Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Keylogger? Passwort ausgespäht!

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 09.04.2014, 19:51   #1
omurphy
 
Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



Guten Abend!

jemand hat sich mit meinem Passwort bei meinem Webhoster eingeloggt und Mist gebaut.

Der Hoster-Support tippt auf einen Keylogger auf meinem Rechner - ich halte das für eher unwahrscheinlich - aber dass jemand mein Passwort errät oder (über die Schulter) ausspäht, kann ich ausschließen.

Hat mein Rechner also doch was? Wäre für einen Check dankbar!

Es läuft:
Windows 8, Kaspersky Internet Security und (hin und wieder mal) Spybot S&D

Sonstige Symptome: Keine, außer, dass der Rechner zunehmend langsam ist....

Frst.txt
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by ***** (administrator) on VAIO on 09-04-2014 19:11:37
Running from C:\Users\*****\Desktop
Windows 8 Pro with Media Center (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHVE.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
() C:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [TuneClone] - C:\Program Files\TuneClone\TuneClone.exe [4550656 2012-02-24] (TuneClone.COM)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [MMReminderService] - C:\Program Files (x86)\Mindjet\MindManager 10\MMReminderService.exe [38280 2012-07-17] (Mindjet)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-04-21] (RealNetworks, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [F.lux] - "C:\Users\*****\Local Settings\Apps\F.lux\flux.exe" /noshow
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [PC Suite Tray] - C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia)
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [AdobeBridge] - [X]
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [EPLTarget\P0000000000000000] - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIHVE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\MountPoints2: {3f4965ee-e733-11e2-be8c-0024bebc453e} - "F:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\MountPoints2: {922798df-699d-11e2-be6d-506313e0d7de} - "F:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\MountPoints2: {b09f5f90-dcd6-11e2-be87-506313e0d7de} - "F:\EasySuite .exe" bootup
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\MountPoints2: {d623b469-70a2-11e2-be6d-506313e0d7de} - "F:\EasySuite .exe" bootup
HKU\S-1-5-21-2936259450-3521671367-2592787203-1001\...\MountPoints2: {e7380093-64c9-11e2-be6d-506313e0d7de} - "G:\WD SmartWare.exe" autoplay=true
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation)
SSODL: EldosMountNotificator-cbfs4 - {9F0AB6D8-E919-4EE5-866B-5B9A3449D285} - C:\WINDOWS\system32\cbfsMntNtf4.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs4 - {9F0AB6D8-E919-4EE5-866B-5B9A3449D285} - C:\WINDOWS\SysWOW64\cbfsMntNtf4.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7D7913AA4CF7CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll (Mindjet)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Alive Text to Speech - {954F618B-0DEC-4D1A-9317-E0FC96F87865} - C:\Program Files (x86)\AliveMedia\Text to Speech\IEToolbar.dll ()
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: chrome://newtab
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-20]
CHR Extension: (Google Drive) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-20]
CHR Extension: (Kaspersky Protection) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-25]
CHR Extension: (YouTube) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-20]
CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2013-01-25]
CHR Extension: (Google-Suche) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-20]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-02-18]
CHR Extension: (Print Using Google Cloud Print™) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffaifmgpcdjedlffbhenaloimajbdkfg [2013-01-24]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-02-18]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-02-18]
CHR Extension: (RealDownloader) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-04-21]
CHR Extension: (Virtual Keyboard) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-02-18]
CHR Extension: (Gestures for Google Chrome™) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpkfjicglakibpenojifdiepckckakgk [2013-01-23]
CHR Extension: (Pocket (formerly Read It Later)) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2013-01-23]
CHR Extension: (Google Wallet) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Evernote Web Clipper) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2013-01-21]
CHR Extension: (Google Mail) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-20]
CHR Extension: (Anti-Banner) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-02-18]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2013-02-18]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-03-06]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2246184 2011-12-15] (Broadcom Corporation.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

==================== Drivers (Whitelisted) ====================

R1 cbfs4; C:\WINDOWS\system32\drivers\cbfs4.sys [385216 2013-04-24] (EldoS Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-03-10] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-03-10] (Kaspersky Lab)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-03-24] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-03-10] (Kaspersky Lab ZAO)
S3 RRNetCap; C:\Windows\system32\DRIVERS\rrnetcap.sys [37480 2013-02-05] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\system32\DRIVERS\rrnetcap.sys [37480 2013-02-05] (RapidSolution Software AG)
R3 SSCBFS3; C:\Windows\System32\drivers\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation)
R0 tclondrv; C:\Windows\System32\DRIVERS\tclondrv.sys [26856 2012-02-24] (TuneClone Software)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () <===== ATTENTION Necurs Rootkit?
R3 yukonw8; C:\Windows\system32\DRIVERS\yk63x64.sys [295792 2012-10-02] (Marvell)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 19:00 - 2014-04-09 19:11 - 00022585 _____ () C:\Users\*****\Desktop\FRST.txt
2014-04-09 19:00 - 2014-04-09 19:00 - 02157056 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-04-09 19:00 - 2014-04-09 19:00 - 00380416 _____ () C:\Users\*****\Desktop\3fk5ydh8.exe
2014-04-09 18:58 - 2014-04-09 18:58 - 00000474 _____ () C:\Users\*****\Desktop\defogger_disable.log
2014-04-09 18:57 - 2014-04-09 18:57 - 00050477 _____ () C:\Users\*****\Desktop\Defogger.exe
2014-04-08 20:26 - 2014-04-09 19:11 - 00000000 ____D () C:\FRST
2014-04-08 20:24 - 2014-04-08 20:24 - 00000000 _____ () C:\Users\*****\defogger_reenable
2014-04-08 19:50 - 2014-04-09 18:39 - 00003334 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2936259450-3521671367-2592787203-1001
2014-04-08 19:50 - 2014-04-09 18:39 - 00003202 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2936259450-3521671367-2592787203-1001
2014-04-08 17:01 - 2014-04-08 19:53 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-08 17:01 - 2014-04-08 17:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-08 17:01 - 2014-04-08 17:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-08 17:01 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-08 17:01 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-08 17:01 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-22 23:12 - 2014-03-22 23:13 - 05752608 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-22 21:25 - 2014-03-22 23:10 - 01572864 _____ () C:\WINDOWS\SysWOW64\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
2014-03-18 22:43 - 2014-03-18 22:43 - 00003605 _____ () C:\Users\*****\.ganttproject
2014-03-18 22:43 - 2014-03-18 22:43 - 00000225 _____ () C:\Users\*****\java0.log
2014-03-18 22:09 - 2014-03-18 22:43 - 00001619 _____ () C:\Users\*****\ganttproject.log
2014-03-18 22:09 - 2014-03-18 22:09 - 00000000 ____D () C:\Program Files (x86)\GanttProject-2.6
2014-03-12 23:50 - 2013-10-25 09:34 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-12 23:50 - 2013-10-25 00:34 - 00248240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-12 23:49 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-12 23:49 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-12 23:49 - 2014-02-23 10:13 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-03-12 23:49 - 2014-02-23 10:13 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-03-12 23:49 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-12 23:49 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-12 23:49 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-12 23:49 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-03-12 23:49 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-03-12 23:49 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-12 23:49 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-12 23:49 - 2014-02-23 08:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-03-12 23:49 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-03-12 23:49 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-03-12 23:49 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-03-12 23:49 - 2014-02-23 06:06 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-03-12 23:49 - 2014-02-08 06:34 - 04036608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-12 23:49 - 2013-12-07 08:36 - 19751936 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-12 23:49 - 2013-12-07 07:15 - 17560576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-12 23:48 - 2014-02-06 01:41 - 00595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-12 23:48 - 2014-02-06 01:37 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-12 23:48 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-03-12 23:48 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-03-10 13:31 - 2014-03-10 13:31 - 00001329 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk

==================== One Month Modified Files and Folders =======

2014-04-09 19:11 - 2014-04-09 19:00 - 00022585 _____ () C:\Users\*****\Desktop\FRST.txt
2014-04-09 19:11 - 2014-04-08 20:26 - 00000000 ____D () C:\FRST
2014-04-09 19:08 - 2013-01-20 23:20 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 19:00 - 2014-04-09 19:00 - 02157056 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2014-04-09 19:00 - 2014-04-09 19:00 - 00380416 _____ () C:\Users\*****\Desktop\3fk5ydh8.exe
2014-04-09 19:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-09 18:58 - 2014-04-09 18:58 - 00000474 _____ () C:\Users\*****\Desktop\defogger_disable.log
2014-04-09 18:58 - 2013-02-18 21:38 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-09 18:57 - 2014-04-09 18:57 - 00050477 _____ () C:\Users\*****\Desktop\Defogger.exe
2014-04-09 18:45 - 2012-07-26 12:27 - 00753134 _____ () C:\WINDOWS\system32\perfh007.dat
2014-04-09 18:45 - 2012-07-26 12:27 - 00155826 _____ () C:\WINDOWS\system32\perfc007.dat
2014-04-09 18:45 - 2012-07-26 09:28 - 01745416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-09 18:39 - 2014-04-08 19:50 - 00003334 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2936259450-3521671367-2592787203-1001
2014-04-09 18:39 - 2014-04-08 19:50 - 00003202 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2936259450-3521671367-2592787203-1001
2014-04-09 18:39 - 2013-01-20 23:20 - 00001116 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 18:38 - 2013-04-09 18:26 - 00021946 _____ () C:\WINDOWS\PFRO.log
2014-04-09 18:38 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-09 18:37 - 2012-07-26 07:26 - 00786432 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-09 18:21 - 2013-01-22 02:34 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-09 18:18 - 2013-01-23 01:07 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-04-09 18:09 - 2013-01-20 22:25 - 00000000 ____D () C:\Users\*****
2014-04-09 17:52 - 2013-01-22 16:36 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-09 15:04 - 2013-01-22 15:54 - 16459776 ___SH () C:\Users\*****\Desktop\Thumbs.db
2014-04-09 14:35 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2014-04-08 20:24 - 2014-04-08 20:24 - 00000000 _____ () C:\Users\*****\defogger_reenable
2014-04-08 19:53 - 2014-04-08 17:01 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-08 17:08 - 2013-05-30 14:46 - 00000000 ____D () C:\WINDOWS\Minidump
2014-04-08 17:08 - 2013-05-30 14:45 - 556752336 _____ () C:\WINDOWS\MEMORY.DMP
2014-04-08 17:01 - 2014-04-08 17:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-08 17:01 - 2014-04-08 17:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-08 16:57 - 2013-01-22 15:50 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Skype
2014-04-08 12:04 - 2013-02-08 00:37 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FileZilla
2014-04-04 09:31 - 2013-01-20 23:25 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-04-03 12:10 - 2013-09-06 23:36 - 00000000 ____D () C:\Users\*****\AppData\Roaming\vlc
2014-04-03 09:51 - 2014-04-08 17:01 - 00088280 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-08 17:01 - 00063192 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-08 17:01 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-31 18:55 - 2013-01-20 22:26 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Adobe
2014-03-29 22:03 - 2013-01-20 23:20 - 00004092 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-29 22:03 - 2013-01-20 23:20 - 00003856 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-28 17:02 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-26 12:14 - 2013-01-20 22:32 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2936259450-3521671367-2592787203-1001
2014-03-26 01:06 - 2013-09-25 00:41 - 00000132 _____ () C:\Users\*****\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-03-24 09:54 - 2013-10-17 16:47 - 00625760 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2014-03-24 09:54 - 2013-06-08 21:18 - 00115296 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2014-03-24 09:54 - 2013-05-07 18:56 - 00065120 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klwfp.sys
2014-03-22 23:13 - 2014-03-22 23:12 - 05752608 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-22 23:12 - 2013-03-29 22:23 - 02004890 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-22 23:10 - 2014-03-22 21:25 - 01572864 _____ () C:\WINDOWS\SysWOW64\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤
2014-03-19 19:55 - 2013-07-15 22:56 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-19 19:52 - 2013-01-22 01:32 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-19 19:52 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-18 22:43 - 2014-03-18 22:43 - 00003605 _____ () C:\Users\*****\.ganttproject
2014-03-18 22:43 - 2014-03-18 22:43 - 00000225 _____ () C:\Users\*****\java0.log
2014-03-18 22:43 - 2014-03-18 22:09 - 00001619 _____ () C:\Users\*****\ganttproject.log
2014-03-18 22:09 - 2014-03-18 22:09 - 00000000 ____D () C:\Program Files (x86)\GanttProject-2.6
2014-03-18 21:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-03-17 11:31 - 2013-01-20 22:26 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-17 11:31 - 2013-01-20 22:26 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-17 11:29 - 2013-03-13 18:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-17 11:29 - 2013-03-13 18:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-17 11:27 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-17 11:27 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-17 11:27 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-17 11:26 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-17 11:26 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-13 02:28 - 2013-01-21 01:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-11 20:23 - 2013-01-22 02:34 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-10 13:38 - 2013-10-17 16:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2014-03-10 13:38 - 2013-10-17 16:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klkbdflt.sys
2014-03-10 13:38 - 2013-06-06 18:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kneps.sys
2014-03-10 13:38 - 2012-07-27 19:38 - 00029792 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klelam.sys
2014-03-10 13:31 - 2014-03-10 13:31 - 00001329 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2014-03-10 11:27 - 2013-02-18 21:38 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-03-10 00:33 - 2013-08-03 23:49 - 00000000 ____D () C:\My Kindle Content

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-07 12:42

==================== End Of Log ============================
         
addition.txt
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by ***** at 2014-04-09 19:12:21
Running from C:\Users\*****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Acrobat 9 Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}) (Version: 9.5.5 - Adobe Systems)
Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden
Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000004}_955) (Version:  - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.6.0.5970 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 5 Design Standard (HKLM-x32\...\{49DC7D87-B9F9-4782-9386-B7F13BC75E48}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Aiseesoft Total Video Converter 6.2.66 (HKLM-x32\...\{E09CEBAA-4435-4404-8D82-4C029F6391E4}_is1) (Version: 6.2.66 - Aiseesoft Studio)
Alive Text to Speech v6.1.0.2 (HKLM-x32\...\Alive Text to Speech_is1) (Version:  - AliveMedia, Inc.)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 2013 v.11.0.5 (HKLM-x32\...\{91B33C97-0FBA-74AE-E802-D782F5C8AA89}_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (HKLM-x32\...\Ashampoo Photo Commander 9_is1) (Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Audials (HKLM-x32\...\{30819B2C-C281-4D17-B4D4-ADC7D42BDB19}) (Version: 10.1.6207.700 - Audials AG)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.171.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BoxCryptor 1.5 (HKLM-x32\...\BoxCryptor) (Version: 1.5.413.155 - Secomba GmbH)
calibre 64bit (HKLM\...\{96AC0686-B9D4-4D85-A1ED-E1AA8550C15A}) (Version: 1.9.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
EBookToMP3 (HKLM-x32\...\EBookToMP3_is1) (Version: Aktuelle Version - IN MEDIA KG)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
EPSON BX635FWD Series Printer Uninstall (HKLM\...\EPSON BX635FWD Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Evernote v. 5.2.1 (HKLM-x32\...\{5E6D0ABA-ABDE-11E3-9AED-00163E98E7D6}) (Version: 5.2.1.3108 - Evernote Corp.)
F.lux (HKCU\...\Flux) (Version:  - )
FileZilla Client 3.7.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Fotobuchexpress24 Bestellsoftware (HKLM-x32\...\Fotobuchexpress24) (Version: 3.1.26 - SSW Software GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 3.1.26 - SSW Software GmbH) Hidden
GanttProject (HKLM-x32\...\GanttProject) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google SketchUp 8 (HKLM-x32\...\{4BA6784F-3B10-473A-B9F5-33A36AC354D5}) (Version: 3.0.14358 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
maxdome - Online Videothek (HKLM\...\maxdome - Online Videothek) (Version: 1.0 - maxdome GmbH und Co. KG)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Mindjet MindManager 2012 (HKLM-x32\...\{2DD3FE18-F257-484C-8543-3793F14D999F}) (Version: 10.2.404 - Mindjet)
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
NaturalReaderFree (HKLM-x32\...\{C5E7BF75-007E-44AD-8962-627ED44CB63B}) (Version: 11.9 - NaturalSoft)
Nokia Connectivity Cable Driver (HKLM-x32\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
Nokia PC Suite (x32 Version: 7.1.180.94 - Nokia) Hidden
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF-XChange 3 (HKLM\...\PDF-XChange 3_is1) (Version:  - Tracker Software)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RealDownloader (x32 Version: 1.3.1 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rossmann Fotowelt Software 4.12.1 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.12.1 - ORWO Net)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Stardock Start8 (HKLM-x32\...\Stardock Start8) (Version: 1.31 - Stardock Software, Inc.)
Steuer-Spar-Erklärung 2013 (HKLM-x32\...\{AEB61F7A-4BBA-4292-A096-7893E09034A4}) (Version: 18.09 - Wolters Kluwer Deutschland GmbH)
SteuerSparErklärung Selbstständige 2014 (HKLM-x32\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.07.73 - Akademische Arbeitsgemeinschaft)
Storybook4 (HKLM-x32\...\Storybook4) (Version: 4.0.9 - Intertec)
SugarSync (HKLM-x32\...\SugarSync) (Version: 2.0.44.122879 - SugarSync, Inc.)
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM-x32\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Timeline 0.10.2 (HKLM-x32\...\Timeline_is1) (Version:  - Rickard Lindberg <ricli85@gmail.com>)
TogglDesktop (HKLM-x32\...\{901ACF4B-7DDB-4DE2-A9D7-6C1DA40671EE}) (Version: 4.94.0 - Toggl)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TTS (HKLM-x32\...\{62AAFC0A-00B8-4663-98D8-96AE9F3BA058}) (Version: 1.0.0.0 - ZoomCommerce Co., Ltd.)
TuneClone 2.20 (HKLM\...\TuneClone_is1) (Version:  - TuneClone.com)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.2-1 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
Windows-Treiberpaket - Nokia Modem  (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Windows-Treiberpaket - Nokia Modem  (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Your Software Deals (HKLM-x32\...\Your Software Deals_is1) (Version:  - Ashampoo GmbH & Co. KG)
yWriter5 (HKLM-x32\...\yWriter5_is1) (Version:  - Spacejock Software)
ZDFmediathek Version 2.1.6 (HKLM\...\ZDFmediathek_is1) (Version:  - ZDF)

==================== Restore Points  =========================

24-03-2014 13:51:34 Installed Evernote v. 5.2.1
04-04-2014 08:40:21 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {03AEA02F-F327-44C2-A3EB-128992CAAFB9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {4ADBFEAF-85BD-4B88-8CA4-873019AF1CCB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2936259450-3521671367-2592787203-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {7538BC4C-FF28-41D0-A5BF-6CFA719CC6DB} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {82CD85AB-C8AB-4ABF-AF3B-0CDFA85559C3} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {85577CCA-1E43-4AD8-950D-A21AC130F708} - System32\Tasks\AdobeAAMUpdater-1.0-Vaio-***** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {9BBED98F-08AA-4588-8654-CE0A17ACD722} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20] (Google Inc.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {A861DDF7-467F-4BBB-AE04-A0F2894E2CCE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {B610BAEE-4DA5-4707-92D3-1B3265C4F67D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {BDFBD245-FDA4-4EA7-B220-337318DC16E8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2936259450-3521671367-2592787203-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D2A91522-43A0-4C58-8827-6F2CA2D90D3B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20] (Google Inc.)
Task: {DDC83C61-9FA3-4013-92ED-07F5A9FEC666} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2013-03-06 02:21 - 2013-03-06 02:21 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-10-11 07:31 - 2014-01-23 01:11 - 00301920 _____ () C:\Program Files (x86)\SugarSync\x64\SugarSyncVFSNamespace64.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2013-03-13 16:41 - 2012-12-11 14:07 - 01184640 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-06-01 11:16 - 2013-06-01 11:17 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2014-04-04 09:31 - 2014-04-02 13:19 - 01380704 _____ () C:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-17 13:35 - 2013-06-17 13:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 15:52 - 2013-05-08 15:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-01-22 16:36 - 2012-11-13 15:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-01-22 16:36 - 2012-11-13 15:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-01-22 16:36 - 2012-11-13 15:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-01-22 16:36 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-01-22 16:36 - 2012-11-13 15:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-01-22 16:36 - 2012-11-13 15:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-03-17 12:05 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-02-11 21:29 - 2014-02-11 21:29 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-03-17 12:05 - 2014-03-15 02:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-17 12:05 - 2014-03-15 02:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-17 12:05 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-17 12:05 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-17 12:05 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2014-04-04 09:31 - 2014-04-02 13:19 - 00908640 _____ () C:\Program Files (x86)\Opera\20.0.1387.91\libglesv2.dll
2014-04-04 09:31 - 2014-04-02 13:19 - 00108896 _____ () C:\Program Files (x86)\Opera\20.0.1387.91\libegl.dll
2014-04-04 09:31 - 2014-04-02 13:19 - 00895328 _____ () C:\Program Files (x86)\Opera\20.0.1387.91\ffmpegsumo.dll
2014-03-14 17:56 - 2014-03-14 17:56 - 21115392 _____ () C:\Program Files (x86)\Evernote\Evernote\libcef.dll
2014-03-14 17:50 - 2014-03-14 17:50 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2014-03-14 17:50 - 2014-03-14 17:50 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2014-03-14 17:56 - 2014-03-14 17:56 - 00983054 _____ () C:\Program Files (x86)\Evernote\Evernote\avcodec-54.dll
2014-03-14 17:56 - 2014-03-14 17:56 - 00133134 _____ () C:\Program Files (x86)\Evernote\Evernote\avutil-51.dll
2014-03-14 17:56 - 2014-03-14 17:56 - 00189454 _____ () C:\Program Files (x86)\Evernote\Evernote\avformat-54.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:0B174FAE

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: FOXCONN-T77H114-BCM2070
Description: FOXCONN-T77H114-BCM2070
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5484

Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5484

Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4109

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4109

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1343

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1343

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 08:37:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 19859


System errors:
=============
Error: (04/08/2014 05:11:47 PM) (Source: DCOM) (User: Vaio)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/08/2014 05:11:47 PM) (Source: DCOM) (User: Vaio)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/08/2014 05:11:47 PM) (Source: DCOM) (User: Vaio)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/08/2014 05:11:47 PM) (Source: DCOM) (User: Vaio)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (04/08/2014 05:09:28 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0x8000002a64\??\C:\Users\*****\AppData\Local\Microsoft\Windows\UsrClass.dat

Error: (04/08/2014 05:08:39 PM) (Source: BugCheck) (User: )
Description: 0x0000000a (0x0000000000000203, 0x0000000000000002, 0x0000000000000000, 0xfffff800db8addb3)C:\WINDOWS\MEMORY.DMP

Error: (04/08/2014 05:08:39 PM) (Source: BugCheck) (User: )
Description: 

Error: (04/08/2014 05:08:34 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎08.‎04.‎2014 um 13:22:40 unerwartet heruntergefahren.

Error: (04/08/2014 04:57:06 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst iphlpsvc erreicht.

Error: (04/07/2014 01:17:50 AM) (Source: Ntfs) (User: )
Description: Auf dem Volume "X:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.


Microsoft Office Sessions:
=========================
Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5484

Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5484

Error: (04/09/2014 05:11:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4109

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4109

Error: (04/09/2014 05:11:28 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1343

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1343

Error: (04/09/2014 05:11:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 08:37:19 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 19859


==================== Memory info =========================== 

Percentage of memory in use: 58%
Total physical RAM: 3950.09 MB
Available physical RAM: 1640.91 MB
Total Pagefile: 7918.09 MB
Available Pagefile: 4702.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:108.46 GB) NTFS
Drive f: (WD SmartWare) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF
Drive g: (Elements) (Fixed) (Total:2794.52 GB) (Free:1648.9 GB) NTFS
Drive m: (My Passport) (Fixed) (Total:465.11 GB) (Free:20.67 GB) NTFS
Drive x: () (Fixed) (Total:55 GB) (Free:0.37 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 9E7464BD)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 465 GB) (Disk ID: 00021968)
Partition 1: (Not Active) - (Size=465 GB) - (Type=07 NTFS)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 2.

