mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot)

magnus65 · 25.10.2012, 08:40

Hall Forum,
ich stehe vor einem Problem, seit ein paar Tagen läuft das Sicherheitscenter unter Win7 64 Bit nicht mehr, Startversucher scheitern mit der Meldung "Zugriff verweigert"

Hab daraufhin hier den Tipp bezüglich MBAM gefunden und einen Suchlauf gestartet. Die Logdate hänge ich an :
Wie werde ich das Ding wieder los und ist das mein einziges Problem ? Den Technisat Kram habe ich vor einigen Jahren installiert.

Schonmal im Voraus Danke für Tipps und Hilfe.

gruß

Magnus

cosinus · 25.10.2012, 13:23

Im DVBViewer? Sieht sehr schwer nach Fehlalarm aus

magnus65 · 25.10.2012, 14:11

Fehlalarm wäre natürlich das Beste.
Aber warum streikt der Sicherheitscenter Dienst seit ein paar Tagen ?

cosinus · 25.10.2012, 14:58

Hast du noch weitere Logs von Malwarebytes? Siehe http://www.trojaner-board.de/125889-...tml#post941520

magnus65 · 25.10.2012, 15:58

Dieses hier von gestern ist wieder das gleiche Teil und wurde angeblich in Quarantäne gestellt, aber bei dem späteren Lauf wieder gefunden.

Code:

ATTFilter

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Datenbank Version: v2012.10.24.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
admin :: GOLLUM [Administrator]

24.10.2012 20:48:01
mbam-log-2012-10-24 (20-48-01).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 906267
Laufzeit: 2 Stunde(n), 47 Minute(n), 49 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Code:

ATTFilter

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Datenbank Version: v2012.10.23.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
admin :: GOLLUM [Administrator]

23.10.2012 13:57:50
mbam-log-2012-10-23 (13-57-50).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 727497
Laufzeit: 2 Stunde(n), 3 Minute(n), 44 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Vor ein paar Tagen hatte ich im Firefox plätzlich ein Popup nach dem Motto "Wollen sie die Seite verlassen Ja / nein " .
Normalerweise beende ich dann vorsichtshalber den Prozess im Prozessmanager, diesmal habe ich dummerweise auf das Schliessen kreutz oben rechts im Fenster geclickt.

Ich hab noch ältere Mailware logs, da wurde aber das technisat Teil nicht bemängelt.

Hab grad mal das Eventlog durchgeflöht, der Dienst läuft seit dem 17.10. nicht mehr.

cosinus · 25.10.2012, 19:19

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

magnus65 · 25.10.2012, 20:17

Hallo,
anbei die gewünschte Datei.

Code:

ATTFilter

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-25 20:48:33
-----------------------------
20:48:33.593    OS Version: Windows x64 6.1.7601 Service Pack 1
20:48:33.593    Number of processors: 4 586 0x1E05
20:48:33.593    ComputerName: GOLLUM  UserName: admin
20:48:35.277    Initialize success
20:51:02.557    AVAST engine defs: 12102501
20:51:10.591    Disk 0  \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-6
20:51:10.591    Disk 0 Vendor: WDC_WD20EARX-00PASB0 51.0AB51 Size: 1907729MB BusType: 3
20:51:10.591    Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-4
20:51:10.591    Disk 1 Vendor: SAMSUNG_HE103UJ 1AA01118 Size: 953869MB BusType: 3
20:51:10.607    Disk 1 MBR read successfully
20:51:10.607    Disk 1 MBR scan
20:51:10.622    Disk 1 Windows 7 default MBR code
20:51:10.622    Disk 1 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
20:51:10.638    Disk 1 Partition 2 00     07    HPFS/NTFS NTFS       953767 MB offset 206848
20:51:10.653    Disk 1 scanning C:\Windows\system32\drivers
20:51:18.750    Service scanning
20:51:33.601    Modules scanning
20:51:33.601    Disk 1 trace - called modules:
20:51:33.617    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys 
20:51:33.617    1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa8007af1060]
20:51:33.632    3 CLASSPNP.SYS[fffff8800194343f] -> nt!IofCallDriver -> [0xfffffa80077a7790]
20:51:33.632    5 ACPI.sys[fffff88000fa67a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP3T0L0-4[0xfffffa8007809060]
20:51:34.943    AVAST engine scan C:\Windows
20:51:38.406    AVAST engine scan C:\Windows\system32
20:53:50.587    AVAST engine scan C:\Windows\system32\drivers
20:54:12.271    AVAST engine scan C:\Users\admin
20:54:50.836    AVAST engine scan C:\ProgramData
20:58:32.622    Scan finished successfully
21:13:38.453    Disk 1 MBR has been saved successfully to "C:\Users\admin\Desktop\MBR.dat"
21:13:38.469    The log file has been saved successfully to "C:\Users\admin\Desktop\aswMBR.txt"
21:14:58.919    Disk 1 MBR has been saved successfully to "C:\Users\admin\Desktop\MBR.dat"
21:14:58.935    The log file has been saved successfully to "C:\Users\admin\Desktop\aswMBR.txt"
21:15:22.035    Disk 1 MBR has been saved successfully to "C:\Temp\MBR.dat"
21:15:22.035    The log file has been saved successfully to "C:\Temp\aswMBR.txt"

Vielen Dank übrigens bisher für Deine Mühen

cosinus · 25.10.2012, 22:02

Ist auch unauffällig, tiefere Scans sind imho nicht nötig.
Ich war mir schon am Anfang sicher, dass es hier ein Fehlalarm ist.

magnus65 · 25.10.2012, 23:22

Ok, eigentlich eine gute Nachricht, stellt sich noch die Frage, wie man das Sicherheitscenter wieder zum laufen kriegt.

Wenn da noch jemand eine Idee hat . . . . .

Cosinus, mir bleibt nur, mich für die Superunterstützung und Deine Mühe zu bedanken. Ist ein klasse Forum hier.

Gruß
Magnus

cosinus · 26.10.2012, 12:51

Du hast die COmputerverwaltung als Admin ausgeführt?
Leg dir mal eine Verknüpfug zu services.msc auf dem Desktop, diese per Rechtsklick => als Administrator ausführen
Versuch dann den besagten Dienst nochmal zu starten
Klappt das immer noch nicht, schaust du mal nach, ob die abhängigen Dienste zum Sicherheitscenter gestartet sind.

magnus65 · 26.10.2012, 20:36

Danke,
geht leider weder als Admin angemeldet, noch wenn Services.msc als Admin gestartet wird.

Was mir aufgefallen ist :

Die Anmeldeinformationen waren ursprünglich leer. Slao dieses Konto, aber dann war kein Kontoname hinterlegt.

Hab jetzt wieder Lokaler Service mit dem Admin Kenwort eingegeben , bin mir aber nicht sicher, ob das ADmin kennwort da rein muss oder was anderes.
Mit leerem Kennwort gleicher Fehler 5 Zugriff verweigert.
DCOM, RPC und RPC Endpunktzuordnung laufen.

cosinus · 27.10.2012, 14:24

Hm...

