Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Avira hat unbekanntes Objekt gefunden

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 11.11.2014, 13:20   #1
doomkarloff
 
Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Hallo!

Hab seit einigen Tagen das Problem, dass beim scannen mit Avira eine Meldung erscheint, die mich darüber informiert, dass ein verstecktes Objekt gefunden wurde. Leider ohne Angabe, wo sich dieses befindet und was es bewirkt. Hab zwar schon bemerkt, dass sowas nicht unbedingt schädlich sein muss, verfüge aber nicht über die nötigen Kenntnisse um mir Gewissheit zu verschaffen und möchte daher hier um Hilfe bitten.
Es handelt sich bei dem Gerät um einen ca. 4 Jahre alten Laptop mit Windows 7 32bit.
Hier die Logfiles:

-Farbar's Recovery Scan Tool :
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014
Ran by timo at 2014-11-11 12:49:45
Running from C:\Users\timo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office system (HKLM\...\PROHYBRIDR) (Version: 12.0.4518.1014 - Microsoft Corporation)
ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.1.0805 - Atheros)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)
Business Contact Manager für Outlook 2007 SP1 (HKLM\...\Business Contact Manager) (Version: 3.0.7311.0 - Microsoft Corporation)
Business Contact Manager für Outlook 2007 SP1 (Version: 3.0.7311.0 - Microsoft Corporation) Hidden
CDisplay 1.8 (HKLM\...\CDisplay_is1) (Version:  - dvd8n)
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.2907 - CyberLink Corp.)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{A7581D39-EA20-4883-A480-80C21047052B}) (Version: 4.0.2 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.4 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.2 - Samsung)
Epson Easy Photo Print 2 (HKLM\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.30.01 - SEIKO EPSON Corporation)
Epson Printer Software Downloader (HKLM\...\Epson Printer Software Downloader) (Version:  - )
Epson Printer Software Downloader (Version: 2.0.0 - SEIKO EPSON CORPORATION) Hidden
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
Epson Stylus SX110_TX110 Manual (HKLM\...\Epson Stylus SX110_TX110 User’s Guide) (Version:  - )
EPSON SX110 Series Printer Uninstall (HKLM\...\EPSON SX110 Series) (Version:  - SEIKO EPSON Corporation)
Exact Audio Copy 0.99pb5 (HKLM\...\Exact Audio Copy) (Version: 0.99pb5 - Andre Wiethoff)
GOG.com Downloader version 3.6.0 (HKLM\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2003 Web Components (HKLM\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Live Add-in 1.3 (HKLM\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95120000-0122-0407-0000-0000000FF1CE}) (Version: 12.0.6423.1000 - Microsoft Corporation)
Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{1D1D8ADC-BF08-4E61-9393-5FA305B16864}) (Version: 9.00.3042.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{5C759B74-34F4-43C6-A5D9-039CB754C5E9}) (Version: 9.00.3042.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM\...\{192A107E-C6B9-41B9-BDBF-38E3AA226054}) (Version: 3.2.9483 - OpenOffice.org)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.12 - ProtectDisc Software GmbH)
Realtek Ethernet Controller  Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5919 - Realtek Semiconductor Corp.)
Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.3 - Samsung)
Samsung Support Center (HKLM\...\{4D2121FE-5CCC-4D47-B3A0-BF56045A5099}) (Version: 1.0.1 - Samsung)
Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
Sanitarium (HKLM\...\GOGPACKSANITARIUM_is1) (Version: 2.0.0.25 - GOG.com)
Soda PDF 6 (HKLM\...\Soda6) (Version: 6.1.9.15110 - LULU Software Limited)
Soda PDF 6 Convert Module (HKLM\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Create Module (HKLM\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Edit Module (HKLM\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 Insert Module (HKLM\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)
Soda PDF 6 View Module (HKLM\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)
StarBurn Version 12r10 (Build 0x20091021) (HKLM\...\StarBurn_is1) (Version:  - Rocket Division Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.4.12 - Synaptics Incorporated)
Uniblue RegistryBooster (HKLM\...\{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1) (Version:  - Uniblue Systems Ltd)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.3042.00 - Microsoft Corporation)
Update for Office 2007 (KB934528) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{2B939677-2FFD-48F6-9075-7BF48CB87C80}) (Version:  - )
Update for Office System 2007 Setup (KB929722) (HKLM\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{D8E9BEBD-655F-467D-8176-CA9959C140A3}) (Version:  - )
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
VLC media player 1.0.5 (HKLM\...\VLC media player) (Version: 1.0.5 - VideoLAN Team)
Winamp (HKLM\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

05-11-2014 18:28:14 Installed Dawn of War
05-11-2014 18:34:43 Installed Dawn of War
05-11-2014 18:45:53 Removed Dawn of War
07-11-2014 08:53:29 Windows Update
09-11-2014 18:00:37 Windows-Sicherung
11-11-2014 07:21:25 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0134E946-C63A-4375-B933-66C4B5739623} - System32\Tasks\{0D684E03-E16D-4657-A96B-281EF27DBFB9} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {0242A9DF-9740-4212-AA21-ECD06131135B} - System32\Tasks\{5D3BD2C8-504A-4A2C-8A88-6FC4A2189DBF} => D:\Diablo II\Diablo II\Diablo II.exe
Task: {026DF089-E6DC-478B-AC20-F5E2ABE16E80} - System32\Tasks\{C8CB2A5A-AADB-41FB-A28F-2B3958E7C7A4} => D:\games\wizadry 6\Wizardry.6-www.oldgames.sk-Compilation.exe
Task: {0335267B-AFF2-42F5-8BB3-AD9FAB9235A6} - System32\Tasks\{94688C24-0C83-46B1-8F70-8D8AF5097B85} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {08DC68FB-4A3E-4939-AC3C-A0B0CB50D2E0} - System32\Tasks\{7E5C4542-B930-416F-A1DF-C637B29B5E13} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {0B7F4D0F-1957-4D6C-944D-89EAD093C396} - System32\Tasks\{8747A850-06B9-47C2-9D49-638F24E7C298} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {0EFC1D9E-6D06-48C3-B965-82D7CF46DC74} - System32\Tasks\{67157E9A-15B4-45E5-B2DB-D89FD7072F98} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {1222F01C-8575-47ED-A92E-B0EBD380F660} - System32\Tasks\{27B59D04-90F4-4358-A57B-98BB38D982EB} => E:\English_Autorun.exe
Task: {12C17941-357F-45C0-9F40-C1F7D35C79EC} - System32\Tasks\{035EB14E-99E4-4BDC-B563-671859283180} => C:\Program Files\Oldgames\Wizardry 6\dosbox.exe
Task: {131C6103-3466-44D9-823A-607D75872791} - System32\Tasks\{A9067071-DA0D-46A2-AC0A-0DA413CE554A} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {147CEB48-66A5-4C0D-A3D3-CBC643746E1B} - System32\Tasks\{6BB8EABC-705F-45C1-B0D8-4CE331170BD2} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {1524794D-3B8A-469D-9A00-59B66085AE51} - System32\Tasks\{653CF444-FEB5-4F47-8588-C241F13AABA4} => D:\games\heroes of might\Heroes of Might and Magic III - Complete Portable.exe
Task: {178C394E-6BA7-451B-B8DC-469F7D80294B} - System32\Tasks\{76789700-73E2-479D-80A2-F9A6F1293656} => E:\Setup.exe
Task: {17B5201A-D6DC-4D9B-9EAD-D2A2FB35C324} - System32\Tasks\{8590FDFE-D5AF-4592-BA57-064CADDCDC56} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {19C5ABA3-A29B-4601-A0FE-C1B8C6783078} - System32\Tasks\{6F38A628-3DFA-4428-AC04-6E3938C43CFD} => D:\games\ice2\setup_icewind_dale_2.exe [2010-12-13] (GOG.com                                                     )
Task: {1CCDF7FB-ACBA-4D0A-87CC-1EFE7E679086} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-08-01] (SAMSUNG Electronics co., LTD.)
Task: {1D285DFF-DD13-4771-AC26-C71CE3741614} - System32\Tasks\{927ABDD2-323F-4615-A6ED-437138B5F5E6} => D:\games\heroes of might\Heroes of Might and Magic III - Complete Portable.exe
Task: {1D338013-DBD4-41C5-A32F-05641153F1FE} - System32\Tasks\{28A3445F-0325-4611-847B-1BBA30EB1B7C} => E:\DE\_setup\Setup.exe
Task: {1D6C606A-4B23-4200-97AE-3905E75353D2} - System32\Tasks\{967442DF-2766-48F7-ACB7-D7FE655EB15B} => D:\games\App\Fallout\Falloutw.exe
Task: {21EF02BB-80DF-4DE2-8750-295C0595D56D} - System32\Tasks\{83DF5BB5-8AE9-4162-B927-ADD14941A0CC} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {258BA975-348E-4237-A5F6-0BAB39DA661B} - System32\Tasks\{CB2EDA90-8232-463B-83D9-270E85F20DC4} => E:\INSTALL.EXE
Task: {27BD1143-3D1C-4AE8-9B01-8E5A4EBF67B4} - System32\Tasks\{0CBA4385-9C05-4245-8198-C074AABC1F14} => C:\Program Files\Oldgames\Albion CD English\dosbox.exe
Task: {27D52DB6-73C0-4BA8-A2A6-DCD064B75D11} - System32\Tasks\{E60028E3-3480-4828-9889-3C1B5430A0B1} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {28A3DA61-351F-4B10-B4C8-CBF5D211EE28} - System32\Tasks\{73F94FB2-3176-4FE0-97E0-6C41CBA1D8AF} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {28C66E34-EC52-478E-943A-64A3438F6067} - System32\Tasks\{59328CDC-9D06-43FB-9F82-FB4F8B65A97B} => D:\games\ultima underworld\Ultima.Underworld.12.CD-www.oldgames.sk-Compilation.exe
Task: {2D0CFBF7-2047-44EF-A012-D595203D3020} - System32\Tasks\{22033AC6-0556-4FC2-A05E-81D266A35C41} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {2F2779A8-2F53-444E-ABA7-DB2E6D85FE11} - System32\Tasks\{D38B5250-5032-42E0-A61E-B13481FF1AA9} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {2FAF5A24-366D-486D-B0D4-1D153AE45FB6} - System32\Tasks\{88FD6EDA-E54D-4AAC-9BC1-979A5CC31DED} => C:\Program Files\Oldgames\Albion CD English\dosbox.exe
Task: {31C68D58-AC39-4AF3-8080-45603F50948A} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-09-21] (Samsung Electronics. Co. Ltd.)
Task: {358CD9CF-1880-46B8-A72A-673DF4223E54} - System32\Tasks\Epson Printer Software Downloader => C:\Program Files\EPSON\EPAPDL\E_SAPDL2.EXE [2009-05-26] (SEIKO EPSON CORPORATION)
Task: {394F9CEE-D5BD-412A-9163-70118EA299A8} - System32\Tasks\{4D5F9680-E751-49BE-941E-C45512CE35F1} => E:\PLAYD2.EXE
Task: {39B300CD-719C-49C7-B8AC-260AC841FD9B} - System32\Tasks\{779B8943-B69E-4E4F-BF8A-65B34ADEFEA5} => C:\Program Files\Oldgames\Quake Shareware\dosbox.exe
Task: {3BFDC76E-8060-40EE-9551-73F88ACDC2A1} - System32\Tasks\{1140A744-0382-4E78-8B58-ED5AF3334361} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {3C13E7DD-64BE-4C46-8C96-E47C41484719} - System32\Tasks\{40708FCE-4E0F-4842-BF1D-DF405067FD7C} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {3FB3D3F4-2B40-436F-A697-DFB62C898DB5} - System32\Tasks\{88A05537-56D5-43A2-B21B-0CF5DB25DFD2} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {421B8321-2657-42D0-989F-C3D39F391099} - System32\Tasks\{0334F169-95B4-453C-895B-3D10CFA2E08F} => D:\games\ice2\setup_icewind_dale_2.exe [2010-12-13] (GOG.com                                                     )
Task: {48FF7814-963D-4F92-8835-4673C63315C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
Task: {4C08829E-A62F-48EE-B8A2-A8B5CD566452} - System32\Tasks\{E268C70C-CD56-45CA-8F98-DBEF27C0CB62} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {4E9E2068-4031-4AC0-97A2-839E39BFAD7E} - System32\Tasks\{044C55C6-CBC7-4CE9-92EB-8F0072705873} => E:\Autorun.exe
Task: {50FFF52D-F6F2-4606-BBA3-7F09952C6DDB} - System32\Tasks\{5ECBCD2A-8F57-45E3-AD10-6D9FB132AC07} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {518A6013-36CF-4683-9D6E-340EE2C831C0} - System32\Tasks\{63013C7B-F6CE-4470-AFEC-F0D10669EAE4} => C:\Program Files\Oldgames\Quake Shareware\dosbox.exe
Task: {568E6DE9-9CBC-47C0-AE17-7F928C70261C} - System32\Tasks\{C534239D-97AF-421D-B693-A7BC208340DA} => D:\games\App\Fallout\Falloutw.exe
Task: {59FFE40A-A0F5-4CB7-98BF-705DBB93D662} - System32\Tasks\{A05FB38E-93E5-4B6E-93C3-5DCF4BAF2B57} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {5BC0A524-7DEF-47AC-B6FC-90B9B0E17810} - System32\Tasks\{A2488BE6-5AB1-42DE-9AB1-AFDC23C1167A} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {5DB67C1D-10A6-4B4A-8A85-981D0A234167} - System32\Tasks\{757E2FEE-F022-4945-96E2-415FB3610580} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {5FE27452-E07F-44E5-900B-2703749BA3B9} - System32\Tasks\{2B83E6D8-6572-4F86-A78B-0543974ABE95} => D:\games\Albion.CD.English-www.oldgames.sk-Compilation.exe
Task: {6060DFF4-90BA-49CD-AA7E-228BE1AE6EB1} - System32\Tasks\{3F599AFA-AAE1-4611-9475-181D6F1BAB62} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {60B979E7-B5F7-4220-85E9-1989923D0364} - System32\Tasks\{1D855BA3-07DD-47C1-9753-5EB8812D7A39} => C:\WPIR\wp.exe
Task: {637B864A-1916-40C8-A271-22424AC63256} - System32\Tasks\{93C68D03-E656-4122-97DC-8ADF902CF026} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {65B1985D-A6B4-409E-AFD5-DE22B3623AD6} - System32\Tasks\{4B90D9C1-D531-4BD7-A8A9-8C20597C8335} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {66C32559-3BF4-4CDE-8292-CF653355C3C2} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-09-07] (SAMSUNG Electronics)
Task: {694B5F78-518B-45E7-A7F1-F4BF4773127D} - System32\Tasks\{7FBA864A-540A-4987-A584-F77CF1F074AA} => D:\games\fallout\Fallout\Falloutw.exe
Task: {6AA62FFB-806E-4CAB-8F22-FB2A5CE43619} - System32\Tasks\{4F415B48-F209-4B8F-AAAF-457AD2683C3F} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {71B11801-32B9-4DA5-95BC-100931CC4D79} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-23] (Adobe Systems Incorporated)
Task: {7788BAD6-DF9D-4BA2-BD38-73BD3D1543F5} - System32\Tasks\{0A304364-B9A9-4AC6-9554-E827435E496B} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {8062AE3C-28DD-48D6-9CA3-24F7F956425F} - System32\Tasks\{B3EC30A9-97C1-4772-8E2F-3227322C6C2B} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {843876FD-17DE-43EC-BC4F-AD382CEFA703} - System32\Tasks\{A43C8EA7-92BF-4D23-AAB6-EED0B4BDD636} => D:\games\App\Fallout\Falloutw.exe
Task: {852BC1B9-C5CD-49CF-94E4-FBD172DB4A81} - System32\Tasks\{19C84C46-EB03-4F61-8FA5-F05ACE6A8F2C} => E:\INSTALL.EXE
Task: {8DCEAEB7-FC4C-4248-AF16-BA6C2C12911C} - System32\Tasks\{0535C30B-043F-45F7-A3CB-99DBB7B60699} => C:\Program Files\Oldgames\Quake Shareware\dosbox.exe
Task: {8EC9149A-AAFC-44ED-B4DB-F22B1361B003} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9059E508-43FB-4D32-8924-8141F6C7AEB9} - System32\Tasks\{A0694AB4-693E-46CA-BF0C-4B0FEBCFC042} => C:\Program Files\Oldgames\Wing Commander\dosbox.exe
Task: {91AAEE42-D4C8-4EDA-8578-98D6D329E084} - System32\Tasks\{E60D0CBF-80F1-4B6F-AEB1-D95D3CDBC289} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {9299FFD8-37CD-43EB-A004-D07279182044} - System32\Tasks\{E6179A5A-7747-40E3-AF0D-B1E80136C06A} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {93C827FE-2593-495B-8D4A-92DE8ED623A2} - System32\Tasks\{507FB20F-062B-4712-9C0E-8D71D4606835} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {94435206-BEAA-4242-BA8A-4D7F2F447CB5} - System32\Tasks\{45682AF1-193D-495A-A573-7A6D4BBCFE28} => C:\WPIR\wp.exe
Task: {95CE9878-2EAC-45A4-BD2D-31BBC14E886E} - System32\Tasks\{EF940902-B148-4F1A-A3C7-98CBF60B236F} => E:\PLAYD2.EXE
Task: {987099A3-64EF-4130-8E0D-F5297A5E7956} - System32\Tasks\{1832C78B-B95E-44BB-834E-0DF08F9078B0} => D:\games\gauntlet\gauntlet.exe
Task: {9ADF3464-41C6-441A-BDF1-1E68DE06B0EB} - System32\Tasks\{1FBB2D04-69CA-4143-9A06-279AA60F18BE} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {9B7504EC-5629-4164-AF96-7F50833B2084} - System32\Tasks\{57AD3EEE-AE8D-43D6-B2C5-44E48C661C1A} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {9CC6A6EF-7861-4F24-A29B-41AF02CD75E3} - System32\Tasks\{4BF26CAC-3FFF-4EAF-B077-30F37D468DDB} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {9EC22669-BE54-41E7-9C14-6455C47EBEAB} - System32\Tasks\{9A03A5B0-6EAD-48B3-8DAD-A595218B3FFB} => C:\Program Files\GOG.com\Painkiller Black\Bin\Painkiller.exe
Task: {9F2E32B0-4AA7-48F8-9E9C-DE36D482CFD7} - System32\Tasks\{A2F52AF0-41F6-4441-9296-C400D922C391} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {A16F8143-6362-4415-8E0F-481E6D085932} - System32\Tasks\{7C3AB17D-61A5-4BFA-8F77-3925C5C73701} => D:\games\cadaver\Cadaver-www.oldgames.sk-Compilation.exe
Task: {A2A49A4E-B5C4-47E7-9CD9-1A5F62DD1864} - System32\Tasks\{E903CD99-8247-489B-BE79-3E23BF911A20} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {A2B9B67E-A636-49DD-8D86-BDBEB96B7EF9} - System32\Tasks\{BB585DEE-381F-409D-B7A8-07C6329D64D7} => C:\Program Files\Oldgames\Wizardry 6\dosbox.exe
Task: {A4B1EAED-738C-43C4-AB01-24234C78313E} - System32\Tasks\{B7021DC9-FB52-4F8B-A32B-438DAA52B167} => D:\games\legend of kyrandia\1\Legend.of.Kyrandia-www.oldgames.sk-Compilation.exe
Task: {A6A4519F-ADA4-443A-82CC-276A5E3522DE} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2009-08-06] (SEC)
Task: {A79C8447-8800-436D-9A48-D88F5608BDB8} - System32\Tasks\{B94C9446-E80E-4EA5-8778-D911BB3CD043} => D:\comics\setup.exe
Task: {A8A09220-AD4B-4F59-887C-E5476D982E83} - System32\Tasks\{22A94F76-251B-44EF-BC6A-C1202EE76CFF} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {AC16710C-8B5F-483B-BFFE-6572DB3BE7E5} - System32\Tasks\{77DFEF48-1BD9-414D-93C2-49F13AEE78AA} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {ACD9134C-A7BC-4F24-9D06-2BD684ADFA8F} - System32\Tasks\{41C92353-DCFF-49ED-B393-F46A1B9BA783} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {AEDA5D1C-DAE9-4370-8D03-A1464BAF6283} - System32\Tasks\{17CA05A0-A3A4-4464-81E4-F645740F95DD} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {AFAFE9DC-FE2D-4857-91C3-07EFDF8AAAE1} - System32\Tasks\{D6BBC1EA-150A-4165-874A-5BF07AAA80C9} => C:\WPIR\wp.exe
Task: {B87DFAC2-77C4-480B-A301-DCCFBCD1F9E2} - System32\Tasks\{BAF9144E-BE75-4221-9207-D56FC6603C3B} => F:\DKII.exe
Task: {B9D3A2BD-0683-4878-8536-40ABCEBBAD3B} - System32\Tasks\{5EB61025-0E72-4519-870A-7F45508ABE47} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {BC8BB690-2283-47E7-BB6A-8FAC1BE98275} - System32\Tasks\{59F2047C-DFC5-4772-9FE2-384779D418AE} => C:\Program Files\Bullfrog\Keeper\keepd3d.exe
Task: {C027CD12-0BF7-4AAC-B846-8E0976663CCB} - System32\Tasks\{C8800DE2-2794-4138-8494-5F35CA2F3CDF} => E:\English_Autorun.exe
Task: {C1FCBC19-F0BF-4BF5-A053-F90C989066B7} - System32\Tasks\{ED421752-C5F2-4B29-925D-A18670F50862} => E:\Autorun.exe
Task: {C3B4B48D-A1A7-4726-ABA5-1889E4FB254F} - System32\Tasks\{A6471BA3-9971-479A-9E08-112A9C018A41} => C:\Program Files\Oldgames\Civilization\dosbox.exe
Task: {C4994877-5BF5-4EA6-982D-E8E19654C328} - System32\Tasks\{2044E554-DE69-4853-AE9A-04E4649BB4F9} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {C4C0CF59-AFD6-4E46-8F19-FECAF3AB6955} - System32\Tasks\{78182F41-D2A0-4450-919E-B76F1E472236} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {C548346D-4DBC-488E-A80F-31B079AA760E} - System32\Tasks\{D8479435-A79B-4F71-9705-E48D94D04274} => E:\Autorun.exe
Task: {C7AD6C6B-CB53-402E-BDED-3E55E922E51C} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()
Task: {C81DC1D6-23EE-4F5E-B810-FFE52C15066A} - System32\Tasks\{3A86C937-6983-4336-8BAA-8F9D466B8F82} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {C884E929-BF72-4D6E-937A-292EDF949C9C} - System32\Tasks\{33841BB9-C0AA-4D7D-8048-CB70AAE7160D} => E:\LaunchEAWG.exe
Task: {C9A3991B-88AD-430A-94AF-579DF01E1D21} - System32\Tasks\{734270EF-7747-4F62-B9D0-E68BE01FF2E0} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {C9F080F0-A980-4244-ABA6-451616215971} - System32\Tasks\{1F9FA5AD-C4D0-43FA-8828-80042F35C351} => D:\games\App\Fallout\Falloutw.exe
Task: {CAFB7D56-FA3F-47C2-9D0D-0A2FF4E58CB0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
Task: {D14D0B53-CBD7-4C2D-8026-413A04E463CD} - System32\Tasks\{DF6C123C-3DDD-47C4-AB3C-A4B76E63B56D} => D:\games\ice2\setup_icewind_dale_2.exe [2010-12-13] (GOG.com                                                     )
Task: {D439AAFA-8591-4859-9B96-678281819BDF} - System32\Tasks\{350D93FB-B1C8-4BEE-B15C-300370123EE3} => D:\games\App\Fallout\Falloutw.exe
Task: {DA0B4E71-BBF4-4D8F-8DAE-1D30FA4A9C48} - System32\Tasks\{608C0145-97EE-4134-ACBB-3AB8E2133FCE} => C:\Program Files\Oldgames\Quake Shareware\dosbox.exe
Task: {DB2E3726-A8E2-4743-8669-13387F7AECB0} - System32\Tasks\{F1F85CE7-203C-41AE-B2F8-71A22C9C7C3A} => C:\Program Files\Oldgames\Ultima 7 Complete\dosbox.exe
Task: {DE03E44A-10F9-4436-A333-10759A82C4EC} - System32\Tasks\{3A2ACB3A-AB3F-4702-8860-2D788B4FCDF0} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {DF1FAFBB-D2CC-4736-8C9C-1F2A2BAD7909} - System32\Tasks\{A1DACA33-6E62-4CBC-A097-545A30057CB0} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {DF494502-211B-4A1A-8E87-99EB35E7C8C9} - System32\Tasks\{CAA65B54-003E-4288-9E36-65A43CB52084} => C:\WPIR\wp.exe
Task: {E0190A46-DF2E-4555-86AF-7F1557CDC19D} - System32\Tasks\{D3B1CDC8-E918-4420-ACBF-58FF10C0601D} => D:\games\Albion.CD.English-www.oldgames.sk-Compilation.exe
Task: {E1944071-484B-46F4-A122-B10D39DB06A1} - System32\Tasks\{26433780-8208-4B92-A2A0-208655A23546} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {E39B7D1E-EB72-4456-A3FC-6B61C57132E0} - System32\Tasks\{7751D940-0824-4ED3-B0E7-9A8B2E2DF9FD} => C:\Program Files\Oldgames\Ultima Underworld CD\dosbox.exe
Task: {E458E79A-35CB-42DC-9826-87F5D9BC3C43} - System32\Tasks\{B7F4A197-F663-4501-A9AB-6122A2C10852} => D:\games\gauntlet\gauntlet.exe
Task: {E768B93B-0E22-4ED7-81B0-0A1E6BC305BA} - System32\Tasks\{EFB6D0A0-177C-4D87-8906-D1E7D55BB77F} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {E8E07382-D96D-478C-937F-C16C63B4B4EA} - System32\Tasks\{4BD47C97-A277-43F7-885A-65B45EBAC3B1} => C:\Program Files\GOG.com\Icewind Dale II\IWD2.exe
Task: {EE56097A-1951-40D6-808A-52DA884AA804} - System32\Tasks\{50773828-8FA4-46F5-AF73-E8F0C8CAE55E} => D:\games\heroes of might\Heroes of Might and Magic III - Complete Portable.exe
Task: {EE8EFE70-D3EE-4CAB-BE4D-BDA7BB0FA881} - System32\Tasks\{7556297C-F08A-4271-8EF3-9BF177D6678C} => D:\games\App\Fallout\Falloutw.exe
Task: {EED48309-89BF-4F8A-95C9-17F80EEE878F} - System32\Tasks\{98E079AB-812D-4BEB-978C-61C63A537C29} => C:\Program Files\Oldgames\Cadaver\dosbox.exe
Task: {F1363471-08F4-4B51-AC6C-0371E9A4EFAC} - System32\Tasks\{12F6AAB8-CCE7-433F-B3B2-71DE159CF185} => D:\comics\setup.exe
Task: {F7EB409F-A87B-4F72-B40E-F92CD3623086} - System32\Tasks\{E45EDA73-D4EC-461C-A69F-EC1F72AA6EA7} => D:\games\fallout\Fallout\Falloutw.exe
Task: {FCC85F9D-CE13-4427-ABDC-98A596891E6A} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-08-23] (Samsung Electronics Co., Ltd.)
Task: {FF520546-9FBB-40D0-B9B4-CEE701894095} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-09-08] (Samsung Electronics Co., Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Epson Printer Software Downloader.job => C:\Program Files\EPSON\EPAPDL\E_SAPDL2.EXE
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2009-09-22 06:26 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2010-05-05 15:09 - 2009-03-12 14:45 - 00135168 ____N () C:\Program Files\Epson Software\Event Manager\Assistants\Scan Assistant\ScanEngine.dll
2010-05-05 15:09 - 2008-11-21 12:58 - 00057344 ____N () C:\Program Files\Epson Software\Event Manager\Assistants\Scan Assistant\Satwain.dll
2009-10-20 20:02 - 2010-05-28 15:06 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2014-11-10 21:15 - 2014-11-10 21:15 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
AlternateDataStreams: C:\ProgramData\Temp:5C5A503E
AlternateDataStreams: C:\ProgramData\Temp:A42A9F39
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-771618654-3341757510-301361698-500 - Administrator - Disabled)
Gast (S-1-5-21-771618654-3341757510-301361698-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-771618654-3341757510-301361698-1005 - Limited - Enabled)
timo (S-1-5-21-771618654-3341757510-301361698-1000 - Administrator - Enabled) => C:\Users\timo