==================== End Of Log ============================
         

gmer.txt
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-09 20:02:34
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000046 TOSHIBA_MK5055GSX rev.FG001A 465,76GB
Running: 3fk5ydh8.exe; Driver: C:\Users\*****\AppData\Local\Temp\pxloypog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\BtwRSupportService.exe[1808] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 690                                   000007fb5b061532 4 bytes [06, 5B, FB, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1808] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 698                                   000007fb5b06153a 4 bytes [06, 5B, FB, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1808] C:\WINDOWS\system32\MSIMG32.dll!TransparentBlt + 246                                 000007fb5b06165a 4 bytes [06, 5B, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[4028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                      000007fb5b061532 4 bytes [06, 5B, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[4028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                      000007fb5b06153a 4 bytes [06, 5B, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[4028] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                    000007fb5b06165a 4 bytes [06, 5B, FB, 07]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlLeaveCriticalSection + 61                            000007fb6423104d 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlEnterCriticalSection + 39                            000007fb64231087 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 77                             000007fb642310dd 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 128                            000007fb64231110 48 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!_local_unwind + 36                                      000007fb64231174 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!memcmp + 199                                            000007fb64231257 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strcat + 144                                            000007fb64231300 16 bytes {JMP 0xffffffffffffff8c}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strcpy + 183                                            000007fb642313d7 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strlen + 168                                            000007fb64231578 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strncat + 405                                           000007fb64231725 32 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strncmp + 181                                           000007fb64231805 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!strncpy + 354                                           000007fb64231982 64 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentProcessorNumberEx + 52                     000007fb64231a24 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtdllDialogWndProc_W + 601                              000007fb64231dee 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!DbgUserBreakPoint + 99                                  000007fb64231e73 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlInterlockedPushListSList + 118                       000007fb64232096 48 bytes {JMP 0xffffffffffffffc0}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlpUmsExecuteYieldThreadEnd + 403                      000007fb642325b4 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!__chkstk + 77                                           000007fb6423261d 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!_setjmp + 160                                           000007fb642326f0 16 bytes {JMP RAX}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!longjmp + 236                                           000007fb6423289c 32 bytes {JMP 0xffffffffffffffb9}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetInformationThread                                  000007fb64232cb0 8 bytes {JMP QWORD [RIP-0x402]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueryInformationThread                                000007fb64232e30 8 bytes {JMP QWORD [RIP-0x51b]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtMapViewOfSection                                      000007fb64232e60 8 bytes {JMP QWORD [RIP-0x5ca]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                    000007fb64232f80 8 bytes {JMP QWORD [RIP-0x6da]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueueApcThread                                        000007fb64233030 8 bytes {JMP QWORD [RIP-0x792]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtCreateThreadEx                                        000007fb642336f1 8 bytes {JMP QWORD [RIP-0xca0]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtGetContextThread                                      000007fb642339d1 8 bytes {JMP QWORD [RIP-0x1018]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetContextThread                                      000007fb64234251 8 bytes {JMP QWORD [RIP-0x18a0]}
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessInit + 616                                 00000000775f15f0 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessTerm + 3                                   00000000775f15fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuResetToConsistentState + 272                      00000000775f17d4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuSetContext + 140                                  00000000775f18c4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuGetStackPointer + 23                              00000000775f18e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuSetStackPointer + 23                              00000000775f1903 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuSetInstructionPointer + 23                        00000000775f1923 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuFlushInstructionCache + 23                        00000000775f195f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessDebugEvent + 3                             00000000775f196b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\WacomHost.exe[3556] C:\WINDOWS\system32\wow64cpu.dll!CpuNotifyAffinityChange + 3                          00000000775f1977 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files\Tablet\Pen\Pen_Tablet.exe[2128] C:\WINDOWS\system32\psapi.dll!GetProcessImageFileNameA + 306                         000007fb6327177a 4 bytes [27, 63, FB, 07]
.text   C:\Program Files\Tablet\Pen\Pen_Tablet.exe[2128] C:\WINDOWS\system32\psapi.dll!GetProcessImageFileNameA + 314                         000007fb63271782 4 bytes [27, 63, FB, 07]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlLeaveCriticalSection + 61         000007fb6423104d 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlEnterCriticalSection + 39         000007fb64231087 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 77          000007fb642310dd 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 128         000007fb64231110 48 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!_local_unwind + 36                   000007fb64231174 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!memcmp + 199                         000007fb64231257 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strcat + 144                         000007fb64231300 16 bytes {JMP 0xffffffffffffff8c}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strcpy + 183                         000007fb642313d7 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strlen + 168                         000007fb64231578 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strncat + 405                        000007fb64231725 32 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strncmp + 181                        000007fb64231805 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!strncpy + 354                        000007fb64231982 64 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentProcessorNumberEx + 52  000007fb64231a24 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtdllDialogWndProc_W + 601           000007fb64231dee 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!DbgUserBreakPoint + 99               000007fb64231e73 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlInterlockedPushListSList + 118    000007fb64232096 48 bytes {JMP 0xffffffffffffffc0}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlpUmsExecuteYieldThreadEnd + 403   000007fb642325b4 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!__chkstk + 77                        000007fb6423261d 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!_setjmp + 160                        000007fb642326f0 16 bytes {JMP RAX}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!longjmp + 236                        000007fb6423289c 32 bytes {JMP 0xffffffffffffffb9}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetInformationThread               000007fb64232cb0 8 bytes {JMP QWORD [RIP-0x402]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueryInformationThread             000007fb64232e30 8 bytes {JMP QWORD [RIP-0x51b]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtMapViewOfSection                   000007fb64232e60 8 bytes {JMP QWORD [RIP-0x5ca]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                 000007fb64232f80 8 bytes {JMP QWORD [RIP-0x6da]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueueApcThread                     000007fb64233030 8 bytes {JMP QWORD [RIP-0x792]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtCreateThreadEx                     000007fb642336f1 8 bytes {JMP QWORD [RIP-0xca0]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtGetContextThread                   000007fb642339d1 8 bytes {JMP QWORD [RIP-0x1018]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetContextThread                   000007fb64234251 8 bytes {JMP QWORD [RIP-0x18a0]}
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessInit + 616              00000000775f15f0 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessTerm + 3                00000000775f15fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuResetToConsistentState + 272   00000000775f17d4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuSetContext + 140               00000000775f18c4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuGetStackPointer + 23           00000000775f18e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuSetStackPointer + 23           00000000775f1903 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuSetInstructionPointer + 23     00000000775f1923 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuFlushInstructionCache + 23     00000000775f195f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessDebugEvent + 3          00000000775f196b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe[5204] C:\WINDOWS\system32\wow64cpu.dll!CpuNotifyAffinityChange + 3       00000000775f1977 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlLeaveCriticalSection + 61                                 000007fb6423104d 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlEnterCriticalSection + 39                                 000007fb64231087 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 77                                  000007fb642310dd 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentUmsThread + 128                                 000007fb64231110 48 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!_local_unwind + 36                                           000007fb64231174 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!memcmp + 199                                                 000007fb64231257 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strcat + 144                                                 000007fb64231300 16 bytes {JMP 0xffffffffffffff8c}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strcpy + 183                                                 000007fb642313d7 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strlen + 168                                                 000007fb64231578 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strncat + 405                                                000007fb64231725 32 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strncmp + 181                                                000007fb64231805 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!strncpy + 354                                                000007fb64231982 64 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlGetCurrentProcessorNumberEx + 52                          000007fb64231a24 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtdllDialogWndProc_W + 601                                   000007fb64231dee 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!DbgUserBreakPoint + 99                                       000007fb64231e73 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlInterlockedPushListSList + 118                            000007fb64232096 48 bytes {JMP 0xffffffffffffffc0}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!RtlpUmsExecuteYieldThreadEnd + 403                           000007fb642325b4 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!__chkstk + 77                                                000007fb6423261d 40 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!_setjmp + 160                                                000007fb642326f0 16 bytes {JMP RAX}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!longjmp + 236                                                000007fb6423289c 32 bytes {JMP 0xffffffffffffffb9}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetInformationThread                                       000007fb64232cb0 8 bytes {JMP QWORD [RIP-0x402]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueryInformationThread                                     000007fb64232e30 8 bytes {JMP QWORD [RIP-0x51b]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtMapViewOfSection                                           000007fb64232e60 8 bytes {JMP QWORD [RIP-0x5ca]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                         000007fb64232f80 8 bytes {JMP QWORD [RIP-0x6da]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtQueueApcThread                                             000007fb64233030 8 bytes {JMP QWORD [RIP-0x792]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtCreateThreadEx                                             000007fb642336f1 8 bytes {JMP QWORD [RIP-0xca0]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtGetContextThread                                           000007fb642339d1 8 bytes {JMP QWORD [RIP-0x1018]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\SYSTEM32\ntdll.dll!NtSetContextThread                                           000007fb64234251 8 bytes {JMP QWORD [RIP-0x18a0]}
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessInit + 616                                      00000000775f15f0 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessTerm + 3                                        00000000775f15fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuResetToConsistentState + 272                           00000000775f17d4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuSetContext + 140                                       00000000775f18c4 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuGetStackPointer + 23                                   00000000775f18e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuSetStackPointer + 23                                   00000000775f1903 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuSetInstructionPointer + 23                             00000000775f1923 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuFlushInstructionCache + 23                             00000000775f195f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuProcessDebugEvent + 3                                  00000000775f196b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text   C:\Users\*****\Desktop\3fk5ydh8.exe[3396] C:\WINDOWS\system32\wow64cpu.dll!CpuNotifyAffinityChange + 3                               00000000775f1977 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [676:708]                                                                                               fffff9600094f5e8
Thread  C:\WINDOWS\system32\csrss.exe [676:712]                                                                                               fffff9600094f5e8
Thread   [3724:3880]                                                                                                                          0000000072267950
Thread   [3724:3884]                                                                                                                          000000007240c59c
Thread   [3724:3892]                                                                                                                          000000007240c59c
Thread   [3724:3292]                                                                                                                          000000007240c59c
Thread   [3724:4056]                                                                                                                          000000007240c59c
Thread   [3724:3692]                                                                                                                          00000000564c0dc7
Thread   [3724:4064]                                                                                                                          00000000565736af
Thread   [3724:2004]                                                                                                                          00000000565736af
Thread   [3724:3500]                                                                                                                          000000005367d80c
Thread   [3724:416]                                                                                                                           0000000075d64f62
Thread   [3724:2844]                                                                                                                          00000000565736af
Thread   [3724:4612]                                                                                                                          000000007240c59c
Thread   [3724:3528]                                                                                                                          00000000776750a7
Thread   [3724:6880]                                                                                                                          00000000776750a7
Thread   [3724:7008]                                                                                                                          00000000776750a7
Thread   [3724:5456]                                                                                                                          00000000776750a7
Thread   [3724:1936]                                                                                                                          00000000776750a7
Thread   [3724:6048]                                                                                                                          00000000776750a7
Thread   [3724:5072]                                                                                                                          00000000776750a7
Thread   [3724:6632]                                                                                                                          0000000075d64f62
Thread   [3724:188]                                                                                                                           0000000075d64f62
Thread   [3724:6676]                                                                                                                          00000000746624c6

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                     -688039526
Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\506313e0d7de                                                           
Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\506313e0d7de@d8b3770b0e76                                              0xA6 0x1B 0x63 0x3A ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\KLIF\Parameters@LastProcessedRevision                                                          7157049

---- EOF - GMER 2.1 ----
         
Den Rechner nutze ich auch als Freiberufler, alle Software ist natürlich legal und lizensiert!
Besten Dank für die Hilfe!

Alt 10.04.2014, 06:03   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________

__________________

Alt 10.04.2014, 10:45   #3
omurphy
 
Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



Hallo Schrauber,

danke, dass Du Dich (erneut) um meinen Rechner kümmerst!

Malwarebytes Anti-Rootkit hat nichts gefunden.

mbar-Log:
Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.04.10.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16843
***** :: VAIO [administrator]

10.04.2014 09:56:59
mbar-log-2014-04-10 (09-56-59).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 256946
Time elapsed: 1 hour(s), 9 minute(s), 5 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         
TDSKiller hat auch nichts gefunden.


TDSSKiller.3.0.0.30_10.04.2014_11.25.51_log [TEIL 1]:

