Live Security Platinum - Malwarebites löscht schadhafte libs nicht

t'john · 24.08.2012, 21:28

Deinstalliere Zonealarm, das ist schwachsinniger Muell.

Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
Starte die OTL.exe.
Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:

Ersetze die *** Sternchen wieder in den Benutzernamen zurück!

Code:

ATTFilter

:OTL
:Files
c:\programdata\7531CC92180D040D00001731F875F002
c:\users\*****\AppData\Local\temp
c:\users\Default\AppData\Local\temp
c:\users\Admin\AppData\Local\temp

Schließe alle Programme.
Klicke auf den Fix Button.
Wenn OTL einen Neustart verlangt, bitte zulassen.
Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

Pechvogel44 · 25.08.2012, 11:17

Code:

ATTFilter

========== OTL ==========
========== FILES ==========
c:\programdata\7531CC92180D040D00001731F875F002 folder moved successfully.
c:\users\*****\AppData\Local\Temp\nsm327A.tmp folder moved successfully.
Folder move failed. c:\users\*****\AppData\Local\Temp\IswTmp\Logs scheduled to be moved on reboot.
Folder move failed. c:\users\*****\AppData\Local\Temp\IswTmp scheduled to be moved on reboot.
c:\users\*****\AppData\Local\Temp\hsperfdata_***** folder moved successfully.
c:\users\*****\AppData\Local\Temp\acro_rd_dir folder moved successfully.
Folder move failed. c:\users\*****\AppData\Local\Temp scheduled to be moved on reboot.
c:\users\Default\AppData\Local\temp folder moved successfully.
c:\users\Admin\AppData\Local\temp folder moved successfully.
 
OTL by OldTimer - Version 3.2.56.0 log created on 08252012_120628

Zone-Alarm hab ich übrigens erst draufgespielt, nachdem ich mir den Live-Security-Platinum eingefangen hatte, um ein bisschen Kontrolle darüber zu haben, welche Programme so alle über das Internet mit werweiswem kommunizieren. Bringt das gar nix? Na egal: Ich hau's wieder runter.

t'john · 25.08.2012, 15:47

Weg mit ZA!

TDSSKiller von Kaspersky

- Lade den TDSSKiller und entpacke das Archiv auf Deinen Desktop.
- Vergewissere Dich, dass die TDSSKiller.exe direkt auf dem Desktop liegt (nicht in einem Ordner auf dem Desktop).
- deaktiviere vorübergehend dein AntiVirus-Programm
- Starte die TDSSKiller.exe durch Doppelklick.
- Nach Beendigung der Arbeit schlägt das Tool vor, das System neu zu starten.
- Bestätige das ggfs. mit Y(es).
- Beim Hochfahren des Systems führt der Treiber alle geplanten Operationen aus löscht sich danach.
- Poste den Inhalt von C:\TDSSKiller.txt hier in den Thread.

Hier findest Du eine ausführlichere TDSSKiller Anleitung.

Pechvogel44 · 25.08.2012, 16:58

Code:

ATTFilter

17:53:20.0617 3664  TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
17:53:20.0866 3664  ============================================================
17:53:20.0866 3664  Current date / time: 2012/08/25 17:53:20.0866
17:53:20.0866 3664  SystemInfo:
17:53:20.0866 3664  
17:53:20.0866 3664  OS Version: 6.1.7601 ServicePack: 1.0
17:53:20.0866 3664  Product type: Workstation
17:53:20.0866 3664  ComputerName: ACE
17:53:20.0866 3664  UserName: ADMIN
17:53:20.0866 3664  Windows directory: C:\Windows
17:53:20.0866 3664  System windows directory: C:\Windows
17:53:20.0866 3664  Running under WOW64
17:53:20.0866 3664  Processor architecture: Intel x64
17:53:20.0866 3664  Number of processors: 4
17:53:20.0866 3664  Page size: 0x1000
17:53:20.0866 3664  Boot type: Normal boot
17:53:20.0866 3664  ============================================================
17:53:21.0506 3664  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:53:21.0522 3664  ============================================================
17:53:21.0522 3664  \Device\Harddisk0\DR0:
17:53:21.0522 3664  MBR partitions:
17:53:21.0522 3664  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
17:53:21.0522 3664  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x24835000
17:53:21.0537 3664  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x26268000, BlocksNum 0x245EF800
17:53:21.0537 3664  ============================================================
17:53:21.0568 3664  C: <-> \Device\Harddisk0\DR0\Partition2
17:53:21.0615 3664  E: <-> \Device\Harddisk0\DR0\Partition3
17:53:21.0615 3664  ============================================================
17:53:21.0615 3664  Initialize success
17:53:21.0615 3664  ============================================================
17:53:28.0963 2132  ============================================================
17:53:28.0963 2132  Scan started
17:53:28.0963 2132  Mode: Manual; 
17:53:28.0963 2132  ============================================================
17:53:29.0197 2132  ================ Scan system memory ========================
17:53:29.0197 2132  System memory - ok
17:53:29.0197 2132  ================ Scan services =============================
17:53:29.0384 2132  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
17:53:29.0384 2132  1394ohci - ok
17:53:29.0509 2132  [ 2D6434E957F7CFA0035C20890F77BBC6 ] a2acc           C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys
17:53:29.0509 2132  a2acc - ok
17:53:29.0618 2132  [ 0D050186CF421131B43D00024BD9B8BB ] a2AntiMalware   C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
17:53:29.0649 2132  a2AntiMalware - ok
17:53:29.0681 2132  [ 3044D0F3FEB9FFE8BC953D8F34B5B504 ] A2DDA           C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys
17:53:29.0681 2132  A2DDA - ok
17:53:29.0727 2132  [ 3D55CE53128C81E06CD6B024C3B9FAC3 ] a2injectiondriver C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys
17:53:29.0727 2132  a2injectiondriver - ok
17:53:29.0759 2132  [ E41D79682A209F72F4F578CFD4A53952 ] a2util          C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys
17:53:29.0759 2132  a2util - ok
17:53:29.0821 2132  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
17:53:29.0821 2132  ACPI - ok
17:53:29.0868 2132  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
17:53:29.0868 2132  AcpiPmi - ok
17:53:30.0008 2132  [ A9D3B95E8466BD58EEB8A1154654E162 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
17:53:30.0008 2132  AdobeFlashPlayerUpdateSvc - ok
17:53:30.0071 2132  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
17:53:30.0071 2132  adp94xx - ok
17:53:30.0086 2132  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
17:53:30.0102 2132  adpahci - ok
17:53:30.0102 2132  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
17:53:30.0102 2132  adpu320 - ok
17:53:30.0133 2132  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
17:53:30.0133 2132  AeLookupSvc - ok
17:53:30.0180 2132  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
17:53:30.0180 2132  AFD - ok
17:53:30.0227 2132  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
17:53:30.0227 2132  agp440 - ok
17:53:30.0258 2132  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
17:53:30.0258 2132  ALG - ok
17:53:30.0289 2132  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
17:53:30.0289 2132  aliide - ok
17:53:30.0351 2132  [ 671D9DCA48DA807780D8409C18ED0AE0 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
17:53:30.0351 2132  AMD External Events Utility - ok
17:53:30.0367 2132  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
17:53:30.0383 2132  amdide - ok
17:53:30.0414 2132  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
17:53:30.0414 2132  AmdK8 - ok
17:53:30.0554 2132  [ D3E6B2E1394D93FE9DB0BA24814B0D8F ] amdkmdag        C:\Windows\system32\DRIVERS\atipmdag.sys
17:53:30.0585 2132  amdkmdag - ok
17:53:30.0617 2132  [ CC4D915D786D3DA973B2EA9B95D59A29 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
17:53:30.0632 2132  amdkmdap - ok
17:53:30.0648 2132  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
17:53:30.0648 2132  AmdPPM - ok
17:53:30.0679 2132  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
17:53:30.0695 2132  amdsata - ok
17:53:30.0726 2132  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
17:53:30.0726 2132  amdsbs - ok
17:53:30.0741 2132  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
17:53:30.0741 2132  amdxata - ok
17:53:30.0773 2132  [ 391887990CDAA83DE5C56C3FDE966DA1 ] AmUStor         C:\Windows\system32\drivers\AmUStor.SYS
17:53:30.0788 2132  AmUStor - ok
17:53:30.0866 2132  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
17:53:30.0866 2132  AntiVirSchedulerService - ok
17:53:30.0929 2132  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
17:53:30.0929 2132  AntiVirService - ok
17:53:30.0975 2132  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
17:53:30.0975 2132  AppID - ok
17:53:30.0991 2132  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
17:53:30.0991 2132  AppIDSvc - ok
17:53:31.0022 2132  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll
17:53:31.0022 2132  Appinfo - ok
17:53:31.0085 2132  [ 7EF47644B74EBE721CC32211D3C35E76 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:53:31.0085 2132  Apple Mobile Device - ok
17:53:31.0147 2132  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
17:53:31.0147 2132  arc - ok
17:53:31.0147 2132  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
17:53:31.0147 2132  arcsas - ok
17:53:31.0178 2132  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
17:53:31.0178 2132  AsyncMac - ok
17:53:31.0225 2132  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
17:53:31.0225 2132  atapi - ok
17:53:31.0287 2132  [ 637E0753BD6DEB8EA5314A5C357EC1A0 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
17:53:31.0287 2132  AtiHdmiService - ok
17:53:31.0350 2132  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:53:31.0350 2132  AudioEndpointBuilder - ok
17:53:31.0381 2132  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
17:53:31.0381 2132  AudioSrv - ok
17:53:31.0443 2132  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
17:53:31.0443 2132  avgntflt - ok
17:53:31.0490 2132  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
17:53:31.0490 2132  avipbb - ok
17:53:31.0537 2132  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
17:53:31.0537 2132  avkmgr - ok
17:53:31.0599 2132  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
17:53:31.0599 2132  AxInstSV - ok
17:53:31.0631 2132  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
17:53:31.0631 2132  b06bdrv - ok
17:53:31.0677 2132  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
17:53:31.0677 2132  b57nd60a - ok
17:53:31.0787 2132  [ FDE8C8DC07E75347E4C6B455A0964217 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys
17:53:31.0818 2132  BCM43XX - ok
17:53:31.0880 2132  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
17:53:31.0880 2132  BDESVC - ok
17:53:31.0927 2132  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
17:53:31.0927 2132  Beep - ok
17:53:31.0989 2132  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
17:53:32.0005 2132  BFE - ok
17:53:32.0052 2132  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\system32\qmgr.dll
17:53:32.0052 2132  BITS - ok
17:53:32.0067 2132  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
17:53:32.0083 2132  blbdrive - ok
17:53:32.0145 2132  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:53:32.0145 2132  Bonjour Service - ok
17:53:32.0192 2132  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
17:53:32.0192 2132  bowser - ok
17:53:32.0239 2132  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
17:53:32.0239 2132  BrFiltLo - ok
17:53:32.0239 2132  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
17:53:32.0239 2132  BrFiltUp - ok
17:53:32.0301 2132  [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
17:53:32.0301 2132  BridgeMP - ok
17:53:32.0364 2132  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
