15:20:32.0066 0x13fc MSDTC - ok
15:20:32.0066 0x13fc Object required for P2P: [ 807A6636828E5F43C10A01474B8907EE ] MSDTC
15:20:35.0321 0x13fc Object send P2P result: true
15:20:35.0339 0x13fc [ D123343DDB02E372B02BF2C4293F835F, 8E02D9F7E5DA717B64538444B3FE1C55AA4B0F26F51DA20947E971D27EA09D12 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
15:20:35.0400 0x13fc Msfs - ok
15:20:35.0411 0x13fc [ B3358F380BA3F29F56BE0F7734C24D5F, 229D9E72C429AC51BF6E7C8306218620CB1AA50FE39BA6C11ED0F643E7AF90E5 ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
15:20:35.0459 0x13fc msgpiowin32 - ok
15:20:35.0467 0x13fc [ B2044D5D125F249680508EC0B2AAEFAC, 9631FF42DA5A7CEE1F2607AA8972EF0A67616F0EEEBC95F97B1C8F5A577ED5C4 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys
15:20:35.0516 0x13fc mshidkmdf - ok
15:20:35.0525 0x13fc [ 36ABE7FC80BED4FE44754AE5CFB51432, FB89DF3A50C52B69D4E831A370157D1901810093A0D7D7120A120FC5C6E14BF5 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
15:20:35.0596 0x13fc mshidumdf - ok
15:20:35.0605 0x13fc [ 59307FEAFC9E72EEEC56B7FD7D294F4C, 56576635870FC68980977FFA0E7F8E8D69A7981DECF5B52D0B2A82E3BA6685EA ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys
15:20:35.0651 0x13fc msisadrv - ok
15:20:35.0666 0x13fc [ 236A38F5CB0A23BF0ACCD70ED0BD7F70, 8106B528458E6C8E4437D9064D58F10FF195E67CD308AEBBD5F860AD2D59DCC4 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll
15:20:35.0716 0x13fc MSiSCSI - ok
15:20:35.0785 0x13fc msiserver - ok
15:20:35.0807 0x13fc [ E9457EDFEBC774199F907395C6D09CA2, C3655CE83F4AD1258382722E9A99C33FDD3AA40B62CFEB8DFDD141E254E6DCE2 ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
15:20:35.0924 0x13fc MSKSSRV - ok
15:20:35.0944 0x13fc [ C85D79735641D27C5821C35ECDDC2334, C1BAFD98122B04665870171C143EC119181351D10777A83680A63BF305703FF3 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
15:20:36.0018 0x13fc MsLldp - ok
15:20:36.0029 0x13fc [ EF75184B64356850D0F04D049C253526, 325476F53372BD70201347F044C8EFEC0DB939E1926454B6DCC0CF7864969650 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
15:20:36.0090 0x13fc MSPCLOCK - ok
15:20:36.0098 0x13fc [ 543933D166C618E7588EA77707EC1683, 84A65D277E28FDD7CE2345188891093AC88B577E4C528AD39AB629E341199688 ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys
15:20:36.0147 0x13fc MSPQM - ok
15:20:36.0169 0x13fc [ 182711E9DDF70121A20EBB61B2DFB9E8, 70606503F6280EA3175B9AEC8370A8F461575755DA86EF6E9C9D04EAD61481FA ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys
15:20:36.0234 0x13fc MsRPC - ok
15:20:36.0249 0x13fc [ E887FFDD6734C496407E9219225CB6FF, 0EC9A79224BCE5D0A782E62CC38E3494E8FB65DFC07C66D25C5A1A351121C27D ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys
15:20:36.0301 0x13fc mssmbios - ok
15:20:36.0311 0x13fc [ 83A2AB75951000D681FABDB80C07AEFC, 3B2F582F097E3F934C4587B27CB05525350F36924B74CA6BCD364878FA8EC273 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys
15:20:36.0371 0x13fc MSTEE - ok
15:20:36.0382 0x13fc [ 4FA0483896FC16583851EFB733FCB083, BB59243ABE32FBE92EC1B04D24239BE2DF7C2354A407C2EFF97623F07DCBDA35 ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys
15:20:36.0434 0x13fc MTConfig - ok
15:20:36.0448 0x13fc [ 60F88248608315E13391C2F1C3B4473F, 99E8B74118A01FC281A1C6B323EFD1A8EA1997B81A013442205066F55327D555 ] Mup C:\WINDOWS\system32\Drivers\mup.sys
15:20:36.0508 0x13fc Mup - ok
15:20:36.0520 0x13fc [ 218705233D02776AE4D19CC37D985C1B, 3D92925867B6B8FFAF78E4080139DCB3D45E1E6E1D0AFB6A4FE248B002BD8471 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys
15:20:36.0574 0x13fc mvumis - ok
15:20:36.0609 0x13fc [ 536A0806CE2061A2157E65D4D8ABF30C, F9893F66505E3F748365CD4625B34357531804BDFE33E57285C0106C03F7916C ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys
15:20:36.0718 0x13fc NativeWifiP - ok
15:20:36.0736 0x13fc [ A340A4B27CC7DEDDF953B7E2C9699747, 4C5AB23BD0C69B17E9BD29CAFEDC100A6EFC78BAB645B007FCAE4318C459D345 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
15:20:36.0789 0x13fc NcaSvc - ok
15:20:36.0819 0x13fc [ 7467BD76D6ED5981E6C3DBFEB50F0F4D, 237E1C2E15D5F3BAC49B09E1CD0EAE56A6998AE1FF560A4F7A7EFFEB46884798 ] NcbService C:\WINDOWS\System32\ncbservice.dll
15:20:36.0891 0x13fc NcbService - ok
15:20:36.0907 0x13fc [ 476466DC3AB2327E2DBFAEC11798E2EE, 9ACD74720664CF3F239601DF0BE80AC443AF0FBF666CBB8509169364FB22B95D ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
15:20:36.0990 0x13fc NcdAutoSetup - ok
15:20:37.0005 0x13fc [ B57CE307DA101C739885B7CC0678077F, F7F45DB6D306060F0FE0E59F39C3B95F6A9B6173930F22C5C41B2003895D6642 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys
15:20:37.0068 0x13fc ndfltr - ok
15:20:37.0120 0x13fc [ AFAECF904F1C343EBD50F91BC8D0DBE8, FABAE70F62895708415B8E176A880D2D20D46D9A14C3D41D371B905CE4D64BA0 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys
15:20:37.0271 0x13fc NDIS - ok
15:20:37.0288 0x13fc [ 202260E7CDD731A32AF62ABD1ABEE008, 0E019FAE09B2659CC3267756DB962CCD69172BA67E3288B491F7B455287A5392 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
15:20:37.0350 0x13fc NdisCap - ok
15:20:37.0365 0x13fc [ A1D473D0CF10561F29B58EA7C5412A92, 3DBFC1D769E03E30C87FF4F30A9B523A69A7E0CD4EB87F8A9ECE190FEB84C569 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
15:20:37.0432 0x13fc NdisImPlatform - ok
15:20:37.0442 0x13fc [ 1A0AE283B8DE6BB76412A0F8213D45AC, 91AFFDC7A9277EB59CD54021049BEA715078F90470B8A12F3E9F1386DF068D2D ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:20:37.0513 0x13fc NdisTapi - ok
15:20:37.0525 0x13fc [ A74EE2D2C0BFF5EC3A6185791868C4CA, A346320DEBEAE890575B4C6594FB3A3A9890A0E86881ADD8376E442282C88D38 ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys
15:20:37.0585 0x13fc Ndisuio - ok
15:20:37.0598 0x13fc [ 32A9BD1342640D48AD85C8B3E812B984, B702B05A0180472139B35B105DD3B6B6F75AEDC9DD1EE342FB576259076455AE ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
15:20:37.0670 0x13fc NdisVirtualBus - ok
15:20:37.0688 0x13fc [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys
15:20:37.0803 0x13fc NdisWan - ok
15:20:37.0826 0x13fc [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:20:37.0890 0x13fc ndiswanlegacy - ok
15:20:37.0901 0x13fc [ 50AEF8EF0064A91ABB08D858D039C9DE, 16F1CBE1EC3778D157CC054261068C8D7F8A72D85853CB70178F8DF81D238C8F ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys
15:20:37.0987 0x13fc ndproxy - ok
15:20:38.0000 0x13fc [ D358DF634F52247CB43F0781218F4D6E, D375E9E681551467FC5F7AB2AC053C9F22AAC541C0BCBA57090211F45009342C ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
15:20:38.0062 0x13fc Ndu - ok
15:20:38.0074 0x13fc [ 026618ECF6C4BEBDCB7885D42EC0DBE4, 8E7E13361DCF8748FA3AD518B3DE0A3DCE932316EE32E5529E75785BC5395AD1 ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys
15:20:38.0156 0x13fc NetBIOS - ok
15:20:38.0180 0x13fc [ F51C02D992A8D6BC5EC4D990F227D4C7, DBBDA422BFA82219403689637BE8D6B0D0A893895143E807FA5A007C166454CB ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
15:20:38.0260 0x13fc NetBT - ok
15:20:38.0274 0x13fc [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] Netlogon C:\WINDOWS\system32\lsass.exe
15:20:38.0309 0x13fc Netlogon - ok
15:20:38.0328 0x13fc [ 7FD4C3D32DAE890608F44074A3437CD8, 5B7D9E9AEE26896B818F3C5DBE4C96A33D43CE2CF7716B95AAB7203611C03BFE ] Netman C:\WINDOWS\System32\netman.dll
15:20:38.0389 0x13fc Netman - ok
15:20:38.0419 0x13fc [ A059F75402710535A90A8D043674A514, E98536DF74A2B75FDBA6B866DC1909544292DFE5E14F984941470FBA6E8D810C ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
15:20:38.0494 0x13fc netprofm - ok
15:20:38.0512 0x13fc [ 01C759FD50DFD46E30CC56B2B672B1A7, 88F46C89DCE1869D9932E809A24718B50C3B0161A1DD63DED899C0AFA8C7CFF5 ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll
15:20:38.0593 0x13fc NetSetupSvc - ok
15:20:38.0616 0x13fc [ 9E9BEB22644CE1DA521A1D7821BF891F, 5480D52AE1942205B513F916DBCBF5B5F2FFF92D927F4E598FBA618E75BBC2E9 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:20:38.0648 0x13fc NetTcpPortSharing - ok
15:20:38.0672 0x13fc [ 91B32D7036700BEED5343E1F6A7122CC, 8123CA398A79F0E69126F962AA29C2464FAB50182E961CB6A6ADB6CEA09A6732 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
15:20:38.0732 0x13fc NgcCtnrSvc - ok
15:20:38.0765 0x13fc [ 4547118EADA9FDBB054A211CD01866BB, 51656BDAD78B4CC452B2AE06061247BECD07307BB31B9D6AA615917EC97342E0 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
15:20:38.0848 0x13fc NgcSvc - ok
15:20:38.0872 0x13fc [ 1B8F07B59F7DAE02264FB8A16088C467, 1795DA9F72C34A9F47D9AAF5E95D40C3296948EB89D9600679AB4660671A5C65 ] NlaSvc C:\WINDOWS\System32\nlasvc.dll
15:20:38.0940 0x13fc NlaSvc - ok
15:20:38.0951 0x13fc [ 465DC580170CD844206D7E3EF1DBF2A1, 5A14001029BE154C708CCA34449B280905DB79978FC7F0BE0CF20B20E47752CF ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
15:20:39.0032 0x13fc Npfs - ok
15:20:39.0041 0x13fc [ 29395C214D2CD4C81F73166AB988A797, 3631EB2EA17E455ECD151C0BC9A3DF6EC87C75B15DC9B607CFB68D7C463E04B7 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys
15:20:39.0097 0x13fc npsvctrig - ok
15:20:39.0107 0x13fc [ AF8B7848E102A83AAECCD24B181CEBE5, B2AAE3567EE3A7975CDFCB3FE41D33C74D4486BFF35FF56E0516A01C744BA52B ] nsi C:\WINDOWS\system32\nsisvc.dll
15:20:39.0157 0x13fc nsi - ok
15:20:39.0169 0x13fc [ 2871225495F832A8C8A7DD1A17EDB3DC, 2F6664C7F5FB2341B2AAF3C5A258FA0D7AEEE447562D7F39FD5A4EE905C18C6D ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys
15:20:39.0219 0x13fc nsiproxy - ok
15:20:39.0327 0x13fc [ EFEFC245B884B1BE0401931398DCD707, 43A7BDB9BF523791EC41E76F51E7DC56EFC55CCDA0D130ECFCD9990C43D67587 ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys
15:20:39.0524 0x13fc NTFS - ok
15:20:39.0539 0x13fc [ 6DBD703320484C37CEA9E4E2D266A8CE, 85D6F73C0E3FDE16829C9BC0D13DD89E64183EAE02F84607F6B8440CB7F366E6 ] Null C:\WINDOWS\system32\drivers\Null.sys
15:20:39.0590 0x13fc Null - ok
15:20:39.0605 0x13fc [ 604D27CC38CC23493F218D0BB834B3FF, EF5E5759CCF16DD97271C82DAF47FB2086EBCA5DE7D05177B70CA1197B95F41E ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys
15:20:39.0666 0x13fc nvraid - ok
15:20:39.0681 0x13fc [ 8B50D897657AB4A15FD9E251BBF7D107, 36036130DD46D9BF105AC7176E219F3BE7D1168A660A0F8DFF76F61FBFA4B417 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys
15:20:39.0744 0x13fc nvstor - ok
15:20:39.0757 0x13fc [ 31F990B2B6B91E9D7A667405CE12FCB1, 907E095D1E83CDAFF34BE789FC41CDD7BB4DEE23261E1D03C1CF0D4D030534AC ] nv_agp C:\WINDOWS\system32\drivers\nv_agp.sys
15:20:39.0818 0x13fc nv_agp - ok
15:20:39.0839 0x13fc [ 7F3A0D052B8E00E730316210B1DD092F, 14BD026EA759F6C81ED6B4DBB04E0584B7F6456725503FC73CD4347B7743005F ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
15:20:39.0907 0x13fc OneSyncSvc - ok
15:20:39.0941 0x13fc [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:20:39.0976 0x13fc ose64 - ok
15:20:40.0198 0x13fc [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:20:40.0434 0x13fc osppsvc - ok
15:20:40.0471 0x13fc [ 334131C162B118EF49930D41B0E17825, 10EF08870B6E118AED2E0E3F45E06BA8A485439823BE98F44E34E7D2B65AA2EF ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
15:20:40.0533 0x13fc p2pimsvc - ok
15:20:40.0558 0x13fc [ 4A5634915AF62C983E08425905D0C04C, 09BC3F7AD9F79C5FF59520933D06FE155AC21CD0ABAFE66B81C9F87D83A2339F ] p2psvc C:\WINDOWS\system32\p2psvc.dll
15:20:40.0633 0x13fc p2psvc - ok
15:20:40.0663 0x13fc [ D61B764B27BF05CCCADCC5E1E7B73A21, 14636C5D470E4E87B8C6ED4E34906072D8D631E566DECADF5E2FFC0535DF8989 ] PAC7302 C:\WINDOWS\system32\DRIVERS\PAC7302.SYS
15:20:40.0777 0x13fc PAC7302 - ok
15:20:40.0790 0x13fc [ 7D0FC96264C0F8F2C1321E33E8EB646C, 82A06437B9B096BCCF5CE31BDF3539696E2E41DFA9870C358566EEE2F7D3B447 ] Parport C:\WINDOWS\System32\drivers\parport.sys
15:20:40.0853 0x13fc Parport - ok
15:20:40.0866 0x13fc [ 24AC0FD10325FBC2303B29A5F237AEB0, D94B26A36EBE4EFE8EA270FA6600811206830480BE953809F74FAB80628DF879 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys
15:20:40.0927 0x13fc partmgr - ok
15:20:40.0941 0x13fc [ 446462BBA744DA60379574926FD51EAB, 4A79E8EF28670333F4733FA0016508DC88E9BDC566B455DA5EDEDC514612180A ] PassThru Service C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
15:20:40.0967 0x13fc PassThru Service - detected UnsignedFile.Multi.Generic ( 1 )
15:20:40.0967 0x13fc Detect skipped due to KSN trusted
15:20:40.0967 0x13fc PassThru Service - ok
15:20:40.0998 0x13fc [ 0ECA2ADD5FBCE73183A68935C71B40B7, 08CC5F2F10D1DD1A1396CC29196314003491D3AF3DE59CADB281F252577F1860 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
15:20:41.0055 0x13fc PcaSvc - ok
15:20:41.0078 0x13fc [ 1D4E995955BDAE781C46CB97AE1CFB58, FF7475F19782CA253AA839DDB86E5AC20C5785D5CC1DD57D9FECBE4F5A5C0BFB ] pci C:\WINDOWS\system32\drivers\pci.sys
15:20:41.0143 0x13fc pci - ok
15:20:41.0154 0x13fc [ 2B4D98DF0CA57FB9536DBC80D2449D1F, AB34FA8585A20854369C0FAEB18BF5C7734D7E3C791F644B0576E40D609FCD09 ] pciide C:\WINDOWS\system32\drivers\pciide.sys
15:20:41.0196 0x13fc pciide - ok
15:20:41.0250 0x13fc [ F4D5793BF2E58AF15C6CF2FEEF9E73EB, 9B5A40AF8838063F8F0A2B1480B39A2711AAE78BD972CDA60CCA0EB2BA211A87 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys
15:20:41.0301 0x13fc pcmcia - ok
15:20:41.0312 0x13fc [ 22A53744CEEADFFFD33BA010FAD95229, 30B775EC9795105B8BF785BD63115C160955E7EFF74B995D3EC288138D1825A3 ] pcw C:\WINDOWS\system32\drivers\pcw.sys
15:20:41.0357 0x13fc pcw - ok
15:20:41.0370 0x13fc [ 48F3A3222CF340FE31535CB6D49C6D6F, 5F8904871219FA6C1BD74747583855B0FBCE42F340A3BE10270D8D3F02766E9D ] pdc C:\WINDOWS\system32\drivers\pdc.sys
15:20:41.0444 0x13fc pdc - ok
15:20:41.0579 0x13fc [ A279FC9BE4D1DA5DA3E79B5EAE0FDCF4, 0CC9A413E2BFE30421A74610300F6AD29769EF45557137F6FD7B7FAF0E0A241C ] PDF Architect 3 C:\Program Files (x86)\PDF Architect 3\ws.exe
15:20:41.0710 0x13fc PDF Architect 3 - ok
15:20:41.0763 0x13fc [ 29D993E6AABC958032ED9620D232C521, 68F6581BB8A856561BAD22B5EB5CAB25B3F9473228B553D133ECFB4BDCEB2A3F ] PDF Architect 3 CrashHandler C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe
15:20:41.0827 0x13fc PDF Architect 3 CrashHandler - ok
15:20:41.0869 0x13fc [ 9EC3A20048C2E53B98E3617B7D6EB1DE, 8C2A11FFE65C062E8091135ECE4E392C2F18BB48C565E47DA08BF344B2587061 ] PDF Architect 3 Creator C:\Program Files (x86)\PDF Architect 3\creator-ws.exe
15:20:41.0922 0x13fc PDF Architect 3 Creator - ok
15:20:41.0992 0x13fc [ 20C9518D18927FA01F42309CC6BF433E, 112CB468C682E179CE16275E9748A035BCBF5E5970A095E3C83C9C14865D6548 ] PDF Architect Helper Service C:\Program Files (x86)\PDF Architect\HelperService.exe
15:20:42.0073 0x13fc PDF Architect Helper Service - ok
15:20:42.0117 0x13fc [ EB69C64D06CB162602F7C3E389255334, 091D14BDD2585A40EF316547F1E0EDA007833A00ECDC062827E40FC2CCBF9DFF ] PDF Architect Service C:\Program Files (x86)\PDF Architect\ConversionService.exe
15:20:42.0175 0x13fc PDF Architect Service - ok
15:20:42.0279 0x13fc [ A32028F7CDC08C44E91A2E83E42463C8, EB5C74EB309950407F22FCE4F59963313D9BCCA49BF4DA1B13421CC1C1015E6F ] PDFProFiltSrvPP C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
15:20:42.0314 0x13fc PDFProFiltSrvPP - ok
15:20:42.0356 0x13fc [ E2F8376F9731D12A009C522036C6073A, 5B8B68D3C013AAA8ED368C97042984C35E8D023542DBA404E7A03E89F2357E66 ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
15:20:42.0471 0x13fc PEAUTH - ok
15:20:42.0483 0x13fc [ EE926C59CBD4DC4DC9FBB85014A2F1A5, 777459BD30A480E03EA5D0BBA431C2CD573403687FAA0B29F172086A0304E230 ] PEGAGFN C:\Program Files (x86)\PHotkey\PEGAGFN.sys
15:20:42.0517 0x13fc PEGAGFN - ok
15:20:42.0526 0x13fc [ 7BB4BD4E20221B6BFC0038851CF3A4F0, 29EECB0C2A8BFC315C5212AD26B871B02DF7B76B5097FF45BA5E5C78891F357C ] PegaRadioSwitch C:\WINDOWS\System32\drivers\PegaRadioSwitch.sys
15:20:42.0581 0x13fc PegaRadioSwitch - ok
15:20:42.0595 0x13fc [ 1398A85E59698067CBBE1D66A9C13ADF, E3609F183068BFAED756B2F9237181D60A6F6D78691248B8BF5B0AEB6A367E3D ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys
15:20:42.0652 0x13fc percsas2i - ok
15:20:42.0662 0x13fc [ 35F7C7AD709D909D618D9EDF987FC3ED, EE713E33688E74C5A2546CC58EBD8EA8F8116F25E42DCF8DA21DCBC7C7590E0E ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys
15:20:42.0709 0x13fc percsas3i - ok
15:20:42.0762 0x13fc [ 0DAF7B7D85F7AF38E29161460899C63F, F2609F2BD02C714857F5D5E6EF580643429C54E175AA72D38467F8F3A4E7F59F ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
15:20:42.0803 0x13fc PerfHost - ok
15:20:42.0827 0x13fc [ C182C1477F8D730D84CC74A213F72D11, 6E9197332544B39776D37A6C6283DC26CC139723C36FA79422F3FA9CD3CC8C5E ] PGFNEXSrv C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
15:20:42.0850 0x13fc PGFNEXSrv - detected UnsignedFile.Multi.Generic ( 1 )
15:20:42.0980 0x13fc PGFNEXSrv ( UnsignedFile.Multi.Generic ) - warning
15:20:45.0866 0x13fc [ 57606281E23B0F53347527691E947B2B, 7030182E706CEBE6BD52BDC71CA8F2230AD445AE6554188E76F09A5E2612BD2E ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll
15:20:45.0959 0x13fc PhoneSvc - ok
15:20:45.0981 0x13fc [ 940BD7A32391F325A1A4285F91FAF7AC, A0FE4B8705B268E1978D9C66EB39B3DBBCB2A70F02F380C7062FE72E92DDF964 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
15:20:46.0049 0x13fc PimIndexMaintenanceSvc - ok
15:20:46.0133 0x13fc [ A546F72EFFE5CBBC98003A0CA19DA0F8, 89AE396676A37D851F46427E421E8E8ED5B4BADC33023F1E215CC352A4110F44 ] pla C:\WINDOWS\system32\pla.dll
15:20:46.0275 0x13fc pla - ok
15:20:46.0293 0x13fc [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll
15:20:46.0350 0x13fc PlugPlay - ok
15:20:46.0363 0x13fc [ 6BF7093B27EA90FD9222845D19C1BE5F, CF8A6764BB6B369258F21FD303E4CAE08632195620A0BD66B62F62F5D7B762B8 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
15:20:46.0404 0x13fc PNRPAutoReg - ok
15:20:46.0425 0x13fc [ 334131C162B118EF49930D41B0E17825, 10EF08870B6E118AED2E0E3F45E06BA8A485439823BE98F44E34E7D2B65AA2EF ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
15:20:46.0485 0x13fc PNRPsvc - ok
15:20:46.0512 0x13fc [ 5A91C28F99043215121499257468C4BD, 816D2AEBA29B8A050747E01CE11EB12A05C1CDDF91835C44BBB6A7B9D348B15A ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll
15:20:46.0581 0x13fc PolicyAgent - ok
15:20:46.0600 0x13fc [ AE3B1056FC1795F18D990C4908A6ECBF, 1C41F7714EBF54DF358D9B19D6AFE7281D3EABE20038B568A12031B76E1D50D9 ] Power C:\WINDOWS\system32\umpo.dll
15:20:46.0653 0x13fc Power - ok
15:20:46.0666 0x13fc [ 5BA6B9AD03B81546BA64E488C4EF9D17, C43442577685FA1A7C32094B2F14FC92BA6B511FD9FDBA6FD82473A1B165FC61 ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys
15:20:46.0750 0x13fc PptpMiniport - ok
15:20:46.0913 0x13fc [ 959F94AD1255BC749884EDDD14EC29C4, 2CD6DA9778EA36FA0B4080F6DB1C634712238E014E47546403CD3CDB35A1DCA8 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
15:20:47.0163 0x13fc PrintNotify - ok
15:20:47.0187 0x13fc [ 21AECFF3EB5748CBE12538A2500EFDE5, A1679F21363E99E3698B9C6F7E7E3BB2877D47089BC381AF0C51B1DD8B24325B ] Processor C:\WINDOWS\System32\drivers\processr.sys
15:20:47.0246 0x13fc Processor - ok
15:20:47.0270 0x13fc [ A08AAC62EF7A1E291B3E895B5864BB86, 340E6648F9A5F4B7543FDEC5BDAFBDA3DE319B8F998FF2EF60D02EE5EF3D56CB ] ProfSvc C:\WINDOWS\system32\profsvc.dll
15:20:47.0331 0x13fc ProfSvc - ok
15:20:47.0347 0x13fc [ 596FB6C5A72F34B7566930985E543806, 870B43783DB4CF845FA72BC5E40CE76BE6DFC66FE9E9B4B0A52D6B7FE7EA65FC ] Psched C:\WINDOWS\system32\drivers\pacer.sys
15:20:47.0402 0x13fc Psched - ok
15:20:47.0413 0x13fc [ C32ECB99AD25E9A04F01C8665DF29EF8, 0489B3DEC6A33E50D8A48A8DAD3F5B923A81F7300E4A71358D90D2879BAC9AA2 ] pwdrvio C:\WINDOWS\system32\pwdrvio.sys
15:20:47.0462 0x13fc pwdrvio - ok
15:20:47.0471 0x13fc [ D619356B955EEFA642F5FF72755E8B3C, 1FD54978A77ACD6FBF1236E177ED074894743A9141E4169FE9AFE28680FC93C5 ] pwdspio C:\WINDOWS\system32\pwdspio.sys
15:20:47.0516 0x13fc pwdspio - ok
15:20:47.0535 0x13fc [ E84F66BA185934C166F8DF0FA8F88455, 2E0380E98DA29B3F43FB3FE0E1ECA52B3C9AEF54CE982D5514F70FAE81758449 ] QWAVE C:\WINDOWS\system32\qwave.dll
15:20:47.0593 0x13fc QWAVE - ok
15:20:47.0603 0x13fc [ CFBA9C976CBF6796E5DC39EF59984021, A1C956AD828FC70ED92D702516E0F88A4BDAF8C93C571D7CA20F1695FD8E70C2 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
15:20:47.0669 0x13fc QWAVEdrv - ok
15:20:47.0678 0x13fc [ 7B2AD8C55217B514C14281AB97B4E21D, A1E295897B864B9C0177FF1C502EB060084A1783C0E7E53636291F901C2E2AA8 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
15:20:47.0757 0x13fc RasAcd - ok
15:20:47.0770 0x13fc [ E15A9CE1E2E7D1C8DF97A4FC1FFE6289, 44B53418D6BC51ACC567CF6917A0981889B44AE420489C9C03F5A30418B37267 ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys
15:20:47.0842 0x13fc RasAgileVpn - ok
15:20:47.0855 0x13fc [ 2976970887157CBB05747CBCD0793354, 43499D90B6340BD679CA51FDAB4ABCD0CF7E995367876716B7879422D206D677 ] RasAuto C:\WINDOWS\System32\rasauto.dll
15:20:47.0906 0x13fc RasAuto - ok
15:20:47.0918 0x13fc [ 381B8F2311A0375676B635EA5E7C8AB0, F64697F75894844E72F260E9E88CCFE6B882BC89F6124DCA187771A29C3EF929 ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys
15:20:47.0980 0x13fc Rasl2tp - ok
15:20:48.0017 0x13fc [ 3655D86C5E2982B131FC0935DE24F98F, 0386B31FECDDED77450609A807097B2307361CB59B236DEC41037BDC95897463 ] RasMan C:\WINDOWS\System32\rasmans.dll
15:20:48.0105 0x13fc RasMan - ok
15:20:48.0119 0x13fc [ 3369023EB5790A75BA7DABA14B75D922, 36B63D5B74FDC932AAF1A876514024602D2F3EAF2CA33D1247CBA1E52FDB0418 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:20:48.0205 0x13fc RasPppoe - ok
15:20:48.0216 0x13fc [ 1E32A8CD65C4AD0A827CFEB13034DA29, 5D9A92E13020D994CCD39F701BACAFE2177A40A9CC89649441B91E3F3DECD911 ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys
15:20:48.0276 0x13fc RasSstp - ok
15:20:48.0301 0x13fc [ 2B648363E4C5E34B469C58596F377DD9, 30F82770468BBA562CEA0E9E39B24ACEFBE022343D0180C82E2ACE8957B73E44 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
15:20:48.0386 0x13fc rdbss - ok
15:20:48.0403 0x13fc [ D0221C13960E274CC539D72D5A842ED0, A5A961506B9D7429D97D0635FD69E74736C0E8405487E1D22BB5CD978A60044C ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
15:20:48.0468 0x13fc rdpbus - ok
15:20:48.0482 0x13fc [ 1DC2CC74B51E4DC4CD5A20C1021E4010, 46B7D17EE27439F2191504D1C6F6C70B2540BD4F2261DBB1F4BE783BEA99B04C ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
15:20:48.0567 0x13fc RDPDR - ok
15:20:48.0586 0x13fc [ 177DF954D0DEC0465A380C75F6E7F65F, 6B30C78223029BD5DBA586BF961968F85762209BA55CD031460A215B20F93AB2 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
15:20:48.0629 0x13fc RdpVideoMiniport - ok
15:20:48.0647 0x13fc [ 5D1680871054D2B0B8A971BC8AB3B837, 9CAB0B2E3857829D34A82A78B120D07E292D4D5060168D964295EB23339B7DE7 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