Code:
ATTFilter
11:25:51.0816 0x1b58  TDSS rootkit removing tool 3.0.0.30 Apr  7 2014 15:39:12
11:25:58.0742 0x1b58  ============================================================
11:25:58.0742 0x1b58  Current date / time: 2014/04/10 11:25:58.0742
11:25:58.0742 0x1b58  SystemInfo:
11:25:58.0742 0x1b58  
11:25:58.0742 0x1b58  OS Version: 6.2.9200 ServicePack: 0.0
11:25:58.0742 0x1b58  Product type: Workstation
11:25:58.0742 0x1b58  ComputerName: VAIO
11:25:58.0743 0x1b58  UserName: *****
11:25:58.0743 0x1b58  Windows directory: C:\WINDOWS
11:25:58.0743 0x1b58  System windows directory: C:\WINDOWS
11:25:58.0743 0x1b58  Running under WOW64
11:25:58.0743 0x1b58  Processor architecture: Intel x64
11:25:58.0743 0x1b58  Number of processors: 4
11:25:58.0743 0x1b58  Page size: 0x1000
11:25:58.0743 0x1b58  Boot type: Normal boot
11:25:58.0743 0x1b58  ============================================================
11:25:59.0622 0x1b58  KLMD registered as C:\WINDOWS\system32\drivers\43197930.sys
11:26:00.0142 0x1b58  System UUID: {EAF30C5E-12A1-11A7-7946-86B340A3BE09}
11:26:01.0182 0x1b58  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:26:01.0188 0x1b58  Drive \Device\Harddisk1\DR1 - Size: 0x7446E00000 (465.11 Gb), SectorSize: 0x200, Cylinders: 0xED2B, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
11:26:05.0014 0x1b58  ============================================================
11:26:05.0014 0x1b58  \Device\Harddisk0\DR0:
11:26:05.0082 0x1b58  MBR partitions:
11:26:05.0082 0x1b58  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
11:26:05.0082 0x1b58  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
11:26:05.0082 0x1b58  \Device\Harddisk1\DR1:
11:26:05.0090 0x1b58  MBR partitions:
11:26:05.0090 0x1b58  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A236800
11:26:05.0090 0x1b58  ============================================================
11:26:05.0112 0x1b58  C: <-> \Device\Harddisk0\DR0\Partition2
11:26:05.0137 0x1b58  M: <-> \Device\Harddisk1\DR1\Partition1
11:26:05.0161 0x1b58  ============================================================
11:26:05.0161 0x1b58  Initialize success
11:26:05.0161 0x1b58  ============================================================
11:26:48.0782 0x0434  ============================================================
11:26:48.0782 0x0434  Scan started
11:26:48.0782 0x0434  Mode: Manual; SigCheck; TDLFS; 
11:26:48.0782 0x0434  ============================================================
11:26:48.0782 0x0434  KSN ping started
11:26:51.0147 0x0434  KSN ping finished: true
11:26:53.0252 0x0434  ================ Scan system memory ========================
11:26:53.0252 0x0434  System memory - ok
11:26:53.0253 0x0434  ================ Scan services =============================
11:26:53.0469 0x0434  [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
11:26:53.0574 0x0434  1394ohci - ok
11:26:53.0631 0x0434  [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
11:26:53.0655 0x0434  3ware - ok
11:26:53.0755 0x0434  [ 7EEB488346FBFA3731276C3EE8A8FD9E, 97D2E49C2E615E38E8176F1C1551BF452CC6A00787FF90845EFF27A4E6E20B1F ] AAV UpdateService C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
11:26:53.0774 0x0434  AAV UpdateService - ok
11:26:53.0830 0x0434  [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
11:26:53.0853 0x0434  ACPI - ok
11:26:53.0892 0x0434  [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
11:26:53.0914 0x0434  acpiex - ok
11:26:53.0949 0x0434  [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
11:26:53.0973 0x0434  acpipagr - ok
11:26:54.0009 0x0434  [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
11:26:54.0106 0x0434  AcpiPmi - ok
11:26:54.0192 0x0434  [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
11:26:54.0266 0x0434  acpitime - ok
11:26:54.0519 0x0434  [ 9D96B0D5855FD1B98023B3EEC9F06786, E4C79233158BE8AA4E9C6DD71585E5D2703A5156531EB3D692D7D81BC443E844 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:26:54.0547 0x0434  AdobeFlashPlayerUpdateSvc - ok
11:26:54.0620 0x0434  [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx         C:\WINDOWS\system32\drivers\adp94xx.sys
11:26:54.0658 0x0434  adp94xx - ok
11:26:54.0711 0x0434  [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci         C:\WINDOWS\system32\drivers\adpahci.sys
11:26:54.0731 0x0434  adpahci - ok
11:26:54.0810 0x0434  [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320         C:\WINDOWS\system32\drivers\adpu320.sys
11:26:54.0832 0x0434  adpu320 - ok
11:26:54.0880 0x0434  [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc     C:\WINDOWS\System32\aelupsvc.dll
11:26:54.0925 0x0434  AeLookupSvc - ok
11:26:54.0996 0x0434  [ 7C0E0EDF18D6CC565D7BFBB451709FA5, 47C21CD9D87B5C1B5EB14F6166B5E3349B1A6F10501E63CCED8D52A9FE22765D ] AFD             C:\WINDOWS\system32\drivers\afd.sys
11:26:55.0052 0x0434  AFD - ok
11:26:55.0096 0x0434  [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
11:26:55.0117 0x0434  agp440 - ok
11:26:55.0157 0x0434  [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG             C:\WINDOWS\System32\alg.exe
11:26:55.0208 0x0434  ALG - ok
11:26:55.0249 0x0434  [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\WINDOWS\system32\AUInstallAgent.dll
11:26:55.0287 0x0434  AllUserInstallAgent - ok
11:26:55.0343 0x0434  [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
11:26:55.0394 0x0434  AmdK8 - ok
11:26:55.0848 0x0434  [ 8DC532B5BF820E48194C6AFC8862FCBC, AA8040A2EC9004FBED4B94166B2DD5A4F5BC835EBADD6199651C856A695AA3E1 ] amdkmdag        C:\WINDOWS\system32\DRIVERS\atikmdag.sys
11:26:56.0499 0x0434  amdkmdag - ok
11:26:56.0540 0x0434  [ AA48FEABA50C2DED9C485DFDBA044E40, AE52933B85494F51E4F1524489BEAC4C16F80D09BC8974D97F792D94EAD2A231 ] amdkmdap        C:\WINDOWS\system32\DRIVERS\atikmpag.sys
11:26:56.0586 0x0434  amdkmdap - ok
11:26:56.0603 0x0434  [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
11:26:56.0634 0x0434  AmdPPM - ok
11:26:56.0674 0x0434  [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
11:26:56.0686 0x0434  amdsata - ok
11:26:56.0732 0x0434  [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
11:26:56.0750 0x0434  amdsbs - ok
11:26:56.0762 0x0434  [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
11:26:56.0772 0x0434  amdxata - ok
11:26:56.0808 0x0434  [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID           C:\WINDOWS\system32\drivers\appid.sys
11:26:56.0833 0x0434  AppID - ok
11:26:56.0877 0x0434  [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
11:26:56.0913 0x0434  AppIDSvc - ok
11:26:56.0949 0x0434  [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo         C:\WINDOWS\System32\appinfo.dll
11:26:56.0978 0x0434  Appinfo - ok
11:26:57.0081 0x0434  [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
11:26:57.0096 0x0434  Apple Mobile Device - ok
11:26:57.0152 0x0434  [ 2D14788C5D0836292BEB27BBE109BE56, D032FDBD9E1708F77348655DE00DB395E38EB27A7EC3FB2EF3BA07D22CBC1402 ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
11:26:57.0185 0x0434  AppMgmt - ok
11:26:57.0220 0x0434  [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc             C:\WINDOWS\system32\drivers\arc.sys
11:26:57.0235 0x0434  arc - ok
11:26:57.0251 0x0434  [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
11:26:57.0265 0x0434  arcsas - ok
11:26:57.0285 0x0434  [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
11:26:57.0309 0x0434  AsyncMac - ok
11:26:57.0344 0x0434  [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
11:26:57.0363 0x0434  atapi - ok
11:26:57.0532 0x0434  [ DECE3E2832F125A41A02FB59F4C54EEA, 2994024E5C295E9FDF4C6C0A8F2B17C07C158AD1567BEDA46A482C6C08F460BC ] athr            C:\WINDOWS\system32\DRIVERS\athrx.sys
11:26:57.0689 0x0434  athr - ok
11:26:57.0731 0x0434  [ BCD7A47EF587DC00DD61D12D9C2D1E44, 95BC9AC8BA8A86DB5C7A6317002BD9872F193B401A0C58DF252DCF3D4A7541E2 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
11:26:57.0762 0x0434  AudioEndpointBuilder - ok
11:26:57.0845 0x0434  [ 599B3F685A263A114FFAF3BE29C49C75, 579E9561BA8537888E061E303F3F89E2E6F8B8DED74369C3767DB10B35CD45E8 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
11:26:57.0892 0x0434  Audiosrv - ok
11:26:57.0988 0x0434  [ 0D2F8F4055903A762AD46204E5A42E86, D3270039E4F066C69D844060388D3F895137C37C0FBE4C106BE1C71AE9DBC17A ] avp             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
11:26:58.0053 0x0434  avp - ok
11:26:58.0106 0x0434  [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
11:26:58.0146 0x0434  AxInstSV - ok
11:26:58.0213 0x0434  [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
11:26:58.0242 0x0434  b06bdrv - ok
11:26:58.0285 0x0434  [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
11:26:58.0325 0x0434  BasicDisplay - ok
11:26:58.0368 0x0434  [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
11:26:58.0399 0x0434  BasicRender - ok
11:26:58.0539 0x0434  [ 988D01E8AE8C80B413C5E01C89A1886E, 24CC3A984CAFBFE730BB6E45152E3B62B0E9D9704982E7144277A6750FBC5FC5 ] BcmBtRSupport   C:\WINDOWS\system32\BtwRSupportService.exe
11:26:58.0601 0x0434  BcmBtRSupport - ok
11:26:58.0643 0x0434  [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
11:26:58.0687 0x0434  BDESVC - ok
11:26:58.0721 0x0434  [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
11:26:58.0750 0x0434  Beep - ok
11:26:58.0834 0x0434  [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] BFE             C:\WINDOWS\System32\bfe.dll
11:26:58.0869 0x0434  BFE - ok
11:26:58.0933 0x0434  [ 65608C44E71D7BA056C9EFCD8A00A7FE, A6B581A8354C7E2902AA1FFDD87C9465EFA2CD75A920CE3098E774292E4825CE ] BingDesktopUpdate C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
11:26:58.0964 0x0434  BingDesktopUpdate - ok
11:26:59.0081 0x0434  [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS            C:\WINDOWS\System32\qmgr.dll
11:26:59.0199 0x0434  BITS - ok
11:26:59.0304 0x0434  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:26:59.0331 0x0434  Bonjour Service - ok
11:26:59.0349 0x0434  [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
11:26:59.0377 0x0434  bowser - ok
11:26:59.0422 0x0434  [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
11:26:59.0463 0x0434  BrokerInfrastructure - ok
11:26:59.0506 0x0434  [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser         C:\WINDOWS\System32\browser.dll
11:26:59.0547 0x0434  Browser - ok
11:26:59.0590 0x0434  [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
11:26:59.0622 0x0434  BthAvrcpTg - ok
11:26:59.0658 0x0434  [ A8B20D852B07AE19A13B5D47EC4E4C3B, 86571C9E2BA15BB169CAB2D24C4D0598154C02FD173638CAFC685A7F6B09472D ] BthEnum         C:\WINDOWS\System32\drivers\BthEnum.sys
11:26:59.0686 0x0434  BthEnum - ok
11:26:59.0723 0x0434  [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
11:26:59.0763 0x0434  BthHFEnum - ok
11:26:59.0801 0x0434  [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
11:26:59.0828 0x0434  bthhfhid - ok
11:26:59.0873 0x0434  [ 033916CE8784A848B9A3D686B7F66D97, B4D0514D59646CF6B70D4FA488CF95C38EA38CC5C509329CC8753E897C640AFA ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
11:26:59.0917 0x0434  BTHMODEM - ok
11:26:59.0963 0x0434  [ 091BB978E9504D0AD14586929431A957, ACED02B879026A228E35F40847C210BC30A5AFC948FFE922DB21663E4A8DFF1D ] BthPan          C:\WINDOWS\system32\DRIVERS\bthpan.sys
11:26:59.0997 0x0434  BthPan - ok
11:27:00.0087 0x0434  [ 13795CAA34239D97A7211E7F9D96E012, C4F3402B063A7CFCE386D1AE9255975A199164BA9E7DCDB6129725213A0642B1 ] BTHPORT         C:\WINDOWS\System32\Drivers\BTHport.sys
11:27:00.0140 0x0434  BTHPORT - ok
11:27:00.0172 0x0434  [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv         C:\WINDOWS\system32\bthserv.dll
11:27:00.0203 0x0434  bthserv - ok
11:27:00.0240 0x0434  [ 1F715957F5236D30B6020A19A4271F6A, C06B637C2C6919E2DE1055AE249AE3EAF7B4890799F22BF5757CC10CEF145043 ] BTHUSB          C:\WINDOWS\System32\Drivers\BTHUSB.sys
11:27:00.0270 0x0434  BTHUSB - ok
11:27:00.0319 0x0434  [ D3848CBF21C75D46321838634B9442F9, 1BB0AD412371CD8DA89D952EFE9156516B720B56074581CD645512244421292E ] cbfs4           C:\WINDOWS\system32\drivers\cbfs4.sys
11:27:00.0339 0x0434  cbfs4 - ok
11:27:00.0384 0x0434  [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
11:27:00.0419 0x0434  cdfs - ok
11:27:00.0448 0x0434  [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
11:27:00.0489 0x0434  cdrom - ok
11:27:00.0534 0x0434  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
11:27:00.0574 0x0434  CertPropSvc - ok
11:27:00.0610 0x0434  [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
11:27:00.0659 0x0434  circlass - ok
11:27:00.0690 0x0434  [ 9905168708DB68849B879B5548F68AB3, B7A495E57B9398704988DC472126CBC5B8D76761A34F51732FBF6CC88E3AB79A ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
11:27:00.0710 0x0434  CLFS - ok
11:27:00.0757 0x0434  [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
11:27:00.0786 0x0434  CmBatt - ok
11:27:00.0855 0x0434  [ E708BFF0473EC6B271EA46B65B16CA56, 2B4C661F7C5A4395CA4204122A1C3C8AA766B56C3D01CD8BAAFA18F71FC7B591 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
11:27:00.0887 0x0434  CNG - ok
11:27:00.0926 0x0434  [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
11:27:00.0974 0x0434  CompositeBus - ok
11:27:00.0979 0x0434  COMSysApp - ok
11:27:01.0015 0x0434  [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
11:27:01.0026 0x0434  condrv - ok
11:27:01.0061 0x0434  [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
11:27:01.0091 0x0434  CryptSvc - ok
11:27:01.0143 0x0434  [ F2C69C3D98249DE14D4B2832516D4FD5, 5F622A61A99202802B35532036CFCFDFB1FDEC32465BA8CCAB4C4FAFA336FC2A ] CSC             C:\WINDOWS\system32\drivers\csc.sys
11:27:01.0180 0x0434  CSC - ok
11:27:01.0263 0x0434  [ 22CCB6AFF617AAC6121DF6CDA5ABF3F4, 7F6F888CF4D7EF93144A791891E41858F7C0CDDC0B65ED09B9CD55EE3734FCCF ] CscService      C:\WINDOWS\System32\cscsvc.dll
11:27:01.0319 0x0434  CscService - ok
11:27:01.0367 0x0434  [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam             C:\WINDOWS\system32\drivers\dam.sys
11:27:01.0388 0x0434  dam - ok
11:27:01.0452 0x0434  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
11:27:01.0523 0x0434  DcomLaunch - ok
11:27:01.0575 0x0434  [ C8650D1F61149AA546BDBC99172EBBC1, D9592ED1B6F23B6EC76A0B93635B6E38702311B0A6982F0F9DEC37FCDAF1288B ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
11:27:01.0623 0x0434  defragsvc - ok
11:27:01.0684 0x0434  [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\WINDOWS\system32\das.dll
11:27:01.0738 0x0434  DeviceAssociationService - ok
11:27:01.0779 0x0434  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
11:27:01.0818 0x0434  DeviceInstall - ok
11:27:01.0858 0x0434  [ 09D9EB9E7898F8E6561473A20CC808B9, 0F511593D36084843E5138AF6D55FE08D77803968AE12A236A02368DB364347E ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
11:27:01.0890 0x0434  Dfsc - ok
11:27:01.0930 0x0434  [ 41AC348DBD378F618CB4FDEE54270692, A4080C9FF314F52C52E2207E5F7B745A003E931FA42E67E742D34477B5CC0166 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
11:27:01.0939 0x0434  dg_ssudbus - ok
11:27:02.0011 0x0434  [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
11:27:02.0037 0x0434  Dhcp - ok
11:27:02.0084 0x0434  [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache        C:\WINDOWS\system32\drivers\discache.sys
11:27:02.0116 0x0434  discache - ok
11:27:02.0154 0x0434  [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk            C:\WINDOWS\system32\drivers\disk.sys
11:27:02.0166 0x0434  disk - ok
11:27:02.0178 0x0434  [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
11:27:02.0206 0x0434  dmvsc - ok
11:27:02.0246 0x0434  [ 066B9710B36AB550E01EEFCA52155968, DCA9F3F4856A6866D3F5A2EEE34E96A83F40198DB0B5AC6381A7568DE1F56FAB ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
11:27:02.0278 0x0434  Dnscache - ok
11:27:02.0321 0x0434  [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
11:27:02.0374 0x0434  dot3svc - ok
11:27:02.0420 0x0434  [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS             C:\WINDOWS\system32\dps.dll
11:27:02.0453 0x0434  DPS - ok
11:27:02.0487 0x0434  [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
11:27:02.0511 0x0434  drmkaud - ok
11:27:02.0547 0x0434  [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
11:27:02.0583 0x0434  DsmSvc - ok
11:27:02.0688 0x0434  [ E6AF4DF1817953D73C519B17CF849756, 26A90EB368A3F572086F223ABED87B8FC6F998AE401C9E52BEB5EE76AB052702 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
11:27:02.0751 0x0434  DXGKrnl - ok
11:27:02.0797 0x0434  [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost         C:\WINDOWS\System32\eapsvc.dll
11:27:02.0830 0x0434  Eaphost - ok
11:27:02.0984 0x0434  [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
11:27:03.0158 0x0434  ebdrv - ok
11:27:03.0192 0x0434  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] EFS             C:\WINDOWS\System32\lsass.exe
11:27:03.0228 0x0434  EFS - ok
11:27:03.0343 0x0434  [ 4B84E647C934EDFF7F28C4B91A5C0864, 909770C436273CFCE606F5FDE5D66AA2A826C85DF03F0CDDAED3D2300E3ADBF7 ] ehRecvr         C:\WINDOWS\ehome\ehRecvr.exe
11:27:03.0394 0x0434  ehRecvr - ok
11:27:03.0438 0x0434  [ 72781EC7A97E44B9651550D7A83D1B96, E587687BF27DE23326EBFC9E38D461CCE10D3DDA35F7D586ED32A4788AE96718 ] ehSched         C:\WINDOWS\ehome\ehsched.exe
11:27:03.0464 0x0434  ehSched - ok
11:27:03.0502 0x0434  [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
11:27:03.0514 0x0434  EhStorClass - ok
11:27:03.0539 0x0434  [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
11:27:03.0552 0x0434  EhStorTcgDrv - ok
11:27:03.0571 0x0434  [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
11:27:03.0594 0x0434  ErrDev - ok
11:27:03.0672 0x0434  [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem     C:\WINDOWS\system32\es.dll
11:27:03.0708 0x0434  EventSystem - ok
11:27:03.0760 0x0434  [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
11:27:03.0797 0x0434  exfat - ok
11:27:03.0819 0x0434  [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
11:27:03.0835 0x0434  fastfat - ok
11:27:03.0913 0x0434  [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax             C:\WINDOWS\system32\fxssvc.exe
11:27:03.0946 0x0434  Fax - ok
11:27:03.0959 0x0434  [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
11:27:03.0994 0x0434  fdc - ok
11:27:04.0024 0x0434  [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
11:27:04.0065 0x0434  fdPHost - ok
11:27:04.0098 0x0434  [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
11:27:04.0134 0x0434  FDResPub - ok
11:27:04.0175 0x0434  [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
11:27:04.0210 0x0434  fhsvc - ok
11:27:04.0240 0x0434  [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
11:27:04.0264 0x0434  FileInfo - ok
11:27:04.0324 0x0434  [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
11:27:04.0374 0x0434  Filetrace - ok
11:27:04.0483 0x0434  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
11:27:04.0537 0x0434  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
11:27:06.0880 0x0434  Detect skipped due to KSN trusted
11:27:06.0880 0x0434  FLEXnet Licensing Service - ok
11:27:06.0926 0x0434  [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
11:27:06.0960 0x0434  flpydisk - ok
11:27:07.0048 0x0434  [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
11:27:07.0077 0x0434  FltMgr - ok
11:27:07.0167 0x0434  [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache       C:\WINDOWS\system32\FntCache.dll
11:27:07.0240 0x0434  FontCache - ok
11:27:07.0389 0x0434  [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:27:07.0410 0x0434  FontCache3.0.0.0 - ok
11:27:07.0435 0x0434  [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
11:27:07.0448 0x0434  FsDepends - ok
11:27:07.0483 0x0434  [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
11:27:07.0502 0x0434  Fs_Rec - ok
11:27:07.0564 0x0434  [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
11:27:07.0591 0x0434  fvevol - ok
11:27:07.0627 0x0434  [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM           C:\WINDOWS\System32\drivers\fxppm.sys
11:27:07.0649 0x0434  FxPPM - ok
11:27:07.0696 0x0434  [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
11:27:07.0716 0x0434  gagp30kx - ok
11:27:07.0785 0x0434  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
11:27:07.0798 0x0434  GEARAspiWDM - ok
11:27:07.0849 0x0434  [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
11:27:07.0881 0x0434  gencounter - ok
11:27:07.0921 0x0434  [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
11:27:07.0940 0x0434  GPIOClx0101 - ok
11:27:08.0007 0x0434  [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
11:27:08.0067 0x0434  gpsvc - ok
11:27:08.0134 0x0434  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:27:08.0152 0x0434  gupdate - ok
11:27:08.0162 0x0434  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:27:08.0175 0x0434  gupdatem - ok
11:27:08.0211 0x0434  [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys
11:27:08.0242 0x0434  HdAudAddService - ok
11:27:08.0282 0x0434  [ 7D87B5B6C7188D553E11B59DC7F0B111, FC633DB71E1D72E8AD8F89BBB54324CC6ED17F5594EF55DD0BDB58EE1F601FF5 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
11:27:08.0316 0x0434  HDAudBus - ok
11:27:08.0352 0x0434  [ B6AC71AAA2B10848F57FC49D55A651AF, 4FAD833654E86F9FAF972AC8AF87FD4A9A765B26B96F096BBD63506B5D521A91 ] HECIx64         C:\WINDOWS\System32\drivers\HECIx64.sys
11:27:08.0361 0x0434  HECIx64 - ok
11:27:08.0401 0x0434  [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
11:27:08.0412 0x0434  HidBatt - ok
11:27:08.0434 0x0434  [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
11:27:08.0465 0x0434  HidBth - ok
11:27:08.0503 0x0434  [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
11:27:08.0542 0x0434  hidi2c - ok
11:27:08.0593 0x0434  [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
11:27:08.0637 0x0434  HidIr - ok
11:27:08.0666 0x0434  [ 46BBE8EA221461A65F18A078528F4B2C, C0B0D35E2A6C750E5505156694F41F987AB548449F6C9DB1EEEAF12E5F146AD7 ] hidkmdf         C:\WINDOWS\System32\drivers\hidkmdf.sys
11:27:08.0672 0x0434  hidkmdf - ok
11:27:08.0709 0x0434  [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv         C:\WINDOWS\system32\hidserv.dll
11:27:08.0744 0x0434  hidserv - ok
11:27:08.0783 0x0434  [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
11:27:08.0803 0x0434  HidUsb - ok
11:27:08.0840 0x0434  [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
11:27:08.0873 0x0434  hkmsvc - ok
11:27:08.0911 0x0434  [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
11:27:08.0951 0x0434  HomeGroupListener - ok
11:27:09.0003 0x0434  [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
11:27:09.0031 0x0434  HomeGroupProvider - ok
11:27:09.0070 0x0434  [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
11:27:09.0081 0x0434  HpSAMD - ok
11:27:09.0146 0x0434  [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
11:27:09.0196 0x0434  HTTP - ok
11:27:09.0236 0x0434  [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
11:27:09.0253 0x0434  hwpolicy - ok
11:27:09.0291 0x0434  [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
11:27:09.0316 0x0434  hyperkbd - ok
11:27:09.0330 0x0434  [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
11:27:09.0355 0x0434  HyperVideo - ok
11:27:09.0382 0x0434  [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
11:27:09.0409 0x0434  i8042prt - ok
11:27:09.0459 0x0434  [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
11:27:09.0489 0x0434  iaStorV - ok
11:27:09.0526 0x0434  [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp           C:\WINDOWS\system32\drivers\iirsp.sys
11:27:09.0547 0x0434  iirsp - ok
11:27:09.0619 0x0434  [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
11:27:09.0685 0x0434  IKEEXT - ok
11:27:09.0719 0x0434  [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
11:27:09.0729 0x0434  intelide - ok
11:27:09.0768 0x0434  [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
11:27:09.0802 0x0434  intelppm - ok
11:27:09.0835 0x0434  [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
11:27:09.0868 0x0434  IpFilterDriver - ok
11:27:09.0954 0x0434  [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
11:27:10.0015 0x0434  iphlpsvc - ok
11:27:10.0043 0x0434  [ 6E98A046A12AA113F8898AA5D612BD6E, 28816CC1F03F2BFBF099C087C0BB6949E959F44C888DD2D0528FF7ED5D665ECF ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
11:27:10.0080 0x0434  IPMIDRV - ok
11:27:10.0113 0x0434  [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
11:27:10.0151 0x0434  IPNAT - ok
11:27:10.0223 0x0434  [ 842D1EDD0F2A6E0E6631BB96BAAA01DE, 9CDD0B99F2C5DAD573A9EA8D5AB2DBFD7A941454CBBA5BFE34E49F2D4EE96A90 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
11:27:10.0253 0x0434  iPod Service - ok
11:27:10.0294 0x0434  [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
11:27:10.0317 0x0434  IRENUM - ok
11:27:10.0351 0x0434  [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
11:27:10.0361 0x0434  isapnp - ok
11:27:10.0414 0x0434  [ 69C8BF0BC2B0EA10F130F4D3104DC2EF, 8FFF92828C3DC20F0F42C42E58A03B59A4E0187963F728DC618C9595FB2D0239 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
11:27:10.0440 0x0434  iScsiPrt - ok
11:27:10.0500 0x0434  [ BD5BF20EC242E003A2F570B8754A56D1, B4B3492222E98BF8E6EC453E727187FF4AA50A508D1E88A0CBBD5C46355AE492 ] ivusb           C:\WINDOWS\System32\drivers\ivusb.sys
11:27:10.0706 0x0434  ivusb - ok
11:27:10.0743 0x0434  [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
11:27:10.0764 0x0434  kbdclass - ok
11:27:10.0814 0x0434  [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
11:27:10.0850 0x0434  kbdhid - ok
11:27:10.0871 0x0434  [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic           C:\WINDOWS\system32\DRIVERS\kdnic.sys
11:27:10.0906 0x0434  kdnic - ok
11:27:10.0926 0x0434  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] KeyIso          C:\WINDOWS\system32\lsass.exe
11:27:10.0950 0x0434  KeyIso - ok
11:27:10.0994 0x0434  [ 795EC29BA21F1D948FD6FD740C00B599, 780900717A812C5DB78C67057010BD62DF2C756C087599A6F8C67CB4EFA7518C ] kl1             C:\WINDOWS\system32\DRIVERS\kl1.sys
11:27:11.0016 0x0434  kl1 - ok
11:27:11.0034 0x0434  [ 2248A9F2B7704271C72E306001C7FBE0, FEC8E10F4FAB332E36C1C5801396174B4CE21186431A2A234CE49695C4674ACA ] klelam          C:\WINDOWS\system32\DRIVERS\klelam.sys
11:27:11.0044 0x0434  klelam - ok
11:27:11.0075 0x0434  [ BC996B5D96CB7463268DE67E2D99F496, F2763242B69B1290FCAF54B6353BC1469C47D774724249D4CB9BFEC100890970 ] klflt           C:\WINDOWS\system32\DRIVERS\klflt.sys
11:27:11.0087 0x0434  klflt - ok
11:27:11.0172 0x0434  [ E8D6C80D4E11383CEE269F9C27E6464C, 5E9EAD64AE221AE8BF87730A7FDDF8023805184D12A058A147ECD887FA3D3012 ] KLIF            C:\WINDOWS\system32\DRIVERS\klif.sys
11:27:11.0195 0x0434  KLIF - ok
11:27:11.0236 0x0434  [ B6822DEFE601629F19E0A2D7F0D623F2, FD71A2AA3FC4698B5436D185E2F2A3EB6A111AE8F35606E1658E2D18CE744F13 ] KLIM6           C:\WINDOWS\system32\DRIVERS\klim6.sys
11:27:11.0250 0x0434  KLIM6 - ok
11:27:11.0275 0x0434  [ B45DEC5BD71885E833DF3D837CE7C606, 8A81802122EE6BD791E36F9F27D921C9BC4D5B6604C0A79F9F1D806AD44B9869 ] klkbdflt        C:\WINDOWS\system32\DRIVERS\klkbdflt.sys
11:27:11.0289 0x0434  klkbdflt - ok
11:27:11.0302 0x0434  [ 8849D8F6259D3494E8C5C9482EE40A08, 62C60FD28916407AEF3C4F8B8FF7E5FCDFAE261E772E672E3E06F0D0CA6D6729 ] klmouflt        C:\WINDOWS\system32\DRIVERS\klmouflt.sys
11:27:11.0316 0x0434  klmouflt - ok
11:27:11.0358 0x0434  [ 8C0EC95AD65A0DE3D6C040591D02BF02, 272FB83752B73684FA7BDBE256FAFD56138E4755AAEFED9E7EF8F0E3D0ACFAF2 ] klpd            C:\WINDOWS\system32\DRIVERS\klpd.sys
11:27:11.0366 0x0434  klpd - ok
11:27:11.0406 0x0434  [ EAAF7E0936CC5474F433B684A2C68CF2, 5E5E5D324000F2209C7E32DC965FBD822850B4E1351887A93B50FB79844BF781 ] klwfp           C:\WINDOWS\system32\DRIVERS\klwfp.sys
11:27:11.0415 0x0434  klwfp - ok