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

magnus65 · 27.10.2012, 20:11

Danke für die Unterstützung, anbei das log :

Code:

ATTFilter

21:08:28.0030 2552  TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
21:08:28.0046 2552  ============================================================
21:08:28.0046 2552  Current date / time: 2012/10/27 21:08:28.0046
21:08:28.0046 2552  SystemInfo:
21:08:28.0046 2552  
21:08:28.0046 2552  OS Version: 6.1.7601 ServicePack: 1.0
21:08:28.0046 2552  Product type: Workstation
21:08:28.0046 2552  ComputerName: GOLLUM
21:08:28.0046 2552  UserName: admin
21:08:28.0046 2552  Windows directory: C:\Windows
21:08:28.0046 2552  System windows directory: C:\Windows
21:08:28.0046 2552  Running under WOW64
21:08:28.0046 2552  Processor architecture: Intel x64
21:08:28.0046 2552  Number of processors: 4
21:08:28.0046 2552  Page size: 0x1000
21:08:28.0046 2552  Boot type: Normal boot
21:08:28.0046 2552  ============================================================
21:08:29.0013 2552  Drive \Device\Harddisk0\DR0 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:08:29.0013 2552  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:08:29.0044 2552  ============================================================
21:08:29.0044 2552  \Device\Harddisk0\DR0:
21:08:29.0044 2552  MBR partitions:
21:08:29.0044 2552  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07800
21:08:29.0044 2552  \Device\Harddisk1\DR1:
21:08:29.0044 2552  MBR partitions:
21:08:29.0044 2552  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:08:29.0044 2552  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
21:08:29.0044 2552  ============================================================
21:08:29.0091 2552  C: <-> \Device\Harddisk1\DR1\Partition2
21:08:29.0106 2552  D: <-> \Device\Harddisk0\DR0\Partition1
21:08:29.0106 2552  ============================================================
21:08:29.0106 2552  Initialize success
21:08:29.0106 2552  ============================================================
21:08:42.0460 0792  ============================================================
21:08:42.0460 0792  Scan started
21:08:42.0460 0792  Mode: Manual; SigCheck; TDLFS; 
21:08:42.0460 0792  ============================================================
21:08:43.0895 0792  ================ Scan system memory ========================
21:08:43.0895 0792  System memory - ok
21:08:43.0895 0792  ================ Scan services =============================
21:08:44.0020 0792  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
21:08:44.0160 0792  1394ohci - ok
21:08:44.0192 0792  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:08:44.0207 0792  ACPI - ok
21:08:44.0238 0792  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
21:08:44.0285 0792  AcpiPmi - ok
21:08:44.0348 0792  [ D44BCAF639E4E45307C2BC80715273D5 ] adfs            C:\Windows\system32\drivers\adfs.sys
21:08:44.0394 0792  adfs - ok
21:08:44.0504 0792  [ 9444A3530C2E88B7ED96A566FF9CCC13 ] Adobe Version Cue CS4 C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
21:08:44.0519 0792  Adobe Version Cue CS4 - ok
21:08:44.0535 0792  [ 3FD8DC2C9735C2AA70155102CFB93EDA ] AdobeActiveFileMonitor7.0 C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
21:08:44.0550 0792  AdobeActiveFileMonitor7.0 - ok
21:08:44.0675 0792  [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:08:44.0675 0792  AdobeFlashPlayerUpdateSvc - ok
21:08:44.0722 0792  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
21:08:44.0738 0792  adp94xx - ok
21:08:44.0753 0792  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
21:08:44.0769 0792  adpahci - ok
21:08:44.0769 0792  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
21:08:44.0784 0792  adpu320 - ok
21:08:44.0816 0792  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
21:08:44.0925 0792  AeLookupSvc - ok
21:08:44.0972 0792  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
21:08:45.0018 0792  AFD - ok
21:08:45.0050 0792  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
21:08:45.0065 0792  agp440 - ok
21:08:45.0096 0792  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
21:08:45.0128 0792  ALG - ok
21:08:45.0143 0792  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
21:08:45.0143 0792  aliide - ok
21:08:45.0190 0792  [ B4143CB1DD16AE73C6177C72F33450A6 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
21:08:45.0237 0792  AMD External Events Utility - ok
21:08:45.0252 0792  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
21:08:45.0268 0792  amdide - ok
21:08:45.0268 0792  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
21:08:45.0315 0792  AmdK8 - ok
21:08:45.0424 0792  [ D1D06810BF7E21F5763EB06CB7E7262B ] amdkmdag        C:\Windows\system32\DRIVERS\atipmdag.sys
21:08:45.0518 0792  amdkmdag - ok
21:08:45.0549 0792  [ 6BA71D6616B56816E57394D77DD1BB6F ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
21:08:45.0564 0792  amdkmdap - ok
21:08:45.0564 0792  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:08:45.0596 0792  AmdPPM - ok
21:08:45.0627 0792  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
21:08:45.0627 0792  amdsata - ok
21:08:45.0658 0792  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:08:45.0674 0792  amdsbs - ok
21:08:45.0689 0792  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
21:08:45.0689 0792  amdxata - ok
21:08:45.0783 0792  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:08:45.0798 0792  AntiVirSchedulerService - ok
21:08:45.0845 0792  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:08:45.0845 0792  AntiVirService - ok
21:08:45.0892 0792  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
21:08:46.0001 0792  AppID - ok
21:08:46.0017 0792  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:08:46.0064 0792  AppIDSvc - ok
21:08:46.0095 0792  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll
21:08:46.0126 0792  Appinfo - ok
21:08:46.0204 0792  [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:08:46.0220 0792  Apple Mobile Device - ok
21:08:46.0235 0792  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll
21:08:46.0282 0792  AppMgmt - ok
21:08:46.0313 0792  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
21:08:46.0329 0792  arc - ok
21:08:46.0329 0792  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:08:46.0344 0792  arcsas - ok
21:08:46.0454 0792  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:08:46.0485 0792  aspnet_state - ok
21:08:46.0500 0792  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:08:46.0547 0792  AsyncMac - ok
21:08:46.0578 0792  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
21:08:46.0578 0792  atapi - ok
21:08:46.0610 0792  [ 506934DF94E3197F4A1BBE8FBEAB0CCD ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
21:08:46.0641 0792  AtiHdmiService - ok
21:08:46.0734 0792  [ D1D06810BF7E21F5763EB06CB7E7262B ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
21:08:46.0828 0792  atikmdag - ok
21:08:46.0875 0792  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:08:46.0922 0792  AudioEndpointBuilder - ok
21:08:46.0922 0792  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
21:08:46.0953 0792  AudioSrv - ok
21:08:47.0140 0792  [ 3CE07FB20B84734CCE81CF10D1D7F803 ] AVGIDSAgent     C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
21:08:47.0265 0792  AVGIDSAgent - ok
21:08:47.0312 0792  [ E6671E90D38C88764412E07C9D9B3D63 ] AVGIDSDriver    C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
21:08:47.0343 0792  AVGIDSDriver - ok
21:08:47.0374 0792  [ 1553B388E0F0462C25AD8F30C3C29E83 ] AVGIDSEH        C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
21:08:47.0405 0792  AVGIDSEH - ok
21:08:47.0421 0792  [ DCA426A66739E75F51A72160DFB945AD ] AVGIDSFilter    C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
21:08:47.0452 0792  AVGIDSFilter - ok
21:08:47.0483 0792  [ FF7383388A7D2283DAE5831ABC2B0720 ] Avgldx64        C:\Windows\system32\DRIVERS\avgldx64.sys
21:08:47.0514 0792  Avgldx64 - ok