17:53:32.0364 2132  Browser - ok
17:53:32.0395 2132  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
17:53:32.0395 2132  Brserid - ok
17:53:32.0395 2132  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
17:53:32.0411 2132  BrSerWdm - ok
17:53:32.0411 2132  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
17:53:32.0411 2132  BrUsbMdm - ok
17:53:32.0411 2132  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
17:53:32.0411 2132  BrUsbSer - ok
17:53:32.0489 2132  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
17:53:32.0489 2132  BthEnum - ok
17:53:32.0520 2132  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
17:53:32.0520 2132  BTHMODEM - ok
17:53:32.0567 2132  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
17:53:32.0567 2132  BthPan - ok
17:53:32.0645 2132  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys
17:53:32.0645 2132  BTHPORT - ok
17:53:32.0691 2132  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
17:53:32.0691 2132  bthserv - ok
17:53:32.0707 2132  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
17:53:32.0707 2132  BTHUSB - ok
17:53:32.0769 2132  [ 380B798D30C56EDE4AF58619D0E86CCB ] btwampfl        C:\Windows\system32\drivers\btwampfl.sys
17:53:32.0769 2132  btwampfl - ok
17:53:32.0816 2132  [ BA5622F5544C6C445DFF1A05ACC8B19D ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
17:53:32.0816 2132  btwaudio - ok
17:53:32.0847 2132  [ A11905D0F4BD34771F195217B6AA5AE0 ] btwavdt         C:\Windows\system32\DRIVERS\btwavdt.sys
17:53:32.0847 2132  btwavdt - ok
17:53:32.0925 2132  [ 3930E53EE0BED9DFF9AFA09F505D0CAE ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
17:53:32.0925 2132  btwdins - ok
17:53:32.0957 2132  [ 07096D2BC22CCB6CEA5A532DF0BE8A75 ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys
17:53:32.0957 2132  btwl2cap - ok
17:53:32.0988 2132  [ BD776F32D64EC615BE4563DC2747224E ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
17:53:32.0988 2132  btwrchid - ok
17:53:33.0035 2132  catchme - ok
17:53:33.0050 2132  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
17:53:33.0066 2132  cdfs - ok
17:53:33.0113 2132  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys
17:53:33.0113 2132  cdrom - ok
17:53:33.0159 2132  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
17:53:33.0159 2132  CertPropSvc - ok
17:53:33.0191 2132  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
17:53:33.0191 2132  circlass - ok
17:53:33.0222 2132  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
17:53:33.0237 2132  CLFS - ok
17:53:33.0315 2132  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:53:33.0315 2132  clr_optimization_v2.0.50727_32 - ok
17:53:33.0331 2132  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:53:33.0331 2132  clr_optimization_v2.0.50727_64 - ok
17:53:33.0409 2132  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:53:33.0425 2132  clr_optimization_v4.0.30319_32 - ok
17:53:33.0440 2132  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:53:33.0456 2132  clr_optimization_v4.0.30319_64 - ok
17:53:33.0487 2132  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
17:53:33.0487 2132  CmBatt - ok
17:53:33.0518 2132  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
17:53:33.0518 2132  cmdide - ok
17:53:33.0565 2132  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
17:53:33.0565 2132  CNG - ok
17:53:33.0612 2132  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
17:53:33.0612 2132  Compbatt - ok
17:53:33.0659 2132  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
17:53:33.0659 2132  CompositeBus - ok
17:53:33.0690 2132  COMSysApp - ok
17:53:33.0721 2132  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
17:53:33.0721 2132  crcdisk - ok
17:53:33.0768 2132  [ 4F5414602E2544A4554D95517948B705 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
17:53:33.0768 2132  CryptSvc - ok
17:53:33.0861 2132  [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
17:53:33.0877 2132  cvhsvc - ok
17:53:33.0939 2132  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
17:53:33.0955 2132  DcomLaunch - ok
17:53:34.0002 2132  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
17:53:34.0002 2132  defragsvc - ok
17:53:34.0049 2132  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
17:53:34.0049 2132  DfsC - ok
17:53:34.0080 2132  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
17:53:34.0080 2132  Dhcp - ok
17:53:34.0127 2132  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
17:53:34.0127 2132  discache - ok
17:53:34.0142 2132  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
17:53:34.0142 2132  Disk - ok
17:53:34.0158 2132  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
17:53:34.0173 2132  Dnscache - ok
17:53:34.0205 2132  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
17:53:34.0205 2132  dot3svc - ok
17:53:34.0251 2132  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
17:53:34.0251 2132  DPS - ok
17:53:34.0283 2132  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
17:53:34.0283 2132  drmkaud - ok
17:53:34.0345 2132  [ 61E894FE1E9CC720C909E6E343351794 ] DsiWMIService   C:\Program Files (x86)\Launch Manager\dsiwmis.exe
17:53:34.0345 2132  DsiWMIService - ok
17:53:34.0392 2132  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
17:53:34.0407 2132  DXGKrnl - ok
17:53:34.0439 2132  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
17:53:34.0439 2132  EapHost - ok
17:53:34.0532 2132  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
17:53:34.0563 2132  ebdrv - ok
17:53:34.0626 2132  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
17:53:34.0626 2132  EFS - ok
17:53:34.0719 2132  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
17:53:34.0719 2132  ehRecvr - ok
17:53:34.0751 2132  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
17:53:34.0751 2132  ehSched - ok
17:53:34.0797 2132  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
17:53:34.0797 2132  elxstor - ok
17:53:34.0875 2132  [ 064F001BF07333F980FFB565DCF6DD3D ] ePowerSvc       C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
17:53:34.0891 2132  ePowerSvc - ok
17:53:34.0922 2132  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
17:53:34.0922 2132  ErrDev - ok
17:53:34.0969 2132  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
17:53:34.0985 2132  EventSystem - ok
17:53:35.0031 2132  [ 613B2836EF86490C2764345BB1378F18 ] ewusbnet        C:\Windows\system32\DRIVERS\ewusbnet.sys
17:53:35.0031 2132  ewusbnet - ok
17:53:35.0047 2132  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
17:53:35.0047 2132  exfat - ok
17:53:35.0078 2132  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
17:53:35.0078 2132  fastfat - ok
17:53:35.0141 2132  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
17:53:35.0156 2132  Fax - ok
17:53:35.0187 2132  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
17:53:35.0187 2132  fdc - ok
17:53:35.0219 2132  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
17:53:35.0234 2132  fdPHost - ok
17:53:35.0250 2132  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
17:53:35.0250 2132  FDResPub - ok
17:53:35.0281 2132  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
17:53:35.0281 2132  FileInfo - ok
17:53:35.0297 2132  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
17:53:35.0297 2132  Filetrace - ok
17:53:35.0328 2132  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
17:53:35.0328 2132  flpydisk - ok
17:53:35.0375 2132  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
17:53:35.0375 2132  FltMgr - ok
17:53:35.0421 2132  [ B4447F606BB19FD8AD0BAFB59B90F5D9 ] FontCache       C:\Windows\system32\FntCache.dll
17:53:35.0437 2132  FontCache - ok
17:53:35.0515 2132  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:53:35.0515 2132  FontCache3.0.0.0 - ok
17:53:35.0531 2132  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
17:53:35.0531 2132  FsDepends - ok
17:53:35.0577 2132  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
17:53:35.0577 2132  Fs_Rec - ok
17:53:35.0624 2132  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
17:53:35.0624 2132  fvevol - ok
17:53:35.0640 2132  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
17:53:35.0640 2132  gagp30kx - ok
17:53:35.0687 2132  [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:53:35.0687 2132  GEARAspiWDM - ok
17:53:35.0749 2132  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
17:53:35.0749 2132  gpsvc - ok
17:53:35.0827 2132  [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService     C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
17:53:35.0827 2132  GREGService - ok
17:53:35.0905 2132  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:53:35.0905 2132  gupdate - ok
17:53:35.0936 2132  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:53:35.0936 2132  gupdatem - ok
17:53:35.0967 2132  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
17:53:35.0967 2132  hcw85cir - ok
17:53:36.0014 2132  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:53:36.0030 2132  HdAudAddService - ok