11:27:11.0444 0x0434  [ 91BC1C5B00275A4D7FD669EFF0DDEB2A, B745518E1916441A49565478EA77C8DBC784E7B4D9DAD1EA1F648ED1727F413D ] kneps           C:\WINDOWS\system32\DRIVERS\kneps.sys
11:27:11.0455 0x0434  kneps - ok
11:27:11.0493 0x0434  [ DFA480F6DED551464F3A5B959F437800, C07AB6F28A09FCBE11EECAD03B06CEAE1016EC24031FCA0C092639E90FBA84CF ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
11:27:11.0505 0x0434  KSecDD - ok
11:27:11.0557 0x0434  [ 127FB0AAD232BAAD2C9BBACD374F4FC5, 3BC56F6B4374062C96149D69ACE053DF81A278F0361599F5A2F3DB1F76F0AD68 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
11:27:11.0572 0x0434  KSecPkg - ok
11:27:11.0603 0x0434  [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
11:27:11.0626 0x0434  ksthunk - ok
11:27:11.0683 0x0434  [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
11:27:11.0719 0x0434  KtmRm - ok
11:27:11.0765 0x0434  [ 256EE31588257E8A555DBFAA13F1908E, B6817F632EDEA483E35BF26846DCDD4E95E860620959179B2A5D8AD7EEDDB126 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
11:27:11.0788 0x0434  LanmanServer - ok
11:27:11.0844 0x0434  [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
11:27:11.0876 0x0434  LanmanWorkstation - ok
11:27:11.0897 0x0434  [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
11:27:11.0912 0x0434  lltdio - ok
11:27:11.0965 0x0434  [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
11:27:12.0009 0x0434  lltdsvc - ok
11:27:12.0025 0x0434  [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
11:27:12.0046 0x0434  lmhosts - ok
11:27:12.0095 0x0434  [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
11:27:12.0107 0x0434  LSI_SAS - ok
11:27:12.0144 0x0434  [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
11:27:12.0155 0x0434  LSI_SAS2 - ok
11:27:12.0174 0x0434  [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI        C:\WINDOWS\system32\drivers\lsi_scsi.sys
11:27:12.0186 0x0434  LSI_SCSI - ok
11:27:12.0208 0x0434  [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
11:27:12.0220 0x0434  LSI_SSS - ok
11:27:12.0268 0x0434  [ A57BA284F5996FFD32DCDBC41A4657DB, 2106B83873A824BC83EF42FAC9DD9A0F741209535A84AE65EA8E786519920043 ] LSM             C:\WINDOWS\System32\lsm.dll
11:27:12.0314 0x0434  LSM - ok
11:27:12.0368 0x0434  [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
11:27:12.0409 0x0434  luafv - ok
11:27:12.0431 0x0434  [ 4448CCEA974F0B15A00EA33FCEDFC062, EAA5B156480F6F5B11D4B358489714AF7DB77EB58B841BF0AC284A17B4288CC9 ] Mcx2Svc         C:\WINDOWS\system32\Mcx2Svc.dll
11:27:12.0474 0x0434  Mcx2Svc - ok
11:27:12.0500 0x0434  [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
11:27:12.0521 0x0434  megasas - ok
11:27:12.0570 0x0434  [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR          C:\WINDOWS\system32\drivers\MegaSR.sys
11:27:12.0596 0x0434  MegaSR - ok
11:27:12.0656 0x0434  Microsoft SharePoint Workspace Audit Service - ok
11:27:12.0691 0x0434  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS           C:\WINDOWS\system32\mmcss.dll
11:27:12.0715 0x0434  MMCSS - ok
11:27:12.0756 0x0434  [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem           C:\WINDOWS\system32\drivers\modem.sys
11:27:12.0801 0x0434  Modem - ok
11:27:12.0845 0x0434  [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
11:27:12.0887 0x0434  monitor - ok
11:27:12.0924 0x0434  [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
11:27:12.0938 0x0434  mouclass - ok
11:27:12.0980 0x0434  [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
11:27:12.0992 0x0434  mouhid - ok
11:27:13.0002 0x0434  [ 89D263DBF08119CE16273991C120D6DD, 9771EDAD266F0E234E71DFB6792F396710E051F2ADCA5CDADEBBD2790D0E6054 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
11:27:13.0014 0x0434  mountmgr - ok
11:27:13.0058 0x0434  [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
11:27:13.0085 0x0434  mpsdrv - ok
11:27:13.0156 0x0434  [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
11:27:13.0209 0x0434  MpsSvc - ok
11:27:13.0278 0x0434  [ 3D70147F55F1EC84EB9139ED7FFE48BC, 12429C2FDDDA13815F0E18F9009011AA5360955759A23A38175543F480CB92EF ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
11:27:13.0306 0x0434  MRxDAV - ok
11:27:13.0346 0x0434  [ 93179D48066918323628CB016D8C94DC, FE110BF7A10EDD1DF7F6B933D373FCA51F37413282EBC4187E7C9B1965186BCC ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
11:27:13.0369 0x0434  mrxsmb - ok
11:27:13.0387 0x0434  [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
11:27:13.0406 0x0434  mrxsmb10 - ok
11:27:13.0426 0x0434  [ 5C7DD2E5759FFCCD2C7341C1B90F2B26, 9822FA53E6067C0E39B7A3A3F1E88719D5D8B055D86FF894F0475B158289EA45 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
11:27:13.0464 0x0434  mrxsmb20 - ok
11:27:13.0481 0x0434  [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
11:27:13.0510 0x0434  MsBridge - ok
11:27:13.0546 0x0434  [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC           C:\WINDOWS\System32\msdtc.exe
11:27:13.0576 0x0434  MSDTC - ok
11:27:13.0607 0x0434  [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
11:27:13.0636 0x0434  Msfs - ok
11:27:13.0673 0x0434  [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
11:27:13.0686 0x0434  msgpiowin32 - ok
11:27:13.0719 0x0434  [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
11:27:13.0747 0x0434  mshidkmdf - ok
11:27:13.0774 0x0434  [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
11:27:13.0801 0x0434  mshidumdf - ok
11:27:13.0825 0x0434  [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
11:27:13.0835 0x0434  msisadrv - ok
11:27:13.0873 0x0434  [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
11:27:13.0911 0x0434  MSiSCSI - ok
11:27:13.0916 0x0434  msiserver - ok
11:27:13.0939 0x0434  [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
11:27:13.0971 0x0434  MSKSSRV - ok
11:27:14.0009 0x0434  [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
11:27:14.0024 0x0434  MsLldp - ok
11:27:14.0038 0x0434  [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
11:27:14.0052 0x0434  MSPCLOCK - ok
11:27:14.0099 0x0434  [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
11:27:14.0139 0x0434  MSPQM - ok
11:27:14.0208 0x0434  [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
11:27:14.0241 0x0434  MsRPC - ok
11:27:14.0274 0x0434  [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
11:27:14.0285 0x0434  mssmbios - ok
11:27:14.0304 0x0434  [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
11:27:14.0339 0x0434  MSTEE - ok
11:27:14.0370 0x0434  [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
11:27:14.0391 0x0434  MTConfig - ok
11:27:14.0437 0x0434  [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
11:27:14.0466 0x0434  Mup - ok
11:27:14.0492 0x0434  [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
11:27:14.0503 0x0434  mvumis - ok
11:27:14.0545 0x0434  [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent        C:\WINDOWS\system32\qagentRT.dll
11:27:14.0594 0x0434  napagent - ok
11:27:14.0653 0x0434  [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
11:27:14.0683 0x0434  NativeWifiP - ok
11:27:14.0698 0x0434  [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
11:27:14.0715 0x0434  NcaSvc - ok
11:27:14.0753 0x0434  [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
11:27:14.0783 0x0434  NcdAutoSetup - ok
11:27:14.0854 0x0434  [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
11:27:14.0901 0x0434  NDIS - ok
11:27:14.0918 0x0434  [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap         C:\WINDOWS\system32\DRIVERS\ndiscap.sys
11:27:14.0945 0x0434  NdisCap - ok
11:27:14.0988 0x0434  [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
11:27:15.0013 0x0434  NdisImPlatform - ok
11:27:15.0053 0x0434  [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
11:27:15.0064 0x0434  NdisTapi - ok
11:27:15.0083 0x0434  [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
11:27:15.0106 0x0434  Ndisuio - ok
11:27:15.0150 0x0434  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:27:15.0181 0x0434  NdisWan - ok
11:27:15.0192 0x0434  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:27:15.0209 0x0434  NDISWANLEGACY - ok
11:27:15.0274 0x0434  [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
11:27:15.0318 0x0434  NDProxy - ok
11:27:15.0358 0x0434  [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
11:27:15.0379 0x0434  Ndu - ok
11:27:15.0398 0x0434  [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
11:27:15.0425 0x0434  NetBIOS - ok
11:27:15.0461 0x0434  [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
11:27:15.0511 0x0434  NetBT - ok
11:27:15.0526 0x0434  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] Netlogon        C:\WINDOWS\system32\lsass.exe
11:27:15.0537 0x0434  Netlogon - ok
11:27:15.0589 0x0434  [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman          C:\WINDOWS\System32\netman.dll
11:27:15.0630 0x0434  Netman - ok
11:27:15.0678 0x0434  [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
11:27:15.0723 0x0434  netprofm - ok
11:27:15.0780 0x0434  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:27:15.0880 0x0434  NetTcpPortSharing - ok
11:27:15.0919 0x0434  [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960         C:\WINDOWS\system32\drivers\nfrd960.sys
11:27:15.0941 0x0434  nfrd960 - ok
11:27:15.0996 0x0434  [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
11:27:16.0019 0x0434  NlaSvc - ok
11:27:16.0047 0x0434  [ 5FE6F8C05F0769BBB74AFAC11453B182, ACF6026EF8D038B73484AE59FBD03559E1263CE134473D7A8C3F97CF71BC640C ] nmwcd           C:\WINDOWS\system32\drivers\ccdcmbx64.sys
11:27:16.0092 0x0434  nmwcd - ok
11:27:16.0131 0x0434  [ 73C929945C0850B8D1FE2FEA05FDF05D, 665FBA777E5EF3F28828D19F2BBCCB778C1C6105BD830C1E29A1C4739663F0D3 ] nmwcdc          C:\WINDOWS\system32\drivers\ccdcmbox64.sys
11:27:16.0358 0x0434  nmwcdc - ok
11:27:16.0384 0x0434  [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
11:27:16.0402 0x0434  Npfs - ok
11:27:16.0443 0x0434  [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
11:27:16.0475 0x0434  npsvctrig - ok
11:27:16.0517 0x0434  [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi             C:\WINDOWS\system32\nsisvc.dll
11:27:16.0554 0x0434  nsi - ok
11:27:16.0597 0x0434  [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
11:27:16.0631 0x0434  nsiproxy - ok
11:27:16.0744 0x0434  [ 76929F4A69E425911A63B407E26C2589, 17896DB6EDEF2637D159432DB61E8B5FA2F4F54B5F50BCD6215827C321ED2C2A ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
11:27:16.0810 0x0434  Ntfs - ok
11:27:16.0858 0x0434  [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null            C:\WINDOWS\system32\drivers\Null.sys
11:27:16.0893 0x0434  Null - ok
11:27:16.0937 0x0434  [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
11:27:16.0964 0x0434  nvraid - ok
11:27:16.0991 0x0434  [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
11:27:17.0008 0x0434  nvstor - ok
11:27:17.0026 0x0434  [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
11:27:17.0039 0x0434  nv_agp - ok
11:27:17.0111 0x0434  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:27:17.0133 0x0434  ose - ok
11:27:17.0358 0x0434  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:27:17.0486 0x0434  osppsvc - ok
11:27:17.0566 0x0434  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
11:27:17.0612 0x0434  p2pimsvc - ok
11:27:17.0646 0x0434  [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
11:27:17.0692 0x0434  p2psvc - ok
11:27:17.0728 0x0434  [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport         C:\WINDOWS\System32\drivers\parport.sys
11:27:17.0759 0x0434  Parport - ok
11:27:17.0794 0x0434  [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
11:27:17.0806 0x0434  partmgr - ok
11:27:17.0858 0x0434  [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
11:27:17.0903 0x0434  PcaSvc - ok
11:27:17.0941 0x0434  [ 3FDE033DFB0D07F8B7D5C9A3044AA121, 2C23B4FA34BA3060884B0168A830DD395A3853855CD6DF4065FBB303DFB4A87E ] pccsmcfd        C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys
11:27:17.0974 0x0434  pccsmcfd - ok
11:27:18.0019 0x0434  [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci             C:\WINDOWS\system32\drivers\pci.sys
11:27:18.0046 0x0434  pci - ok
11:27:18.0064 0x0434  [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
11:27:18.0074 0x0434  pciide - ok
11:27:18.0111 0x0434  [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
11:27:18.0129 0x0434  pcmcia - ok
11:27:18.0168 0x0434  [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
11:27:18.0188 0x0434  pcw - ok
11:27:18.0232 0x0434  [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
11:27:18.0254 0x0434  pdc - ok
11:27:18.0316 0x0434  [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
11:27:18.0353 0x0434  PEAUTH - ok
11:27:18.0489 0x0434  [ DF0D9BDCB600913F40FF125BF8CE1979, 63544C3CEAF47FEEB761FD25BCAE53610C7AD65B7B2295C49D72A7C3C78A376D ] PeerDistSvc     C:\WINDOWS\system32\peerdistsvc.dll
11:27:18.0611 0x0434  PeerDistSvc - ok
11:27:18.0719 0x0434  [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
11:27:18.0756 0x0434  PerfHost - ok
11:27:18.0861 0x0434  [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla             C:\WINDOWS\system32\pla.dll
11:27:18.0925 0x0434  pla - ok
11:27:18.0969 0x0434  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
11:27:18.0983 0x0434  PlugPlay - ok
11:27:19.0011 0x0434  [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
11:27:19.0038 0x0434  PNRPAutoReg - ok
11:27:19.0070 0x0434  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
11:27:19.0090 0x0434  PNRPsvc - ok
11:27:19.0155 0x0434  [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
11:27:19.0189 0x0434  PolicyAgent - ok
11:27:19.0229 0x0434  [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power           C:\WINDOWS\system32\umpo.dll
11:27:19.0260 0x0434  Power - ok
11:27:19.0301 0x0434  [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
11:27:19.0344 0x0434  PptpMiniport - ok
11:27:19.0610 0x0434  [ C2D3B3D0060619D5E03E696BD56FF59F, 155954F16B6F9B51BA16F43F1AE6F977B1EC4DE77862C6F6C722293189BE0DD2 ] PrintNotify     C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
11:27:19.0804 0x0434  PrintNotify - ok
11:27:19.0847 0x0434  [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor       C:\WINDOWS\System32\drivers\processr.sys
11:27:19.0878 0x0434  Processor - ok
11:27:19.0924 0x0434  [ 429E8502AD2227CF88F8840FC5BD590D, A186DA46C083580ACEDE9C7E3156865034302CD803140EEEC8E1DE16DA4BC99B ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
11:27:19.0943 0x0434  ProfSvc - ok
11:27:19.0983 0x0434  [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched          C:\WINDOWS\system32\DRIVERS\pacer.sys
11:27:20.0020 0x0434  Psched - ok
11:27:20.0071 0x0434  [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE           C:\WINDOWS\system32\qwave.dll
11:27:20.0102 0x0434  QWAVE - ok
11:27:20.0108 0x0434  [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
11:27:20.0122 0x0434  QWAVEdrv - ok
11:27:20.0163 0x0434  [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
11:27:20.0215 0x0434  RasAcd - ok
11:27:20.0240 0x0434  [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn     C:\WINDOWS\system32\DRIVERS\AgileVpn.sys
11:27:20.0283 0x0434  RasAgileVpn - ok
11:27:20.0321 0x0434  [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
11:27:20.0373 0x0434  RasAuto - ok
11:27:20.0400 0x0434  [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
11:27:20.0431 0x0434  Rasl2tp - ok
11:27:20.0491 0x0434  [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan          C:\WINDOWS\System32\rasmans.dll
11:27:20.0533 0x0434  RasMan - ok
11:27:20.0570 0x0434  [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
11:27:20.0587 0x0434  RasPppoe - ok
11:27:20.0601 0x0434  [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp         C:\WINDOWS\system32\DRIVERS\rassstp.sys
11:27:20.0618 0x0434  RasSstp - ok
11:27:20.0677 0x0434  [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
11:27:20.0705 0x0434  rdbss - ok
11:27:20.0750 0x0434  [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
11:27:20.0770 0x0434  rdpbus - ok
11:27:20.0783 0x0434  [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
11:27:20.0801 0x0434  RDPDR - ok
11:27:20.0840 0x0434  [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
11:27:20.0851 0x0434  RdpVideoMiniport - ok
11:27:20.0892 0x0434  [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
11:27:20.0923 0x0434  RDPWD - ok
11:27:20.0945 0x0434  [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
11:27:20.0963 0x0434  rdyboost - ok
11:27:21.0018 0x0434  [ 89525CC2DBAD44F7199B9CC188B3F9C5, 09708EFA65BC1CCF92E6F2E143FCF88C645B1633AFE0DED833CDF945CB077D8C ] RealNetworks Downloader Resolver Service C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
11:27:21.0033 0x0434  RealNetworks Downloader Resolver Service - ok
11:27:21.0073 0x0434  [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
11:27:21.0093 0x0434  RemoteAccess - ok
11:27:21.0117 0x0434  [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
11:27:21.0154 0x0434  RemoteRegistry - ok
11:27:21.0197 0x0434  [ CCBFCABDFE2BC22F0645CEAADDB36004, 279EA9075079F91165027CEFD4FBC61A213CA602EE7DE106F7D2D243468706AA ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
11:27:21.0236 0x0434  RFCOMM - ok
11:27:21.0267 0x0434  [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
11:27:21.0290 0x0434  RpcEptMapper - ok
11:27:21.0325 0x0434  [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator      C:\WINDOWS\system32\locator.exe
11:27:21.0339 0x0434  RpcLocator - ok
11:27:21.0408 0x0434  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
11:27:21.0440 0x0434  RpcSs - ok
11:27:21.0483 0x0434  [ 2ABD2B3BA2EF0C3BA82284C2A5E28675, 2CDE31DEB899BAC801A9E4EFE15582B80D9B35921C4B92CB2E1E6BEFB7E3EB9C ] RRNetCap        C:\WINDOWS\system32\DRIVERS\rrnetcap.sys
11:27:21.0491 0x0434  RRNetCap - ok
11:27:21.0495 0x0434  [ 2ABD2B3BA2EF0C3BA82284C2A5E28675, 2CDE31DEB899BAC801A9E4EFE15582B80D9B35921C4B92CB2E1E6BEFB7E3EB9C ] RRNetCapMP      C:\WINDOWS\system32\DRIVERS\rrnetcap.sys
11:27:21.0501 0x0434  RRNetCapMP - ok
11:27:21.0535 0x0434  [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
11:27:21.0564 0x0434  rspndr - ok
11:27:21.0604 0x0434  [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
11:27:21.0616 0x0434  s3cap - ok
11:27:21.0637 0x0434  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] SamSs           C:\WINDOWS\system32\lsass.exe
11:27:21.0649 0x0434  SamSs - ok
11:27:21.0687 0x0434  [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
11:27:21.0701 0x0434  sbp2port - ok
11:27:21.0746 0x0434  [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
11:27:22.0000 0x0434  SCardSvr - ok
11:27:22.0037 0x0434  [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
11:27:22.0064 0x0434  scfilter - ok
11:27:22.0162 0x0434  [ ED40ED9A65F3E79A8C43DD50C5FDADBF, 2323BFAB1BC3D661A376650B7AC14C7780C92BA575DA048F3C7611CDB3F7F04A ] Schedule        C:\WINDOWS\system32\schedsvc.dll
11:27:22.0231 0x0434  Schedule - ok
11:27:22.0275 0x0434  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
11:27:22.0291 0x0434  SCPolicySvc - ok
11:27:22.0322 0x0434  [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
11:27:22.0340 0x0434  sdbus - ok
11:27:22.0385 0x0434  [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
11:27:22.0414 0x0434  SDRSVC - ok
11:27:22.0520 0x0434  [ 206387AB881E93A1A6EB89966C8651F1, 3BF9DFF3E70F0787F7F94BE5B9717DFADD9E13AB8154FAE295CEAC834F0835E5 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
11:27:22.0553 0x0434  SDScannerService - ok
11:27:22.0597 0x0434  [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
11:27:22.0615 0x0434  sdstor - ok
11:27:22.0708 0x0434  [ A529CFE32565C0B145578FFB2B32C9A5, 4B1596CBDDA74D510707FD475AAB3A89B1203E0B95ECAE3756CAA56555F9F66D ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
11:27:22.0747 0x0434  SDUpdateService - ok
11:27:22.0766 0x0434  [ CB63BDB77BB86549FC3303C2F11EDC18, 1C96C082B9CE08C8F3C088D5DE68BA8783E6F6A837A88E2654BC4CBCF7B81846 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
11:27:22.0776 0x0434  SDWSCService - ok
11:27:22.0811 0x0434  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\WINDOWS\system32\drivers\secdrv.sys
11:27:22.0831 0x0434  secdrv - ok
11:27:22.0875 0x0434  [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon        C:\WINDOWS\system32\seclogon.dll
11:27:22.0909 0x0434  seclogon - ok
11:27:22.0951 0x0434  [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS            C:\WINDOWS\System32\sens.dll
11:27:22.0989 0x0434  SENS - ok
11:27:23.0016 0x0434  [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
11:27:23.0043 0x0434  SensrSvc - ok
11:27:23.0070 0x0434  [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
11:27:23.0101 0x0434  SerCx - ok
11:27:23.0147 0x0434  [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
11:27:23.0185 0x0434  Serenum - ok
11:27:23.0206 0x0434  [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
11:27:23.0247 0x0434  Serial - ok
11:27:23.0273 0x0434  [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
11:27:23.0298 0x0434  sermouse - ok
11:27:23.0442 0x0434  [ C3BB6CF8F9EE199005A2AAE2815AD756, 7A817599C2F3AD819D643223AA714CCCB790EE5983096D8D9CD2D626D6924837 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
11:27:23.0472 0x0434  ServiceLayer - ok
11:27:23.0529 0x0434  [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
11:27:23.0580 0x0434  SessionEnv - ok
11:27:23.0627 0x0434  [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
11:27:23.0647 0x0434  sfloppy - ok
11:27:23.0703 0x0434  [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
11:27:23.0752 0x0434  SharedAccess - ok
11:27:23.0799 0x0434  [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
11:27:23.0850 0x0434  ShellHWDetection - ok
11:27:23.0885 0x0434  [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
11:27:23.0899 0x0434  SiSRaid2 - ok
11:27:23.0912 0x0434  [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
11:27:23.0928 0x0434  SiSRaid4 - ok
11:27:23.0980 0x0434  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
11:27:23.0996 0x0434  SkypeUpdate - ok
11:27:24.0038 0x0434  [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
11:27:24.0053 0x0434  SNMPTRAP - ok
11:27:24.0097 0x0434  [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
11:27:24.0114 0x0434  spaceport - ok
11:27:24.0133 0x0434  [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
11:27:24.0163 0x0434  SpbCx - ok
11:27:24.0224 0x0434  [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler         C:\WINDOWS\System32\spoolsv.exe
11:27:24.0279 0x0434  Spooler - ok
11:27:24.0508 0x0434  [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
11:27:24.0730 0x0434  sppsvc - ok
11:27:24.0763 0x0434  [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
11:27:24.0803 0x0434  srv - ok
11:27:24.0854 0x0434  [ 56218A571ECF8D55E0CDFF8DF2546CF1, 44B34722108EDDC8757A0B7C939A854457BB7EBC92A83C4284DFFAECFC2E3619 ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
11:27:24.0894 0x0434  srv2 - ok
11:27:24.0931 0x0434  [ 14FC338B80CFF7E04215133B568D15C4, 1F437BE0EC887097F0C3409D4198A20981FC325FDF915532AB85070D337DEF2B ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
11:27:24.0965 0x0434  srvnet - ok
11:27:25.0005 0x0434  [ 2F4595C0AFA2152D67AAE594DC461509, 7CD0C856EC11362EDA45779696EA670DF0047070515DDBDA65C4741EC401CB59 ] SSCBFS3         C:\WINDOWS\System32\drivers\sscbfs3.sys
11:27:25.0020 0x0434  SSCBFS3 - ok
11:27:25.0080 0x0434  [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
11:27:25.0111 0x0434  SSDPSRV - ok
11:27:25.0150 0x0434  [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
11:27:25.0168 0x0434  SstpSvc - ok
11:27:25.0203 0x0434  [ B4C983DA20E2970E21893BF0E4EE2AD8, 473D0E5339A8914775A03F76A805DAD4727FC045E3984F85F54BB92D5214E06F ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
11:27:25.0215 0x0434  ssudmdm - ok
11:27:25.0301 0x0434  [ 882E2063832AA21716D2C17F11BE4079, 8E2E20960B1D6A2E9C26AB1E1A7BD4571C12B04DD73BB0BA77A22111B78ACD37 ] Start8          C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
11:27:25.0333 0x0434  Start8 - ok
11:27:25.0366 0x0434  [ 4E85355B94CFCB67C135F6521A4895A7, AC4FC65C1E62A54B3834E7FE0A2B1ECC48A2AA563AE5BD508326EE68FFFBBEEE ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
11:27:25.0378 0x0434  stexstor - ok
11:27:25.0432 0x0434  [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
11:27:25.0467 0x0434  stisvc - ok
11:27:25.0506 0x0434  [ B240874B2CA0CD02E8CD11E140B14C57, 0FDBEE3DB644175A30065CAF020F375703ADC45A33221788C010F3111707FC25 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
11:27:25.0518 0x0434  storahci - ok
11:27:25.0550 0x0434  [ F74DBC95A57B1EE866D3732EB5F79BE2, E4FE9D5CD0A385ACB60D5D5E8D969F26C3A6BC0C08FF0838DBE9CA106229C8DE ] storflt         C:\WINDOWS\system32\DRIVERS\vmstorfl.sys
11:27:25.0563 0x0434  storflt - ok
11:27:25.0600 0x0434  [ 5337E138B49ED1F44CCBA4073BC35C20, 2B296973215E3865A56C46DC3D27F1460D96BC321558CE7A911B05B0E7BF397F ] StorSvc         C:\WINDOWS\system32\storsvc.dll
11:27:25.0613 0x0434  StorSvc - ok
11:27:25.0648 0x0434  [ 543CD3CC0E05B8D8815E0D4F040B6F59, 4B57C9534E94A0A67FC82DBD4FAECACA180BEC281FB477550A37C0A04777E09E ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
11:27:25.0659 0x0434  storvsc - ok
11:27:25.0705 0x0434  [ 1A36AC469140F87CDE62D7F8524E270C, B07086E0D844567FF0A880366EA8ED8042F8ED744E6AB1FD9539F360905A07F2 ] storvsp         C:\WINDOWS\System32\drivers\storvsp.sys
11:27:25.0731 0x0434  storvsp - ok
11:27:25.0769 0x0434  [ 8BC1C1ED6EF9C985A3FAA6A72F41679A, 82CC77030D23013572B4A64A64B6156789F253BF56268B790093CE3D345410A0 ] svsvc           C:\WINDOWS\system32\svsvc.dll
11:27:25.0788 0x0434  svsvc - ok
11:27:25.0803 0x0434  [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
11:27:25.0813 0x0434  swenum - ok
11:27:25.0916 0x0434  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
11:27:25.0947 0x0434  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
11:27:28.0388 0x0434  Detect skipped due to KSN trusted
11:27:28.0388 0x0434  SwitchBoard - ok
11:27:28.0491 0x0434  [ 502F9488540051F3E6C39889ECFA76BB, 22ABD681BE4CF8A1F484C6363C1334B1EF7A6C074D837B0121DE1896887B84C6 ] swprv           C:\WINDOWS\System32\swprv.dll
11:27:28.0555 0x0434  swprv - ok
11:27:28.0650 0x0434  [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] SysMain         C:\WINDOWS\system32\sysmain.dll
11:27:28.0720 0x0434  SysMain - ok
11:27:28.0772 0x0434  [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
11:27:28.0798 0x0434  SystemEventsBroker - ok
11:27:28.0843 0x0434  [ A6C06C45C44AD06C70AF8899AEC15BDC, AC2CCCDBA6B94BA85A6D41B47343193D175786D4ECF71AE9C7766ADD63A1273F ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
11:27:28.0862 0x0434  TabletInputService - ok
11:27:28.0904 0x0434  [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
11:27:28.0927 0x0434  TapiSrv - ok
11:27:28.0965 0x0434  [ 048CFE7569D6ADCAB9349BB1A566A79E, E248D2A66881FDFF9505896F383EFFEF2FD5AFC15D8992E653F5C31F1F80DAF3 ] tbhsd           C:\WINDOWS\system32\drivers\tbhsd.sys
11:27:28.0979 0x0434  tbhsd - ok
11:27:29.0021 0x0434  [ BB7C91D0E97AA8126212838D32DCC83C, A32599E53AAAB21A5222B4BB261885FA3930AF968C1B17463920F6AD670668DE ] tclondrv        C:\WINDOWS\system32\DRIVERS\tclondrv.sys
11:27:29.0035 0x0434  tclondrv - ok
11:27:29.0166 0x0434  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
11:27:29.0258 0x0434  Tcpip - ok
11:27:29.0330 0x0434  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] TCPIP6          C:\WINDOWS\system32\DRIVERS\tcpip.sys
11:27:29.0404 0x0434  TCPIP6 - ok
11:27:29.0418 0x0434  [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
11:27:29.0433 0x0434  tcpipreg - ok
11:27:29.0470 0x0434  [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
11:27:29.0516 0x0434  tdx - ok
11:27:29.0554 0x0434  [ F7C8AB5D8AFFAA318D6A21093D139BF4, 0A35052EF7DC8615783A23897358D8C579BE694363615C9563FF629E7B719991 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