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/10/2014 00:44:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/10/2014 00:43:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/10/2014 10:31:37 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/10/2014 10:30:39 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/08/2014 07:07:20 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/07/2014 10:24:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: sntrm.exe, Version: 0.0.0.0, Zeitstempel: 0x3586c914
Name des fehlerhaften Moduls: nvd3dum.dll, Version: 8.16.11.8691, Zeitstempel: 0x4a9cdfac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0029faa7
ID des fehlerhaften Prozesses: 0x7a4
Startzeit der fehlerhaften Anwendung: 0xsntrm.exe0
Pfad der fehlerhaften Anwendung: sntrm.exe1
Pfad des fehlerhaften Moduls: sntrm.exe2
Berichtskennung: sntrm.exe3

Error: (11/07/2014 10:04:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: sntrm.exe, Version: 0.0.0.0, Zeitstempel: 0x3586c914
Name des fehlerhaften Moduls: nvd3dum.dll, Version: 8.16.11.8691, Zeitstempel: 0x4a9cdfac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0029faa7
ID des fehlerhaften Prozesses: 0x1574
Startzeit der fehlerhaften Anwendung: 0xsntrm.exe0
Pfad der fehlerhaften Anwendung: sntrm.exe1
Pfad des fehlerhaften Moduls: sntrm.exe2
Berichtskennung: sntrm.exe3

Error: (11/07/2014 10:58:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.2.5413, Zeitstempel: 0x544ef530
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.2.5413, Zeitstempel: 0x544ed089
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x6e4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (11/07/2014 10:58:17 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 33.0.2.5413 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 634

Startzeit: 01cffa6778d067c8

Endzeit: 11

Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe

Berichts-ID: 56d7452e-6664-11e4-9fff-00245421c7e4

Error: (11/05/2014 07:28:13 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {851da704-56b2-4e09-a667-da7e8636aba9}


System errors:
=============
Error: (11/11/2014 09:56:53 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/11/2014 09:13:28 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/11/2014 08:28:35 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/11/2014 08:15:47 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (11/10/2014 08:20:17 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/10/2014 06:50:21 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/10/2014 06:42:36 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/10/2014 06:42:18 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/10/2014 06:15:51 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (11/10/2014 03:27:10 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Microsoft Office Sessions:
=========================
Error: (03/14/2012 09:39:04 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1189 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
Percentage of memory in use: 38%
Total physical RAM: 3036.61 MB
Available physical RAM: 1882.38 MB
Total Pagefile: 6069.46 MB
Available Pagefile: 4693.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1908.07 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:141.49 GB) (Free:99.52 GB) NTFS
Drive d: () (Fixed) (Total:141.5 GB) (Free:50.55 GB) NTFS
Drive f: (INTENSO) (Fixed) (Total:1862.55 GB) (Free:1381.59 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: 031AA195)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=141.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 5D670B14)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=0C)

==================== End Of Log ============================
         
Defogger:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-11-11 13:14:30
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.PB3O 298.09GB
Running: Gmer-19357.exe; Driver: C:\Users\timo\AppData\Local\Temp\kxldipog.sys


---- System - GMER 2.1 ----

SSDT            935BD3E6                                                                                              ZwCreateSection
SSDT            935BD3F0                                                                                              ZwRequestWaitReplyPort
SSDT            935BD3EB                                                                                              ZwSetContextThread
SSDT            935BD3F5                                                                                              ZwSetSecurityObject
SSDT            935BD3FA                                                                                              ZwSystemDebugControl
SSDT            935BD387                                                                                              ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text           ntoskrnl.exe!ZwRollbackEnlistment + 1409                                                              82C6E9A5 1 Byte  [06]
.text           ntoskrnl.exe!KiDispatchInterrupt + 5A2                                                                82C8E512 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntoskrnl.exe!KeRemoveQueueEx + 14BF                                                                   82C95AB4 4 Bytes  [E6, D3, 5B, 93] {OUT 0xd3, AL; POP EBX; XCHG EBX, EAX}
.text           ntoskrnl.exe!KeRemoveQueueEx + 181B                                                                   82C95E10 4 Bytes  [F0, D3, 5B, 93] {RCR [EBX-0x6d], CL}
.text           ntoskrnl.exe!KeRemoveQueueEx + 185F                                                                   82C95E54 4 Bytes  [EB, D3, 5B, 93] {JMP 0xffffffd5; POP EBX; XCHG EBX, EAX}
.text           ntoskrnl.exe!KeRemoveQueueEx + 18DB                                                                   82C95ED0 4 Bytes  [F5, D3, 5B, 93] {CMC ; RCR [EBX-0x6d], CL}
.text           ntoskrnl.exe!KeRemoveQueueEx + 192F                                                                   82C95F24 4 Bytes  [FA, D3, 5B, 93] {CLI ; RCR [EBX-0x6d], CL}
.text           ...                                                                                                   
.reloc          C:\windows\system32\drivers\acedrv11.sys                                                              section is executable [0x9A1E0300, 0x25D4C, 0xE0000060]

---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtCreateFile                             77B85608 5 Bytes  JMP 5A44C6E0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtFlushBuffersFile                       77B85998 5 Bytes  JMP 5A14D3A3 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtQueryFullAttributesFile                77B86028 5 Bytes  JMP 5A14D620 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtReadFile                               77B862F8 5 Bytes  JMP 5A14D400 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtReadFileScatter                        77B86308 5 Bytes  JMP 5AD76F6A C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtWriteFile                              77B86AA8 5 Bytes  JMP 5A44D5B0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtWriteFileGather                        77B86AB8 5 Bytes  JMP 5AD76F19 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!LdrLoadDll                               77BA22AE 5 Bytes  JMP 73101F43 C:\Program Files\Mozilla Firefox\mozglue.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D      77A394E6 7 Bytes  JMP 5ACDEAD2 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!QueryPerformanceCounter + 13          77A3C4E5 7 Bytes  JMP 5ACDEAF5 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!LoadAppInitDlls + 355                 77A3F5A6 7 Bytes  JMP 5A44913E C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] USER32.dll!GetWindowInfo                           768F4B5E 5 Bytes  JMP 5ABE5F20 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] GDI32.dll!GetViewportOrgEx + 26C                   7689884B 7 Bytes  JMP 5ACDEA53 C:\Program Files\Mozilla Firefox\xul.dll

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                               Wdf01000.sys
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                               Wdf01000.sys
AttachedDevice  \FileSystem\fastfat \Fat                                                                              fltmgr.sys

---- Registry - GMER 2.1 ----

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                      
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                   0xD4 0xC3 0x97 0x02 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                   0
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                0x50 0xE3 0x23 0x79 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                       0xD4 0xC3 0x97 0x02 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                       0
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                    0x50 0xE3 0x23 0x79 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active                    
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@4CB6F829           1002

---- Disk sectors - GMER 2.1 ----

Disk            \Device\Harddisk0\DR0                                                                                 unknown MBR code

---- EOF - GMER 2.1 ----
         
Defogger disable

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:28 on 11/11/2014 (timo)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...
Unable to read sptd.sys
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-
         
Farbar

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014
Ran by timo (administrator) on TIMO-PC on 11-11-2014 12:48:07
Running from C:\Users\timo\Downloads
Loaded Profile: timo (Available profiles: timo)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
(LULU SOFTWARE LIMITED) C:\Program Files\Soda PDF 6\creator-ws.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7711264 2009-08-19] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1541416 2009-07-15] (Synaptics Incorporated)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [84576 2013-07-23] (Nullsoft, Inc.)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [673616 2009-04-07] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-06] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-771618654-3341757510-301361698-1000\...\Run: [EPSON SX110 Series] => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE [199680 2008-09-27] (SEIKO EPSON CORPORATION)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => "C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-18\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
Startup: C:\Users\timo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
URLSearchHook: HKCU - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} -  No File
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_de
SearchScopes: HKCU - {78510FD7-AB37-41C8-B4FC-7218C4C04EDA} URL = hxxp://uk.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Soda PDF 6 Helper -> {ACEC6276-3D7B-4AA9-BE79-23520A23026D} -> C:\Program Files\Soda PDF 6\creator-ie-helper.dll (LULU SOFTWARE LIMITED)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files\Soda PDF 6\creator-ie-plugin.dll (LULU SOFTWARE LIMITED)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\timo\AppData\Roaming\Mozilla\Firefox\Profiles\vr7udw99.default-1414134989753
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=1.6.0_32 -> C:\windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Soda PDF 6 -> C:\Program Files\Soda PDF 6\np-previewer.dll (LULU SOFTWARE LIMITED)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\timo\AppData\Roaming\Mozilla\Firefox\Profiles\vr7udw99.default-1414134989753\searchplugins\goodreads.xml
FF SearchPlugin: C:\Users\timo\AppData\Roaming\Mozilla\Firefox\Profiles\vr7udw99.default-1414134989753\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube Unblocker - C:\Users\timo\AppData\Roaming\Mozilla\Firefox\Profiles\vr7udw99.default-1414134989753\Extensions\youtubeunblocker@unblocker.yt [2014-11-08]
FF Extension: Adblock Plus - C:\Users\timo\AppData\Roaming\Mozilla\Firefox\Profiles\vr7udw99.default-1414134989753\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-24]
FF HKLM\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files\Soda PDF 6\resources\firefoxextension
FF Extension: Soda PDF 6 Creator - C:\Program Files\Soda PDF 6\resources\firefoxextension [2014-04-27]