15:20:48.0704 0x13fc rdyboost - ok
15:20:48.0750 0x13fc [ 341E6830DA70F65730300DAB4CB0B490, 341EC8DB5E39963EF89E726F08730AFB2356C3BAD71CCE9EECCAB4D9B31C4863 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys
15:20:48.0873 0x13fc ReFSv1 - ok
15:20:48.0904 0x13fc [ 8355BCA85B0928382DFCDD02FCD1681A, F306F038DA09C8D2095C311818E2F991B55BCD96B40B95D2A53A60EA6AC37014 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
15:20:48.0981 0x13fc RemoteAccess - ok
15:20:48.0999 0x13fc [ 2C82F4DCABAB389CEBB1C9E86C715C9C, 70354621D3D467616A419A818C54D2C89EA013C5050BA9944E3A7A4F25CAD6BA ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
15:20:49.0059 0x13fc RemoteRegistry - ok
15:20:49.0108 0x13fc [ AD43141CE6D5074DA1D28B5BCD4E4507, C1A9AA856DD4FEE00BBA329C150E0CBCD1CE13ED0BB7B4AC9B152321CD854212 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
15:20:49.0237 0x13fc RetailDemo - ok
15:20:49.0265 0x13fc [ 27A3A6BF6EE99AB61BF6F1147542F6AA, EA77F391067BF597E2E9A5A915CED91694B34624CD7BC87531C1610659C28748 ] RichVideo64 C:\Program Files\CyberLink\Shared files\RichVideo64.exe
15:20:49.0300 0x13fc RichVideo64 - ok
15:20:49.0312 0x13fc [ 176D8470B15CD9080861594F9A33FA01, CFB66D7FEB9465985C2866D64EA03B7E7BE830DCF6C02B3FE2244D7F7E5343E2 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll
15:20:49.0357 0x13fc RpcEptMapper - ok
15:20:49.0366 0x13fc [ 1A563653DAEDFE4CA81936E0D2FD8B56, 308B0DFEBA63333D407093C449A08ABFECE118C9274100809356BDAF7FA32EB6 ] RpcLocator C:\WINDOWS\system32\locator.exe
15:20:49.0408 0x13fc RpcLocator - ok
15:20:49.0451 0x13fc [ B339861C6A2A86FBCA67C2006B461473, 228ADC8A8603C0A4342C6CBC6F2CC919271D42391365061AF660E0D7151C66A4 ] RpcSs C:\WINDOWS\system32\rpcss.dll
|
|
01.02.2016, 16:17
| #5 |
| | Email-account gehackt, Betreffszeile: New messageCode:
ATTFilter 15:20:49.0544 0x13fc RpcSs - ok
15:20:49.0559 0x13fc [ 0AC5FCDC29ED97ECDEF1276425EE2059, 8A12D1732D4AA18A9ED8416F4D4A49B81CE7C4C86ABCEE8FF28A16EA61993CFE ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
15:20:49.0633 0x13fc rspndr - ok
15:20:49.0663 0x13fc [ 8CF15A5A9FC24323E2B63DDF9788C74E, 4E91D45DB6E811B5DC75DD96EEE8813414F243D82AA789F7C2D464463B4DE7F4 ] RtkBtFilter C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys
15:20:49.0707 0x13fc RtkBtFilter - ok
15:20:49.0748 0x13fc [ CFE738C524F35B6E523A4D0F54840C30, 73E051DEA744EEC5202693C11EDABB36DE2D086160648D4E41F1F299CBAD8409 ] RTL8168 C:\WINDOWS\System32\drivers\Rt630x64.sys
15:20:49.0833 0x13fc RTL8168 - ok
15:20:49.0859 0x13fc [ 3940780911A7BD1793B7CEEC9E4429C2, 539511D26D2EE348F80D9EFA414FD731983B14D8218E498217E7A0A0E439E41C ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
15:20:49.0933 0x13fc RTSUER - ok
15:20:50.0080 0x13fc [ 52BFDF19FBFDC7C8E811C73350CA2B52, E8385F78C133B06D6A7F488DAB7308A7D3ED7181C7CE02D150912CA9ABFC4C94 ] RTWlanE C:\WINDOWS\System32\drivers\rtwlane.sys
15:20:50.0342 0x13fc RTWlanE - ok
15:20:50.0361 0x13fc [ 044890BB0D6CF1E23C1087234D320509, FA6C79D24BE4ACCFAC617D2850B922BFAA7C2766AE625C725F3ACF43C934EFAF ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
15:20:50.0425 0x13fc s3cap - ok
15:20:50.0436 0x13fc [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] SamSs C:\WINDOWS\system32\lsass.exe
15:20:50.0470 0x13fc SamSs - ok
15:20:50.0483 0x13fc [ 530F797129776AA7E81994783A97E2AD, F131EF036702C6E741E5A6851AE07E81043CE8BAEED0768838C0F31CE14FEC1A ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys
15:20:50.0546 0x13fc sbp2port - ok
15:20:50.0565 0x13fc [ 0C12493B333B96797AFC5F3C7831C051, BEE786D7ED14221B1A9450060597393AC44116D776B913E045B5F6066D720F74 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
15:20:50.0628 0x13fc SCardSvr - ok
15:20:50.0648 0x13fc [ 40110802D217FE1CB581D9A70B1FD16F, CCB920593CCC6663676039F3F731536DFEF535C3F715F6DB6F34D0D733BEF89B ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
15:20:50.0706 0x13fc ScDeviceEnum - ok
15:20:50.0719 0x13fc [ 9B6B1D4DB35A3D9BEAF023BC95E1F49D, CA44124CA3E9958FB77A891CD234A993B63E8AC6632AE801CDEC6666267E7C7E ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
15:20:50.0765 0x13fc scfilter - ok
15:20:50.0817 0x13fc [ 5A459E0585FF3A980D10604B6D4BA03D, 3DF9CB96258A44458DF98EA4C6D57342D1207B7BFB94174461B347BE3B5CA317 ] Schedule C:\WINDOWS\system32\schedsvc.dll
15:20:50.0938 0x13fc Schedule - ok
15:20:50.0959 0x13fc [ 4E9158CECF77A029AB98E8FBB43FCED5, AFF8BDB8F8F8DDF4FC0D65712E031DC360856CD3CE5C8A4C8FF960388F37462F ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
15:20:51.0018 0x13fc SCPolicySvc - ok
15:20:51.0039 0x13fc [ E1137E39C3BB3EF9AF2243745D901D60, 0BE86E4E48DA6D25AF0E71F09E55A5C4E525C61831EDC5135DEB240CCD02335D ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys
15:20:51.0107 0x13fc sdbus - ok
15:20:51.0124 0x13fc [ 811EC0B1221402FCED0BA37E112BF627, 366EB8AF04C603BED6CF53652CC937099B247D5DD8C58D699D0D8DA22F8FDD51 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
15:20:51.0183 0x13fc SDRSVC - ok
15:20:51.0198 0x13fc [ DE6D7DC78D956928F59F7415A0F41E13, C0F8EEED29BF63A0D8FB5A0286C1C768BFEF598EC52715D910B5BB1A76231805 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys
15:20:51.0271 0x13fc sdstor - ok
15:20:51.0282 0x13fc [ 286450F698EBD81A8AC1B22CF6BABF11, ED05C2723FCD399FD085AE7AB1178D24F9745A4F31DD711DE896D15412B82BA2 ] seclogon C:\WINDOWS\system32\seclogon.dll
15:20:51.0325 0x13fc seclogon - ok
15:20:51.0337 0x13fc [ B7B9EEBCB7466338403A75D15AC120D7, B8F79DA71F8CD0F30983F7D92B625A431C212DD543DE2B3DC03EC5A68C41B00D ] SENS C:\WINDOWS\System32\sens.dll
15:20:51.0392 0x13fc SENS - ok
15:20:51.0451 0x13fc [ D14DD7D766664F880FECF44CE6017966, ECF966E3ACF4EBD5A3259468A076619A539E35F1B97AB6A98FBD7882F1FBBBAB ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
15:20:51.0603 0x13fc SensorDataService - ok
15:20:51.0628 0x13fc [ A74C62AE99A015CD6275F0D8D8843886, DF08E0BB1160E054C6B000BC5F62DEF77C6D9E4B5679AD013C313BA14207B589 ] SensorService C:\WINDOWS\system32\SensorService.dll
15:20:51.0695 0x13fc SensorService - ok
15:20:51.0712 0x13fc [ 7363A65C738F5A5292D7BDBE55D8C3C2, C53C10A0AE58613DFCC91E62E004D9B188E4793C2A19B4BE871A705EEE77048E ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
15:20:51.0767 0x13fc SensrSvc - ok
15:20:51.0779 0x13fc [ 67585C295FF2D221679E376B68893B35, 4B5E9A8DA8C6F7B1F7129F80A0603503D467E5650306FB4C309977D74037E46B ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys
15:20:51.0847 0x13fc SerCx - ok
15:20:51.0862 0x13fc [ B8C4852CBCAAC1374C08EC7445443824, DDE577A81B3E11B5B56096317BC47AA6E286573042407B96A9D29BE981F3FA4D ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys
15:20:51.0917 0x13fc SerCx2 - ok
15:20:51.0926 0x13fc [ D3A103944A8FCD78FD48B2B19092790C, 252DB8395DA8639E748658D3BE7863C1700E27AA5C41BB700CFCE193FE3F04E9 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys
15:20:51.0985 0x13fc Serenum - ok
15:20:51.0998 0x13fc [ 88D58E1DAA6C5062DD3A26273106961F, D1E2FF37C888245BD0BABCD7C6B76AD5A87415B68FEFE37B5FA29AE3342AE50B ] Serial C:\WINDOWS\System32\drivers\serial.sys
15:20:52.0053 0x13fc Serial - ok
15:20:52.0063 0x13fc [ 0F5B43074AE731D2C6F061241C9D84A6, 05CFEB30A4FC11441552D37687608C8C2FD6DC2F2266AE9D6526753E26283DE6 ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys
15:20:52.0114 0x13fc sermouse - ok
15:20:52.0152 0x13fc [ CD90E445F6458512A5BA884D561EFCF1, E792FAB8AFF4126C1977024060842D788A06475139782896AFD7B39C85FCDF3F ] SessionEnv C:\WINDOWS\system32\sessenv.dll
15:20:52.0220 0x13fc SessionEnv - ok
15:20:52.0231 0x13fc [ D9FE59276BD56A9643C32D5FACE2F251, 591862D868A545F468496DE97DEE42C9DB3AFBFC0881CBA79EB6641A254AF033 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys
15:20:52.0283 0x13fc sfloppy - ok
15:20:52.0319 0x13fc [ 2C7B006EB0B5479ED389D0CA5DE6AB83, 2E7C6E3E99A2668CB361A31567A4DB81021530E78213B39983D14197DB72E43C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
15:20:52.0393 0x13fc SharedAccess - ok
15:20:52.0429 0x13fc [ AE6E4D3172FBF45B944668CB3998B8A8, E7D7F98CB464C236A17069987F7B678D7688D9D577334151EF09DF5C6F22AFFC ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
15:20:52.0525 0x13fc ShellHWDetection - ok
15:20:52.0537 0x13fc [ ABBE803FE0BDAE0E5BE74DDEFBE62F23, 5009F489F7A6D66628C23A0FA3D7632399D0AD72BD11A1B70D7E768ED507377D ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys
15:20:52.0590 0x13fc SiSRaid2 - ok
15:20:52.0601 0x13fc [ 6043DF55CFE3C7ACF477645FA64DEA98, 0E18EF8EC589841BC319C17FBABA7383FD247C9441ABF64A0D830976F3E611AE ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys
15:20:52.0648 0x13fc SiSRaid4 - ok
15:20:52.0668 0x13fc [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
15:20:52.0709 0x13fc SkypeUpdate - ok
15:20:52.0721 0x13fc [ 629F6CDD71F284EB2A519B2C95CCCD78, E521374890C19F36EFA7C2B5240DCDE6316A31F4C454957D50878BD28BD437F0 ] SmbDrv C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys
15:20:52.0742 0x13fc SmbDrv - ok
15:20:52.0754 0x13fc [ 426AEE15F4E6C900C0C30E29B2D86361, D5916F590BD2E1F3CC474D6E10C2AE8F858C2A439ADF93CB61AD55875124DB43 ] SmbDrvI C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys
15:20:52.0776 0x13fc SmbDrvI - ok
15:20:52.0789 0x13fc [ B922D32039A3B5991E64429EC4EE52A9, 5EB7EB1F6D2C25F06044D8CA9F3BA0471FB40C8C96432BDC2C80CC36DC49BA0B ] smphost C:\WINDOWS\System32\smphost.dll
15:20:52.0852 0x13fc smphost - ok
15:20:52.0883 0x13fc [ 0BA53B01A02848A1545E2A743FF17B2F, ADAD55B9E0172BD7FBA92C5CD4870419FE9EF16F907DA1EEF2A9AE6492DE1909 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
15:20:52.0968 0x13fc SmsRouter - ok
15:20:52.0990 0x13fc [ 0B6BECB2651EF947249CDC3715E8B9CC, EB7281AF3529DE16FE8CD0C0C0C8877641865A5864D58628DBAB865B510B0D0B ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
15:20:53.0037 0x13fc SNMPTRAP - ok
15:20:53.0066 0x13fc [ 1A6CB30F0EFC1632E6F1B852CA892583, 0E6BDCEE837AEC3D02C437478143C75550C94A50E36895DDB095F54A2FA18E2A ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys
15:20:53.0152 0x13fc spaceport - ok
15:20:53.0165 0x13fc [ E1C158F6C00359278727A2CEE5D2ED71, 1591F942C6DD99D3BA7FD4D72D957864117B2263F205468A15F1D1417C6F799D ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys
15:20:53.0234 0x13fc SpbCx - ok
15:20:53.0272 0x13fc [ DC520253EC32B515E7792DB05DB43EB2, 8A614286522CA637EF0D58F79143146D5FB40DCD0CA1333752989BCD51DE00C0 ] Spooler C:\WINDOWS\System32\spoolsv.exe
15:20:53.0363 0x13fc Spooler - ok
15:20:53.0633 0x13fc [ 7C58AFEC26E9F7730A8AA7FD40225937, 546EAD8889F2A1BB6DCCB7781976B975F34DA1C9047F95FEAA52CF38EC60C6DD ] sppsvc C:\WINDOWS\system32\sppsvc.exe
15:20:54.0014 0x13fc sppsvc - ok
15:20:54.0025 0x13fc Object required for P2P: [ 7C58AFEC26E9F7730A8AA7FD40225937 ] sppsvc
15:20:57.0274 0x13fc Object send P2P result: true
15:20:57.0304 0x13fc [ ACC1709EC7FE6EB8999DBC91C50C2B34, 83ABF51751A264291C53A32B86239A607361E56CB045CD2CBE6E41DBB8A01F54 ] srv C:\WINDOWS\system32\DRIVERS\srv.sys
15:20:57.0390 0x13fc srv - ok
15:20:57.0428 0x13fc [ AFBCFC946FAE7483E27BD316D03F94A5, CC9478EA717E85C38304957E923997821DFE2A995D7C8DF98C15267D952BEFBE ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys
15:20:57.0556 0x13fc srv2 - ok
15:20:57.0575 0x13fc [ 107C1EBE79710E4A759449BD6604245A, 963D693F4E61EDC7B3AA9006CC274D56E577CE0035A61DDB2A6DE72116D5C52B ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys
15:20:57.0651 0x13fc srvnet - ok
15:20:57.0670 0x13fc [ 8C1786C073A496B8C0C8A5450A4FFD5B, 13BF3B42A63CE6C461259D4CE767FB0DE1F10433512A11D2B2C033E36E652542 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
15:20:57.0749 0x13fc SSDPSRV - ok
15:20:57.0768 0x13fc [ 217A982201052EFC8C3C0C88D229791C, 11509E3446ED7B75C9A05CDC4A7AF18926CB463E0D98BAE1CD5DB43E88F94F90 ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll
15:20:57.0832 0x13fc SstpSvc - ok
15:20:57.0869 0x13fc [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
15:20:57.0919 0x13fc ss_conn_service - ok
15:20:58.0054 0x13fc [ 58863C57E4598C4F9DA967C5C36CFA5D, BB34FBC324E84E05128258CE3755241ECB63F7F2AE7F96716AC373931FAF92A8 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
15:20:58.0284 0x13fc StateRepository - ok
15:20:58.0301 0x13fc [ CCDA497C880AD16D87EDFAEFCFB2EDF5, 622599AA35ACFF0375DA252210BE42E7E90F30EDFEFF2F62FDB14AE6E45B5F88 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys
15:20:58.0343 0x13fc stexstor - ok
15:20:58.0353 0x13fc [ 2834415C4EDD6CE35CB3CFEC50E08469, 28426616C709457DF38B5E2B4B9666C1255B81D2097589A95AAABD1BFACD302A ] StillCam C:\WINDOWS\system32\DRIVERS\serscan.sys
15:20:58.0402 0x13fc StillCam - ok
15:20:58.0436 0x13fc [ 75476CAA8FA0A4E573948CDE8C7F0304, 68C4405CACA77AEED71761875A9AF60BCFBDD39E356BEA1BA8226E099BAA5FA4 ] stisvc C:\WINDOWS\System32\wiaservc.dll
15:20:58.0519 0x13fc stisvc - ok
15:20:58.0534 0x13fc [ BF8EA6FC3358C2F69678E3E94F764F84, D274DAD7B5756DD49CA44277C73497F1EC465C8E365CC730CD194932C3825920 ] storahci C:\WINDOWS\system32\drivers\storahci.sys
15:20:58.0584 0x13fc storahci - ok
15:20:58.0597 0x13fc [ 32FF460DA8C1F370F5C08B7654899B73, 0C9D5D38D033109BA672ABAFEF0F0CD295E9FFA108ACFCA9044429D9B2CA9057 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys
15:20:58.0668 0x13fc storflt - ok
15:20:58.0701 0x13fc [ CC21DB3EF619B9480FE31A4EFE92CBEB, 256EFCA2F231F41D34250E1460BF88894D943EAE83A0B153FCADE700AB4DE11E ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys
15:20:58.0759 0x13fc stornvme - ok
15:20:58.0771 0x13fc [ 390B8A75768E2689586539C224520895, D72F52E6D7AC5DC318FF9C1DF1F4E8A435D65B6BB59D7F1642222EC026BC54DB ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys
15:20:58.0833 0x13fc storqosflt - ok
15:20:58.0865 0x13fc [ B1305CDD98D5FC49863279D4B51DB510, 4B745E8D14591CA69429CA579467B9528B94C54EBD2FCFD446000C9C1BCB3B07 ] StorSvc C:\WINDOWS\system32\storsvc.dll
15:20:58.0960 0x13fc StorSvc - ok
15:20:58.0972 0x13fc [ 770A92D9D3A0BF61C97C3AFCB36847D9, 21A8CC3F8E63B971C4FF8DDED5C7032E093A7B0F16E2128A9BD2E890BA76A1D9 ] storufs C:\WINDOWS\system32\drivers\storufs.sys
15:20:59.0024 0x13fc storufs - ok
15:20:59.0034 0x13fc [ 736A2418E3E7F3DB3CF6EB0A55D1D581, 2D3BBC4E0C7B51EDE7479A978E4BCD5F47A7257745179F01D2D9ECFD83CCCC82 ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys
15:20:59.0077 0x13fc storvsc - ok
15:20:59.0086 0x13fc [ FA8F6E3AD3F92B35D2673CC9FD20429C, 62F81CBACF7E16FEF9DE3BE95FA5C9BDB51BAE4667AE5AE71399864A390FF6D5 ] svsvc C:\WINDOWS\system32\svsvc.dll
15:20:59.0136 0x13fc svsvc - ok
15:20:59.0145 0x13fc [ BD98B0225BCD49E8A62F4F8EE1D1F613, CDAD11969B2DA417079547724BECC3DB4FC4711B3C01590EB0D02774B69B6D90 ] swenum C:\WINDOWS\System32\drivers\swenum.sys
15:20:59.0187 0x13fc swenum - ok
15:20:59.0214 0x13fc [ 22E539A9B96C66A713583EC017562616, 210DA61DFC7AA9AD23277D9CC0239B781F4EABD322D0803AEC9434D68B81FABD ] swprv C:\WINDOWS\System32\swprv.dll
15:20:59.0294 0x13fc swprv - ok
15:20:59.0308 0x13fc [ CAE4B27B469C583131EA5AAE622F5D76, 3979006EB22489D1AAD2EC2E9F32C286EEDCDB83B37B97E58BA831263EC33B84 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
15:20:59.0370 0x13fc Synth3dVsc - ok
15:20:59.0402 0x13fc [ 1DEB6BC29F9B183528A21BA522AC3278, 8518527A9DDFD8B58AED1A7C1A1CFB4153DA34B634117AC91A94993EC5F76A80 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
15:20:59.0449 0x13fc SynTP - ok
15:20:59.0502 0x13fc [ 34A3EB84B2A830E6F450B8F885AE4E6E, E61AC6D17B815CB71F26D71CA3CCAFD9E66A170E3ED2E64A4F20D097A0C683B5 ] SysMain C:\WINDOWS\system32\sysmain.dll
15:20:59.0619 0x13fc SysMain - ok
15:20:59.0622 0x13fc Object required for P2P: [ 34A3EB84B2A830E6F450B8F885AE4E6E ] SysMain
15:21:02.0103 0x13fc Object send P2P result: true
15:21:02.0127 0x13fc [ AF2C8D7C1D4DCFD5C31501F009DF42B7, 3DDF9353F014EE99B031BBC969620CA07647FBB8D78EB4697C8D633021B46B11 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
15:21:02.0193 0x13fc SystemEventsBroker - ok
15:21:02.0209 0x13fc [ 6979A147C0D5C5CAB621ADC394D32B80, C30B8E3D271A1591D965559EA4A11A1BE63A34D832ED53B26CE91799C888DF77 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
15:21:02.0258 0x13fc TabletInputService - ok
15:21:02.0281 0x13fc [ 86B62FC8CB89946446F9B24FE49A66FD, 7B095310D1C78B82E5ACAC4713E101DD1323A3CF6FB39218C2E78ABE2B0385B5 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
15:21:02.0345 0x13fc TapiSrv - ok
15:21:02.0468 0x13fc [ 892F30506DCCF230C5A57019C1D8D31B, 52C83A963E2D05770B6A281E8E559C8203E102D6B4C9C37801B1F58CB4B92D2F ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys
15:21:02.0727 0x13fc Tcpip - ok
15:21:02.0831 0x13fc [ 892F30506DCCF230C5A57019C1D8D31B, 52C83A963E2D05770B6A281E8E559C8203E102D6B4C9C37801B1F58CB4B92D2F ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys
15:21:03.0049 0x13fc Tcpip6 - ok
15:21:03.0074 0x13fc [ 17F37EC9042D84561C550620643D9A85, B01620BA319A1383D403E6E50C7724879520F3267654556D975CAFFF91A82C78 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
15:21:03.0144 0x13fc tcpipreg - ok
15:21:03.0164 0x13fc [ 91D3F2A6253EF83EFBD7903028F58C4D, C15768CCCF734093B0F8A5E76882B35927B716E4F14D91ACEE897E1C078D43D1 ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys
15:21:03.0215 0x13fc tdx - ok
15:21:03.0226 0x13fc [ E730D0EB1B84EBC98423FC8D285EDBC0, 442DD433F9D22304E64EC7ACFC4E04892D4D92D8AC545A3530FC932A2EEC4767 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
15:21:03.0274 0x13fc terminpt - ok
15:21:03.0324 0x13fc [ 14307D4801C8CEF0A615907C09E886B3, C7F34C294D70DE689F673E0B5E9253B27EFEBBE6FA38B68B3B0B0374A896407E ] TermService C:\WINDOWS\System32\termsrv.dll
15:21:03.0434 0x13fc TermService - ok
15:21:03.0448 0x13fc [ D009D1BC14FD5F2AC93D1878735F6C39, D8BCE505B66E05BC00075E46B38359CA4D0FA484EB7981A74221885E8A1FFB87 ] Themes C:\WINDOWS\system32\themeservice.dll
15:21:03.0512 0x13fc Themes - ok
15:21:03.0539 0x13fc [ 5F27DE2082E16D4C1D6C627C8ECBD341, 08DA3EB3EF2B2006B6F9F2C8C149DF55DE6738975D556206A814096CAB5C1411 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
15:21:03.0609 0x13fc TieringEngineService - ok
15:21:03.0645 0x13fc [ FC971E1D1B5900C231591A7720FCD8B8, DF58C350977019E4A8F381FB35702E9BEA89F6A8C6BF36C56376D36BC8FE630F ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
15:21:03.0738 0x13fc tiledatamodelsvc - ok
15:21:03.0761 0x13fc [ 4BA0AB760971A0109A3442BD8B4F9AA0, 681171ECE155B7B1048525AA9BF14E4FDB437EE6BD91B6C5C9FFE122757D6BEB ] TimeBroker C:\WINDOWS\System32\TimeBrokerServer.dll
15:21:03.0838 0x13fc TimeBroker - ok
15:21:03.0857 0x13fc [ 169B0A246067457FEF8A18EED7EED9D5, BF5AC0CB29E1E456253B881CD0608B578D7343E9DFE1738A14598D1DFFE1AB66 ] TPM C:\WINDOWS\System32\drivers\tpm.sys
15:21:03.0921 0x13fc TPM - ok
15:21:03.0936 0x13fc [ AA84AF93CE5AF1F05838B51D20295419, 85B3EE773C691EEDFA080CD9C59D31CB58A5BC577AEE91A929F5DFBE1368AB6D ] TrkWks C:\WINDOWS\System32\trkwks.dll
15:21:03.0991 0x13fc TrkWks - ok
15:21:04.0006 0x13fc [ E50DD57F496CED8873FA3E7D38BCCD42, 36B95F6F2CF48078C6B19FB452C87BB07E95C8804A5C6B526D349AC6227CAB26 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
15:21:04.0047 0x13fc TrustedInstaller - ok
15:21:04.0064 0x13fc [ 48E828C66AB016E48F2CB4DD585315FD, 063809B610F6B177B65D62D12605FB94F108DB26A9FD3067E6D6C51F0D92E774 ] tsusbflt C:\WINDOWS\system32\drivers\TsUsbFlt.sys
15:21:04.0141 0x13fc tsusbflt - ok
15:21:04.0153 0x13fc [ 267C76EE60736EA5A1811A53FA02AABE, 28D4C4CB972534204B8336D0403B70E4EFE4F8369ABDE7401FFCCF7D4E3EA165 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
15:21:04.0202 0x13fc TsUsbGD - ok
15:21:04.0217 0x13fc [ 8CE72F094B822AD5EE9C3A3AFC0C16B6, 827CCD849544E1DA364B03DBC82A848D2F93AD32BA14ED52709C609BC70CE5CA ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys
15:21:04.0285 0x13fc tunnel - ok
15:21:04.0296 0x13fc [ 72E24CD1662577B38779B5E768C48FEE, 66BFD18CEDEEF358B04B81C65BC12606632FB1B2DAD4EC8405962DE1054D08CA ] TXEIx64 C:\WINDOWS\System32\drivers\TXEIx64.sys
15:21:04.0358 0x13fc TXEIx64 - ok
15:21:04.0372 0x13fc [ 1A9A77ACDAC29C39F50D2A492FD0DB16, E21F2E2BA6EABE0F6B5A1930DDB2CE5A921389A58C08A2D3F66D245E8698E6B4 ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
15:21:04.0439 0x13fc tzautoupdate - ok
15:21:04.0450 0x13fc [ 42C546414F80BD6C0137FC3A106F8A69, 067FFCAF0059935851888BD984E848E4E1A6CC1941A8F4534067CCF0B2A3B2E6 ] uagp35 C:\WINDOWS\system32\drivers\uagp35.sys
15:21:04.0510 0x13fc uagp35 - ok
15:21:04.0522 0x13fc [ 1686DBC81748B096232B15F16C302985, 63D72D1838C42A95599AF3C0B19A069E310ADB091208011D7D6FBAC968D1A59A ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys
15:21:04.0569 0x13fc UASPStor - ok
15:21:04.0580 0x13fc [ 3995CC3DEDED258768B8EBC2F4C0DC73, 130E99EF13EB494B8BB6A8E037DD8D59C195190EA3C27CA9E3A695AF4349DC7C ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
15:21:04.0646 0x13fc UcmCx0101 - ok
15:21:04.0658 0x13fc [ 1C95F7CE37D9EFB90EBE987A9712356C, B9EE7743ADA50276F05D735C5C29E44039D630A7DC93766A0EAF400DA037E4AF ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
15:21:04.0708 0x13fc UcmUcsi - ok
15:21:04.0725 0x13fc [ AED081772091C98173905E2DF28C223B, 08541CF3354EBB634BD590E0019128F70A6FCA9075B7E785A9E9BD82EC234DD3 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys
15:21:04.0793 0x13fc Ucx01000 - ok
15:21:04.0803 0x13fc [ DCA34A111C29E4578DF2B8CEA3C7CDBD, 86BCE4C8EC228724D5896067A85A4768B6069D10A482ECC51A8F828DBD3880C9 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys
15:21:04.0854 0x13fc UdeCx - ok
15:21:04.0875 0x13fc [ 718A956AE00CE086F381044AB66CC29C, E4EED1600C72CECE1D4507827C329A93D356BBA027470FCF6C4B5C1651DED643 ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys
15:21:04.0957 0x13fc udfs - ok
15:21:04.0968 0x13fc [ BA760F8E66428BA9FF1E8BFBC6248136, BE7DCBB293B12672CB3653E640C46F669BD738D320F34F4FA4A26F6B248561F0 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys
15:21:05.0039 0x13fc UEFI - ok
15:21:05.0058 0x13fc [ 5F0D997E6FC5A418D7673148CEF72887, 6C142CB8F06E5958045451253C9188CE876A84D08266FFD7F64AAE09964D8431 ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
15:21:05.0118 0x13fc Ufx01000 - ok
15:21:05.0130 0x13fc [ 2B1DABA97DDF5365FC66EE7DEDD86A13, 2FF3355862938B37EE63FCA149415CE5032BF54747B07517BB21460733B65AD8 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys
15:21:05.0194 0x13fc UfxChipidea - ok
15:21:05.0209 0x13fc [ DB630FC660443D63EBAB2C830C298EFE, 7698772FF9C988DF752DF3FAF1B154E923EBA425B92F288ABB6EF0805ABD3296 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys
15:21:05.0261 0x13fc ufxsynopsys - ok
15:21:05.0282 0x13fc [ 63451BD694651307254B8DD37A3D79C7, C781E2D876AF42D5972CCDCF86B7A59F6AF8AF0C6350647F3FA1B209119B5EF9 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe
15:21:05.0332 0x13fc UI0Detect - ok