11:27:29.0568 0x0434  terminpt - ok
11:27:29.0649 0x0434  [ 541EE228D0DEF392F7B2DFD885DD021B, 594D6538FA4DB5EF4D130007D7C29051EC2EDCA39EBB119695B58E9CBB0EB728 ] TermService     C:\WINDOWS\System32\termsrv.dll
11:27:29.0700 0x0434  TermService - ok
11:27:29.0733 0x0434  [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] Themes          C:\WINDOWS\system32\themeservice.dll
11:27:29.0771 0x0434  Themes - ok
11:27:29.0803 0x0434  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] THREADORDER     C:\WINDOWS\system32\mmcss.dll
11:27:29.0826 0x0434  THREADORDER - ok
11:27:29.0870 0x0434  [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] TimeBroker      C:\WINDOWS\System32\TimeBrokerServer.dll
11:27:29.0897 0x0434  TimeBroker - ok
11:27:29.0935 0x0434  [ E94F7A7B48C7638D1F3F8089344C97B7, 276CDE59614D563A52529BCC4BFC726E5F5BE131C9C4142558A644D79328C810 ] TPM             C:\WINDOWS\system32\drivers\tpm.sys
11:27:29.0950 0x0434  TPM - ok
11:27:29.0982 0x0434  [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
11:27:30.0025 0x0434  TrkWks - ok
11:27:30.0075 0x0434  [ 370A6907DDF79532A39319492B1FA38A, 46AECC5160F04FC3FFE4D37B404CCBBD1C5DC1501C2CEEE8284FF544DBDF10F8 ] truecrypt       C:\WINDOWS\system32\drivers\truecrypt.sys
11:27:30.0103 0x0434  truecrypt - ok
11:27:30.0201 0x0434  [ 8ABBB5CE0C62E0A6D28F32F44B7F865C, 4C78FE2A4A25A758D5191C4EDB2A6FE691FF82E7C16C0F146DC96DAD87D4F64E ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
11:27:30.0224 0x0434  TrustedInstaller - ok
11:27:30.0273 0x0434  [ 4E7C5FB10A50435523DE0CAA37DE2BD3, D6206DF61950F2541FB754E57C4D9EF9FA0CC1EDD6F6FA4E45F02B47958493F7 ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
11:27:30.0286 0x0434  TsUsbFlt - ok
11:27:30.0325 0x0434  [ 16D684A820872EE54F6370703AC0B513, 795E20484358424CE9FA766937DD99413025A8AF967D03490392E8E02A382D0B ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
11:27:30.0356 0x0434  TsUsbGD - ok
11:27:30.0384 0x0434  [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] tunnel          C:\WINDOWS\system32\DRIVERS\tunnel.sys
11:27:30.0403 0x0434  tunnel - ok
11:27:30.0424 0x0434  [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A, AA7DA2207C0236F47859A4791F9D7301E7ADB50A59D831DC859ECC7CA70D3E1D ] uagp35          C:\WINDOWS\system32\drivers\uagp35.sys
11:27:30.0436 0x0434  uagp35 - ok
11:27:30.0452 0x0434  [ 6FD6D03B7752C78712E5CFF29A305026, F09C5188AAFCF4C77B05BA1E604F9912782A9F1371F72F959288EBC2725407ED ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
11:27:30.0465 0x0434  UASPStor - ok
11:27:30.0507 0x0434  [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] UCX01000        C:\WINDOWS\System32\drivers\ucx01000.sys
11:27:30.0524 0x0434  UCX01000 - ok
11:27:30.0563 0x0434  [ 25C50F4EDF70D0A831E0566BD181CCF2, F2F9E86FB5617C16077D2073EC0AA747F76F1EB5148BA110347A84F3C3569F83 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
11:27:30.0599 0x0434  udfs - ok
11:27:30.0639 0x0434  [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D, 16DE6E0894C356A58AF12BEC2FE9B188F147DD4B16CB2414DE600CE4127F929D ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
11:27:30.0671 0x0434  UI0Detect - ok
11:27:30.0709 0x0434  [ 07FEBCDF24FABA0D47B635D85A0FFB7A, 452C04B14681EBCE8B1B25B75A1B7CC978722B7DDE54D624E17841B14ACCF65D ] uliagpkx        C:\WINDOWS\system32\drivers\uliagpkx.sys
11:27:30.0731 0x0434  uliagpkx - ok
11:27:30.0769 0x0434  [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
11:27:30.0792 0x0434  umbus - ok
11:27:30.0809 0x0434  [ 991EE6B5FC41EAEF99C8AF5B92F2CA09, 30AAD7D18FF5962CEC7180359D148EED5A1BF193DDB2B34508897FC3EBA692C3 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
11:27:30.0839 0x0434  UmPass - ok
11:27:30.0875 0x0434  [ 43FEFB040A0CC30F795FBF544169594D, F2A730C0F7C883321C378D4564120A40428D7F8E393F02C8D6A08934795A35C7 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
11:27:30.0907 0x0434  UmRdpService - ok
11:27:30.0951 0x0434  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
11:27:30.0964 0x0434  UnlockerDriver5 - ok
11:27:31.0030 0x0434  [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] upnphost        C:\WINDOWS\System32\upnphost.dll
11:27:31.0063 0x0434  upnphost - ok
11:27:31.0099 0x0434  [ 34AFB83C7BBA370E404E52CC2290350C, 1B3F9DF6C0DA8166FE02D4B2B8E3D5A432FE84A248516D0F5DA9E42076095AB8 ] upperdev        C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys
11:27:31.0117 0x0434  upperdev - ok
11:27:31.0148 0x0434  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\WINDOWS\System32\Drivers\usbaapl64.sys
11:27:31.0173 0x0434  USBAAPL64 - ok
11:27:31.0214 0x0434  [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
11:27:31.0246 0x0434  usbccgp - ok
11:27:31.0262 0x0434  [ 427B6DB8C05A5A977E8C3525370A2595, C67222CA9123AE12D953995326B3B582C146CEA89594B7209DB0B1F628A0118D ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
11:27:31.0288 0x0434  usbcir - ok
11:27:31.0335 0x0434  [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
11:27:31.0358 0x0434  usbehci - ok
11:27:31.0393 0x0434  [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
11:27:31.0421 0x0434  usbhub - ok
11:27:31.0484 0x0434  [ E5F7328B1D29BCE791862CD3C0DD382A, E520D75CA6E4EDB06F576D97FB6B7CFD46A3EF3A3AC881537DE3BB8C862FE8C3 ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
11:27:31.0512 0x0434  USBHUB3 - ok
11:27:31.0548 0x0434  [ 325F6179009B5A7F6118951A5BA422AB, 756CB2893530485E8C3ACFF5A40F4C6EB446E72B2296E8772058E407A5E066DE ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
11:27:31.0582 0x0434  usbohci - ok
11:27:31.0617 0x0434  [ 9FDBA6982582A6F2354144980F641E7B, 054A65412CB22C5BE970FD3A266E140110D869B614B9F9894628D553CE82C991 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
11:27:31.0637 0x0434  usbprint - ok
11:27:31.0671 0x0434  [ AD91D1BBE5D3CF4501887DC1C09384FD, ED9E27CD1D52401087427EC20E389FBE2497193483C2E53E8DE5D70DACF5D928 ] usbscan         C:\WINDOWS\System32\drivers\usbscan.sys
11:27:31.0691 0x0434  usbscan - ok
11:27:31.0703 0x0434  [ 4E896888B2FDC694D8EF4462E1C58B78, D64F3A95C87DA3B523C4AD0A68410AE4B927767D1EA9A72EB082E1AFC1E37275 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
11:27:31.0715 0x0434  usbser - ok
11:27:31.0729 0x0434  [ AA75E1EFBEE7186B4CBAAACF1F15E6CA, D7A3069913CF8A7F281AC2D7C1FA58FA31A05D7E35E93D7588F4B3B18B3377FD ] UsbserFilt      C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys
11:27:31.0747 0x0434  UsbserFilt - ok
11:27:31.0772 0x0434  [ BFC7FE4AAEB61317A921871B4085EF4B, CBC3FBAEAD6C82A437CC87A97007EF807C64053AB8FA5C3233C2A0CF6FC8D019 ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
11:27:31.0786 0x0434  USBSTOR - ok
11:27:31.0828 0x0434  [ 1ABF657259DB57F7E5558E4DF1357C0C, 34EAF5DEA3293CFA96BA81B036305FD90ABAE05B9CB73D4F54FB236448C1978C ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
11:27:31.0857 0x0434  usbuhci - ok
11:27:31.0898 0x0434  [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] usbvideo        C:\WINDOWS\System32\Drivers\usbvideo.sys
11:27:31.0916 0x0434  usbvideo - ok
11:27:31.0962 0x0434  [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
11:27:31.0984 0x0434  USBXHCI - ok
11:27:32.0003 0x0434  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
11:27:32.0016 0x0434  VaultSvc - ok
11:27:32.0055 0x0434  [ BACECBFF9C97F7627A60B0E0F1FE7EE8, DC82F767D066B93A48A090DC7146EBCCDC54B43C6CD9DF29A160E09E3A531DC8 ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
11:27:32.0075 0x0434  vdrvroot - ok
11:27:32.0146 0x0434  [ 1B4488988E5E7512E6C5CD1255E9E973, B82C26E767A8895CFFD76C11D07D5C945C38E1BD32CC27D20A6C0FA7F6064FC5 ] vds             C:\WINDOWS\System32\vds.exe
11:27:32.0181 0x0434  vds - ok
11:27:32.0189 0x0434  [ 74FA2D4368DE6F6CE14393EDF1F342BE, C5CE4164B2C3D583A7FB8687ADEADCDB08D36A5AB1965E5FC6949AEED15881C8 ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
11:27:32.0202 0x0434  VerifierExt - ok
11:27:32.0262 0x0434  [ 500BE6B2E49883720D0AE8BB859ED7A3, 4606B02A3E8123510676E554635EB5ECF9DC5F2B83928710C8563787C52CC102 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
11:27:32.0291 0x0434  vhdmp - ok
11:27:32.0329 0x0434  [ F5B4A14B00E89250C50982AC762DDD1D, 581CD97DD42E74A82F06BFB827DFC82618B4A8667ACA7E93C628BB0D056CE8F0 ] viaide          C:\WINDOWS\system32\drivers\viaide.sys
11:27:32.0340 0x0434  viaide - ok
11:27:32.0384 0x0434  [ 0E43886F01C85B47BA0A3157274BCF59, C81E1841B1138D8C224FAF76258F7EB65145CCAF7938CA86CBADD8FFF79BA596 ] Vid             C:\WINDOWS\System32\drivers\Vid.sys
11:27:32.0429 0x0434  Vid - ok
11:27:32.0448 0x0434  [ 78DB50F7329F6D1311658DABFFFC8BE0, 8CB0C831608033C4BC1D2DA7FAA7D429333A3654E76A989F7AF85BFC5F086BE9 ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
11:27:32.0464 0x0434  vmbus - ok
11:27:32.0498 0x0434  [ ECFEE2F2BA3932C7880D1A8F67D68F91, 57DCD55A518A9FBDEF72B511C643B1062C3F7BD339F4B0FC19E9D84C615B968D ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
11:27:32.0511 0x0434  VMBusHID - ok
11:27:32.0549 0x0434  [ B4F432A51826FFC66F4DF72A83E8E4B1, 2C6F4D477F91605A3685FCF9EC6EA798E74C6853CC91547A749E9C050E7C19E8 ] vmbusr          C:\WINDOWS\System32\drivers\vmbusr.sys
11:27:32.0564 0x0434  vmbusr - ok
11:27:32.0619 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicheartbeat   C:\WINDOWS\System32\ICSvc.dll
11:27:32.0660 0x0434  vmicheartbeat - ok
11:27:32.0673 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
11:27:32.0693 0x0434  vmickvpexchange - ok
11:27:32.0705 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicrdv         C:\WINDOWS\System32\ICSvc.dll
11:27:32.0725 0x0434  vmicrdv - ok
11:27:32.0738 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicshutdown    C:\WINDOWS\System32\ICSvc.dll
11:27:32.0756 0x0434  vmicshutdown - ok
11:27:32.0769 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmictimesync    C:\WINDOWS\System32\ICSvc.dll
11:27:32.0788 0x0434  vmictimesync - ok
11:27:32.0802 0x0434  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicvss         C:\WINDOWS\System32\ICSvc.dll
11:27:32.0820 0x0434  vmicvss - ok
11:27:32.0860 0x0434  [ CB60FAAED8B49B812EBBF77EB87D9B18, ADA7C68D4C4981555ED48981E8B7ACBEEF5C39F902EB98782FC3DFF495FE0C33 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
11:27:32.0873 0x0434  volmgr - ok
11:27:32.0924 0x0434  [ A74101DA9809251BCD0E5A26BAE0F824, 15A3A7CC31A13C5882812C344D0937A8A4503D12DB07B9F7F2A8191B739CDBF7 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
11:27:32.0948 0x0434  volmgrx - ok
11:27:32.0985 0x0434  [ 78A5BBA3819FFFC62FFEC3E2220D102D, A95797B97D576374C2CDA8A09E6C51A89BADE428AAA89D5093579C85062E5874 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
11:27:33.0007 0x0434  volsnap - ok
11:27:33.0051 0x0434  [ A8DA1C1B52ECEA3726DEBED4FF1B700D, 75C024EC3858DF24FB82FE105BDD1E37900D53EFE9D72F42CDDFFD0742525586 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
11:27:33.0074 0x0434  vpci - ok
11:27:33.0091 0x0434  [ 0190AFFF28F600461C0164353CC7EE27, D112DF69C9E629EC77FB95E7ACDDAAE24B5028C84454134BD26FEF9CC953AC0E ] vpcivsp         C:\WINDOWS\System32\drivers\vpcivsp.sys
11:27:33.0119 0x0434  vpcivsp - ok
11:27:33.0153 0x0434  [ 38A60CD9C009C55C6D3B5586F8E6A353, 7F7E2AE39F1A0A5245650911E310E0948BC22A18262A16FA76B44A042D66312D ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
11:27:33.0167 0x0434  vsmraid - ok
11:27:33.0266 0x0434  [ D0C69E44BC1E1D4AD290FD84104623D8, 4C86760EA4BD2A64FFD42D89284EC3E5048CB2F0F6F3B80D017B41C0D2456A90 ] VSS             C:\WINDOWS\system32\vssvc.exe
11:27:33.0326 0x0434  VSS - ok
11:27:33.0381 0x0434  [ A0F6FE0FC2F647C22BBFD6BD4249DBCC, AC2F3C70EDCA0AFBB2606267DFE6D3E8E7B0772140153BAD6B0A9EDE6A1D2F29 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
11:27:33.0410 0x0434  VSTXRAID - ok
11:27:33.0424 0x0434  [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
11:27:33.0435 0x0434  vwifibus - ok
11:27:33.0451 0x0434  [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] vwififlt        C:\WINDOWS\system32\DRIVERS\vwififlt.sys
11:27:33.0463 0x0434  vwififlt - ok
11:27:33.0475 0x0434  [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] vwifimp         C:\WINDOWS\system32\DRIVERS\vwifimp.sys
11:27:33.0516 0x0434  vwifimp - ok
11:27:33.0573 0x0434  [ F690B6EEAA94576727B24376D7ED3601, A61EE96024C8FC4058481DFB1E7F0AD746565368672FA3B6BA8F9E23D0F47E4C ] W32Time         C:\WINDOWS\system32\w32time.dll
11:27:33.0621 0x0434  W32Time - ok
11:27:33.0658 0x0434  [ FDA15A0510F84FA46452B74529147A15, DAF92C2B733311B767895175E27B671C80DC028EEB477C28E0209C6467E072D1 ] WacHidRouter    C:\WINDOWS\System32\drivers\wachidrouter.sys
11:27:33.0665 0x0434  WacHidRouter - ok
11:27:33.0686 0x0434  [ 6B806E893714019969E2B50D7EF6A4D9, 38FE2B01082DC4C2A0C11A292016A727F48C3DF1293DC3A0216B2254A452263F ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
11:27:33.0719 0x0434  WacomPen - ok
11:27:33.0745 0x0434  [ EABFDBDC9BEDD325F260A3A9FEE5B3F9, 496AD989DA6F500140FCDB88C65CECD4F306D3FBDAACE1D42C5312C1E321B9D1 ] wacomrouterfilter C:\WINDOWS\System32\drivers\wacomrouterfilter.sys
11:27:33.0751 0x0434  wacomrouterfilter - ok
11:27:33.0797 0x0434  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:27:33.0834 0x0434  Wanarp - ok
11:27:33.0843 0x0434  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:27:33.0861 0x0434  Wanarpv6 - ok
11:27:33.0962 0x0434  [ 42DF22F8C448E7CD219F6D63743505E2, 063F4280C7BD20CE1360436B76A17DFE17FF611F75337A47373D098CC6C263BF ] wbengine        C:\WINDOWS\system32\wbengine.exe
11:27:34.0048 0x0434  wbengine - ok
11:27:34.0086 0x0434  [ 31D37B2F6069C631EF0557D322924812, 6E18A1060F3C8F4BF220E286C44327866A8F9109E74928AA2D8C2DA9C452038B ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
11:27:34.0126 0x0434  WbioSrvc - ok
11:27:34.0193 0x0434  [ AF1349386D4C6786EF4E34FACEF15042, 6B33778409BC54C1955B92508ADDEBAFD629141961B71C94A91DC4CFE8391A13 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
11:27:34.0397 0x0434  Wcmsvc - ok
11:27:34.0442 0x0434  [ 5B5FEAB51172F5513C2CF7B39CFA6A01, 4FDAC5168E00D44781C6F5D98ECD4977A12663C5CE6FFDFF9DBC89A28D6212D8 ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
11:27:34.0471 0x0434  wcncsvc - ok
11:27:34.0489 0x0434  [ E19556D414332E2BEBA1F368229006B4, AB3454EC85D7B6E62D44C4510C1547AE7F736558588E54B0E265F7B3A5810E15 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
11:27:34.0502 0x0434  WcsPlugInService - ok
11:27:34.0542 0x0434  [ B3A4D918DAB90505B6BC7B70632913CB, ECC19DCD7902C29D0682C70B9546CF8B82477A32147EE30EB6750D8499605B46 ] Wd              C:\WINDOWS\system32\drivers\wd.sys
11:27:34.0562 0x0434  Wd - ok
11:27:34.0608 0x0434  [ 07D19A55CD27B330534D2DDEA60D5FC6, 9C9441EA6943481838F61FD929F88FE25DC60BB8513A2C01CB4712918A883E3F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
11:27:34.0628 0x0434  WdBoot - ok
11:27:34.0705 0x0434  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
11:27:34.0743 0x0434  Wdf01000 - ok
11:27:34.0794 0x0434  [ CEBD9CDAADA11FAECCA82E4C06BCDD8E, 6D6E4BF0EB97004F9C07327923C9BD2B451FDDA567FAF39556595302EE5A1A54 ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
11:27:34.0820 0x0434  WdFilter - ok
11:27:34.0856 0x0434  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
11:27:34.0891 0x0434  WdiServiceHost - ok
11:27:34.0897 0x0434  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
11:27:34.0918 0x0434  WdiSystemHost - ok
11:27:34.0961 0x0434  [ 9B1384CE8E681D2D77BB3524B8E86311, BDEF9D0A79A7C26A88088A306F91632F300E587736CDD2C64717EC54DD6E89FF ] WebClient       C:\WINDOWS\System32\webclnt.dll
11:27:34.0991 0x0434  WebClient - ok
11:27:35.0014 0x0434  [ 35FD720943D4FCD75C3275BF062FF140, 9D8345E6DE1AE23F93AD0B52D27D1CCFD69EF7EE50654F92CA999BEC4570A773 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
11:27:35.0048 0x0434  Wecsvc - ok
11:27:35.0077 0x0434  [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
11:27:35.0102 0x0434  wercplsupport - ok
11:27:35.0136 0x0434  [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
11:27:35.0167 0x0434  WerSvc - ok
11:27:35.0207 0x0434  [ 44BB9C31E6242C4BD1CE7C2B440C2533, E603BB001028918B687818E930340008C752679B133037367A8A8E41DA559FFE ] WFPLWFS         C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
11:27:35.0231 0x0434  WFPLWFS - ok
11:27:35.0279 0x0434  [ 60E0C220593DA4F7C289CB909D2DBAE0, 057CA7727F748600CC155043081AB9E3244763CF4913F317D13226A515F6FDB6 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
11:27:35.0323 0x0434  WiaRpc - ok
11:27:35.0348 0x0434  [ A3C7624A42A3447EF5EDD1ED37FE4E60, BD8BDF0A571873FA8277878AF7AED11196CFF1B4DF1EA6BA13BD4887D7B63B94 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
11:27:35.0361 0x0434  WIMMount - ok
11:27:35.0397 0x0434  WinDefend - ok
11:27:35.0473 0x0434  [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
11:27:35.0523 0x0434  WinHttpAutoProxySvc - ok
11:27:35.0614 0x0434  [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
11:27:35.0663 0x0434  Winmgmt - ok
11:27:35.0806 0x0434  [ 8E212A627F33F6FC3B5F3BB47212F66E, 9BBFE26ABFA14F346FE3711D13D959523EEA23608A33C16F3D750D66CA511911 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
11:27:35.0954 0x0434  WinRM - ok
11:27:36.0003 0x0434  [ BB20956C424531003F7FA6CD36F11D5D, 2C55F1C7553A527A7C4C34E730BE943269AE23928731C64D3DC945E07AE1771E ] WinUsb          C:\WINDOWS\system32\DRIVERS\WinUsb.sys
11:27:36.0043 0x0434  WinUsb - ok
11:27:36.0135 0x0434  [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
11:27:36.0191 0x0434  WlanSvc - ok
11:27:36.0305 0x0434  [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
11:27:36.0395 0x0434  wlidsvc - ok
11:27:36.0434 0x0434  [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
11:27:36.0453 0x0434  WmiAcpi - ok
11:27:36.0506 0x0434  [ D113499052C5E541906B727779F0F959, 05FB51086C0A0CE3812A7E6098C5A454ECCFE8553669CFA715153564F2226DB0 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
11:27:36.0532 0x0434  wmiApSrv - ok
11:27:36.0568 0x0434  WMPNetworkSvc - ok
11:27:36.0590 0x0434  [ C6FF953D5D6F2EAE3B8883474D5076B3, 001CBB7FBC30209C892869258E5ABD3F0932886E156ECB10DCA599F6D32648BE ] wpcfltr         C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
11:27:36.0602 0x0434  wpcfltr - ok
11:27:36.0622 0x0434  [ A6ED163169876BFD2437E872FE2F1509, C13E8676800EEEF690F51C4DEA660B36C8734AE2CCAAC48054E10D74B98949B8 ] WPCSvc          C:\WINDOWS\System32\wpcsvc.dll
11:27:36.0653 0x0434  WPCSvc - ok
11:27:36.0697 0x0434  [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
11:27:36.0735 0x0434  WPDBusEnum - ok
11:27:36.0760 0x0434  [ 0346CAFC181C91C6E2330332EB332ED6, D46F44C339399CAAE13CD71C53A169E95065208E07E5420DE00A4509D6CB056F ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
11:27:36.0781 0x0434  WpdUpFltr - ok
11:27:36.0812 0x0434  [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
11:27:36.0823 0x0434  ws2ifsl - ok
11:27:36.0863 0x0434  [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
11:27:36.0879 0x0434  wscsvc - ok
11:27:36.0920 0x0434  [ 74EFDA0526862C3D8D01A776182798EA, 7C9AD6118CB344C63B60A8BA5FA8C85ADED30933821ABD1427857E826EFC2952 ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
11:27:36.0960 0x0434  WSDPrintDevice - ok
11:27:36.0991 0x0434  [ FA07DF46070F0826139709EF4D31FB71, 8F46A55D5C4336536E7974C9CEAFED55E7E9E9BF133D2AD0F6A55174F70B2F03 ] WSDScan         C:\WINDOWS\system32\DRIVERS\WSDScan.sys
11:27:37.0051 0x0434  WSDScan - ok
11:27:37.0057 0x0434  WSearch - ok
11:27:37.0224 0x0434  [ D4D04839F3DFAF09D94BAB1016F7A297, 944A41D251F522EE87189C1D01CF7EEE2C70BF4353BA4005C44F03DB485F843F ] WSService       C:\WINDOWS\System32\WSService.dll
11:27:37.0334 0x0434  WSService - ok
11:27:37.0390 0x0434  [ FF3F745A22B0C9C2EF1600762E8858A1, A63A66537A5316963825A963F2A9EC2BEB68027EB3A2EF28DC2C936FF194915A ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
11:27:37.0411 0x0434  WTabletServiceCon - ok
11:27:37.0570 0x0434  [ 311E5E1976E0BD9110A88B93158055D5, F1AA738D6AD74C33785EEFE1FBE8A869AAB62417B7D079389293AB1209A849C1 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
11:27:37.0725 0x0434  wuauserv - ok
11:27:37.0775 0x0434  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
11:27:37.0804 0x0434  WudfPf - ok
11:27:37.0831 0x0434  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
11:27:37.0865 0x0434  WUDFRd - ok
11:27:37.0875 0x0434  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFSensorLP    C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:27:37.0890 0x0434  WUDFSensorLP - ok
11:27:37.0913 0x0434  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
11:27:37.0927 0x0434  wudfsvc - ok
11:27:37.0942 0x0434  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:27:37.0956 0x0434  WUDFWpdFs - ok
11:27:37.0968 0x0434  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:27:37.0986 0x0434  WUDFWpdMtp - ok
11:27:38.0042 0x0434  [ 6D9E07436B6646EC8F7EFFD39B6BA288, 82C1CEA93ECEF17D221AD0F87C5BD96F3FD8143841C16BD9608BD4D58D90B8E0 ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
11:27:38.0082 0x0434  WwanSvc - ok
11:27:38.0136 0x0434  [ 537319A784278409FF5353515A39DE38, A69CB8B24861399E9C965A4432717A5F60A09B241160E4777DA14EB50485DA74 ] yukonw8         C:\WINDOWS\system32\DRIVERS\yk63x64.sys
11:27:38.0149 0x0434  yukonw8 - ok
11:27:38.0163 0x0434  ================ Scan global ===============================
11:27:38.0222 0x0434  [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\WINDOWS\system32\basesrv.dll
11:27:38.0273 0x0434  [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\WINDOWS\system32\winsrv.dll
11:27:38.0284 0x0434  [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\WINDOWS\system32\sxssrv.dll
11:27:38.0337 0x0434  [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\WINDOWS\system32\services.exe
11:27:38.0351 0x0434  [ Global ] - ok
11:27:38.0351 0x0434  ================ Scan MBR ==================================
11:27:38.0371 0x0434  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:27:39.0461 0x0434  \Device\Harddisk0\DR0 - ok
11:27:39.0466 0x0434  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
11:27:39.0931 0x0434  \Device\Harddisk1\DR1 - ok
11:27:39.0932 0x0434  ================ Scan VBR ==================================
11:27:40.0085 0x0434  [ 820EEFF5763B186E32E5261854C4E411 ] \Device\Harddisk0\DR0\Partition1
11:27:40.0096 0x0434  \Device\Harddisk0\DR0\Partition1 - ok
11:27:40.0109 0x0434  [ 5B054FB0321A87CF4312ABEABCB0DFC6 ] \Device\Harddisk0\DR0\Partition2
11:27:40.0111 0x0434  \Device\Harddisk0\DR0\Partition2 - ok
11:27:40.0117 0x0434  [ 679468958EAF69D7BAF921957BB6C2FA ] \Device\Harddisk1\DR1\Partition1
11:27:40.0217 0x0434  \Device\Harddisk1\DR1\Partition1 - ok
11:27:40.0218 0x0434  Waiting for KSN requests completion. In queue: 144
11:27:41.0218 0x0434  Waiting for KSN requests completion. In queue: 144
11:27:42.0219 0x0434  Waiting for KSN requests completion. In queue: 144
11:27:43.0340 0x0434  AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmiav.exe ( 14.0.0.4651 ), 0x41000 ( enabled : updated )
11:27:43.0389 0x0434  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.4.304.0 ), 0x60100 ( disabled : updated )
11:27:43.0417 0x0434  FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmifw.exe ( 14.0.0.4651 ), 0x41010 ( enabled )
11:27:45.0796 0x0434  ============================================================
11:27:45.0796 0x0434  Scan finished
11:27:45.0796 0x0434  ============================================================
11:27:45.0810 0x1624  Detected object count: 0
11:27:45.0810 0x1624  Actual detected object count: 0
11:31:45.0274 0x1c3c  ============================================================
11:31:45.0274 0x1c3c  Scan started
11:31:45.0274 0x1c3c  Mode: Manual; SigCheck; TDLFS; 
11:31:45.0274 0x1c3c  ============================================================
11:31:45.0274 0x1c3c  KSN ping started
11:31:47.0649 0x1c3c  KSN ping finished: true
11:31:48.0399 0x1c3c  ================ Scan system memory ========================
11:31:48.0399 0x1c3c  System memory - ok
11:31:48.0399 0x1c3c  ================ Scan services =============================
11:31:48.0586 0x1c3c  [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
11:31:48.0618 0x1c3c  1394ohci - ok
11:31:48.0633 0x1c3c  [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
11:31:48.0649 0x1c3c  3ware - ok
11:31:48.0758 0x1c3c  [ 7EEB488346FBFA3731276C3EE8A8FD9E, 97D2E49C2E615E38E8176F1C1551BF452CC6A00787FF90845EFF27A4E6E20B1F ] AAV UpdateService C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
11:31:48.0774 0x1c3c  AAV UpdateService - ok
11:31:48.0852 0x1c3c  [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
11:31:48.0868 0x1c3c  ACPI - ok
11:31:48.0914 0x1c3c  [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
11:31:48.0930 0x1c3c  acpiex - ok
11:31:48.0961 0x1c3c  [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
11:31:48.0977 0x1c3c  acpipagr - ok
11:31:49.0008 0x1c3c  [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
11:31:49.0024 0x1c3c  AcpiPmi - ok
11:31:49.0055 0x1c3c  [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
11:31:49.0071 0x1c3c  acpitime - ok
11:31:49.0180 0x1c3c  [ 9D96B0D5855FD1B98023B3EEC9F06786, E4C79233158BE8AA4E9C6DD71585E5D2703A5156531EB3D692D7D81BC443E844 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:31:49.0196 0x1c3c  AdobeFlashPlayerUpdateSvc - ok
11:31:49.0274 0x1c3c  [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx         C:\WINDOWS\system32\drivers\adp94xx.sys
11:31:49.0305 0x1c3c  adp94xx - ok
11:31:49.0352 0x1c3c  [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci         C:\WINDOWS\system32\drivers\adpahci.sys
11:31:49.0368 0x1c3c  adpahci - ok
11:31:49.0415 0x1c3c  [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320         C:\WINDOWS\system32\drivers\adpu320.sys
11:31:49.0430 0x1c3c  adpu320 - ok
11:31:49.0477 0x1c3c  [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc     C:\WINDOWS\System32\aelupsvc.dll
11:31:49.0493 0x1c3c  AeLookupSvc - ok
11:31:49.0571 0x1c3c  [ 7C0E0EDF18D6CC565D7BFBB451709FA5, 47C21CD9D87B5C1B5EB14F6166B5E3349B1A6F10501E63CCED8D52A9FE22765D ] AFD             C:\WINDOWS\system32\drivers\afd.sys
11:31:49.0586 0x1c3c  AFD - ok
11:31:49.0618 0x1c3c  [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
11:31:49.0618 0x1c3c  agp440 - ok
11:31:49.0665 0x1c3c  [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG             C:\WINDOWS\System32\alg.exe
11:31:49.0696 0x1c3c  ALG - ok
11:31:49.0743 0x1c3c  [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\WINDOWS\system32\AUInstallAgent.dll
11:31:49.0758 0x1c3c  AllUserInstallAgent - ok
11:31:49.0805 0x1c3c  [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
11:31:49.0821 0x1c3c  AmdK8 - ok
11:31:50.0258 0x1c3c  [ 8DC532B5BF820E48194C6AFC8862FCBC, AA8040A2EC9004FBED4B94166B2DD5A4F5BC835EBADD6199651C856A695AA3E1 ] amdkmdag        C:\WINDOWS\system32\DRIVERS\atikmdag.sys
11:31:50.0571 0x1c3c  amdkmdag - ok
11:31:50.0649 0x1c3c  [ AA48FEABA50C2DED9C485DFDBA044E40, AE52933B85494F51E4F1524489BEAC4C16F80D09BC8974D97F792D94EAD2A231 ] amdkmdap        C:\WINDOWS\system32\DRIVERS\atikmpag.sys
11:31:50.0696 0x1c3c  amdkmdap - ok
11:31:50.0711 0x1c3c  [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
11:31:50.0727 0x1c3c  AmdPPM - ok
11:31:50.0758 0x1c3c  [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
11:31:50.0774 0x1c3c  amdsata - ok
11:31:50.0836 0x1c3c  [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
11:31:50.0868 0x1c3c  amdsbs - ok
11:31:50.0883 0x1c3c  [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
11:31:50.0883 0x1c3c  amdxata - ok
11:31:50.0930 0x1c3c  [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID           C:\WINDOWS\system32\drivers\appid.sys
11:31:50.0961 0x1c3c  AppID - ok
11:31:50.0993 0x1c3c  [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
11:31:51.0024 0x1c3c  AppIDSvc - ok
11:31:51.0055 0x1c3c  [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo         C:\WINDOWS\System32\appinfo.dll
         
