12:55:25.0385 0x0a84  udfs - ok
12:55:25.0416 0x0a84  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
12:55:25.0447 0x0a84  UI0Detect - ok
12:55:25.0463 0x0a84  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
12:55:25.0463 0x0a84  uliagpkx - ok
12:55:25.0494 0x0a84  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys
12:55:25.0525 0x0a84  umbus - ok
12:55:25.0556 0x0a84  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
12:55:25.0603 0x0a84  UmPass - ok
12:55:25.0759 0x0a84  [ CBDEE152D73200EE49031A26310B9D3E, 92E22235446F8DB3BFE97EDE7DE7D33F43EAC5957C5B41ACCEC4EBFD19BFF819 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
12:55:25.0821 0x0a84  UNS - ok
12:55:25.0837 0x0a84  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
12:55:25.0884 0x0a84  upnphost - ok
12:55:25.0915 0x0a84  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
12:55:25.0962 0x0a84  USBAAPL64 - ok
12:55:25.0993 0x0a84  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
12:55:26.0055 0x0a84  usbaudio - ok
12:55:26.0087 0x0a84  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
12:55:26.0133 0x0a84  usbccgp - ok
12:55:26.0165 0x0a84  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
12:55:26.0211 0x0a84  usbcir - ok
12:55:26.0243 0x0a84  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
12:55:26.0274 0x0a84  usbehci - ok
12:55:26.0305 0x0a84  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
12:55:26.0336 0x0a84  usbhub - ok
12:55:26.0352 0x0a84  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
12:55:26.0383 0x0a84  usbohci - ok
12:55:26.0399 0x0a84  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
12:55:26.0445 0x0a84  usbprint - ok
12:55:26.0508 0x0a84  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:55:26.0539 0x0a84  USBSTOR - ok
12:55:26.0570 0x0a84  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
12:55:26.0601 0x0a84  usbuhci - ok
12:55:26.0648 0x0a84  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
12:55:26.0664 0x0a84  usbvideo - ok
12:55:26.0695 0x0a84  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
12:55:26.0726 0x0a84  UxSms - ok
12:55:26.0726 0x0a84  uzdhxgpw - ok
12:55:26.0742 0x0a84  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc        C:\Windows\system32\lsass.exe
12:55:26.0757 0x0a84  VaultSvc - ok
12:55:26.0789 0x0a84  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
12:55:26.0804 0x0a84  vdrvroot - ok
12:55:26.0851 0x0a84  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
12:55:26.0898 0x0a84  vds - ok
12:55:26.0929 0x0a84  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
12:55:26.0945 0x0a84  vga - ok
12:55:26.0960 0x0a84  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
12:55:26.0991 0x0a84  VgaSave - ok
12:55:27.0023 0x0a84  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
12:55:27.0038 0x0a84  vhdmp - ok
12:55:27.0069 0x0a84  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
12:55:27.0085 0x0a84  viaide - ok
12:55:27.0101 0x0a84  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
12:55:27.0116 0x0a84  volmgr - ok
12:55:27.0163 0x0a84  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
12:55:27.0179 0x0a84  volmgrx - ok
12:55:27.0194 0x0a84  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
12:55:27.0210 0x0a84  volsnap - ok
12:55:27.0210 0x0a84  vparxfrs - ok
12:55:27.0241 0x0a84  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
12:55:27.0257 0x0a84  vsmraid - ok
12:55:27.0350 0x0a84  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
12:55:27.0413 0x0a84  VSS - ok
12:55:27.0428 0x0a84  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
12:55:27.0444 0x0a84  vwifibus - ok
12:55:27.0444 0x0a84  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
12:55:27.0475 0x0a84  vwififlt - ok
12:55:27.0506 0x0a84  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
12:55:27.0537 0x0a84  vwifimp - ok