15:21:05.0343 0x13fc [ 6DE78C04BF32ECA7AF3064F53687C9A5, 164D3BB24EBA3EAF613799928063FE75220A4E583D985F53A895017782C18600 ] uliagpkx C:\WINDOWS\system32\drivers\uliagpkx.sys
15:21:05.0389 0x13fc uliagpkx - ok
15:21:05.0401 0x13fc [ 67D1E0E6E4D5D33AF0AEF0E33B4DA0F4, BA2E6F16B6B3B54C943F1E7B9F79A6D1332A7ED228D754CC5AE70E3CD78B1F37 ] umbus C:\WINDOWS\System32\drivers\umbus.sys
15:21:05.0467 0x13fc umbus - ok
15:21:05.0478 0x13fc [ 11680607944A719EF20E0E740785712A, 1567C2B3AAD702DCC2DC9C6B7B92EE5B681C06701A39DAC3AA7E2BE9E1E04F47 ] UmPass C:\WINDOWS\System32\drivers\umpass.sys
15:21:05.0527 0x13fc UmPass - ok
15:21:05.0547 0x13fc [ FD949725D9EB52C0B87435CDE1134668, 96E2B3D3379E9AE225E5A4C5251207F1E7DA573901F4F026758EDE9FAEF4F2C5 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
15:21:05.0604 0x13fc UmRdpService - ok
15:21:05.0662 0x13fc [ 87E291D9CC3ECE9AA56ABFD8063C4050, 781958969DB79454C91156473B4DA363F6D540D99974C2924ED81604CF45C3E0 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
15:21:05.0896 0x13fc UnistoreSvc - ok
15:21:05.0978 0x13fc [ B85A8CF2BE74DFF1E80097AC94584112, B1DBACC33A4143FEE2CF54E567590A69580312AD7A053BCC85B487C4D451FBDA ] upnphost C:\WINDOWS\System32\upnphost.dll
15:21:06.0062 0x13fc upnphost - ok
15:21:06.0074 0x13fc [ 2410A0C20D21A25E6C01979FA886BE90, DD3F92D8CF110D47B9E36BA0EB10EB34C0FDD28FE0D57E4B60F9326703388F75 ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
15:21:06.0118 0x13fc UrsChipidea - ok
15:21:06.0130 0x13fc [ 6E59CE43B6BA5AA1ADCF36A4DBBB92BB, 647D66775A90F67D803043DE8C8AE8BC2F7A042A8DCF9C95BF5458C79609481B ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
15:21:06.0192 0x13fc UrsCx01000 - ok
15:21:06.0203 0x13fc [ E8A59FA109A22FC07E44BDFCC9727DBD, 0DC5928C0FF7E5B38917660D6EFECCC22172DB0BB9B23216F33E750790529C16 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
15:21:06.0251 0x13fc UrsSynopsys - ok
15:21:06.0263 0x13fc [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64 C:\WINDOWS\System32\Drivers\usbaapl64.sys
15:21:06.0306 0x13fc USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
15:21:06.0306 0x13fc Detect skipped due to KSN trusted
15:21:06.0306 0x13fc USBAAPL64 - ok
15:21:06.0322 0x13fc [ 9F9D5E2086BB9AEEA96E9BF73B7B2D32, AFA84CE1E96C07EBFB7A05D0181C876E027B848AF6C6DB932765912B814CAF56 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
15:21:06.0406 0x13fc usbaudio - ok
15:21:06.0422 0x13fc [ D8A44550ECE102B6443F5D54DCE7DAB3, 97F5AE7B17DAC4A4F3186C77116BC8E49874FB0018C99D8E2CDA29D89E8B0912 ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys
15:21:06.0512 0x13fc usbccgp - ok
15:21:06.0526 0x13fc [ 66B3D22DAB5312FF238ABF5C6D9F8FAB, 4A644AFC1C27D692D352BEB8801398A00EA5B4055476063AF905A0A46DDBF8BB ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
15:21:06.0584 0x13fc usbcir - ok
15:21:06.0599 0x13fc [ 3E4F20DB902D2E2914F3FF3DB9772200, F3D32BE06A26164B5F6E8DB67160D1DBBDC6D14666EEF84EA43C78CB7706E31C ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys
15:21:06.0652 0x13fc usbehci - ok
15:21:06.0682 0x13fc [ 41F7F00D76904416EF1F9EFA1A4C37A2, 7A4250EB2E2E0037B3AE1480C13B229ECFF5C575E68E4F934EE011DB1833B46A ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys
15:21:06.0766 0x13fc usbhub - ok
15:21:06.0799 0x13fc [ 12A0B486EA13DF46C27B90CC2CE92FE5, 643D8B906F02FBC0802B3468C24D6C6A0BDB07FEA894B68E0F404AB5287C4409 ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys
15:21:06.0890 0x13fc USBHUB3 - ok
15:21:06.0902 0x13fc [ DAB35CCA86F5FBE77D870A40089BC4A1, 4A47D59D882D0F2B93F2EE7F10995E7D68B58009434E2CBD04C659E0D1F059D8 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys
15:21:06.0959 0x13fc usbohci - ok
15:21:06.0972 0x13fc [ 21162F65C7756AAECAEBED9E67D0A5FE, DE3B43964171DB5B0464DA5E7A674A5D200A8695E6EF1AE2030681066ABA2688 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
15:21:07.0054 0x13fc usbprint - ok
15:21:07.0068 0x13fc [ CA6369870F91F3D367D26278E0AD0DDF, 651B97E73AFC615C80DE2076872DEB49DCD775B5C9988AB4AC0A0162DAB09F70 ] usbser C:\WINDOWS\System32\drivers\usbser.sys
15:21:07.0142 0x13fc usbser - ok
15:21:07.0161 0x13fc [ 37C2CD8587BF7F785381EB7B26916B52, E8F65BF7BBDEF82BD97629921A1148304CA44DCD03E079E28D75D04244B71C39 ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS
15:21:07.0223 0x13fc USBSTOR - ok
15:21:07.0235 0x13fc [ 8B3E458A8851F9A3B2109B1680EE1159, 753AC8F82F65564F00EA2F60B43E4B815FEAABE0DA35B6356210A5F4B1CA3EFC ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys
15:21:07.0293 0x13fc usbuhci - ok
15:21:07.0314 0x13fc [ 4B13B61CBB9CC3CB373C60B930D648F5, C79D10A1BF2B6BF141DD37A90BCCA0E1F2AF31B5028BB21537A8EE6EED630F5B ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys
15:21:07.0411 0x13fc usbvideo - ok
15:21:07.0438 0x13fc [ 325727F01F03C504CF788618A13DC266, 9F685113F714ADBC6DCD423CCD205F71E00D1AA9B5DD045B95E61E53B0F8E9AF ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS
15:21:07.0571 0x13fc USBXHCI - ok
15:21:07.0584 0x13fc [ FECB9A2BDE6DB505C346490C3746FEEA, F2CFAC58DE3F467B74B660F68F44EE72AEDAE33499DCF92C7AACD108803C62A9 ] usb_rndisx C:\WINDOWS\System32\drivers\usb8023x.sys
15:21:07.0645 0x13fc usb_rndisx - ok
15:21:07.0715 0x13fc [ ED06681482E0B9B4D573684CD5FB18F5, 1CCFBD37F8B895900B860AAF107130C5890C01F5327A4AEBB910F6B2BB0BA61D ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
15:21:07.0852 0x13fc UserDataSvc - ok
15:21:07.0918 0x13fc [ 36EC82F0E399F36BD25F593D63DC144A, 2A9E916A098ACD5A5074A5FD053ECAB027A0932A348C728F20CD63EF16289533 ] UserManager C:\WINDOWS\System32\usermgr.dll
15:21:08.0063 0x13fc UserManager - ok
15:21:08.0096 0x13fc [ 05F4CB5991D897E4253BF61FA5E828F8, 25B5B6751B4455491E9A050DF5C12F788B5677F70FB4844E0BF851090AC1F74C ] UsoSvc C:\WINDOWS\system32\usocore.dll
15:21:08.0184 0x13fc UsoSvc - ok
15:21:08.0199 0x13fc [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] VaultSvc C:\WINDOWS\system32\lsass.exe
15:21:08.0237 0x13fc VaultSvc - ok
15:21:08.0250 0x13fc [ E1BE37312785A71862516F66B3FD24CE, D248C513DBEACB192653C6E46809209F341771B146544BBF43B86369280B4F8B ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys
15:21:08.0301 0x13fc vdrvroot - ok
15:21:08.0339 0x13fc [ 67A6E949395A09914AD8B38FE14B8D15, 593F2FAA880B2E0468F98BD58B5214A170E5890907B25294D7A47C66505A3D45 ] vds C:\WINDOWS\System32\vds.exe
15:21:08.0437 0x13fc vds - ok
15:21:08.0457 0x13fc [ E42C0F2850735FF9D908B9DB581E6314, E2204A56BF37FC57CD2ED96E3F908882D72B4BFF1BFB97C5172C851F1E4F9650 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys
15:21:08.0529 0x13fc VerifierExt - ok
15:21:08.0567 0x13fc [ EC15FD6A28757793E2DA394CD94ABD52, DC758BBEE9C6952D7B3F7171EF67B037B4068E88189A2C4A894122D1D1209468 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys
15:21:08.0662 0x13fc vhdmp - ok
15:21:08.0674 0x13fc [ D0C9632C350F46786643A069251BC249, CF65BA0D3F3D2B821C10E2D4F53F5B6BF6236CA9767419392A561CFA79254C3B ] vhf C:\WINDOWS\System32\drivers\vhf.sys
15:21:08.0726 0x13fc vhf - ok
15:21:08.0739 0x13fc [ E886CB75DA2B6EB35469EF10135624C7, 3AFC59A0709B984F517A918D5BBEBEB1C80001BEC87C133447DCEAEDE00E516D ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys
15:21:08.0798 0x13fc vmbus - ok
15:21:08.0808 0x13fc [ 46D2EC27820EC0F798F85821E53C2942, D298A7D6AC16F76A069F843C8DD323ECB340D361733CB9B076BCDE8FC5F1FEFC ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys
15:21:08.0858 0x13fc VMBusHID - ok
15:21:08.0887 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
15:21:08.0957 0x13fc vmicguestinterface - ok
15:21:08.0985 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicheartbeat C:\WINDOWS\System32\ICSvc.dll
15:21:09.0054 0x13fc vmicheartbeat - ok
15:21:09.0081 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
15:21:09.0146 0x13fc vmickvpexchange - ok
15:21:09.0172 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicrdv C:\WINDOWS\System32\ICSvc.dll
15:21:09.0239 0x13fc vmicrdv - ok
15:21:09.0268 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicshutdown C:\WINDOWS\System32\ICSvc.dll
15:21:09.0337 0x13fc vmicshutdown - ok
15:21:09.0365 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmictimesync C:\WINDOWS\System32\ICSvc.dll
15:21:09.0433 0x13fc vmictimesync - ok
15:21:09.0461 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvmsession C:\WINDOWS\System32\ICSvc.dll
15:21:09.0532 0x13fc vmicvmsession - ok
15:21:09.0561 0x13fc [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvss C:\WINDOWS\System32\ICSvc.dll
15:21:09.0627 0x13fc vmicvss - ok
15:21:09.0641 0x13fc [ B9265F47E7A354BAAA0AF5CBA3F8F7CE, F836E7BEDC7CAB1C01225164D171A0210D8F909F52992E4C0BF3C92B365BCD52 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys
15:21:09.0689 0x13fc volmgr - ok
15:21:09.0714 0x13fc [ BEE9C8B72AB752B794F69C2B9B3678AA, 49A5093C26F3CDCD60577F7F2D7F936C7B2BD010B27F2C49A7B6AA41E42DF98D ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys
15:21:09.0796 0x13fc volmgrx - ok
15:21:09.0822 0x13fc [ E1F91A727A04C9F8199D04FF3BBBF63C, 076CAEE621DBF7DE24ED92BA239C440879FDB674CF3213DF3E35AEC03D0D2031 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys
15:21:09.0900 0x13fc volsnap - ok
15:21:09.0914 0x13fc [ F7B1B1101271E31F43CC76E890704F51, 2282D82B220C3D13FF980ED8E40443C83816D3DA9557EACEA137873F92BB9CF4 ] vpci C:\WINDOWS\System32\drivers\vpci.sys
15:21:09.0962 0x13fc vpci - ok
15:21:09.0980 0x13fc [ D48ED0A08BD2FD25A833E6AC99623091, 6CA7580878D3893E14B4938023A00CDFC9BE215A0CE4ED59A94F95DFD9FDF4D8 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys
15:21:10.0049 0x13fc vsmraid - ok
15:21:10.0118 0x13fc [ 4CF5A1E0C4FCA956ACD6C654E2A8610E, 57F3C7200C25E8717AF92AF2ED7615C6605179D3514B432220FA6EA94CAB4F2E ] VSS C:\WINDOWS\system32\vssvc.exe
15:21:10.0261 0x13fc VSS - ok
15:21:10.0264 0x13fc Object required for P2P: [ 4CF5A1E0C4FCA956ACD6C654E2A8610E ] VSS
15:21:12.0814 0x13fc Object send P2P result: true
15:21:12.0838 0x13fc [ 6990D4AFDF545669D4E6C232F26DE1FB, 9B8F99A035188FD96BA79E935E8EF387BEA2223ECA0B74CF64AB993DABAA5722 ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys
15:21:12.0909 0x13fc VSTXRAID - ok
15:21:12.0921 0x13fc [ 1EE11F0508C58EF081F4176E66D6970B, 9069B3FC8850C7CF617909C6DBFC3753FEB59A9E708379CC57190F4097FB374E ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys
15:21:12.0985 0x13fc vwifibus - ok
15:21:12.0999 0x13fc [ 938E4EF58E42D252B742B0E243011B90, AC0C21FBAF15924CB271CA43ACB7A86287936C78B4852BCFC59EC7EC703E036C ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys
15:21:13.0090 0x13fc vwififlt - ok
15:21:13.0101 0x13fc [ 3BE5AAC930447FD18D4A8255A2FEC95C, A517357188FE4A5BD98A3CDB2165ACCE96CCE4BE2B90DDBEAF70B6DDF393F506 ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys
15:21:13.0157 0x13fc vwifimp - ok
15:21:13.0187 0x13fc [ 48C1A256591297C43ECFC4E30D144EAA, 8E66833ED2CEB6D7E499EB2E4282B4F9DFA28B6D21757BB88EC52FD069D7FACE ] W32Time C:\WINDOWS\system32\w32time.dll
15:21:13.0289 0x13fc W32Time - ok
15:21:13.0302 0x13fc [ 00C27B64C758C111E5D78A70DE6CA2B6, C99761B9B671B3A1FF1C52796CCA3F4F825BF50D9657D13B551E849CDD82055D ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys
15:21:13.0366 0x13fc WacomPen - ok
15:21:13.0395 0x13fc [ D76D1AC4F2C642D09A68227D129A4726, D14D6C4D94E9660848C74B220359683D91A4A3D70750E781A20B6D86D46794CE ] WalletService C:\WINDOWS\system32\WalletService.dll
15:21:13.0488 0x13fc WalletService - ok
15:21:13.0502 0x13fc [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
15:21:13.0564 0x13fc wanarp - ok
15:21:13.0575 0x13fc [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys
15:21:13.0633 0x13fc wanarpv6 - ok
15:21:13.0722 0x13fc [ 2598BBF11C9E7D0885DCA52E7FD5BCBD, 46B1FB080A2CD88C89A0EB8BA2594A1FA2C341ED77A6C6835CBFFE42907FAC55 ] wbengine C:\WINDOWS\system32\wbengine.exe
15:21:13.0867 0x13fc wbengine - ok
15:21:13.0904 0x13fc [ 6950271D0C75A33BD05F7155EF1B2DD4, C6959972D490710CA7539EA8F51B5CC1FA64FF9799242075719C4FD394B6F9C7 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
15:21:13.0987 0x13fc WbioSrvc - ok
15:21:14.0024 0x13fc [ 39E07EE74F50C39C1EB315152F03199C, 053562C2656A76265AE09045952A4C9473BE2B4426D9ECC1A025ED4BC204AC25 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
15:21:14.0125 0x13fc Wcmsvc - ok
15:21:14.0155 0x13fc [ 53A036CED1270F2459E708A05922FD49, 2F281A72E4B0408DE6C8153F5988C9AA38591FB1E72558767D389637D0666A85 ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll
15:21:14.0241 0x13fc wcncsvc - ok
15:21:14.0254 0x13fc [ 965B6197A659782B6A0F68411A180AAD, 5541AB78B71E4FA655BCBF2D80D574B2A3B4AA8871F65D26620BDE549FA5459A ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
15:21:14.0300 0x13fc WcsPlugInService - ok
15:21:14.0311 0x13fc [ 069D3D6E20AD753B34FCE856F0436869, CF8C12295DDAA56E7350019AADBA533D7857CFB3F20DEE14E557963645A9331B ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
15:21:14.0383 0x13fc WdBoot - ok
15:21:14.0423 0x13fc [ 6CC727E94CD84E9720FDCDA8089CABCC, BCF66056B06DED6BC2D329E910FCD3E685D627BAD3B5D7F4B0E970B45CD9CEF4 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys
15:21:14.0518 0x13fc Wdf01000 - ok
15:21:14.0542 0x13fc [ E3E97151A1D1E87BB2D5371F66C5F169, 0ED0B9852FE0533816F5EE2F06045B3964A00FD749A7011DB3C663AB6FA369E2 ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
15:21:14.0606 0x13fc WdFilter - ok
15:21:14.0620 0x13fc [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
15:21:14.0678 0x13fc WdiServiceHost - ok
15:21:14.0690 0x13fc [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
15:21:14.0747 0x13fc WdiSystemHost - ok
15:21:14.0784 0x13fc [ E70DDD8E2245CC67547B0861983912D8, 64C73B1496FFF1F6BB3D877CB5BE54DE35C303AE234B11FC90038DC4F73241D9 ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
15:21:14.0901 0x13fc wdiwifi - ok
15:21:14.0917 0x13fc [ 07B043160399AF4009054E2EA3464BF4, 8D652D7CD75F8FB2B5414155355F0C970015914E1AC6522DBB8387BB8662F542 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
15:21:14.0970 0x13fc WdNisDrv - ok
15:21:14.0980 0x13fc WdNisSvc - ok
15:21:15.0004 0x13fc [ 9972D395DBD05D91DA5EDADEB9325680, 9382D846793F285721A1A0FED42F914035A53D856B902FADB0B7144C471BDA91 ] WebClient C:\WINDOWS\System32\webclnt.dll
15:21:15.0070 0x13fc WebClient - ok
15:21:15.0090 0x13fc [ B6BF579761489720BCE787F723F596E5, 879B17F6A4F23F5E85A09126B7B407955DDCEB1BA4A8FFC0A418B7F47311C056 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
15:21:15.0150 0x13fc Wecsvc - ok
15:21:15.0161 0x13fc [ 10C9CF8771A2A87F575F9FB56821474E, 15E3DFFE9CF6777F67E426ECF797D2DF743EA152DEE336DCC9C2F92A0E6EB9A3 ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
15:21:15.0212 0x13fc WEPHOSTSVC - ok
15:21:15.0226 0x13fc [ 357C083FE35D030D991D163AAF622A06, F301852D49DBDEF0D28F56CD74CBDC71CA003EBD07D3F46EA5C870DC1BD07896 ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
15:21:15.0286 0x13fc wercplsupport - ok
15:21:15.0301 0x13fc [ 2235AF716D15D9DFE4C59DC2AC0C440C, 2DCFCEBEA77E7E40CEF9A785BE1A794B390B36E40FBCF49B494F9CEA3F6A28C4 ] WerSvc C:\WINDOWS\System32\WerSvc.dll
15:21:15.0364 0x13fc WerSvc - ok
15:21:15.0379 0x13fc [ C11272713719922DE5711094333BD166, 61D4F07E02AECF04964FF51EEA31069A2B0EAA549AD2B29B5FD3E1E6BB543593 ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys
15:21:15.0467 0x13fc WFPLWFS - ok
15:21:15.0480 0x13fc [ 205A1FAE910F5C493D236245850BB62A, DBA4D1D734BAA3CDEB8A7F9C81A8DAA88CEA55AF5C4C5908E76FB8E522C5EC8A ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
15:21:15.0528 0x13fc WiaRpc - ok
15:21:15.0541 0x13fc [ EF536C54AB9281FDC4E83B07279FCFC4, 22E4F133170682EE14413CA8FDC2DBE73AB31960D6ACB728A6B398229FDDFD3B ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys
15:21:15.0598 0x13fc WIMMount - ok
15:21:15.0604 0x13fc WinDefend - ok
15:21:15.0631 0x13fc [ D8966A76408107224C6013993135DD78, 6159F69BC26FF817078E68C70E6DFC9075FEBF9EF9F4F046C7A65BC377544AE6 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
15:21:15.0681 0x13fc WindowsTrustedRT - ok
15:21:15.0691 0x13fc [ 8B102A7B6CE326FD4208CC7C2D183343, E47C1D76CBFD2A382C3A7BB048D752FB6DD4616FADDEB1C3ADD5DDAE149742AF ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
15:21:15.0734 0x13fc WindowsTrustedRTProxy - ok
15:21:15.0775 0x13fc [ 1859EEE0BAFDF8F20B7B3C40708B1CD3, C17792B9B41D384751A601A3B2CC3C35089257C6D4B63FC5CC0ABC7A34814688 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
15:21:15.0867 0x13fc WinHttpAutoProxySvc - ok
15:21:15.0879 0x13fc [ 4A53441C1C4D2878BEF27E381138BB2D, C221E74491E6FD2AF472B53876B46788D5CF62F4E645457F3B3816FD0ED2BAA1 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys
15:21:15.0934 0x13fc WinMad - ok
15:21:15.0980 0x13fc [ 1033C37122C7404C3B926ADF84874832, 163B3A7112F13AE7BB2655A28C6B19AF9B263F2AD2FF1B75314BE3E2B9118903 ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
15:21:16.0031 0x13fc Winmgmt - ok
15:21:16.0145 0x13fc [ 703D0F62C5AA4D08EE8756516C0D125D, 02015A5E62490C11EC968160C528C2AFD1D7194AACA27F407B06EB462657511F ] WinRM C:\WINDOWS\system32\WsmSvc.dll
15:21:16.0356 0x13fc WinRM - ok
15:21:16.0384 0x13fc [ 260907CE034FE327AC99BDA4153AB22F, B96501F43248713C2E153B9D22B78D51412A3C6989A2FB5F53A406C6CDC98D30 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
15:21:16.0438 0x13fc WINUSB - ok
15:21:16.0451 0x13fc [ 40A3E8D729F458B2C9A8BD9380FF83D5, CD42FFC138969EF8C9588FD113F0B9A98FBA282D46A5B6BCFA765F55ED6E97A1 ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys
15:21:16.0482 0x13fc WinVerbs - ok
15:21:16.0594 0x13fc [ EF0A5EFFBC78F7677D3591BB58AC5A52, 0860B9D0F1A1FFE14F1A0FDFD3B66C90CED90092D9CF9AA35D6D6D088E2DC4A9 ] WlanSvc C:\WINDOWS\System32\wlansvc.dll
15:21:16.0789 0x13fc WlanSvc - ok
15:21:16.0884 0x13fc [ 58A8B8B2A343829602AC105F66988583, 46D142A3A7D74F6383B8D7E642E796535CE15BEDAF82AEFB4BEF46F0355411FD ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
15:21:17.0059 0x13fc wlidsvc - ok
15:21:17.0075 0x13fc [ 8F010BF65238F3F822D22BA12831796E, 2CA830F259B742D2F5CDD0437960BF512D40FB4A4C2342E3BABB38D468F79694 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys
15:21:17.0133 0x13fc WmiAcpi - ok
15:21:17.0156 0x13fc [ 74ACA5A7880C1F0BB9D60E32E1705A70, A89817BCCBFF94D7394614DA81D1C6C4F53AF47A539E674EEF6DC3FC496BF702 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe
15:21:17.0203 0x13fc wmiApSrv - ok
15:21:17.0212 0x13fc WMPNetworkSvc - ok
15:21:17.0231 0x13fc [ 2A9650FCC696DB28E45EA8B33B99B8E6, FBEBC6C05D50F578C6EEE0A7285EBE1DEADB08DD21FA3232630FD8D5A68FC3FB ] Wof C:\WINDOWS\system32\drivers\Wof.sys
15:21:17.0288 0x13fc Wof - ok
15:21:17.0373 0x13fc [ 4090C6738AA92B428220857B4D44F638, 4A3EE47494051E5BA8393F2AC8226EF434DA3AA1895CF4BADC9BC1BC378647C6 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
15:21:17.0535 0x13fc workfolderssvc - ok
15:21:17.0552 0x13fc [ 22C52D7EE7C7D0E02C8EFD8CAE8E3A71, 126605A12CEC9CC07DE3050F12E43CECABEAF0D00DF12300AF70F34700F7FE8E ] wpcfltr C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
15:21:17.0630 0x13fc wpcfltr - ok
15:21:17.0669 0x13fc [ D282ECA35ADAC7A93D6B4943E775010B, A76A9698A95646FA63AC18DFFA02B744D7C6043934CBF6C37832ED2E6B21F570 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
15:21:17.0718 0x13fc WPDBusEnum - ok
15:21:17.0730 0x13fc [ 1C08E424CBDD5065BB7266F8C048C1B1, 0452C85EDA6CBAB75C2617886C5D8117ED25D91F1BE0F8377B08D55B6629B028 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
15:21:17.0790 0x13fc WpdUpFltr - ok
15:21:17.0801 0x13fc [ 2C6EEFFBB7FB1C51CCD3737C77AB9109, 8C2ED309FAF4312512E7BCCBBC51B1353603A3499077A1DE21991F0692AF1620 ] WpnService C:\WINDOWS\system32\WpnService.dll
15:21:17.0848 0x13fc WpnService - ok
15:21:17.0859 0x13fc [ 638B43D39A3D0B47024555CF1095E6F1, C7EA0A6ED227A5256EB02CA76FEC538DF196B8DC38DA2A567757D2B221C9473E ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys
15:21:17.0911 0x13fc ws2ifsl - ok
15:21:17.0928 0x13fc [ FB45052D7C13963465DFF8D56746B10B, 21B0DC0D383061CEF079586AE8E2FD5E8BBA22B8494666F14D5A8591275943E5 ] wscsvc C:\WINDOWS\System32\wscsvc.dll
15:21:17.0987 0x13fc wscsvc - ok
15:21:17.0998 0x13fc [ F517CB0182B1DA5C0E0FC6B548FF60CC, F09CA4172D611487F157973C808627F04B0CF0A71CE19D49280BFBEA4AE6027B ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys
15:21:18.0047 0x13fc WSDPrintDevice - ok
15:21:18.0057 0x13fc WSearch - ok
15:21:18.0226 0x13fc [ A904D7950ED275273357AA7B1EAE445F, 0E41EA26A923FCE7072CC7DDDDB852E54C95992E01A79C67D1D544B1CB1E18DA ] WSService C:\WINDOWS\System32\WSService.dll
15:21:18.0459 0x13fc WSService - ok
15:21:18.0578 0x13fc [ C46159A366C6AA90F1B742999745FA36, AE55797A1C703726359B0B609BEDB7F3C59BE3E81FF736987CD8E5E23195B42E ] wuauserv C:\WINDOWS\system32\wuaueng.dll
15:21:18.0824 0x13fc wuauserv - ok
15:21:18.0843 0x13fc [ A928F25CB62232F413EE655352856E10, 1D2B278A24DDDE8792ADE7649FF90A98E186B79F13AA296C30E4180293BE906A ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
15:21:18.0899 0x13fc WudfPf - ok
15:21:18.0916 0x13fc [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
15:21:18.0984 0x13fc WUDFRd - ok
15:21:19.0000 0x13fc [ 1336DA39FE006EAB2733CA4DE5B3560C, F0D6C71ADCB66D4D14EC6D09FD43F5521A3A8CA53F248DFD01696FB4F033BE77 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll
15:21:19.0050 0x13fc wudfsvc - ok
15:21:19.0067 0x13fc [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
15:21:19.0131 0x13fc WUDFWpdFs - ok
15:21:19.0188 0x13fc [ 2D7E3C2913AAE063774795E6790BCC48, 686CF1CE1CF2553236E0983CBF283D841FB5FBB998C33D97FBB5D7A83EF83867 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
15:21:19.0339 0x13fc WwanSvc - ok
15:21:19.0388 0x13fc [ 7443938BC4B8DCE1D8E6C51BC3F9DBFE, F2D41BFB2303AEAE39A33E6873A9C07DEF9090CA6D5602B2D232C59D1899D620 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
15:21:19.0498 0x13fc XblAuthManager - ok
15:21:19.0551 0x13fc [ FACC53D144952319038FAE7442FCC045, 8BCA4ADC5162FC12AF2A88A8A570DA9DAB80AE9B62C873A2121EBAF8AA9FBA98 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
15:21:19.0667 0x13fc XblGameSave - ok
15:21:19.0688 0x13fc [ 80BC02A73A3949A7AEF34791206C7D7F, 41E547EFC722D3E01CD8E261FA233D8C799FC59A9C5320B7FD65B09831373CDB ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
15:21:19.0777 0x13fc xboxgip - ok
15:21:19.0826 0x13fc [ 69E727F94BEA64E66C284F3C482F33E6, B3E0F287E7A251E0FC17C41089C45737027E54F0213BDE847356AC882B4D3700 ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
15:21:19.0975 0x13fc XboxNetApiSvc - ok
15:21:19.0989 0x13fc [ 1F1EF8E701859581251B52035C1C1CEF, 3A7D3EC619A7F45FBB04EDA6963E3C55DC50358CF2D71ED66EE4BB07ACC0EE3C ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
15:21:20.0047 0x13fc xinputhid - ok
15:21:20.0054 0x13fc ================ Scan global ===============================