__________________

Alt 10.04.2014, 10:46   #4
omurphy
 
Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



TDSSKiller.3.0.0.30_10.04.2014_11.25.51_log [TEIL 2]:
Code:
ATTFilter
11:31:51.0071 0x1c3c  Appinfo - ok
11:31:51.0180 0x1c3c  [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
11:31:51.0196 0x1c3c  Apple Mobile Device - ok
11:31:51.0227 0x1c3c  [ 2D14788C5D0836292BEB27BBE109BE56, D032FDBD9E1708F77348655DE00DB395E38EB27A7EC3FB2EF3BA07D22CBC1402 ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
11:31:51.0258 0x1c3c  AppMgmt - ok
11:31:51.0290 0x1c3c  [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc             C:\WINDOWS\system32\drivers\arc.sys
11:31:51.0321 0x1c3c  arc - ok
11:31:51.0337 0x1c3c  [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
11:31:51.0352 0x1c3c  arcsas - ok
11:31:51.0352 0x1c3c  [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
11:31:51.0368 0x1c3c  AsyncMac - ok
11:31:51.0399 0x1c3c  [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
11:31:51.0415 0x1c3c  atapi - ok
11:31:51.0586 0x1c3c  [ DECE3E2832F125A41A02FB59F4C54EEA, 2994024E5C295E9FDF4C6C0A8F2B17C07C158AD1567BEDA46A482C6C08F460BC ] athr            C:\WINDOWS\system32\DRIVERS\athrx.sys
11:31:51.0680 0x1c3c  athr - ok
11:31:51.0727 0x1c3c  [ BCD7A47EF587DC00DD61D12D9C2D1E44, 95BC9AC8BA8A86DB5C7A6317002BD9872F193B401A0C58DF252DCF3D4A7541E2 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
11:31:51.0758 0x1c3c  AudioEndpointBuilder - ok
11:31:51.0852 0x1c3c  [ 599B3F685A263A114FFAF3BE29C49C75, 579E9561BA8537888E061E303F3F89E2E6F8B8DED74369C3767DB10B35CD45E8 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
11:31:51.0883 0x1c3c  Audiosrv - ok
11:31:51.0977 0x1c3c  [ 0D2F8F4055903A762AD46204E5A42E86, D3270039E4F066C69D844060388D3F895137C37C0FBE4C106BE1C71AE9DBC17A ] avp             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
11:31:52.0008 0x1c3c  avp - ok
11:31:52.0055 0x1c3c  [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
11:31:52.0071 0x1c3c  AxInstSV - ok 
11:31:52.0133 0x1c3c  [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
11:31:52.0180 0x1c3c  b06bdrv - ok
11:31:52.0212 0x1c3c  [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
11:31:52.0227 0x1c3c  BasicDisplay - ok
11:31:52.0274 0x1c3c  [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
11:31:52.0290 0x1c3c  BasicRender - ok
11:31:52.0430 0x1c3c  [ 988D01E8AE8C80B413C5E01C89A1886E, 24CC3A984CAFBFE730BB6E45152E3B62B0E9D9704982E7144277A6750FBC5FC5 ] BcmBtRSupport   C:\WINDOWS\system32\BtwRSupportService.exe
11:31:52.0493 0x1c3c  BcmBtRSupport - ok
11:31:52.0524 0x1c3c  [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
11:31:52.0540 0x1c3c  BDESVC - ok
11:31:52.0571 0x1c3c  [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
11:31:52.0587 0x1c3c  Beep - ok
11:31:52.0665 0x1c3c  [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] BFE             C:\WINDOWS\System32\bfe.dll
11:31:52.0680 0x1c3c  BFE - ok
11:31:52.0743 0x1c3c  [ 65608C44E71D7BA056C9EFCD8A00A7FE, A6B581A8354C7E2902AA1FFDD87C9465EFA2CD75A920CE3098E774292E4825CE ] BingDesktopUpdate C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
11:31:52.0774 0x1c3c  BingDesktopUpdate - ok
11:31:52.0883 0x1c3c  [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS            C:\WINDOWS\System32\qmgr.dll
11:31:53.0040 0x1c3c  BITS - ok
11:31:53.0149 0x1c3c  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:31:53.0165 0x1c3c  Bonjour Service - ok
11:31:53.0180 0x1c3c  [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
11:31:53.0196 0x1c3c  bowser - ok
11:31:53.0243 0x1c3c  [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
11:31:53.0274 0x1c3c  BrokerInfrastructure - ok
11:31:53.0305 0x1c3c  [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser         C:\WINDOWS\System32\browser.dll
11:31:53.0337 0x1c3c  Browser - ok
11:31:53.0368 0x1c3c  [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
11:31:53.0383 0x1c3c  BthAvrcpTg - ok
11:31:53.0415 0x1c3c  [ A8B20D852B07AE19A13B5D47EC4E4C3B, 86571C9E2BA15BB169CAB2D24C4D0598154C02FD173638CAFC685A7F6B09472D ] BthEnum         C:\WINDOWS\System32\drivers\BthEnum.sys
11:31:53.0430 0x1c3c  BthEnum - ok
11:31:53.0477 0x1c3c  [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
11:31:53.0508 0x1c3c  BthHFEnum - ok
11:31:53.0540 0x1c3c  [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
11:31:53.0555 0x1c3c  bthhfhid - ok
11:31:53.0571 0x1c3c  [ 033916CE8784A848B9A3D686B7F66D97, B4D0514D59646CF6B70D4FA488CF95C38EA38CC5C509329CC8753E897C640AFA ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
11:31:53.0587 0x1c3c  BTHMODEM - ok
11:31:53.0633 0x1c3c  [ 091BB978E9504D0AD14586929431A957, ACED02B879026A228E35F40847C210BC30A5AFC948FFE922DB21663E4A8DFF1D ] BthPan          C:\WINDOWS\system32\DRIVERS\bthpan.sys
11:31:53.0665 0x1c3c  BthPan - ok
11:31:53.0743 0x1c3c  [ 13795CAA34239D97A7211E7F9D96E012, C4F3402B063A7CFCE386D1AE9255975A199164BA9E7DCDB6129725213A0642B1 ] BTHPORT         C:\WINDOWS\System32\Drivers\BTHport.sys
11:31:53.0805 0x1c3c  BTHPORT - ok
11:31:53.0837 0x1c3c  [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv         C:\WINDOWS\system32\bthserv.dll
11:31:53.0852 0x1c3c  bthserv - ok
11:31:53.0883 0x1c3c  [ 1F715957F5236D30B6020A19A4271F6A, C06B637C2C6919E2DE1055AE249AE3EAF7B4890799F22BF5757CC10CEF145043 ] BTHUSB          C:\WINDOWS\System32\Drivers\BTHUSB.sys
11:31:53.0899 0x1c3c  BTHUSB - ok
11:31:53.0946 0x1c3c  [ D3848CBF21C75D46321838634B9442F9, 1BB0AD412371CD8DA89D952EFE9156516B720B56074581CD645512244421292E ] cbfs4           C:\WINDOWS\system32\drivers\cbfs4.sys
11:31:53.0962 0x1c3c  cbfs4 - ok
11:31:54.0008 0x1c3c  [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
11:31:54.0024 0x1c3c  cdfs - ok
11:31:54.0040 0x1c3c  [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
11:31:54.0055 0x1c3c  cdrom - ok
11:31:54.0087 0x1c3c  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
11:31:54.0134 0x1c3c  CertPropSvc - ok
11:31:54.0165 0x1c3c  [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
11:31:54.0180 0x1c3c  circlass - ok
11:31:54.0212 0x1c3c  [ 9905168708DB68849B879B5548F68AB3, B7A495E57B9398704988DC472126CBC5B8D76761A34F51732FBF6CC88E3AB79A ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
11:31:54.0227 0x1c3c  CLFS - ok
11:31:54.0274 0x1c3c  [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
11:31:54.0290 0x1c3c  CmBatt - ok
11:31:54.0337 0x1c3c  [ E708BFF0473EC6B271EA46B65B16CA56, 2B4C661F7C5A4395CA4204122A1C3C8AA766B56C3D01CD8BAAFA18F71FC7B591 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
11:31:54.0368 0x1c3c  CNG - ok
11:31:54.0415 0x1c3c  [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
11:31:54.0446 0x1c3c  CompositeBus - ok
11:31:54.0446 0x1c3c  COMSysApp - ok
11:31:54.0493 0x1c3c  [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
11:31:54.0508 0x1c3c  condrv - ok
11:31:54.0540 0x1c3c  [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
11:31:54.0555 0x1c3c  CryptSvc - ok
11:31:54.0618 0x1c3c  [ F2C69C3D98249DE14D4B2832516D4FD5, 5F622A61A99202802B35532036CFCFDFB1FDEC32465BA8CCAB4C4FAFA336FC2A ] CSC             C:\WINDOWS\system32\drivers\csc.sys
11:31:54.0633 0x1c3c  CSC - ok
11:31:54.0712 0x1c3c  [ 22CCB6AFF617AAC6121DF6CDA5ABF3F4, 7F6F888CF4D7EF93144A791891E41858F7C0CDDC0B65ED09B9CD55EE3734FCCF ] CscService      C:\WINDOWS\System32\cscsvc.dll
11:31:54.0727 0x1c3c  CscService - ok
11:31:54.0774 0x1c3c  [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam             C:\WINDOWS\system32\drivers\dam.sys
11:31:54.0790 0x1c3c  dam - ok
11:31:54.0868 0x1c3c  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
11:31:54.0899 0x1c3c  DcomLaunch - ok
11:31:54.0962 0x1c3c  [ C8650D1F61149AA546BDBC99172EBBC1, D9592ED1B6F23B6EC76A0B93635B6E38702311B0A6982F0F9DEC37FCDAF1288B ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
11:31:54.0977 0x1c3c  defragsvc - ok
11:31:55.0040 0x1c3c  [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\WINDOWS\system32\das.dll
11:31:55.0071 0x1c3c  DeviceAssociationService - ok
11:31:55.0118 0x1c3c  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
11:31:55.0133 0x1c3c  DeviceInstall - ok
11:31:55.0180 0x1c3c  [ 09D9EB9E7898F8E6561473A20CC808B9, 0F511593D36084843E5138AF6D55FE08D77803968AE12A236A02368DB364347E ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
11:31:55.0180 0x1c3c  Dfsc - ok
11:31:55.0244 0x1c3c  [ 41AC348DBD378F618CB4FDEE54270692, A4080C9FF314F52C52E2207E5F7B745A003E931FA42E67E742D34477B5CC0166 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
11:31:55.0260 0x1c3c  dg_ssudbus - ok
11:31:55.0322 0x1c3c  [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
11:31:55.0369 0x1c3c  Dhcp - ok
11:31:55.0400 0x1c3c  [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache        C:\WINDOWS\system32\drivers\discache.sys
11:31:55.0431 0x1c3c  discache - ok
11:31:55.0463 0x1c3c  [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk            C:\WINDOWS\system32\drivers\disk.sys
11:31:55.0478 0x1c3c  disk - ok
11:31:55.0510 0x1c3c  [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
11:31:55.0541 0x1c3c  dmvsc - ok
11:31:55.0588 0x1c3c  [ 066B9710B36AB550E01EEFCA52155968, DCA9F3F4856A6866D3F5A2EEE34E96A83F40198DB0B5AC6381A7568DE1F56FAB ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
11:31:55.0619 0x1c3c  Dnscache - ok
11:31:55.0666 0x1c3c  [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
11:31:55.0682 0x1c3c  dot3svc - ok
11:31:55.0728 0x1c3c  [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS             C:\WINDOWS\system32\dps.dll
11:31:55.0760 0x1c3c  DPS - ok
11:31:55.0791 0x1c3c  [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
11:31:55.0807 0x1c3c  drmkaud - ok
11:31:55.0853 0x1c3c  [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
11:31:55.0885 0x1c3c  DsmSvc - ok
11:31:55.0978 0x1c3c  [ E6AF4DF1817953D73C519B17CF849756, 26A90EB368A3F572086F223ABED87B8FC6F998AE401C9E52BEB5EE76AB052702 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
11:31:56.0041 0x1c3c  DXGKrnl - ok
11:31:56.0072 0x1c3c  [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost         C:\WINDOWS\System32\eapsvc.dll
11:31:56.0103 0x1c3c  Eaphost - ok
11:31:56.0275 0x1c3c  [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
11:31:56.0385 0x1c3c  ebdrv - ok
11:31:56.0416 0x1c3c  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] EFS             C:\WINDOWS\System32\lsass.exe
11:31:56.0432 0x1c3c  EFS - ok
11:31:56.0541 0x1c3c  [ 4B84E647C934EDFF7F28C4B91A5C0864, 909770C436273CFCE606F5FDE5D66AA2A826C85DF03F0CDDAED3D2300E3ADBF7 ] ehRecvr         C:\WINDOWS\ehome\ehRecvr.exe
11:31:56.0557 0x1c3c  ehRecvr - ok
11:31:56.0603 0x1c3c  [ 72781EC7A97E44B9651550D7A83D1B96, E587687BF27DE23326EBFC9E38D461CCE10D3DDA35F7D586ED32A4788AE96718 ] ehSched         C:\WINDOWS\ehome\ehsched.exe
11:31:56.0635 0x1c3c  ehSched - ok
11:31:56.0666 0x1c3c  [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
11:31:56.0682 0x1c3c  EhStorClass - ok
11:31:56.0713 0x1c3c  [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
11:31:56.0728 0x1c3c  EhStorTcgDrv - ok
11:31:56.0744 0x1c3c  [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
11:31:56.0760 0x1c3c  ErrDev - ok
11:31:56.0838 0x1c3c  [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem     C:\WINDOWS\system32\es.dll
11:31:56.0853 0x1c3c  EventSystem - ok
11:31:56.0900 0x1c3c  [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
11:31:56.0932 0x1c3c  exfat - ok
11:31:56.0947 0x1c3c  [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
11:31:56.0963 0x1c3c  fastfat - ok
11:31:57.0010 0x1c3c  [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax             C:\WINDOWS\system32\fxssvc.exe
11:31:57.0041 0x1c3c  Fax - ok
11:31:57.0057 0x1c3c  [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
11:31:57.0088 0x1c3c  fdc - ok
11:31:57.0119 0x1c3c  [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
11:31:57.0135 0x1c3c  fdPHost - ok
11:31:57.0182 0x1c3c  [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
11:31:57.0197 0x1c3c  FDResPub - ok
11:31:57.0244 0x1c3c  [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
11:31:57.0260 0x1c3c  fhsvc - ok
11:31:57.0291 0x1c3c  [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
11:31:57.0307 0x1c3c  FileInfo - ok
11:31:57.0338 0x1c3c  [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
11:31:57.0353 0x1c3c  Filetrace - ok
11:31:57.0432 0x1c3c  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
11:31:57.0447 0x1c3c  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
11:31:57.0447 0x1c3c  Detect skipped due to KSN trusted
11:31:57.0447 0x1c3c  FLEXnet Licensing Service - ok
11:31:57.0478 0x1c3c  [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
11:31:57.0510 0x1c3c  flpydisk - ok
11:31:57.0572 0x1c3c  [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
11:31:57.0603 0x1c3c  FltMgr - ok
11:31:57.0713 0x1c3c  [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache       C:\WINDOWS\system32\FntCache.dll
11:31:57.0744 0x1c3c  FontCache - ok
11:31:57.0900 0x1c3c  [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:31:57.0916 0x1c3c  FontCache3.0.0.0 - ok
11:31:57.0932 0x1c3c  [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
11:31:57.0947 0x1c3c  FsDepends - ok
11:31:57.0979 0x1c3c  [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
11:31:57.0994 0x1c3c  Fs_Rec - ok
11:31:58.0041 0x1c3c  [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
11:31:58.0057 0x1c3c  fvevol - ok
11:31:58.0104 0x1c3c  [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM           C:\WINDOWS\System32\drivers\fxppm.sys
11:31:58.0119 0x1c3c  FxPPM - ok
11:31:58.0150 0x1c3c  [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
11:31:58.0166 0x1c3c  gagp30kx - ok
11:31:58.0197 0x1c3c  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
11:31:58.0213 0x1c3c  GEARAspiWDM - ok
11:31:58.0260 0x1c3c  [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
11:31:58.0260 0x1c3c  gencounter - ok
11:31:58.0307 0x1c3c  [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
11:31:58.0338 0x1c3c  GPIOClx0101 - ok
11:31:58.0400 0x1c3c  [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
11:31:58.0447 0x1c3c  gpsvc - ok
11:31:58.0510 0x1c3c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:31:58.0525 0x1c3c  gupdate - ok
11:31:58.0541 0x1c3c  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:31:58.0557 0x1c3c  gupdatem - ok
11:31:58.0588 0x1c3c  [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys
11:31:58.0619 0x1c3c  HdAudAddService - ok
11:31:58.0650 0x1c3c  [ 7D87B5B6C7188D553E11B59DC7F0B111, FC633DB71E1D72E8AD8F89BBB54324CC6ED17F5594EF55DD0BDB58EE1F601FF5 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
11:31:58.0682 0x1c3c  HDAudBus - ok
11:31:58.0822 0x1c3c  [ B6AC71AAA2B10848F57FC49D55A651AF, 4FAD833654E86F9FAF972AC8AF87FD4A9A765B26B96F096BBD63506B5D521A91 ] HECIx64         C:\WINDOWS\System32\drivers\HECIx64.sys
11:31:58.0916 0x1c3c  HECIx64 - ok
11:31:58.0947 0x1c3c  [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
11:31:58.0963 0x1c3c  HidBatt - ok
11:31:58.0994 0x1c3c  [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
11:31:59.0025 0x1c3c  HidBth - ok
11:31:59.0057 0x1c3c  [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
11:31:59.0057 0x1c3c  hidi2c - ok
11:31:59.0104 0x1c3c  [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
11:31:59.0119 0x1c3c  HidIr - ok
11:31:59.0150 0x1c3c  [ 46BBE8EA221461A65F18A078528F4B2C, C0B0D35E2A6C750E5505156694F41F987AB548449F6C9DB1EEEAF12E5F146AD7 ] hidkmdf         C:\WINDOWS\System32\drivers\hidkmdf.sys
11:31:59.0150 0x1c3c  hidkmdf - ok
11:31:59.0197 0x1c3c  [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv         C:\WINDOWS\system32\hidserv.dll
11:31:59.0197 0x1c3c  hidserv - ok
11:31:59.0244 0x1c3c  [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
11:31:59.0260 0x1c3c  HidUsb - ok
11:31:59.0291 0x1c3c  [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
11:31:59.0322 0x1c3c  hkmsvc - ok
11:31:59.0354 0x1c3c  [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
11:31:59.0369 0x1c3c  HomeGroupListener - ok
11:31:59.0416 0x1c3c  [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
11:31:59.0432 0x1c3c  HomeGroupProvider - ok
11:31:59.0479 0x1c3c  [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
11:31:59.0494 0x1c3c  HpSAMD - ok
11:31:59.0572 0x1c3c  [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
11:31:59.0604 0x1c3c  HTTP - ok
11:31:59.0635 0x1c3c  [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
11:31:59.0666 0x1c3c  hwpolicy - ok
11:31:59.0697 0x1c3c  [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
11:31:59.0713 0x1c3c  hyperkbd - ok
11:31:59.0729 0x1c3c  [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
11:31:59.0760 0x1c3c  HyperVideo - ok
11:31:59.0775 0x1c3c  [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
11:31:59.0807 0x1c3c  i8042prt - ok
11:31:59.0854 0x1c3c  [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
11:31:59.0869 0x1c3c  iaStorV - ok
11:31:59.0900 0x1c3c  [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp           C:\WINDOWS\system32\drivers\iirsp.sys
11:31:59.0916 0x1c3c  iirsp - ok
11:32:00.0010 0x1c3c  [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
11:32:00.0041 0x1c3c  IKEEXT - ok
11:32:00.0088 0x1c3c  [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
11:32:00.0104 0x1c3c  intelide - ok
11:32:00.0150 0x1c3c  [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
11:32:00.0166 0x1c3c  intelppm - ok
11:32:00.0213 0x1c3c  [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
11:32:00.0229 0x1c3c  IpFilterDriver - ok
11:32:00.0322 0x1c3c  [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
11:32:00.0354 0x1c3c  iphlpsvc - ok
11:32:00.0369 0x1c3c  [ 6E98A046A12AA113F8898AA5D612BD6E, 28816CC1F03F2BFBF099C087C0BB6949E959F44C888DD2D0528FF7ED5D665ECF ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
11:32:00.0385 0x1c3c  IPMIDRV - ok
11:32:00.0416 0x1c3c  [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
11:32:00.0432 0x1c3c  IPNAT - ok
11:32:00.0510 0x1c3c  [ 842D1EDD0F2A6E0E6631BB96BAAA01DE, 9CDD0B99F2C5DAD573A9EA8D5AB2DBFD7A941454CBBA5BFE34E49F2D4EE96A90 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
11:32:00.0541 0x1c3c  iPod Service - ok
11:32:00.0572 0x1c3c  [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
11:32:00.0588 0x1c3c  IRENUM - ok
11:32:00.0635 0x1c3c  [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
11:32:00.0650 0x1c3c  isapnp - ok
11:32:00.0697 0x1c3c  [ 69C8BF0BC2B0EA10F130F4D3104DC2EF, 8FFF92828C3DC20F0F42C42E58A03B59A4E0187963F728DC618C9595FB2D0239 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
11:32:00.0713 0x1c3c  iScsiPrt - ok
11:32:00.0744 0x1c3c  [ BD5BF20EC242E003A2F570B8754A56D1, B4B3492222E98BF8E6EC453E727187FF4AA50A508D1E88A0CBBD5C46355AE492 ] ivusb           C:\WINDOWS\System32\drivers\ivusb.sys
11:32:00.0760 0x1c3c  ivusb - ok
11:32:00.0791 0x1c3c  [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
11:32:00.0807 0x1c3c  kbdclass - ok
11:32:00.0838 0x1c3c  [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
11:32:00.0854 0x1c3c  kbdhid - ok
11:32:00.0869 0x1c3c  [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic           C:\WINDOWS\system32\DRIVERS\kdnic.sys
11:32:00.0869 0x1c3c  kdnic - ok
11:32:00.0885 0x1c3c  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] KeyIso          C:\WINDOWS\system32\lsass.exe
11:32:00.0900 0x1c3c  KeyIso - ok
11:32:00.0932 0x1c3c  [ 795EC29BA21F1D948FD6FD740C00B599, 780900717A812C5DB78C67057010BD62DF2C756C087599A6F8C67CB4EFA7518C ] kl1             C:\WINDOWS\system32\DRIVERS\kl1.sys
11:32:00.0963 0x1c3c  kl1 - ok
11:32:00.0979 0x1c3c  [ 2248A9F2B7704271C72E306001C7FBE0, FEC8E10F4FAB332E36C1C5801396174B4CE21186431A2A234CE49695C4674ACA ] klelam          C:\WINDOWS\system32\DRIVERS\klelam.sys
11:32:00.0979 0x1c3c  klelam - ok
11:32:01.0072 0x1c3c  [ BC996B5D96CB7463268DE67E2D99F496, F2763242B69B1290FCAF54B6353BC1469C47D774724249D4CB9BFEC100890970 ] klflt           C:\WINDOWS\system32\DRIVERS\klflt.sys
11:32:01.0088 0x1c3c  klflt - ok
11:32:01.0150 0x1c3c  [ E8D6C80D4E11383CEE269F9C27E6464C, 5E9EAD64AE221AE8BF87730A7FDDF8023805184D12A058A147ECD887FA3D3012 ] KLIF            C:\WINDOWS\system32\DRIVERS\klif.sys
11:32:01.0182 0x1c3c  KLIF - ok
11:32:01.0229 0x1c3c  [ B6822DEFE601629F19E0A2D7F0D623F2, FD71A2AA3FC4698B5436D185E2F2A3EB6A111AE8F35606E1658E2D18CE744F13 ] KLIM6           C:\WINDOWS\system32\DRIVERS\klim6.sys
11:32:01.0244 0x1c3c  KLIM6 - ok
11:32:01.0275 0x1c3c  [ B45DEC5BD71885E833DF3D837CE7C606, 8A81802122EE6BD791E36F9F27D921C9BC4D5B6604C0A79F9F1D806AD44B9869 ] klkbdflt        C:\WINDOWS\system32\DRIVERS\klkbdflt.sys
11:32:01.0275 0x1c3c  klkbdflt - ok
11:32:01.0291 0x1c3c  [ 8849D8F6259D3494E8C5C9482EE40A08, 62C60FD28916407AEF3C4F8B8FF7E5FCDFAE261E772E672E3E06F0D0CA6D6729 ] klmouflt        C:\WINDOWS\system32\DRIVERS\klmouflt.sys
11:32:01.0307 0x1c3c  klmouflt - ok
11:32:01.0338 0x1c3c  [ 8C0EC95AD65A0DE3D6C040591D02BF02, 272FB83752B73684FA7BDBE256FAFD56138E4755AAEFED9E7EF8F0E3D0ACFAF2 ] klpd            C:\WINDOWS\system32\DRIVERS\klpd.sys
11:32:01.0354 0x1c3c  klpd - ok
11:32:01.0385 0x1c3c  [ EAAF7E0936CC5474F433B684A2C68CF2, 5E5E5D324000F2209C7E32DC965FBD822850B4E1351887A93B50FB79844BF781 ] klwfp           C:\WINDOWS\system32\DRIVERS\klwfp.sys
11:32:01.0400 0x1c3c  klwfp - ok
11:32:01.0432 0x1c3c  [ 91BC1C5B00275A4D7FD669EFF0DDEB2A, B745518E1916441A49565478EA77C8DBC784E7B4D9DAD1EA1F648ED1727F413D ] kneps           C:\WINDOWS\system32\DRIVERS\kneps.sys
11:32:01.0447 0x1c3c  kneps - ok
11:32:01.0494 0x1c3c  [ DFA480F6DED551464F3A5B959F437800, C07AB6F28A09FCBE11EECAD03B06CEAE1016EC24031FCA0C092639E90FBA84CF ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
11:32:01.0510 0x1c3c  KSecDD - ok
11:32:01.0557 0x1c3c  [ 127FB0AAD232BAAD2C9BBACD374F4FC5, 3BC56F6B4374062C96149D69ACE053DF81A278F0361599F5A2F3DB1F76F0AD68 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
11:32:01.0572 0x1c3c  KSecPkg - ok
11:32:01.0604 0x1c3c  [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
11:32:01.0619 0x1c3c  ksthunk - ok
11:32:01.0682 0x1c3c  [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
11:32:01.0713 0x1c3c  KtmRm - ok
11:32:01.0775 0x1c3c  [ 256EE31588257E8A555DBFAA13F1908E, B6817F632EDEA483E35BF26846DCDD4E95E860620959179B2A5D8AD7EEDDB126 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
11:32:01.0807 0x1c3c  LanmanServer - ok
11:32:01.0838 0x1c3c  [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
11:32:01.0854 0x1c3c  LanmanWorkstation - ok
11:32:01.0869 0x1c3c  [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
11:32:01.0885 0x1c3c  lltdio - ok
11:32:01.0932 0x1c3c  [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
11:32:01.0963 0x1c3c  lltdsvc - ok
11:32:01.0979 0x1c3c  [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
11:32:02.0010 0x1c3c  lmhosts - ok
11:32:02.0057 0x1c3c  [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
11:32:02.0072 0x1c3c  LSI_SAS - ok
11:32:02.0119 0x1c3c  [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
11:32:02.0135 0x1c3c  LSI_SAS2 - ok
11:32:02.0151 0x1c3c  [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI        C:\WINDOWS\system32\drivers\lsi_scsi.sys
11:32:02.0166 0x1c3c  LSI_SCSI - ok
11:32:02.0197 0x1c3c  [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
11:32:02.0197 0x1c3c  LSI_SSS - ok
11:32:02.0276 0x1c3c  [ A57BA284F5996FFD32DCDBC41A4657DB, 2106B83873A824BC83EF42FAC9DD9A0F741209535A84AE65EA8E786519920043 ] LSM             C:\WINDOWS\System32\lsm.dll
11:32:02.0291 0x1c3c  LSM - ok
11:32:02.0338 0x1c3c  [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
11:32:02.0385 0x1c3c  luafv - ok
11:32:02.0401 0x1c3c  [ 4448CCEA974F0B15A00EA33FCEDFC062, EAA5B156480F6F5B11D4B358489714AF7DB77EB58B841BF0AC284A17B4288CC9 ] Mcx2Svc         C:\WINDOWS\system32\Mcx2Svc.dll
11:32:02.0416 0x1c3c  Mcx2Svc - ok
11:32:02.0432 0x1c3c  [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
11:32:02.0447 0x1c3c  megasas - ok
11:32:02.0510 0x1c3c  [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR          C:\WINDOWS\system32\drivers\MegaSR.sys
11:32:02.0541 0x1c3c  MegaSR - ok
11:32:02.0604 0x1c3c  Microsoft SharePoint Workspace Audit Service - ok
11:32:02.0635 0x1c3c  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS           C:\WINDOWS\system32\mmcss.dll
11:32:02.0635 0x1c3c  MMCSS - ok
11:32:02.0666 0x1c3c  [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem           C:\WINDOWS\system32\drivers\modem.sys
11:32:02.0682 0x1c3c  Modem - ok
11:32:02.0729 0x1c3c  [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
11:32:02.0744 0x1c3c  monitor - ok
11:32:02.0776 0x1c3c  [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
11:32:02.0791 0x1c3c  mouclass - ok
11:32:02.0822 0x1c3c  [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
11:32:02.0854 0x1c3c  mouhid - ok
11:32:02.0869 0x1c3c  [ 89D263DBF08119CE16273991C120D6DD, 9771EDAD266F0E234E71DFB6792F396710E051F2ADCA5CDADEBBD2790D0E6054 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
11:32:02.0869 0x1c3c  mountmgr - ok
11:32:02.0916 0x1c3c  [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
11:32:02.0932 0x1c3c  mpsdrv - ok
11:32:02.0979 0x1c3c  [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
11:32:03.0010 0x1c3c  MpsSvc - ok
11:32:03.0072 0x1c3c  [ 3D70147F55F1EC84EB9139ED7FFE48BC, 12429C2FDDDA13815F0E18F9009011AA5360955759A23A38175543F480CB92EF ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
11:32:03.0104 0x1c3c  MRxDAV - ok
11:32:03.0135 0x1c3c  [ 93179D48066918323628CB016D8C94DC, FE110BF7A10EDD1DF7F6B933D373FCA51F37413282EBC4187E7C9B1965186BCC ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
11:32:03.0151 0x1c3c  mrxsmb - ok
11:32:03.0182 0x1c3c  [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
11:32:03.0197 0x1c3c  mrxsmb10 - ok
11:32:03.0213 0x1c3c  [ 5C7DD2E5759FFCCD2C7341C1B90F2B26, 9822FA53E6067C0E39B7A3A3F1E88719D5D8B055D86FF894F0475B158289EA45 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
11:32:03.0229 0x1c3c  mrxsmb20 - ok
11:32:03.0244 0x1c3c  [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
11:32:03.0276 0x1c3c  MsBridge - ok
11:32:03.0307 0x1c3c  [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC           C:\WINDOWS\System32\msdtc.exe
11:32:03.0322 0x1c3c  MSDTC - ok
11:32:03.0354 0x1c3c  [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
11:32:03.0369 0x1c3c  Msfs - ok
11:32:03.0401 0x1c3c  [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
11:32:03.0416 0x1c3c  msgpiowin32 - ok
11:32:03.0447 0x1c3c  [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
11:32:03.0463 0x1c3c  mshidkmdf - ok
11:32:03.0494 0x1c3c  [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
11:32:03.0494 0x1c3c  mshidumdf - ok
11:32:03.0526 0x1c3c  [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
11:32:03.0526 0x1c3c  msisadrv - ok
11:32:03.0572 0x1c3c  [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
11:32:03.0572 0x1c3c  MSiSCSI - ok
11:32:03.0588 0x1c3c  msiserver - ok
11:32:03.0604 0x1c3c  [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
11:32:03.0604 0x1c3c  MSKSSRV - ok
11:32:03.0619 0x1c3c  [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
11:32:03.0635 0x1c3c  MsLldp - ok
11:32:03.0651 0x1c3c  [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
11:32:03.0666 0x1c3c  MSPCLOCK - ok
11:32:03.0697 0x1c3c  [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
11:32:03.0713 0x1c3c  MSPQM - ok
11:32:03.0744 0x1c3c  [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
11:32:03.0776 0x1c3c  MsRPC - ok
11:32:03.0791 0x1c3c  [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
11:32:03.0807 0x1c3c  mssmbios - ok
11:32:03.0823 0x1c3c  [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
11:32:03.0823 0x1c3c  MSTEE - ok
11:32:03.0869 0x1c3c  [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
11:32:03.0885 0x1c3c  MTConfig - ok
11:32:03.0932 0x1c3c  [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
11:32:03.0947 0x1c3c  Mup - ok
11:32:03.0963 0x1c3c  [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
11:32:03.0979 0x1c3c  mvumis - ok
11:32:04.0010 0x1c3c  [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent        C:\WINDOWS\system32\qagentRT.dll
11:32:04.0041 0x1c3c  napagent - ok
11:32:04.0088 0x1c3c  [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
11:32:04.0119 0x1c3c  NativeWifiP - ok
11:32:04.0135 0x1c3c  [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
11:32:04.0151 0x1c3c  NcaSvc - ok
11:32:04.0197 0x1c3c  [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
11:32:04.0213 0x1c3c  NcdAutoSetup - ok
11:32:04.0307 0x1c3c  [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
11:32:04.0354 0x1c3c  NDIS - ok
11:32:04.0432 0x1c3c  [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap         C:\WINDOWS\system32\DRIVERS\ndiscap.sys
11:32:04.0463 0x1c3c  NdisCap - ok
11:32:04.0494 0x1c3c  [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
11:32:04.0510 0x1c3c  NdisImPlatform - ok
11:32:04.0557 0x1c3c  [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
11:32:04.0572 0x1c3c  NdisTapi - ok
11:32:04.0588 0x1c3c  [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
11:32:04.0604 0x1c3c  Ndisuio - ok
11:32:04.0651 0x1c3c  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:32:04.0666 0x1c3c  NdisWan - ok
11:32:04.0682 0x1c3c  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
11:32:04.0698 0x1c3c  NDISWANLEGACY - ok
11:32:04.0744 0x1c3c  [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
11:32:04.0760 0x1c3c  NDProxy - ok
11:32:04.0791 0x1c3c  [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
11:32:04.0807 0x1c3c  Ndu - ok
11:32:04.0823 0x1c3c  [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
11:32:04.0838 0x1c3c  NetBIOS - ok
11:32:04.0869 0x1c3c  [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
11:32:04.0885 0x1c3c  NetBT - ok
11:32:04.0901 0x1c3c  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] Netlogon        C:\WINDOWS\system32\lsass.exe
11:32:04.0916 0x1c3c  Netlogon - ok
11:32:04.0963 0x1c3c  [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman          C:\WINDOWS\System32\netman.dll
11:32:04.0994 0x1c3c  Netman - ok
11:32:05.0041 0x1c3c  [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
11:32:05.0057 0x1c3c  netprofm - ok
11:32:05.0119 0x1c3c  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:32:05.0151 0x1c3c  NetTcpPortSharing - ok
11:32:05.0182 0x1c3c  [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960         C:\WINDOWS\system32\drivers\nfrd960.sys
11:32:05.0182 0x1c3c  nfrd960 - ok
11:32:05.0229 0x1c3c  [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
11:32:05.0260 0x1c3c  NlaSvc - ok
11:32:05.0291 0x1c3c  [ 5FE6F8C05F0769BBB74AFAC11453B182, ACF6026EF8D038B73484AE59FBD03559E1263CE134473D7A8C3F97CF71BC640C ] nmwcd           C:\WINDOWS\system32\drivers\ccdcmbx64.sys
11:32:05.0307 0x1c3c  nmwcd - ok
11:32:05.0354 0x1c3c  [ 73C929945C0850B8D1FE2FEA05FDF05D, 665FBA777E5EF3F28828D19F2BBCCB778C1C6105BD830C1E29A1C4739663F0D3 ] nmwcdc          C:\WINDOWS\system32\drivers\ccdcmbox64.sys
11:32:05.0385 0x1c3c  nmwcdc - ok
11:32:05.0401 0x1c3c  [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
11:32:05.0416 0x1c3c  Npfs - ok
11:32:05.0463 0x1c3c  [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
11:32:05.0479 0x1c3c  npsvctrig - ok
11:32:05.0526 0x1c3c  [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi             C:\WINDOWS\system32\nsisvc.dll
11:32:05.0526 0x1c3c  nsi - ok
11:32:05.0588 0x1c3c  [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
11:32:05.0604 0x1c3c  nsiproxy - ok
11:32:05.0698 0x1c3c  [ 76929F4A69E425911A63B407E26C2589, 17896DB6EDEF2637D159432DB61E8B5FA2F4F54B5F50BCD6215827C321ED2C2A ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
11:32:05.0760 0x1c3c  Ntfs - ok
11:32:05.0807 0x1c3c  [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null            C:\WINDOWS\system32\drivers\Null.sys
11:32:05.0823 0x1c3c  Null - ok
11:32:05.0869 0x1c3c  [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
11:32:05.0901 0x1c3c  nvraid - ok
11:32:05.0916 0x1c3c  [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
11:32:05.0932 0x1c3c  nvstor - ok
11:32:05.0948 0x1c3c  [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
11:32:05.0963 0x1c3c  nv_agp - ok
11:32:06.0041 0x1c3c  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:32:06.0057 0x1c3c  ose - ok
11:32:06.0307 0x1c3c  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:32:06.0432 0x1c3c  osppsvc - ok
11:32:06.0510 0x1c3c  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
11:32:06.0526 0x1c3c  p2pimsvc - ok
11:32:06.0557 0x1c3c  [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
11:32:06.0573 0x1c3c  p2psvc - ok
11:32:06.0604 0x1c3c  [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport         C:\WINDOWS\System32\drivers\parport.sys
11:32:06.0619 0x1c3c  Parport - ok
11:32:06.0666 0x1c3c  [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
11:32:06.0682 0x1c3c  partmgr - ok
11:32:06.0729 0x1c3c  [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
11:32:06.0760 0x1c3c  PcaSvc - ok
11:32:06.0791 0x1c3c  [ 3FDE033DFB0D07F8B7D5C9A3044AA121, 2C23B4FA34BA3060884B0168A830DD395A3853855CD6DF4065FBB303DFB4A87E ] pccsmcfd        C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys
11:32:06.0807 0x1c3c  pccsmcfd - ok
11:32:06.0838 0x1c3c  [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci             C:\WINDOWS\system32\drivers\pci.sys
11:32:06.0854 0x1c3c  pci - ok
11:32:06.0870 0x1c3c  [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
11:32:06.0870 0x1c3c  pciide - ok
11:32:06.0916 0x1c3c  [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
11:32:06.0948 0x1c3c  pcmcia - ok
11:32:06.0979 0x1c3c  [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
11:32:06.0994 0x1c3c  pcw - ok
11:32:07.0041 0x1c3c  [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
11:32:07.0057 0x1c3c  pdc - ok
11:32:07.0135 0x1c3c  [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
11:32:07.0166 0x1c3c  PEAUTH - ok
11:32:07.0291 0x1c3c  [ DF0D9BDCB600913F40FF125BF8CE1979, 63544C3CEAF47FEEB761FD25BCAE53610C7AD65B7B2295C49D72A7C3C78A376D ] PeerDistSvc     C:\WINDOWS\system32\peerdistsvc.dll
11:32:07.0369 0x1c3c  PeerDistSvc - ok
11:32:07.0479 0x1c3c  [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
11:32:07.0495 0x1c3c  PerfHost - ok
11:32:07.0588 0x1c3c  [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla             C:\WINDOWS\system32\pla.dll
11:32:07.0651 0x1c3c  pla - ok
11:32:07.0698 0x1c3c  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
11:32:07.0729 0x1c3c  PlugPlay - ok
11:32:07.0776 0x1c3c  [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
11:32:07.0807 0x1c3c  PNRPAutoReg - ok
11:32:07.0838 0x1c3c  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
11:32:07.0854 0x1c3c  PNRPsvc - ok
11:32:07.0901 0x1c3c  [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
11:32:07.0932 0x1c3c  PolicyAgent - ok
11:32:07.0979 0x1c3c  [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power           C:\WINDOWS\system32\umpo.dll
11:32:07.0995 0x1c3c  Power - ok
11:32:08.0026 0x1c3c  [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
11:32:08.0057 0x1c3c  PptpMiniport - ok
11:32:08.0246 0x1c3c  [ C2D3B3D0060619D5E03E696BD56FF59F, 155954F16B6F9B51BA16F43F1AE6F977B1EC4DE77862C6F6C722293189BE0DD2 ] PrintNotify     C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
11:32:08.0308 0x1c3c  PrintNotify - ok
11:32:08.0355 0x1c3c  [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor       C:\WINDOWS\System32\drivers\processr.sys
11:32:08.0371 0x1c3c  Processor - ok
11:32:08.0402 0x1c3c  [ 429E8502AD2227CF88F8840FC5BD590D, A186DA46C083580ACEDE9C7E3156865034302CD803140EEEC8E1DE16DA4BC99B ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
11:32:08.0418 0x1c3c  ProfSvc - ok
11:32:08.0464 0x1c3c  [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched          C:\WINDOWS\system32\DRIVERS\pacer.sys
11:32:08.0480 0x1c3c  Psched - ok
11:32:08.0527 0x1c3c  [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE           C:\WINDOWS\system32\qwave.dll
11:32:08.0543 0x1c3c  QWAVE - ok
11:32:08.0543 0x1c3c  [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