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [993584 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [143872 2007-12-17] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (SEIKO EPSON CORPORATION)
S3 LULU Software CrashHandler; C:\Program Files\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
S3 Soda PDF 6; C:\Program Files\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)
R2 Soda PDF 6 Creator; C:\Program Files\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 acedrv11; C:\windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)
R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-07] (Avira Operations GmbH & Co. KG)
S4 sptd; C:\windows\System32\Drivers\sptd.sys [691696 2010-01-30] (Duplex Secure Ltd.)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-23] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 12:48 - 2014-11-11 12:48 - 00012572 _____ () C:\Users\timo\Downloads\FRST.txt
2014-11-11 12:47 - 2014-11-11 12:48 - 00000000 ____D () C:\FRST
2014-11-11 12:46 - 2014-11-11 12:47 - 01107968 _____ (Farbar) C:\Users\timo\Downloads\FRST.exe
2014-11-11 12:28 - 2014-11-11 12:29 - 00000630 _____ () C:\Users\timo\Downloads\defogger_disable.log
2014-11-11 12:28 - 2014-11-11 12:29 - 00000020 _____ () C:\Users\timo\defogger_reenable
2014-11-11 12:27 - 2014-11-11 12:27 - 00050477 _____ () C:\Users\timo\Downloads\Defogger.exe
2014-11-10 21:15 - 2014-11-10 21:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-05 22:33 - 2014-11-05 22:33 - 00001665 _____ () C:\Users\Public\Desktop\Sanitarium.lnk
2014-11-05 19:28 - 2014-11-05 19:46 - 00000000 ____D () C:\Program Files\THQ
2014-11-05 15:04 - 2014-11-05 15:10 - 00204268 _____ () C:\AUTO.pat
2014-11-05 15:04 - 2014-11-05 15:10 - 00000020 _____ () C:\AUTO.pst
2014-11-03 21:10 - 2014-11-03 21:10 - 00000000 ____H () C:\windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-11-02 21:49 - 2014-11-02 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-11-02 21:47 - 2014-11-02 21:48 - 06958304 _____ (Microsoft Corporation) C:\Users\timo\Downloads\Silverlight.exe
2014-11-02 21:46 - 2014-11-02 21:46 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-11-02 21:46 - 2014-11-02 21:46 - 00001989 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-11-02 21:46 - 2014-11-02 21:46 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-11-02 21:46 - 2014-11-02 21:46 - 00000000 ____D () C:\Program Files\Adobe
2014-10-30 07:37 - 2014-10-30 07:37 - 00000000 __SHD () C:\Users\timo\AppData\Local\EmieUserList
2014-10-30 07:37 - 2014-10-30 07:37 - 00000000 __SHD () C:\Users\timo\AppData\Local\EmieSiteList
2014-10-28 21:37 - 2014-10-28 21:37 - 00000000 ____D () C:\Users\timo\AppData\Roaming\ScummVM
2014-10-28 13:06 - 2014-10-28 13:06 - 00011015 _____ () C:\Users\timo\Downloads\Schweigepflichtentbindung.html
2014-10-27 06:43 - 2014-10-27 06:46 - 00000000 ____D () C:\Users\timo\AppData\Local\AviraSpeedup
2014-10-24 08:06 - 2014-10-24 08:06 - 00541427 _____ () C:\Users\timo\Downloads\bookmarks.html
2014-10-18 08:41 - 2014-10-10 02:44 - 00396288 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-10-18 08:41 - 2014-10-10 02:44 - 00230912 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2014-10-18 08:41 - 2014-10-10 02:39 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-10-18 08:41 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-10-18 08:41 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-10-18 08:41 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-10-18 08:41 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-10-18 08:41 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-10-18 08:41 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-10-18 08:41 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-10-18 08:41 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-10-18 08:41 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-10-18 08:41 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-10-18 08:41 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-10-18 08:41 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-10-18 08:41 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-10-18 08:41 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-10-18 08:41 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-10-18 08:41 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-10-18 08:41 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-10-18 08:41 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-10-18 08:41 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-10-18 08:41 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-10-18 08:41 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-10-18 08:41 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-10-18 08:41 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-10-18 08:41 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 08:41 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-10-18 08:41 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-10-18 08:41 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-10-18 08:41 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-10-18 08:41 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-10-18 08:41 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-10-18 08:41 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-10-18 08:41 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-10-18 08:38 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2014-10-18 08:38 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2014-10-18 08:38 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2014-10-18 08:37 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-10-18 08:37 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-10-18 08:37 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-10-18 08:37 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-10-18 08:37 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-10-18 08:37 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-10-18 08:37 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2014-10-18 08:37 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2014-10-18 08:37 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-10-18 08:37 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-10-18 08:37 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-10-18 08:37 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-10-18 08:37 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-10-18 08:37 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\system32\locale.nls
2014-10-17 20:05 - 2014-11-09 15:15 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-10-17 20:05 - 2014-10-17 20:06 - 00197066 _____ () C:\windows\system32\Avira_1_Id.Avira.OE.Setup.Msi.log
2014-10-17 18:00 - 2014-11-10 18:58 - 00114904 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-17 18:00 - 2014-10-29 06:10 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-10-17 18:00 - 2014-10-28 07:58 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-17 18:00 - 2014-10-28 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-17 18:00 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-10-17 18:00 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-10-15 00:32 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll
2014-10-15 00:31 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2014-10-15 00:31 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-10-15 00:31 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2014-10-15 00:31 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2014-10-15 00:27 - 2014-08-23 02:46 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-10-15 00:27 - 2014-07-14 02:42 - 00654336 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2014-10-15 00:27 - 2014-07-07 02:40 - 01059840 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-10-15 00:27 - 2014-07-07 02:40 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-10-15 00:27 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2014-10-15 00:27 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2014-10-15 00:27 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2014-10-15 00:25 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-10-14 19:46 - 2014-11-05 22:29 - 00000000 ____D () C:\GOG Games
2014-10-14 18:27 - 2014-11-08 15:48 - 00000000 ____D () C:\Users\timo\AppData\Local\GOG.com
2014-10-14 18:27 - 2014-11-05 22:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-10-13 14:02 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-10-13 08:01 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2014-10-13 08:01 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-10-13 08:01 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-10-13 08:00 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-10-13 07:58 - 2014-10-14 17:31 - 00000000 ____D () C:\814f49f0e9648fc4b538
2014-10-13 07:56 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-10-13 07:56 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 12:38 - 2009-07-14 05:34 - 00023328 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-11 12:38 - 2009-07-14 05:34 - 00023328 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-11 12:34 - 2009-09-22 06:23 - 01102853 _____ () C:\windows\WindowsUpdate.log
2014-11-11 12:31 - 2010-04-08 15:30 - 00001094 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-11 12:30 - 2012-07-29 20:24 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-11 12:30 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-11-11 12:30 - 2009-07-14 05:39 - 00093393 _____ () C:\windows\setupact.log
2014-11-11 12:28 - 2010-01-23 15:43 - 00000000 ____D () C:\Users\timo
2014-11-11 12:16 - 2014-08-10 07:53 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-11-11 12:07 - 2010-04-08 15:30 - 00001098 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-10 16:11 - 2010-05-05 15:11 - 00000238 _____ () C:\windows\Tasks\Epson Printer Software Downloader.job
2014-11-09 15:15 - 2014-10-10 13:34 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-09 15:15 - 2013-10-23 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-09 15:15 - 2013-10-23 21:52 - 00000000 ____D () C:\Program Files\Avira
2014-11-09 15:13 - 2009-07-26 21:06 - 01768124 _____ () C:\windows\system32\PerfStringBackup.INI
2014-11-06 12:00 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\NDF
2014-11-05 22:33 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 19:46 - 2009-09-22 06:19 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-11-04 19:28 - 2010-01-23 16:24 - 00000000 ____D () C:\Users\timo\AppData\Roaming\Adobe
2014-11-03 08:03 - 2010-01-23 15:43 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-03 08:01 - 2010-01-23 15:59 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-11-03 08:01 - 2009-09-22 06:48 - 00824286 _____ () C:\windows\PFRO.log
2014-11-02 21:47 - 2010-01-23 15:44 - 00000000 ____D () C:\Users\timo\AppData\Local\Adobe
2014-10-28 17:09 - 2010-02-10 22:22 - 00000000 ____D () C:\Users\timo\AppData\Roaming\dvdcss
2014-10-28 17:09 - 2010-02-09 10:52 - 00000000 ____D () C:\Users\timo\AppData\Roaming\vlc
2014-10-28 11:35 - 2010-01-28 15:01 - 00000000 ____D () C:\Program Files\FLAC
2014-10-28 06:35 - 2014-02-26 22:34 - 00229000 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-10-24 08:44 - 2009-07-14 03:04 - 00000521 _____ () C:\windows\win.ini
2014-10-23 11:01 - 2014-02-26 19:59 - 00701104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-10-23 11:01 - 2014-02-26 19:59 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-10-22 14:06 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\rescache
2014-10-22 13:12 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-10-18 21:23 - 2009-07-14 05:33 - 00435632 _____ () C:\windows\system32\FNTCACHE.DAT
2014-10-18 21:19 - 2014-05-15 16:48 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-10-18 21:19 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\de-DE
2014-10-18 21:16 - 2013-10-23 23:47 - 00000000 ____D () C:\windows\system32\MRT
2014-10-18 08:59 - 2010-01-26 17:29 - 100290944 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-10-17 20:15 - 2010-01-30 22:34 - 00000000 ____D () C:\Users\timo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-10-17 18:00 - 2014-02-26 19:41 - 00000000 ____D () C:\Users\timo\AppData\Roaming\Malwarebytes
2014-10-17 18:00 - 2014-02-26 19:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-17 17:41 - 2010-01-23 15:52 - 00115488 _____ () C:\Users\timo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-15 00:22 - 2009-09-22 06:20 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2014-10-14 18:27 - 2011-08-08 09:52 - 00000000 ____D () C:\Program Files\GOG.com
2014-10-14 17:40 - 2013-10-23 21:54 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2014-10-14 17:40 - 2013-10-23 21:52 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2014-10-14 17:40 - 2013-10-23 21:52 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys

Some content of TEMP:
====================
C:\Users\timo\AppData\Local\Temp\avgnt.exe
C:\Users\timo\AppData\Local\Temp\drm_dyndata_7330006.dll
C:\Users\timo\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-08 19:06

==================== End Of Log ============================
         
--- --- ---


Gmer :
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-11-11 13:59:29
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.PB3O 298.09GB
Running: Gmer-19357.exe; Driver: C:\Users\timo\AppData\Local\Temp\kxldipog.sys


---- System - GMER 2.1 ----

SSDT            935BD3E6                                                                                              ZwCreateSection
SSDT            935BD3F0                                                                                              ZwRequestWaitReplyPort
SSDT            935BD3EB                                                                                              ZwSetContextThread
SSDT            935BD3F5                                                                                              ZwSetSecurityObject
SSDT            935BD3FA                                                                                              ZwSystemDebugControl
SSDT            935BD387                                                                                              ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

.text           ntoskrnl.exe!ZwRollbackEnlistment + 1409                                                              82C6E9A5 1 Byte  [06]
.text           ntoskrnl.exe!KiDispatchInterrupt + 5A2                                                                82C8E512 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntoskrnl.exe!KeRemoveQueueEx + 14BF                                                                   82C95AB4 4 Bytes  [E6, D3, 5B, 93] {OUT 0xd3, AL; POP EBX; XCHG EBX, EAX}
.text           ntoskrnl.exe!KeRemoveQueueEx + 181B                                                                   82C95E10 4 Bytes  [F0, D3, 5B, 93] {RCR [EBX-0x6d], CL}
.text           ntoskrnl.exe!KeRemoveQueueEx + 185F                                                                   82C95E54 4 Bytes  [EB, D3, 5B, 93] {JMP 0xffffffd5; POP EBX; XCHG EBX, EAX}
.text           ntoskrnl.exe!KeRemoveQueueEx + 18DB                                                                   82C95ED0 4 Bytes  [F5, D3, 5B, 93] {CMC ; RCR [EBX-0x6d], CL}
.text           ntoskrnl.exe!KeRemoveQueueEx + 192F                                                                   82C95F24 4 Bytes  [FA, D3, 5B, 93] {CLI ; RCR [EBX-0x6d], CL}
.text           ...                                                                                                   
.reloc          C:\windows\system32\drivers\acedrv11.sys                                                              section is executable [0x9A1E0300, 0x25D4C, 0xE0000060]

---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtCreateFile                             77B85608 5 Bytes  JMP 5A44C6E0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtFlushBuffersFile                       77B85998 5 Bytes  JMP 5A14D3A3 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtQueryFullAttributesFile                77B86028 5 Bytes  JMP 5A14D620 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtReadFile                               77B862F8 5 Bytes  JMP 5A14D400 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtReadFileScatter                        77B86308 5 Bytes  JMP 5AD76F6A C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtWriteFile                              77B86AA8 5 Bytes  JMP 5A44D5B0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!NtWriteFileGather                        77B86AB8 5 Bytes  JMP 5AD76F19 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] ntdll.dll!LdrLoadDll                               77BA22AE 5 Bytes  JMP 73101F43 C:\Program Files\Mozilla Firefox\mozglue.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D      77A394E6 7 Bytes  JMP 5ACDEAD2 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!QueryPerformanceCounter + 13          77A3C4E5 7 Bytes  JMP 5ACDEAF5 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] kernel32.dll!LoadAppInitDlls + 355                 77A3F5A6 7 Bytes  JMP 5A44913E C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] USER32.dll!GetWindowInfo                           768F4B5E 5 Bytes  JMP 5ABE5F20 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2876] GDI32.dll!GetViewportOrgEx + 26C                   7689884B 7 Bytes  JMP 5ACDEA53 C:\Program Files\Mozilla Firefox\xul.dll

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                               Wdf01000.sys
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                               Wdf01000.sys
AttachedDevice  \FileSystem\fastfat \Fat                                                                              fltmgr.sys

---- Registry - GMER 2.1 ----

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                      
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                   0xD4 0xC3 0x97 0x02 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                   0
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                0x50 0xE3 0x23 0x79 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                       0xD4 0xC3 0x97 0x02 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                       0
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                    0x50 0xE3 0x23 0x79 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active                    
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@4CB6F829           1002

---- Disk sectors - GMER 2.1 ----

Disk            \Device\Harddisk0\DR0                                                                                 unknown MBR code

---- EOF - GMER 2.1 ----
         
letzter Avirascan:


Avira Free Antivirus
Erstellungsdatum der Reportdatei: Dienstag, 11. November 2014 08:28