21:08:47.0530 0792  [ 997D002827D3E3DCBBB25BF46DB161AB ] Avgmfx64        C:\Windows\system32\DRIVERS\avgmfx64.sys
21:08:47.0561 0792  Avgmfx64 - ok
21:08:47.0577 0792  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
21:08:47.0608 0792  avgntflt - ok
21:08:47.0624 0792  [ BCCFE3374C887075CDE2AC8FDB1CB2F8 ] Avgrkx64        C:\Windows\system32\DRIVERS\avgrkx64.sys
21:08:47.0639 0792  Avgrkx64 - ok
21:08:47.0655 0792  [ 0D49ADCEBE243B79366EA523B647519A ] Avgtdia         C:\Windows\system32\DRIVERS\avgtdia.sys
21:08:47.0686 0792  Avgtdia - ok
21:08:47.0702 0792  [ FC2BC51120A945F7C70376495E4E7737 ] avgwd           C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
21:08:47.0733 0792  avgwd - ok
21:08:47.0764 0792  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
21:08:47.0780 0792  avipbb - ok
21:08:47.0795 0792  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
21:08:47.0826 0792  avkmgr - ok
21:08:47.0858 0792  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:08:47.0920 0792  AxInstSV - ok
21:08:47.0951 0792  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
21:08:47.0998 0792  b06bdrv - ok
21:08:48.0014 0792  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
21:08:48.0045 0792  b57nd60a - ok
21:08:48.0076 0792  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:08:48.0107 0792  BDESVC - ok
21:08:48.0123 0792  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:08:48.0154 0792  Beep - ok
21:08:48.0201 0792  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
21:08:48.0263 0792  BFE - ok
21:08:48.0279 0792  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
21:08:48.0372 0792  BITS - ok
21:08:48.0388 0792  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:08:48.0404 0792  blbdrive - ok
21:08:48.0482 0792  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:08:48.0497 0792  Bonjour Service - ok
21:08:48.0528 0792  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:08:48.0560 0792  bowser - ok
21:08:48.0575 0792  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:08:48.0622 0792  BrFiltLo - ok
21:08:48.0622 0792  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:08:48.0638 0792  BrFiltUp - ok
21:08:48.0669 0792  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
21:08:48.0700 0792  Browser - ok
21:08:48.0731 0792  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
21:08:48.0762 0792  Brserid - ok
21:08:48.0762 0792  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:08:48.0794 0792  BrSerWdm - ok
21:08:48.0809 0792  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:08:48.0825 0792  BrUsbMdm - ok
21:08:48.0840 0792  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:08:48.0856 0792  BrUsbSer - ok
21:08:48.0872 0792  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:08:48.0887 0792  BTHMODEM - ok
21:08:48.0918 0792  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
21:08:48.0950 0792  bthserv - ok
21:08:48.0965 0792  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:08:48.0996 0792  cdfs - ok
21:08:49.0028 0792  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys
21:08:49.0059 0792  cdrom - ok
21:08:49.0090 0792  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
21:08:49.0121 0792  CertPropSvc - ok
21:08:49.0137 0792  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:08:49.0168 0792  circlass - ok
21:08:49.0199 0792  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
21:08:49.0215 0792  CLFS - ok
21:08:49.0262 0792  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:08:49.0277 0792  clr_optimization_v2.0.50727_32 - ok
21:08:49.0293 0792  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:08:49.0293 0792  clr_optimization_v2.0.50727_64 - ok
21:08:49.0371 0792  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:08:49.0449 0792  clr_optimization_v4.0.30319_32 - ok
21:08:49.0449 0792  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:08:49.0480 0792  clr_optimization_v4.0.30319_64 - ok
21:08:49.0496 0792  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:08:49.0527 0792  CmBatt - ok
21:08:49.0542 0792  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
21:08:49.0558 0792  cmdide - ok
21:08:49.0589 0792  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
21:08:49.0620 0792  CNG - ok
21:08:49.0636 0792  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:08:49.0652 0792  Compbatt - ok
21:08:49.0683 0792  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
21:08:49.0698 0792  CompositeBus - ok
21:08:49.0714 0792  COMSysApp - ok
21:08:49.0730 0792  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
21:08:49.0745 0792  crcdisk - ok
21:08:49.0776 0792  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:08:49.0823 0792  CryptSvc - ok
21:08:49.0854 0792  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys
21:08:49.0917 0792  CSC - ok
21:08:49.0932 0792  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
21:08:49.0964 0792  CscService - ok
21:08:49.0995 0792  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:08:50.0042 0792  DcomLaunch - ok
21:08:50.0057 0792  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
21:08:50.0104 0792  defragsvc - ok
21:08:50.0135 0792  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
21:08:50.0166 0792  DfsC - ok
21:08:50.0198 0792  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:08:50.0244 0792  Dhcp - ok
21:08:50.0260 0792  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
21:08:50.0291 0792  discache - ok
21:08:50.0307 0792  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:08:50.0322 0792  Disk - ok
21:08:50.0338 0792  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:08:50.0400 0792  Dnscache - ok
21:08:50.0416 0792  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
21:08:50.0447 0792  dot3svc - ok
21:08:50.0478 0792  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
21:08:50.0510 0792  DPS - ok
21:08:50.0541 0792  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
21:08:50.0572 0792  drmkaud - ok
21:08:50.0603 0792  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
21:08:50.0619 0792  DXGKrnl - ok
21:08:50.0634 0792  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
21:08:50.0666 0792  EapHost - ok
21:08:50.0712 0792  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
21:08:50.0775 0792  ebdrv - ok
21:08:50.0790 0792  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
21:08:50.0853 0792  EFS - ok
21:08:50.0884 0792  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
21:08:50.0915 0792  ehRecvr - ok
21:08:50.0931 0792  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
21:08:50.0962 0792  ehSched - ok
21:08:50.0993 0792  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
21:08:51.0009 0792  elxstor - ok
21:08:51.0024 0792  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
21:08:51.0024 0792  ErrDev - ok
21:08:51.0056 0792  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
21:08:51.0087 0792  EventSystem - ok
21:08:51.0118 0792  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
21:08:51.0149 0792  exfat - ok
21:08:51.0165 0792  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
21:08:51.0212 0792  fastfat - ok
21:08:51.0258 0792  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
21:08:51.0305 0792  Fax - ok
21:08:51.0305 0792  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
21:08:51.0321 0792  fdc - ok
21:08:51.0336 0792  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
21:08:51.0368 0792  fdPHost - ok
21:08:51.0383 0792  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
21:08:51.0430 0792  FDResPub - ok
21:08:51.0446 0792  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:08:51.0446 0792  FileInfo - ok
21:08:51.0446 0792  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
21:08:51.0477 0792  Filetrace - ok
21:08:51.0524 0792  [ 1F63900E2EB00101B9ACA2B7A870704E ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
21:08:51.0539 0792  FLEXnet Licensing Service - ok
21:08:51.0586 0792  [ 1C3FB052A0BB72EDAED90785C34D6EED ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
21:08:51.0617 0792  FLEXnet Licensing Service 64 - ok