11:32:08.0558 0x1c3c  QWAVEdrv - ok
11:32:08.0605 0x1c3c  [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
11:32:08.0621 0x1c3c  RasAcd - ok
11:32:08.0636 0x1c3c  [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn     C:\WINDOWS\system32\DRIVERS\AgileVpn.sys
11:32:08.0668 0x1c3c  RasAgileVpn - ok
11:32:08.0699 0x1c3c  [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
11:32:08.0730 0x1c3c  RasAuto - ok
11:32:08.0746 0x1c3c  [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
11:32:08.0761 0x1c3c  Rasl2tp - ok
11:32:08.0824 0x1c3c  [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan          C:\WINDOWS\System32\rasmans.dll
11:32:08.0855 0x1c3c  RasMan - ok
11:32:08.0902 0x1c3c  [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
11:32:08.0933 0x1c3c  RasPppoe - ok
11:32:08.0933 0x1c3c  [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp         C:\WINDOWS\system32\DRIVERS\rassstp.sys
11:32:08.0949 0x1c3c  RasSstp - ok
11:32:09.0011 0x1c3c  [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
11:32:09.0043 0x1c3c  rdbss - ok
11:32:09.0074 0x1c3c  [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
11:32:09.0089 0x1c3c  rdpbus - ok
11:32:09.0105 0x1c3c  [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
11:32:09.0105 0x1c3c  RDPDR - ok
11:32:09.0152 0x1c3c  [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
11:32:09.0199 0x1c3c  RdpVideoMiniport - ok
11:32:09.0261 0x1c3c  [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
11:32:09.0293 0x1c3c  RDPWD - ok
11:32:09.0324 0x1c3c  [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
11:32:09.0339 0x1c3c  rdyboost - ok
11:32:09.0386 0x1c3c  [ 89525CC2DBAD44F7199B9CC188B3F9C5, 09708EFA65BC1CCF92E6F2E143FCF88C645B1633AFE0DED833CDF945CB077D8C ] RealNetworks Downloader Resolver Service C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
11:32:09.0402 0x1c3c  RealNetworks Downloader Resolver Service - ok
11:32:09.0449 0x1c3c  [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
11:32:09.0480 0x1c3c  RemoteAccess - ok
11:32:09.0496 0x1c3c  [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
11:32:09.0527 0x1c3c  RemoteRegistry - ok
11:32:09.0558 0x1c3c  [ CCBFCABDFE2BC22F0645CEAADDB36004, 279EA9075079F91165027CEFD4FBC61A213CA602EE7DE106F7D2D243468706AA ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
11:32:09.0574 0x1c3c  RFCOMM - ok
11:32:09.0621 0x1c3c  [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
11:32:09.0621 0x1c3c  RpcEptMapper - ok
11:32:09.0668 0x1c3c  [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator      C:\WINDOWS\system32\locator.exe
11:32:09.0668 0x1c3c  RpcLocator - ok
11:32:09.0730 0x1c3c  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
11:32:09.0761 0x1c3c  RpcSs - ok
11:32:09.0808 0x1c3c  [ 2ABD2B3BA2EF0C3BA82284C2A5E28675, 2CDE31DEB899BAC801A9E4EFE15582B80D9B35921C4B92CB2E1E6BEFB7E3EB9C ] RRNetCap        C:\WINDOWS\system32\DRIVERS\rrnetcap.sys
11:32:09.0824 0x1c3c  RRNetCap - ok
11:32:09.0824 0x1c3c  [ 2ABD2B3BA2EF0C3BA82284C2A5E28675, 2CDE31DEB899BAC801A9E4EFE15582B80D9B35921C4B92CB2E1E6BEFB7E3EB9C ] RRNetCapMP      C:\WINDOWS\system32\DRIVERS\rrnetcap.sys
11:32:09.0839 0x1c3c  RRNetCapMP - ok
11:32:09.0933 0x1c3c  [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
11:32:09.0964 0x1c3c  rspndr - ok
11:32:10.0011 0x1c3c  [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
11:32:10.0027 0x1c3c  s3cap - ok
11:32:10.0043 0x1c3c  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] SamSs           C:\WINDOWS\system32\lsass.exe
11:32:10.0058 0x1c3c  SamSs - ok
11:32:10.0105 0x1c3c  [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
11:32:10.0121 0x1c3c  sbp2port - ok
11:32:10.0168 0x1c3c  [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
11:32:10.0183 0x1c3c  SCardSvr - ok
11:32:10.0230 0x1c3c  [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
11:32:10.0246 0x1c3c  scfilter - ok
11:32:10.0340 0x1c3c  [ ED40ED9A65F3E79A8C43DD50C5FDADBF, 2323BFAB1BC3D661A376650B7AC14C7780C92BA575DA048F3C7611CDB3F7F04A ] Schedule        C:\WINDOWS\system32\schedsvc.dll
11:32:10.0386 0x1c3c  Schedule - ok
11:32:10.0418 0x1c3c  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
11:32:10.0449 0x1c3c  SCPolicySvc - ok
11:32:10.0496 0x1c3c  [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
11:32:10.0511 0x1c3c  sdbus - ok
11:32:10.0590 0x1c3c  [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
11:32:10.0605 0x1c3c  SDRSVC - ok
11:32:10.0730 0x1c3c  [ 206387AB881E93A1A6EB89966C8651F1, 3BF9DFF3E70F0787F7F94BE5B9717DFADD9E13AB8154FAE295CEAC834F0835E5 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
11:32:10.0761 0x1c3c  SDScannerService - ok
11:32:10.0808 0x1c3c  [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
11:32:10.0808 0x1c3c  sdstor - ok
11:32:10.0902 0x1c3c  [ A529CFE32565C0B145578FFB2B32C9A5, 4B1596CBDDA74D510707FD475AAB3A89B1203E0B95ECAE3756CAA56555F9F66D ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
11:32:10.0949 0x1c3c  SDUpdateService - ok
11:32:10.0964 0x1c3c  [ CB63BDB77BB86549FC3303C2F11EDC18, 1C96C082B9CE08C8F3C088D5DE68BA8783E6F6A837A88E2654BC4CBCF7B81846 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
11:32:10.0980 0x1c3c  SDWSCService - ok
11:32:11.0011 0x1c3c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\WINDOWS\system32\drivers\secdrv.sys
11:32:11.0027 0x1c3c  secdrv - ok
11:32:11.0074 0x1c3c  [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon        C:\WINDOWS\system32\seclogon.dll
11:32:11.0089 0x1c3c  seclogon - ok
11:32:11.0121 0x1c3c  [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS            C:\WINDOWS\System32\sens.dll
11:32:11.0136 0x1c3c  SENS - ok
11:32:11.0152 0x1c3c  [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
11:32:11.0168 0x1c3c  SensrSvc - ok
11:32:11.0183 0x1c3c  [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
11:32:11.0199 0x1c3c  SerCx - ok
11:32:11.0246 0x1c3c  [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
11:32:11.0261 0x1c3c  Serenum - ok
11:32:11.0277 0x1c3c  [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
11:32:11.0293 0x1c3c  Serial - ok
11:32:11.0308 0x1c3c  [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
11:32:11.0324 0x1c3c  sermouse - ok
11:32:11.0433 0x1c3c  [ C3BB6CF8F9EE199005A2AAE2815AD756, 7A817599C2F3AD819D643223AA714CCCB790EE5983096D8D9CD2D626D6924837 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
11:32:11.0449 0x1c3c  ServiceLayer - ok
11:32:11.0511 0x1c3c  [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
11:32:11.0527 0x1c3c  SessionEnv - ok
11:32:11.0574 0x1c3c  [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
11:32:11.0590 0x1c3c  sfloppy - ok
11:32:11.0636 0x1c3c  [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
11:32:11.0668 0x1c3c  SharedAccess - ok
11:32:11.0730 0x1c3c  [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
11:32:11.0761 0x1c3c  ShellHWDetection - ok
11:32:11.0793 0x1c3c  [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
11:32:11.0808 0x1c3c  SiSRaid2 - ok
11:32:11.0824 0x1c3c  [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
11:32:11.0840 0x1c3c  SiSRaid4 - ok
11:32:11.0886 0x1c3c  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
11:32:11.0918 0x1c3c  SkypeUpdate - ok
11:32:11.0949 0x1c3c  [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
11:32:11.0980 0x1c3c  SNMPTRAP - ok
11:32:12.0043 0x1c3c  [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
11:32:12.0058 0x1c3c  spaceport - ok
11:32:12.0090 0x1c3c  [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
11:32:12.0090 0x1c3c  SpbCx - ok
11:32:12.0152 0x1c3c  [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler         C:\WINDOWS\System32\spoolsv.exe
11:32:12.0183 0x1c3c  Spooler - ok
11:32:12.0402 0x1c3c  [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
11:32:12.0543 0x1c3c  sppsvc - ok
11:32:12.0590 0x1c3c  [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
11:32:12.0605 0x1c3c  srv - ok
11:32:12.0652 0x1c3c  [ 56218A571ECF8D55E0CDFF8DF2546CF1, 44B34722108EDDC8757A0B7C939A854457BB7EBC92A83C4284DFFAECFC2E3619 ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
11:32:12.0699 0x1c3c  srv2 - ok
11:32:12.0746 0x1c3c  [ 14FC338B80CFF7E04215133B568D15C4, 1F437BE0EC887097F0C3409D4198A20981FC325FDF915532AB85070D337DEF2B ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
11:32:12.0777 0x1c3c  srvnet - ok
11:32:12.0808 0x1c3c  [ 2F4595C0AFA2152D67AAE594DC461509, 7CD0C856EC11362EDA45779696EA670DF0047070515DDBDA65C4741EC401CB59 ] SSCBFS3         C:\WINDOWS\System32\drivers\sscbfs3.sys
11:32:12.0824 0x1c3c  SSCBFS3 - ok
11:32:12.0871 0x1c3c  [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
11:32:12.0902 0x1c3c  SSDPSRV - ok
11:32:12.0949 0x1c3c  [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
11:32:12.0965 0x1c3c  SstpSvc - ok
11:32:13.0011 0x1c3c  [ B4C983DA20E2970E21893BF0E4EE2AD8, 473D0E5339A8914775A03F76A805DAD4727FC045E3984F85F54BB92D5214E06F ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
11:32:13.0011 0x1c3c  ssudmdm - ok
11:32:13.0105 0x1c3c  [ 882E2063832AA21716D2C17F11BE4079, 8E2E20960B1D6A2E9C26AB1E1A7BD4571C12B04DD73BB0BA77A22111B78ACD37 ] Start8          C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
11:32:13.0121 0x1c3c  Start8 - ok
11:32:13.0183 0x1c3c  [ 4E85355B94CFCB67C135F6521A4895A7, AC4FC65C1E62A54B3834E7FE0A2B1ECC48A2AA563AE5BD508326EE68FFFBBEEE ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
11:32:13.0199 0x1c3c  stexstor - ok
11:32:13.0261 0x1c3c  [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
11:32:13.0277 0x1c3c  stisvc - ok
11:32:13.0324 0x1c3c  [ B240874B2CA0CD02E8CD11E140B14C57, 0FDBEE3DB644175A30065CAF020F375703ADC45A33221788C010F3111707FC25 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
11:32:13.0340 0x1c3c  storahci - ok
11:32:13.0387 0x1c3c  [ F74DBC95A57B1EE866D3732EB5F79BE2, E4FE9D5CD0A385ACB60D5D5E8D969F26C3A6BC0C08FF0838DBE9CA106229C8DE ] storflt         C:\WINDOWS\system32\DRIVERS\vmstorfl.sys
11:32:13.0418 0x1c3c  storflt - ok
11:32:13.0449 0x1c3c  [ 5337E138B49ED1F44CCBA4073BC35C20, 2B296973215E3865A56C46DC3D27F1460D96BC321558CE7A911B05B0E7BF397F ] StorSvc         C:\WINDOWS\system32\storsvc.dll
11:32:13.0465 0x1c3c  StorSvc - ok
11:32:13.0496 0x1c3c  [ 543CD3CC0E05B8D8815E0D4F040B6F59, 4B57C9534E94A0A67FC82DBD4FAECACA180BEC281FB477550A37C0A04777E09E ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
11:32:13.0511 0x1c3c  storvsc - ok
11:32:13.0543 0x1c3c  [ 1A36AC469140F87CDE62D7F8524E270C, B07086E0D844567FF0A880366EA8ED8042F8ED744E6AB1FD9539F360905A07F2 ] storvsp         C:\WINDOWS\System32\drivers\storvsp.sys
11:32:13.0558 0x1c3c  storvsp - ok
11:32:13.0590 0x1c3c  [ 8BC1C1ED6EF9C985A3FAA6A72F41679A, 82CC77030D23013572B4A64A64B6156789F253BF56268B790093CE3D345410A0 ] svsvc           C:\WINDOWS\system32\svsvc.dll
11:32:13.0605 0x1c3c  svsvc - ok
11:32:13.0621 0x1c3c  [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
11:32:13.0621 0x1c3c  swenum - ok
11:32:13.0730 0x1c3c  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
11:32:13.0761 0x1c3c  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
11:32:13.0761 0x1c3c  Detect skipped due to KSN trusted
11:32:13.0761 0x1c3c  SwitchBoard - ok
11:32:13.0808 0x1c3c  [ 502F9488540051F3E6C39889ECFA76BB, 22ABD681BE4CF8A1F484C6363C1334B1EF7A6C074D837B0121DE1896887B84C6 ] swprv           C:\WINDOWS\System32\swprv.dll
11:32:13.0840 0x1c3c  swprv - ok
11:32:13.0933 0x1c3c  [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] SysMain         C:\WINDOWS\system32\sysmain.dll
11:32:13.0980 0x1c3c  SysMain - ok
11:32:14.0027 0x1c3c  [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
11:32:14.0043 0x1c3c  SystemEventsBroker - ok
11:32:14.0074 0x1c3c  [ A6C06C45C44AD06C70AF8899AEC15BDC, AC2CCCDBA6B94BA85A6D41B47343193D175786D4ECF71AE9C7766ADD63A1273F ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
11:32:14.0090 0x1c3c  TabletInputService - ok
11:32:14.0152 0x1c3c  [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
11:32:14.0168 0x1c3c  TapiSrv - ok
11:32:14.0199 0x1c3c  [ 048CFE7569D6ADCAB9349BB1A566A79E, E248D2A66881FDFF9505896F383EFFEF2FD5AFC15D8992E653F5C31F1F80DAF3 ] tbhsd           C:\WINDOWS\system32\drivers\tbhsd.sys
11:32:14.0215 0x1c3c  tbhsd - ok
11:32:14.0246 0x1c3c  [ BB7C91D0E97AA8126212838D32DCC83C, A32599E53AAAB21A5222B4BB261885FA3930AF968C1B17463920F6AD670668DE ] tclondrv        C:\WINDOWS\system32\DRIVERS\tclondrv.sys
11:32:14.0262 0x1c3c  tclondrv - ok
11:32:14.0355 0x1c3c  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
11:32:14.0433 0x1c3c  Tcpip - ok
11:32:14.0512 0x1c3c  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] TCPIP6          C:\WINDOWS\system32\DRIVERS\tcpip.sys
11:32:14.0590 0x1c3c  TCPIP6 - ok
11:32:14.0605 0x1c3c  [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
11:32:14.0621 0x1c3c  tcpipreg - ok
11:32:14.0652 0x1c3c  [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
11:32:14.0668 0x1c3c  tdx - ok
11:32:14.0699 0x1c3c  [ F7C8AB5D8AFFAA318D6A21093D139BF4, 0A35052EF7DC8615783A23897358D8C579BE694363615C9563FF629E7B719991 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
11:32:14.0715 0x1c3c  terminpt - ok
11:32:14.0793 0x1c3c  [ 541EE228D0DEF392F7B2DFD885DD021B, 594D6538FA4DB5EF4D130007D7C29051EC2EDCA39EBB119695B58E9CBB0EB728 ] TermService     C:\WINDOWS\System32\termsrv.dll
11:32:14.0808 0x1c3c  TermService - ok
11:32:14.0855 0x1c3c  [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] Themes          C:\WINDOWS\system32\themeservice.dll
11:32:14.0887 0x1c3c  Themes - ok
11:32:14.0933 0x1c3c  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] THREADORDER     C:\WINDOWS\system32\mmcss.dll
11:32:14.0933 0x1c3c  THREADORDER - ok
11:32:14.0980 0x1c3c  [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] TimeBroker      C:\WINDOWS\System32\TimeBrokerServer.dll
11:32:15.0012 0x1c3c  TimeBroker - ok
11:32:15.0058 0x1c3c  [ E94F7A7B48C7638D1F3F8089344C97B7, 276CDE59614D563A52529BCC4BFC726E5F5BE131C9C4142558A644D79328C810 ] TPM             C:\WINDOWS\system32\drivers\tpm.sys
11:32:15.0074 0x1c3c  TPM - ok
11:32:15.0121 0x1c3c  [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
11:32:15.0152 0x1c3c  TrkWks - ok
11:32:15.0199 0x1c3c  [ 370A6907DDF79532A39319492B1FA38A, 46AECC5160F04FC3FFE4D37B404CCBBD1C5DC1501C2CEEE8284FF544DBDF10F8 ] truecrypt       C:\WINDOWS\system32\drivers\truecrypt.sys
11:32:15.0215 0x1c3c  truecrypt - ok
11:32:15.0308 0x1c3c  [ 8ABBB5CE0C62E0A6D28F32F44B7F865C, 4C78FE2A4A25A758D5191C4EDB2A6FE691FF82E7C16C0F146DC96DAD87D4F64E ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
11:32:15.0324 0x1c3c  TrustedInstaller - ok
11:32:15.0387 0x1c3c  [ 4E7C5FB10A50435523DE0CAA37DE2BD3, D6206DF61950F2541FB754E57C4D9EF9FA0CC1EDD6F6FA4E45F02B47958493F7 ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
11:32:15.0402 0x1c3c  TsUsbFlt - ok
11:32:15.0449 0x1c3c  [ 16D684A820872EE54F6370703AC0B513, 795E20484358424CE9FA766937DD99413025A8AF967D03490392E8E02A382D0B ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
11:32:15.0574 0x1c3c  TsUsbGD - ok
11:32:15.0605 0x1c3c  [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] tunnel          C:\WINDOWS\system32\DRIVERS\tunnel.sys
11:32:15.0621 0x1c3c  tunnel - ok
11:32:15.0637 0x1c3c  [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A, AA7DA2207C0236F47859A4791F9D7301E7ADB50A59D831DC859ECC7CA70D3E1D ] uagp35          C:\WINDOWS\system32\drivers\uagp35.sys
11:32:15.0652 0x1c3c  uagp35 - ok
11:32:15.0668 0x1c3c  [ 6FD6D03B7752C78712E5CFF29A305026, F09C5188AAFCF4C77B05BA1E604F9912782A9F1371F72F959288EBC2725407ED ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
11:32:15.0683 0x1c3c  UASPStor - ok
11:32:15.0715 0x1c3c  [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] UCX01000        C:\WINDOWS\System32\drivers\ucx01000.sys
11:32:15.0730 0x1c3c  UCX01000 - ok
11:32:15.0793 0x1c3c  [ 25C50F4EDF70D0A831E0566BD181CCF2, F2F9E86FB5617C16077D2073EC0AA747F76F1EB5148BA110347A84F3C3569F83 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
11:32:15.0808 0x1c3c  udfs - ok
11:32:15.0855 0x1c3c  [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D, 16DE6E0894C356A58AF12BEC2FE9B188F147DD4B16CB2414DE600CE4127F929D ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
11:32:15.0871 0x1c3c  UI0Detect - ok
11:32:15.0918 0x1c3c  [ 07FEBCDF24FABA0D47B635D85A0FFB7A, 452C04B14681EBCE8B1B25B75A1B7CC978722B7DDE54D624E17841B14ACCF65D ] uliagpkx        C:\WINDOWS\system32\drivers\uliagpkx.sys
11:32:15.0934 0x1c3c  uliagpkx - ok
11:32:15.0980 0x1c3c  [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
11:32:15.0996 0x1c3c  umbus - ok
11:32:16.0012 0x1c3c  [ 991EE6B5FC41EAEF99C8AF5B92F2CA09, 30AAD7D18FF5962CEC7180359D148EED5A1BF193DDB2B34508897FC3EBA692C3 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
11:32:16.0027 0x1c3c  UmPass - ok
11:32:16.0074 0x1c3c  [ 43FEFB040A0CC30F795FBF544169594D, F2A730C0F7C883321C378D4564120A40428D7F8E393F02C8D6A08934795A35C7 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
11:32:16.0090 0x1c3c  UmRdpService - ok
11:32:16.0137 0x1c3c  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
11:32:16.0137 0x1c3c  UnlockerDriver5 - ok
11:32:16.0199 0x1c3c  [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] upnphost        C:\WINDOWS\System32\upnphost.dll
11:32:16.0246 0x1c3c  upnphost - ok
11:32:16.0277 0x1c3c  [ 34AFB83C7BBA370E404E52CC2290350C, 1B3F9DF6C0DA8166FE02D4B2B8E3D5A432FE84A248516D0F5DA9E42076095AB8 ] upperdev        C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys
11:32:16.0308 0x1c3c  upperdev - ok
11:32:16.0340 0x1c3c  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\WINDOWS\System32\Drivers\usbaapl64.sys
11:32:16.0355 0x1c3c  USBAAPL64 - ok
11:32:16.0402 0x1c3c  [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
11:32:16.0402 0x1c3c  usbccgp - ok
11:32:16.0418 0x1c3c  [ 427B6DB8C05A5A977E8C3525370A2595, C67222CA9123AE12D953995326B3B582C146CEA89594B7209DB0B1F628A0118D ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
11:32:16.0433 0x1c3c  usbcir - ok
11:32:16.0465 0x1c3c  [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
11:32:16.0496 0x1c3c  usbehci - ok
11:32:16.0527 0x1c3c  [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
11:32:16.0543 0x1c3c  usbhub - ok
11:32:16.0605 0x1c3c  [ E5F7328B1D29BCE791862CD3C0DD382A, E520D75CA6E4EDB06F576D97FB6B7CFD46A3EF3A3AC881537DE3BB8C862FE8C3 ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
11:32:16.0621 0x1c3c  USBHUB3 - ok
11:32:16.0668 0x1c3c  [ 325F6179009B5A7F6118951A5BA422AB, 756CB2893530485E8C3ACFF5A40F4C6EB446E72B2296E8772058E407A5E066DE ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
11:32:16.0668 0x1c3c  usbohci - ok
11:32:16.0715 0x1c3c  [ 9FDBA6982582A6F2354144980F641E7B, 054A65412CB22C5BE970FD3A266E140110D869B614B9F9894628D553CE82C991 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
11:32:16.0730 0x1c3c  usbprint - ok
11:32:16.0777 0x1c3c  [ AD91D1BBE5D3CF4501887DC1C09384FD, ED9E27CD1D52401087427EC20E389FBE2497193483C2E53E8DE5D70DACF5D928 ] usbscan         C:\WINDOWS\System32\drivers\usbscan.sys
11:32:16.0793 0x1c3c  usbscan - ok
11:32:16.0809 0x1c3c  [ 4E896888B2FDC694D8EF4462E1C58B78, D64F3A95C87DA3B523C4AD0A68410AE4B927767D1EA9A72EB082E1AFC1E37275 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
11:32:16.0824 0x1c3c  usbser - ok
11:32:16.0840 0x1c3c  [ AA75E1EFBEE7186B4CBAAACF1F15E6CA, D7A3069913CF8A7F281AC2D7C1FA58FA31A05D7E35E93D7588F4B3B18B3377FD ] UsbserFilt      C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys
11:32:16.0871 0x1c3c  UsbserFilt - ok
11:32:16.0902 0x1c3c  [ BFC7FE4AAEB61317A921871B4085EF4B, CBC3FBAEAD6C82A437CC87A97007EF807C64053AB8FA5C3233C2A0CF6FC8D019 ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
11:32:16.0918 0x1c3c  USBSTOR - ok
11:32:16.0949 0x1c3c  [ 1ABF657259DB57F7E5558E4DF1357C0C, 34EAF5DEA3293CFA96BA81B036305FD90ABAE05B9CB73D4F54FB236448C1978C ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
11:32:16.0980 0x1c3c  usbuhci - ok
11:32:16.0996 0x1c3c  [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] usbvideo        C:\WINDOWS\System32\Drivers\usbvideo.sys
11:32:17.0027 0x1c3c  usbvideo - ok
11:32:17.0074 0x1c3c  [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
11:32:17.0090 0x1c3c  USBXHCI - ok
11:32:17.0105 0x1c3c  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
11:32:17.0121 0x1c3c  VaultSvc - ok
11:32:17.0152 0x1c3c  [ BACECBFF9C97F7627A60B0E0F1FE7EE8, DC82F767D066B93A48A090DC7146EBCCDC54B43C6CD9DF29A160E09E3A531DC8 ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
11:32:17.0184 0x1c3c  vdrvroot - ok
11:32:17.0246 0x1c3c  [ 1B4488988E5E7512E6C5CD1255E9E973, B82C26E767A8895CFFD76C11D07D5C945C38E1BD32CC27D20A6C0FA7F6064FC5 ] vds             C:\WINDOWS\System32\vds.exe
11:32:17.0278 0x1c3c  vds - ok
11:32:17.0294 0x1c3c  [ 74FA2D4368DE6F6CE14393EDF1F342BE, C5CE4164B2C3D583A7FB8687ADEADCDB08D36A5AB1965E5FC6949AEED15881C8 ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
11:32:17.0310 0x1c3c  VerifierExt - ok
11:32:17.0372 0x1c3c  [ 500BE6B2E49883720D0AE8BB859ED7A3, 4606B02A3E8123510676E554635EB5ECF9DC5F2B83928710C8563787C52CC102 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
11:32:17.0388 0x1c3c  vhdmp - ok
11:32:17.0419 0x1c3c  [ F5B4A14B00E89250C50982AC762DDD1D, 581CD97DD42E74A82F06BFB827DFC82618B4A8667ACA7E93C628BB0D056CE8F0 ] viaide          C:\WINDOWS\system32\drivers\viaide.sys
11:32:17.0435 0x1c3c  viaide - ok
11:32:17.0481 0x1c3c  [ 0E43886F01C85B47BA0A3157274BCF59, C81E1841B1138D8C224FAF76258F7EB65145CCAF7938CA86CBADD8FFF79BA596 ] Vid             C:\WINDOWS\System32\drivers\Vid.sys
11:32:17.0497 0x1c3c  Vid - ok
11:32:17.0513 0x1c3c  [ 78DB50F7329F6D1311658DABFFFC8BE0, 8CB0C831608033C4BC1D2DA7FAA7D429333A3654E76A989F7AF85BFC5F086BE9 ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
11:32:17.0528 0x1c3c  vmbus - ok
11:32:17.0560 0x1c3c  [ ECFEE2F2BA3932C7880D1A8F67D68F91, 57DCD55A518A9FBDEF72B511C643B1062C3F7BD339F4B0FC19E9D84C615B968D ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
11:32:17.0575 0x1c3c  VMBusHID - ok
11:32:17.0607 0x1c3c  [ B4F432A51826FFC66F4DF72A83E8E4B1, 2C6F4D477F91605A3685FCF9EC6EA798E74C6853CC91547A749E9C050E7C19E8 ] vmbusr          C:\WINDOWS\System32\drivers\vmbusr.sys
11:32:17.0622 0x1c3c  vmbusr - ok
11:32:17.0669 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicheartbeat   C:\WINDOWS\System32\ICSvc.dll
11:32:17.0700 0x1c3c  vmicheartbeat - ok
11:32:17.0716 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
11:32:17.0731 0x1c3c  vmickvpexchange - ok
11:32:17.0747 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicrdv         C:\WINDOWS\System32\ICSvc.dll
11:32:17.0763 0x1c3c  vmicrdv - ok
11:32:17.0778 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicshutdown    C:\WINDOWS\System32\ICSvc.dll
11:32:17.0794 0x1c3c  vmicshutdown - ok
11:32:17.0810 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmictimesync    C:\WINDOWS\System32\ICSvc.dll
11:32:17.0825 0x1c3c  vmictimesync - ok
11:32:17.0841 0x1c3c  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicvss         C:\WINDOWS\System32\ICSvc.dll
11:32:17.0857 0x1c3c  vmicvss - ok
11:32:17.0903 0x1c3c  [ CB60FAAED8B49B812EBBF77EB87D9B18, ADA7C68D4C4981555ED48981E8B7ACBEEF5C39F902EB98782FC3DFF495FE0C33 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
11:32:17.0903 0x1c3c  volmgr - ok
11:32:17.0966 0x1c3c  [ A74101DA9809251BCD0E5A26BAE0F824, 15A3A7CC31A13C5882812C344D0937A8A4503D12DB07B9F7F2A8191B739CDBF7 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
11:32:17.0997 0x1c3c  volmgrx - ok
11:32:18.0028 0x1c3c  [ 78A5BBA3819FFFC62FFEC3E2220D102D, A95797B97D576374C2CDA8A09E6C51A89BADE428AAA89D5093579C85062E5874 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
11:32:18.0060 0x1c3c  volsnap - ok
11:32:18.0107 0x1c3c  [ A8DA1C1B52ECEA3726DEBED4FF1B700D, 75C024EC3858DF24FB82FE105BDD1E37900D53EFE9D72F42CDDFFD0742525586 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
11:32:18.0122 0x1c3c  vpci - ok
11:32:18.0138 0x1c3c  [ 0190AFFF28F600461C0164353CC7EE27, D112DF69C9E629EC77FB95E7ACDDAAE24B5028C84454134BD26FEF9CC953AC0E ] vpcivsp         C:\WINDOWS\System32\drivers\vpcivsp.sys
11:32:18.0153 0x1c3c  vpcivsp - ok
11:32:18.0200 0x1c3c  [ 38A60CD9C009C55C6D3B5586F8E6A353, 7F7E2AE39F1A0A5245650911E310E0948BC22A18262A16FA76B44A042D66312D ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
11:32:18.0232 0x1c3c  vsmraid - ok
11:32:18.0341 0x1c3c  [ D0C69E44BC1E1D4AD290FD84104623D8, 4C86760EA4BD2A64FFD42D89284EC3E5048CB2F0F6F3B80D017B41C0D2456A90 ] VSS             C:\WINDOWS\system32\vssvc.exe
11:32:18.0403 0x1c3c  VSS - ok
11:32:18.0450 0x1c3c  [ A0F6FE0FC2F647C22BBFD6BD4249DBCC, AC2F3C70EDCA0AFBB2606267DFE6D3E8E7B0772140153BAD6B0A9EDE6A1D2F29 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
11:32:18.0482 0x1c3c  VSTXRAID - ok
11:32:18.0497 0x1c3c  [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
11:32:18.0513 0x1c3c  vwifibus - ok
11:32:18.0528 0x1c3c  [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] vwififlt        C:\WINDOWS\system32\DRIVERS\vwififlt.sys
11:32:18.0528 0x1c3c  vwififlt - ok
11:32:18.0544 0x1c3c  [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] vwifimp         C:\WINDOWS\system32\DRIVERS\vwifimp.sys
11:32:18.0560 0x1c3c  vwifimp - ok
11:32:18.0622 0x1c3c  [ F690B6EEAA94576727B24376D7ED3601, A61EE96024C8FC4058481DFB1E7F0AD746565368672FA3B6BA8F9E23D0F47E4C ] W32Time         C:\WINDOWS\system32\w32time.dll
11:32:18.0653 0x1c3c  W32Time - ok
11:32:18.0669 0x1c3c  [ FDA15A0510F84FA46452B74529147A15, DAF92C2B733311B767895175E27B671C80DC028EEB477C28E0209C6467E072D1 ] WacHidRouter    C:\WINDOWS\System32\drivers\wachidrouter.sys
11:32:18.0685 0x1c3c  WacHidRouter - ok
11:32:18.0685 0x1c3c  [ 6B806E893714019969E2B50D7EF6A4D9, 38FE2B01082DC4C2A0C11A292016A727F48C3DF1293DC3A0216B2254A452263F ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
11:32:18.0732 0x1c3c  WacomPen - ok
11:32:18.0778 0x1c3c  [ EABFDBDC9BEDD325F260A3A9FEE5B3F9, 496AD989DA6F500140FCDB88C65CECD4F306D3FBDAACE1D42C5312C1E321B9D1 ] wacomrouterfilter C:\WINDOWS\System32\drivers\wacomrouterfilter.sys
11:32:18.0778 0x1c3c  wacomrouterfilter - ok
11:32:18.0825 0x1c3c  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:32:18.0825 0x1c3c  Wanarp - ok
11:32:18.0841 0x1c3c  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
11:32:18.0857 0x1c3c  Wanarpv6 - ok
11:32:18.0982 0x1c3c  [ 42DF22F8C448E7CD219F6D63743505E2, 063F4280C7BD20CE1360436B76A17DFE17FF611F75337A47373D098CC6C263BF ] wbengine        C:\WINDOWS\system32\wbengine.exe
11:32:19.0028 0x1c3c  wbengine - ok
11:32:19.0075 0x1c3c  [ 31D37B2F6069C631EF0557D322924812, 6E18A1060F3C8F4BF220E286C44327866A8F9109E74928AA2D8C2DA9C452038B ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
11:32:19.0091 0x1c3c  WbioSrvc - ok
11:32:19.0138 0x1c3c  [ AF1349386D4C6786EF4E34FACEF15042, 6B33778409BC54C1955B92508ADDEBAFD629141961B71C94A91DC4CFE8391A13 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
11:32:19.0153 0x1c3c  Wcmsvc - ok
11:32:19.0200 0x1c3c  [ 5B5FEAB51172F5513C2CF7B39CFA6A01, 4FDAC5168E00D44781C6F5D98ECD4977A12663C5CE6FFDFF9DBC89A28D6212D8 ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
11:32:19.0247 0x1c3c  wcncsvc - ok
11:32:19.0263 0x1c3c  [ E19556D414332E2BEBA1F368229006B4, AB3454EC85D7B6E62D44C4510C1547AE7F736558588E54B0E265F7B3A5810E15 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
11:32:19.0278 0x1c3c  WcsPlugInService - ok
11:32:19.0310 0x1c3c  [ B3A4D918DAB90505B6BC7B70632913CB, ECC19DCD7902C29D0682C70B9546CF8B82477A32147EE30EB6750D8499605B46 ] Wd              C:\WINDOWS\system32\drivers\wd.sys
11:32:19.0325 0x1c3c  Wd - ok
11:32:19.0372 0x1c3c  [ 07D19A55CD27B330534D2DDEA60D5FC6, 9C9441EA6943481838F61FD929F88FE25DC60BB8513A2C01CB4712918A883E3F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
11:32:19.0372 0x1c3c  WdBoot - ok
11:32:19.0497 0x1c3c  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
11:32:19.0528 0x1c3c  Wdf01000 - ok
11:32:19.0575 0x1c3c  [ CEBD9CDAADA11FAECCA82E4C06BCDD8E, 6D6E4BF0EB97004F9C07327923C9BD2B451FDDA567FAF39556595302EE5A1A54 ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
11:32:19.0591 0x1c3c  WdFilter - ok
11:32:19.0622 0x1c3c  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
11:32:19.0669 0x1c3c  WdiServiceHost - ok
11:32:19.0685 0x1c3c  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
11:32:19.0700 0x1c3c  WdiSystemHost - ok
11:32:19.0747 0x1c3c  [ 9B1384CE8E681D2D77BB3524B8E86311, BDEF9D0A79A7C26A88088A306F91632F300E587736CDD2C64717EC54DD6E89FF ] WebClient       C:\WINDOWS\System32\webclnt.dll
11:32:19.0778 0x1c3c  WebClient - ok
11:32:19.0794 0x1c3c  [ 35FD720943D4FCD75C3275BF062FF140, 9D8345E6DE1AE23F93AD0B52D27D1CCFD69EF7EE50654F92CA999BEC4570A773 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
11:32:19.0810 0x1c3c  Wecsvc - ok
11:32:19.0857 0x1c3c  [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
11:32:19.0888 0x1c3c  wercplsupport - ok
11:32:19.0919 0x1c3c  [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
11:32:19.0935 0x1c3c  WerSvc - ok
11:32:19.0982 0x1c3c  [ 44BB9C31E6242C4BD1CE7C2B440C2533, E603BB001028918B687818E930340008C752679B133037367A8A8E41DA559FFE ] WFPLWFS         C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
11:32:19.0997 0x1c3c  WFPLWFS - ok
11:32:20.0044 0x1c3c  [ 60E0C220593DA4F7C289CB909D2DBAE0, 057CA7727F748600CC155043081AB9E3244763CF4913F317D13226A515F6FDB6 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
11:32:20.0060 0x1c3c  WiaRpc - ok
11:32:20.0122 0x1c3c  [ A3C7624A42A3447EF5EDD1ED37FE4E60, BD8BDF0A571873FA8277878AF7AED11196CFF1B4DF1EA6BA13BD4887D7B63B94 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
11:32:20.0138 0x1c3c  WIMMount - ok
11:32:20.0216 0x1c3c  WinDefend - ok
11:32:20.0325 0x1c3c  [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
11:32:20.0357 0x1c3c  WinHttpAutoProxySvc - ok
11:32:20.0435 0x1c3c  [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
11:32:20.0466 0x1c3c  Winmgmt - ok
11:32:20.0591 0x1c3c  [ 8E212A627F33F6FC3B5F3BB47212F66E, 9BBFE26ABFA14F346FE3711D13D959523EEA23608A33C16F3D750D66CA511911 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
11:32:20.0685 0x1c3c  WinRM - ok
11:32:20.0732 0x1c3c  [ BB20956C424531003F7FA6CD36F11D5D, 2C55F1C7553A527A7C4C34E730BE943269AE23928731C64D3DC945E07AE1771E ] WinUsb          C:\WINDOWS\system32\DRIVERS\WinUsb.sys
11:32:20.0747 0x1c3c  WinUsb - ok
11:32:20.0841 0x1c3c  [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
11:32:20.0872 0x1c3c  WlanSvc - ok
11:32:20.0997 0x1c3c  [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
11:32:21.0060 0x1c3c  wlidsvc - ok
11:32:21.0200 0x1c3c  [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
11:32:21.0232 0x1c3c  WmiAcpi - ok
11:32:21.0279 0x1c3c  [ D113499052C5E541906B727779F0F959, 05FB51086C0A0CE3812A7E6098C5A454ECCFE8553669CFA715153564F2226DB0 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
11:32:21.0310 0x1c3c  wmiApSrv - ok
11:32:21.0357 0x1c3c  WMPNetworkSvc - ok
11:32:21.0372 0x1c3c  [ C6FF953D5D6F2EAE3B8883474D5076B3, 001CBB7FBC30209C892869258E5ABD3F0932886E156ECB10DCA599F6D32648BE ] wpcfltr         C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
11:32:21.0388 0x1c3c  wpcfltr - ok
11:32:21.0404 0x1c3c  [ A6ED163169876BFD2437E872FE2F1509, C13E8676800EEEF690F51C4DEA660B36C8734AE2CCAAC48054E10D74B98949B8 ] WPCSvc          C:\WINDOWS\System32\wpcsvc.dll
11:32:21.0419 0x1c3c  WPCSvc - ok
11:32:21.0466 0x1c3c  [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
11:32:21.0497 0x1c3c  WPDBusEnum - ok
11:32:21.0513 0x1c3c  [ 0346CAFC181C91C6E2330332EB332ED6, D46F44C339399CAAE13CD71C53A169E95065208E07E5420DE00A4509D6CB056F ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
11:32:21.0529 0x1c3c  WpdUpFltr - ok
11:32:21.0560 0x1c3c  [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
11:32:21.0575 0x1c3c  ws2ifsl - ok
11:32:21.0607 0x1c3c  [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
11:32:21.0638 0x1c3c  wscsvc - ok
11:32:21.0669 0x1c3c  [ 74EFDA0526862C3D8D01A776182798EA, 7C9AD6118CB344C63B60A8BA5FA8C85ADED30933821ABD1427857E826EFC2952 ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
11:32:21.0685 0x1c3c  WSDPrintDevice - ok
11:32:21.0732 0x1c3c  [ FA07DF46070F0826139709EF4D31FB71, 8F46A55D5C4336536E7974C9CEAFED55E7E9E9BF133D2AD0F6A55174F70B2F03 ] WSDScan         C:\WINDOWS\system32\DRIVERS\WSDScan.sys
11:32:21.0747 0x1c3c  WSDScan - ok
11:32:21.0747 0x1c3c  WSearch - ok
11:32:21.0872 0x1c3c  [ D4D04839F3DFAF09D94BAB1016F7A297, 944A41D251F522EE87189C1D01CF7EEE2C70BF4353BA4005C44F03DB485F843F ] WSService       C:\WINDOWS\System32\WSService.dll
11:32:21.0950 0x1c3c  WSService - ok
11:32:22.0013 0x1c3c  [ FF3F745A22B0C9C2EF1600762E8858A1, A63A66537A5316963825A963F2A9EC2BEB68027EB3A2EF28DC2C936FF194915A ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
11:32:22.0044 0x1c3c  WTabletServiceCon - ok
11:32:22.0200 0x1c3c  [ 311E5E1976E0BD9110A88B93158055D5, F1AA738D6AD74C33785EEFE1FBE8A869AAB62417B7D079389293AB1209A849C1 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
11:32:22.0294 0x1c3c  wuauserv - ok
11:32:22.0341 0x1c3c  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
11:32:22.0357 0x1c3c  WudfPf - ok
11:32:22.0372 0x1c3c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
11:32:22.0388 0x1c3c  WUDFRd - ok
11:32:22.0404 0x1c3c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFSensorLP    C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:32:22.0419 0x1c3c  WUDFSensorLP - ok
11:32:22.0435 0x1c3c  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
11:32:22.0450 0x1c3c  wudfsvc - ok
11:32:22.0466 0x1c3c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:32:22.0482 0x1c3c  WUDFWpdFs - ok
11:32:22.0482 0x1c3c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
11:32:22.0497 0x1c3c  WUDFWpdMtp - ok
11:32:22.0560 0x1c3c  [ 6D9E07436B6646EC8F7EFFD39B6BA288, 82C1CEA93ECEF17D221AD0F87C5BD96F3FD8143841C16BD9608BD4D58D90B8E0 ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
11:32:22.0591 0x1c3c  WwanSvc - ok
11:32:22.0654 0x1c3c  [ 537319A784278409FF5353515A39DE38, A69CB8B24861399E9C965A4432717A5F60A09B241160E4777DA14EB50485DA74 ] yukonw8         C:\WINDOWS\system32\DRIVERS\yk63x64.sys
11:32:22.0685 0x1c3c  yukonw8 - ok
11:32:22.0685 0x1c3c  ================ Scan global ===============================
11:32:22.0747 0x1c3c  [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\WINDOWS\system32\basesrv.dll
11:32:22.0810 0x1c3c  [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\WINDOWS\system32\winsrv.dll
11:32:22.0810 0x1c3c  [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\WINDOWS\system32\sxssrv.dll
11:32:22.0841 0x1c3c  [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\WINDOWS\system32\services.exe
11:32:22.0857 0x1c3c  [ Global ] - ok
11:32:22.0857 0x1c3c  ================ Scan MBR ==================================
11:32:22.0872 0x1c3c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:32:23.0951 0x1c3c  \Device\Harddisk0\DR0 - ok
11:32:23.0966 0x1c3c  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
11:32:24.0107 0x1c3c  \Device\Harddisk1\DR1 - ok
11:32:24.0107 0x1c3c  ================ Scan VBR ==================================
11:32:24.0122 0x1c3c  [ 820EEFF5763B186E32E5261854C4E411 ] \Device\Harddisk0\DR0\Partition1
11:32:24.0138 0x1c3c  \Device\Harddisk0\DR0\Partition1 - ok
11:32:24.0154 0x1c3c  [ 5B054FB0321A87CF4312ABEABCB0DFC6 ] \Device\Harddisk0\DR0\Partition2
11:32:24.0154 0x1c3c  \Device\Harddisk0\DR0\Partition2 - ok
11:32:24.0154 0x1c3c  [ 679468958EAF69D7BAF921957BB6C2FA ] \Device\Harddisk1\DR1\Partition1
11:32:24.0154 0x1c3c  \Device\Harddisk1\DR1\Partition1 - ok
11:32:24.0185 0x1c3c  AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmiav.exe ( 14.0.0.4651 ), 0x41000 ( enabled : updated )
11:32:24.0185 0x1c3c  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.4.304.0 ), 0x60100 ( disabled : updated )
11:32:24.0201 0x1c3c  FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmifw.exe ( 14.0.0.4651 ), 0x41010 ( enabled )
11:32:26.0560 0x1c3c  ============================================================
11:32:26.0560 0x1c3c  Scan finished
11:32:26.0560 0x1c3c  ============================================================
11:32:26.0560 0x1d74  Detected object count: 0
11:32:26.0560 0x1d74  Actual detected object count: 0
11:32:58.0944 0x17d8  Deinitialize success
         