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : TIMO-PC

Versionsinformationen:
BUILD.DAT : 14.0.7.342 92013 Bytes 10/23/2014 14:02:00
AVSCAN.EXE : 14.0.7.312 1015544 Bytes 11/6/2014 10:52:07
AVSCANRC.DLL : 14.0.7.308 64304 Bytes 11/6/2014 10:52:07
LUKE.DLL : 14.0.7.310 60664 Bytes 11/6/2014 10:54:25
AVSCPLR.DLL : 14.0.7.310 93488 Bytes 11/6/2014 10:52:07
REPAIR.DLL : 14.0.7.312 366328 Bytes 11/6/2014 10:52:00
REPAIR.RDF : 1.0.2.30 596694 Bytes 10/24/2014 07:07:50
AVREG.DLL : 14.0.7.310 264952 Bytes 11/6/2014 10:51:57
AVLODE.DLL : 14.0.7.312 563448 Bytes 11/6/2014 10:51:54
AVLODE.RDF : 14.0.4.46 64835 Bytes 10/10/2014 12:18:33
XBV00011.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00012.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00013.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00014.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00015.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00016.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:48
XBV00017.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00018.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00019.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00020.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00021.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00022.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00023.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00024.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00025.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00026.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:49
XBV00027.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00028.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00029.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00030.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00031.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00032.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00033.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00034.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00035.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:50
XBV00036.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00037.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00038.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00039.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00040.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00041.VDF : 8.11.165.190 2048 Bytes 8/7/2014 07:02:51
XBV00207.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00208.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00209.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00210.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00211.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00212.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00213.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:32
XBV00214.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00215.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00216.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00217.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00218.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00219.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:33
XBV00220.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00221.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00222.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00223.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00224.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00225.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:34
XBV00226.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00227.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00228.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00229.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00230.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00231.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00232.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:35
XBV00233.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00234.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00235.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00236.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00237.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00238.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00239.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:36
XBV00240.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00241.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00242.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00243.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00244.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00245.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00246.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:37
XBV00247.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00248.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00249.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00250.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00251.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00252.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:38
XBV00253.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:39
XBV00254.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:39
XBV00255.VDF : 8.11.183.62 2048 Bytes 11/5/2014 18:45:39
XBV00000.VDF : 7.11.70.0 66736640 Bytes 4/4/2013 13:39:06
XBV00001.VDF : 7.11.74.226 2201600 Bytes 4/30/2013 13:39:35
XBV00002.VDF : 7.11.80.60 2751488 Bytes 5/28/2013 13:40:01
XBV00003.VDF : 7.11.85.214 2162688 Bytes 6/21/2013 20:15:12
XBV00004.VDF : 7.11.91.176 3903488 Bytes 7/23/2013 20:15:14
XBV00005.VDF : 7.11.98.186 6822912 Bytes 8/29/2013 20:16:05
XBV00006.VDF : 7.11.139.38 15708672 Bytes 3/27/2014 06:31:33
XBV00007.VDF : 7.11.152.100 4193792 Bytes 6/2/2014 07:02:04
XBV00008.VDF : 8.11.165.192 4251136 Bytes 8/7/2014 07:02:47
XBV00009.VDF : 8.11.172.30 2094080 Bytes 9/15/2014 12:23:35
XBV00010.VDF : 8.11.178.32 1581056 Bytes 10/14/2014 16:43:09
XBV00042.VDF : 8.11.178.58 29696 Bytes 10/14/2014 16:43:10
XBV00043.VDF : 8.11.178.60 2048 Bytes 10/14/2014 16:43:10
XBV00044.VDF : 8.11.178.86 21504 Bytes 10/14/2014 22:31:35
XBV00045.VDF : 8.11.178.88 11776 Bytes 10/15/2014 16:44:27
XBV00046.VDF : 8.11.178.92 17408 Bytes 10/15/2014 16:44:28
XBV00047.VDF : 8.11.178.94 2048 Bytes 10/15/2014 16:44:28
XBV00048.VDF : 8.11.178.116 7680 Bytes 10/15/2014 16:44:28
XBV00049.VDF : 8.11.178.136 21504 Bytes 10/15/2014 16:44:28
XBV00050.VDF : 8.11.178.140 2048 Bytes 10/15/2014 16:44:28
XBV00051.VDF : 8.11.178.162 32768 Bytes 10/15/2014 16:44:29
XBV00052.VDF : 8.11.178.164 2048 Bytes 10/15/2014 16:44:29
XBV00053.VDF : 8.11.178.166 14336 Bytes 10/15/2014 16:44:29
XBV00054.VDF : 8.11.178.170 12800 Bytes 10/15/2014 16:44:29
XBV00055.VDF : 8.11.178.190 4608 Bytes 10/15/2014 16:44:29
XBV00056.VDF : 8.11.178.210 5120 Bytes 10/15/2014 16:44:30
XBV00057.VDF : 8.11.178.230 17920 Bytes 10/16/2014 16:44:30
XBV00058.VDF : 8.11.178.234 8704 Bytes 10/16/2014 16:44:30
XBV00059.VDF : 8.11.178.236 13312 Bytes 10/16/2014 16:44:30
XBV00060.VDF : 8.11.178.240 50176 Bytes 10/16/2014 16:44:31
XBV00061.VDF : 8.11.179.4 2048 Bytes 10/16/2014 16:44:31
XBV00062.VDF : 8.11.179.6 2048 Bytes 10/16/2014 16:44:31
XBV00063.VDF : 8.11.179.8 2048 Bytes 10/16/2014 16:44:31
XBV00064.VDF : 8.11.179.12 27136 Bytes 10/16/2014 16:44:31
XBV00065.VDF : 8.11.179.18 29696 Bytes 10/17/2014 16:44:32
XBV00066.VDF : 8.11.179.20 2048 Bytes 10/17/2014 16:44:32
XBV00067.VDF : 8.11.179.22 8192 Bytes 10/17/2014 16:44:32
XBV00068.VDF : 8.11.179.44 12800 Bytes 10/17/2014 16:44:32
XBV00069.VDF : 8.11.179.62 6656 Bytes 10/17/2014 16:44:32
XBV00070.VDF : 8.11.179.80 10752 Bytes 10/17/2014 16:44:32
XBV00071.VDF : 8.11.179.82 2048 Bytes 10/17/2014 16:44:32
XBV00072.VDF : 8.11.179.100 5632 Bytes 10/17/2014 16:44:32
XBV00073.VDF : 8.11.179.106 22528 Bytes 10/17/2014 07:27:42
XBV00074.VDF : 8.11.179.108 2560 Bytes 10/17/2014 07:27:42
XBV00075.VDF : 8.11.179.110 9216 Bytes 10/17/2014 07:27:42
XBV00076.VDF : 8.11.179.114 18432 Bytes 10/18/2014 20:07:24
XBV00077.VDF : 8.11.179.116 3072 Bytes 10/18/2014 20:07:24
XBV00078.VDF : 8.11.179.118 38912 Bytes 10/18/2014 20:07:24
XBV00079.VDF : 8.11.179.120 2048 Bytes 10/18/2014 20:07:24
XBV00080.VDF : 8.11.179.122 52224 Bytes 10/19/2014 11:32:03
XBV00081.VDF : 8.11.179.140 2048 Bytes 10/19/2014 11:32:03
XBV00082.VDF : 8.11.179.160 25600 Bytes 10/19/2014 11:32:03
XBV00083.VDF : 8.11.179.162 2048 Bytes 10/19/2014 11:32:03
XBV00084.VDF : 8.11.179.180 35328 Bytes 10/20/2014 11:32:04
XBV00085.VDF : 8.11.179.182 2048 Bytes 10/20/2014 11:32:04
XBV00086.VDF : 8.11.179.184 12800 Bytes 10/20/2014 11:32:04
XBV00087.VDF : 8.11.179.186 7168 Bytes 10/20/2014 11:32:04
XBV00088.VDF : 8.11.179.188 23040 Bytes 10/20/2014 11:32:05
XBV00089.VDF : 8.11.179.190 2048 Bytes 10/20/2014 11:32:05
XBV00090.VDF : 8.11.179.192 2048 Bytes 10/20/2014 11:32:05
XBV00091.VDF : 8.11.179.194 13312 Bytes 10/20/2014 11:32:05
XBV00092.VDF : 8.11.179.196 2048 Bytes 10/20/2014 11:32:05
XBV00093.VDF : 8.11.179.216 36352 Bytes 10/20/2014 11:32:06
XBV00094.VDF : 8.11.179.232 2048 Bytes 10/20/2014 11:32:06
XBV00095.VDF : 8.11.179.234 2048 Bytes 10/20/2014 11:32:06
XBV00096.VDF : 8.11.180.12 32256 Bytes 10/21/2014 11:32:06
XBV00097.VDF : 8.11.180.30 17408 Bytes 10/21/2014 11:32:06
XBV00098.VDF : 8.11.180.32 2048 Bytes 10/21/2014 11:32:06
XBV00099.VDF : 8.11.180.34 16384 Bytes 10/21/2014 11:32:07
XBV00100.VDF : 8.11.180.40 8704 Bytes 10/21/2014 11:32:07
XBV00101.VDF : 8.11.180.42 10240 Bytes 10/21/2014 11:32:07
XBV00102.VDF : 8.11.180.44 31744 Bytes 10/21/2014 11:32:07
XBV00103.VDF : 8.11.180.60 2048 Bytes 10/21/2014 11:32:08
XBV00104.VDF : 8.11.180.64 24576 Bytes 10/21/2014 11:32:08
XBV00105.VDF : 8.11.180.66 6144 Bytes 10/21/2014 11:32:08
XBV00106.VDF : 8.11.180.70 2560 Bytes 10/21/2014 11:32:08
XBV00107.VDF : 8.11.180.88 33280 Bytes 10/22/2014 11:32:08
XBV00108.VDF : 8.11.180.104 2560 Bytes 10/22/2014 11:32:09
XBV00109.VDF : 8.11.180.106 2048 Bytes 10/22/2014 11:32:09
XBV00110.VDF : 8.11.180.122 25600 Bytes 10/22/2014 11:32:09
XBV00111.VDF : 8.11.180.138 11264 Bytes 10/22/2014 11:32:09
XBV00112.VDF : 8.11.180.140 20992 Bytes 10/22/2014 10:00:53
XBV00113.VDF : 8.11.180.142 2048 Bytes 10/22/2014 10:00:54
XBV00114.VDF : 8.11.180.144 2048 Bytes 10/22/2014 10:00:54
XBV00115.VDF : 8.11.180.150 43520 Bytes 10/22/2014 10:00:55
XBV00116.VDF : 8.11.180.154 2048 Bytes 10/22/2014 10:00:56
XBV00117.VDF : 8.11.180.172 12288 Bytes 10/22/2014 10:00:56
XBV00118.VDF : 8.11.180.174 2048 Bytes 10/22/2014 10:00:57
XBV00119.VDF : 8.11.180.188 7168 Bytes 10/22/2014 10:00:57
XBV00120.VDF : 8.11.180.204 11776 Bytes 10/23/2014 10:00:58
XBV00121.VDF : 8.11.180.206 3584 Bytes 10/23/2014 10:00:58
XBV00122.VDF : 8.11.180.208 22016 Bytes 10/23/2014 10:00:59
XBV00123.VDF : 8.11.180.210 20992 Bytes 10/23/2014 07:07:44
XBV00124.VDF : 8.11.180.212 2048 Bytes 10/23/2014 07:07:44
XBV00125.VDF : 8.11.180.214 2560 Bytes 10/23/2014 07:07:44
XBV00126.VDF : 8.11.180.220 32768 Bytes 10/23/2014 07:07:45
XBV00127.VDF : 8.11.180.222 2048 Bytes 10/23/2014 07:07:45
XBV00128.VDF : 8.11.180.224 2048 Bytes 10/23/2014 07:07:45
XBV00129.VDF : 8.11.180.226 15872 Bytes 10/23/2014 07:07:45
XBV00130.VDF : 8.11.180.228 2048 Bytes 10/23/2014 07:07:46
XBV00131.VDF : 8.11.180.232 28672 Bytes 10/24/2014 07:07:46
XBV00132.VDF : 8.11.180.234 2048 Bytes 10/24/2014 07:07:46
XBV00133.VDF : 8.11.180.236 38912 Bytes 10/24/2014 13:24:00
XBV00134.VDF : 8.11.180.250 2048 Bytes 10/24/2014 13:24:00
XBV00135.VDF : 8.11.180.252 2048 Bytes 10/24/2014 13:24:00
XBV00136.VDF : 8.11.181.10 14336 Bytes 10/24/2014 18:56:05
XBV00137.VDF : 8.11.181.24 6144 Bytes 10/24/2014 18:56:06
XBV00138.VDF : 8.11.181.36 21504 Bytes 10/24/2014 18:56:06
XBV00139.VDF : 8.11.181.38 2048 Bytes 10/24/2014 18:56:06
XBV00140.VDF : 8.11.181.40 25088 Bytes 10/24/2014 18:56:06
XBV00141.VDF : 8.11.181.42 2048 Bytes 10/25/2014 18:56:06
XBV00142.VDF : 8.11.181.44 2048 Bytes 10/25/2014 18:56:06
XBV00143.VDF : 8.11.181.48 62976 Bytes 10/25/2014 18:56:07
XBV00144.VDF : 8.11.181.50 2048 Bytes 10/25/2014 18:56:07
XBV00145.VDF : 8.11.181.52 27136 Bytes 10/25/2014 18:56:07
XBV00146.VDF : 8.11.181.54 2048 Bytes 10/25/2014 18:56:08
XBV00147.VDF : 8.11.181.56 2048 Bytes 10/25/2014 18:56:08
XBV00148.VDF : 8.11.181.72 64000 Bytes 10/26/2014 05:46:29
XBV00149.VDF : 8.11.181.84 2048 Bytes 10/26/2014 05:46:29
XBV00150.VDF : 8.11.181.96 2048 Bytes 10/26/2014 05:46:29
XBV00151.VDF : 8.11.181.108 2048 Bytes 10/26/2014 05:46:29
XBV00152.VDF : 8.11.181.120 14336 Bytes 10/26/2014 05:46:29
XBV00153.VDF : 8.11.181.132 2048 Bytes 10/26/2014 05:46:29
XBV00154.VDF : 8.11.181.146 54272 Bytes 10/27/2014 17:17:14
XBV00155.VDF : 8.11.181.148 2048 Bytes 10/27/2014 17:17:14
XBV00156.VDF : 8.11.181.150 6656 Bytes 10/27/2014 17:17:15
XBV00157.VDF : 8.11.181.152 7680 Bytes 10/27/2014 17:17:15
XBV00158.VDF : 8.11.181.154 6656 Bytes 10/27/2014 17:17:15
XBV00159.VDF : 8.11.181.156 13824 Bytes 10/27/2014 17:17:15
XBV00160.VDF : 8.11.183.62 850944 Bytes 11/5/2014 18:45:24
XBV00161.VDF : 8.11.183.84 26112 Bytes 11/5/2014 10:54:37
XBV00162.VDF : 8.11.183.92 2048 Bytes 11/5/2014 10:54:37
XBV00163.VDF : 8.11.183.100 2048 Bytes 11/5/2014 10:54:37
XBV00164.VDF : 8.11.183.112 16896 Bytes 11/5/2014 10:54:38
XBV00165.VDF : 8.11.183.114 3584 Bytes 11/5/2014 10:54:38
XBV00166.VDF : 8.11.183.118 7168 Bytes 11/6/2014 10:54:38
XBV00167.VDF : 8.11.183.120 20992 Bytes 11/6/2014 10:54:38
XBV00168.VDF : 8.11.183.122 35840 Bytes 11/6/2014 08:52:36
XBV00169.VDF : 8.11.183.124 2048 Bytes 11/6/2014 08:52:36
XBV00170.VDF : 8.11.183.128 2048 Bytes 11/6/2014 08:52:36
XBV00171.VDF : 8.11.183.130 35328 Bytes 11/6/2014 08:52:37
XBV00172.VDF : 8.11.183.132 2048 Bytes 11/6/2014 08:52:37
XBV00173.VDF : 8.11.183.134 2048 Bytes 11/6/2014 08:52:37
XBV00174.VDF : 8.11.183.136 23552 Bytes 11/6/2014 08:52:37
XBV00175.VDF : 8.11.183.138 2048 Bytes 11/6/2014 08:52:37
XBV00176.VDF : 8.11.183.140 6656 Bytes 11/6/2014 08:52:37
XBV00177.VDF : 8.11.183.142 6144 Bytes 11/6/2014 08:52:37
XBV00178.VDF : 8.11.183.152 51200 Bytes 11/7/2014 08:52:38
XBV00179.VDF : 8.11.183.160 21504 Bytes 11/7/2014 14:52:05
XBV00180.VDF : 8.11.183.168 26624 Bytes 11/7/2014 14:52:05
XBV00181.VDF : 8.11.183.170 3584 Bytes 11/7/2014 14:52:05
XBV00182.VDF : 8.11.183.172 9216 Bytes 11/7/2014 20:52:12
XBV00183.VDF : 8.11.183.176 31232 Bytes 11/7/2014 20:52:13
XBV00184.VDF : 8.11.183.178 3584 Bytes 11/7/2014 07:21:45
XBV00185.VDF : 8.11.183.180 6656 Bytes 11/7/2014 07:21:45
XBV00186.VDF : 8.11.183.182 9216 Bytes 11/7/2014 07:21:45
XBV00187.VDF : 8.11.183.186 29184 Bytes 11/8/2014 13:21:46
XBV00188.VDF : 8.11.183.190 25088 Bytes 11/8/2014 19:22:17
XBV00189.VDF : 8.11.183.192 2048 Bytes 11/8/2014 19:22:18
XBV00190.VDF : 8.11.183.194 2048 Bytes 11/8/2014 19:22:19
XBV00191.VDF : 8.11.183.196 94720 Bytes 11/9/2014 10:35:38
XBV00192.VDF : 8.11.183.206 2048 Bytes 11/9/2014 10:35:39
XBV00193.VDF : 8.11.183.212 36864 Bytes 11/9/2014 16:35:42
XBV00194.VDF : 8.11.183.214 2048 Bytes 11/9/2014 16:35:42
XBV00195.VDF : 8.11.183.220 7680 Bytes 11/9/2014 08:02:12
XBV00196.VDF : 8.11.183.222 51200 Bytes 11/10/2014 08:02:14
XBV00197.VDF : 8.11.183.224 8704 Bytes 11/10/2014 08:02:15
XBV00198.VDF : 8.11.183.230 5632 Bytes 11/10/2014 14:02:24
XBV00199.VDF : 8.11.183.236 7680 Bytes 11/10/2014 14:02:24
XBV00200.VDF : 8.11.183.240 2048 Bytes 11/10/2014 14:02:24
XBV00201.VDF : 8.11.183.246 2048 Bytes 11/10/2014 14:02:24
XBV00202.VDF : 8.11.183.254 115712 Bytes 11/10/2014 20:02:28
XBV00203.VDF : 8.11.184.10 24576 Bytes 11/10/2014 07:18:54
XBV00204.VDF : 8.11.184.14 5632 Bytes 11/10/2014 07:18:54
XBV00205.VDF : 8.11.184.16 13312 Bytes 11/11/2014 07:18:54
XBV00206.VDF : 8.11.184.22 27136 Bytes 11/11/2014 07:18:55
LOCAL001.VDF : 8.11.184.22 114388480 Bytes 11/11/2014 07:19:15
Engineversion : 8.3.26.8
AEVDF.DLL : 8.3.1.6 133992 Bytes 10/10/2014 12:18:23
AESCRIPT.DLL : 8.2.2.12 527216 Bytes 11/7/2014 08:52:36
AESCN.DLL : 8.3.2.2 139456 Bytes 8/10/2014 06:57:56
AESBX.DLL : 8.2.20.24 1409224 Bytes 5/14/2014 13:08:35
AERDL.DLL : 8.2.1.16 743328 Bytes 10/29/2014 11:16:54
AEPACK.DLL : 8.4.0.54 788392 Bytes 10/10/2014 12:18:13
AEOFFICE.DLL : 8.3.0.38 224112 Bytes 10/31/2014 14:07:16
AEHEUR.DLL : 8.1.4.1384 7759784 Bytes 11/7/2014 08:52:34
AEHELP.DLL : 8.3.1.0 278728 Bytes 8/10/2014 06:57:24
AEGEN.DLL : 8.1.7.34 453480 Bytes 11/7/2014 08:52:08
AEEXP.DLL : 8.4.2.32 247712 Bytes 10/10/2014 12:18:27
AEEMU.DLL : 8.1.3.4 399264 Bytes 8/10/2014 06:57:21
AEDROID.DLL : 8.4.2.24 442568 Bytes 8/10/2014 06:58:01
AECORE.DLL : 8.3.2.6 243712 Bytes 8/10/2014 06:57:20
AEBB.DLL : 8.1.2.0 60448 Bytes 8/10/2014 06:57:18
AVWINLL.DLL : 14.0.7.308 25904 Bytes 11/6/2014 10:51:38
AVPREF.DLL : 14.0.7.308 52016 Bytes 11/6/2014 10:51:56
AVREP.DLL : 14.0.7.308 220976 Bytes 11/6/2014 10:51:58
AVARKT.DLL : 14.0.7.308 227632 Bytes 11/6/2014 10:51:40
AVEVTLOG.DLL : 14.0.7.310 184112 Bytes 11/6/2014 10:51:49
SQLITE3.DLL : 14.0.7.308 453936 Bytes 11/6/2014 10:54:36
AVSMTP.DLL : 14.0.7.308 79096 Bytes 11/6/2014 10:52:08
NETNT.DLL : 14.0.7.308 15152 Bytes 11/6/2014 10:54:26
RCIMAGE.DLL : 14.0.7.308 4865328 Bytes 11/6/2014 10:51:38
RCTEXT.DLL : 14.0.7.318 77048 Bytes 11/6/2014 10:51:38

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, F:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Dienstag, 11. November 2014 08:28

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD1(F'
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
Versteckter Treiber
[HINWEIS] Eine Speicherveränderung wurde entdeckt, die möglicherweise zur versteckten Dateizugriffen missbraucht werden könnte.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'winamp.exe' - '158' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '120' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '123' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPHelper.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.bin' - '92' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_FATIFBE.EXE' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess 'EEventManager.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'winampa.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPEnh.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'RtHDVCpl.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '179' Modul(e) wurden durchsucht
Durchsuche Prozess 'EasySpeedUpManager.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'dmhkcore.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'WCScheduler.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'SSCKbdHk.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '124' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'creator-ws.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_S40RP7.EXE' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'E_S40ST7.EXE' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'BcmSqlStartupSvc.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '135' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '79' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '160' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '101' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1986' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
Beginne mit der Suche in 'D:\'
Beginne mit der Suche in 'F:\' <INTENSO>


Ende des Suchlaufs: Dienstag, 11. November 2014 12:23
Benötigte Zeit: 3:54:54 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

24925 Verzeichnisse wurden überprüft
1389297 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
1389297 Dateien ohne Befall
26027 Archive wurden durchsucht
0 Warnungen
1 Hinweise
658503 Objekte wurden beim Rootkitscan durchsucht
1 Versteckte Objekte wurden gefunden

Soweit die Logfiles, hoffe ich hab alles richtig gemacht, ist das erste Mal, dass ich hier etwas poste.Würde mich freuen, wenn mir jemand helfen könnte.Mit freundlichen Grüssen

Alt 11.11.2014, 13:27   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



hi,

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________

__________________

Alt 11.11.2014, 13:37   #3
doomkarloff
 
Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Hat beim scannen nichts gefunden