21:08:51.0617 0792  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:08:51.0633 0792  flpydisk - ok
21:08:51.0664 0792  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:08:51.0680 0792  FltMgr - ok
21:08:51.0726 0792  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache       C:\Windows\system32\FntCache.dll
21:08:51.0758 0792  FontCache - ok
21:08:51.0789 0792  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:08:51.0804 0792  FontCache3.0.0.0 - ok
21:08:51.0804 0792  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
21:08:51.0820 0792  FsDepends - ok
21:08:51.0836 0792  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:08:51.0851 0792  Fs_Rec - ok
21:08:51.0867 0792  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:08:51.0882 0792  fvevol - ok
21:08:51.0898 0792  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:08:51.0898 0792  gagp30kx - ok
21:08:51.0929 0792  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:08:51.0945 0792  GEARAspiWDM - ok
21:08:51.0976 0792  [ B93252C4C5A3733ECD5522CAF88DE02D ] GigasetGenericUSB_x64 C:\Windows\system32\DRIVERS\GigasetGenericUSB_x64.sys
21:08:52.0023 0792  GigasetGenericUSB_x64 - ok
21:08:52.0070 0792  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
21:08:52.0101 0792  gpsvc - ok
21:08:52.0116 0792  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:08:52.0163 0792  hcw85cir - ok
21:08:52.0210 0792  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:08:52.0241 0792  HdAudAddService - ok
21:08:52.0272 0792  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
21:08:52.0288 0792  HDAudBus - ok
21:08:52.0304 0792  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
21:08:52.0304 0792  HidBatt - ok
21:08:52.0319 0792  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:08:52.0366 0792  HidBth - ok
21:08:52.0382 0792  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
21:08:52.0428 0792  HidIr - ok
21:08:52.0444 0792  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
21:08:52.0491 0792  hidserv - ok
21:08:52.0506 0792  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:08:52.0522 0792  HidUsb - ok
21:08:52.0538 0792  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:08:52.0569 0792  hkmsvc - ok
21:08:52.0600 0792  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:08:52.0647 0792  HomeGroupListener - ok
21:08:52.0662 0792  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:08:52.0694 0792  HomeGroupProvider - ok
21:08:52.0709 0792  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:08:52.0709 0792  HpSAMD - ok
21:08:52.0740 0792  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:08:52.0772 0792  HTTP - ok
21:08:52.0787 0792  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:08:52.0803 0792  hwpolicy - ok
21:08:52.0818 0792  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
21:08:52.0818 0792  i8042prt - ok
21:08:52.0850 0792  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
21:08:52.0865 0792  iaStorV - ok
21:08:52.0928 0792  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
21:08:52.0943 0792  IDriverT ( UnsignedFile.Multi.Generic ) - warning
21:08:52.0943 0792  IDriverT - detected UnsignedFile.Multi.Generic (1)
21:08:52.0974 0792  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:08:52.0990 0792  idsvc - ok
21:08:53.0021 0792  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
21:08:53.0021 0792  iirsp - ok
21:08:53.0052 0792  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
21:08:53.0084 0792  IKEEXT - ok
21:08:53.0115 0792  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
21:08:53.0115 0792  intelide - ok
21:08:53.0130 0792  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:08:53.0162 0792  intelppm - ok
21:08:53.0193 0792  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
21:08:53.0224 0792  IPBusEnum - ok
21:08:53.0240 0792  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:08:53.0255 0792  IpFilterDriver - ok
21:08:53.0286 0792  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:08:53.0333 0792  iphlpsvc - ok
21:08:53.0349 0792  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
21:08:53.0364 0792  IPMIDRV - ok
21:08:53.0380 0792  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
21:08:53.0411 0792  IPNAT - ok
21:08:53.0458 0792  [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
21:08:53.0489 0792  iPod Service - ok
21:08:53.0505 0792  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:08:53.0567 0792  IRENUM - ok
21:08:53.0567 0792  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:08:53.0583 0792  isapnp - ok
21:08:53.0598 0792  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
21:08:53.0614 0792  iScsiPrt - ok
21:08:53.0630 0792  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:08:53.0645 0792  kbdclass - ok
21:08:53.0661 0792  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
21:08:53.0692 0792  kbdhid - ok
21:08:53.0708 0792  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
21:08:53.0723 0792  KeyIso - ok
21:08:53.0754 0792  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:08:53.0754 0792  KSecDD - ok
21:08:53.0770 0792  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
21:08:53.0786 0792  KSecPkg - ok
21:08:53.0801 0792  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
21:08:53.0832 0792  ksthunk - ok
21:08:53.0848 0792  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
21:08:53.0895 0792  KtmRm - ok
21:08:53.0942 0792  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:08:53.0973 0792  LanmanServer - ok
21:08:54.0004 0792  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:08:54.0035 0792  LanmanWorkstation - ok
21:08:54.0066 0792  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:08:54.0098 0792  lltdio - ok
21:08:54.0129 0792  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
21:08:54.0160 0792  lltdsvc - ok
21:08:54.0176 0792  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
21:08:54.0207 0792  lmhosts - ok
21:08:54.0223 0792  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:08:54.0223 0792  LSI_FC - ok
21:08:54.0238 0792  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
21:08:54.0254 0792  LSI_SAS - ok
21:08:54.0269 0792  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:08:54.0269 0792  LSI_SAS2 - ok
21:08:54.0269 0792  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:08:54.0285 0792  LSI_SCSI - ok
21:08:54.0301 0792  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
21:08:54.0332 0792  luafv - ok
21:08:54.0347 0792  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
21:08:54.0363 0792  Mcx2Svc - ok
21:08:54.0379 0792  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
21:08:54.0379 0792  megasas - ok
21:08:54.0410 0792  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:08:54.0410 0792  MegaSR - ok
21:08:54.0457 0792  [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
21:08:54.0457 0792  Microsoft Office Groove Audit Service - ok
21:08:54.0472 0792  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
21:08:54.0503 0792  MMCSS - ok
21:08:54.0519 0792  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
21:08:54.0535 0792  Modem - ok
21:08:54.0550 0792  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
21:08:54.0566 0792  monitor - ok
21:08:54.0597 0792  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:08:54.0597 0792  mouclass - ok
21:08:54.0628 0792  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:08:54.0644 0792  mouhid - ok
21:08:54.0691 0792  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:08:54.0691 0792  mountmgr - ok
21:08:54.0706 0792  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
21:08:54.0722 0792  mpio - ok
21:08:54.0722 0792  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:08:54.0769 0792  mpsdrv - ok
21:08:54.0800 0792  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:08:54.0847 0792  MpsSvc - ok
21:08:54.0862 0792  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:08:54.0893 0792  MRxDAV - ok