Bin ich sauber?

beste Grüße,
m

Alt 11.04.2014, 06:38   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



ja alles sauber.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.04.2014, 11:29   #6
omurphy
 
Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



Super, vielen Dank für die Hilfe.

Hast Du sonst Erfahrung oder eine Idee, wie jemand an mein Passwort für den Webserver gekommen sein könnte? Oder eine Idee, wie man die Schwachstelle finden könnte??

Besten Dank für Deinen tollen Service,
m

Alt 13.04.2014, 14:03   #7
schrauber
/// the machine
/// TB-Ausbilder
 

Keylogger? Passwort ausgespäht! - Standard

Keylogger? Passwort ausgespäht!



Meist einfach Online gehackt. Wenn du nicht noch von einem andern Rechner drauf warst. Passwort ändern, in ein starkes
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Keylogger? Passwort ausgespäht!
bonjour, browser, converter, defender, ebanking, excel, explorer, flash player, format, ftp, google, homepage, internet, kaspersky, langsam, ntdll.dll, registry, rootkit, rundll, scan, security, services.exe, sketchup, software, svchost.exe, system, tablet, tracker, usb, windows xp



Ähnliche Themen: Keylogger? Passwort ausgespäht!


  1. Unbekannte Programme, ausgespäht?
    Log-Analyse und Auswertung - 13.07.2015 (13)
  2. Wird mein Computer ausgespäht?
    Log-Analyse und Auswertung - 12.02.2014 (1)
  3. Virus - DKB Konto ausgespäht - Entrusted Toolbar
    Log-Analyse und Auswertung - 16.08.2013 (8)
  4. Sparkassen-Onlinebanking ausgespäht: EXP/CVE-2013-2423.F sowie TR/Agent.385024.338
    Log-Analyse und Auswertung - 15.05.2013 (24)
  5. GVU nach Kapersky Nutzung als Gast anmelden OK ohne Passwort, nicht als Administrator mit Passwort
    Plagegeister aller Art und deren Bekämpfung - 05.07.2012 (33)
  6. Rechner ausgespäht? Antivirenprogramme finden nichts. :(
    Plagegeister aller Art und deren Bekämpfung - 22.02.2012 (14)
  7. Trojaner hat Email Passwort ausgespäht
    Plagegeister aller Art und deren Bekämpfung - 18.03.2011 (8)
  8. Rechner mit GOZI infiziert - online bankingdaten ausgespäht
    Plagegeister aller Art und deren Bekämpfung - 24.10.2010 (15)
  9. Keylogger Trojan-Spy.Win32.KeyLogger.cqd in Windows32
    Plagegeister aller Art und deren Bekämpfung - 05.08.2010 (1)
  10. WoW Keylogger: Keylogger : TR\FakeAV.C[Trojan]
    Log-Analyse und Auswertung - 20.01.2010 (11)
  11. SchülerVZ-Datenlecks: auch geschützte Informationen ausgespäht
    Nachrichten - 28.10.2009 (0)
  12. SchülerVZ-Datenlecks: Auch geschützte Informationen ausgespäht
    Nachrichten - 28.10.2009 (0)
  13. Mehrere tausend Hotmail-Konten ausgespäht
    Nachrichten - 07.10.2009 (0)
  14. Mehrere tausend Hotmail-Konten ausgespäht
    Nachrichten - 06.10.2009 (0)
  15. FTP Passwörter ausgespäht
    Plagegeister aller Art und deren Bekämpfung - 30.09.2008 (3)
  16. xp advanced keylogger Commercial KeyLogger
    Plagegeister aller Art und deren Bekämpfung - 03.08.2007 (4)
  17. family keylogger Commercial KeyLogger
    Plagegeister aller Art und deren Bekämpfung - 29.03.2006 (17)

Zum Thema Keylogger? Passwort ausgespäht! - Guten Abend! jemand hat sich mit meinem Passwort bei meinem Webhoster eingeloggt und Mist gebaut. Der Hoster-Support tippt auf einen Keylogger auf meinem Rechner - ich halte das für eher - Keylogger? Passwort ausgespäht!...
Archiv
Du betrachtest: Keylogger? Passwort ausgespäht! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.