Logfile
Code:
ATTFilter
14:31:48.0757 0x1620  TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34
14:32:00.0732 0x1620  ============================================================
14:32:00.0732 0x1620  Current date / time: 2014/11/11 14:32:00.0732
14:32:00.0732 0x1620  SystemInfo:
14:32:00.0732 0x1620  
14:32:00.0732 0x1620  OS Version: 6.1.7601 ServicePack: 1.0
14:32:00.0732 0x1620  Product type: Workstation
14:32:00.0732 0x1620  ComputerName: TIMO-PC
14:32:00.0733 0x1620  UserName: timo
14:32:00.0733 0x1620  Windows directory: C:\windows
14:32:00.0733 0x1620  System windows directory: C:\windows
14:32:00.0733 0x1620  Processor architecture: Intel x86
14:32:00.0733 0x1620  Number of processors: 2
14:32:00.0733 0x1620  Page size: 0x1000
14:32:00.0733 0x1620  Boot type: Normal boot
14:32:00.0733 0x1620  ============================================================
14:32:00.0903 0x1620  KLMD registered as C:\windows\system32\drivers\99608382.sys
14:32:01.0853 0x1620  System UUID: {983CF3E4-7434-A9F4-AE89-6622E3A3B669}
14:32:03.0196 0x1620  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:32:03.0215 0x1620  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1100000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:32:19.0224 0x1620  ============================================================
14:32:19.0224 0x1620  \Device\Harddisk0\DR0:
14:32:19.0240 0x1620  MBR partitions:
14:32:19.0240 0x1620  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E00800, BlocksNum 0x32000
14:32:19.0240 0x1620  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E32800, BlocksNum 0x11AFD000
14:32:19.0240 0x1620  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1392F800, BlocksNum 0x11AFE800
14:32:19.0240 0x1620  \Device\Harddisk1\DR1:
14:32:19.0255 0x1620  MBR partitions:
14:32:19.0256 0x1620  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x800, BlocksNum 0xE8E06CC1
14:32:19.0256 0x1620  ============================================================
14:32:19.0285 0x1620  C: <-> \Device\Harddisk0\DR0\Partition2
14:32:19.0351 0x1620  D: <-> \Device\Harddisk0\DR0\Partition3
14:32:19.0353 0x1620  F: <-> \Device\Harddisk1\DR1\Partition1
14:32:19.0354 0x1620  ============================================================
14:32:19.0354 0x1620  Initialize success
14:32:19.0354 0x1620  ============================================================
14:33:43.0126 0x08f8  ============================================================
14:33:43.0126 0x08f8  Scan started
14:33:43.0126 0x08f8  Mode: Manual; SigCheck; TDLFS; 
14:33:43.0126 0x08f8  ============================================================
14:33:43.0126 0x08f8  KSN ping started
14:33:45.0747 0x08f8  KSN ping finished: true
14:33:46.0480 0x08f8  ================ Scan system memory ========================
14:33:46.0480 0x08f8  System memory - ok
14:33:46.0480 0x08f8  ================ Scan services =============================
14:33:46.0652 0x08f8  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
14:33:46.0777 0x08f8  1394ohci - ok
14:33:46.0855 0x08f8  [ A6FE70357A68AD1E279CD1012419CCE6, 561B0E21383600F9A0BFB8562AAE648BBC48A320F58E4189C508123B8F106A29 ] acedrv11        C:\windows\system32\drivers\acedrv11.sys
14:33:46.0933 0x08f8  acedrv11 - ok
14:33:46.0995 0x08f8  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\windows\system32\drivers\ACPI.sys
14:33:47.0011 0x08f8  ACPI - ok
14:33:47.0058 0x08f8  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\windows\system32\drivers\acpipmi.sys
14:33:47.0073 0x08f8  AcpiPmi - ok
14:33:47.0167 0x08f8  [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:33:47.0182 0x08f8  AdobeARMservice - ok
14:33:47.0260 0x08f8  [ 2637233632CCD1837A1A57A43CAF00A4, 848026C6C9B38FD9F70BC7B2306BF4F5DD395726D4FDD6A18B29354921191DC5 ] AdobeFlashPlayerUpdateSvc C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:33:47.0292 0x08f8  AdobeFlashPlayerUpdateSvc - ok
14:33:47.0370 0x08f8  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\windows\system32\DRIVERS\adp94xx.sys
14:33:47.0416 0x08f8  adp94xx - ok
14:33:47.0432 0x08f8  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\windows\system32\DRIVERS\adpahci.sys
14:33:47.0463 0x08f8  adpahci - ok
14:33:47.0479 0x08f8  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\windows\system32\DRIVERS\adpu320.sys
14:33:47.0510 0x08f8  adpu320 - ok
14:33:47.0541 0x08f8  [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc     C:\windows\System32\aelupsvc.dll
14:33:47.0588 0x08f8  AeLookupSvc - ok
14:33:47.0635 0x08f8  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\windows\system32\drivers\afd.sys
14:33:47.0682 0x08f8  AFD - ok
14:33:47.0728 0x08f8  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\windows\system32\drivers\agp440.sys
14:33:47.0760 0x08f8  agp440 - ok
14:33:47.0791 0x08f8  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\windows\system32\DRIVERS\djsvs.sys
14:33:47.0822 0x08f8  aic78xx - ok
14:33:47.0853 0x08f8  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\windows\System32\alg.exe
14:33:47.0884 0x08f8  ALG - ok
14:33:47.0916 0x08f8  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\windows\system32\drivers\aliide.sys
14:33:47.0931 0x08f8  aliide - ok
14:33:47.0947 0x08f8  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\windows\system32\drivers\amdagp.sys
14:33:47.0978 0x08f8  amdagp - ok
14:33:48.0009 0x08f8  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\windows\system32\drivers\amdide.sys
14:33:48.0025 0x08f8  amdide - ok
14:33:48.0056 0x08f8  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\windows\system32\DRIVERS\amdk8.sys
14:33:48.0103 0x08f8  AmdK8 - ok
14:33:48.0118 0x08f8  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys
14:33:48.0134 0x08f8  AmdPPM - ok
14:33:48.0181 0x08f8  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\windows\system32\drivers\amdsata.sys
14:33:48.0212 0x08f8  amdsata - ok
14:33:48.0228 0x08f8  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\windows\system32\DRIVERS\amdsbs.sys
14:33:48.0259 0x08f8  amdsbs - ok
14:33:48.0274 0x08f8  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\windows\system32\drivers\amdxata.sys
14:33:48.0290 0x08f8  amdxata - ok
14:33:48.0384 0x08f8  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
14:33:48.0430 0x08f8  AntiVirSchedulerService - ok
14:33:48.0462 0x08f8  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
14:33:48.0493 0x08f8  AntiVirService - ok
14:33:48.0555 0x08f8  [ 323EC9754AEBCD922B0D80D49419B000, 74C060FEBDA551C9AC5CB5E5FD42E0092E01BC07AE636BD85E38D49196A92147 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
14:33:48.0618 0x08f8  AntiVirWebService - ok
14:33:48.0664 0x08f8  [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID           C:\windows\system32\drivers\appid.sys
14:33:48.0696 0x08f8  AppID - ok
14:33:48.0727 0x08f8  [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc        C:\windows\System32\appidsvc.dll
14:33:48.0774 0x08f8  AppIDSvc - ok
14:33:48.0805 0x08f8  [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo         C:\windows\System32\appinfo.dll
14:33:48.0836 0x08f8  Appinfo - ok
14:33:48.0883 0x08f8  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\windows\system32\DRIVERS\arc.sys
14:33:48.0898 0x08f8  arc - ok
14:33:48.0914 0x08f8  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\windows\system32\DRIVERS\arcsas.sys
14:33:48.0945 0x08f8  arcsas - ok
14:33:49.0070 0x08f8  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:33:49.0117 0x08f8  aspnet_state - ok
14:33:49.0132 0x08f8  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
14:33:49.0179 0x08f8  AsyncMac - ok
14:33:49.0195 0x08f8  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\windows\system32\drivers\atapi.sys
14:33:49.0226 0x08f8  atapi - ok
14:33:49.0320 0x08f8  [ 2EB96571FE865F07ED1FD6017575026F, A8D20514C7AE3A5199F7FFB87F45A1BBAF98E66976CF62D6B8A2A8D5319E31D0 ] athr            C:\windows\system32\DRIVERS\athr.sys
14:33:49.0382 0x08f8  athr - ok
14:33:49.0460 0x08f8  [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
14:33:49.0554 0x08f8  AudioEndpointBuilder - ok
14:33:49.0569 0x08f8  [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv        C:\windows\System32\Audiosrv.dll
14:33:49.0616 0x08f8  Audiosrv - ok
14:33:49.0647 0x08f8  [ F581D2F3E30C1CA7206D660FB7689F98, 53647E017AE58788922F72285DD63E8CD2F9E922B31F7C6711E547BC6B360154 ] avgntflt        C:\windows\system32\DRIVERS\avgntflt.sys
14:33:49.0678 0x08f8  avgntflt - ok
14:33:49.0694 0x08f8  [ A2EE407D6D3757A2FFD5095DD16AE1F2, BBFCC5DC116D6A3AF85591955541528DB0CB1FE81D353F717BE7CAD3F7F446F4 ] avipbb          C:\windows\system32\DRIVERS\avipbb.sys
14:33:49.0710 0x08f8  avipbb - ok
14:33:49.0834 0x08f8  [ F21955927D1C99206A8B91DE2CCE85E1, 26A6155CF46123C489CBE19B5B3E3B0D9ED02C9388E57058724B0FFB7D7C08B5 ] Avira.OE.ServiceHost C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
14:33:49.0866 0x08f8  Avira.OE.ServiceHost - ok
14:33:49.0912 0x08f8  [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr          C:\windows\system32\DRIVERS\avkmgr.sys
14:33:49.0944 0x08f8  avkmgr - ok
14:33:49.0990 0x08f8  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\windows\System32\AxInstSV.dll
14:33:50.0037 0x08f8  AxInstSV - ok
14:33:50.0084 0x08f8  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\windows\system32\DRIVERS\bxvbdx.sys
14:33:50.0131 0x08f8  b06bdrv - ok
14:33:50.0162 0x08f8  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\windows\system32\DRIVERS\b57nd60x.sys
14:33:50.0193 0x08f8  b57nd60x - ok
14:33:50.0271 0x08f8  [ 6163664C7E9CD110AF70180C126C3FDC, 9A801295CDE2BDE4EE0E96C610E4C01F6915DBDA2104D0E8873AFF1BC34A0FA1 ] BcmSqlStartupSvc C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
14:33:50.0302 0x08f8  BcmSqlStartupSvc - ok
14:33:50.0334 0x08f8  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\windows\System32\bdesvc.dll
14:33:50.0365 0x08f8  BDESVC - ok
14:33:50.0396 0x08f8  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\windows\system32\drivers\Beep.sys
14:33:50.0427 0x08f8  Beep - ok
14:33:50.0490 0x08f8  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\windows\System32\bfe.dll
14:33:50.0536 0x08f8  BFE - ok
14:33:50.0599 0x08f8  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\windows\System32\qmgr.dll
14:33:50.0661 0x08f8  BITS - ok
14:33:50.0677 0x08f8  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys
14:33:50.0692 0x08f8  blbdrive - ok
14:33:50.0739 0x08f8  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
14:33:50.0770 0x08f8  bowser - ok
14:33:50.0786 0x08f8  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\windows\system32\DRIVERS\BrFiltLo.sys
14:33:50.0802 0x08f8  BrFiltLo - ok
14:33:50.0833 0x08f8  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\windows\system32\DRIVERS\BrFiltUp.sys
14:33:50.0848 0x08f8  BrFiltUp - ok
14:33:50.0895 0x08f8  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\windows\System32\browser.dll
14:33:50.0926 0x08f8  Browser - ok
14:33:50.0942 0x08f8  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\windows\System32\Drivers\Brserid.sys
14:33:51.0004 0x08f8  Brserid - ok
14:33:51.0020 0x08f8  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
14:33:51.0051 0x08f8  BrSerWdm - ok
14:33:51.0067 0x08f8  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
14:33:51.0082 0x08f8  BrUsbMdm - ok
14:33:51.0114 0x08f8  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
14:33:51.0145 0x08f8  BrUsbSer - ok
14:33:51.0160 0x08f8  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\windows\system32\DRIVERS\bthmodem.sys
14:33:51.0192 0x08f8  BTHMODEM - ok
14:33:51.0223 0x08f8  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\windows\system32\bthserv.dll
14:33:51.0270 0x08f8  bthserv - ok
14:33:51.0285 0x08f8  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
14:33:51.0332 0x08f8  cdfs - ok
14:33:51.0363 0x08f8  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\windows\system32\drivers\cdrom.sys
14:33:51.0394 0x08f8  cdrom - ok
14:33:51.0441 0x08f8  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\windows\System32\certprop.dll
14:33:51.0472 0x08f8  CertPropSvc - ok
14:33:51.0488 0x08f8  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\windows\system32\DRIVERS\circlass.sys
14:33:51.0519 0x08f8  circlass - ok
14:33:51.0550 0x08f8  [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS            C:\windows\system32\CLFS.sys
14:33:51.0582 0x08f8  CLFS - ok
14:33:51.0628 0x08f8  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:33:51.0660 0x08f8  clr_optimization_v2.0.50727_32 - ok
14:33:51.0691 0x08f8  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:33:51.0722 0x08f8  clr_optimization_v4.0.30319_32 - ok
14:33:51.0738 0x08f8  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
14:33:51.0753 0x08f8  CmBatt - ok
14:33:51.0784 0x08f8  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\windows\system32\drivers\cmdide.sys
14:33:51.0800 0x08f8  cmdide - ok
14:33:51.0831 0x08f8  [ 85449EEBE8F8EBD6481EFBF0F352B4EB, E6FF04970C5A5BFDE7297A86C1C7B9BFE2E0F976A1A1AFB874CEB488DC6151CC ] CNG             C:\windows\system32\Drivers\cng.sys
14:33:51.0878 0x08f8  CNG - ok
14:33:51.0909 0x08f8  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\windows\system32\DRIVERS\compbatt.sys
14:33:51.0925 0x08f8  Compbatt - ok
14:33:51.0987 0x08f8  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys
14:33:52.0018 0x08f8  CompositeBus - ok
14:33:52.0034 0x08f8  COMSysApp - ok
14:33:52.0050 0x08f8  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\windows\system32\DRIVERS\crcdisk.sys
14:33:52.0065 0x08f8  crcdisk - ok
14:33:52.0096 0x08f8  [ 7CA1BECEA5DE2643ADDAD32670E7A4C9, E3AB4CC52A97E3855D7EAB87363F807FDD2162ED8C76A036CD71549ED64E7797 ] CryptSvc        C:\windows\system32\cryptsvc.dll
14:33:52.0143 0x08f8  CryptSvc - ok
14:33:52.0190 0x08f8  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\windows\system32\rpcss.dll
14:33:52.0252 0x08f8  DcomLaunch - ok
14:33:52.0284 0x08f8  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\windows\System32\defragsvc.dll
14:33:52.0330 0x08f8  defragsvc - ok
14:33:52.0393 0x08f8  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\windows\system32\Drivers\dfsc.sys
14:33:52.0424 0x08f8  DfsC - ok
14:33:52.0486 0x08f8  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\windows\system32\dhcpcore.dll
14:33:52.0533 0x08f8  Dhcp - ok
14:33:52.0549 0x08f8  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\windows\system32\drivers\discache.sys
14:33:52.0580 0x08f8  discache - ok
14:33:52.0627 0x08f8  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\windows\system32\DRIVERS\disk.sys
14:33:52.0642 0x08f8  Disk - ok
14:33:52.0689 0x08f8  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\windows\System32\dnsrslvr.dll
14:33:52.0720 0x08f8  Dnscache - ok
14:33:52.0752 0x08f8  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\windows\System32\dot3svc.dll
14:33:52.0798 0x08f8  dot3svc - ok
14:33:52.0845 0x08f8  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\windows\system32\dps.dll
14:33:52.0892 0x08f8  DPS - ok
14:33:52.0923 0x08f8  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\windows\system32\drivers\drmkaud.sys
14:33:52.0939 0x08f8  drmkaud - ok
14:33:52.0986 0x08f8  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys
14:33:53.0032 0x08f8  DXGKrnl - ok
14:33:53.0064 0x08f8  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\windows\System32\eapsvc.dll
14:33:53.0126 0x08f8  EapHost - ok
14:33:53.0282 0x08f8  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\windows\system32\DRIVERS\evbdx.sys
14:33:53.0454 0x08f8  ebdrv - ok
14:33:53.0500 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] EFS             C:\windows\System32\lsass.exe
14:33:53.0532 0x08f8  EFS - ok
14:33:53.0610 0x08f8  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\windows\ehome\ehRecvr.exe
14:33:53.0672 0x08f8  ehRecvr - ok
14:33:53.0703 0x08f8  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\windows\ehome\ehsched.exe
14:33:53.0766 0x08f8  ehSched - ok
14:33:53.0828 0x08f8  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\windows\system32\DRIVERS\elxstor.sys
14:33:53.0859 0x08f8  elxstor - ok
14:33:53.0953 0x08f8  [ EC6A73CD8413F68655E5E0B99C415A21, 5F56B211E854B316A0512091D9EE5A10199EEF619712B8645A2034165253F2A0 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
14:33:54.0000 0x08f8  EPSON_EB_RPCV4_01 - ok
14:33:54.0015 0x08f8  [ 8FE6AB59CAB8F2C038FEA9522A5EEBA7, 539C4257DE460F881DAFAD4FD83C216363B558FDD06AE6779FBBCC2B84BCCF56 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
14:33:54.0031 0x08f8  EPSON_PM_RPCV4_01 - ok
14:33:54.0062 0x08f8  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\windows\system32\drivers\errdev.sys
14:33:54.0078 0x08f8  ErrDev - ok
14:33:54.0140 0x08f8  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\windows\system32\es.dll
14:33:54.0187 0x08f8  EventSystem - ok
14:33:54.0218 0x08f8  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\windows\system32\drivers\exfat.sys
14:33:54.0265 0x08f8  exfat - ok
14:33:54.0280 0x08f8  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\windows\system32\drivers\fastfat.sys
14:33:54.0327 0x08f8  fastfat - ok
14:33:54.0405 0x08f8  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\windows\system32\fxssvc.exe
14:33:54.0468 0x08f8  Fax - ok
14:33:54.0499 0x08f8  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\windows\system32\DRIVERS\fdc.sys
14:33:54.0530 0x08f8  fdc - ok
14:33:54.0561 0x08f8  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\windows\system32\fdPHost.dll
14:33:54.0592 0x08f8  fdPHost - ok
14:33:54.0608 0x08f8  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\windows\system32\fdrespub.dll
14:33:54.0655 0x08f8  FDResPub - ok
14:33:54.0670 0x08f8  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
14:33:54.0702 0x08f8  FileInfo - ok
14:33:54.0717 0x08f8  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\windows\system32\drivers\filetrace.sys
14:33:54.0764 0x08f8  Filetrace - ok
14:33:54.0780 0x08f8  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\windows\system32\DRIVERS\flpydisk.sys
14:33:54.0795 0x08f8  flpydisk - ok
14:33:54.0842 0x08f8  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
14:33:54.0858 0x08f8  FltMgr - ok
14:33:54.0936 0x08f8  [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache       C:\windows\system32\FntCache.dll
14:33:55.0029 0x08f8  FontCache - ok
14:33:55.0092 0x08f8  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:33:55.0107 0x08f8  FontCache3.0.0.0 - ok
14:33:55.0138 0x08f8  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\windows\system32\drivers\FsDepends.sys
14:33:55.0170 0x08f8  FsDepends - ok
14:33:55.0201 0x08f8  [ B74B0578FD1D3F897E95F2A2B69EA051, 64FCA8452CB37D55679AC8BEF221D6BA1D91E50680D37FFCFB81619ADAA5889C ] fssfltr         C:\windows\system32\DRIVERS\fssfltr.sys
14:33:55.0216 0x08f8  fssfltr - ok
14:33:55.0310 0x08f8  [ 206AD9A89BF05DFA1621F1FC7B82592D, EAEE557535D865232237898858F5AE35F868065A1F79BBB48A2173124E2B6F63 ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
14:33:55.0357 0x08f8  fsssvc - ok
14:33:55.0388 0x08f8  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
14:33:55.0404 0x08f8  Fs_Rec - ok
14:33:55.0450 0x08f8  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
14:33:55.0482 0x08f8  fvevol - ok
14:33:55.0528 0x08f8  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\windows\system32\DRIVERS\gagp30kx.sys
14:33:55.0544 0x08f8  gagp30kx - ok
14:33:55.0606 0x08f8  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\windows\System32\gpsvc.dll
14:33:55.0684 0x08f8  gpsvc - ok
14:33:55.0794 0x08f8  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
14:33:55.0840 0x08f8  gupdate - ok
14:33:55.0856 0x08f8  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
14:33:55.0872 0x08f8  gupdatem - ok
14:33:55.0887 0x08f8  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
14:33:55.0934 0x08f8  hcw85cir - ok
14:33:55.0996 0x08f8  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
14:33:56.0059 0x08f8  HdAudAddService - ok
14:33:56.0090 0x08f8  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\windows\system32\drivers\HDAudBus.sys
14:33:56.0121 0x08f8  HDAudBus - ok
14:33:56.0121 0x08f8  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\windows\system32\DRIVERS\HidBatt.sys
14:33:56.0152 0x08f8  HidBatt - ok
14:33:56.0168 0x08f8  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\windows\system32\DRIVERS\hidbth.sys
14:33:56.0199 0x08f8  HidBth - ok
14:33:56.0230 0x08f8  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\windows\system32\DRIVERS\hidir.sys
14:33:56.0262 0x08f8  HidIr - ok
14:33:56.0308 0x08f8  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\windows\system32\hidserv.dll
14:33:56.0371 0x08f8  hidserv - ok
14:33:56.0402 0x08f8  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys
14:33:56.0418 0x08f8  HidUsb - ok
14:33:56.0464 0x08f8  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\windows\system32\kmsvc.dll
14:33:56.0511 0x08f8  hkmsvc - ok
14:33:56.0542 0x08f8  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\windows\system32\ListSvc.dll
14:33:56.0589 0x08f8  HomeGroupListener - ok
14:33:56.0636 0x08f8  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\windows\system32\provsvc.dll
14:33:56.0683 0x08f8  HomeGroupProvider - ok
14:33:56.0730 0x08f8  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
14:33:56.0745 0x08f8  HpSAMD - ok
14:33:56.0823 0x08f8  [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP            C:\windows\system32\drivers\HTTP.sys
14:33:56.0886 0x08f8  HTTP - ok
14:33:56.0932 0x08f8  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
14:33:56.0948 0x08f8  hwpolicy - ok
14:33:56.0995 0x08f8  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\windows\system32\drivers\i8042prt.sys
14:33:57.0042 0x08f8  i8042prt - ok
14:33:57.0073 0x08f8  [ D483687EACE0C065EE772481A96E05F5, A22200E90C78DFE73FE0FBEED5331AB43CD7133651FD125595C4DB604AD71B29 ] iaStor          C:\windows\system32\DRIVERS\iaStor.sys
14:33:57.0088 0x08f8  iaStor - ok
14:33:57.0135 0x08f8  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\windows\system32\drivers\iaStorV.sys
14:33:57.0182 0x08f8  iaStorV - ok
14:33:57.0260 0x08f8  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:33:57.0322 0x08f8  idsvc - ok