21:08:54.0909 0792  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:08:54.0956 0792  mrxsmb - ok
21:08:54.0987 0792  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:08:55.0003 0792  mrxsmb10 - ok
21:08:55.0034 0792  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:08:55.0049 0792  mrxsmb20 - ok
21:08:55.0081 0792  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
21:08:55.0096 0792  msahci - ok
21:08:55.0112 0792  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
21:08:55.0127 0792  msdsm - ok
21:08:55.0143 0792  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
21:08:55.0159 0792  MSDTC - ok
21:08:55.0174 0792  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:08:55.0190 0792  Msfs - ok
21:08:55.0221 0792  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
21:08:55.0237 0792  mshidkmdf - ok
21:08:55.0252 0792  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:08:55.0252 0792  msisadrv - ok
21:08:55.0283 0792  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
21:08:55.0315 0792  MSiSCSI - ok
21:08:55.0315 0792  msiserver - ok
21:08:55.0346 0792  MSI_MSIBIOS_010507 - ok
21:08:55.0377 0792  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
21:08:55.0393 0792  MSKSSRV - ok
21:08:55.0408 0792  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:08:55.0439 0792  MSPCLOCK - ok
21:08:55.0455 0792  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
21:08:55.0502 0792  MSPQM - ok
21:08:55.0533 0792  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
21:08:55.0549 0792  MsRPC - ok
21:08:55.0549 0792  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
21:08:55.0564 0792  mssmbios - ok
21:08:55.0580 0792  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
21:08:55.0595 0792  MSTEE - ok
21:08:55.0611 0792  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:08:55.0642 0792  MTConfig - ok
21:08:55.0642 0792  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
21:08:55.0658 0792  Mup - ok
21:08:55.0689 0792  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
21:08:55.0720 0792  napagent - ok
21:08:55.0751 0792  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
21:08:55.0783 0792  NativeWifiP - ok
21:08:55.0829 0792  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:08:55.0845 0792  NDIS - ok
21:08:55.0861 0792  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
21:08:55.0892 0792  NdisCap - ok
21:08:55.0907 0792  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:08:55.0954 0792  NdisTapi - ok
21:08:55.0970 0792  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
21:08:56.0001 0792  Ndisuio - ok
21:08:56.0032 0792  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
21:08:56.0063 0792  NdisWan - ok
21:08:56.0095 0792  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
21:08:56.0126 0792  NDProxy - ok
21:08:56.0157 0792  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
21:08:56.0204 0792  NetBIOS - ok
21:08:56.0219 0792  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
21:08:56.0251 0792  NetBT - ok
21:08:56.0251 0792  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
21:08:56.0266 0792  Netlogon - ok
21:08:56.0282 0792  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
21:08:56.0329 0792  Netman - ok
21:08:56.0375 0792  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:56.0407 0792  NetMsmqActivator - ok
21:08:56.0407 0792  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:56.0407 0792  NetPipeActivator - ok
21:08:56.0438 0792  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
21:08:56.0469 0792  netprofm - ok
21:08:56.0485 0792  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:56.0485 0792  NetTcpActivator - ok
21:08:56.0485 0792  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:56.0500 0792  NetTcpPortSharing - ok
21:08:56.0516 0792  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
21:08:56.0531 0792  nfrd960 - ok
21:08:56.0578 0792  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:08:56.0609 0792  NlaSvc - ok
21:08:56.0625 0792  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:08:56.0656 0792  Npfs - ok
21:08:56.0672 0792  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
21:08:56.0687 0792  nsi - ok
21:08:56.0703 0792  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:08:56.0734 0792  nsiproxy - ok
21:08:56.0765 0792  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:08:56.0797 0792  Ntfs - ok
21:08:56.0875 0792  [ B0BAAC4D6CBAC384A633C71858B35A2E ] NTIOLib_1_0_0   C:\Program Files (x86)\MSI\DirectOC\NTIOLib_X64.sys
21:08:56.0906 0792  NTIOLib_1_0_0 - ok
21:08:56.0968 0792  [ C3FEA895FE95EA7A57D9F4D7ABED5E71 ] NTIOLib_1_0_1   C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys
21:08:56.0984 0792  NTIOLib_1_0_1 - ok
21:08:56.0999 0792  NTIOLib_1_0_4 - ok
21:08:57.0015 0792  [ C02F70960FA934B8DEFA16A03D7F6556 ] NTIOLib_1_0_6   C:\Program Files (x86)\Setup Files\Ms7583v1B0\NTIOLib_X64.sys
21:08:57.0062 0792  NTIOLib_1_0_6 ( UnsignedFile.Multi.Generic ) - warning
21:08:57.0062 0792  NTIOLib_1_0_6 - detected UnsignedFile.Multi.Generic (1)
21:08:57.0077 0792  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
21:08:57.0109 0792  Null - ok
21:08:57.0140 0792  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:08:57.0155 0792  nvraid - ok
21:08:57.0171 0792  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:08:57.0187 0792  nvstor - ok
21:08:57.0218 0792  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:08:57.0233 0792  nv_agp - ok
21:08:57.0296 0792  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:08:57.0311 0792  odserv - ok
21:08:57.0343 0792  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
21:08:57.0358 0792  ohci1394 - ok
21:08:57.0389 0792  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:08:57.0405 0792  ose - ok
21:08:57.0421 0792  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:08:57.0467 0792  p2pimsvc - ok
21:08:57.0483 0792  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
21:08:57.0499 0792  p2psvc - ok
21:08:57.0514 0792  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
21:08:57.0514 0792  Parport - ok
21:08:57.0545 0792  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
21:08:57.0561 0792  partmgr - ok
21:08:57.0561 0792  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:08:57.0592 0792  PcaSvc - ok
21:08:57.0592 0792  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
21:08:57.0608 0792  pci - ok
21:08:57.0608 0792  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
21:08:57.0623 0792  pciide - ok
21:08:57.0639 0792  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:08:57.0655 0792  pcmcia - ok
21:08:57.0670 0792  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
21:08:57.0670 0792  pcw - ok
21:08:57.0701 0792  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:08:57.0748 0792  PEAUTH - ok
21:08:57.0779 0792  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
21:08:57.0842 0792  PeerDistSvc - ok
21:08:57.0904 0792  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
21:08:57.0935 0792  PerfHost - ok
21:08:57.0982 0792  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
21:08:58.0029 0792  pla - ok
21:08:58.0060 0792  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:08:58.0107 0792  PlugPlay - ok
21:08:58.0123 0792  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
21:08:58.0138 0792  PNRPAutoReg - ok
21:08:58.0154 0792  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
21:08:58.0169 0792  PNRPsvc - ok
21:08:58.0216 0792  [ 9CC7182504133119BD39ED825F72F4E2 ] Polar Daemon    C:\Program Files (x86)\Polar\Daemon\polard.exe
21:08:58.0232 0792  Polar Daemon ( UnsignedFile.Multi.Generic ) - warning
21:08:58.0232 0792  Polar Daemon - detected UnsignedFile.Multi.Generic (1)
21:08:58.0263 0792  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
21:08:58.0310 0792  PolicyAgent - ok
21:08:58.0325 0792  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
21:08:58.0372 0792  Power - ok
21:08:58.0403 0792  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:08:58.0435 0792  PptpMiniport - ok