15:21:20.0071 0x13fc [ D923EC03E24F7633DED3F2D46AD59A28, C635DB4483E24BE0188583E63B06D0F37BDE7AD944E4D0246A7D19CBC3EA3A6B ] C:\WINDOWS\system32\basesrv.dll
15:21:20.0090 0x13fc [ E2899695BD30B5F93EC626EBBEF2CB69, B190D2903A109D2C146D881F90769060A0E971942F4AA61AEAD81861032D89C3 ] C:\WINDOWS\system32\winsrv.dll
15:21:20.0114 0x13fc [ 09E92888FFF86F3334E59778724DCA6F, 2344763B52395EF565A9DE5F55BEDCA026AD2E8072FFD06F826BF366B3BA2AB4 ] C:\WINDOWS\system32\sxssrv.dll
15:21:20.0143 0x13fc [ 2AB2C72D88CE2BC73E6F708D0B1A9657, 8DF9D8C83BC2078D88FE7B2E9CDD5ABA9A2075F40D30CD344595DA217ECCCB3B ] C:\WINDOWS\system32\services.exe
15:21:20.0166 0x13fc [ Global ] - ok
15:21:20.0167 0x13fc ================ Scan MBR ==================================
15:21:20.0172 0x13fc [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
15:21:20.0332 0x13fc \Device\Harddisk0\DR0 - ok
15:21:20.0333 0x13fc ================ Scan VBR ==================================
15:21:20.0338 0x13fc [ B217A32B5F8DAE2736B8B8B95610F542 ] \Device\Harddisk0\DR0\Partition1
15:21:20.0342 0x13fc \Device\Harddisk0\DR0\Partition1 - ok
15:21:20.0350 0x13fc [ 5B5E61635DA3B62040CF2FF00471ED71 ] \Device\Harddisk0\DR0\Partition2
15:21:20.0352 0x13fc \Device\Harddisk0\DR0\Partition2 - ok
15:21:20.0359 0x13fc [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
15:21:20.0360 0x13fc \Device\Harddisk0\DR0\Partition3 - ok
15:21:20.0369 0x13fc [ 0ABA2A788E2A06BD6677AA1214BEE087 ] \Device\Harddisk0\DR0\Partition4
15:21:20.0371 0x13fc \Device\Harddisk0\DR0\Partition4 - ok
15:21:20.0378 0x13fc [ 7D35943F8D8BBC4792417A62BEE4E844 ] \Device\Harddisk0\DR0\Partition5
15:21:20.0383 0x13fc \Device\Harddisk0\DR0\Partition5 - ok
15:21:20.0389 0x13fc [ E1C1932A638C90F62A583364AC00F2FF ] \Device\Harddisk0\DR0\Partition6
15:21:20.0392 0x13fc \Device\Harddisk0\DR0\Partition6 - ok
15:21:20.0399 0x13fc [ 845A652928A6C7A6786B7F7013F008E6 ] \Device\Harddisk0\DR0\Partition7
15:21:20.0402 0x13fc \Device\Harddisk0\DR0\Partition7 - ok
15:21:20.0409 0x13fc [ 8174D599EFEE97C0E97DB30FC20DA906 ] \Device\Harddisk0\DR0\Partition8
15:21:20.0412 0x13fc \Device\Harddisk0\DR0\Partition8 - ok
15:21:20.0419 0x13fc [ E54A5E77FCF0F43DEC3195D6DAA7070F ] \Device\Harddisk0\DR0\Partition9
15:21:20.0422 0x13fc \Device\Harddisk0\DR0\Partition9 - ok
15:21:20.0429 0x13fc [ E13A9539827D336D91D16C94BA4E657D ] \Device\Harddisk0\DR0\Partition10
15:21:20.0432 0x13fc \Device\Harddisk0\DR0\Partition10 - ok
15:21:20.0440 0x13fc [ 620CB0D9B1076A810A8024C5577B2EFE ] \Device\Harddisk0\DR0\Partition11
15:21:20.0443 0x13fc \Device\Harddisk0\DR0\Partition11 - ok
15:21:20.0444 0x13fc ================ Scan generic autorun ======================
15:21:21.0003 0x13fc [ 7068A2E090D56297A476C289CD2ABA41, 48FA908A5352B777FA0AB546AADEBD47DCA117FDFDF1D75E2A2D3E2F0B3DD83B ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
15:21:21.0648 0x13fc RtHDVCpl - ok
15:21:21.0729 0x13fc [ 668469AF43FD603610A56D91DC201F30, C6385B462CE5EEA5F6EB63B5646F413AE21DE4EFBA4C914E6FD7AEFAF487C11F ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
15:21:21.0802 0x13fc RtHDVBg_Dolby - ok
15:21:21.0822 0x13fc [ 39CF316EB5842AE27CC0D3CC4E2840DE, BC4D4ED926F988B7B70CC87B7EC92D148DA6BC39C5C514751F1B0CA69D0F9081 ] C:\Program Files\Microsoft Office\Office14\BCSSync.exe
15:21:21.0852 0x13fc BCSSync - ok
15:21:21.0853 0x13fc SynTPEnh - ok
15:21:21.0869 0x13fc [ C7F017C9B163E7DAB864649E8241F683, F007F107FCA0E3A12D7E900101EBF02C2453D4AA56BE18769E86B592C88C5106 ] C:\Program Files\iTunes\iTunesHelper.exe
15:21:21.0893 0x13fc iTunesHelper - ok
15:21:21.0911 0x13fc [ 72334F906C2E2B002CDD2FF9022FD957, 991F7C606E122BBD388BA37E56B37CC6D2DCA304784E4CE06018D698C57F320F ] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
15:21:21.0961 0x13fc PAC7302_Monitor - ok
15:21:21.0973 0x13fc [ 4E9AF25BA5E8219310E384AEA5B0EED8, 743062F755E7A88BA394E96CA26A988CCFDF73B441B779B3149D54A769CBC411 ] C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
15:21:21.0999 0x13fc CLMLServer_For_P2G8 - ok
15:21:22.0024 0x13fc [ 806222C9B0B8606061830527296328ED, 93E241CA93177D63120A97BF72B91A1EA3D14BE4ADB210181AF975074268183F ] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe
15:21:22.0063 0x13fc CLVirtualDrive - ok
15:21:22.0073 0x13fc [ 0966408A384E8B0FE57B0008E18D561C, 045AB5798CAFA7D27E7D02F780B3508EBF34C0991C8EF166A61CF869D9399B70 ] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
15:21:22.0096 0x13fc RemoteControl10 - ok
15:21:22.0114 0x13fc [ 249348AC5BF38938B713756DBA286956, 5F8A441D9DD617A28F6BB8522957A718FDBFF4D031EE7D5796D77BA720FB6694 ] C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
15:21:22.0145 0x13fc YouCam Service - ok
15:21:22.0193 0x13fc [ 4E8C895616B22D8A7AFA6AC52E02E996, 41589C10705E36B08A661E48BB8058D5E80671A7522C3B9441F29C9345AC8EF7 ] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
15:21:22.0308 0x13fc BrMfcWnd - detected UnsignedFile.Multi.Generic ( 1 )
15:21:22.0308 0x13fc Detect skipped due to KSN trusted
15:21:22.0308 0x13fc BrMfcWnd - ok
15:21:22.0321 0x13fc [ 4DE3EF07E0854547309C6B40235A9D44, F73D8E6D98583865D1C8DB728058D83C72A3908E21E04EF313FCB829C040A1EC ] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe
15:21:22.0347 0x13fc ControlCenter3 - detected UnsignedFile.Multi.Generic ( 1 )
15:21:22.0347 0x13fc Detect skipped due to KSN trusted
15:21:22.0347 0x13fc ControlCenter3 - ok
15:21:22.0396 0x13fc [ 5668994A6AE925189C7D7F03BFE19C66, 269146783422D06BE2BA5D358D22B03339C102D0D5970894625C9C03BFCCB773 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
15:21:22.0447 0x13fc avgnt - ok
15:21:22.0531 0x13fc [ 6F5C9785C05D23DABE407653C12B8A05, 3EC2AACE39D47BC3C34CC8F53DA652A5FFE3A09304AB77AFCF17D4E5CC10F82E ] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe
15:21:22.0641 0x13fc ISUSPM - ok
15:21:22.0663 0x13fc [ 5ABDB69094C3595524165649B5DA6ADA, B644C7CAF439C76E7F476FB15A0AFA09CF3C7B81C1E4F19B821E732D2E2D3B0D ] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
15:21:22.0683 0x13fc PaperPort PTD - ok
15:21:22.0690 0x13fc [ 4492AFBDBC42D5E3EA219A9092976861, D0B4BA8A468EE82568D1672DB6B3294DACF8D5D182373629C4E090195B714B1C ] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe
15:21:22.0709 0x13fc IndexSearch - ok
15:21:22.0728 0x13fc [ 9C68BA857191DE7B45651D6773036870, 1BB1A2B56F071BAAF60551877F8215BB6F011E8E21AD5F81BF80FCFBE45A5F36 ] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe
15:21:22.0764 0x13fc PPort14reminder - ok
15:21:23.0044 0x13fc [ 8A312D5764B4FC4C55CEDDEED4652CF1, C4E726C9C77614CD32D5B76DA2E9A049EC490C2392D9A94B84712BCBF47BA7C6 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
15:21:23.0353 0x13fc AvastUI.exe - ok
15:21:23.0365 0x13fc Object required for P2P: [ 8A312D5764B4FC4C55CEDDEED4652CF1 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
15:21:25.0871 0x13fc Object send P2P result: true
15:21:25.0909 0x13fc [ D19951000FC9E45A62BE182B79D7FF3A, 1156E8D9B1A13350F57F010C48EE30138CB04C69B3F9FFBD6F6F2B8D4C8AC148 ] C:\Program Files (x86)\Nuance\PDFCreate\pdfcreate7hook.exe
15:21:25.0952 0x13fc PDFCreHook - ok
15:21:25.0965 0x13fc [ 3D77D293E0A533F24A3FD21BA3293D0D, 43A88384C71160032A1E5A740DBA1E25E36ACE4C6FA7FE6204292C5D07B60052 ] C:\Program Files (x86)\Nuance\PDFCreate\RegistryController.exe
15:21:25.0992 0x13fc PDF7 Registry Controller - ok
15:21:26.0003 0x13fc [ BB10E34B162FBEAE5636474A79026A0D, 700629C7497ED01E5B7DF99F0D8F56FF30BBA067ED65AC7A0D77B3765C596ECB ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
15:21:26.0026 0x13fc Avira Systray - ok
15:21:26.0047 0x13fc [ F655E4A1AED366E96E5D5AA397E0F255, F8573CCA72FA25079B8CE2FC5D30379487E2905B109C73C741FAB31589FA49E1 ] C:\Program Files (x86)\QuickTime\QTTask.exe
15:21:26.0087 0x13fc QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
15:21:26.0087 0x13fc Detect skipped due to KSN trusted
15:21:26.0087 0x13fc QuickTime Task - ok
15:21:26.0177 0x13fc [ E76F43260D050DE1D5370AEF266EB3C8, DB30811E46BB55B03BEE97414A561B8DE2136E16764514CC3A4DF056BD5E0859 ] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
15:21:26.0278 0x13fc EaseUS EPM tray - ok
15:21:26.0374 0x13fc [ DEF92CF2964226C10D3F91453471328B, 62F4B119154E382B93244319D47A6C75FA093E8EB29BD47C625CB6C56D0B1D15 ] C:\Program Files (x86)\Forum Verlag\Unternehmensbewertung direkt\ForumUpdater.exe
15:21:26.0546 0x13fc Forum Updater - detected UnsignedFile.Multi.Generic ( 1 )
15:21:26.0547 0x13fc Forum Updater ( UnsignedFile.Multi.Generic ) - warning
15:21:28.0971 0x13fc [ 7EE1757A50F7C13C0A1BFE58763A2AD3, 322091A9F2287A6782143D2D5D962E7A7C08467D749F0811DBE8F14856B5B817 ] C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
15:21:29.0004 0x13fc LexwareInfoService - ok
15:21:29.0036 0x13fc [ 2677033DA8C3447B00DA64C7D338A07B, 0409976C64F42038DE60006497AFD1CAC3B7DB440C338F80E06B3FB269E6CAD3 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
15:21:29.0083 0x13fc SunJavaUpdateSched - ok
15:21:29.0498 0x13fc [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
15:21:29.0842 0x13fc OneDriveSetup - ok
15:21:30.0141 0x13fc [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
15:21:30.0453 0x13fc OneDriveSetup - ok
15:21:30.0778 0x13fc [ 781DCED079ABD884DF8CA22B6FA30F05, 392C39D4E26AAE801786EE9A2671FDFFF18991A27046853B13ACA90E4B2D3998 ] C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe
15:21:30.0916 0x13fc Spotify Web Helper - ok
15:21:30.0922 0x13fc Object required for P2P: [ 781DCED079ABD884DF8CA22B6FA30F05 ] C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe
15:21:33.0403 0x13fc Object send P2P result: true
15:21:33.0579 0x13fc [ 4FF9A9F17E5722357EA1F614155F7BCB, 6E43F9269383FEDDE31CC1D3F7268DB2910079550CC2CA440ABB8C3A1E31F2A0 ] C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
15:21:33.0678 0x13fc MyDriveConnect.exe - ok
15:21:33.0682 0x13fc Object required for P2P: [ 4FF9A9F17E5722357EA1F614155F7BCB ] C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
15:21:36.0736 0x13fc Object send P2P result: true
15:21:36.0829 0x13fc [ 7C6D524C78A1722AD987B9E47AC1FEE2, FFDC6C92ABB547D0DCD2621EC423C755A78079B061A41FA1751A56799D1A79A5 ] C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe
15:21:36.0862 0x13fc Dropbox Update - ok
15:21:36.0889 0x13fc [ 2010CA459E5EC8F9D5FC8B000D130294, 058FF215A3AAD04F2A4CF23B2CC62A5EA28F5A705EFA689DCE9126720CF33229 ] C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\OneDrive.exe
15:21:36.0938 0x13fc OneDrive - ok
15:21:36.0939 0x13fc Object required for P2P: [ 2010CA459E5EC8F9D5FC8B000D130294 ] C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\OneDrive.exe
15:21:39.0416 0x13fc Object send P2P result: true
15:21:39.0457 0x13fc [ 527CF721F78B2DF6A1570F93899A0AA8, 1F08074DA90593E7EDC63C072B784BE438C5EC94FE992433053D6B75CDEE78EB ] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
15:21:39.0519 0x13fc OfficeSyncProcess - ok
15:21:39.0694 0x13fc [ 41E25E514D90E9C8BC570484DBAFF62B, E6C49F7CE186DC4C9DA2C393469B070C0F1B95A01D281AE2B89538DA453D1583 ] C:\WINDOWS\system32\cmd.exe
15:21:39.0755 0x13fc Uninstall C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64 - ok
15:21:39.0756 0x13fc Object required for P2P: [ 41E25E514D90E9C8BC570484DBAFF62B ] C:\WINDOWS\system32\cmd.exe
15:21:42.0236 0x13fc Object send P2P result: true
15:21:42.0254 0x13fc AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.15.106 ), 0x41000 ( enabled : updated )
15:21:42.0257 0x13fc AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.9.10586.0 ), 0x60100 ( disabled : updated )
15:21:42.0261 0x13fc AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 11.1.2245.1540 ), 0x41000 ( enabled : updated )
15:21:42.0268 0x13fc Win FW state via NFP2: enabled ( trusted )
15:21:44.0676 0x13fc ============================================================
15:21:44.0676 0x13fc Scan finished
15:21:44.0676 0x13fc ============================================================
15:21:44.0698 0x14c4 Detected object count: 2
15:21:44.0698 0x14c4 Actual detected object count: 2
15:22:52.0995 0x14c4 PGFNEXSrv ( UnsignedFile.Multi.Generic ) - skipped by user
15:22:52.0995 0x14c4 PGFNEXSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:22:52.0997 0x14c4 Forum Updater ( UnsignedFile.Multi.Generic ) - skipped by user
15:22:52.0997 0x14c4 Forum Updater ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
|
02.02.2016, 16:21
| #6 | |
| /// TB-Ausbilder | Email-account gehackt, Betreffszeile: New message Servus, Zukünftig bitte beachten: Zitat:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind. Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter. Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers |
|
02.02.2016, 23:20
| #7 |
| | mbar-log-2016-02-02 (22-16-55)Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.02.02.04
rootkit: v2016.01.20.01
Windows 10 x64 NTFS
Internet Explorer 11.63.10586.0
ASS-CO.de :: ASS-CO [administrator]
02.02.2016 22:16:55
mbar-log-2016-02-02 (22-16-55).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 414342
Time elapsed: 54 minute(s), 28 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
03.02.2016, 16:47
| #8 |
| /// TB-Ausbilder | Email-account gehackt, Betreffszeile: New message Servus, Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
03.02.2016, 20:34
| #9 |
| | Schritt 1 AdwareClCode:
ATTFilter # AdwCleaner v5.032 - Bericht erstellt am 03/02/2016 um 17:44:15
# Aktualisiert am 31/01/2016 von Xplode
# Datenbank : 2016-02-02.1 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : ASS-CO.de - ASS-CO
# Gestartet von : C:\Users\ASS-CO.de\Desktop\AdwCleaner_5.032.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner Gelöscht : C:\Program Files\Reimage
[-] Ordner Gelöscht : C:\ProgramData\Reimage Express
[-] Ordner Gelöscht : C:\ProgramData\Reimage Protector
[-] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Express
[-] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedMon
[-] Ordner Gelöscht : C:\Users\ASS-CO.de\AppData\Local\StartPoint
[-] Ordner Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\OpenCandy
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml
[-] Datei Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\startpointkms.xml
[-] Datei Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\trovi-search.xml
[-] Datei Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\vi-view.xml
[-] Datei Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\avira-safesearch.xml
[-] Datei Gelöscht : C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\default.xml
[-] Datei Gelöscht : C:\WINDOWS\Reimage.ini
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
[-] Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk
[-] Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk
[-] Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRWare Iron\SRWare Iron.lnk
[-] Verknüpfung Desinfiziert : C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[-] Verknüpfung Desinfiziert : C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\SRWare Iron.lnk
***** [ Aufgabenplanung ] *****
[-] Geplante Aufgabe Gelöscht : StartPoint Updater
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mbot_de_144]
[-] Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9C81D00A-3DAA-48AB-90C7-8252119ABB93}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1DA17428-323D-48FF-857C-98CFEE48BFD5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{50F60937-910A-4C05-8E36-FE4E299191CF}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F8A4FC32-DDA3-4DD9-8C62-49F778FF630B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{63C63464-1423-4FDB-BA5D-6F75F491C63E}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{09CFDB88-F9F0-40BA-885E-F47A957D12E6}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{2B1B440F-A9DB-46E3-ADCF-AA6E08143FB8}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{50F60937-910A-4C05-8E36-FE4E299191CF}
[!] Schlüssel Nicht Gelöscht : HKCU\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\Reimage
[-] Schlüssel Gelöscht : HKCU\Software\SpeedMon
[-] Schlüssel Gelöscht : HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\PositiveFinds
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\TermTutor
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Reimage
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Schlüssel Gelöscht : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Schlüssel Gelöscht : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Mozilla\Extends
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\OCS
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Reimage
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\SpeedMon
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Ciuvo
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Crossrider
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\OCS
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Reimage
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\SpeedMon
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\OCS
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Reimage
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\SpeedMon
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6925A036-B5D8-4F14-81BE-82D45D0C585C}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6925A036-B5D8-4F14-81BE-82D45D0C585C}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{6925A036-B5D8-4F14-81BE-82D45D0C585C}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\SearchScopes\{6925A036-B5D8-4F14-81BE-82D45D0C585C}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Clients\StartMenuInternet\SAFARI.EXE\shell\open\command []
[-] Wert Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SpeedMon]
[-] Wert Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SpeedMon]
[-] Wert Gelöscht : HKU\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SpeedMon]
***** [ Internetbrowser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [16714 Bytes] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 03.02.2016 Suchlaufzeit: 19:46 Protokolldatei: MAMH160203.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2016.02.03.05 Rootkit-Datenbank: v2016.01.20.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: ASS-CO.de Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 413572 Abgelaufene Zeit: 26 Min., 57 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.2 (01.06.2016)
Operating System: Windows 10 Home x64
Ran by ASS-CO.de (Administrator) on 03.02.2016 at 18:48:15,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 4
Successfully deleted: C:\Users\ASS-CO.de\AppData\Local\com (Folder)
Successfully deleted: C:\Users\ASS-CO.de\AppData\Local\pdfforge (Folder)
Successfully deleted: C:\Users\ASS-CO.de\AppData\Roaming\pdfforge (Folder)
Successfully deleted: C:\Program Files\pdfforge (Folder)
Deleted the following from C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\prefs.js
user_pref(browser.search.searchengine.alias, mystartsearch);
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.iconURL, hxxp://www.mystartsearch.com/favicon.ico);
user_pref(browser.search.searchengine.name, mystartsearch);
user_pref(browser.search.searchengine.ptid, cvs2);
user_pref(browser.search.searchengine.uid, ST1000LM014-1EJ164_W380V1TTXXXXW380V1TT);
user_pref(browser.search.searchengine.url, hxxp://www.mystartsearch.com/web/?type=ds&ts=1432549768&z=286a6524c0266c3b4a36c9cg6z3cfo8w9z1tem0m3e&from=cvs2&uid=ST1000LM014-1E
Registry: 2