14:33:57.0338 0x08f8  IEEtwCollectorService - ok
14:33:57.0556 0x08f8  [ AD626F6964F4D364D226C39E06872DD3, 5D52F89930BB07D4D2D0FC12143BD233B5D2C238527B3B4CAD74736D1EC84218 ] igfx            C:\windows\system32\DRIVERS\igdkmd32.sys
14:33:57.0822 0x08f8  igfx - ok
14:33:57.0946 0x08f8  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\windows\system32\DRIVERS\iirsp.sys
14:33:57.0993 0x08f8  iirsp - ok
14:33:58.0040 0x08f8  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\windows\System32\ikeext.dll
14:33:58.0102 0x08f8  IKEEXT - ok
14:33:58.0258 0x08f8  [ 5CEEF2CCCB4FE00D3FFBFEB12BCFA07F, D5533A7BA7BE65D5D5CE137795419E6C49B51B15B7450C319EE0EA9A83AC73E0 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHDA.sys
14:33:58.0352 0x08f8  IntcAzAudAddService - ok
14:33:58.0446 0x08f8  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\windows\system32\drivers\intelide.sys
14:33:58.0477 0x08f8  intelide - ok
14:33:58.0524 0x08f8  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
14:33:58.0555 0x08f8  intelppm - ok
14:33:58.0586 0x08f8  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\windows\system32\ipbusenum.dll
14:33:58.0617 0x08f8  IPBusEnum - ok
14:33:58.0648 0x08f8  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
14:33:58.0695 0x08f8  IpFilterDriver - ok
14:33:58.0758 0x08f8  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
14:33:58.0804 0x08f8  iphlpsvc - ok
14:33:58.0836 0x08f8  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\windows\system32\drivers\IPMIDrv.sys
14:33:58.0867 0x08f8  IPMIDRV - ok
14:33:58.0882 0x08f8  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\windows\system32\drivers\ipnat.sys
14:33:58.0914 0x08f8  IPNAT - ok
14:33:58.0960 0x08f8  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\windows\system32\drivers\irenum.sys
14:33:58.0992 0x08f8  IRENUM - ok
14:33:58.0992 0x08f8  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\windows\system32\drivers\isapnp.sys
14:33:59.0007 0x08f8  isapnp - ok
14:33:59.0038 0x08f8  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
14:33:59.0070 0x08f8  iScsiPrt - ok
14:33:59.0101 0x08f8  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\windows\system32\drivers\kbdclass.sys
14:33:59.0132 0x08f8  kbdclass - ok
14:33:59.0163 0x08f8  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
14:33:59.0194 0x08f8  kbdhid - ok
14:33:59.0210 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] KeyIso          C:\windows\system32\lsass.exe
14:33:59.0241 0x08f8  KeyIso - ok
14:33:59.0272 0x08f8  [ 4120DA10AA42A9996F4575DB9E3E6E6E, 1C6E790772EA327ACB885D731A030408160534997DD56FEE4D6CEE6929873BB8 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
14:33:59.0288 0x08f8  KSecDD - ok
14:33:59.0319 0x08f8  [ D3964885F0A11ACF51DA3AAA776973B2, 417ED5A3201FC50FBC0D646F8F2114A1E8A91E7919A62508DCBC156C0BFB2FBA ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys
14:33:59.0335 0x08f8  KSecPkg - ok
14:33:59.0366 0x08f8  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\windows\system32\msdtckrm.dll
14:33:59.0413 0x08f8  KtmRm - ok
14:33:59.0444 0x08f8  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\windows\system32\srvsvc.dll
14:33:59.0491 0x08f8  LanmanServer - ok
14:33:59.0538 0x08f8  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
14:33:59.0584 0x08f8  LanmanWorkstation - ok
14:33:59.0616 0x08f8  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
14:33:59.0662 0x08f8  lltdio - ok
14:33:59.0678 0x08f8  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\windows\System32\lltdsvc.dll
14:33:59.0725 0x08f8  lltdsvc - ok
14:33:59.0756 0x08f8  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\windows\System32\lmhsvc.dll
14:33:59.0803 0x08f8  lmhosts - ok
14:33:59.0818 0x08f8  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\windows\system32\DRIVERS\lsi_fc.sys
14:33:59.0850 0x08f8  LSI_FC - ok
14:33:59.0865 0x08f8  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\windows\system32\DRIVERS\lsi_sas.sys
14:33:59.0881 0x08f8  LSI_SAS - ok
14:33:59.0896 0x08f8  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\windows\system32\DRIVERS\lsi_sas2.sys
14:33:59.0928 0x08f8  LSI_SAS2 - ok
14:33:59.0943 0x08f8  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\windows\system32\DRIVERS\lsi_scsi.sys
14:33:59.0974 0x08f8  LSI_SCSI - ok
14:34:00.0006 0x08f8  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\windows\system32\drivers\luafv.sys
14:34:00.0052 0x08f8  luafv - ok
14:34:00.0162 0x08f8  [ 543F10EDADC7939B71C4ED18C97BBE02, D148F98083DE59C239313FE82C4B1DD5DEAD7AB5FDA6DDCCF11C27E56FA7A195 ] LULU Software CrashHandler C:\Program Files\Soda PDF 6\crash-handler-ws.exe
14:34:00.0208 0x08f8  LULU Software CrashHandler - ok
14:34:00.0255 0x08f8  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\windows\system32\Mcx2Svc.dll
14:34:00.0286 0x08f8  Mcx2Svc - ok
14:34:00.0318 0x08f8  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\windows\system32\DRIVERS\megasas.sys
14:34:00.0349 0x08f8  megasas - ok
14:34:00.0364 0x08f8  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\windows\system32\DRIVERS\MegaSR.sys
14:34:00.0396 0x08f8  MegaSR - ok
14:34:00.0411 0x08f8  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\windows\system32\mmcss.dll
14:34:00.0458 0x08f8  MMCSS - ok
14:34:00.0474 0x08f8  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\windows\system32\drivers\modem.sys
14:34:00.0505 0x08f8  Modem - ok
14:34:00.0536 0x08f8  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\windows\system32\DRIVERS\monitor.sys
14:34:00.0567 0x08f8  monitor - ok
14:34:00.0614 0x08f8  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
14:34:00.0630 0x08f8  mouclass - ok
14:34:00.0661 0x08f8  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
14:34:00.0676 0x08f8  mouhid - ok
14:34:00.0723 0x08f8  [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
14:34:00.0754 0x08f8  mountmgr - ok
14:34:00.0848 0x08f8  [ DEA022193DF8C88F6E2B3E33D148A5DB, 97DFC47DB83E04A975A1969AA120385463FCAF4E1A9984FD3220442D7026B45A ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:34:00.0879 0x08f8  MozillaMaintenance - ok
14:34:00.0910 0x08f8  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\windows\system32\drivers\mpio.sys
14:34:00.0942 0x08f8  mpio - ok
14:34:00.0973 0x08f8  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
14:34:01.0020 0x08f8  mpsdrv - ok
14:34:01.0082 0x08f8  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\windows\system32\mpssvc.dll
14:34:01.0144 0x08f8  MpsSvc - ok
14:34:01.0176 0x08f8  [ 21F4B24ACFC79A483515BD986DD9043F, 22681907E02E0B723ABE2CEF0602D36C8EF862E7E2B62A9B40A5EF582E58D7BA ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
14:34:01.0222 0x08f8  MRxDAV - ok
14:34:01.0269 0x08f8  [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
14:34:01.0301 0x08f8  mrxsmb - ok
14:34:01.0347 0x08f8  [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
14:34:01.0379 0x08f8  mrxsmb10 - ok
14:34:01.0394 0x08f8  [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
14:34:01.0425 0x08f8  mrxsmb20 - ok
14:34:01.0441 0x08f8  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\windows\system32\drivers\msahci.sys
14:34:01.0472 0x08f8  msahci - ok
14:34:01.0488 0x08f8  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\windows\system32\drivers\msdsm.sys
14:34:01.0519 0x08f8  msdsm - ok
14:34:01.0535 0x08f8  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\windows\System32\msdtc.exe
14:34:01.0566 0x08f8  MSDTC - ok
14:34:01.0597 0x08f8  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\windows\system32\drivers\Msfs.sys
14:34:01.0628 0x08f8  Msfs - ok
14:34:01.0644 0x08f8  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys
14:34:01.0675 0x08f8  mshidkmdf - ok
14:34:01.0706 0x08f8  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
14:34:01.0722 0x08f8  msisadrv - ok
14:34:01.0753 0x08f8  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\windows\system32\iscsiexe.dll
14:34:01.0800 0x08f8  MSiSCSI - ok
14:34:01.0800 0x08f8  msiserver - ok
14:34:01.0831 0x08f8  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\windows\system32\drivers\MSKSSRV.sys
14:34:01.0862 0x08f8  MSKSSRV - ok
14:34:01.0878 0x08f8  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
14:34:01.0909 0x08f8  MSPCLOCK - ok
14:34:01.0925 0x08f8  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\windows\system32\drivers\MSPQM.sys
14:34:01.0956 0x08f8  MSPQM - ok
14:34:01.0971 0x08f8  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\windows\system32\drivers\MsRPC.sys
14:34:02.0003 0x08f8  MsRPC - ok
14:34:02.0065 0x08f8  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\windows\system32\drivers\mssmbios.sys
14:34:02.0096 0x08f8  mssmbios - ok
14:34:02.0127 0x08f8  MSSQL$MSSMLBIZ - ok
14:34:02.0174 0x08f8  [ ADAF062116B4E6D96E44D26486A87AF6, 1A2EE7C4598E8442F24A5C97FEBF7AC6A20703F7EA9097B6E48BE4A05E231D8C ] MSSQLServerADHelper C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
14:34:02.0190 0x08f8  MSSQLServerADHelper - ok
14:34:02.0237 0x08f8  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\windows\system32\drivers\MSTEE.sys
14:34:02.0268 0x08f8  MSTEE - ok
14:34:02.0283 0x08f8  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\windows\system32\DRIVERS\MTConfig.sys
14:34:02.0315 0x08f8  MTConfig - ok
14:34:02.0330 0x08f8  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\windows\system32\Drivers\mup.sys
14:34:02.0361 0x08f8  Mup - ok
14:34:02.0393 0x08f8  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\windows\system32\qagentRT.dll
14:34:02.0439 0x08f8  napagent - ok
14:34:02.0486 0x08f8  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys
14:34:02.0517 0x08f8  NativeWifiP - ok
14:34:02.0580 0x08f8  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\windows\system32\drivers\ndis.sys
14:34:02.0642 0x08f8  NDIS - ok
14:34:02.0673 0x08f8  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\windows\system32\DRIVERS\ndiscap.sys
14:34:02.0705 0x08f8  NdisCap - ok
14:34:02.0736 0x08f8  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
14:34:02.0767 0x08f8  NdisTapi - ok
14:34:02.0798 0x08f8  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\windows\system32\DRIVERS\ndisuio.sys
14:34:02.0829 0x08f8  Ndisuio - ok
14:34:02.0876 0x08f8  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\windows\system32\DRIVERS\ndiswan.sys
14:34:02.0923 0x08f8  NdisWan - ok
14:34:02.0954 0x08f8  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\windows\system32\drivers\NDProxy.sys
14:34:02.0985 0x08f8  NDProxy - ok
14:34:03.0032 0x08f8  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\windows\system32\DRIVERS\netbios.sys
14:34:03.0079 0x08f8  NetBIOS - ok
14:34:03.0110 0x08f8  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\windows\system32\DRIVERS\netbt.sys
14:34:03.0173 0x08f8  NetBT - ok
14:34:03.0188 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] Netlogon        C:\windows\system32\lsass.exe
14:34:03.0219 0x08f8  Netlogon - ok
14:34:03.0251 0x08f8  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\windows\System32\netman.dll
14:34:03.0297 0x08f8  Netman - ok
14:34:03.0391 0x08f8  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:34:03.0453 0x08f8  NetMsmqActivator - ok
14:34:03.0469 0x08f8  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:34:03.0500 0x08f8  NetPipeActivator - ok
14:34:03.0531 0x08f8  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\windows\System32\netprofm.dll
14:34:03.0625 0x08f8  netprofm - ok
14:34:03.0656 0x08f8  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:34:03.0672 0x08f8  NetTcpActivator - ok
14:34:03.0672 0x08f8  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:34:03.0703 0x08f8  NetTcpPortSharing - ok
14:34:03.0734 0x08f8  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\windows\system32\DRIVERS\nfrd960.sys
14:34:03.0750 0x08f8  nfrd960 - ok
14:34:03.0797 0x08f8  [ 374071043F9E4231EE43BE2BB48DD36D, C4FA3FC40CC49DBBB91901D14210A55D3831FAC9F9B3FF45FCA7F5CF242C9E92 ] NlaSvc          C:\windows\System32\nlasvc.dll
14:34:03.0828 0x08f8  NlaSvc - ok
14:34:03.0859 0x08f8  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\windows\system32\drivers\Npfs.sys
14:34:03.0890 0x08f8  Npfs - ok
14:34:03.0921 0x08f8  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\windows\system32\nsisvc.dll
14:34:03.0968 0x08f8  nsi - ok
14:34:03.0999 0x08f8  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
14:34:04.0031 0x08f8  nsiproxy - ok
14:34:04.0124 0x08f8  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
14:34:04.0187 0x08f8  Ntfs - ok
14:34:04.0218 0x08f8  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\windows\system32\drivers\Null.sys
14:34:04.0265 0x08f8  Null - ok
14:34:04.0639 0x08f8  [ 2713392707E515EFB671751FA767EBD2, A29F9F84A5C4D74DE53A975DA339217542636DF8DE4C336CFDEA117DE5724280 ] nvlddmkm        C:\windows\system32\DRIVERS\nvlddmkm.sys
14:34:04.0967 0x08f8  nvlddmkm - ok
14:34:05.0045 0x08f8  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\windows\system32\drivers\nvraid.sys
14:34:05.0076 0x08f8  nvraid - ok
14:34:05.0091 0x08f8  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\windows\system32\drivers\nvstor.sys
14:34:05.0123 0x08f8  nvstor - ok
14:34:05.0154 0x08f8  [ D445466C0A10536486FBEBBC271D6E34, 0A20C185C18DB4BAD42B76A1C1196764AC3CC439462EEC0338377B4662B608F4 ] nvsvc           C:\windows\system32\nvvsvc.exe
14:34:05.0185 0x08f8  nvsvc - ok
14:34:05.0232 0x08f8  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
14:34:05.0263 0x08f8  nv_agp - ok
14:34:05.0372 0x08f8  [ 84DE1DD996B48B05ACE31AD015FA108A, 4B9D1E4EF83ECED6C77F23D9879C124534F7053D7423E3A2D0F67A4A720CEA94 ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:34:05.0403 0x08f8  odserv - ok
14:34:05.0435 0x08f8  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
14:34:05.0497 0x08f8  ohci1394 - ok
14:34:05.0544 0x08f8  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:34:05.0575 0x08f8  ose - ok
14:34:05.0622 0x08f8  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
14:34:05.0669 0x08f8  p2pimsvc - ok
14:34:05.0700 0x08f8  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\windows\system32\p2psvc.dll
14:34:05.0747 0x08f8  p2psvc - ok
14:34:05.0762 0x08f8  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\windows\system32\DRIVERS\parport.sys
14:34:05.0793 0x08f8  Parport - ok
14:34:05.0825 0x08f8  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\windows\system32\drivers\partmgr.sys
14:34:05.0840 0x08f8  partmgr - ok
14:34:05.0871 0x08f8  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\windows\system32\DRIVERS\parvdm.sys
14:34:05.0887 0x08f8  Parvdm - ok
14:34:05.0918 0x08f8  [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc          C:\windows\System32\pcasvc.dll
14:34:05.0965 0x08f8  PcaSvc - ok
14:34:05.0996 0x08f8  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\windows\system32\drivers\pci.sys
14:34:06.0027 0x08f8  pci - ok
14:34:06.0059 0x08f8  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\windows\system32\drivers\pciide.sys
14:34:06.0074 0x08f8  pciide - ok
14:34:06.0105 0x08f8  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\windows\system32\DRIVERS\pcmcia.sys
14:34:06.0137 0x08f8  pcmcia - ok
14:34:06.0152 0x08f8  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\windows\system32\drivers\pcw.sys
14:34:06.0183 0x08f8  pcw - ok
14:34:06.0215 0x08f8  [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH          C:\windows\system32\drivers\peauth.sys
14:34:06.0277 0x08f8  PEAUTH - ok
14:34:06.0371 0x08f8  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\windows\system32\pla.dll
14:34:06.0464 0x08f8  pla - ok
14:34:06.0511 0x08f8  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\windows\system32\umpnpmgr.dll
14:34:06.0558 0x08f8  PlugPlay - ok
14:34:06.0589 0x08f8  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll
14:34:06.0620 0x08f8  PNRPAutoReg - ok
14:34:06.0636 0x08f8  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\windows\system32\pnrpsvc.dll
14:34:06.0667 0x08f8  PNRPsvc - ok
14:34:06.0729 0x08f8  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\windows\System32\ipsecsvc.dll
14:34:06.0776 0x08f8  PolicyAgent - ok
14:34:06.0823 0x08f8  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\windows\system32\umpo.dll
14:34:06.0870 0x08f8  Power - ok
14:34:06.0901 0x08f8  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
14:34:06.0948 0x08f8  PptpMiniport - ok
14:34:06.0963 0x08f8  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\windows\system32\DRIVERS\processr.sys
14:34:06.0995 0x08f8  Processor - ok
14:34:07.0057 0x08f8  [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3CE27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc         C:\windows\system32\profsvc.dll
14:34:07.0104 0x08f8  ProfSvc - ok
14:34:07.0135 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] ProtectedStorage C:\windows\system32\lsass.exe
14:34:07.0151 0x08f8  ProtectedStorage - ok
14:34:07.0182 0x08f8  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\windows\system32\DRIVERS\pacer.sys
14:34:07.0229 0x08f8  Psched - ok
14:34:07.0291 0x08f8  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\windows\system32\DRIVERS\ql2300.sys
14:34:07.0353 0x08f8  ql2300 - ok
14:34:07.0385 0x08f8  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\windows\system32\DRIVERS\ql40xx.sys
14:34:07.0400 0x08f8  ql40xx - ok
14:34:07.0447 0x08f8  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\windows\system32\qwave.dll
14:34:07.0509 0x08f8  QWAVE - ok
14:34:07.0541 0x08f8  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
14:34:07.0572 0x08f8  QWAVEdrv - ok
14:34:07.0587 0x08f8  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
14:34:07.0650 0x08f8  RasAcd - ok
14:34:07.0697 0x08f8  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\windows\system32\DRIVERS\AgileVpn.sys
14:34:07.0728 0x08f8  RasAgileVpn - ok
14:34:07.0759 0x08f8  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\windows\System32\rasauto.dll
14:34:07.0790 0x08f8  RasAuto - ok
14:34:07.0806 0x08f8  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\windows\system32\DRIVERS\rasl2tp.sys
14:34:07.0837 0x08f8  Rasl2tp - ok
14:34:07.0884 0x08f8  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\windows\System32\rasmans.dll
14:34:07.0946 0x08f8  RasMan - ok
14:34:07.0962 0x08f8  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
14:34:08.0009 0x08f8  RasPppoe - ok
14:34:08.0040 0x08f8  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\windows\system32\DRIVERS\rassstp.sys
14:34:08.0087 0x08f8  RasSstp - ok
14:34:08.0133 0x08f8  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys
14:34:08.0180 0x08f8  rdbss - ok
14:34:08.0211 0x08f8  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\windows\system32\DRIVERS\rdpbus.sys
14:34:08.0243 0x08f8  rdpbus - ok
14:34:08.0274 0x08f8  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
14:34:08.0305 0x08f8  RDPCDD - ok
14:34:08.0321 0x08f8  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
14:34:08.0352 0x08f8  RDPENCDD - ok
14:34:08.0383 0x08f8  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
14:34:08.0414 0x08f8  RDPREFMP - ok
14:34:08.0461 0x08f8  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\windows\system32\drivers\RDPWD.sys
14:34:08.0477 0x08f8  RDPWD - ok
14:34:08.0539 0x08f8  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
14:34:08.0570 0x08f8  rdyboost - ok
14:34:08.0601 0x08f8  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\windows\System32\mprdim.dll
14:34:08.0648 0x08f8  RemoteAccess - ok
14:34:08.0695 0x08f8  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\windows\system32\regsvc.dll
14:34:08.0726 0x08f8  RemoteRegistry - ok
14:34:08.0742 0x08f8  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
14:34:08.0804 0x08f8  RpcEptMapper - ok
14:34:08.0820 0x08f8  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\windows\system32\locator.exe
14:34:08.0835 0x08f8  RpcLocator - ok
14:34:08.0867 0x08f8  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\windows\system32\rpcss.dll
14:34:08.0898 0x08f8  RpcSs - ok
14:34:08.0945 0x08f8  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
14:34:08.0991 0x08f8  rspndr - ok
14:34:09.0023 0x08f8  [ 6465166DD9B2F841DABAD16ABDADBE98, C5E93E9739A14375A8242D11F3661A2D069DC0F88DD13C869F525E19808A362E ] RTL8167         C:\windows\system32\DRIVERS\Rt86win7.sys
14:34:09.0054 0x08f8  RTL8167 - ok
14:34:09.0085 0x08f8  [ 6E5FBB7CBAEC47038B945D5E9B144A64, B2AA2F39DAA841FCA470846CC07C580464E2F07C3EFAA64AF783144718F09C13 ] SABI            C:\windows\system32\Drivers\SABI.sys
14:34:09.0101 0x08f8  SABI - ok
14:34:09.0116 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] SamSs           C:\windows\system32\lsass.exe
14:34:09.0147 0x08f8  SamSs - ok
14:34:09.0179 0x08f8  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
14:34:09.0210 0x08f8  sbp2port - ok
14:34:09.0257 0x08f8  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\windows\System32\SCardSvr.dll
14:34:09.0288 0x08f8  SCardSvr - ok
14:34:09.0335 0x08f8  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
14:34:09.0366 0x08f8  scfilter - ok
14:34:09.0428 0x08f8  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\windows\system32\schedsvc.dll
14:34:09.0506 0x08f8  Schedule - ok
14:34:09.0537 0x08f8  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\windows\System32\certprop.dll
14:34:09.0569 0x08f8  SCPolicySvc - ok
14:34:09.0584 0x08f8  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\windows\System32\SDRSVC.dll
14:34:09.0631 0x08f8  SDRSVC - ok
14:34:09.0678 0x08f8  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\windows\system32\drivers\secdrv.sys
14:34:09.0709 0x08f8  secdrv - ok
14:34:09.0740 0x08f8  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\windows\system32\seclogon.dll
14:34:09.0787 0x08f8  seclogon - ok
14:34:09.0803 0x08f8  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\windows\System32\sens.dll
14:34:09.0849 0x08f8  SENS - ok
14:34:09.0865 0x08f8  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\windows\system32\sensrsvc.dll
14:34:09.0896 0x08f8  SensrSvc - ok
14:34:09.0912 0x08f8  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\windows\system32\DRIVERS\serenum.sys
14:34:09.0943 0x08f8  Serenum - ok
14:34:09.0959 0x08f8  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\windows\system32\DRIVERS\serial.sys