17:53:36.0061 2132  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
17:53:36.0061 2132  HDAudBus - ok
17:53:36.0108 2132  [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64         C:\Windows\system32\DRIVERS\HECIx64.sys
17:53:36.0108 2132  HECIx64 - ok
17:53:36.0123 2132  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
17:53:36.0123 2132  HidBatt - ok
17:53:36.0139 2132  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
17:53:36.0139 2132  HidBth - ok
17:53:36.0170 2132  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
17:53:36.0170 2132  HidIr - ok
17:53:36.0201 2132  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\System32\hidserv.dll
17:53:36.0201 2132  hidserv - ok
17:53:36.0264 2132  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
17:53:36.0264 2132  HidUsb - ok
17:53:36.0326 2132  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
17:53:36.0326 2132  hkmsvc - ok
17:53:36.0389 2132  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
17:53:36.0389 2132  HomeGroupListener - ok
17:53:36.0435 2132  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
17:53:36.0435 2132  HomeGroupProvider - ok
17:53:36.0467 2132  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
17:53:36.0482 2132  HpSAMD - ok
17:53:36.0529 2132  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
17:53:36.0529 2132  HTTP - ok
17:53:36.0591 2132  [ D969D0E26C5B1E813B17066A8318D5D4 ] hwdatacard      C:\Windows\system32\DRIVERS\ewusbmdm.sys
17:53:36.0591 2132  hwdatacard - ok
17:53:36.0623 2132  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
17:53:36.0623 2132  hwpolicy - ok
17:53:36.0685 2132  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
17:53:36.0685 2132  i8042prt - ok
17:53:36.0716 2132  [ ABBF174CB394F5C437410A788B7E404A ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
17:53:36.0732 2132  iaStor - ok
17:53:36.0794 2132  [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
17:53:36.0794 2132  IAStorDataMgrSvc - ok
17:53:36.0825 2132  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
17:53:36.0841 2132  iaStorV - ok
17:53:36.0903 2132  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:53:36.0903 2132  idsvc - ok
17:53:36.0935 2132  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
17:53:36.0935 2132  iirsp - ok
17:53:36.0981 2132  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
17:53:36.0997 2132  IKEEXT - ok
17:53:37.0044 2132  [ 36FDF367A1DABFF903E2214023D71368 ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys
17:53:37.0044 2132  Impcd - ok
17:53:37.0137 2132  [ 06B774E74F7E2B8AE903A70C45A03D61 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
17:53:37.0153 2132  IntcAzAudAddService - ok
17:53:37.0184 2132  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
17:53:37.0184 2132  intelide - ok
17:53:37.0403 2132  [ 09CE164AFA8483E41808784D7FCA154E ] intelkmd        C:\Windows\system32\DRIVERS\igdpmd64.sys
17:53:37.0449 2132  intelkmd - ok
17:53:37.0496 2132  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
17:53:37.0496 2132  intelppm - ok
17:53:37.0527 2132  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
17:53:37.0527 2132  IPBusEnum - ok
17:53:37.0574 2132  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:53:37.0574 2132  IpFilterDriver - ok
17:53:37.0652 2132  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
17:53:37.0652 2132  iphlpsvc - ok
17:53:37.0683 2132  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
17:53:37.0683 2132  IPMIDRV - ok
17:53:37.0715 2132  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
17:53:37.0715 2132  IPNAT - ok
17:53:37.0793 2132  [ 50D6CCC6FF5561F9F56946B3E6164FB8 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
17:53:37.0808 2132  iPod Service - ok
17:53:37.0824 2132  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
17:53:37.0839 2132  IRENUM - ok
17:53:37.0855 2132  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
17:53:37.0855 2132  isapnp - ok
17:53:37.0902 2132  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
17:53:37.0902 2132  iScsiPrt - ok
17:53:37.0949 2132  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
17:53:37.0949 2132  kbdclass - ok
17:53:37.0995 2132  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
17:53:37.0995 2132  kbdhid - ok
17:53:38.0027 2132  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
17:53:38.0027 2132  KeyIso - ok
17:53:38.0058 2132  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
17:53:38.0058 2132  KSecDD - ok
17:53:38.0105 2132  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
17:53:38.0105 2132  KSecPkg - ok
17:53:38.0136 2132  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
17:53:38.0136 2132  ksthunk - ok
17:53:38.0167 2132  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
17:53:38.0167 2132  KtmRm - ok
17:53:38.0198 2132  [ 39918DB0EFCF045A1CE6FABBF339F975 ] L1C             C:\Windows\system32\DRIVERS\L1C62x64.sys
17:53:38.0198 2132  L1C - ok
17:53:38.0261 2132  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\System32\srvsvc.dll
17:53:38.0261 2132  LanmanServer - ok
17:53:38.0307 2132  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:53:38.0323 2132  LanmanWorkstation - ok
17:53:38.0370 2132  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
17:53:38.0370 2132  lltdio - ok
17:53:38.0401 2132  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
17:53:38.0401 2132  lltdsvc - ok
17:53:38.0432 2132  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
17:53:38.0432 2132  lmhosts - ok
17:53:38.0479 2132  [ A1C148801B4AF64847AEB9F3AD9594EF ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
17:53:38.0479 2132  LMS - ok
17:53:38.0510 2132  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
17:53:38.0510 2132  LSI_FC - ok
17:53:38.0510 2132  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
17:53:38.0526 2132  LSI_SAS - ok
17:53:38.0526 2132  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
17:53:38.0526 2132  LSI_SAS2 - ok
17:53:38.0526 2132  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
17:53:38.0526 2132  LSI_SCSI - ok
17:53:38.0557 2132  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
17:53:38.0557 2132  luafv - ok
17:53:38.0651 2132  [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
17:53:38.0651 2132  MBAMProtector - ok
17:53:38.0713 2132  [ 43683E970F008C93C9429EF428147A54 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
17:53:38.0729 2132  MBAMService - ok
17:53:38.0760 2132  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
17:53:38.0760 2132  Mcx2Svc - ok
17:53:38.0807 2132  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
17:53:38.0807 2132  megasas - ok
17:53:38.0807 2132  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
17:53:38.0822 2132  MegaSR - ok
17:53:38.0853 2132  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
17:53:38.0853 2132  MMCSS - ok
17:53:38.0853 2132  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
17:53:38.0869 2132  Modem - ok
17:53:38.0885 2132  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
17:53:38.0885 2132  monitor - ok
17:53:38.0931 2132  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\drivers\mouclass.sys
17:53:38.0931 2132  mouclass - ok
17:53:38.0947 2132  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
17:53:38.0947 2132  mouhid - ok
17:53:38.0994 2132  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
17:53:38.0994 2132  mountmgr - ok
17:53:39.0041 2132  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
17:53:39.0041 2132  mpio - ok
17:53:39.0056 2132  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
17:53:39.0056 2132  mpsdrv - ok
17:53:39.0103 2132  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
17:53:39.0103 2132  MpsSvc - ok
17:53:39.0134 2132  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
17:53:39.0134 2132  MRxDAV - ok
17:53:39.0181 2132  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
17:53:39.0181 2132  mrxsmb - ok
17:53:39.0181 2132  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:53:39.0197 2132  mrxsmb10 - ok
17:53:39.0212 2132  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:53:39.0212 2132  mrxsmb20 - ok
17:53:39.0259 2132  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
17:53:39.0259 2132  msahci - ok
17:53:39.0290 2132  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
17:53:39.0290 2132  msdsm - ok
17:53:39.0321 2132  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
17:53:39.0321 2132  MSDTC - ok
17:53:39.0353 2132  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
17:53:39.0353 2132  Msfs - ok
17:53:39.0368 2132  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
17:53:39.0368 2132  mshidkmdf - ok
17:53:39.0399 2132  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
17:53:39.0399 2132  msisadrv - ok
17:53:39.0431 2132  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
17:53:39.0431 2132  MSiSCSI - ok
17:53:39.0446 2132  msiserver - ok
17:53:39.0477 2132  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
17:53:39.0477 2132  MSKSSRV - ok