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06E08260-0695-4EC1-A74B-1310D8899D93} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.02.2016 at 18:56:07,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 durchgeführt von ASS-CO.de (Administrator) auf ASS-CO (03-02-2016 19:10:39) Gestartet von C:\Users\ASS-CO.de\Desktop Geladene Profile: ASS-CO.de (Verfügbare Profile: ASS-CO.de) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-09-28] (Synaptics Incorporated) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-09] (Apple Inc.) HKLM\...\Run: [PAC7302_Monitor] => C:\WINDOWS\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.) HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2011-04-01] () HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-05-14] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-05-14] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PPort14reminder] => "C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\14\Config\Ereg\Ereg.ini" HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-15] (AVAST Software) HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDFCreate\pdfcreate7hook.exe [605512 2013-03-26] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PDF7 Registry Controller] => C:\Program Files (x86)\Nuance\PDFCreate\RegistryController.exe [140616 2013-03-26] (Nuance Communications, Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2089056 2015-09-16] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [Forum Updater] => C:\Program Files (x86)\Forum Verlag\Unternehmensbewertung direkt\ForumUpdater.exe [2294784 2013-12-01] (Forum Verlag Herkert GmbH) HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [202280 2015-09-29] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-12-22] (Oracle Corporation) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1 HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [Spotify Web Helper] => C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2016-01-30] (Spotify Ltd) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1958248 2015-11-20] (TomTom) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [Dropbox Update] => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-26] (Dropbox, Inc.) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\RunOnce: [Uninstall C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64" HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\MountPoints2: {6c0e7c53-6e53-11e3-826e-806e6f6e6963} - "E:\Telescope_Driver.exe" ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-15] (AVAST Software) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll [2013-05-05] (Gladinet, INC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nuance Cloud Connector.lnk [2014-04-04] ShortcutTarget: Nuance Cloud Connector.lnk -> C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladLauncher.exe () Startup: C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-03] ShortcutTarget: Dropbox.lnk -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-09-02] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{34f19701-ad5c-43da-9b4c-fd988c605f4d}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{de6e9dbe-6e6a-43e0-a872-b29a1c72cbe8}: [DhcpNameServer] 192.168.100.36 192.168.100.200 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_72\bin\ssv.dll [2016-01-26] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-15] (AVAST Software) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_72\bin\jp2ssv.dll [2016-01-26] (Oracle Corporation) BHO-x32: Kein Name -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> Keine Datei BHO-x32: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-15] (AVAST Software) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll [2011-03-26] (Zeon Corporation) Toolbar: HKLM-x32 - Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll [2011-03-26] (Zeon Corporation) FireFox: ======== FF ProfilePath: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default FF NewTab: about:newtab FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: hxxps://www.google.com/?trackid=sp-006 FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] () FF Plugin: @java.com/DTPlugin,version=11.72.2 -> C:\Program Files\Java\jre1.8.0_72\bin\dtplugin\npDeployJava1.dll [2016-01-26] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.72.2 -> C:\Program Files\Java\jre1.8.0_72\bin\plugin2\npjp2.dll [2016-01-26] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin-x32: PDF Architect 3 -> C:\Program Files (x86)\PDF Architect 3\np-previewer.dll [2015-09-17] (pdfforge GmbH) FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDFViewer\bin\nppdf.dll [Keine Datei] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\bing-avast.xml [2014-10-16] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\google-avast.xml [2015-12-15] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\yahoo-avast.xml [2014-10-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-15] FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-11-04] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension FF Extension: PDF Architect 3 Creator - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-09-28] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-15] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "hxxps://www.google.de/" CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms} CHR DefaultSearchKeyword: Default -> Avira CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=de CHR Profile: C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-18] CHR Extension: (Google Docs) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-18] CHR Extension: (Google Drive) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Google-Suche) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26] CHR Extension: (Gmail offline) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-08-18] CHR Extension: (Google Tabellen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-18] CHR Extension: (Avira Browserschutz) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-26] CHR Extension: (Google Docs Offline) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18] CHR Extension: (Avast Online Security) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-03] CHR Extension: (Avira SafeSearch) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldmiahjidflgnbiadknkmaimfpjkelng [2016-01-21] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-18] CHR Extension: (Zoho ContactManager) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\oncaihncjjemfmfijnjkmconhbnnjmop [2015-08-18] CHR Extension: (Picasa) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2015-08-18] CHR Extension: (Google Mail) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-18] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-15] Opera: ======= OPR Session Restore: -> ist aktiviert. ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-15] (AVAST Software) S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink) R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2015-12-24] (Digital Wave Ltd.) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-08-01] (CHENGDU YIWO Tech Development Co., Ltd) R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-05-05] (Gladinet, INC) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-02] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation) R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [66088 2015-09-22] (Haufe-Lexware GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2244832 2015-09-17] (pdfforge GmbH) S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [964832 2015-09-17] (pdfforge GmbH) R2 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [767712 2015-09-17] (pdfforge GmbH) R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1335344 2014-01-23] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [856112 2014-01-23] (pdfforge GmbH) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-05-14] (Nuance Communications, Inc.) R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [Datei ist nicht signiert] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-15] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-18] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-15] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-15] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-20] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-15] (AVAST Software) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-01] (Avira Operations GmbH & Co. KG) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] () R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2014-12-14] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-03] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) S3 PAC7302; C:\Windows\system32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.) R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON) R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-12-09] (Realtek Semiconductor Corporation) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-09-28] (Synaptics Incorporated) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-03 19:10 - 2016-02-03 19:11 - 00030764 _____ C:\Users\ASS-CO.de\Desktop\FRST.txt 2016-02-03 19:09 - 2016-02-01 11:36 - 02370560 _____ (Farbar) C:\Users\ASS-CO.de\Desktop\FRST64.exe 2016-02-03 18:56 - 2016-02-03 19:01 - 00001871 _____ C:\Users\ASS-CO.de\Desktop\JRT.txt 2016-02-03 18:00 - 2016-02-03 18:00 - 00001179 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-02-03 18:00 - 2016-02-03 18:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-03 18:00 - 2016-02-03 18:00 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-03 18:00 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-02-03 18:00 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-02-03 17:58 - 2016-02-03 17:59 - 22908888 _____ (Malwarebytes ) C:\Users\ASS-CO.de\Desktop\mbam-setup-2.2.0.1024.exe 2016-02-03 16:55 - 2016-02-03 16:55 - 01609032 _____ (Malwarebytes) C:\Users\ASS-CO.de\Desktop\JRT.exe 2016-02-03 16:54 - 2016-02-03 16:54 - 01508352 _____ C:\Users\ASS-CO.de\Desktop\AdwCleaner_5.032.exe 2016-02-02 23:28 - 2016-02-02 23:53 - 00578928 _____ C:\TDSSKiller.3.1.0.9_02.02.2016_23.28.45_log.txt 2016-02-02 21:01 - 2016-02-03 18:00 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-02 21:00 - 2016-02-03 18:54 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-02-02 21:00 - 2016-02-03 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-02-02 20:59 - 2016-02-02 23:14 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\mbar 2016-02-02 20:59 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-02-02 20:49 - 2016-02-02 20:49 - 16563352 _____ (Malwarebytes Corp.) C:\Users\ASS-CO.de\Desktop\mbar-1.09.3.1001.exe 2016-02-01 14:58 - 2016-02-01 15:51 - 00579368 _____ C:\TDSSKiller.3.1.0.9_01.02.2016_14.58.24_log.txt 2016-02-01 14:56 - 2016-02-01 14:58 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\ASS-CO.de\Desktop\tdsskiller.exe 2016-02-01 11:37 - 2016-02-03 19:10 - 00000000 ____D C:\FRST 2016-01-30 14:34 - 2016-01-30 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telescope Driver 2016-01-30 14:34 - 2016-01-30 14:34 - 00000000 ____D C:\Program Files (x86)\PixArt 2016-01-30 14:34 - 2007-11-20 17:58 - 00055296 _____ (PixArt Imaging Incorporation) C:\WINDOWS\SysWOW64\Remove.exe 2016-01-30 14:34 - 2007-11-08 10:29 - 00527872 _____ (PixArt Imaging Inc.) C:\WINDOWS\system32\Drivers\PAC7302.SYS 2016-01-30 14:34 - 2007-03-21 11:25 - 00000291 _____ C:\WINDOWS\SysWOW64\Remover.ini 2016-01-30 14:34 - 2006-10-12 11:57 - 00014336 _____ (PixArt Imaging Inc.) C:\WINDOWS\SysWOW64\P7302USD.dll 2016-01-30 12:52 - 2016-01-30 12:52 - 00281428 _____ C:\WINDOWS\Minidump\013016-27140-01.dmp 2016-01-30 12:43 - 2016-01-30 12:43 - 00000000 ____D C:\WINDOWS\PixArt 2016-01-30 12:36 - 2008-04-11 19:10 - 00000566 _____ C:\WINDOWS\SysWOW64\SP7302.ini 2016-01-30 12:36 - 2007-11-02 11:07 - 00008704 _____ (PixArt Imaging Inc.) C:\WINDOWS\system32\CoInst_071029.dll 2016-01-30 12:36 - 2007-10-30 17:48 - 00129024 _____ (PixArt Imaging Incorporation) C:\WINDOWS\SysWOW64\SP7302.ax 2016-01-25 10:25 - 2016-01-27 16:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2016-01-16 11:40 - 2016-01-16 11:40 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2016-01-16 11:40 - 2016-01-16 11:40 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-01-16 11:40 - 2016-01-16 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-01-15 17:35 - 2016-01-15 17:35 - 00109792 _____ C:\Users\ASS-CO.de\AppData\Local\GDIPFONTCACHEV1.DAT 2016-01-14 22:16 - 2016-01-14 22:16 - 00000000 ____H C:\Users\ASS-CO.de\Documents\Default.rdp 2016-01-14 22:10 - 2016-01-14 22:10 - 00759499 _____ C:\Users\ASS-CO.de\Downloads\BasicCoupon.pdf 2016-01-13 21:19 - 2016-01-13 21:20 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\de.a2c.bafa.statusseite 2016-01-13 21:19 - 2016-01-13 21:19 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMS.lnk 2016-01-13 21:19 - 2016-01-13 21:19 - 00000882 _____ C:\Users\Public\Desktop\AMS.lnk 2016-01-13 21:19 - 2016-01-13 21:19 - 00000000 ____D C:\Program Files (x86)\AMS 2016-01-12 20:35 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-12 20:35 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-01-12 20:35 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-01-12 20:35 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-12 20:35 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-12 20:35 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-12 20:35 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-12 20:35 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-12 20:35 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-01-12 20:35 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-12 20:35 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-01-12 20:35 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-12 20:35 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-01-12 20:35 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-12 20:35 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-12 20:35 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-01-12 20:35 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-01-12 20:35 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-01-12 20:35 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-01-12 20:35 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-01-12 20:35 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-01-12 20:35 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-01-12 20:35 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-12 20:35 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-01-12 20:35 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-01-12 20:35 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-01-12 20:35 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-01-12 20:35 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-01-12 20:35 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-01-12 20:35 - 2016-01-05 02:43 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2016-01-12 20:35 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-01-12 20:35 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-01-12 20:35 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-01-12 20:35 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-01-12 20:35 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-01-12 20:35 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-12 20:35 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-01-12 20:35 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-12 20:35 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-01-12 20:35 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-01-12 20:35 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-12 20:35 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-12 20:35 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-01-12 20:35 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-01-12 20:35 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-12 20:35 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-01-11 20:04 - 2016-01-11 20:04 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMU.lnk 2016-01-11 20:04 - 2016-01-11 20:04 - 00000882 _____ C:\Users\Public\Desktop\AMU.lnk 2016-01-11 20:04 - 2016-01-11 20:04 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\de.a2c.bafa.antragsmanager.unternehmer 2016-01-11 20:04 - 2016-01-11 20:04 - 00000000 ____D C:\Program Files (x86)\AMU ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-03 18:55 - 2014-03-17 16:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-02-03 18:53 - 2015-06-26 13:42 - 00001254 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001UA.job 2016-02-03 18:38 - 2015-09-19 22:17 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-03 18:37 - 2015-12-11 04:31 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-03 18:37 - 2015-09-24 20:50 - 00000000 __SHD C:\Users\ASS-CO.de\IntelGraphicsProfiles 2016-02-03 18:37 - 2015-01-31 09:54 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\HTC MediaHub 2016-02-03 18:37 - 2014-10-09 12:39 - 00001714 _____ C:\WINDOWS\Tasks\XQSUKDD.job 2016-02-03 18:36 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-02-03 17:52 - 2014-06-04 14:07 - 00003974 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1395067677 2016-02-03 17:52 - 2014-03-17 15:47 - 00001124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-02-03 17:52 - 2014-03-17 15:47 - 00000000 ____D C:\Program Files (x86)\Opera 2016-02-03 17:49 - 2014-02-27 19:55 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5CC6190B-CC9A-4172-A5B4-4AC465C57D80} 2016-02-03 17:44 - 2014-10-11 12:16 - 00000000 ____D C:\AdwCleaner 2016-02-03 17:44 - 2014-03-19 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRWare Iron 2016-02-03 17:44 - 2013-11-21 16:34 - 00001181 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk 2016-02-03 17:44 - 2013-11-21 16:34 - 00001175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk 2016-02-03 17:37 - 2015-09-19 22:17 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-03 14:08 - 2014-03-21 14:23 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\vlc 2016-02-03 10:53 - 2015-06-26 13:42 - 00001202 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001Core.job 2016-02-03 08:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-03 07:56 - 2015-07-01 20:36 - 00000000 ____D C:\Users\ASS-CO.de\Documents\Outlook-Dateien 2016-02-02 10:23 - 2015-05-04 22:28 - 00000000 ____D C:\Users\ASS-CO.de\.mediathek3 2016-02-02 08:32 - 2015-09-19 22:17 - 00004190 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-02 08:32 - 2015-09-19 22:17 - 00003958 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-02 08:25 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-01-30 22:40 - 2015-10-30 19:35 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat 2016-01-30 22:40 - 2015-10-30 19:35 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat 2016-01-30 22:40 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-01-30 22:40 - 2015-09-27 17:13 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-30 18:55 - 2014-05-11 10:06 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Spotify 2016-01-30 18:55 - 2014-05-11 10:06 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\Spotify 2016-01-30 18:52 - 2014-10-12 10:44 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Coronic 2016-01-30 17:44 - 2014-05-07 17:18 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\DVDVideoSoft 2016-01-30 14:37 - 2013-08-22 14:25 - 00000225 _____ C:\WINDOWS\win.ini 2016-01-30 13:12 - 2013-11-18 17:18 - 00000000 ___HD C:\Program Files (x86)\Temp 2016-01-30 13:01 - 2015-12-11 04:02 - 00000000 ____D C:\Users\ASS-CO.de 2016-01-30 12:52 - 2015-12-19 00:46 - 699580217 _____ C:\WINDOWS\MEMORY.DMP 2016-01-30 12:52 - 2015-12-19 00:46 - 00000000 ____D C:\WINDOWS\Minidump 2016-01-30 12:36 - 2013-11-12 16:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-01-29 22:50 - 2014-04-04 19:50 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\.oit 2016-01-29 22:45 - 2013-11-12 16:39 - 00000000 ____D C:\ProgramData\Temp 2016-01-29 08:38 - 2015-09-19 22:20 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-01-29 08:38 - 2015-09-19 22:20 - 00002256 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-01-29 08:03 - 2015-12-22 21:57 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\ElevatedDiagnostics 2016-01-28 16:06 - 2015-06-04 18:20 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\Gutscheine 2016-01-27 22:06 - 2015-05-21 12:20 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Skype 2016-01-27 21:57 - 2014-03-17 15:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-01-27 21:44 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-26 09:42 - 2014-10-12 12:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-01-26 09:42 - 2014-10-12 12:14 - 00000000 ____D C:\Program Files\Java 2016-01-26 09:41 - 2015-12-15 13:22 - 00000000 ____D C:\Users\ASS-CO.de\.oracle_jre_usage 2016-01-26 09:40 - 2014-10-12 12:15 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-01-20 22:21 - 2014-10-16 10:22 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2016-01-20 22:21 - 2014-10-16 10:22 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2016-01-18 15:28 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-01-16 23:15 - 2015-10-26 18:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-01-16 11:40 - 2015-05-21 12:20 - 00000000 ____D C:\ProgramData\Skype 2016-01-16 11:38 - 2015-12-01 22:47 - 00001286 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2016-01-16 11:38 - 2015-12-01 22:47 - 00001274 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2016-01-15 07:51 - 2014-10-16 10:23 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2016-01-14 20:25 - 2014-12-26 22:13 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-01-14 20:24 - 2015-07-06 11:24 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-01-13 14:47 - 2014-05-15 14:56 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\Bowser 2016-01-13 07:48 - 2015-12-11 03:45 - 00000000 ____D C:\Windows.old 2016-01-13 03:33 - 2015-05-21 12:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-01-13 03:33 - 2015-05-21 12:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-01-13 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-12 21:01 - 2014-03-19 10:05 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-01-12 20:48 - 2015-05-21 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-01-12 20:48 - 2013-11-12 13:49 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD 2015-07-09 23:40 - 2015-07-09 23:40 - 0000246 _____ () C:\Users\ASS-CO.de\AppData\Local\28A2F4676B8A4d43BEBB8C3D1D26B763.CalcTape1.calc 2014-01-18 20:46 - 2015-09-27 16:07 - 0888105 _____ () C:\Users\ASS-CO.de\AppData\Local\BTServer.log 2015-03-24 20:26 - 2015-03-24 20:26 - 0004096 ____H () C:\Users\ASS-CO.de\AppData\Local\keyfile3.drm 2014-03-21 11:04 - 2014-03-21 11:04 - 0000017 _____ () C:\Users\ASS-CO.de\AppData\Local\resmon.resmoncfg 2015-12-11 03:59 - 2015-12-11 03:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== C:\Users\ASS-CO.de\AppData\Local\Temp\EasyDownLightfp.exe C:\Users\ASS-CO.de\AppData\Local\Temp\EasyDownLightrtd.exe C:\Users\ASS-CO.de\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-01-25 08:00 ==================== Ende von FRST.txt ============================ |
|
03.02.2016, 20:38
| #10 |
| | Schritt 4 FRST AdditionCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von ASS-CO.de (2016-02-03 19:12:21)
Gestartet von C:\Users\ASS-CO.de\Desktop
Windows 10 Home (X64) (2015-12-11 03:48:31)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2303302459-3543981641-3380417783-500 - Administrator - Disabled)
ASS-CO.de (S-1-5-21-2303302459-3543981641-3380417783-1001 - Administrator - Enabled) => C:\Users\ASS-CO.de
DefaultAccount (S-1-5-21-2303302459-3543981641-3380417783-503 - Limited - Disabled)
Gast (S-1-5-21-2303302459-3543981641-3380417783-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2303302459-3543981641-3380417783-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 15.12 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.130 - Adobe Systems Incorporated)
AMS (HKLM-x32\...\de.a2c.bafa.statusseite) (Version: 1.5.0 - Bundesamt fuer Wirtschaft und Ausfuhrkontrolle)
AMS (x32 Version: 1.5.0 - Bundesamt fuer Wirtschaft und Ausfuhrkontrolle) Hidden
AMU (HKLM-x32\...\de.a2c.bafa.antragsmanager.unternehmer) (Version: 1.5.3 - Bundesamt fuer Wirtschaft und Ausfuhrkontrolle)
AMU (x32 Version: 1.5.3 - Bundesamt fuer Wirtschaft und Ausfuhrkontrolle) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ARIS EXPRESS (HKLM-x32\...\{49ABE0DF-5BC9-40E8-8996-7A2938BFB5C2}) (Version: 2.4 - Software AG)
Ashampoo AppLauncher (Medion) v.1.0.0 (HKLM-x32\...\Ashampoo AppLauncher (Medion)_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Avant Browser (remove only) (HKLM-x32\...\AvantBrowser) (Version: 12.5.0.0 - Avant Force)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-9120CN (HKLM-x32\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
CalcTape (HKLM-x32\...\{44B185C4-2566-4F38-A4F1-092FCDBB51A5}) (Version: 5.1.5 - SFR Software GmbH)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5790 - CDBurnerXP)
CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.44 - Abelssoft)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Content Manager (HKLM-x32\...\Content Manager) (Version: 3.18.5.613171 - NNG Llc.)