14:34:10.0005 0x08f8  Serial - ok
14:34:10.0021 0x08f8  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\windows\system32\DRIVERS\sermouse.sys
14:34:10.0052 0x08f8  sermouse - ok
14:34:10.0099 0x08f8  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\windows\system32\sessenv.dll
14:34:10.0146 0x08f8  SessionEnv - ok
14:34:10.0177 0x08f8  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\windows\system32\drivers\sffdisk.sys
14:34:10.0208 0x08f8  sffdisk - ok
14:34:10.0224 0x08f8  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
14:34:10.0239 0x08f8  sffp_mmc - ok
14:34:10.0255 0x08f8  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\windows\system32\drivers\sffp_sd.sys
14:34:10.0286 0x08f8  sffp_sd - ok
14:34:10.0317 0x08f8  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\windows\system32\DRIVERS\sfloppy.sys
14:34:10.0333 0x08f8  sfloppy - ok
14:34:10.0364 0x08f8  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\windows\System32\ipnathlp.dll
14:34:10.0411 0x08f8  SharedAccess - ok
14:34:10.0458 0x08f8  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\windows\System32\shsvcs.dll
14:34:10.0520 0x08f8  ShellHWDetection - ok
14:34:10.0536 0x08f8  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\windows\system32\drivers\sisagp.sys
14:34:10.0551 0x08f8  sisagp - ok
14:34:10.0583 0x08f8  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\windows\system32\DRIVERS\SiSRaid2.sys
14:34:10.0614 0x08f8  SiSRaid2 - ok
14:34:10.0614 0x08f8  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\windows\system32\DRIVERS\sisraid4.sys
14:34:10.0645 0x08f8  SiSRaid4 - ok
14:34:10.0645 0x08f8  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\windows\system32\DRIVERS\smb.sys
14:34:10.0692 0x08f8  Smb - ok
14:34:10.0739 0x08f8  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
14:34:10.0754 0x08f8  SNMPTRAP - ok
14:34:10.0848 0x08f8  [ 8AF23779B8DFD9DEEE93DCF73315A744, FE61BEC9764ED93E54D022A60BC12CC3181A4E2ABCA2D3D1A800F04026A0384B ] Soda PDF 6      C:\Program Files\Soda PDF 6\ws.exe
14:34:10.0926 0x08f8  Soda PDF 6 - ok
14:34:10.0988 0x08f8  [ 213491A1F522B6FB10074CB8CAD4644E, DE02CED05DBE4B78C1F8288888D448E0666DC54815029DF5B7B9FD77196A9E72 ] Soda PDF 6 Creator C:\Program Files\Soda PDF 6\creator-ws.exe
14:34:11.0035 0x08f8  Soda PDF 6 Creator - ok
14:34:11.0066 0x08f8  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\windows\system32\drivers\spldr.sys
14:34:11.0097 0x08f8  spldr - ok
14:34:11.0144 0x08f8  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\windows\System32\spoolsv.exe
14:34:11.0238 0x08f8  Spooler - ok
14:34:11.0409 0x08f8  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\windows\system32\sppsvc.exe
14:34:11.0597 0x08f8  sppsvc - ok
14:34:11.0659 0x08f8  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\windows\system32\sppuinotify.dll
14:34:11.0706 0x08f8  sppuinotify - ok
14:34:11.0831 0x08f8  [ CDDDEC541BC3C96F91ECB48759673505, B030FFA02832317AC5626BF1BF8A4A95A5992C9A6E81BC1C002D5F4D667C27FB ] sptd            C:\windows\System32\Drivers\sptd.sys
14:34:11.0893 0x08f8  sptd - ok
14:34:11.0955 0x08f8  [ D2B096CD2F56FAC6EEEED9A77DDF6DC8, FD904FBB36ED60AE084F86F7196FCE48F798CF720DB1677C307059E45497E140 ] SQLBrowser      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
14:34:11.0987 0x08f8  SQLBrowser - ok
14:34:12.0002 0x08f8  [ 54902536AAD0E9B99BC65F89C0CAF93F, 312B6F1ECBAA42EA8FAC374E446FC6B686F747B38D903E1B181F95AECCB2BFD1 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
14:34:12.0033 0x08f8  SQLWriter - ok
14:34:12.0096 0x08f8  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\windows\system32\DRIVERS\srv.sys
14:34:12.0127 0x08f8  srv - ok
14:34:12.0158 0x08f8  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\windows\system32\DRIVERS\srv2.sys
14:34:12.0189 0x08f8  srv2 - ok
14:34:12.0205 0x08f8  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
14:34:12.0236 0x08f8  srvnet - ok
14:34:12.0267 0x08f8  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\windows\System32\ssdpsrv.dll
14:34:12.0314 0x08f8  SSDPSRV - ok
14:34:12.0345 0x08f8  [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv          C:\windows\system32\DRIVERS\ssmdrv.sys
14:34:12.0361 0x08f8  ssmdrv - ok
14:34:12.0377 0x08f8  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\windows\system32\sstpsvc.dll
14:34:12.0408 0x08f8  SstpSvc - ok
14:34:12.0439 0x08f8  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\windows\system32\DRIVERS\stexstor.sys
14:34:12.0455 0x08f8  stexstor - ok
14:34:12.0517 0x08f8  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\windows\System32\wiaservc.dll
14:34:12.0564 0x08f8  StiSvc - ok
14:34:12.0595 0x08f8  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\windows\system32\drivers\swenum.sys
14:34:12.0611 0x08f8  swenum - ok
14:34:12.0642 0x08f8  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\windows\System32\swprv.dll
14:34:12.0689 0x08f8  swprv - ok
14:34:12.0735 0x08f8  [ 7A9025D8F7852B06D6D08ED536135E7E, 814153517841D316AA44D59F31B3C6DAD09DE688AF6B946D9B0970EAE815CAAD ] SynTP           C:\windows\system32\DRIVERS\SynTP.sys
14:34:12.0767 0x08f8  SynTP - ok
14:34:12.0845 0x08f8  [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain         C:\windows\system32\sysmain.dll
14:34:12.0938 0x08f8  SysMain - ok
14:34:12.0969 0x08f8  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\windows\System32\TabSvc.dll
14:34:13.0001 0x08f8  TabletInputService - ok
14:34:13.0047 0x08f8  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\windows\System32\tapisrv.dll
14:34:13.0110 0x08f8  TapiSrv - ok
14:34:13.0125 0x08f8  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\windows\System32\tbssvc.dll
14:34:13.0188 0x08f8  TBS - ok
14:34:13.0266 0x08f8  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\windows\system32\drivers\tcpip.sys
14:34:13.0328 0x08f8  Tcpip - ok
14:34:13.0406 0x08f8  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
14:34:13.0453 0x08f8  TCPIP6 - ok
14:34:13.0500 0x08f8  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
14:34:13.0515 0x08f8  tcpipreg - ok
14:34:13.0562 0x08f8  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
14:34:13.0593 0x08f8  TDPIPE - ok
14:34:13.0625 0x08f8  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\windows\system32\drivers\tdtcp.sys
14:34:13.0656 0x08f8  TDTCP - ok
14:34:13.0687 0x08f8  [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx             C:\windows\system32\DRIVERS\tdx.sys
14:34:13.0718 0x08f8  tdx - ok
14:34:13.0749 0x08f8  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\windows\system32\drivers\termdd.sys
14:34:13.0765 0x08f8  TermDD - ok
14:34:13.0812 0x08f8  [ E05E31F7BF577228E27CFFCA5B54ABBD, BF053DE7FA6DF33E15D0DD421F34962D92575ED163E4A605FE6B8DA9CEA5CF55 ] TermService     C:\windows\System32\termsrv.dll
14:34:13.0874 0x08f8  TermService - ok
14:34:13.0905 0x08f8  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\windows\system32\themeservice.dll
14:34:13.0937 0x08f8  Themes - ok
14:34:13.0952 0x08f8  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\windows\system32\mmcss.dll
14:34:13.0983 0x08f8  THREADORDER - ok
14:34:13.0999 0x08f8  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\windows\System32\trkwks.dll
14:34:14.0046 0x08f8  TrkWks - ok
14:34:14.0093 0x08f8  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
14:34:14.0155 0x08f8  TrustedInstaller - ok
14:34:14.0202 0x08f8  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
14:34:14.0217 0x08f8  tssecsrv - ok
14:34:14.0264 0x08f8  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
14:34:14.0295 0x08f8  TsUsbFlt - ok
14:34:14.0342 0x08f8  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
14:34:14.0373 0x08f8  tunnel - ok
14:34:14.0405 0x08f8  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\windows\system32\DRIVERS\uagp35.sys
14:34:14.0420 0x08f8  uagp35 - ok
14:34:14.0451 0x08f8  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
14:34:14.0514 0x08f8  udfs - ok
14:34:14.0545 0x08f8  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\windows\system32\UI0Detect.exe
14:34:14.0576 0x08f8  UI0Detect - ok
14:34:14.0623 0x08f8  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
14:34:14.0639 0x08f8  uliagpkx - ok
14:34:14.0685 0x08f8  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\windows\system32\drivers\umbus.sys
14:34:14.0701 0x08f8  umbus - ok
14:34:14.0748 0x08f8  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\windows\system32\DRIVERS\umpass.sys
14:34:14.0763 0x08f8  UmPass - ok
14:34:14.0795 0x08f8  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\windows\System32\upnphost.dll
14:34:14.0857 0x08f8  upnphost - ok
14:34:14.0873 0x08f8  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\windows\system32\DRIVERS\usbccgp.sys
14:34:14.0904 0x08f8  usbccgp - ok
14:34:14.0935 0x08f8  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\windows\system32\drivers\usbcir.sys
14:34:14.0966 0x08f8  usbcir - ok
14:34:14.0982 0x08f8  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\windows\system32\DRIVERS\usbehci.sys
14:34:15.0013 0x08f8  usbehci - ok
14:34:15.0060 0x08f8  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys
14:34:15.0091 0x08f8  usbhub - ok
14:34:15.0122 0x08f8  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\windows\system32\drivers\usbohci.sys
14:34:15.0153 0x08f8  usbohci - ok
14:34:15.0185 0x08f8  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
14:34:15.0231 0x08f8  usbprint - ok
14:34:15.0247 0x08f8  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\windows\system32\drivers\usbscan.sys
14:34:15.0294 0x08f8  usbscan - ok
14:34:15.0325 0x08f8  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\windows\system32\DRIVERS\USBSTOR.SYS
14:34:15.0341 0x08f8  USBSTOR - ok
14:34:15.0372 0x08f8  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\windows\system32\DRIVERS\usbuhci.sys
14:34:15.0387 0x08f8  usbuhci - ok
14:34:15.0419 0x08f8  [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo        C:\windows\System32\Drivers\usbvideo.sys
14:34:15.0434 0x08f8  usbvideo - ok
14:34:15.0465 0x08f8  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\windows\System32\uxsms.dll
14:34:15.0528 0x08f8  UxSms - ok
14:34:15.0559 0x08f8  [ DD17E1573651293D4ED31053795B3471, 94F7D1BB1C3B0C1FAAEED07375DB0F3BC995394FB5C26983548D946C8D229D54 ] VaultSvc        C:\windows\system32\lsass.exe
14:34:15.0575 0x08f8  VaultSvc - ok
14:34:15.0590 0x08f8  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
14:34:15.0621 0x08f8  vdrvroot - ok
14:34:15.0668 0x08f8  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\windows\System32\vds.exe
14:34:15.0731 0x08f8  vds - ok
14:34:15.0777 0x08f8  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\windows\system32\DRIVERS\vgapnp.sys
14:34:15.0824 0x08f8  vga - ok
14:34:15.0840 0x08f8  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\windows\System32\drivers\vga.sys
14:34:15.0887 0x08f8  VgaSave - ok
14:34:15.0933 0x08f8  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\windows\system32\drivers\vhdmp.sys
14:34:15.0965 0x08f8  vhdmp - ok
14:34:15.0996 0x08f8  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\windows\system32\drivers\viaagp.sys
14:34:16.0027 0x08f8  viaagp - ok
14:34:16.0043 0x08f8  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\windows\system32\DRIVERS\viac7.sys
14:34:16.0074 0x08f8  ViaC7 - ok
14:34:16.0105 0x08f8  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\windows\system32\drivers\viaide.sys
14:34:16.0136 0x08f8  viaide - ok
14:34:16.0152 0x08f8  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\windows\system32\drivers\volmgr.sys
14:34:16.0183 0x08f8  volmgr - ok
14:34:16.0214 0x08f8  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\windows\system32\drivers\volmgrx.sys
14:34:16.0245 0x08f8  volmgrx - ok
14:34:16.0261 0x08f8  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\windows\system32\drivers\volsnap.sys
14:34:16.0292 0x08f8  volsnap - ok
14:34:16.0323 0x08f8  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\windows\system32\DRIVERS\vsmraid.sys
14:34:16.0339 0x08f8  vsmraid - ok
14:34:16.0433 0x08f8  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\windows\system32\vssvc.exe
14:34:16.0526 0x08f8  VSS - ok
14:34:16.0542 0x08f8  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
14:34:16.0557 0x08f8  vwifibus - ok
14:34:16.0589 0x08f8  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
14:34:16.0604 0x08f8  vwififlt - ok
14:34:16.0620 0x08f8  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\windows\system32\DRIVERS\vwifimp.sys
14:34:16.0651 0x08f8  vwifimp - ok
14:34:16.0713 0x08f8  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\windows\system32\w32time.dll
14:34:16.0776 0x08f8  W32Time - ok
14:34:16.0791 0x08f8  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\windows\system32\DRIVERS\wacompen.sys
14:34:16.0807 0x08f8  WacomPen - ok
14:34:16.0838 0x08f8  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
14:34:16.0869 0x08f8  WANARP - ok
14:34:16.0885 0x08f8  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
14:34:16.0916 0x08f8  Wanarpv6 - ok
14:34:16.0994 0x08f8  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\windows\system32\wbengine.exe
14:34:17.0103 0x08f8  wbengine - ok
14:34:17.0119 0x08f8  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
14:34:17.0166 0x08f8  WbioSrvc - ok
14:34:17.0197 0x08f8  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\windows\System32\wcncsvc.dll
14:34:17.0244 0x08f8  wcncsvc - ok
14:34:17.0259 0x08f8  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
14:34:17.0291 0x08f8  WcsPlugInService - ok
14:34:17.0322 0x08f8  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\windows\system32\DRIVERS\wd.sys
14:34:17.0337 0x08f8  Wd - ok
14:34:17.0384 0x08f8  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
14:34:17.0431 0x08f8  Wdf01000 - ok
14:34:17.0462 0x08f8  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost  C:\windows\system32\wdi.dll
14:34:17.0525 0x08f8  WdiServiceHost - ok
14:34:17.0525 0x08f8  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost   C:\windows\system32\wdi.dll
14:34:17.0556 0x08f8  WdiSystemHost - ok
14:34:17.0587 0x08f8  [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient       C:\windows\System32\webclnt.dll
14:34:17.0634 0x08f8  WebClient - ok
14:34:17.0665 0x08f8  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\windows\system32\wecsvc.dll
14:34:17.0712 0x08f8  Wecsvc - ok
14:34:17.0727 0x08f8  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\windows\System32\wercplsupport.dll
14:34:17.0774 0x08f8  wercplsupport - ok
14:34:17.0790 0x08f8  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\windows\System32\WerSvc.dll
14:34:17.0837 0x08f8  WerSvc - ok
14:34:17.0868 0x08f8  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
14:34:17.0899 0x08f8  WfpLwf - ok
14:34:17.0915 0x08f8  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\windows\system32\drivers\wimmount.sys
14:34:17.0930 0x08f8  WIMMount - ok
14:34:18.0008 0x08f8  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
14:34:18.0086 0x08f8  WinDefend - ok
14:34:18.0102 0x08f8  WinHttpAutoProxySvc - ok
14:34:18.0164 0x08f8  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\windows\system32\wbem\WMIsvc.dll
14:34:18.0211 0x08f8  Winmgmt - ok
14:34:18.0289 0x08f8  [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM           C:\windows\system32\WsmSvc.dll
14:34:18.0383 0x08f8  WinRM - ok
14:34:18.0461 0x08f8  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\windows\System32\wlansvc.dll
14:34:18.0523 0x08f8  Wlansvc - ok
14:34:18.0554 0x08f8  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\windows\system32\drivers\wmiacpi.sys
14:34:18.0601 0x08f8  WmiAcpi - ok
14:34:18.0632 0x08f8  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
14:34:18.0648 0x08f8  wmiApSrv - ok
14:34:18.0773 0x08f8  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
14:34:18.0866 0x08f8  WMPNetworkSvc - ok
14:34:18.0897 0x08f8  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\windows\System32\wpcsvc.dll
14:34:18.0944 0x08f8  WPCSvc - ok
14:34:18.0975 0x08f8  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
14:34:19.0007 0x08f8  WPDBusEnum - ok
14:34:19.0038 0x08f8  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\windows\system32\drivers\ws2ifsl.sys
14:34:19.0069 0x08f8  ws2ifsl - ok
14:34:19.0085 0x08f8  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\windows\System32\wscsvc.dll
14:34:19.0131 0x08f8  wscsvc - ok
14:34:19.0147 0x08f8  WSearch - ok
14:34:19.0256 0x08f8  [ D9B0134913E5EF007AF82A418C503322, 7418DD28C8E968674382F8352AAFFC4DE77887E2B71B8844D615F19432B4C55A ] wuauserv        C:\windows\system32\wuaueng.dll
14:34:19.0350 0x08f8  wuauserv - ok
14:34:19.0381 0x08f8  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
14:34:19.0412 0x08f8  WudfPf - ok
14:34:19.0459 0x08f8  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
14:34:19.0506 0x08f8  WUDFRd - ok
14:34:19.0553 0x08f8  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\windows\System32\WUDFSvc.dll
14:34:19.0584 0x08f8  wudfsvc - ok
14:34:19.0631 0x08f8  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\windows\System32\wwansvc.dll
14:34:19.0677 0x08f8  WwanSvc - ok
14:34:19.0740 0x08f8  [ C26C68BCBAC1F33F890C226769759209, 15FCBDF391C68D440A61512CF236C328A540DBC155D252FB7E97E14D0E99AA40 ] xusb21          C:\windows\system32\DRIVERS\xusb21.sys
14:34:19.0771 0x08f8  xusb21 - ok
14:34:19.0787 0x08f8  ================ Scan global ===============================
14:34:19.0818 0x08f8  [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\windows\system32\basesrv.dll
14:34:19.0865 0x08f8  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\windows\system32\winsrv.dll
14:34:19.0880 0x08f8  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\windows\system32\winsrv.dll
14:34:19.0911 0x08f8  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\windows\system32\sxssrv.dll
14:34:19.0974 0x08f8  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\windows\system32\services.exe
14:34:19.0989 0x08f8  [ Global ] - ok
14:34:19.0989 0x08f8  ================ Scan MBR ==================================
14:34:20.0005 0x08f8  [ 2E5DEBB2116B3417023E0D6562D7ED07 ] \Device\Harddisk0\DR0
14:34:20.0348 0x08f8  \Device\Harddisk0\DR0 - ok
14:34:20.0348 0x08f8  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
14:34:20.0738 0x08f8  \Device\Harddisk1\DR1 - ok
14:34:20.0738 0x08f8  ================ Scan VBR ==================================
14:34:20.0738 0x08f8  [ FFCF558F995DC6506B87E0580F61DA7E ] \Device\Harddisk0\DR0\Partition1
14:34:20.0738 0x08f8  \Device\Harddisk0\DR0\Partition1 - ok
14:34:20.0754 0x08f8  [ 1FC161B5AC31634E8CC59E6A45853EBB ] \Device\Harddisk0\DR0\Partition2
14:34:20.0754 0x08f8  \Device\Harddisk0\DR0\Partition2 - ok
14:34:20.0769 0x08f8  [ 1C5C97F61B455CE0A46ED9F63F86257F ] \Device\Harddisk0\DR0\Partition3
14:34:20.0769 0x08f8  \Device\Harddisk0\DR0\Partition3 - ok
14:34:20.0769 0x08f8  [ A8FC47FCDA8630BE1B55F486249990BF ] \Device\Harddisk1\DR1\Partition1
14:34:20.0769 0x08f8  \Device\Harddisk1\DR1\Partition1 - ok
14:34:20.0769 0x08f8  ================ Scan generic autorun ======================
14:34:20.0769 0x08f8  NvCplDaemon - ok
14:34:21.0113 0x08f8  [ F50CA00F1929D9294FE01894D0168A7F, 197B7402215422B05837439E6973FD76F8C052A089DB61AA75CF8082A8389344 ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
14:34:21.0534 0x08f8  RtHDVCpl - ok
14:34:21.0643 0x08f8  [ 934DE0EDBED59940A2725050DA13A066, CB231A76001E380EDEDE8DE3A1713CC87D95D96EF7E757D18C6B6B209C215C6F ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
14:34:21.0690 0x08f8  SynTPEnh - ok
14:34:21.0752 0x08f8  [ CD1E74BC24CB1D1544406741F46F4D61, 658529854926471AE413D8A365C8E6500AEBDC33A562607DAB185F1571A5524B ] C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
14:34:21.0783 0x08f8  UCam_Menu - ok
14:34:21.0799 0x08f8  [ BEAE23E7FC6DCC19E9B0F1811F02834F, AF0C770CA1E239EC700CB260BC9CD6586034225ACA2F8966BC1A4D6BAA5ACC9E ] C:\Program Files\Winamp\winampa.exe
14:34:21.0830 0x08f8  WinampAgent - ok
14:34:21.0893 0x08f8  [ 90A3525C7399B7784D28F99EA1A51C4C, EFECE6A0A66ED3166197C3D90E1787D695BBA388E7BD344520597A115969C266 ] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
14:34:21.0939 0x08f8  EEventManager - ok
14:34:22.0017 0x08f8  [ 616954748C2F28D653C7BAE814CA51FD, D75E46D978E42C2E7041206B18591EDAF700AD27077AE4D1D76E2857A4A77BF8 ] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
14:34:22.0064 0x08f8  avgnt - ok
14:34:22.0158 0x08f8  [ 47EA5F76FAB723C61AB4A0D79BAD512C, A7A38EB0A7068B160E6949945EF639F999A06AE35746F6E79C7350745798E5C9 ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
14:34:22.0220 0x08f8  Adobe ARM - ok
14:34:22.0314 0x08f8  [ 5909C378DF9132FC91F50AF70A53455A, E13CE76ABAFA459BFDB4B7806E73BF57217D0800206FC24805E66573F3670604 ] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
14:34:22.0361 0x08f8  Avira Systray - ok
14:34:22.0470 0x08f8  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:34:22.0563 0x08f8  Sidebar - ok
14:34:22.0579 0x08f8  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:34:22.0610 0x08f8  mctadmin - ok
14:34:22.0673 0x08f8  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:34:22.0719 0x08f8  Sidebar - ok
14:34:22.0735 0x08f8  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:34:22.0751 0x08f8  mctadmin - ok
14:34:22.0813 0x08f8  [ 7AC2182FA963EFD2F72E8399BF0E67F9, B4E84E7DDB1D614A24F89205201C049969DBD60D9D7ACC747A0B443B08167E13 ] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE
14:34:22.0844 0x08f8  EPSON SX110 Series - ok
14:34:22.0844 0x08f8  Waiting for KSN requests completion. In queue: 57
14:34:23.0858 0x08f8  Waiting for KSN requests completion. In queue: 57
14:34:24.0872 0x08f8  Waiting for KSN requests completion. In queue: 57
14:34:26.0011 0x08f8  AV detected via SS2: Avira Desktop, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 14.0.7.310 ), 0x41000 ( enabled : updated )
14:34:26.0042 0x08f8  Win FW state via NFP2: enabled
14:34:28.0647 0x08f8  ============================================================
14:34:28.0647 0x08f8  Scan finished
14:34:28.0647 0x08f8  ============================================================
14:34:28.0663 0x10dc  Detected object count: 0
14:34:28.0663 0x10dc  Actual detected object count: 0
         