12:55:27.0569 0x0a84  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
12:55:27.0615 0x0a84  W32Time - ok
12:55:27.0647 0x0a84  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
12:55:27.0647 0x0a84  WacomPen - ok
12:55:27.0678 0x0a84  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
12:55:27.0709 0x0a84  WANARP - ok
12:55:27.0725 0x0a84  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
12:55:27.0756 0x0a84  Wanarpv6 - ok
12:55:27.0787 0x0a84  [ ECEB715BECE47E101DDEC06B11126066, 6BD577D6EABD48B1BA31955DB3DEEE68528EA54375CA64D233B723D161B45CBA ] wanatw          C:\Windows\system32\DRIVERS\wanatw64.sys
12:55:27.0818 0x0a84  wanatw - ok
12:55:27.0881 0x0a84  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
12:55:27.0943 0x0a84  wbengine - ok
12:55:27.0959 0x0a84  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
12:55:27.0990 0x0a84  WbioSrvc - ok
12:55:28.0037 0x0a84  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
12:55:28.0099 0x0a84  wcncsvc - ok
12:55:28.0115 0x0a84  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:55:28.0146 0x0a84  WcsPlugInService - ok
12:55:28.0177 0x0a84  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
12:55:28.0193 0x0a84  Wd - ok
12:55:28.0255 0x0a84  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
12:55:28.0286 0x0a84  Wdf01000 - ok
12:55:28.0317 0x0a84  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
12:55:28.0380 0x0a84  WdiServiceHost - ok
12:55:28.0395 0x0a84  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
12:55:28.0411 0x0a84  WdiSystemHost - ok
12:55:28.0458 0x0a84  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
12:55:28.0489 0x0a84  WebClient - ok
12:55:28.0520 0x0a84  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
12:55:28.0551 0x0a84  Wecsvc - ok
12:55:28.0583 0x0a84  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
12:55:28.0629 0x0a84  wercplsupport - ok
12:55:28.0661 0x0a84  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
12:55:28.0723 0x0a84  WerSvc - ok
12:55:28.0739 0x0a84  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
12:55:28.0770 0x0a84  WfpLwf - ok
12:55:28.0817 0x0a84  [ B14EF15BD757FA488F9C970EEE9C0D35, F27DF2D47E7076786AE7C396583D7A1C56B93E766711066C900964FC7313E794 ] WimFltr         C:\Windows\system32\DRIVERS\wimfltr.sys
12:55:28.0832 0x0a84  WimFltr - ok
12:55:28.0848 0x0a84  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
12:55:28.0863 0x0a84  WIMMount - ok
12:55:28.0879 0x0a84  WinDefend - ok
12:55:28.0879 0x0a84  WinHttpAutoProxySvc - ok
12:55:28.0941 0x0a84  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
12:55:29.0004 0x0a84  Winmgmt - ok
12:55:29.0160 0x0a84  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll
12:55:29.0253 0x0a84  WinRM - ok
12:55:29.0300 0x0a84  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
12:55:29.0316 0x0a84  WinUsb - ok
12:55:29.0363 0x0a84  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
12:55:29.0409 0x0a84  Wlansvc - ok
12:55:29.0550 0x0a84  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:55:29.0612 0x0a84  wlidsvc - ok
12:55:29.0628 0x0a84  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
12:55:29.0659 0x0a84  WmiAcpi - ok
12:55:29.0690 0x0a84  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
12:55:29.0721 0x0a84  wmiApSrv - ok
12:55:29.0737 0x0a84  WMPNetworkSvc - ok
12:55:29.0753 0x0a84  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
12:55:29.0784 0x0a84  WPCSvc - ok
12:55:29.0799 0x0a84  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
12:55:29.0831 0x0a84  WPDBusEnum - ok
12:55:29.0831 0x0a84  wrccyqbi - ok
12:55:29.0846 0x0a84  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
12:55:29.0893 0x0a84  ws2ifsl - ok
12:55:29.0924 0x0a84  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
12:55:29.0940 0x0a84  wscsvc - ok
12:55:29.0957 0x0a84  WSearch - ok