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\CopyTrans Suite) (Version: 3.003 - WindSolutions)
CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.3215 - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.2103 - CyberLink Corp.)
CyberLink PowerRecover (Version: 5.7.0.2103 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DIEW - Dokumentenmanagement (HKLM-x32\...\diew) (Version: - )
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)
EaseUS Partition Master 10.8 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
EaseUS Todo Backup Free 8.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 8.6 - CHENGDU YIWO Tech Development Co., Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.3.17800 - Landesfinanzdirektion Thüringen)
Envisioneer Express 5.0 (HKLM-x32\...\InstallShield_{BF6685DC-50F9-48EA-B2FF-99AF905D7660}) (Version: 5.0 - Cadsoft Corporation)
Envisioneer Express 5.0 (x32 Version: 5.0 - Cadsoft Corporation) Hidden
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Studio (HKLM-x32\...\Free Studio_is1) (Version: 6.6.0.1224 - DVDVideoSoft Ltd.)
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.97 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.16.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.54.2 - HTC)
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{0D44E3A4-6C3D-45D7-B443-079509E5BE5D}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 72 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418072F0}) (Version: 8.0.720.15 - Oracle Corporation)
K-Meleon 1.5.4 de-DE (nur entfernen) (HKLM-x32\...\K-Meleon) (Version: 1.5.4 - K-Meleon Team)
Lexware Abschreibungsrechner (x32 Version: 15.00.00.0006 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware büro easy 2016 (HKLM-x32\...\{66a4eae6-fce1-4a4a-96a0-bba2b4b81192}) (Version: 29.0.0.73 - Haufe-Lexware GmbH & Co.KG)
Lexware büro easy 2016 (x32 Version: 29.00.00.0073 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Elster (x32 Version: 16.01.00.0102 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Elster 2016 (HKLM-x32\...\{2611510f-f6cd-43fb-b4c6-539c0a42b668}) (Version: 16.1.0.104 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 16.00.00.0040 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 5.00.00.0038 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (x32 Version: 22.04.00.0043 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware PDF-Export 5 (x32 Version: 5.01.00.0007 - Haufe-Lexware GmbH & Co.KG) Hidden
Lunascape6 (All Users) (HKLM-x32\...\Lunascape6) (Version: 6.10.0.27486 - Lunascape)
MailStore Home 8.2.1.10082 (HKLM-x32\...\MailStore Home_universal1) (Version: 8.2.1.10082 - MailStore Software GmbH)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.3.2.1000 - Maxthon International Limited)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.5.0 - Mozilla)
Mozilla Thunderbird 38.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.5.0 (x86 de)) (Version: 38.5.0 - Mozilla)
Mozilla Thunderbird 38.5.1 (x86 de) (HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Mozilla Thunderbird 38.5.1 (x86 de)) (Version: 38.5.1 - Mozilla)
MyDriveConnect 4.0.7.2442 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.7.2442 - TomTom)
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
Nuance Cloud Connector (HKLM-x32\...\{3D3375A3-27C5-4545-9F4C-099373B89C18}) (Version: 3.2.1046 - Nuance Communications, Inc.)
Nuance PaperPort 14 (HKLM-x32\...\{14CB3B82-FBDC-4462-919E-86147983F09B}) (Version: 14.5.0000 - Nuance Communications, Inc.)
Nuance PDF Create 7 (HKLM\...\{AAA715B7-02F9-4F2D-92C9-80EC63835AA1}) (Version: 7.10.6408 - Nuance Communications, Inc.)
Nuance PDF Create 7 (HKLM-x32\...\{AAA715B7-02F9-4F2D-92C9-80EC63835AA1}) (Version: 7.10.6408 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{FC984E39-43D0-4AB2-ACC7-A7B87977B009}) (Version: 7.20.3274 - Nuance Communications, Inc.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 35.0.2066.37 (HKLM-x32\...\Opera 35.0.2066.37) (Version: 35.0.2066.37 - Opera Software)
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0001 - Nuance Communications, Inc.)
PDF Architect (HKLM-x32\...\{86D8A96B-1911-4C3F-AA16-0B47E053E492}) (Version: 1.2.97.14551 - pdfforge GmbH)
PDF Architect 3 (HKLM-x32\...\PDF Architect 3) (Version: 3.1.1.24880 - pdfforge GmbH)
PDF Architect 3 Convert Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Create Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Edit Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Forms Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Insert Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 OCR Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Review Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 Secure Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDF Architect 3 View Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.2 - pdfforge)
pdfforge Images2PDF 0.9.7.1125 (HKLM\...\{00120495-F25C-4F44-9DC7-2D812D025DBA}) (Version: 0.9.7.1125 - pdfforge)
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0094 - Pegatron Corporation)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.769.093013 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7045 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Scansoft PDF Create (x32 Version: - ) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.103 - Skype Technologies S.A.)
Sleipnir Version 4.4.4 (HKLM-x32\...\FenrirSleipnirV3_is1) (Version: 4.4.4 - Fenrir Inc.)
Sleipnir Version 6.1.6 (HKLM-x32\...\FenrirSleipnirV5_is1) (Version: 6.1.6 - Fenrir Inc.)
Spotify (HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
SRWare Iron Version SRWare Iron 40.2150.0 (HKLM-x32\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version: SRWare Iron 40.2150.0 - SRWare)
StreamTransport version: 1.1.6.2 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - )
Sweet Home 3D version 4.6 (HKLM\...\Sweet Home 3D_is1) (Version: - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.20 - Synaptics Incorporated)
Telescope Driver (HKLM-x32\...\{B2920232-19DA-44FC-835F-68E427EAE2CE}) (Version: 10.30.09 - PixArt)
Unternehmensbewertung direkt Dezember 2015 (HKLM-x32\...\{5463F4AF-D67F-48D7-AB3D-4CADE2D46766}) (Version: - )
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
ZinsMath 4.01 (HKLM-x32\...\ZinsMath) (Version: 4.01 - Torsten Wehner)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00B66075-89AE-4D98-A47F-A43439C2423E} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001Core => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-26] (Dropbox, Inc.)
Task: {0A43E9C2-110F-466C-BF0C-8F1C7164F417} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {0A940D08-8DC6-491B-BD70-9C5E7F80403C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-19] (Google Inc.)
Task: {0B7D4E80-5128-4F49-835F-54D4EF95D61F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {0E7331AF-9FF0-4E49-AFEF-5059A5632E24} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2015-07-22] (CHIP)
Task: {0FCAFD17-B375-4066-BD7E-07AEBD4A9139} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1D46E200-787C-4405-A71C-912CF9A842C0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-29] (Adobe Systems Incorporated)
Task: {2D78A9EF-666A-4937-8208-D7D43577A428} - System32\Tasks\{C72944A2-871C-42B2-BB39-437349A24C35} => pcalua.exe -a "C:\Program Files\Reimage\Reimage Repair\uninst.exe"
Task: {30A60748-5AF5-40DA-8120-E99113D810F2} - System32\Tasks\avastBCLRestartS-1-5-21-2303302459-3543981641-3380417783-1001 => Chrome.exe
Task: {525D9B53-676D-4A1B-8A4D-8CB8AA9D6D6C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {53365A74-5A75-4730-8484-123986D2D73B} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {59903BE0-6F76-4400-959D-581379D35691} - System32\Tasks\{DC0FC194-8E7B-471B-AF3B-1EB47EE62284} => pcalua.exe -a "C:\Program Files (x86)\RocketTab\uninstall.exe" -c /u=true /UserID=9b3f0e24-26d0-4e3d-bcab-0698be8c8064 /SourceID=browsersafeguard-rockettab-somoto /ImplementationID=browsersafeguard-rockettab-somoto /UC=20141009
Task: {5FFBD196-8BBF-4E2A-8551-3C4A4E87F111} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {7080AFF4-A59C-45EA-B4E5-BC815B03A471} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-12-10] (Maxthon International ltd.)
Task: {943DCFA3-1FCF-439D-9A7A-D45513FED010} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-19] (Google Inc.)
Task: {98BE7930-1F46-4ADA-8E14-C3F611848EE5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {BA04D874-4C23-4286-AA49-99A7EF45B4B3} - System32\Tasks\Opera scheduled Autoupdate 1395067677 => C:\Program Files (x86)\Opera\launcher.exe [2016-02-01] (Opera Software)
Task: {C1C416A7-4411-4987-B31B-9BDF8CF70683} - System32\Tasks\{7411607B-A89D-4091-BE65-A2908A212465} => pcalua.exe -a C:\Users\ASS-CO.de\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=tugs <==== ACHTUNG
Task: {C5463E91-3D0A-4517-A603-20B29BE45A39} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-12] (Microsoft Corporation)
Task: {E67762DC-9EFD-4C72-92D9-04094E4B1D52} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {ED8D28ED-9B58-4280-8553-8D497F5C3416} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001UA => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-26] (Dropbox, Inc.)
Task: {F4549734-B00F-4C97-847D-F5C0EB5E5615} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-15] (AVAST Software)
Task: {FB68DC08-36CE-4C77-BB47-829CE07F61EE} - System32\Tasks\XQSUKDD => C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD.exe <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001Core.job => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe/cASS-CO\ASS-CO.de
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001UA.job => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource schedulerASS-CO\ASS-CO.de
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: C:\WINDOWS\Tasks\XQSUKDD.job => C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD.exeʺ/infocmdline=dRlP7wgy9RFKmJ6O0pKTvf3arj4rfZIki21ZZi4UxPvlpJyjvZsiueg4YBzEYynxolBhlvTLBGqzvfY2aNltZrKHpOIr8giLlUM3aTJChnH8RGwTZ0UVPuysD0W1/j1IVNwFryIevQ1Y48FJNakS/ZEQ+wiPlGtsZMQTxPeXvSOac/oe5jH3XgsJ/niKM8EY8knJj/fsN+P2Sc/SjflEG/Nh2hsbmOlLwoyKjkLWkz60tDRRyrhHT8szAS/N7Adn0y6YVFNVb8RvqVznxZw161mzIayTz1r88XSHwms83sOoR4DKiygWBTaCBO2N98ro0NDPOcpuQb395Dv3ukvguENQBXgN76AxupPLU6AOZAFkB8qOYQVtKYO3TFEqYXqrlBW+l16E7ex8hZOIJwFUPCrd03mIz8+GF39T6hyoLIeyIC2FBWTlqrOYYo4HBf1gpPKWzzaVdJShIsjvW7TZgEBxLSPh3woJ1X8N+c6Iv81CPtEobCsV/aJocOD9dZ6aqA5POcZgiGcz88A0D/owDv2EW28VYmjIYUpcNAfwwBd8A7nOqSIXtDw3Vqe0JeZHQr6Yp/Ves+OqMM8587Ryv2iCkwpevi6rrr9x9A4crcJfU6S+2xTNAyYBSdpWy9qW1vh9vSUNyhCrdLSjq0PfHww9PoW/hIZdMw4hjfXxM70=ASS-CO\ASS-CO.de <==== ACHTUNG
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\ASS-CO.de\Desktop\Ur-Verknüpfungen\ALDI Nord Blumen Service.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www1.aldi-blumenservice.de
ShortcutWithArgument: C:\Users\ASS-CO.de\Desktop\Ur-Verknüpfungen\ALDI Nord Reisen.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nord.aldi-reisen.de/html_nord
ShortcutWithArgument: C:\Users\ASS-CO.de\Desktop\Ur-Verknüpfungen\ALDI Nord Startseite.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-essen.de
ShortcutWithArgument: C:\Users\ASS-CO.de\Desktop\Ur-Verknüpfungen\ALDI Talk.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.medionmobile.de
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2013-12-03 07:30 - 2013-12-03 00:21 - 00136192 _____ () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
2013-11-12 16:53 - 2013-03-06 15:42 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2014-03-14 22:34 - 2005-04-22 13:36 - 00143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-05-05 12:35 - 2013-05-05 12:35 - 00222544 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
2015-12-11 03:44 - 2015-12-11 03:44 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-11 03:44 - 2015-12-11 03:44 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-01-22 08:33 - 2016-01-22 08:33 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-18 08:34 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 08:34 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-12 20:36 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-12 20:35 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-12 20:36 - 2016-01-05 02:24 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-12 20:36 - 2016-01-05 02:26 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-26 17:09 - 2015-06-23 00:08 - 00245800 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
2013-09-04 23:17 - 2013-09-04 23:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-12-15 10:21 - 2015-12-15 10:21 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-15 10:21 - 2015-12-15 10:21 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-02-03 13:27 - 2016-02-03 13:27 - 02819072 _____ () C:\Program Files\AVAST Software\Avast\defs\16020300\algo.dll
2015-12-15 10:21 - 2015-12-15 10:21 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2013-05-05 12:24 - 2013-05-05 12:24 - 00293200 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\sqlite3.dll
2013-05-05 12:25 - 2013-05-05 12:25 - 00080208 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\zlib125.dll
2013-05-05 12:25 - 2013-05-05 12:25 - 00016720 _____ () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSMui.dll
2014-12-18 15:25 - 2014-12-18 15:25 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-12-18 15:26 - 2014-12-18 15:26 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-12-18 15:26 - 2014-12-18 15:26 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-12-18 15:26 - 2014-12-18 15:26 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-12-18 15:26 - 2014-12-18 15:26 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-12-18 15:29 - 2014-12-18 15:29 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-12-18 15:31 - 2014-12-18 15:31 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2014-10-30 07:23 - 2015-12-24 17:34 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00098856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00017448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00088616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 01296424 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00060968 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00022568 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00186920 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00165416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00058408 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00015912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2015-09-26 17:09 - 2015-06-22 23:58 - 00108072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00030248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00068136 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00158248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2015-09-26 17:09 - 2015-03-14 10:54 - 00281128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2015-09-26 17:09 - 2015-03-14 10:54 - 00072232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00139816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2015-09-26 17:09 - 2015-06-22 23:58 - 00037416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2015-09-26 17:09 - 2015-03-14 10:54 - 00759848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00193064 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00407080 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll
2015-09-26 17:09 - 2015-06-22 23:58 - 00148008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00076840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00207912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2015-09-26 17:09 - 2015-06-22 23:58 - 00024616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00020520 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00032296 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00034856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00064040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2015-09-26 17:09 - 2015-08-01 14:10 - 00025128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00115752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00194088 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00037928 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2015-09-26 17:09 - 2015-06-22 23:58 - 00136232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00020008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00043048 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2016-01-22 08:33 - 2016-01-22 08:33 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 08:33 - 2016-01-22 08:33 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-12-15 10:21 - 2015-12-15 10:21 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-09-26 17:09 - 2014-12-14 23:53 - 00223784 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll
2013-09-04 23:14 - 2013-09-04 23:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-03-19 09:29 - 2013-11-18 02:18 - 00258944 _____ () C:\Program Files (x86)\Maxthon\bin\Maxzlib.dll
2014-03-19 09:29 - 2014-06-03 10:37 - 00247096 _____ () C:\Program Files (x86)\Maxthon\Addons\Mobile\MxMobile.dll
2014-03-19 09:29 - 2013-11-18 02:18 - 00258944 _____ () C:\Program Files (x86)\Maxthon\Bin\maxzlib.dll
2014-03-19 09:29 - 2013-11-21 07:37 - 00887064 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libglesv2.dll
2014-03-19 09:29 - 2013-11-21 07:37 - 00109336 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libegl.dll
2014-03-19 09:29 - 2013-11-21 07:37 - 02128152 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\ffmpegsumo.dll
2014-06-24 12:57 - 2014-06-03 10:37 - 04055504 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\pdf.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:FD9CE1F3
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "Nuance Cloud Connector.lnk"
HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run: => "RtHDVBg_Dolby"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8"
HKLM\...\StartupApproved\Run32: => "CLVirtualDrive"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "YouCam Service"
HKLM\...\StartupApproved\Run32: => "avgnt"
HKLM\...\StartupApproved\Run32: => "ControlCenter3"
HKLM\...\StartupApproved\Run32: => "IndexSearch"
HKLM\...\StartupApproved\Run32: => "PaperPort PTD"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "BrMfcWnd"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKLM\...\StartupApproved\Run32: => "Forum Updater"
HKLM\...\StartupApproved\Run32: => "ISUSPM"
HKLM\...\StartupApproved\Run32: => "PPort14reminder"
HKLM\...\StartupApproved\Run32: => "PDFCreHook"
HKLM\...\StartupApproved\Run32: => "PDF7 Registry Controller"
HKLM\...\StartupApproved\Run32: => "Avira Systray"
HKLM\...\StartupApproved\Run32: => "mbot_de_144"
HKLM\...\StartupApproved\Run32: => "EaseUS EPM tray"
HKLM\...\StartupApproved\Run32: => "SynTPEnh"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\StartupFolder: => "OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "MyDriveConnect.exe"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "Dropbox Update"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\StartupApproved\Run: => "Uninstall C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{9EBB6B89-FD8E-4B4F-BC9F-6F3F0B2030D4}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{EB791200-C6FD-4494-81FE-AAC574B5E8C4}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{54802754-A1D0-4274-93A1-D01217987815}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{116640E6-BE7F-4CA1-9BA2-4CF01B86ABFF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{7577FE93-0E10-4BB7-BFE0-617970B11A2F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{85612610-E730-4BE6-A72D-21DC655BEF29}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1B5537CE-3968-4794-A7B9-7EA0491B12EE}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{707D5515-BEC8-4535-8CE0-4BBBB2B54B0E}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{4F9F3F89-5E7B-45CA-A047-E5625C9E84A4}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{909C74F8-22C3-42AB-BEE2-0F400A70662F}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{4D17BDDE-9658-4668-AA49-F42DEED8DCE7}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{6C7C8AFA-5824-403B-A15E-87CD8995BA98}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{565FBB2F-1A22-4CBE-AB5B-1822A211913A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F79A4CDA-F3D0-4742-B789-1574EA0FEB25}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DB6628D1-0F76-442A-A381-D89B1A3ACD06}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0D725FFF-BA60-4ECD-A925-5C32DAA1F2E5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{026FC64D-036D-45F2-B646-7FCA0DDD1E00}C:\users\ass-co.de\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ass-co.de\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1D683F13-996C-4666-8B96-9D33866F9D73}C:\users\ass-co.de\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ass-co.de\appdata\roaming\spotify\spotify.exe
==================== Wiederherstellungspunkte =========================
12-01-2016 20:37:31 Windows Update
20-01-2016 08:43:57 Geplanter Prüfpunkt
29-01-2016 08:06:54 Geplanter Prüfpunkt
30-01-2016 12:35:22 Installiert Telescope Driver
03-02-2016 18:46:46 JRT Pre-Junkware Removal
03-02-2016 18:48:16 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/03/2016 06:48:18 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/03/2016 06:47:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/03/2016 06:39:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.30.21727, Zeitstempel: 0x54bce4af
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632da1c
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bd8a8
ID des fehlerhaften Prozesses: 0x1d58
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2
Berichtskennung: Avira.OE.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.OE.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.OE.ServiceHost.exe5
Error: (02/03/2016 06:39:05 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlTextReaderImpl.Read()
bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
bei System.Xml.XmlDocument.Load(System.String)
bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
bei Avira.OE.WinCore.OeProductInfo.get_Culture()
bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (02/03/2016 06:38:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.30.21727, Zeitstempel: 0x54bce4af
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632da1c
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bd8a8
ID des fehlerhaften Prozesses: 0x176c
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2
Berichtskennung: Avira.OE.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.OE.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.OE.ServiceHost.exe5
Error: (02/03/2016 06:38:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlTextReaderImpl.Read()
bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
bei System.Xml.XmlDocument.Load(System.String)
bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
bei Avira.OE.WinCore.OeProductInfo.get_Culture()
bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (02/03/2016 06:38:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ASS-CO)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftMahjong_8wekyb3d8bbwe!MicrosoftMahjong“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (02/03/2016 06:37:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.30.21727, Zeitstempel: 0x54bce4af
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632da1c
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bd8a8
ID des fehlerhaften Prozesses: 0xd8c
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2
Berichtskennung: Avira.OE.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.OE.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.OE.ServiceHost.exe5
Error: (02/03/2016 06:37:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlTextReaderImpl.Read()
bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
bei System.Xml.XmlDocument.Load(System.String)
bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
bei Avira.OE.WinCore.OeProductInfo.get_Culture()
bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (02/03/2016 06:37:29 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
Systemfehler:
=============
Error: (02/03/2016 06:39:50 PM) (Source: DCOM) (EventID: 10016) (User: ASS-CO)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ASS-COASS-CO.deS-1-5-21-2303302459-3543981641-3380417783-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (02/03/2016 06:39:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
Error: (02/03/2016 06:38:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:38:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:36:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_770c9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:36:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _770c9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:36:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_770c9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:36:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_770c9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/03/2016 06:36:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (02/03/2016 05:48:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
CodeIntegrity:
===================================
Date: 2016-01-13 03:36:26.495
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-07 08:52:01.811
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-06 12:54:16.133
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-30 11:15:00.790
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-19 00:48:01.242
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-18 08:16:39.007
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-12 09:52:42.833
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 04:31:42.211
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 04:25:33.167
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 03:57:01.721
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Pentium(R) CPU N3520 @ 2.16GHz
Prozentuale Nutzung des RAM: 62%
Installierter physikalischer RAM: 3975.78 MB
Verfügbarer physikalischer RAM: 1475.38 MB
Summe virtueller Speicher: 5383.78 MB
Verfügbarer virtueller Speicher: 2572.72 MB
==================== Laufwerke ================================
Drive c: (BOOT) (Fixed) (Total:283.05 GB) (Free:183.22 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:44.3 GB) NTFS
Drive f: (Schnelle) (Fixed) (Total:146.48 GB) (Free:102.04 GB) NTFS
Drive g: (BuhaSt) (Fixed) (Total:97.66 GB) (Free:96.97 GB) NTFS
Drive h: (ASS-CO) (Fixed) (Total:146.48 GB) (Free:139.07 GB) NTFS
Drive i: (Downloads) (Fixed) (Total:195.31 GB) (Free:8.72 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 0433B666)
Partition: GPT.