__________________

Alt 12.11.2014, 09:38   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Lade dir bitte Emsisoft MBR Master herunter und speichere es auf den Desktop.
  • Führe die mbrmastr.exe aus.
  • Drücke auf Backup MBR und speichere es als emsi auf den Desktop.
  • Schliesse dann das Programm wieder.
  • Packe die erstellte emsi.mbr in ein zip-Archiv (Rechtsklick -> Senden an -> Zip-komprimierten Ordner) und hänge die Datei hier an.
  • Auf dem Desktop wird ebenfalls eine Textdatei MBRMastr_<date>_<time>.txt erstellt. Poste deren Inhalt bitte hier.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 12.11.2014, 12:10   #5
doomkarloff
 
Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Morgen Schrauber,

Anbei das Zipfile und die Textdatei.

HTML-Code:
Detected Windows version: 6.1 Build 7601 Service Pack 1
Installing direct disk access driver ...
Driver connection handle: 0x000000F8
1 valid drive(s) found.

Details for Disk 0 - Hitachi HTS545032B9A Rev PB3O:
  Device name              : \\.\PhysicalDrive0
  Geometry (C/H/S)         : 38913/255/63
  Boot loader reputation   : Unknown
  Cross view comparison    : Passed
  Partition table integrity: Passed

  Boot loader hashes
    SHA-1                  : F5C09ACABD4A5370BDD907E8EDFE0C1DA0F9D3F5
    MD5                    : 2E5DEBB2116B3417023E0D6562D7ED07
mit freundlichen Grüssen


Alt 13.11.2014, 06:26   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Bitte die emsi.zip mal bei virustotal.com scannen lassen, Ergebnis hier posten.
__________________
--> Avira hat unbekanntes Objekt gefunden

Alt 13.11.2014, 07:08   #7
doomkarloff
 
Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Moin,

hier der Scan der Datei von virustotal.com

Code:
ATTFilter
SHA256: 	76c89830fd46515e03f40a21c2e5cef1986754c829cac4d98684b7b1b2814c18
Dateiname: 	emsi.zip
Erkennungsrate: 	1 / 53
Analyse-Datum: 	2014-11-13 07:05:29 UTC ( vor 0 Minuten )
0
0

    Analyse
    Zusätzliche Informationen
    Kommentare
    Bewertungen

Antivirus 	Ergebnis 	Aktualisierung
VBA32 	suspected of Unknown.BootVirus.I 	20141112
AVG 		20141113
AVware 		20141113
Ad-Aware 		20141113
AegisLab 		20141113
Agnitum 		20141112
AhnLab-V3 		20141112
Antiy-AVL 		20141112
Avast 		20141113
Avira 		20141113
Baidu-International 		20141107
BitDefender 		20141113
Bkav 		20141112
ByteHero 		20141113
CAT-QuickHeal 		20141113
CMC 		20141110
ClamAV 		20141113
Comodo 		20141113
Cyren 		20141113
DrWeb 		20141113
ESET-NOD32 		20141113
Emsisoft 		20141113
F-Prot 		20141113
F-Secure 		20141113
Fortinet 		20141113
GData 		20141113
Ikarus 		20141113
Jiangmin 		20141112
K7AntiVirus 		20141112
K7GW 		20141112
Kaspersky 		20141113
Kingsoft 		20141113
Malwarebytes 		20141113
McAfee 		20141113
McAfee-GW-Edition 		20141113
MicroWorld-eScan 		20141113
Microsoft 		20141113
NANO-Antivirus 		20141113
Norman 		20141112
Panda 		20141110
Qihoo-360 		20141113
Rising 		20141112
SUPERAntiSpyware 		20141113
Sophos 		20141113
Symantec 		20141113
Tencent 		20141113
TheHacker 		20141111
TotalDefense 		20141112
TrendMicro-HouseCall 		20141113
ViRobot 		20141113
Zillya 		20141111
Zoner 		20141112
nProtect 		20141112
         

Alt 14.11.2014, 06:02   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Sieht alles gut aus
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.11.2014, 10:25   #9
doomkarloff
 
Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Moin Schrauber,

erstmal ganz herzlichen Dank für die schnelle und gut verständliche Hilfe.

Darf ich noch fragen um was es sich bei dem versteckten Objekt handelt, und warum Avira damit Probleme hatte. Oder soll ich das jetzt einfach bei jedem Aviradurchlauf ignorieren?

Und deutet das nicht auf eine Unregelmässigkeit hin :VBA32 suspected of Unknown.BootVirus.I ?

Ansonsten nochmal herzlichen Dank, hab noch nen Paar Taler ins Spendenglas geschmissen.

Schönes Wochenende

Alt 15.11.2014, 10:33   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Avira hat unbekanntes Objekt gefunden - Standard

Avira hat unbekanntes Objekt gefunden



Keine Ahnung was Avira da wieder hat, aber versteckt ist da nix
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Avira hat unbekanntes Objekt gefunden
adware, antivirus, browser, cpu, defender, desktop, device driver, downloader, fehlercode 0x80000003, fehlercode 0xc0000005, fehlercode detected, firefox, firefox 33.1, flash player, hdd0(c:, installation, problem, programm, required, rundll, scan, security, server, services.exe, software, svchost.exe, system, windows



Ähnliche Themen: Avira hat unbekanntes Objekt gefunden


  1. Windows XP: Nach fehlgeschlagener Programminstallation fehlen 2 GB Speicherplatz und Avira meldet „Verstecktes Objekt“ C:\windows\system32\
    Log-Analyse und Auswertung - 11.06.2015 (13)
  2. PUA/DownloadSponsor.Gen von Avira gefunden und PUP.Optional.SimpleNewTab.A von Malwarebytes gefunden
    Log-Analyse und Auswertung - 25.03.2015 (15)
  3. Avira hat unbekanntes Objekt gefunden
    Mülltonne - 11.11.2014 (0)
  4. Avira meldet 1 verstecktes Objekt - PC-Absturz während dieses Posts
    Log-Analyse und Auswertung - 29.06.2014 (13)
  5. Infiziertes Objekt gefunden
    Log-Analyse und Auswertung - 13.04.2014 (25)
  6. Avira Scan, versteckter Treiber gefunden, infiziertes Objekt, Fehlermeldungen - bin ziemlich überfordert
    Log-Analyse und Auswertung - 05.03.2014 (24)
  7. Aktive Malware in meinem System gefunden? Objekt: svchost.exe Fund: ADWARE/Eprotektor.E --> In Quarantäne --->Bluescreen
    Log-Analyse und Auswertung - 07.12.2013 (12)
  8. Windows 7: Avira hat 172 Viren gefunden, davor mehrer Funde einzel Funde bei Malwarebytes bzw. Avira
    Log-Analyse und Auswertung - 15.09.2013 (13)
  9. verstecktes Objekt gefunden
    Antiviren-, Firewall- und andere Schutzprogramme - 29.08.2013 (2)
  10. Trojan-Downloader.Win32.MultiDL.c über Kaspersky gefunden, Objekt: C:\\Windows\System32\Macromed\Flash\FlashPlayerUpdateService,
    Plagegeister aller Art und deren Bekämpfung - 23.07.2013 (11)
  11. Frage zu "unbekanntes Element gefunden"
    Plagegeister aller Art und deren Bekämpfung - 22.06.2013 (2)
  12. Avira findet ein verstecktes Objekt
    Plagegeister aller Art und deren Bekämpfung - 13.01.2013 (3)
  13. Avira: 1 verstecktes Objekt, 4 Warnungen, 1 Hinweis, aber kein Fund
    Log-Analyse und Auswertung - 22.05.2012 (4)
  14. 1 Verstecktes objekt gefunden schaedlich oder nicht ?
    Plagegeister aller Art und deren Bekämpfung - 07.02.2012 (10)
  15. Avira meldet verstecktes Objekt
    Plagegeister aller Art und deren Bekämpfung - 11.02.2011 (0)
  16. Avira AntiVir was ist ein "verstecktes Objekt" & wie kann ich das Problem lösen ?
    Plagegeister aller Art und deren Bekämpfung - 09.10.2010 (17)
  17. Hilfe! Unbekanntes Textdokument auf meinem Rechner gefunden!
    Plagegeister aller Art und deren Bekämpfung - 28.11.2006 (12)

Zum Thema Avira hat unbekanntes Objekt gefunden - Hallo! Hab seit einigen Tagen das Problem, dass beim scannen mit Avira eine Meldung erscheint, die mich darüber informiert, dass ein verstecktes Objekt gefunden wurde. Leider ohne Angabe, wo sich - Avira hat unbekanntes Objekt gefunden...
Archiv
Du betrachtest: Avira hat unbekanntes Objekt gefunden auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.