21:08:58.0435 0792  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
21:08:58.0450 0792  Processor - ok
21:08:58.0481 0792  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
21:08:58.0513 0792  ProfSvc - ok
21:08:58.0528 0792  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:08:58.0528 0792  ProtectedStorage - ok
21:08:58.0591 0792  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:08:58.0622 0792  Psched - ok
21:08:58.0637 0792  [ A6BF0A9B5A30D743623CA0D3BE35DF05 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
21:08:58.0669 0792  PxHlpa64 - ok
21:08:58.0715 0792  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
21:08:58.0747 0792  ql2300 - ok
21:08:58.0747 0792  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
21:08:58.0762 0792  ql40xx - ok
21:08:58.0793 0792  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
21:08:58.0809 0792  QWAVE - ok
21:08:58.0825 0792  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:08:58.0840 0792  QWAVEdrv - ok
21:08:58.0856 0792  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:08:58.0887 0792  RasAcd - ok
21:08:58.0903 0792  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
21:08:58.0918 0792  RasAgileVpn - ok
21:08:58.0934 0792  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
21:08:58.0965 0792  RasAuto - ok
21:08:58.0981 0792  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
21:08:59.0012 0792  Rasl2tp - ok
21:08:59.0027 0792  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
21:08:59.0074 0792  RasMan - ok
21:08:59.0074 0792  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:08:59.0105 0792  RasPppoe - ok
21:08:59.0121 0792  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
21:08:59.0152 0792  RasSstp - ok
21:08:59.0168 0792  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
21:08:59.0199 0792  rdbss - ok
21:08:59.0215 0792  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:08:59.0230 0792  rdpbus - ok
21:08:59.0246 0792  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:08:59.0277 0792  RDPCDD - ok
21:08:59.0293 0792  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
21:08:59.0324 0792  RDPDR - ok
21:08:59.0339 0792  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:08:59.0371 0792  RDPENCDD - ok
21:08:59.0371 0792  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:08:59.0402 0792  RDPREFMP - ok
21:08:59.0464 0792  [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:08:59.0495 0792  RdpVideoMiniport - ok
21:08:59.0527 0792  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
21:08:59.0558 0792  RDPWD - ok
21:08:59.0589 0792  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:08:59.0605 0792  rdyboost - ok
21:08:59.0620 0792  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:08:59.0651 0792  RemoteAccess - ok
21:08:59.0683 0792  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:08:59.0714 0792  RemoteRegistry - ok
21:08:59.0745 0792  RimUsb - ok
21:08:59.0776 0792  [ 4AAFFFA67AC4DFA3D9985D78573887E2 ] RimVSerPort     C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
21:08:59.0807 0792  RimVSerPort - ok
21:08:59.0839 0792  [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys
21:08:59.0870 0792  ROOTMODEM - ok
21:08:59.0885 0792  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:08:59.0917 0792  RpcEptMapper - ok
21:08:59.0932 0792  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
21:08:59.0948 0792  RpcLocator - ok
21:08:59.0979 0792  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
21:09:00.0010 0792  RpcSs - ok
21:09:00.0026 0792  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:09:00.0057 0792  rspndr - ok
21:09:00.0088 0792  [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
21:09:00.0119 0792  RTL8167 - ok
21:09:00.0135 0792  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
21:09:00.0166 0792  s3cap - ok
21:09:00.0166 0792  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
21:09:00.0182 0792  SamSs - ok
21:09:00.0197 0792  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:09:00.0213 0792  sbp2port - ok
21:09:00.0291 0792  [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService  C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
21:09:00.0307 0792  SBSDWSCService - ok
21:09:00.0322 0792  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:09:00.0369 0792  SCardSvr - ok
21:09:00.0385 0792  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:09:00.0431 0792  scfilter - ok
21:09:00.0478 0792  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
21:09:00.0509 0792  Schedule - ok
21:09:00.0541 0792  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
21:09:00.0556 0792  SCPolicySvc - ok
21:09:00.0587 0792  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:09:00.0619 0792  SDRSVC - ok
21:09:00.0634 0792  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:09:00.0665 0792  secdrv - ok
21:09:00.0697 0792  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
21:09:00.0743 0792  seclogon - ok
21:09:00.0759 0792  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
21:09:00.0790 0792  SENS - ok
21:09:00.0790 0792  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:09:00.0806 0792  SensrSvc - ok
21:09:00.0837 0792  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
21:09:00.0853 0792  Serenum - ok
21:09:00.0853 0792  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
21:09:00.0884 0792  Serial - ok
21:09:00.0915 0792  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
21:09:00.0931 0792  sermouse - ok
21:09:00.0993 0792  [ 9D38320BB32230349379DF5DDBBF7FCE ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
21:09:01.0009 0792  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
21:09:01.0009 0792  ServiceLayer - detected UnsignedFile.Multi.Generic (1)
21:09:01.0040 0792  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
21:09:01.0071 0792  SessionEnv - ok
21:09:01.0071 0792  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
21:09:01.0118 0792  sffdisk - ok
21:09:01.0133 0792  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
21:09:01.0149 0792  sffp_mmc - ok
21:09:01.0165 0792  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
21:09:01.0180 0792  sffp_sd - ok
21:09:01.0180 0792  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
21:09:01.0211 0792  sfloppy - ok
21:09:01.0227 0792  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:09:01.0258 0792  SharedAccess - ok
21:09:01.0274 0792  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:09:01.0305 0792  ShellHWDetection - ok
21:09:01.0336 0792  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:09:01.0336 0792  SiSRaid2 - ok
21:09:01.0352 0792  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
21:09:01.0352 0792  SiSRaid4 - ok
21:09:01.0383 0792  [ AAAD5499D1F967CF23FAE7B57A96722C ] SKYNET          C:\Windows\system32\DRIVERS\SkyNET_AMD64.SYS
21:09:01.0414 0792  SKYNET - ok
21:09:01.0445 0792  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
21:09:01.0477 0792  Smb - ok
21:09:01.0492 0792  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:09:01.0523 0792  SNMPTRAP - ok
21:09:01.0555 0792  [ 5F9785E7535F8F602CB294A54962C9E7 ] speedfan        C:\Windows\syswow64\speedfan.sys
21:09:01.0586 0792  speedfan - ok
21:09:01.0586 0792  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
21:09:01.0601 0792  spldr - ok
21:09:01.0617 0792  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
21:09:01.0664 0792  Spooler - ok
21:09:01.0742 0792  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
21:09:01.0804 0792  sppsvc - ok
21:09:01.0820 0792  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
21:09:01.0851 0792  sppuinotify - ok
21:09:01.0882 0792  [ D8B882C520FC83547E22014FF5EC66D7 ] Spyder3         C:\Windows\system32\DRIVERS\Spyder3.sys
21:09:01.0929 0792  Spyder3 - ok
21:09:02.0007 0792  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
21:09:02.0116 0792  srv - ok
21:09:02.0288 0792  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:09:02.0319 0792  srv2 - ok