==================== Ende von Addition.txt ============================
Liebe Grüße  |
|
04.02.2016, 16:17
| #11 |
| /// TB-Ausbilder | Email-account gehackt, Betreffszeile: New message Servus, du hast alles richtig gepostet.  
|
|
04.02.2016, 21:46
| #12 |
| | Hat FRST.txt erstellt /Search.txt wurde nicht erstellt [CODE]Reimage;SpeedMon;Crossrider;{2D78A9EF-666A-4937-8208-D7D43577A428};{C72944A2-871C-42B2-BB39-437349A24C35}; FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 durchgeführt von ASS-CO.de (Administrator) auf ASS-CO (04-02-2016 21:32:22) Gestartet von C:\Users\ASS-CO.de\Desktop Geladene Profile: ASS-CO.de (Verfügbare Profile: ASS-CO.de) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe () C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe (Microsoft Corporation) C:\Windows\System32\vds.exe konnte nicht auf den Prozess zugreifen -> Avira.OE.ServiceHost.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (PixArt Imaging Incorporation) C:\Windows\PixArt\Pac7302\Monitor.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe () C:\Program Files (x86)\PHotkey\PHotkey.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\PHotkey\POsd.exe () C:\Program Files (x86)\PHotkey\GPMTray.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-09-28] (Synaptics Incorporated) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-09] (Apple Inc.) HKLM\...\Run: [PAC7302_Monitor] => C:\WINDOWS\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.) HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2011-04-01] () HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [36168 2013-05-14] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [18248 2013-05-14] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PPort14reminder] => "C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\14\Config\Ereg\Ereg.ini" HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-15] (AVAST Software) HKLM-x32\...\Run: [PDFCreHook] => C:\Program Files (x86)\Nuance\PDFCreate\pdfcreate7hook.exe [605512 2013-03-26] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PDF7 Registry Controller] => C:\Program Files (x86)\Nuance\PDFCreate\RegistryController.exe [140616 2013-03-26] (Nuance Communications, Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2089056 2015-09-16] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [Forum Updater] => C:\Program Files (x86)\Forum Verlag\Unternehmensbewertung direkt\ForumUpdater.exe [2294784 2013-12-01] (Forum Verlag Herkert GmbH) HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [202280 2015-09-29] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-12-22] (Oracle Corporation) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1 HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [Spotify Web Helper] => C:\Users\ASS-CO.de\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2016-01-30] (Spotify Ltd) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1958248 2015-11-20] (TomTom) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [Dropbox Update] => C:\Users\ASS-CO.de\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-26] (Dropbox, Inc.) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation) HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\RunOnce: [Uninstall C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ASS-CO.de\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64" HKU\S-1-5-21-2303302459-3543981641-3380417783-1001\...\MountPoints2: {6c0e7c53-6e53-11e3-826e-806e6f6e6963} - "E:\Telescope_Driver.exe" ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-15] (AVAST Software) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [GladinetIconOverlay] -> {3C3DC57A-7535-48AF-BB9E-C3576A4F34D0} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIcon32.dll [2013-05-05] (Gladinet, INC) ShellIconOverlayIdentifiers-x32: [GladinetUploading] -> {959A18D3-9CC9-41e8-B76F-34ED9A89D4EA} => C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GlOverlayIconU32.dll [2013-05-05] (Gladinet, INC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nuance Cloud Connector.lnk [2014-04-04] ShortcutTarget: Nuance Cloud Connector.lnk -> C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladLauncher.exe () Startup: C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-03] ShortcutTarget: Dropbox.lnk -> C:\Users\ASS-CO.de\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\ASS-CO.de\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-09-02] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{34f19701-ad5c-43da-9b4c-fd988c605f4d}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{de6e9dbe-6e6a-43e0-a872-b29a1c72cbe8}: [DhcpNameServer] 192.168.100.36 192.168.100.200 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_72\bin\ssv.dll [2016-01-26] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-15] (AVAST Software) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_72\bin\jp2ssv.dll [2016-01-26] (Oracle Corporation) BHO-x32: Kein Name -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> Keine Datei BHO-x32: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-15] (AVAST Software) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: ZeonIEEventHelper Class -> {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} -> C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll [2011-03-26] (Zeon Corporation) Toolbar: HKLM-x32 - Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll [2011-03-26] (Zeon Corporation) FireFox: ======== FF ProfilePath: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default FF NewTab: about:newtab FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: hxxps://www.google.com/?trackid=sp-006 FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] () FF Plugin: @java.com/DTPlugin,version=11.72.2 -> C:\Program Files\Java\jre1.8.0_72\bin\dtplugin\npDeployJava1.dll [2016-01-26] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.72.2 -> C:\Program Files\Java\jre1.8.0_72\bin\plugin2\npjp2.dll [2016-01-26] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin-x32: PDF Architect 3 -> C:\Program Files (x86)\PDF Architect 3\np-previewer.dll [2015-09-17] (pdfforge GmbH) FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDFViewer\bin\nppdf.dll [Keine Datei] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\bing-avast.xml [2014-10-16] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\google-avast.xml [2015-12-15] FF SearchPlugin: C:\Users\ASS-CO.de\AppData\Roaming\Mozilla\Firefox\Profiles\7jaaahlv.default\searchplugins\yahoo-avast.xml [2014-10-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-15] FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-11-04] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension FF Extension: PDF Architect 3 Creator - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-09-28] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-15] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "hxxps://www.google.de/" CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms} CHR DefaultSearchKeyword: Default -> Avira CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=de CHR Profile: C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-18] CHR Extension: (Google Docs) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-18] CHR Extension: (Google Drive) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Google-Suche) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26] CHR Extension: (Gmail offline) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-08-18] CHR Extension: (Google Tabellen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-18] CHR Extension: (Avira Browserschutz) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-26] CHR Extension: (Google Docs Offline) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18] CHR Extension: (Avast Online Security) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-03] CHR Extension: (Avira SafeSearch) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldmiahjidflgnbiadknkmaimfpjkelng [2016-01-21] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-18] CHR Extension: (Zoho ContactManager) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\oncaihncjjemfmfijnjkmconhbnnjmop [2015-08-18] CHR Extension: (Picasa) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2015-08-18] CHR Extension: (Google Mail) - C:\Users\ASS-CO.de\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-18] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-15] Opera: ======= OPR Session Restore: -> ist aktiviert. ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-15] (AVAST Software) S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink) R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2015-12-24] (Digital Wave Ltd.) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-08-01] (CHENGDU YIWO Tech Development Co., Ltd) R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [30032 2013-05-05] (Gladinet, INC) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-02] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation) R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [66088 2015-09-22] (Haufe-Lexware GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2244832 2015-09-17] (pdfforge GmbH) S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [964832 2015-09-17] (pdfforge GmbH) R2 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [767712 2015-09-17] (pdfforge GmbH) R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1335344 2014-01-23] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [856112 2014-01-23] (pdfforge GmbH) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77640 2013-05-14] (Nuance Communications, Inc.) R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [Datei ist nicht signiert] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-15] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-18] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-15] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-15] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-20] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-15] (AVAST Software) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-01] (Avira Operations GmbH & Co. KG) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] () R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2014-12-14] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-04] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) S3 PAC7302; C:\Windows\system32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.) R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON) R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-12-09] (Realtek Semiconductor Corporation) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-09-28] (Synaptics Incorporated) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-03 20:20 - 2016-02-03 20:20 - 00001195 _____ C:\Users\ASS-CO.de\Desktop\MAMH160203.txt 2016-02-03 19:12 - 2016-02-03 19:13 - 00062666 _____ C:\Users\ASS-CO.de\Desktop\Addition.txt 2016-02-03 19:10 - 2016-02-04 21:32 - 00031764 _____ C:\Users\ASS-CO.de\Desktop\FRST.txt 2016-02-03 19:09 - 2016-02-01 11:36 - 02370560 _____ (Farbar) C:\Users\ASS-CO.de\Desktop\FRST64.exe 2016-02-03 18:56 - 2016-02-03 19:01 - 00001871 _____ C:\Users\ASS-CO.de\Desktop\JRT.txt 2016-02-03 18:00 - 2016-02-03 19:46 - 00001179 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-02-03 18:00 - 2016-02-03 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-03 18:00 - 2016-02-03 19:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-03 18:00 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-02-03 18:00 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-02-03 17:58 - 2016-02-03 17:59 - 22908888 _____ (Malwarebytes ) C:\Users\ASS-CO.de\Desktop\mbam-setup-2.2.0.1024.exe 2016-02-03 16:55 - 2016-02-03 16:55 - 01609032 _____ (Malwarebytes) C:\Users\ASS-CO.de\Desktop\JRT.exe 2016-02-03 16:54 - 2016-02-03 16:54 - 01508352 _____ C:\Users\ASS-CO.de\Desktop\AdwCleaner_5.032.exe 2016-02-02 23:28 - 2016-02-02 23:53 - 00578928 _____ C:\TDSSKiller.3.1.0.9_02.02.2016_23.28.45_log.txt 2016-02-02 21:01 - 2016-02-03 18:00 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-02 21:00 - 2016-02-04 21:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-02-02 21:00 - 2016-02-03 18:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-02-02 20:59 - 2016-02-02 23:14 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\mbar 2016-02-02 20:59 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-02-02 20:49 - 2016-02-02 20:49 - 16563352 _____ (Malwarebytes Corp.) C:\Users\ASS-CO.de\Desktop\mbar-1.09.3.1001.exe 2016-02-01 14:58 - 2016-02-01 15:51 - 00579368 _____ C:\TDSSKiller.3.1.0.9_01.02.2016_14.58.24_log.txt 2016-02-01 14:56 - 2016-02-01 14:58 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\ASS-CO.de\Desktop\tdsskiller.exe 2016-02-01 11:37 - 2016-02-04 21:32 - 00000000 ____D C:\FRST 2016-01-30 14:34 - 2016-01-30 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telescope Driver 2016-01-30 14:34 - 2016-01-30 14:34 - 00000000 ____D C:\Program Files (x86)\PixArt 2016-01-30 14:34 - 2007-11-20 17:58 - 00055296 _____ (PixArt Imaging Incorporation) C:\WINDOWS\SysWOW64\Remove.exe 2016-01-30 14:34 - 2007-11-08 10:29 - 00527872 _____ (PixArt Imaging Inc.) C:\WINDOWS\system32\Drivers\PAC7302.SYS 2016-01-30 14:34 - 2007-03-21 11:25 - 00000291 _____ C:\WINDOWS\SysWOW64\Remover.ini 2016-01-30 14:34 - 2006-10-12 11:57 - 00014336 _____ (PixArt Imaging Inc.) C:\WINDOWS\SysWOW64\P7302USD.dll 2016-01-30 12:52 - 2016-01-30 12:52 - 00281428 _____ C:\WINDOWS\Minidump\013016-27140-01.dmp 2016-01-30 12:43 - 2016-01-30 12:43 - 00000000 ____D C:\WINDOWS\PixArt 2016-01-30 12:36 - 2008-04-11 19:10 - 00000566 _____ C:\WINDOWS\SysWOW64\SP7302.ini 2016-01-30 12:36 - 2007-11-02 11:07 - 00008704 _____ (PixArt Imaging Inc.) C:\WINDOWS\system32\CoInst_071029.dll 2016-01-30 12:36 - 2007-10-30 17:48 - 00129024 _____ (PixArt Imaging Incorporation) C:\WINDOWS\SysWOW64\SP7302.ax 2016-01-25 10:25 - 2016-01-27 16:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2016-01-16 11:40 - 2016-01-16 11:40 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2016-01-16 11:40 - 2016-01-16 11:40 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-01-16 11:40 - 2016-01-16 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-01-15 17:35 - 2016-01-15 17:35 - 00109792 _____ C:\Users\ASS-CO.de\AppData\Local\GDIPFONTCACHEV1.DAT 2016-01-14 22:16 - 2016-01-14 22:16 - 00000000 ____H C:\Users\ASS-CO.de\Documents\Default.rdp 2016-01-14 22:10 - 2016-01-14 22:10 - 00759499 _____ C:\Users\ASS-CO.de\Downloads\BasicCoupon.pdf 2016-01-13 21:19 - 2016-01-13 21:20 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\de.a2c.bafa.statusseite 2016-01-13 21:19 - 2016-01-13 21:19 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMS.lnk 2016-01-13 21:19 - 2016-01-13 21:19 - 00000882 _____ C:\Users\Public\Desktop\AMS.lnk 2016-01-13 21:19 - 2016-01-13 21:19 - 00000000 ____D C:\Program Files (x86)\AMS 2016-01-12 20:35 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-12 20:35 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-01-12 20:35 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-01-12 20:35 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-12 20:35 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-12 20:35 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-12 20:35 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-12 20:35 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-12 20:35 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-01-12 20:35 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-12 20:35 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-12 20:35 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-01-12 20:35 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-12 20:35 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-12 20:35 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-01-12 20:35 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-12 20:35 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-12 20:35 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-12 20:35 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-12 20:35 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-01-12 20:35 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-01-12 20:35 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-01-12 20:35 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-01-12 20:35 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-01-12 20:35 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-01-12 20:35 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-01-12 20:35 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-01-12 20:35 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-01-12 20:35 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-12 20:35 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-01-12 20:35 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-01-12 20:35 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-01-12 20:35 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-01-12 20:35 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-01-12 20:35 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-01-12 20:35 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-01-12 20:35 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-01-12 20:35 - 2016-01-05 02:43 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2016-01-12 20:35 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-01-12 20:35 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-01-12 20:35 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-01-12 20:35 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-01-12 20:35 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-01-12 20:35 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-12 20:35 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-01-12 20:35 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-12 20:35 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-01-12 20:35 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-12 20:35 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-01-12 20:35 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-01-12 20:35 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-12 20:35 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-12 20:35 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-01-12 20:35 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-01-12 20:35 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-01-12 20:35 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-12 20:35 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-01-11 20:04 - 2016-01-11 20:04 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMU.lnk 2016-01-11 20:04 - 2016-01-11 20:04 - 00000882 _____ C:\Users\Public\Desktop\AMU.lnk 2016-01-11 20:04 - 2016-01-11 20:04 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\de.a2c.bafa.antragsmanager.unternehmer 2016-01-11 20:04 - 2016-01-11 20:04 - 00000000 ____D C:\Program Files (x86)\AMU ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-04 21:27 - 2014-02-27 19:55 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5CC6190B-CC9A-4172-A5B4-4AC465C57D80} 2016-02-04 21:25 - 2015-09-24 20:50 - 00000000 __SHD C:\Users\ASS-CO.de\IntelGraphicsProfiles 2016-02-04 21:24 - 2015-12-11 04:02 - 00000000 ____D C:\Users\ASS-CO.de 2016-02-04 21:24 - 2015-09-19 22:17 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-04 21:24 - 2015-01-31 09:54 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\HTC MediaHub 2016-02-04 21:24 - 2014-10-09 12:39 - 00001714 _____ C:\WINDOWS\Tasks\XQSUKDD.job 2016-02-04 21:23 - 2015-12-11 04:31 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-04 14:31 - 2014-03-21 14:23 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\vlc 2016-02-04 13:15 - 2015-05-04 22:28 - 00000000 ____D C:\Users\ASS-CO.de\.mediathek3 2016-02-03 21:55 - 2014-03-17 16:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-02-03 21:53 - 2015-06-26 13:42 - 00001254 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001UA.job 2016-02-03 21:37 - 2015-09-19 22:17 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-03 18:36 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-02-03 17:52 - 2014-06-04 14:07 - 00003974 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1395067677 2016-02-03 17:52 - 2014-03-17 15:47 - 00001124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-02-03 17:52 - 2014-03-17 15:47 - 00000000 ____D C:\Program Files (x86)\Opera 2016-02-03 17:44 - 2014-10-11 12:16 - 00000000 ____D C:\AdwCleaner 2016-02-03 17:44 - 2014-03-19 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRWare Iron 2016-02-03 17:44 - 2013-11-21 16:34 - 00001181 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk 2016-02-03 17:44 - 2013-11-21 16:34 - 00001175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk 2016-02-03 10:53 - 2015-06-26 13:42 - 00001202 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2303302459-3543981641-3380417783-1001Core.job 2016-02-03 08:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-03 07:56 - 2015-07-01 20:36 - 00000000 ____D C:\Users\ASS-CO.de\Documents\Outlook-Dateien 2016-02-02 08:32 - 2015-09-19 22:17 - 00004190 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-02 08:32 - 2015-09-19 22:17 - 00003958 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-02 08:25 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-01-30 22:40 - 2015-10-30 19:35 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat 2016-01-30 22:40 - 2015-10-30 19:35 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat 2016-01-30 22:40 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-01-30 22:40 - 2015-09-27 17:13 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-30 18:55 - 2014-05-11 10:06 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Spotify 2016-01-30 18:55 - 2014-05-11 10:06 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\Spotify 2016-01-30 18:52 - 2014-10-12 10:44 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Coronic 2016-01-30 17:44 - 2014-05-07 17:18 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\DVDVideoSoft 2016-01-30 14:37 - 2013-08-22 14:25 - 00000225 _____ C:\WINDOWS\win.ini 2016-01-30 13:12 - 2013-11-18 17:18 - 00000000 ___HD C:\Program Files (x86)\Temp 2016-01-30 12:52 - 2015-12-19 00:46 - 699580217 _____ C:\WINDOWS\MEMORY.DMP 2016-01-30 12:52 - 2015-12-19 00:46 - 00000000 ____D C:\WINDOWS\Minidump 2016-01-30 12:36 - 2013-11-12 16:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-01-29 22:50 - 2014-04-04 19:50 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\.oit 2016-01-29 22:45 - 2013-11-12 16:39 - 00000000 ____D C:\ProgramData\Temp 2016-01-29 08:38 - 2015-09-19 22:20 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-01-29 08:38 - 2015-09-19 22:20 - 00002256 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-01-29 08:03 - 2015-12-22 21:57 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Local\ElevatedDiagnostics 2016-01-28 16:06 - 2015-06-04 18:20 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\Gutscheine 2016-01-27 22:06 - 2015-05-21 12:20 - 00000000 ____D C:\Users\ASS-CO.de\AppData\Roaming\Skype 2016-01-27 21:57 - 2014-03-17 15:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-01-27 21:44 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-26 09:42 - 2014-10-12 12:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-01-26 09:42 - 2014-10-12 12:14 - 00000000 ____D C:\Program Files\Java 2016-01-26 09:41 - 2015-12-15 13:22 - 00000000 ____D C:\Users\ASS-CO.de\.oracle_jre_usage 2016-01-26 09:40 - 2014-10-12 12:15 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-01-20 22:21 - 2014-10-16 10:22 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2016-01-20 22:21 - 2014-10-16 10:22 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2016-01-18 15:28 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-01-16 23:15 - 2015-10-26 18:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-01-16 11:40 - 2015-05-21 12:20 - 00000000 ____D C:\ProgramData\Skype 2016-01-16 11:38 - 2015-12-01 22:47 - 00001286 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2016-01-16 11:38 - 2015-12-01 22:47 - 00001274 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2016-01-15 07:51 - 2014-10-16 10:23 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2016-01-14 20:25 - 2014-12-26 22:13 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-01-14 20:24 - 2015-07-06 11:24 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-01-13 14:47 - 2014-05-15 14:56 - 00000000 ____D C:\Users\ASS-CO.de\Desktop\Bowser 2016-01-13 07:48 - 2015-12-11 03:45 - 00000000 ____D C:\Windows.old 2016-01-13 03:33 - 2015-05-21 12:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-01-13 03:33 - 2015-05-21 12:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-01-13 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-12 21:01 - 2014-03-19 10:05 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-01-12 20:48 - 2015-05-21 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-01-12 20:48 - 2013-11-12 13:49 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD 2015-07-09 23:40 - 2015-07-09 23:40 - 0000246 _____ () C:\Users\ASS-CO.de\AppData\Local\28A2F4676B8A4d43BEBB8C3D1D26B763.CalcTape1.calc 2014-01-18 20:46 - 2015-09-27 16:07 - 0888105 _____ () C:\Users\ASS-CO.de\AppData\Local\BTServer.log 2015-03-24 20:26 - 2015-03-24 20:26 - 0004096 ____H () C:\Users\ASS-CO.de\AppData\Local\keyfile3.drm 2014-03-21 11:04 - 2014-03-21 11:04 - 0000017 _____ () C:\Users\ASS-CO.de\AppData\Local\resmon.resmoncfg 2015-12-11 03:59 - 2015-12-11 03:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== C:\Users\ASS-CO.de\AppData\Local\Temp\EasyDownLightfp.exe C:\Users\ASS-CO.de\AppData\Local\Temp\EasyDownLightrtd.exe C:\Users\ASS-CO.de\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-02-04 08:25 ==================== Ende von FRST.txt ============================ |
|
05.02.2016, 17:46
| #13 |
| /// TB-Ausbilder | Email-account gehackt, Betreffszeile: New message Servus, meine Anleitung bitte genau lesen, du sollst eine Registry-Suche machen und die Code-Box oben die Zeile vorher einfügen. Nochmal bitte. |
|
05.02.2016, 19:15
| #14 |
| | Email-account gehackt, Betreffszeile: New messageCode:
ATTFilter Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von ASS-CO.de (2016-02-05 19:10:03)
Gestartet von C:\Users\ASS-CO.de\Desktop
Start-Modus: Normal
================== Registry-Suche: "Reimage;SpeedMon;Crossrider;{2D78A9EF-666A-4937-8208-D7D43577A428};{C72944A2-871C-42B2-BB39-437349A24C35}" ===========
===================== Suchergebnis für "Reimage" ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ReiExpressContainer.exe]
""="C:\Program Files\Reimage\Reimage Express\ReiExpressContainer.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\ReiExpressContainer.exe]
""="C:\Program Files\Reimage\Reimage Express\ReiExpressContainer.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power]
"ResumeRestoreImageStartTimestamp"="0"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Reimage\Reimage Express\ReimageExpress.exe"="0x5341435001000000000000000700000028000000A8010900019E090001000000000000000000010600010000975FD891C99ECE010000000000000000"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWindows%5CSystemResources%5CWindows.UI.SettingsApp%5CWindows.UI.SettingsApp.pri\1cfbe8c8a894cec\399ff83b]
"@{windows?ms-resource://Windows.UI.SettingsApp/SearchResources/SystemSettings_Misc_RefreshYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWindows%5CSystemResources%5CWindows.UI.SettingsApp%5CWindows.UI.SettingsApp.pri\1cfbe8c8a894cec\9f42ebe6]
"@{windows?ms-resource://Windows.UI.SettingsApp/SearchResources/SystemSettings_Misc_RefreshYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\588addd4]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_ResetYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\588addd4]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows7/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\588addd4]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows8_1/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\c14b58b3]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_PreviewBuild/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\c14b58b3]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows8/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"I:\01 Programme System\Browser\ReimageRepair.exe"="0x534143500100000000000000070000002800000020D70B00E2270C0001000000000000000000010600010000975FD891C99ECE01000000000000000002000000280000000000000000000040000000000000000000000000000000004BC20C00000000000100000001000000"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ScanSoft\PaperPort\AquireImage]
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWindows%5CSystemResources%5CWindows.UI.SettingsApp%5CWindows.UI.SettingsApp.pri\1cfbe8c8a894cec\399ff83b]
"@{windows?ms-resource://Windows.UI.SettingsApp/SearchResources/SystemSettings_Misc_ResetYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWindows%5CSystemResources%5CWindows.UI.SettingsApp%5CWindows.UI.SettingsApp.pri\1cfbe8c8a894cec\9f42ebe6]