17:53:39.0477 2132  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
17:53:39.0477 2132  MSPCLOCK - ok
17:53:39.0493 2132  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
17:53:39.0493 2132  MSPQM - ok
17:53:39.0540 2132  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
17:53:39.0540 2132  MsRPC - ok
17:53:39.0571 2132  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
17:53:39.0571 2132  mssmbios - ok
17:53:39.0602 2132  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
17:53:39.0602 2132  MSTEE - ok
17:53:39.0602 2132  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
17:53:39.0618 2132  MTConfig - ok
17:53:39.0618 2132  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
17:53:39.0633 2132  Mup - ok
17:53:39.0649 2132  [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter    C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
17:53:39.0649 2132  mwlPSDFilter - ok
17:53:39.0665 2132  [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ     C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
17:53:39.0665 2132  mwlPSDNServ - ok
17:53:39.0665 2132  [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk     C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
17:53:39.0680 2132  mwlPSDVDisk - ok
17:53:39.0727 2132  [ 0036634E5C92BE109056F7E2380103A9 ] MWLService      C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
17:53:39.0727 2132  MWLService - ok
17:53:39.0774 2132  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
17:53:39.0789 2132  napagent - ok
17:53:39.0852 2132  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
17:53:39.0852 2132  NativeWifiP - ok
17:53:39.0899 2132  [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS            C:\Windows\system32\drivers\ndis.sys
17:53:39.0914 2132  NDIS - ok
17:53:39.0930 2132  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
17:53:39.0930 2132  NdisCap - ok
17:53:39.0945 2132  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
17:53:39.0961 2132  NdisTapi - ok
17:53:40.0008 2132  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
17:53:40.0008 2132  Ndisuio - ok
17:53:40.0023 2132  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
17:53:40.0023 2132  NdisWan - ok
17:53:40.0086 2132  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
17:53:40.0086 2132  NDProxy - ok
17:53:40.0117 2132  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
17:53:40.0117 2132  NetBIOS - ok
17:53:40.0148 2132  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
17:53:40.0148 2132  NetBT - ok
17:53:40.0179 2132  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
17:53:40.0179 2132  Netlogon - ok
17:53:40.0226 2132  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
17:53:40.0226 2132  Netman - ok
17:53:40.0242 2132  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
17:53:40.0242 2132  netprofm - ok
17:53:40.0273 2132  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:53:40.0273 2132  NetTcpPortSharing - ok
17:53:40.0445 2132  [ 24F64343F14A119308456E1CA7507B26 ] NETw5s64        C:\Windows\system32\DRIVERS\NETw5s64.sys
17:53:40.0491 2132  NETw5s64 - ok
17:53:40.0538 2132  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
17:53:40.0538 2132  nfrd960 - ok
17:53:40.0601 2132  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
17:53:40.0601 2132  NlaSvc - ok
17:53:40.0647 2132  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
17:53:40.0647 2132  Npfs - ok
17:53:40.0663 2132  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
17:53:40.0679 2132  nsi - ok
17:53:40.0679 2132  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
17:53:40.0679 2132  nsiproxy - ok
17:53:40.0741 2132  [ A2F74975097F52A00745F9637451FDD8 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
17:53:40.0757 2132  Ntfs - ok
17:53:40.0835 2132  [ 5B3CE960C62DBE864BE9A0BD043A3E30 ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
17:53:40.0835 2132  NTI IScheduleSvc - ok
17:53:40.0881 2132  [ 15221DD637D9D0FFC60848EBBF1DF538 ] NTIBackupSvc    C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
17:53:40.0881 2132  NTIBackupSvc - ok
17:53:40.0913 2132  [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr         C:\Windows\system32\drivers\NTIDrvr.sys
17:53:40.0913 2132  NTIDrvr - ok
17:53:40.0944 2132  [ B5071E15D4C3F5EF5018AFF7E85A85E5 ] NTISchedulerSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
17:53:40.0944 2132  NTISchedulerSvc - ok
17:53:40.0975 2132  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
17:53:40.0975 2132  Null - ok
17:53:41.0022 2132  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
17:53:41.0022 2132  nvraid - ok
17:53:41.0069 2132  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
17:53:41.0069 2132  nvstor - ok
17:53:41.0115 2132  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
17:53:41.0115 2132  nv_agp - ok
17:53:41.0162 2132  [ BA7DAC1B8A86D9402C3E04E1FCAA600D ] ODDPwrSvc       C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
17:53:41.0162 2132  ODDPwrSvc - ok
17:53:41.0209 2132  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
17:53:41.0209 2132  ohci1394 - ok
17:53:41.0256 2132  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:53:41.0256 2132  ose - ok
17:53:41.0412 2132  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
17:53:41.0427 2132  osppsvc - ok
17:53:41.0474 2132  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
17:53:41.0490 2132  p2pimsvc - ok
17:53:41.0521 2132  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
17:53:41.0537 2132  p2psvc - ok
17:53:41.0568 2132  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
17:53:41.0568 2132  Parport - ok
17:53:41.0599 2132  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
17:53:41.0599 2132  partmgr - ok
17:53:41.0615 2132  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
17:53:41.0615 2132  PcaSvc - ok
17:53:41.0646 2132  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
17:53:41.0661 2132  pci - ok
17:53:41.0693 2132  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
17:53:41.0693 2132  pciide - ok
17:53:41.0724 2132  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
17:53:41.0724 2132  pcmcia - ok
17:53:41.0739 2132  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
17:53:41.0739 2132  pcw - ok
17:53:41.0771 2132  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
17:53:41.0771 2132  PEAUTH - ok
17:53:41.0880 2132  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
17:53:41.0880 2132  PerfHost - ok
17:53:41.0942 2132  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
17:53:41.0958 2132  pla - ok
17:53:42.0020 2132  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
17:53:42.0036 2132  PlugPlay - ok
17:53:42.0067 2132  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
17:53:42.0067 2132  PNRPAutoReg - ok
17:53:42.0083 2132  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
17:53:42.0083 2132  PNRPsvc - ok
17:53:42.0129 2132  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
17:53:42.0129 2132  PolicyAgent - ok
17:53:42.0192 2132  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
17:53:42.0192 2132  Power - ok
17:53:42.0239 2132  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
17:53:42.0239 2132  PptpMiniport - ok
17:53:42.0270 2132  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
17:53:42.0270 2132  Processor - ok
17:53:42.0301 2132  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
17:53:42.0317 2132  ProfSvc - ok
17:53:42.0332 2132  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
17:53:42.0332 2132  ProtectedStorage - ok
17:53:42.0379 2132  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
17:53:42.0379 2132  Psched - ok
17:53:42.0410 2132  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
17:53:42.0426 2132  ql2300 - ok
17:53:42.0426 2132  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
17:53:42.0426 2132  ql40xx - ok
17:53:42.0457 2132  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
17:53:42.0457 2132  QWAVE - ok
17:53:42.0473 2132  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
17:53:42.0473 2132  QWAVEdrv - ok
17:53:42.0473 2132  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
17:53:42.0473 2132  RasAcd - ok
17:53:42.0519 2132  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
17:53:42.0519 2132  RasAgileVpn - ok
17:53:42.0535 2132  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
17:53:42.0551 2132  RasAuto - ok
17:53:42.0582 2132  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
17:53:42.0582 2132  Rasl2tp - ok
17:53:42.0613 2132  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
17:53:42.0629 2132  RasMan - ok
17:53:42.0644 2132  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
17:53:42.0644 2132  RasPppoe - ok
17:53:42.0675 2132  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
17:53:42.0675 2132  RasSstp - ok
17:53:42.0707 2132  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
17:53:42.0707 2132  rdbss - ok
17:53:42.0722 2132  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
17:53:42.0722 2132  rdpbus - ok
17:53:42.0753 2132  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
17:53:42.0753 2132  RDPCDD - ok
17:53:42.0769 2132  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
17:53:42.0769 2132  RDPENCDD - ok
17:53:42.0785 2132  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
17:53:42.0785 2132  RDPREFMP - ok
17:53:42.0831 2132  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
17:53:42.0831 2132  RDPWD - ok
17:53:42.0878 2132  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
17:53:42.0878 2132  rdyboost - ok
17:53:42.0909 2132  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
17:53:42.0909 2132  RemoteAccess - ok
17:53:42.0925 2132  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
17:53:42.0925 2132  RemoteRegistry - ok
17:53:42.0987 2132  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
17:53:42.0987 2132  RFCOMM - ok
17:53:43.0050 2132  [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo       C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
17:53:43.0050 2132  RichVideo - ok
17:53:43.0081 2132  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
17:53:43.0081 2132  RpcEptMapper - ok
17:53:43.0112 2132  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
17:53:43.0112 2132  RpcLocator - ok
17:53:43.0159 2132  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
17:53:43.0159 2132  RpcSs - ok
17:53:43.0175 2132  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
17:53:43.0190 2132  rspndr - ok
17:53:43.0221 2132  [ 7CB9F0FDD730F4A4ECF6CDE15EA12E8A ] RS_Service      C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
17:53:43.0221 2132  RS_Service - ok
17:53:43.0237 2132  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
17:53:43.0237 2132  SamSs - ok
17:53:43.0268 2132  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
17:53:43.0268 2132  sbp2port - ok
17:53:43.0299 2132  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
17:53:43.0299 2132  SCardSvr - ok
17:53:43.0346 2132  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
17:53:43.0346 2132  scfilter - ok
17:53:43.0393 2132  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
17:53:43.0393 2132  Schedule - ok
17:53:43.0455 2132  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
17:53:43.0455 2132  SCPolicySvc - ok
17:53:43.0502 2132  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
17:53:43.0502 2132  SDRSVC - ok
17:53:43.0549 2132  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
17:53:43.0549 2132  secdrv - ok
17:53:43.0549 2132  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
17:53:43.0549 2132  seclogon - ok
17:53:43.0596 2132  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\system32\sens.dll
17:53:43.0596 2132  SENS - ok
17:53:43.0611 2132  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
17:53:43.0611 2132  SensrSvc - ok
17:53:43.0627 2132  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
17:53:43.0627 2132  Serenum - ok
17:53:43.0658 2132  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
17:53:43.0658 2132  Serial - ok
17:53:43.0705 2132  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
17:53:43.0705 2132  sermouse - ok
17:53:43.0736 2132  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
17:53:43.0752 2132  SessionEnv - ok
17:53:43.0783 2132  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
17:53:43.0783 2132  sffdisk - ok
17:53:43.0799 2132  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
17:53:43.0799 2132  sffp_mmc - ok
17:53:43.0799 2132  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
17:53:43.0799 2132  sffp_sd - ok
17:53:43.0830 2132  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
17:53:43.0830 2132  sfloppy - ok
17:53:43.0877 2132  [ C6CC9297BD53E5229653303E556AA539 ] Sftfs           C:\Windows\system32\DRIVERS\Sftfslh.sys
17:53:43.0892 2132  Sftfs - ok
17:53:43.0955 2132  [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
17:53:43.0970 2132  sftlist - ok
17:53:44.0001 2132  [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaylh.sys
17:53:44.0001 2132  Sftplay - ok
17:53:44.0048 2132  [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys
17:53:44.0048 2132  Sftredir - ok
17:53:44.0048 2132  [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys
17:53:44.0048 2132  Sftvol - ok
17:53:44.0095 2132  [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
17:53:44.0095 2132  sftvsa - ok
17:53:44.0126 2132  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
17:53:44.0126 2132  SharedAccess - ok
17:53:44.0173 2132  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:53:44.0173 2132  ShellHWDetection - ok
17:53:44.0189 2132  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
17:53:44.0189 2132  SiSRaid2 - ok
17:53:44.0204 2132  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
17:53:44.0204 2132  SiSRaid4 - ok
17:53:44.0251 2132  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
17:53:44.0251 2132  Smb - ok
17:53:44.0313 2132  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
17:53:44.0313 2132  SNMPTRAP - ok
17:53:44.0345 2132  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
17:53:44.0345 2132  spldr - ok
17:53:44.0376 2132  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
17:53:44.0391 2132  Spooler - ok
17:53:44.0501 2132  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
17:53:44.0532 2132  sppsvc - ok
17:53:44.0563 2132  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
17:53:44.0563 2132  sppuinotify - ok
17:53:44.0610 2132  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
17:53:44.0625 2132  srv - ok
17:53:44.0657 2132  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
17:53:44.0657 2132  srv2 - ok
17:53:44.0688 2132  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
17:53:44.0688 2132  srvnet - ok
17:53:44.0719 2132  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
17:53:44.0735 2132  SSDPSRV - ok
17:53:44.0750 2132  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
17:53:44.0750 2132  SstpSvc - ok
17:53:44.0781 2132  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
17:53:44.0781 2132  stexstor - ok
17:53:44.0813 2132  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
17:53:44.0828 2132  stisvc - ok
17:53:44.0844 2132  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
17:53:44.0844 2132  swenum - ok
17:53:44.0875 2132  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
17:53:44.0891 2132  swprv - ok
17:53:44.0922 2132  [ ED6D1424E5B0C21A57B28DD8508D6843 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
17:53:44.0937 2132  SynTP - ok
17:53:45.0000 2132  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
17:53:45.0015 2132  SysMain - ok
17:53:45.0047 2132  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:53:45.0047 2132  TabletInputService - ok
17:53:45.0078 2132  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
17:53:45.0093 2132  TapiSrv - ok
17:53:45.0109 2132  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
17:53:45.0125 2132  TBS - ok
17:53:45.0181 2132  [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
17:53:45.0191 2132  Tcpip - ok
17:53:45.0251 2132  [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
17:53:45.0261 2132  TCPIP6 - ok
17:53:45.0301 2132  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
17:53:45.0301 2132  tcpipreg - ok
17:53:45.0331 2132  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
17:53:45.0341 2132  TDPIPE - ok
17:53:45.0371 2132  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
17:53:45.0371 2132  TDTCP - ok
17:53:45.0421 2132  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
17:53:45.0421 2132  tdx - ok
17:53:45.0481 2132  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
17:53:45.0481 2132  TermDD - ok
17:53:45.0541 2132  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
17:53:45.0551 2132  TermService - ok
17:53:45.0571 2132  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
17:53:45.0571 2132  Themes - ok
17:53:45.0601 2132  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
17:53:45.0601 2132  THREADORDER - ok
17:53:45.0631 2132  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
17:53:45.0631 2132  TrkWks - ok
17:53:45.0671 2132  [ EA43DE1743C1BA0D2D17B8DB90C91D88 ] truecrypt       C:\Windows\system32\drivers\truecrypt.sys
17:53:45.0681 2132  truecrypt - ok
17:53:45.0731 2132  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:53:45.0731 2132  TrustedInstaller - ok
17:53:45.0761 2132  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
17:53:45.0761 2132  tssecsrv - ok
17:53:45.0811 2132  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
17:53:45.0811 2132  TsUsbFlt - ok
17:53:45.0881 2132  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
17:53:45.0881 2132  tunnel - ok
17:53:45.0911 2132  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
17:53:45.0911 2132  uagp35 - ok
17:53:45.0931 2132  [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
17:53:45.0931 2132  UBHelper - ok
17:53:45.0971 2132  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
17:53:45.0971 2132  udfs - ok
17:53:46.0011 2132  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
17:53:46.0011 2132  UI0Detect - ok
17:53:46.0041 2132  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
17:53:46.0051 2132  uliagpkx - ok
17:53:46.0091 2132  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
17:53:46.0091 2132  umbus - ok
17:53:46.0121 2132  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
17:53:46.0121 2132  UmPass - ok
17:53:46.0221 2132  [ 41118D920B2B268C0ADC36421248CDCF ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
17:53:46.0241 2132  UNS - ok
17:53:46.0301 2132  [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
17:53:46.0301 2132  Updater Service - ok
17:53:46.0321 2132  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
17:53:46.0331 2132  upnphost - ok
17:53:46.0371 2132  [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
17:53:46.0371 2132  USBAAPL64 - ok
17:53:46.0411 2132  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
17:53:46.0411 2132  usbccgp - ok
17:53:46.0461 2132  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
17:53:46.0461 2132  usbcir - ok
17:53:46.0501 2132  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\drivers\usbehci.sys
17:53:46.0501 2132  usbehci - ok
17:53:46.0533 2132  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
17:53:46.0533 2132  usbhub - ok
17:53:46.0564 2132  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
17:53:46.0564 2132  usbohci - ok
17:53:46.0611 2132  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
17:53:46.0611 2132  usbprint - ok
17:53:46.0657 2132  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
17:53:46.0657 2132  usbscan - ok
17:53:46.0689 2132  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:53:46.0689 2132  USBSTOR - ok
17:53:46.0704 2132  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
17:53:46.0704 2132  usbuhci - ok
17:53:46.0767 2132  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
17:53:46.0767 2132  usbvideo - ok
17:53:46.0798 2132  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
17:53:46.0798 2132  UxSms - ok
17:53:46.0813 2132  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
17:53:46.0813 2132  VaultSvc - ok
17:53:46.0860 2132  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
17:53:46.0860 2132  vdrvroot - ok
17:53:46.0907 2132  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
17:53:46.0907 2132  vds - ok
17:53:46.0938 2132  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
17:53:46.0938 2132  vga - ok
17:53:46.0954 2132  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
17:53:46.0954 2132  VgaSave - ok
17:53:46.0985 2132  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
17:53:47.0001 2132  vhdmp - ok
17:53:47.0032 2132  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
17:53:47.0032 2132  viaide - ok
17:53:47.0063 2132  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
17:53:47.0063 2132  volmgr - ok
17:53:47.0110 2132  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
17:53:47.0110 2132  volmgrx - ok
17:53:47.0157 2132  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
17:53:47.0157 2132  volsnap - ok
17:53:47.0172 2132  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
17:53:47.0188 2132  vsmraid - ok
17:53:47.0250 2132  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
17:53:47.0266 2132  VSS - ok
17:53:47.0281 2132  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
17:53:47.0281 2132  vwifibus - ok
17:53:47.0297 2132  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
17:53:47.0297 2132  vwififlt - ok
17:53:47.0344 2132  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
17:53:47.0359 2132  vwifimp - ok
17:53:47.0406 2132  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
17:53:47.0406 2132  W32Time - ok
17:53:47.0422 2132  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
17:53:47.0422 2132  WacomPen - ok
17:53:47.0469 2132  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
17:53:47.0469 2132  WANARP - ok
17:53:47.0484 2132  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
17:53:47.0484 2132  Wanarpv6 - ok
17:53:47.0562 2132  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
17:53:47.0578 2132  WatAdminSvc - ok
17:53:47.0640 2132  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
17:53:47.0656 2132  wbengine - ok
17:53:47.0687 2132  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
17:53:47.0687 2132  WbioSrvc - ok
17:53:47.0734 2132  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
17:53:47.0734 2132  wcncsvc - ok
17:53:47.0765 2132  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:53:47.0765 2132  WcsPlugInService - ok
17:53:47.0796 2132  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
17:53:47.0796 2132  Wd - ok
17:53:47.0827 2132  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
17:53:47.0827 2132  Wdf01000 - ok
17:53:47.0843 2132  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
17:53:47.0843 2132  WdiServiceHost - ok
17:53:47.0843 2132  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
17:53:47.0843 2132  WdiSystemHost - ok
17:53:47.0874 2132  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
17:53:47.0890 2132  WebClient - ok
17:53:47.0905 2132  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
17:53:47.0905 2132  Wecsvc - ok
17:53:47.0937 2132  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
17:53:47.0937 2132  wercplsupport - ok
17:53:47.0968 2132  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
17:53:47.0968 2132  WerSvc - ok
17:53:47.0983 2132  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
17:53:47.0983 2132  WfpLwf - ok
17:53:48.0015 2132  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
17:53:48.0015 2132  WIMMount - ok
17:53:48.0061 2132  WinDefend - ok
17:53:48.0061 2132  WinHttpAutoProxySvc - ok
17:53:48.0124 2132  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
17:53:48.0139 2132  Winmgmt - ok
17:53:48.0217 2132  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
17:53:48.0233 2132  WinRM - ok
17:53:48.0311 2132  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
17:53:48.0311 2132  WinUsb - ok
17:53:48.0358 2132  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
17:53:48.0373 2132  Wlansvc - ok
17:53:48.0420 2132  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
17:53:48.0420 2132  WmiAcpi - ok
17:53:48.0436 2132  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
17:53:48.0451 2132  wmiApSrv - ok
17:53:48.0467 2132  WMPNetworkSvc - ok
17:53:48.0498 2132  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
17:53:48.0498 2132  WPCSvc - ok
17:53:48.0529 2132  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
17:53:48.0545 2132  WPDBusEnum - ok
17:53:48.0561 2132  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
17:53:48.0561 2132  ws2ifsl - ok
17:53:48.0623 2132  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\system32\wscsvc.dll
17:53:48.0623 2132  wscsvc - ok
17:53:48.0623 2132  WSearch - ok
17:53:48.0717 2132  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
17:53:48.0732 2132  wuauserv - ok
17:53:48.0779 2132  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
17:53:48.0779 2132  WudfPf - ok
17:53:48.0810 2132  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
17:53:48.0810 2132  WUDFRd - ok
17:53:48.0826 2132  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
17:53:48.0826 2132  wudfsvc - ok
17:53:48.0857 2132  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll
17:53:48.0857 2132  WwanSvc - ok
17:53:48.0888 2132  ================ Scan global ===============================
17:53:48.0904 2132  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
17:53:48.0951 2132  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
17:53:48.0966 2132  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
17:53:48.0997 2132  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
17:53:49.0013 2132  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
17:53:49.0013 2132  [Global] - ok
17:53:49.0013 2132  ================ Scan MBR ==================================
17:53:49.0029 2132  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:53:49.0356 2132  \Device\Harddisk0\DR0 - ok
17:53:49.0356 2132  ================ Scan VBR ==================================
17:53:49.0356 2132  [ 8FCE7247637F53C7202EEA7F6545784D ] \Device\Harddisk0\DR0\Partition1
17:53:49.0356 2132  \Device\Harddisk0\DR0\Partition1 - ok
17:53:49.0372 2132  [ 47FEC857124482010F23BE73946CAD43 ] \Device\Harddisk0\DR0\Partition2
17:53:49.0372 2132  \Device\Harddisk0\DR0\Partition2 - ok
17:53:49.0387 2132  [ 80C6F1C755CF560DBE75870473A419D8 ] \Device\Harddisk0\DR0\Partition3
17:53:49.0387 2132  \Device\Harddisk0\DR0\Partition3 - ok
17:53:49.0387 2132  ============================================================
17:53:49.0387 2132  Scan finished
17:53:49.0387 2132  ============================================================
17:53:49.0403 5036  Detected object count: 0
17:53:49.0403 5036  Actual detected object count: 0