12:55:30.0083 0x0a84  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll
12:55:30.0146 0x0a84  wuauserv - ok
12:55:30.0177 0x0a84  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
12:55:30.0224 0x0a84  WudfPf - ok
12:55:30.0239 0x0a84  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
12:55:30.0270 0x0a84  WUDFRd - ok
12:55:30.0302 0x0a84  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
12:55:30.0302 0x0a84  wudfsvc - ok
12:55:30.0348 0x0a84  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
12:55:30.0364 0x0a84  WwanSvc - ok
12:55:30.0380 0x0a84  ================ Scan global ===============================
12:55:30.0411 0x0a84  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
12:55:30.0442 0x0a84  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
12:55:30.0458 0x0a84  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
12:55:30.0489 0x0a84  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
12:55:30.0536 0x0a84  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
12:55:30.0536 0x0a84  [ Global ] - ok
12:55:30.0536 0x0a84  ================ Scan MBR ==================================
12:55:30.0551 0x0a84  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
12:55:30.0910 0x0a84  \Device\Harddisk0\DR0 - ok
12:55:30.0910 0x0a84  ================ Scan VBR ==================================
12:55:30.0910 0x0a84  [ C390E3589D88C13E2E4B367DD63B5E22 ] \Device\Harddisk0\DR0\Partition1
12:55:30.0910 0x0a84  \Device\Harddisk0\DR0\Partition1 - ok
12:55:30.0926 0x0a84  [ AEE47885D25CCB3430C6EE0DBCC87E6F ] \Device\Harddisk0\DR0\Partition2
12:55:30.0975 0x0a84  \Device\Harddisk0\DR0\Partition2 - ok
12:55:30.0975 0x0a84  ================ Scan generic autorun ======================
12:55:30.0975 0x0a84  SynTPEnh - ok
12:55:31.0209 0x0a84  [ AB729318BD85B82FC4313DCF5DA93C8E, 30677159794FB4D99787C1D795F5CA8E6C97CBE9BF8932E8E1AE2851497D1E37 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
12:55:31.0350 0x0a84  RTHDVCPL - ok
12:55:31.0459 0x0a84  [ 7EB0AE9D61C9CD6FCE90F0E69804487A, 43C5BCC02BC49A1A6A39B16BFAAC5FBBA1C5EAFB1A18BDE87ABB5B6F1B5D4D4F ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
12:55:31.0506 0x0a84  RtHDVBg - ok
12:55:31.0506 0x0a84  NVHotkey - ok
12:55:31.0599 0x0a84  [ F2C49A7AA03FC231BE87A65E50D0B6F6, 549A188E8F1E2CA1E4A82EC4F5D7B45C24BAB2B1177EA848183D72F97E198E38 ] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
12:55:31.0646 0x0a84  IntelWireless - ok
12:55:31.0771 0x0a84  [ 0AD61A3C844EEFE88780749E362D1E57, 5F2EF864827F65130B3292F49A2AFEC45006980D061978DAB31A6ECB1F2A0200 ] c:\Program Files\Dell\QuickSet\QuickSet.exe
12:55:31.0880 0x0a84  QuickSet - detected UnsignedFile.Multi.Generic ( 1 )
12:55:31.0880 0x0a84  Detect skipped due to KSN trusted
12:55:31.0880 0x0a84  QuickSet - ok
12:55:31.0927 0x0a84  [ A358C6D2F299ACDE00D40C605BA5FEDC, FFAE3A508C8756D67E7C37870E53A621D0F174A66E48BBD30B03F2DAF1C0BFB8 ] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
12:55:31.0958 0x0a84  FreeFallProtection - ok
12:55:32.0055 0x0a84  [ A6AAD37CDCAE75CB62D039E3A4D8F5E3, 4FF763B0D129175BA1B1E794BA313E6C63F7A89D377C786BF5E730AF2A1D95D1 ] c:\Program Files\Microsoft Security Client\msseces.exe
12:55:32.0086 0x0a84  MSC - ok
12:55:32.0195 0x0a84  [ 748683C5C27B786CED184D14442E44E9, F8E7B068A9DADDDAB85846FABE65851A857337BB862F3BEB4E6A2944C1FF51FE ] C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.4\help\pt_br\current\speaker.exe
12:55:32.0226 0x0a84  friends - detected UnsignedFile.Multi.Generic ( 1 )
12:55:32.0226 0x0a84  friends ( UnsignedFile.Multi.Generic ) - warning
12:55:32.0226 0x0a84  Force sending object to P2P due to detect: C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.4\help\pt_br\current\speaker.exe
12:55:34.0754 0x0a84  Object send P2P result: true
12:55:37.0234 0x0a84  [ 51C8885B6A00904C0252704C9FB0F43A, BF2F58E6697DB10F3D6FB3859FADC2CE1D3CDD318E487E02FDC2BE171AF6CA29 ] c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