"@{windows?ms-resource://Windows.UI.SettingsApp/SearchResources/SystemSettings_Misc_ResetYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\588addd4]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_PreviewBuild/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\588addd4]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows8/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\c14b58b3]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_ResetYourPC/LowKeywords}"="löschen löscht;formatieren formatiert;Format Formate;Reimaging ausführen;Re-Imaging ausführen;Reimaging;Re-Imaging;reaktivieren;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\c14b58b3]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows7/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d112e3504d0c94\c14b58b3]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SystemSettings_Misc_RollbackYourPC_Windows8_1/LowKeywords}"="löschen löscht;formatieren formatiert;Re-Imaging;reaktivieren;löschen löscht;erase erases;format formats;PC PCs;reimage;re-image;reinstate;system;wipe wipes"
===================== Suchergebnis für "Crossrider" ==========
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Code]
"AppJavaScript"=" /************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
appAPI.ready(function($) {
// Place your code here (you can also define new functions above this scope)
// The $ object is the extension's jQuery object
});
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\13]
"Name"="CrossriderAppUtils"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\36]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId="BG";appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c==="undefined"){return;}var a;if(typeof c==="object"){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:"openURL",eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!=="string"){console.error("appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: "+(typeof a));return;}appAPI.internal.message.send({eventName:"runHelper",eventContent:a});};window.alert=function(a){a=(a===null?"null":a);a=(typeof a==="undefined"?"undefined":a);appAPIinternal.alert(a);};appAPI.internal._isMonitorAPISupported_=function(){return(typeof appAPIinternal.supportMonitor!=="undefined");};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:"windowOpen",eventContent:{url:b,name:a,specs:d,replace:c}});};window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){appAPI.internal.callbackCounter=0;function b(f,h,g){var d=appAPI.internal.prefs.getChar(appAPI.appInfo.id,"Crossrider\\"+f);if(d){d=appAPI.JSON.parse(d);}else{d={};}appAPI.internal.callbackCounter++;d
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\37]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler("openURL",function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus==="boolean"?b.focus:true),height:(typeof b.height==="number"?b.height:750),width:(typeof b.width==="number"?b.width:750),top:(typeof b.top==="number"?b.top:100),left:(typeof b.left==="number"?b.left:100),focusTimer:(typeof b.focusTimer==="number"?b.focusTimer:0),focusDelay:(typeof b.focusDelay==="number"?b.focusDelay:0)};appAPI.openURL(a);}});appAPI.internal.callbacks.setEventHandler("runHelper",function(b){if(appAPI.isActiveTab()){var a=b;appAPIinternal.run(a);}});(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,"Crossrider\\onBeforeNavigate");if(typeof c!=="string"){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!=="object"){return 0;}var d=0;for(var b in c){d++;appAPI.internal.callbacks.addListener("onBeforeNavigate",function(h,g){var k=appAPI.internal.callbacks.onBeforeNavigate.listenersAdditionalData
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\41]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform="IE";if(typeof appAPI.appInfo==="undefined"){appAPI.appInfo={};}var c=appAPI.internal.prefs.getChar("fullVersionForUrl","Installer");if(typeof c==="string"){appAPI.appInfo.platformVersion=c;}else{appAPI.appInfo.platformVersion=appAPI.internal.prefs.getChar("fullVersion","Installer");}appAPI.appInfo.userId=appAPI.internal.prefs.getChar("bic","Crossrider");appAPI.appInfo.id=appAPI.internal.prefs.getInt("activeAppId","");appAPI.appInfo.version=appAPI.internal.prefs.getInt("version","Manifest");appAPI.appInfo.description=appAPI.internal.prefs.getChar("description","Manifest");appAPI.appInfo.name=appAPI.internal.prefs.getChar("name","Manifest");appAPI.appInfo.publisherName=appAPI.internal.prefs.getChar("publisherName","Manifest");appAPI.appInfo.environment=appAPI.internal.prefs.getChar("ModeType","Manifest");appAPI.appInfo.backgroundVersion=appAPI.internal.prefs.getChar("BgVersion","Manifest");appAPI.appInfo.pluginsVersion=appAPI.internal.prefs.getChar("PluginsManifestVersion","Manifest");appAPI.appID=appAPI.appInfo.id;appAPI.version=appAPI.appInfo.version;appAPI.cr_version=appAPI.appInfo.platformVersion;appAPI.getCrossriderID=function(){return appAPI.appInfo.userId;};if(typeof appAPI.installer==="undefined"){appAPI.installer={};}appAPI.installer.getIds=function(){var e={};if(typeof appAPI.appInfo.userId==="string"){e.installer_bic=appAPI.appInfo.userId;}var d=appAPI.internal.prefs.getChar("verifier","Crossrider");if(typeof d==="string"){e.installer_verifier=d;}var f=appAPI.internal.prefs.getChar("215AppVerifier","Crossrider");if(typeof f==="string"){e.installer_verifier_for_215app=f;}return e;};appAPI.installer.getUserId=function(){return appAPI.appInfo.userId;};appAPI.installer.getInstalledSoftware=function(){var d=appAPI.internal.prefs.getChar("SoftwareDetected","Installer");if(typeof d==="string"){return appAPI.JSON.parse(d);}return null;};appAPI.installer.getVersion=function(){return appAPI.internal.prefs.getChar("FullVersion","Installer");};if(typeof appAPI.internal.installer==="undefined"){appAPI.internal.installer={};}try{appAPI.internal.installer.version=appAPI.installer.getVersion();}catch(b){}if((appAPI.internal.prefs.getInt("Reinstall","Installer")===1)){appAPI.internal.installer.isFirstInstall="__REINSTALL__";}else{appAPI.internal.installer.isFirstInstall="__FIRST_INSTALL__";}appAPI.installer.getDefaultBrowser=function(){var d=appAPI.internal.prefs.getChar("DefaultBrowser","Installer");return(d?d:"na");};appAPI.installer.getAdditionalInfo=function(){try{return appAPI.JSON.parse(appAPI.internal.prefs.getChar("AdditionalInfo","Installer"));}catch(d){}return null;};})(appAPIinternal);
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\47]
"JavaScript"="
(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\78]
"Name"="CrossriderInfo"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\94]
"JavaScript"="
appAPI.isBackground=false;appAPI.tabId="POPUP";appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: "+(typeof a));return;}if(a.length!==4){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA)");return;}appAPI.internal.message.send({eventName:"onSetBadgeColorFromPopup",eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!=="string"){console.error("appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: "+(typeof c));return;}b.text=c;if(typeof a==="undefined"||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Expected an array (2nd param) but got: "+(typeof a));return;}else{if(a.length!==4){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Color array (2nd param) should have 4 members (RGBA)");return;}else{b.color=a;}}}appAPI.internal.message.send({eventName:"onSetBadgeTextFromPopup",eventContent:b});};if(typeof window.crossriderMain!=="undefined"){window.crossriderMain($jquery);}
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\13]
"Name"="CrossriderAppUtils"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\36]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId="BG";appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c==="undefined"){return;}var a;if(typeof c==="object"){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:"openURL",eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!=="string"){console.error("appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: "+(typeof a));return;}appAPI.internal.message.send({eventName:"runHelper",eventContent:a});};window.alert=function(a){a=(a===null?"null":a);a=(typeof a==="undefined"?"undefined":a);appAPIinternal.alert(a);};appAPI.internal._isMonitorAPISupported_=function(){return(typeof appAPIinternal.supportMonitor!=="undefined");};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:"windowOpen",eventContent:{url:b,name:a,specs:d,replace:c}});};window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){appAPI.internal.callbackCounter=0;function b(f,h,g){var d=appAPI.internal.prefs.getChar(appAPI.appInfo.id,"Crossrider\\"+f);if(d){d=appAPI.JSON.parse(d);}else{d={};}appAPI.internal.callbackCounter++;d
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\37]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler("openURL",function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus==="boolean"?b.focus:true),height:(typeof b.height==="number"?b.height:750),width:(typeof b.width==="number"?b.width:750),top:(typeof b.top==="number"?b.top:100),left:(typeof b.left==="number"?b.left:100),focusTimer:(typeof b.focusTimer==="number"?b.focusTimer:0),focusDelay:(typeof b.focusDelay==="number"?b.focusDelay:0)};appAPI.openURL(a);}});appAPI.internal.callbacks.setEventHandler("runHelper",function(b){if(appAPI.isActiveTab()){var a=b;appAPIinternal.run(a);}});(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,"Crossrider\\onBeforeNavigate");if(typeof c!=="string"){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!=="object"){return 0;}var d=0;for(var b in c){d++;appAPI.internal.callbacks.addListener("onBeforeNavigate",function(h,g){var k=appAPI.internal.callbacks.onBeforeNavigate.listenersAdditionalData
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\41]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform="IE";if(typeof appAPI.appInfo==="undefined"){appAPI.appInfo={};}var c=appAPI.internal.prefs.getChar("fullVersionForUrl","Installer");if(typeof c==="string"){appAPI.appInfo.platformVersion=c;}else{appAPI.appInfo.platformVersion=appAPI.internal.prefs.getChar("fullVersion","Installer");}appAPI.appInfo.userId=appAPI.internal.prefs.getChar("bic","Crossrider");appAPI.appInfo.id=appAPI.internal.prefs.getInt("activeAppId","");appAPI.appInfo.version=appAPI.internal.prefs.getInt("version","Manifest");appAPI.appInfo.description=appAPI.internal.prefs.getChar("description","Manifest");appAPI.appInfo.name=appAPI.internal.prefs.getChar("name","Manifest");appAPI.appInfo.publisherName=appAPI.internal.prefs.getChar("publisherName","Manifest");appAPI.appInfo.environment=appAPI.internal.prefs.getChar("ModeType","Manifest");appAPI.appInfo.backgroundVersion=appAPI.internal.prefs.getChar("BgVersion","Manifest");appAPI.appInfo.pluginsVersion=appAPI.internal.prefs.getChar("PluginsManifestVersion","Manifest");appAPI.appID=appAPI.appInfo.id;appAPI.version=appAPI.appInfo.version;appAPI.cr_version=appAPI.appInfo.platformVersion;appAPI.getCrossriderID=function(){return appAPI.appInfo.userId;};if(typeof appAPI.installer==="undefined"){appAPI.installer={};}appAPI.installer.getIds=function(){var e={};if(typeof appAPI.appInfo.userId==="string"){e.installer_bic=appAPI.appInfo.userId;}var d=appAPI.internal.prefs.getChar("verifier","Crossrider");if(typeof d==="string"){e.installer_verifier=d;}var f=appAPI.internal.prefs.getChar("215AppVerifier","Crossrider");if(typeof f==="string"){e.installer_verifier_for_215app=f;}return e;};appAPI.installer.getUserId=function(){return appAPI.appInfo.userId;};appAPI.installer.getInstalledSoftware=function(){var d=appAPI.internal.prefs.getChar("SoftwareDetected","Installer");if(typeof d==="string"){return appAPI.JSON.parse(d);}return null;};appAPI.installer.getVersion=function(){return appAPI.internal.prefs.getChar("FullVersion","Installer");};if(typeof appAPI.internal.installer==="undefined"){appAPI.internal.installer={};}try{appAPI.internal.installer.version=appAPI.installer.getVersion();}catch(b){}if((appAPI.internal.prefs.getInt("Reinstall","Installer")===1)){appAPI.internal.installer.isFirstInstall="__REINSTALL__";}else{appAPI.internal.installer.isFirstInstall="__FIRST_INSTALL__";}appAPI.installer.getDefaultBrowser=function(){var d=appAPI.internal.prefs.getChar("DefaultBrowser","Installer");return(d?d:"na");};appAPI.installer.getAdditionalInfo=function(){try{return appAPI.JSON.parse(appAPI.internal.prefs.getChar("AdditionalInfo","Installer"));}catch(d){}return null;};})(appAPIinternal);
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\47]
"JavaScript"="
(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\78]
"Name"="CrossriderInfo"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\94]
"JavaScript"="
appAPI.isBackground=false;appAPI.tabId="POPUP";appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: "+(typeof a));return;}if(a.length!==4){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA)");return;}appAPI.internal.message.send({eventName:"onSetBadgeColorFromPopup",eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!=="string"){console.error("appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: "+(typeof c));return;}b.text=c;if(typeof a==="undefined"||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Expected an array (2nd param) but got: "+(typeof a));return;}else{if(a.length!==4){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Color array (2nd param) should have 4 members (RGBA)");return;}else{b.color=a;}}}appAPI.internal.message.send({eventName:"onSetBadgeTextFromPopup",eventContent:b});};if(typeof window.crossriderMain!=="undefined"){window.crossriderMain($jquery);}
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Code]
"AppJavaScript"=" /************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
appAPI.ready(function($) {
// Place your code here (you can also define new functions above this scope)
// The $ object is the extension's jQuery object
});
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\13]
"Name"="CrossriderAppUtils"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\36]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId="BG";appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c==="undefined"){return;}var a;if(typeof c==="object"){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:"openURL",eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!=="string"){console.error("appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: "+(typeof a));return;}appAPI.internal.message.send({eventName:"runHelper",eventContent:a});};window.alert=function(a){a=(a===null?"null":a);a=(typeof a==="undefined"?"undefined":a);appAPIinternal.alert(a);};appAPI.internal._isMonitorAPISupported_=function(){return(typeof appAPIinternal.supportMonitor!=="undefined");};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:"windowOpen",eventContent:{url:b,name:a,specs:d,replace:c}});};window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){appAPI.internal.callbackCounter=0;function b(f,h,g){var d=appAPI.internal.prefs.getChar(appAPI.appInfo.id,"Crossrider\\"+f);if(d){d=appAPI.JSON.parse(d);}else{d={};}appAPI.internal.callbackCounter++;d
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\37]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler("openURL",function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus==="boolean"?b.focus:true),height:(typeof b.height==="number"?b.height:750),width:(typeof b.width==="number"?b.width:750),top:(typeof b.top==="number"?b.top:100),left:(typeof b.left==="number"?b.left:100),focusTimer:(typeof b.focusTimer==="number"?b.focusTimer:0),focusDelay:(typeof b.focusDelay==="number"?b.focusDelay:0)};appAPI.openURL(a);}});appAPI.internal.callbacks.setEventHandler("runHelper",function(b){if(appAPI.isActiveTab()){var a=b;appAPIinternal.run(a);}});(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,"Crossrider\\onBeforeNavigate");if(typeof c!=="string"){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!=="object"){return 0;}var d=0;for(var b in c){d++;appAPI.internal.callbacks.addListener("onBeforeNavigate",function(h,g){var k=appAPI.internal.callbacks.onBeforeNavigate.listenersAdditionalData
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\41]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform="IE";if(typeof appAPI.appInfo==="undefined"){appAPI.appInfo={};}var c=appAPI.internal.prefs.getChar("fullVersionForUrl","Installer");if(typeof c==="string"){appAPI.appInfo.platformVersion=c;}else{appAPI.appInfo.platformVersion=appAPI.internal.prefs.getChar("fullVersion","Installer");}appAPI.appInfo.userId=appAPI.internal.prefs.getChar("bic","Crossrider");appAPI.appInfo.id=appAPI.internal.prefs.getInt("activeAppId","");appAPI.appInfo.version=appAPI.internal.prefs.getInt("version","Manifest");appAPI.appInfo.description=appAPI.internal.prefs.getChar("description","Manifest");appAPI.appInfo.name=appAPI.internal.prefs.getChar("name","Manifest");appAPI.appInfo.publisherName=appAPI.internal.prefs.getChar("publisherName","Manifest");appAPI.appInfo.environment=appAPI.internal.prefs.getChar("ModeType","Manifest");appAPI.appInfo.backgroundVersion=appAPI.internal.prefs.getChar("BgVersion","Manifest");appAPI.appInfo.pluginsVersion=appAPI.internal.prefs.getChar("PluginsManifestVersion","Manifest");appAPI.appID=appAPI.appInfo.id;appAPI.version=appAPI.appInfo.version;appAPI.cr_version=appAPI.appInfo.platformVersion;appAPI.getCrossriderID=function(){return appAPI.appInfo.userId;};if(typeof appAPI.installer==="undefined"){appAPI.installer={};}appAPI.installer.getIds=function(){var e={};if(typeof appAPI.appInfo.userId==="string"){e.installer_bic=appAPI.appInfo.userId;}var d=appAPI.internal.prefs.getChar("verifier","Crossrider");if(typeof d==="string"){e.installer_verifier=d;}var f=appAPI.internal.prefs.getChar("215AppVerifier","Crossrider");if(typeof f==="string"){e.installer_verifier_for_215app=f;}return e;};appAPI.installer.getUserId=function(){return appAPI.appInfo.userId;};appAPI.installer.getInstalledSoftware=function(){var d=appAPI.internal.prefs.getChar("SoftwareDetected","Installer");if(typeof d==="string"){return appAPI.JSON.parse(d);}return null;};appAPI.installer.getVersion=function(){return appAPI.internal.prefs.getChar("FullVersion","Installer");};if(typeof appAPI.internal.installer==="undefined"){appAPI.internal.installer={};}try{appAPI.internal.installer.version=appAPI.installer.getVersion();}catch(b){}if((appAPI.internal.prefs.getInt("Reinstall","Installer")===1)){appAPI.internal.installer.isFirstInstall="__REINSTALL__";}else{appAPI.internal.installer.isFirstInstall="__FIRST_INSTALL__";}appAPI.installer.getDefaultBrowser=function(){var d=appAPI.internal.prefs.getChar("DefaultBrowser","Installer");return(d?d:"na");};appAPI.installer.getAdditionalInfo=function(){try{return appAPI.JSON.parse(appAPI.internal.prefs.getChar("AdditionalInfo","Installer"));}catch(d){}return null;};})(appAPIinternal);
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\47]
"JavaScript"="
(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\78]
"Name"="CrossriderInfo"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1\Plugins\94]
"JavaScript"="
appAPI.isBackground=false;appAPI.tabId="POPUP";appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: "+(typeof a));return;}if(a.length!==4){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA)");return;}appAPI.internal.message.send({eventName:"onSetBadgeColorFromPopup",eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!=="string"){console.error("appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: "+(typeof c));return;}b.text=c;if(typeof a==="undefined"||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Expected an array (2nd param) but got: "+(typeof a));return;}else{if(a.length!==4){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Color array (2nd param) should have 4 members (RGBA)");return;}else{b.color=a;}}}appAPI.internal.message.send({eventName:"onSetBadgeTextFromPopup",eventContent:b});};if(typeof window.crossriderMain!=="undefined"){window.crossriderMain($jquery);}
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\13]
"Name"="CrossriderAppUtils"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\36]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId="BG";appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c==="undefined"){return;}var a;if(typeof c==="object"){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:"openURL",eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!=="string"){console.error("appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: "+(typeof a));return;}appAPI.internal.message.send({eventName:"runHelper",eventContent:a});};window.alert=function(a){a=(a===null?"null":a);a=(typeof a==="undefined"?"undefined":a);appAPIinternal.alert(a);};appAPI.internal._isMonitorAPISupported_=function(){return(typeof appAPIinternal.supportMonitor!=="undefined");};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:"windowOpen",eventContent:{url:b,name:a,specs:d,replace:c}});};window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){appAPI.internal.callbackCounter=0;function b(f,h,g){var d=appAPI.internal.prefs.getChar(appAPI.appInfo.id,"Crossrider\\"+f);if(d){d=appAPI.JSON.parse(d);}else{d={};}appAPI.internal.callbackCounter++;d
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\37]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler("openURL",function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus==="boolean"?b.focus:true),height:(typeof b.height==="number"?b.height:750),width:(typeof b.width==="number"?b.width:750),top:(typeof b.top==="number"?b.top:100),left:(typeof b.left==="number"?b.left:100),focusTimer:(typeof b.focusTimer==="number"?b.focusTimer:0),focusDelay:(typeof b.focusDelay==="number"?b.focusDelay:0)};appAPI.openURL(a);}});appAPI.internal.callbacks.setEventHandler("runHelper",function(b){if(appAPI.isActiveTab()){var a=b;appAPIinternal.run(a);}});(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,"Crossrider\\onBeforeNavigate");if(typeof c!=="string"){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!=="object"){return 0;}var d=0;for(var b in c){d++;appAPI.internal.callbacks.addListener("onBeforeNavigate",function(h,g){var k=appAPI.internal.callbacks.onBeforeNavigate.listenersAdditionalData
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\41]
"JavaScript"="
if(typeof appAPI==="undefined"){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform="IE";if(typeof appAPI.appInfo==="undefined"){appAPI.appInfo={};}var c=appAPI.internal.prefs.getChar("fullVersionForUrl","Installer");if(typeof c==="string"){appAPI.appInfo.platformVersion=c;}else{appAPI.appInfo.platformVersion=appAPI.internal.prefs.getChar("fullVersion","Installer");}appAPI.appInfo.userId=appAPI.internal.prefs.getChar("bic","Crossrider");appAPI.appInfo.id=appAPI.internal.prefs.getInt("activeAppId","");appAPI.appInfo.version=appAPI.internal.prefs.getInt("version","Manifest");appAPI.appInfo.description=appAPI.internal.prefs.getChar("description","Manifest");appAPI.appInfo.name=appAPI.internal.prefs.getChar("name","Manifest");appAPI.appInfo.publisherName=appAPI.internal.prefs.getChar("publisherName","Manifest");appAPI.appInfo.environment=appAPI.internal.prefs.getChar("ModeType","Manifest");appAPI.appInfo.backgroundVersion=appAPI.internal.prefs.getChar("BgVersion","Manifest");appAPI.appInfo.pluginsVersion=appAPI.internal.prefs.getChar("PluginsManifestVersion","Manifest");appAPI.appID=appAPI.appInfo.id;appAPI.version=appAPI.appInfo.version;appAPI.cr_version=appAPI.appInfo.platformVersion;appAPI.getCrossriderID=function(){return appAPI.appInfo.userId;};if(typeof appAPI.installer==="undefined"){appAPI.installer={};}appAPI.installer.getIds=function(){var e={};if(typeof appAPI.appInfo.userId==="string"){e.installer_bic=appAPI.appInfo.userId;}var d=appAPI.internal.prefs.getChar("verifier","Crossrider");if(typeof d==="string"){e.installer_verifier=d;}var f=appAPI.internal.prefs.getChar("215AppVerifier","Crossrider");if(typeof f==="string"){e.installer_verifier_for_215app=f;}return e;};appAPI.installer.getUserId=function(){return appAPI.appInfo.userId;};appAPI.installer.getInstalledSoftware=function(){var d=appAPI.internal.prefs.getChar("SoftwareDetected","Installer");if(typeof d==="string"){return appAPI.JSON.parse(d);}return null;};appAPI.installer.getVersion=function(){return appAPI.internal.prefs.getChar("FullVersion","Installer");};if(typeof appAPI.internal.installer==="undefined"){appAPI.internal.installer={};}try{appAPI.internal.installer.version=appAPI.installer.getVersion();}catch(b){}if((appAPI.internal.prefs.getInt("Reinstall","Installer")===1)){appAPI.internal.installer.isFirstInstall="__REINSTALL__";}else{appAPI.internal.installer.isFirstInstall="__FIRST_INSTALL__";}appAPI.installer.getDefaultBrowser=function(){var d=appAPI.internal.prefs.getChar("DefaultBrowser","Installer");return(d?d:"na");};appAPI.installer.getAdditionalInfo=function(){try{return appAPI.JSON.parse(appAPI.internal.prefs.getChar("AdditionalInfo","Installer"));}catch(d){}return null;};})(appAPIinternal);
"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\47]
"JavaScript"="
(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\78]
"Name"="CrossriderInfo"
[HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinemaGo2.3cV09.10\Plugins\94]
"JavaScript"="
appAPI.isBackground=false;appAPI.tabId="POPUP";appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: "+(typeof a));return;}if(a.length!==4){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA)");return;}appAPI.internal.message.send({eventName:"onSetBadgeColorFromPopup",eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!=="string"){console.error("appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: "+(typeof c));return;}b.text=c;if(typeof a==="undefined"||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Expected an array (2nd param) but got: "+(typeof a));return;}else{if(a.length!==4){console.error("appAPI.browserAction.setBadgeText - Invalid parameter. Color array (2nd param) should have 4 members (RGBA)");return;}else{b.color=a;}}}appAPI.internal.message.send({eventName:"onSetBadgeTextFromPopup",eventContent:b});};if(typeof window.crossriderMain!=="undefined"){window.crossriderMain($jquery);}
"
===================== Suchergebnis für "{2D78A9EF-666A-4937-8208-D7D43577A428}" ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2D78A9EF-666A-4937-8208-D7D43577A428}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D78A9EF-666A-4937-8208-D7D43577A428}]
"Path"="\{C72944A2-871C-42B2-BB39-437349A24C35}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C72944A2-871C-42B2-BB39-437349A24C35}]
"Id"="{2D78A9EF-666A-4937-8208-D7D43577A428}"
===================== Suchergebnis für "{C72944A2-871C-42B2-BB39-437349A24C35}" ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D78A9EF-666A-4937-8208-D7D43577A428}]
"Path"="\{C72944A2-871C-42B2-BB39-437349A24C35}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C72944A2-871C-42B2-BB39-437349A24C35}]
"Id"="{2D78A9EF-666A-4937-8208-D7D43577A428}"
====== Ende von Suche ======
  |
|
06.02.2016, 11:26
| #15 |
| /// TB-Ausbilder | Email-account gehackt, Betreffszeile: New message Servus, wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2303302459-3543981641-3380417783-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei
BHO-x32: Kein Name -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> Keine Datei
BHO-x32: Kein Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Keine Datei
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.google.com/?trackid=sp-006
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD
Task: {0FCAFD17-B375-4066-BD7E-07AEBD4A9139} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {2D78A9EF-666A-4937-8208-D7D43577A428} - System32\Tasks\{C72944A2-871C-42B2-BB39-437349A24C35} => pcalua.exe -a "C:\Program Files\Reimage\Reimage Repair\uninst.exe"
Task: {525D9B53-676D-4A1B-8A4D-8CB8AA9D6D6C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {53365A74-5A75-4730-8484-123986D2D73B} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {59903BE0-6F76-4400-959D-581379D35691} - System32\Tasks\{DC0FC194-8E7B-471B-AF3B-1EB47EE62284} => pcalua.exe -a "C:\Program Files (x86)\RocketTab\uninstall.exe" -c /u=true /UserID=9b3f0e24-26d0-4e3d-bcab-0698be8c8064 /SourceID=browsersafeguard-rockettab-somoto /ImplementationID=browsersafeguard-rockettab-somoto /UC=20141009
Task: {98BE7930-1F46-4ADA-8E14-C3F611848EE5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {E67762DC-9EFD-4C72-92D9-04094E4B1D52} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {FB68DC08-36CE-4C77-BB47-829CE07F61EE} - System32\Tasks\XQSUKDD => C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD.exe <==== ACHTUNG
C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD.exe
Task: C:\WINDOWS\Tasks\XQSUKDD.job => C:\Users\ASS-CO.de\AppData\Roaming\XQSUKDD.exeʺ/infocmdline=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ASS-CO\ASS-CO.de <==== ACHTUNG
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ReiExpressContainer.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\ReiExpressContainer.exe
DeleteKey: HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Browsers+Apps+1.1
CMD: reg delete "HKEY_USERS\S-1-5-21-2303302459-3543981641-3380417783-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v C:\Program Files\Reimage\Reimage Express\ReimageExpress.exe /f
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32" /v "mbot_de_144" /f
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2
Schritt 3 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 4 ESET Online Scanner
Schritt 5
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
| Themen zu Email-account gehackt, Betreffszeile: New message |
| anlage, antivirus, avira, dokumente, erfolg, gehackt, hacken, helfer, home, message, nervt, nutze, outlook, passwörter, problem, provider, schuld, stelle, system, tool, untersuchung, wenig, werte, win, woche, zahlen |
und 
und speichere die Logdatei auf Deinem Desktop.
Linear-Darstellung