21:09:02.0335 0792  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:09:02.0350 0792  srvnet - ok
21:09:02.0366 0792  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
21:09:02.0413 0792  SSDPSRV - ok
21:09:02.0428 0792  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
21:09:02.0444 0792  SstpSvc - ok
21:09:02.0459 0792  StarOpen - ok
21:09:02.0475 0792  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
21:09:02.0475 0792  stexstor - ok
21:09:02.0522 0792  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
21:09:02.0553 0792  stisvc - ok
21:09:02.0569 0792  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
21:09:02.0584 0792  storflt - ok
21:09:02.0600 0792  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
21:09:02.0615 0792  storvsc - ok
21:09:02.0631 0792  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
21:09:02.0647 0792  swenum - ok
21:09:02.0662 0792  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
21:09:02.0693 0792  swprv - ok
21:09:02.0709 0792  Synth3dVsc - ok
21:09:02.0740 0792  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
21:09:02.0803 0792  SysMain - ok
21:09:02.0818 0792  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:09:02.0834 0792  TabletInputService - ok
21:09:02.0849 0792  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
21:09:02.0881 0792  TapiSrv - ok
21:09:02.0896 0792  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
21:09:02.0927 0792  TBS - ok
21:09:02.0974 0792  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
21:09:03.0005 0792  Tcpip - ok
21:09:03.0037 0792  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:09:03.0068 0792  TCPIP6 - ok
21:09:03.0099 0792  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:09:03.0115 0792  tcpipreg - ok
21:09:03.0130 0792  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:09:03.0177 0792  TDPIPE - ok
21:09:03.0193 0792  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
21:09:03.0208 0792  TDTCP - ok
21:09:03.0239 0792  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
21:09:03.0255 0792  tdx - ok
21:09:03.0271 0792  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
21:09:03.0286 0792  TermDD - ok
21:09:03.0317 0792  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
21:09:03.0364 0792  TermService - ok
21:09:03.0380 0792  [ CE4B6956E4E12492715A53076E58761F ] TFsExDisk       C:\Windows\System32\Drivers\TFsExDisk.sys
21:09:03.0411 0792  TFsExDisk - ok
21:09:03.0427 0792  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
21:09:03.0442 0792  Themes - ok
21:09:03.0458 0792  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
21:09:03.0473 0792  THREADORDER - ok
21:09:03.0520 0792  [ F32E7CD2339C66760AA5178924B21E6B ] TomTomHOMEService C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
21:09:03.0536 0792  TomTomHOMEService - ok
21:09:03.0536 0792  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
21:09:03.0567 0792  TrkWks - ok
21:09:03.0629 0792  [ C6A1A2B4E8A7B92C11CA038369BD7DBE ] truecrypt       C:\Windows\syswow64\drivers\truecrypt.sys
21:09:03.0661 0792  truecrypt - ok
21:09:03.0707 0792  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:09:03.0739 0792  TrustedInstaller - ok
21:09:03.0770 0792  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:09:03.0801 0792  tssecsrv - ok
21:09:03.0817 0792  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:09:03.0848 0792  TsUsbFlt - ok
21:09:03.0848 0792  tsusbhub - ok
21:09:03.0879 0792  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:09:03.0910 0792  tunnel - ok
21:09:03.0941 0792  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
21:09:03.0957 0792  uagp35 - ok
21:09:03.0988 0792  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:09:04.0019 0792  udfs - ok
21:09:04.0051 0792  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
21:09:04.0066 0792  UI0Detect - ok
21:09:04.0082 0792  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:09:04.0097 0792  uliagpkx - ok
21:09:04.0144 0792  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
21:09:04.0160 0792  umbus - ok
21:09:04.0175 0792  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
21:09:04.0191 0792  UmPass - ok
21:09:04.0207 0792  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
21:09:04.0222 0792  UmRdpService - ok
21:09:04.0253 0792  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
21:09:04.0300 0792  upnphost - ok
21:09:04.0347 0792  [ AA33FC47ED58C34E6E9261E4F850B7EB ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
21:09:04.0363 0792  USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
21:09:04.0363 0792  USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
21:09:04.0378 0792  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
21:09:04.0409 0792  usbccgp - ok
21:09:04.0441 0792  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
21:09:04.0441 0792  usbcir - ok
21:09:04.0472 0792  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
21:09:04.0487 0792  usbehci - ok
21:09:04.0503 0792  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
21:09:04.0534 0792  usbhub - ok
21:09:04.0534 0792  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
21:09:04.0565 0792  usbohci - ok
21:09:04.0581 0792  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
21:09:04.0597 0792  usbprint - ok
21:09:04.0628 0792  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
21:09:04.0643 0792  usbscan - ok
21:09:04.0675 0792  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:09:04.0706 0792  USBSTOR - ok
21:09:04.0706 0792  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
21:09:04.0721 0792  usbuhci - ok
21:09:04.0737 0792  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
21:09:04.0768 0792  UxSms - ok
21:09:04.0784 0792  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
21:09:04.0799 0792  VaultSvc - ok
21:09:04.0815 0792  [ B6437A7C60C817A0D7BEA1D994B01612 ] VBoxDrv         C:\Windows\system32\DRIVERS\VBoxDrv.sys
21:09:04.0846 0792  VBoxDrv - ok
21:09:04.0893 0792  [ 9E607F6240EADC4C0B3570F3E5E0358C ] VBoxNetAdp      C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
21:09:04.0924 0792  VBoxNetAdp - ok
21:09:04.0940 0792  [ 9F7BC6D33A3AA4AFF35C9DBD69C2BCA0 ] VBoxNetFlt      C:\Windows\system32\DRIVERS\VBoxNetFlt.sys
21:09:04.0971 0792  VBoxNetFlt - ok
21:09:05.0002 0792  [ 84B57B85A550476456EC5AB32FA99513 ] VBoxUSBMon      C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
21:09:05.0018 0792  VBoxUSBMon - ok
21:09:05.0033 0792  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:09:05.0049 0792  vdrvroot - ok
21:09:05.0080 0792  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
21:09:05.0127 0792  vds - ok
21:09:05.0143 0792  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
21:09:05.0158 0792  vga - ok
21:09:05.0158 0792  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
21:09:05.0205 0792  VgaSave - ok
21:09:05.0205 0792  VGPU - ok
21:09:05.0236 0792  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
21:09:05.0252 0792  vhdmp - ok
21:09:05.0267 0792  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
21:09:05.0283 0792  viaide - ok
21:09:05.0314 0792  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys
21:09:05.0314 0792  vmbus - ok
21:09:05.0330 0792  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
21:09:05.0361 0792  VMBusHID - ok
21:09:05.0361 0792  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:09:05.0377 0792  volmgr - ok
21:09:05.0392 0792  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
21:09:05.0408 0792  volmgrx - ok
21:09:05.0423 0792  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
21:09:05.0439 0792  volsnap - ok
21:09:05.0455 0792  [ B4A73CA4EF9A02B9738CEA9AD5FE5917 ] vpcbus          C:\Windows\system32\DRIVERS\vpchbus.sys
21:09:05.0470 0792  vpcbus - ok
21:09:05.0486 0792  [ E675FB2B48C54F09895482E2253B289C ] vpcnfltr        C:\Windows\system32\DRIVERS\vpcnfltr.sys
21:09:05.0517 0792  vpcnfltr - ok
21:09:05.0517 0792  [ 5FB42082B0D19A0268705F1DD343DF20 ] vpcusb          C:\Windows\system32\DRIVERS\vpcusb.sys
21:09:05.0533 0792  vpcusb - ok