12:55:37.0249 0x0a84  NUSB3MON - ok
12:55:37.0312 0x0a84  [ 25107F58D1B8F60D67D1EE95798C0DE8, C3B5205E8818576EBF33E3B9FD8664A498714B823D9128FC1CA0A64F81499263 ] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
12:55:37.0312 0x0a84  IAStorIcon - ok
12:55:37.0421 0x0a84  [ 4DE3EF07E0854547309C6B40235A9D44, F73D8E6D98583865D1C8DB728058D83C72A3908E21E04EF313FCB829C040A1EC ] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe
12:55:37.0452 0x0a84  ControlCenter3 - detected UnsignedFile.Multi.Generic ( 1 )
12:55:37.0452 0x0a84  Detect skipped due to KSN trusted
12:55:37.0452 0x0a84  ControlCenter3 - ok
12:55:37.0546 0x0a84  [ 640609646D2E6F805E89238F0ADD3A1A, 6E919DD8C93B4F1B7AA00404DDF11FDAA7C050C49028480C8E28F2DF99E99FED ] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
12:55:37.0624 0x0a84  BrStsMon00 - detected UnsignedFile.Multi.Generic ( 1 )
12:55:37.0624 0x0a84  Detect skipped due to KSN trusted
12:55:37.0624 0x0a84  BrStsMon00 - ok
12:55:37.0733 0x0a84  [ 4D5D968FE6AE6BF94A807F73F7FF6B3D, 3D5D5D775EE251C2B903AA8DA804AE4D1632DD59A8A0A36C545FE984FCFE06DD ] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
12:55:37.0795 0x0a84  BrMfcWnd - detected UnsignedFile.Multi.Generic ( 1 )
12:55:37.0795 0x0a84  Detect skipped due to KSN trusted
12:55:37.0795 0x0a84  BrMfcWnd - ok
12:55:37.0858 0x0a84  [ 47EA5F76FAB723C61AB4A0D79BAD512C, A7A38EB0A7068B160E6949945EF639F999A06AE35746F6E79C7350745798E5C9 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
12:55:37.0889 0x0a84  Adobe ARM - ok
12:55:37.0951 0x0a84  [ C482C535CBFEFE722EC1EB7F11F680A3, D7374A4BFEF274F7E33FDA40AA8ED8D8F78448E745A27032FE80475D5B1FAA63 ] C:\Program Files (x86)\Common Files\AOL\1376658552\ee\AOLSoftware.exe
12:55:37.0967 0x0a84  HostManager - ok
12:55:37.0967 0x0a84  ApnTBMon - ok
12:55:38.0029 0x0a84  [ F0CE006E1D14F45959985A05F8E81204, D9FE67DB4CEDB3B09A48C305DDE983A15695EE41C68CE222880D002C0D5D7688 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
12:55:38.0045 0x0a84  APSDaemon - ok
12:55:38.0140 0x0a84  [ 5B6E8E09BE6401A7E022F52FDFCB2FF8, 471C556CF9405BBB380A8CEFE945C126B954B7C94F79CC72441B51F80141FC5E ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
12:55:38.0155 0x0a84  SunJavaUpdateSched - ok
12:55:38.0186 0x0a84  [ A043F2DCB3DE6A01317FD7DDDAA53736, 7BF8BECC4AB5C21C5524F15EA3C5FF48EA2AE44AFCBADB443CFEBB72E2037A09 ] C:\Program Files (x86)\VNT\vntldr.exe
12:55:38.0202 0x0a84  VNT - ok
12:55:38.0296 0x0a84  [ 08E7173D1B74095335052459200CB1EA, 5B6EB8A65B5F451BF6115EB7CD1355E5870E6D764F22D767D13216BF17C5668F ] C:\Program Files (x86)\QuickTime\QTTask.exe
12:55:38.0311 0x0a84  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
12:55:38.0311 0x0a84  Detect skipped due to KSN trusted
12:55:38.0311 0x0a84  QuickTime Task - ok
12:55:38.0342 0x0a84  [ 603668084332DDB58D8C5AACE30B04FC, B6FA6BBE18D433F41F96640726444B7CB9D669BAE87A545E1408391B9469EDB9 ] C:\iTunesHelper.exe
12:55:38.0358 0x0a84  iTunesHelper - ok
12:55:38.0420 0x0a84  [ 6CE36EE8D47C825A8D0C56C846CF636F, 62611B4D1CB67E93BFEFCCE605D33A72C3AF2C362B904B571A9E671A178F73E1 ] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
12:55:38.0452 0x0a84  Launcher - detected UnsignedFile.Multi.Generic ( 1 )
12:55:38.0452 0x0a84  Detect skipped due to KSN trusted
         

Fertig....richtig gelaufen? hab aber ein anderes Fenster bekommen, habe dann so gemacht...Der sich einloggt hat den Namen virtualapp/didlogical Benutzername 02zhtmsdseke. Bei der Anmeldeinformationverwaltung in der Systemsteuerung habe ich den aus dem Tresor rausgeschmissen und stellte fest, dass der sich immer wieder einloggt. Der loggt sich in die gegnerische Anmeldeinformation. Gibts eine Lösung, ihn zu sperren?

Ich weiß ehrlich gesagt nicht was Du meinst.

Wir legen aber jetzt mal los:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.