ZA ist auch weg!

Hallo t'john: ich hab dir 'ne PM geschickt

t'john · 26.08.2012, 00:28

ESET Online Scanner

Vorbereitung

Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.
Vista/Win7-User: Bitte den Browser unbedingt als Administrator starten.

Los geht's

Lade und starte Eset Smartinstaller
Haken setzen bei YES, I accept the Terms of Use.
Klick auf Start.
Haken setzen bei Remove found threads und Scan archives.
Klick auf Start.
Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Finish drücken.
Browser schließen.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
Logfile hier posten.
Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Pechvogel44 · 26.08.2012, 07:44

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=stopped
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-08 07:20:46
# local_time=2012-08-08 09:20:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 23323511 23323511 0 0
# compatibility_mode=5893 16776638 100 94 23160111 96082883 0 0
# compatibility_mode=8192 67108863 100 0 284 284 0 0
# scanned=2781
# found=0
# cleaned=0
# scan_time=613
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-09 06:04:54
# local_time=2012-08-09 08:04:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 23357461 23357461 0 0
# compatibility_mode=5893 16776638 100 94 23194061 96116833 0 0
# compatibility_mode=8192 67108863 100 0 34234 34234 0 0
# scanned=194888
# found=9
# cleaned=9
# scan_time=5310
C:\Program Files (x86)\Yontoo Layers Runtime\YontooIEClient.dll	a variant of Win32/Adware.Yontoo.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll	a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\ProgramData\Tarma Installer\{DE3B7BF9-0770-4104-BC0B-B1CCCCE2F053}\_Setupx.dll	a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\AppData\Local\TempDIR\BetterInstaller.exe	a variant of Win32/Somoto.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\Downloads\SoftonicDownloader_fuer_netmeter.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_fairstars-cd-ripper.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_hydrogen.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_netmeter.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
E:\Downloads\SoftonicDownloader_fuer_ordrumbox.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-09 10:01:31
# local_time=2012-08-10 12:01:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 23415217 23415217 0 0
# compatibility_mode=5893 16776638 100 94 23251817 96174589 0 0
# compatibility_mode=8192 67108863 100 0 91990 91990 0 0
# scanned=194982
# found=0
# cleaned=0
# scan_time=4952
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=stopped
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-26 05:05:36
# local_time=2012-08-26 07:05:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 24828001 24828001 0 0
# compatibility_mode=5893 16776637 100 94 64870 97587373 0 0
# compatibility_mode=8192 67108863 100 0 1504774 1504774 0 0
# scanned=13
# found=0
# cleaned=0
# scan_time=12
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=4ec4a31112bfa44298fb6f792699a6dc
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-26 06:15:13
# local_time=2012-08-26 08:15:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 24828098 24828098 0 0
# compatibility_mode=5893 16776637 100 94 64967 97587470 0 0
# compatibility_mode=8192 67108863 100 0 1504871 1504871 0 0
# scanned=196947
# found=2
# cleaned=2
# scan_time=4093
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\plugin@yontoo.com\content\overlay.js	Win32/Adware.Yontoo application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\plugin@yontoo.com\content\overlay.js	Win32/Adware.Yontoo application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
ESETSmartInstaller@High as downloader log:
all ok

... ich bin dann erstmal weg (s. PM). Schon mal vielen Dank bis hierher!

t'john · 26.08.2012, 23:58

Alles klar.

Java aktualisieren

Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

Downloade dir bitte die neueste Java-Version von hier
Speichere die jxpiinstall.exe
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 6 ) herunter laden.
Wenn die Installation beendet wurde
Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
Klicke auf Dateien löschen....
Gehe sicher das überall ein Hacken gesetzt ist und klicke OK.
Klicke erneut OK.

Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html

Danach poste (kopieren und einfuegen) mir, was du hier angezeigt bekommst: PluginCheck

Pechvogel44 · 16.09.2012, 19:38

Sooo, bin wieder da...

Zitat:

PluginCheck

Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen.
Überprüft wird: Browser, Flash, Java und Adobe Reader Version.

Firefox 10.0.2 ist veraltet!

Flash 11,3,300,271 ist veraltet!
Aktualisieren Sie bitte auf die neueste Version!

Java (1,7,0,7) ist aktuell.

Adobe Reader 9,4,5,236 ist veraltet!
Aktualisieren Sie bitte auf die neueste Version: 10,1,3

Zurück

Tools:

StartSeite
PluginCheck
Secunia Online Scan

Weiterführendes:

Java Updaten und Einstellen

Secunia Personal Software Inspector (PSI)

Family:

TR/Agent

... ich mach mich schon mal an's aktualisieren.

Nun sieht's schon besser aus:

Zitat:

PluginCheck

Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen.
Überprüft wird: Browser, Flash, Java und Adobe Reader Version.

Firefox 15.0.1 ist aktuell

Flash (11,4,402,265) ist aktuell.

Java (1,7,0,7) ist aktuell.

Adobe Reader 10,1,4,38 ist aktuell.

Zurück

Tools:

StartSeite
PluginCheck
Secunia Online Scan

Weiterführendes:

Java Updaten und Einstellen

Secunia Personal Software Inspector (PSI)

Family:

TR/Agent

t'john · 18.09.2012, 02:09

Java deaktivieren

Aufgrund derezeitigen Sicherheitsluecke:

http://www.trojaner-board.de/122961-...ktivieren.html

Danach poste mir (kopieren und einfuegen), was du hier angezeigt bekommst: PluginCheck

Sehr gut!

damit bist Du sauber und entlassen!

adwCleaner entfernen

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Uninstall.
Bestätige mit Ja.

Tool-Bereinigung mit OTL

Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.

Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
Speichere es auf Deinem Desktop.
Doppelklick auf OTL.exe um das Programm auszuführen.
Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
Klicke auf den Button "Bereinigung"
OTL fragt eventuell nach einem Neustart.
Sollte es dies tun, so lasse dies bitte zu.

Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.

Zurücksetzen der Sicherheitszonen

Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen.
Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html

Systemwiederherstellungen leeren

Damit der Rechner nicht mit einer infizierten Systemwiederherstellung erneut infiziert werden kann, muessen wir diese leeren. Dazu schalten wir sie einmal aus und dann wieder ein:
Systemwiederherstellung deaktivieren Tutorial fuer Windows XP, Windows Vista, Windows 7
Danach wieder aktivieren.

Aufräumen mit CCleaner

Lasse mit CCleaner (Download) (Anleitung) Fehler in der

Registry beheben (mehrmals, solange bis keine Fehler mehr gefunden werden) und
temporäre Dateien löschen.

Lektuere zum abarbeiten:
http://www.trojaner-board.de/90880-d...tallation.html
http://www.trojaner-board.de/105213-...tellungen.html
PluginCheck
http://www.trojaner-board.de/96344-a...-rechners.html
Secunia Online Software Inspector
http://www.trojaner-board.de/71715-k...iendungen.html
http://www.trojaner-board.de/83238-a...sschalten.html
PC wird immer langsamer - was tun?

Pechvogel44 · 18.09.2012, 06:27

ist auch erledigt:

Zitat:

PluginCheck

Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen.
Überprüft wird: Browser, Flash, Java und Adobe Reader Version.

Firefox 15.0.1 ist aktuell

Flash (11,4,402,265) ist aktuell.

Java ist Installiert aber nicht aktiviert.

Adobe Reader 10,1,4,38 ist aktuell.

Zitat:

Zitat von t'john

Java deaktivieren
damit bist Du sauber und entlassen!

Puh! Super! Dann Dir an dieser Stelle 1000 Dank!

Die Deinstallaitionen mache ich später.

Schön das es Euch gibt!

Gruß Pechvogel44

Pechvogel44 · 22.09.2012, 13:26

Hi,

da bin ich doch nochmal.

CCleaner kann den Reg-Key nicht löschen:

HKEY_CLASSES_ROOT\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}

Manuel geht's auch nicht.

Ist das schlimm? Was kann ich tun?

t'john · 22.09.2012, 20:08

Das ist OK, ein geschuetzter Schluessel von Avira

Pechvogel44 · 22.09.2012, 21:46

Zitat:

Zitat von t'john

Das ist OK, ein geschuetzter Schluessel von Avira

sowas....

Dann schon wieder:

22.09.2012, 20:08	#27
t'john /// Helfer-Team	Live Security Platinum - Malwarebites löscht schadhafte libs nicht Das ist OK, ein geschuetzter Schluessel von Avira __________________ Mfg, t'john Das TB unterstützen

Live Security Platinum - Malwarebites löscht schadhafte libs nicht

Plagegeister aller Art und deren Bekämpfung: Live Security Platinum - Malwarebites löscht schadhafte libs nicht