21:09:05.0548 0792  [ 63F4E10873BEB4124028C6D1A66B0968 ] vpcuxd          C:\Windows\system32\drivers\vpcuxd.sys
21:09:05.0595 0792  vpcuxd - ok
21:09:05.0611 0792  [ 207B6539799CC1C112661A9B620DD233 ] vpcvmm          C:\Windows\system32\drivers\vpcvmm.sys
21:09:05.0626 0792  vpcvmm - ok
21:09:05.0657 0792  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
21:09:05.0673 0792  vsmraid - ok
21:09:05.0720 0792  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
21:09:05.0782 0792  VSS - ok
21:09:05.0798 0792  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
21:09:05.0813 0792  vwifibus - ok
21:09:05.0845 0792  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
21:09:05.0891 0792  W32Time - ok
21:09:05.0891 0792  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
21:09:05.0907 0792  WacomPen - ok
21:09:05.0938 0792  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:09:05.0969 0792  WANARP - ok
21:09:05.0969 0792  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:09:06.0001 0792  Wanarpv6 - ok
21:09:06.0016 0792  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
21:09:06.0047 0792  wbengine - ok
21:09:06.0063 0792  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:09:06.0079 0792  WbioSrvc - ok
21:09:06.0094 0792  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
21:09:06.0125 0792  wcncsvc - ok
21:09:06.0141 0792  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:09:06.0188 0792  WcsPlugInService - ok
21:09:06.0188 0792  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
21:09:06.0203 0792  Wd - ok
21:09:06.0219 0792  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:09:06.0235 0792  Wdf01000 - ok
21:09:06.0250 0792  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:09:06.0297 0792  WdiServiceHost - ok
21:09:06.0297 0792  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
21:09:06.0313 0792  WdiSystemHost - ok
21:09:06.0344 0792  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
21:09:06.0375 0792  WebClient - ok
21:09:06.0391 0792  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:09:06.0422 0792  Wecsvc - ok
21:09:06.0422 0792  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
21:09:06.0453 0792  wercplsupport - ok
21:09:06.0484 0792  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:09:06.0515 0792  WerSvc - ok
21:09:06.0531 0792  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:09:06.0562 0792  WfpLwf - ok
21:09:06.0562 0792  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:09:06.0578 0792  WIMMount - ok
21:09:06.0593 0792  WinDefend - ok
21:09:06.0593 0792  WinHttpAutoProxySvc - ok
21:09:06.0640 0792  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
21:09:06.0671 0792  Winmgmt - ok
21:09:06.0718 0792  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
21:09:06.0765 0792  WinRM - ok
21:09:06.0827 0792  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
21:09:06.0859 0792  WinUsb - ok
21:09:06.0890 0792  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
21:09:06.0921 0792  Wlansvc - ok
21:09:06.0968 0792  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
21:09:06.0983 0792  WmiAcpi - ok
21:09:07.0015 0792  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:09:07.0030 0792  wmiApSrv - ok
21:09:07.0030 0792  WMPNetworkSvc - ok
21:09:07.0046 0792  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:09:07.0077 0792  WPCSvc - ok
21:09:07.0108 0792  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:09:07.0139 0792  WPDBusEnum - ok
21:09:07.0155 0792  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
21:09:07.0186 0792  ws2ifsl - ok
21:09:07.0202 0792  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
21:09:07.0233 0792  wscsvc - ok
21:09:07.0233 0792  WSearch - ok
21:09:07.0280 0792  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
21:09:07.0358 0792  wuauserv - ok
21:09:07.0389 0792  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:09:07.0436 0792  WudfPf - ok
21:09:07.0451 0792  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:09:07.0498 0792  WUDFRd - ok
21:09:07.0514 0792  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
21:09:07.0545 0792  wudfsvc - ok
21:09:07.0561 0792  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll
21:09:07.0639 0792  WwanSvc - ok
21:09:07.0654 0792  ================ Scan global ===============================
21:09:07.0670 0792  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
21:09:07.0701 0792  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
21:09:07.0701 0792  [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
21:09:07.0717 0792  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
21:09:07.0732 0792  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
21:09:07.0732 0792  [Global] - ok
21:09:07.0732 0792  ================ Scan MBR ==================================
21:09:07.0732 0792  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:09:08.0200 0792  \Device\Harddisk0\DR0 - ok
21:09:08.0216 0792  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
21:09:08.0419 0792  \Device\Harddisk1\DR1 - ok
21:09:08.0419 0792  ================ Scan VBR ==================================
21:09:08.0419 0792  [ 59DAAFF37C5D074B84C79D3D12C49817 ] \Device\Harddisk0\DR0\Partition1
21:09:08.0419 0792  \Device\Harddisk0\DR0\Partition1 - ok
21:09:08.0434 0792  [ 6698D5082C2BDD71D19B424767860BCB ] \Device\Harddisk1\DR1\Partition1
21:09:08.0434 0792  \Device\Harddisk1\DR1\Partition1 - ok
21:09:08.0450 0792  [ D07BEFBF418CF03CD4AB9684A0A93FFF ] \Device\Harddisk1\DR1\Partition2
21:09:08.0450 0792  \Device\Harddisk1\DR1\Partition2 - ok
21:09:08.0450 0792  ============================================================
21:09:08.0450 0792  Scan finished
21:09:08.0450 0792  ============================================================
21:09:08.0465 3888  Detected object count: 5
21:09:08.0465 3888  Actual detected object count: 5
21:09:34.0065 3888  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
21:09:34.0065 3888  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:09:34.0065 3888  NTIOLib_1_0_6 ( UnsignedFile.Multi.Generic ) - skipped by user
21:09:34.0065 3888  NTIOLib_1_0_6 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:09:34.0065 3888  Polar Daemon ( UnsignedFile.Multi.Generic ) - skipped by user
21:09:34.0065 3888  Polar Daemon ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:09:34.0065 3888  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
21:09:34.0065 3888  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
21:09:34.0065 3888  USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
21:09:34.0065 3888  USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus · 27.10.2012, 20:29

Auch unauffällig

Downloade dir bitte ESET's ServiceRepair.exe auf deinem Desktop.
Doppelklick auf die Datei und bestätige die ersten Nachricht mit Yes.

Das Tool wird einen Neustart verlangen, dies bitte zulassen.

magnus65 · 27.10.2012, 20:48

Hat leider keine Besserung gebracht, immer noch Zugriff verweigert.

25.10.2012, 13:23	#2
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) - Standard$ mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) Im DVBViewer? Sieht sehr schwer nach Fehlalarm aus __________________ __________________

25.10.2012, 14:58	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) - Standard$ mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) Hast du noch weitere Logs von Malwarebytes? Siehe http://www.trojaner-board.de/125889-...tml#post941520 __________________ Logfiles bitte immer in CODE-Tags posten

25.10.2012, 22:02	#8
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) - Standard$ mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot) Ist auch unauffällig, tiefere Scans sind imho nicht nötig. Ich war mir schon am Anfang sicher, dass es hier ein Fehlalarm ist. __________________ Logfiles bitte immer in CODE-Tags posten

mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot)

Plagegeister aller Art und deren Bekämpfung: mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot)