Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Verbindungsabrüche bei verschiedenen Servicen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 25.01.2015, 14:16   #1
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Guten Tag,

ich habe seit ca. 3 Monaten Verbindungsabrüche mit bestimmten Servicen (Skype und League of Legends) im ca. 20 Sekunden abstand. Interessant ist hier, dass die die Verbindungsabrüche weniger auftreten wenn ich in den Servicen aktiv bin. Außerdem habe ich bei der Problemsuche erfahren, dass meine IP (dynamisch) bei Spamhaus in der XBL/CBL war und momentan auch noch in der PBL ist. In der vorletzten CBL-Listung stand, dass diese von Conficker befallen ist und an einem Botnet teilhat. Allerdings wurde in der nächsten Listung nicht mehr der Conficker genannt, sondern nur gewarnt das die IP an einem Botnet teilhat. Ich bin momentan seit 2 Tagen in keiner XBL/CBL nur noch in der PBL. Das Problem habe ich auch auf meinem Laptop, dieser ist allerdings über WLAN verbunden und mein Rechner über LAN.

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01
Ran by Moussaoui (administrator) on MOUSSAOUI-PC on 25-01-2015 13:45:59
Running from F:\Downloads
Loaded Profiles: Moussaoui (Available profiles: Moussaoui)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Binary Fortress Software) E:\DisplayFusion\DisplayFusionService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() E:\Rainmeter\Rainmeter.exe
() C:\ProgramData\gaupdt\service\0\gaupsvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\Windows\System32\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) E:\Teamviewer\TeamViewer_Service.exe
(Chris Pietschmann (hxxp://pietschsoft.com)) E:\VirtualRouter\VirtualRouterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Samsung Electronics.) E:\Samsung Magician\Samsung Magician.exe
(Piotr Pawlowski) E:\foobar2000\foobar2000.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
() C:\Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.232\deploy\LoLLauncher.exe
() C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\LoLPatcher.exe
() C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\LolClient.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Mozilla Corporation) E:\Mozilla Firefox\firefox.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Mozilla Corporation) E:\Thunderbird\thunderbird.exe
(Mozilla Corporation) E:\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe
() F:\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] ()
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\RunOnce: [Adobe Speed Launcher] => 1422094966
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe ()
Startup: C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> E:\Rainmeter\Rainmeter.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> {9B4980B0-AA72-4EBC-BA28-63895BE9CB5E} URL = 
SearchScopes: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> E:\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> E:\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> E:\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - E:\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{25338E54-3931-45FE-AC3A-C94BC9DD3569}: [NameServer] 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "autoconfig_url", "data:application/x-ns-proxy-autoconfig;base64,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"
FF NetworkProxy: "ftp", "64.31.22.131"
FF NetworkProxy: "ftp_port", 8089
FF NetworkProxy: "gopher", "64.31.22.131"
FF NetworkProxy: "gopher_port", 8089
FF NetworkProxy: "socks", "64.31.22.131"
FF NetworkProxy: "socks_port", 8089
FF NetworkProxy: "ssl", "64.31.22.131"
FF NetworkProxy: "ssl_port", 8089
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> E:\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> E:\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> E:\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> E:\ITunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> E:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> E:\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-1621062894-2451693253-3220061068-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Moussaoui\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: United States English Spellchecker - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\en-US@dictionaries.addons.mozilla.org [2014-10-06]
FF Extension: Customize about:newtab - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\customizenewtab@alejandrobrizuela.com.ar.xpi [2014-11-24]
FF Extension: MEGA - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\firefox@mega.co.nz.xpi [2014-12-25]
FF Extension: ProxTube - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\ich@maltegoetz.de.xpi [2014-10-02]
FF Extension: BetterTTV - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\jid0-OeCFXKAPh2tC0bN3Li9ajRAZx6c@jetpack.xpi [2014-10-19]
FF Extension: Reddit Enhancement Suite - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2014-08-28]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-10-22]
FF Extension: SciLor's Grooveshark(tm) Unlocker for Germany - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\SciLorsGrooveUnlocker@scilor.com.xpi [2014-11-06]
FF Extension: Adblock Plus - C:\Users\Moussaoui\AppData\Roaming\Mozilla\Firefox\Profiles\d38pwc79.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-28]
StartMenuInternet: FIREFOX.EXE - E:\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> ""
CHR Profile: C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-10-02]
CHR Extension: (BetterTTV) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-04-24]
CHR Extension: (Google Docs) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-13]
CHR Extension: (Google Drive) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-13]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-28]
CHR Extension: (YouTube) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-13]
CHR Extension: (Adblock Plus) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-21]
CHR Extension: (Google-Suche) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-13]
CHR Extension: (Hola Better Internet Engine) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\epbfmioobedknooiakdehepogalbgkng [2014-11-22]
CHR Extension: (Hola Besseres Internet) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-11-22]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-04-24]
CHR Extension: (Steam Theme) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcphcjcjgkjmbphkfjleamgkinaeebnm [2014-04-24]
CHR Extension: (Google Wallet) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-13]
CHR Extension: (Google Mail) - C:\Users\Moussaoui\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
R2 DisplayFusionService; E:\DisplayFusion\DisplayFusionService.exe [5278064 2014-09-09] (Binary Fortress Software)
R2 GaUpdateService; C:\ProgramData\gaupdt\service\0\gaupsvc.exe [1558032 2013-03-19] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58387104 2014-07-12] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1903472 2014-12-31] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-09] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-08] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441504 2014-07-12] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TeamViewer; E:\Teamviewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 Virtual Router; E:\VirtualRouter\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (hxxp://pietschsoft.com)) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 A5AGU; C:\Windows\System32\DRIVERS\AGUx64.sys [1077760 2008-08-06] (D-Link Corporation)
R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [18963552 2012-06-27] (Advanced Micro Devices, Inc.) [File not signed]
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2014-08-19] (Riverbed Technology, Inc.)
R3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1328128 2013-02-07] (C-Media Electronics Inc)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation                           )
R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [38912 2014-10-30] (SteelSeries ApS)
S3 cpuz134; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 GPU-Z; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\GPU-Z.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S1 wStLibG64; system32\drivers\wStLibG64.sys [X]
U3 kwtciuow; \??\C:\Users\MOUSSA~1\AppData\Local\Temp\kwtciuow.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 13:45 - 2015-01-25 13:46 - 00000000 ____D () C:\FRST
2015-01-25 13:43 - 2015-01-25 13:43 - 00000000 _____ () C:\Users\Moussaoui\defogger_reenable
2015-01-24 10:54 - 2015-01-24 15:44 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-23 17:27 - 2015-01-23 17:27 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\ATI
2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\ATI
2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 ____D () C:\ProgramData\ATI
2015-01-23 16:07 - 2015-01-23 16:07 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-01-23 16:05 - 2015-01-23 16:05 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-23 16:04 - 2015-01-23 16:04 - 00064312 _____ () C:\Windows\SysWOW64\CCCInstall_201501231604595491.log
2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-01-23 16:04 - 2015-01-23 16:04 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-23 16:02 - 2015-01-23 16:02 - 00000000 ____D () C:\AMD
2015-01-23 11:02 - 2011-02-16 17:11 - 00428136 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-01-23 11:02 - 2011-02-16 17:11 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-01-23 11:02 - 2011-02-16 17:11 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2015-01-22 15:24 - 2015-01-22 15:24 - 00460680 _____ () C:\Windows\Minidump\012215-8626-01.dmp
2015-01-21 22:25 - 2015-01-21 22:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Router
2015-01-20 19:30 - 2015-01-20 19:30 - 00000496 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BitTorrent Sync.lnk
2015-01-19 19:47 - 2015-01-19 19:47 - 00000000 ____D () C:\NPE
2015-01-19 19:44 - 2015-01-23 15:56 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\NPE
2015-01-19 19:44 - 2015-01-19 19:44 - 00000000 ____D () C:\ProgramData\Norton
2015-01-18 19:53 - 2015-01-20 20:39 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\BitTorrent Sync
2015-01-17 20:15 - 2015-01-20 20:18 - 00005167 _____ () C:\Windows\system32\ScanResults.xml
2015-01-17 20:09 - 2015-01-20 20:16 - 00000464 _____ () C:\Windows\system32\ScannerSettings
2015-01-15 20:08 - 2015-01-17 20:20 - 00000165 _____ () C:\Windows\Reimage.ini
2015-01-15 16:23 - 2015-01-22 15:24 - 501084813 _____ () C:\Windows\MEMORY.DMP
2015-01-15 16:23 - 2015-01-15 16:23 - 00275888 _____ () C:\Windows\Minidump\011515-9703-01.dmp
2015-01-14 20:21 - 2015-01-14 20:21 - 00000529 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2015-01-14 18:21 - 2015-01-14 18:21 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap
2015-01-14 18:20 - 2015-01-14 18:20 - 00000000 ____D () C:\Program Files\WinPcap
2015-01-14 17:59 - 2015-01-14 17:59 - 00390776 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\TrufosAlt.sys
2015-01-14 17:56 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 17:56 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 17:56 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 17:56 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 17:56 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 17:56 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 17:56 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 17:56 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 17:56 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 17:56 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 17:56 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 17:56 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 17:56 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-13 16:30 - 2015-01-21 12:19 - 00003546 _____ () C:\Windows\PFRO.log
2015-01-13 09:47 - 2015-01-24 11:24 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-13 09:47 - 2015-01-13 09:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-13 09:47 - 2015-01-13 09:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-13 09:47 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-13 09:47 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-13 09:47 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-13 09:37 - 2015-01-14 16:02 - 00001092 _____ () C:\Windows\SecuniaPackage.log
2015-01-13 09:33 - 2015-01-13 09:33 - 00001073 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2015-01-13 09:33 - 2015-01-13 09:33 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Secunia PSI
2015-01-13 09:33 - 2015-01-13 09:33 - 00000000 ____D () C:\Program Files (x86)\Secunia
2015-01-13 05:55 - 2015-01-13 13:31 - 00000000 ____D () C:\Program Files (x86)\stinger
2015-01-12 23:45 - 2015-01-12 23:46 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\CyberGhost
2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\Program Files\TAP-Windows
2015-01-12 23:45 - 2015-01-12 23:45 - 00000000 ____D () C:\Program Files\CyberGhost 5
2015-01-12 23:36 - 2015-01-12 23:36 - 00000600 _____ () C:\Users\Moussaoui\PUTTY.RND
2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-01-12 16:59 - 2015-01-24 11:22 - 00003539 _____ () C:\Windows\setupact.log
2015-01-12 16:59 - 2015-01-12 16:59 - 05066752 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-12 16:59 - 2015-01-12 16:59 - 00114976 _____ () C:\Users\Moussaoui\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-12 16:59 - 2015-01-12 16:59 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-11 14:26 - 2015-01-11 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Network Monitor 3.4
2015-01-11 00:15 - 2015-01-11 13:21 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-11 00:15 - 2015-01-11 00:15 - 00001024 _____ () C:\.rnd
2015-01-11 00:15 - 2015-01-11 00:15 - 00000000 ____D () C:\ProgramData\Paessler
2015-01-11 00:15 - 2015-01-11 00:15 - 00000000 ____D () C:\ProgramData\Licenses
2015-01-06 02:53 - 2015-01-06 02:53 - 00000000 ____D () C:\ProgramData\VS
2015-01-06 02:50 - 2015-01-06 02:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-06 02:44 - 2011-09-22 21:07 - 00105832 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL
2015-01-06 02:44 - 2011-09-22 21:06 - 00109416 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2015-01-06 02:44 - 2011-09-22 17:18 - 00073064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2015-01-06 02:43 - 2015-01-06 02:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0
2015-01-06 02:40 - 2015-01-06 02:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-01-06 02:40 - 2015-01-06 02:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-01-06 02:17 - 2015-01-06 02:17 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-01-06 02:17 - 2015-01-06 02:17 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-01-06 02:17 - 2015-01-06 02:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-01-02 22:24 - 2015-01-02 23:26 - 00000000 ____D () C:\Program Files\Recuva
2015-01-02 18:34 - 2015-01-02 18:34 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\AAA_Internet_Publishing,_
2015-01-02 18:34 - 2014-10-15 14:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SPORDER.DLL
2015-01-02 16:56 - 2015-01-02 16:56 - 00000000 ____D () C:\ProgramData\TP-LINK
2015-01-02 16:56 - 2015-01-02 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-01-02 16:56 - 2013-03-05 14:14 - 01528976 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtwlanu.sys
2015-01-02 16:56 - 2013-03-05 14:14 - 01528976 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTWlanU.sys
2015-01-02 16:56 - 2013-02-25 07:57 - 00007865 _____ () C:\Windows\system32\netrtwlanu.cat
2015-01-02 05:21 - 2015-01-25 01:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-02 05:03 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-02 05:03 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-02 05:03 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-02 05:03 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-02 05:03 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-02 05:03 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-02 05:03 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-02 05:03 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-02 05:03 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-02 05:03 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-01 03:52 - 2015-01-01 03:52 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Introversion
2014-12-31 22:24 - 2014-12-31 22:24 - 00000000 ____D () C:\Program Files (x86)\Livestreamer
2014-12-27 18:37 - 2014-12-27 18:59 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Ubisoft Game Launcher
2014-12-27 17:59 - 2014-12-27 18:08 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Ubisoft
2014-12-27 17:47 - 2014-12-29 04:33 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 13:45 - 2014-04-05 22:52 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Skype
2015-01-25 13:45 - 2014-04-05 20:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-25 13:43 - 2014-04-05 19:53 - 00000000 ____D () C:\Users\Moussaoui
2015-01-25 13:04 - 2014-12-23 13:27 - 00000511 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-01-25 12:50 - 2014-04-13 09:19 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-25 11:38 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-25 11:38 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-25 11:34 - 2014-04-05 19:52 - 02041188 _____ () C:\Windows\WindowsUpdate.log
2015-01-25 08:50 - 2014-04-13 09:19 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-25 06:21 - 2014-11-30 14:33 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}
2015-01-25 05:45 - 2014-04-05 20:42 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-25 05:45 - 2014-04-05 20:42 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-25 05:45 - 2014-04-05 20:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 02:00 - 2014-06-26 15:37 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Adobe
2015-01-25 01:52 - 2014-04-11 15:36 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-25 01:52 - 2014-04-08 07:16 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-24 22:22 - 2014-07-07 07:25 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\CrashDumps
2015-01-24 22:22 - 2014-04-16 11:32 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\vlc
2015-01-24 11:36 - 2014-11-08 18:48 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\DisplayFusion
2015-01-24 11:27 - 2010-11-21 07:50 - 02603542 _____ () C:\Windows\system32\perfh007.dat
2015-01-24 11:27 - 2010-11-21 07:50 - 00749832 _____ () C:\Windows\system32\perfc007.dat
2015-01-24 11:27 - 2009-07-14 06:13 - 00006626 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-24 11:22 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-23 16:05 - 2014-05-08 00:56 - 00000000 ____D () C:\ProgramData\AMD
2015-01-23 16:04 - 2014-04-05 21:19 - 00000000 ____D () C:\Program Files\AMD
2015-01-23 15:33 - 2014-04-05 22:50 - 00000000 ____D () C:\Windows\pss
2015-01-23 11:02 - 2014-04-05 20:04 - 00001769 _____ () C:\Windows\Language_trs.ini
2015-01-23 11:02 - 2014-04-05 20:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-23 11:02 - 2014-04-05 20:04 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-22 19:37 - 2014-07-19 12:00 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\OBS
2015-01-22 15:24 - 2014-04-14 21:00 - 00000000 ____D () C:\Windows\Minidump
2015-01-18 19:37 - 2014-04-05 20:43 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Adobe
2015-01-14 14:18 - 2014-04-15 18:39 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Black_Tree_Gaming
2015-01-13 16:30 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-13 16:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-01-13 11:37 - 2014-04-09 04:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-01-13 11:14 - 2014-12-17 19:54 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\TeamViewer
2015-01-12 23:46 - 2014-04-05 19:53 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\VirtualStore
2015-01-12 23:43 - 2014-12-18 18:47 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\iFunbox_UserCache
2015-01-12 18:48 - 2011-04-07 09:21 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-06 23:04 - 2014-05-01 09:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
2015-01-06 23:03 - 2014-05-01 09:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
2015-01-06 23:03 - 2014-04-09 02:51 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-01-06 23:03 - 2014-04-09 02:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-01-06 02:57 - 2014-04-09 02:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-06 02:57 - 2014-04-08 14:03 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-06 02:55 - 2014-04-05 19:50 - 00114976 _____ () C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-06 02:55 - 2014-04-05 19:50 - 00114976 _____ () C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-06 02:47 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-01-06 02:17 - 2011-04-07 08:41 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-01-05 03:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-04 06:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-03 22:57 - 2014-07-19 12:00 - 00000000 ____D () C:\Program Files\OBS
2015-01-02 05:21 - 2014-08-20 07:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-02 05:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-02 05:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-02 04:47 - 2014-04-05 21:35 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-01-01 15:12 - 2014-04-21 00:07 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\Battle.net
2015-01-01 14:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-31 23:23 - 2014-05-01 15:37 - 00007598 _____ () C:\Users\Moussaoui\AppData\Local\Resmon.ResmonCfg
2014-12-31 22:26 - 2014-07-23 20:34 - 00000000 ____D () C:\ProgramData\Origin
2014-12-31 22:24 - 2014-04-16 11:27 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\livestreamer
2014-12-31 13:12 - 2014-04-05 21:26 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-31 12:14 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-29 05:06 - 2014-04-10 09:33 - 00000000 ____D () C:\Users\Moussaoui\AppData\Local\SteelSeries Engine 3 Client
2014-12-29 04:34 - 2014-04-12 17:41 - 00000000 ____D () C:\Users\Moussaoui\AppData\Roaming\Notepad++
2014-12-29 04:33 - 2014-06-29 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania 5
2014-12-29 04:33 - 2014-05-27 01:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2014-12-27 13:32 - 2014-10-20 07:59 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-27 13:32 - 2014-04-05 22:52 - 00000000 ____D () C:\ProgramData\Skype

==================== Files in the root of some directories =======

2014-12-18 20:25 - 2014-12-18 21:32 - 0000600 _____ () C:\Users\Moussaoui\AppData\Roaming\winscp.rnd
2014-12-18 21:02 - 2014-12-18 21:24 - 0000600 _____ () C:\Users\Moussaoui\AppData\Local\PUTTY.RND
2014-05-01 15:37 - 2014-12-31 23:23 - 0007598 _____ () C:\Users\Moussaoui\AppData\Local\Resmon.ResmonCfg
2014-04-07 02:58 - 2014-04-07 02:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Moussaoui\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Moussaoui\AppData\Local\Temp\namebench.exe
C:\Users\Moussaoui\AppData\Local\Temp\python27.dll
C:\Users\Moussaoui\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Moussaoui\AppData\Local\Temp\sqlite3.exe
C:\Users\Moussaoui\AppData\Local\Temp\tcl85.dll
C:\Users\Moussaoui\AppData\Local\Temp\tk85.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-24 04:40

==================== End Of Log ============================
         
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2015 01
Ran by Moussaoui at 2015-01-25 13:46:23
Running from F:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Disabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Disabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)
Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version:  - Blue Byte)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitTorrent Sync (HKLM-x32\...\BitTorrent Sync) (Version: 1.4.106 - BitTorrent Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Crytek Studios)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DisplayFusion 6.1.2 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 6.1.2.0 - Binary Fortress Software)
Dragon Age Redesigned © Morrigan (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned © Morrigan) (Version:  - )
Dragon Age Redesigned© (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned©) (Version:  - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Dragon Age Redesigned© Wynne) (Version:  - )
Dragon Age: Origins - Ultimate Edition (HKLM-x32\...\Steam App 47810) (Version:  - BioWare)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Free Alarm Clock 3.1.0 (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 3.1 - Comfort Software Group)
GDR 5520 für SQL Server 2008 (KB 2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
iFunbox (v2.6.2375.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.6.2375.747 - )
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Livestreamer 1.11.1 (HKLM-x32\...\Livestreamer) (Version:  - )
LOOT (HKLM-x32\...\LOOT) (Version: 0.6.0 - LOOT Development Team)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{12FE6AA6-65D2-40EE-B925-62193128A0E6}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{393CA5BF-0362-42FD-ABC2-BA9D22EF925E}) (Version: 10.3.5520.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Mortal Kombat Komplete Edition (HKLM-x32\...\Steam App 237110) (Version:  - NetherRealm Studios)
Mount&Blade Warband (HKLM-x32\...\Mount&Blade Warband) (Version:  - )
Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Firefox 35.0 (x86 de) (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.1.2 - Mozilla)
Mozilla Thunderbird 31.1.2 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.1.2 (x86 de)) (Version: 31.1.2 - Mozilla)
Mozilla Thunderbird 31.4.0 (x86 de) (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla)
MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD)
Need for Speed™ SHIFT (HKLM-x32\...\{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}) (Version: 1.0.0.0 - Electronic Arts)
Nmap 6.47 (HKLM-x32\...\Nmap) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{5DB65884-C963-4454-AABA-4CA3089281FA}) (Version: 9.09.0720 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Plantronics® GameCom 780/788 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.20.0001 - Plantronics)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2 beta r2326 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia)
Service Pack 3 für SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version:  - Sumo Digital)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version:  - Valve)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
SteelSeries Engine 3.3.1 (HKLM\...\SteelSeries Engine 3) (Version: 3.3.1 - SteelSeries ApS)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
TP-LINK TL-WN725N_TL-WN723N Treiber (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 1.3.1 - TP-LINK)
Unity Web Player (HKU\S-1-5-21-1621062894-2451693253-3220061068-1000\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)
Virtual Router v1.0 (HKLM-x32\...\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}) (Version: 1.0 - Chris Pietschmann)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies)
WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
Wireshark 1.12.3 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.3 - The Wireshark developer community, hxxp://www.wireshark.org)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000_Classes\CLSID\{077f9ad2-15a7-445e-a33a-e21809138189}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1621062894-2451693253-3220061068-1000_Classes\CLSID\{AB246BE9-1623-4A84-ABDA-CFF4D4A273CB}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation)

==================== Restore Points  =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-04-09 05:25 - 00001827 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 adobe.activate.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 209.34.83.73:443
127.0.0.1 209.34.83.73:43
127.0.0.1 209.34.83.73
127.0.0.1 209.34.83.67:443
127.0.0.1 209.34.83.67:43
127.0.0.1 209.34.83.67
127.0.0.1 ood.opsource.net
127.0.0.1 CRL.VERISIGN.NET
127.0.0.1 199.7.52.190:80

There are 4 more lines.


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A86C16B-F7D5-42C4-B181-2AC7322D4B1C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => E:\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {69BDBC84-E1CF-43FA-AB37-9296F3B72FE1} - System32\Tasks\SamsungMagician => E:\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {7D308554-CD75-497C-A416-791C550C2188} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {9757F5D9-CCDA-4F81-8807-0D80FD874343} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => E:\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {9FE829BA-D753-403D-AA46-AC3BA9EF0364} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-13] (Google Inc.)
Task: {A6685FFD-5DA2-4A2C-A5C3-44A466A19449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated)
Task: {AE2C019F-FBD3-427C-A221-D11070A5374D} - System32\Tasks\CCleanerSkipUAC => E:\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {B088DC82-D36E-4DF9-99D3-825CF2537A6F} - System32\Tasks\AdobeAAMUpdater-1.0-Moussaoui-PC-Moussaoui => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated)
Task: {D371A330-50BB-4484-9E3F-13D3FA881555} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {DE108908-9D87-4834-9B1A-7C8C9401C19D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-13] (Google Inc.)
Task: {E8ECAD8E-8D36-4A8B-8F8F-7FFEE6FD8276} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.)
Task: {ED37AB3D-A50B-4573-819D-767FDD2940EA} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2015-01-20 19:30 - 2015-01-20 19:30 - 00102912 _____ () E:\BT\SyncShellContextMenu.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () E:\Notepad++\NppShell_05.dll
2014-11-20 21:23 - 2014-11-20 21:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2014-11-20 21:23 - 2014-11-20 21:23 - 00127488 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 20:23 - 2014-01-21 15:40 - 00817440 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
2014-11-13 22:19 - 2014-11-13 22:19 - 17542656 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
2014-10-14 15:10 - 2014-10-14 15:10 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll
2014-09-17 14:13 - 2014-09-17 14:13 - 00036536 _____ () E:\Rainmeter\Rainmeter.exe
2014-09-17 14:13 - 2014-09-17 14:13 - 00752312 _____ () E:\Rainmeter\Rainmeter.dll
2014-09-17 14:12 - 2014-09-17 14:12 - 00056832 _____ () E:\Rainmeter\Plugins\WebParser.dll
2014-07-06 06:09 - 2013-03-19 12:05 - 01558032 _____ () C:\ProgramData\gaupdt\service\0\gaupsvc.exe
2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-08-09 16:12 - 2014-08-09 16:12 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2014-01-21 16:54 - 2014-12-21 18:54 - 01294336 _____ () C:\Games\League of Legends\RADS\system\rads_user_kernel.exe
2014-12-21 18:54 - 2015-01-15 18:36 - 02436600 _____ () C:\Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.232\deploy\LoLLauncher.exe
2015-01-15 18:36 - 2015-01-15 18:36 - 04113400 _____ () C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\LoLPatcher.exe
2014-12-21 18:56 - 2014-12-21 18:56 - 00074752 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\LolClient.exe
2015-01-25 13:42 - 2015-01-25 13:42 - 00050477 _____ () F:\Downloads\Defogger.exe
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-12 20:23 - 2014-01-21 15:40 - 00149792 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\VmixPLGC.dll
2014-07-06 06:09 - 2012-08-01 10:42 - 00156160 _____ () C:\ProgramData\gaupdt\service\0\libzmq.dll
2014-07-06 06:09 - 2013-02-22 03:08 - 00454656 _____ () C:\ProgramData\gaupdt\service\0\archive.dll
2014-04-05 22:31 - 2014-09-28 17:59 - 00019872 _____ () E:\Samsung Magician\SAMSUNG_SSD.dll
2013-05-04 12:57 - 2013-05-04 12:57 - 00095712 _____ () E:\foobar2000\zlib1.dll
2014-04-11 10:51 - 2014-04-11 10:51 - 00156624 _____ () E:\foobar2000\shared.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00199168 _____ () E:\foobar2000\components\foo_dsp_eq.dll
2014-04-11 10:51 - 2014-04-11 10:51 - 00945128 _____ () E:\foobar2000\components\foo_ui_std.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00199680 _____ () E:\foobar2000\components\foo_dsp_std.dll
2014-06-26 20:41 - 2011-05-29 10:26 - 00334848 _____ () E:\foobar2000\components\foo_quicksearch.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00285696 _____ () E:\foobar2000\components\foo_fileops.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00299520 _____ () E:\foobar2000\components\foo_freedb2.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00304640 _____ () E:\foobar2000\components\foo_cdda.dll
2014-06-26 20:41 - 2011-07-24 18:08 - 00271872 _____ () E:\foobar2000\components\foo_uie_library_tree.dll
2014-06-26 20:41 - 2012-10-16 07:45 - 00946176 _____ () E:\foobar2000\components\foo_uie_wsh_panel_mod.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00501248 _____ () E:\foobar2000\components\foo_converter.dll
2014-06-26 20:41 - 2010-10-30 20:51 - 00452608 _____ () E:\foobar2000\components\foo_uie_elplaylist.dll
2014-06-26 20:41 - 2012-06-15 16:59 - 00802816 _____ () E:\foobar2000\components\foo_uie_lyrics3.dll
2014-06-26 20:41 - 2010-12-11 08:47 - 00337920 _____ () E:\foobar2000\components\foo_uie_biography.dll
2014-04-11 10:51 - 2014-04-11 10:51 - 01391080 _____ () E:\foobar2000\components\foo_input_std.dll
2014-04-11 10:48 - 2014-04-11 10:48 - 00173056 _____ () E:\foobar2000\components\foo_unpack.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00353280 _____ () E:\foobar2000\components\foo_rgscan.dll
2014-06-26 20:41 - 2009-12-10 00:16 - 00356352 _____ () E:\foobar2000\components\foo_uie_panel_splitter.dll
2014-06-26 20:41 - 2011-07-13 10:47 - 00230912 _____ () E:\foobar2000\components\foo_playcount.dll
2014-06-26 20:41 - 2009-09-28 10:32 - 00242176 _____ () E:\foobar2000\components\foo_vis_shpeck.dll
2014-06-26 20:41 - 2011-02-27 22:22 - 01608192 _____ () E:\foobar2000\components\foo_ui_columns.dll
2014-04-11 10:49 - 2014-04-11 10:49 - 00350720 _____ () E:\foobar2000\components\foo_albumlist.dll
2014-06-26 20:41 - 2012-12-24 03:42 - 00241664 _____ () E:\foobar2000\components\foo_ui_hacks.dll
2015-01-15 18:36 - 2015-01-15 18:36 - 01617400 _____ () C:\Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.16\deploy\RiotLauncher.dll
2014-12-21 18:55 - 2014-12-21 18:55 - 04774248 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2014-12-21 18:55 - 2014-12-21 18:55 - 16032616 _____ () C:\Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.126\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
2015-01-13 17:07 - 2015-01-13 17:07 - 03925104 _____ () E:\Mozilla Firefox\mozjs.dll
2015-01-14 18:56 - 2015-01-14 18:56 - 03347056 _____ () E:\Thunderbird\mozjs.dll
2015-01-14 18:56 - 2015-01-14 18:56 - 00158832 _____ () E:\Thunderbird\NSLDAP32V60.dll
2015-01-14 18:56 - 2015-01-14 18:56 - 00023152 _____ () E:\Thunderbird\NSLDAPPR32V60.dll
2015-01-25 05:45 - 2015-01-25 05:45 - 16844976 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Virtual Router Manager.lnk => C:\Windows\pss\Virtual Router Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Moussaoui^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk => C:\Windows\pss\Samsung Magician.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
MSCONFIG\startupreg: CCleaner Monitoring => "E:\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart
MSCONFIG\startupreg: DAEMON Tools Lite => "E:\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: FreeAC => E:\FreeAlarmClock\FreeAlarmClock.exe -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_EBB30A86BE3F353108A4E918AEE1F548 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
MSCONFIG\startupreg: iTunesHelper => "E:\ITunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "E:\Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: Spotify => "C:\Users\Moussaoui\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Moussaoui\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: VirtualCloneDrive => "E:\VirtualCloneDrive\VCDDaemon.exe" /s
MSCONFIG\startupreg: WTFast Tray => "E:\WTFast\WTFast.exe" trayonly

========================= Accounts: ==========================

Administrator (S-1-5-21-1621062894-2451693253-3220061068-500 - Administrator - Disabled)
Gast (S-1-5-21-1621062894-2451693253-3220061068-501 - Limited - Disabled)
Moussaoui (S-1-5-21-1621062894-2451693253-3220061068-1000 - Administrator - Enabled) => C:\Users\Moussaoui

==================== Faulty Device Manager Devices =============

Name: TeamViewer VPN Adapter
Description: TeamViewer VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TeamViewer GmbH
Service: teamviewervpn
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: TAP-Windows Adapter V9
Description: TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: wStLibG64
Description: wStLibG64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: wStLibG64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/25/2015 00:30:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 162c

Startzeit: 01d0389259a0448c

Endzeit: 2

Anwendungspfad: C:\Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: 9bf1724d-a485-11e4-b8d2-5404a6b5cce5

Error: (01/25/2015 04:16:17 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/24/2015 10:22:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x16d4
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (01/24/2015 05:14:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x19d0
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/24/2015 11:24:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (01/25/2015 07:50:57 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (01/25/2015 05:45:14 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (01/25/2015 03:23:28 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (01/24/2015 00:39:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/24/2015 00:39:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/24/2015 11:24:22 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (01/24/2015 11:24:10 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wStLibG64

Error: (01/24/2015 11:24:10 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "VirtualRouterService" wurde nicht richtig gestartet.

Error: (01/24/2015 11:22:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (01/24/2015 11:12:19 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (01/25/2015 00:30:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.0162c01d0389259a0448c2C:\Games\League of Legends\RADS\system\rads_user_kernel.exe9bf1724d-a485-11e4-b8d2-5404a6b5cce5

Error: (01/25/2015 04:16:17 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifeste:\CCleaner\CCleaner.exe

Error: (01/24/2015 10:22:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d16d401d03817464181bdE:\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll19f7dede-a40f-11e4-b8d2-5404a6b5cce5

Error: (01/24/2015 05:14:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d19d001d037e965fbeb07E:\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll071cc993-a3e4-11e4-b8d2-5404a6b5cce5

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/24/2015 11:26:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/24/2015 11:24:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/24/2015 11:06:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


==================== Memory info =========================== 

Processor: AMD FX(tm)-8120 Eight-Core Processor 
Percentage of memory in use: 49%
Total physical RAM: 8191.1 MB
Available physical RAM: 4108.81 MB
Total Pagefile: 9213.28 MB
Available Pagefile: 4700 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:31.22 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Games) (Fixed) (Total:390.62 GB) (Free:278.19 GB) NTFS
Drive e: (Programs) (Fixed) (Total:244.14 GB) (Free:206.28 GB) NTFS
Drive f: (Media) (Fixed) (Total:296.74 GB) (Free:141.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 91ED5CA2)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: ED7A8D49)
Partition 1: (Not Active) - (Size=390.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=296.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-01-25 14:03:09
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000006a Samsung_ rev.EXT0 111,79GB
Running: Gmer-19357.exe; Driver: C:\Users\MOUSSA~1\AppData\Local\Temp\kwtciuow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 586                                                                          fffff8000200008a 7 bytes [00, 00, 00, 00, 00, 00, 03]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 594                                                                          fffff80002000092 4 bytes [00, 00, 00, 00]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\system32\PnkBstrA.exe[2288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                              0000000074cb1465 2 bytes [CB, 74]
.text     C:\Windows\system32\PnkBstrA.exe[2288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                             0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000074cb1465 2 bytes [CB, 74]
.text     C:\Program Files (x86)\Secunia\PSI\PSIA.exe[2644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
.text     E:\Teamviewer\TeamViewer_Service.exe[3320] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000074cb1465 2 bytes [CB, 74]
.text     E:\Teamviewer\TeamViewer_Service.exe[3320] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
.text     C:\Program Files\CyberGhost 5\Service.exe[1048] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                     0000000074cb1465 2 bytes [CB, 74]
.text     C:\Program Files\CyberGhost 5\Service.exe[1048] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                    0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
.text     C:\Program Files (x86)\Secunia\PSI\sua.exe[4352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                    0000000074cb1465 2 bytes [CB, 74]
.text     C:\Program Files (x86)\Secunia\PSI\sua.exe[4352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                   0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
?         C:\Windows\system32\mssprxy.dll [6196] entry point in ".rdata" section                                                                      000000005eab71e6
.text     F:\Downloads\Defogger.exe[7664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                     0000000074cb1465 2 bytes [CB, 74]
.text     F:\Downloads\Defogger.exe[7664] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                    0000000074cb14bb 2 bytes [CB, 74]
.text     ...                                                                                                                                         * 2
---- Processes - GMER 2.1 ----

Library   C:\ProgramData\gaupdt\service\0\libzmq.dll (*** suspicious ***) @ C:\ProgramData\gaupdt\service\0\gaupsvc.exe [2468](2014-07-06 05:09:40)   00000000707b0000
Library   C:\ProgramData\gaupdt\service\0\archive.dll (*** suspicious ***) @ C:\ProgramData\gaupdt\service\0\gaupsvc.exe [2468](2014-07-06 05:09:40)  0000000070220000

---- Files - GMER 2.1 ----

File      C:\Program Files (x86)\Secunia\PSI\SUA\running                                                                                              0 bytes

---- EOF - GMER 2.1 ----
         

Alt 25.01.2015, 14:59   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________

__________________

Alt 25.01.2015, 15:17   #3
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Guten Tag

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.08.3.1004
www.malwarebytes.org

Database version:
  main:    v2015.01.25.06
  rootkit: v2015.01.14.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17501
Moussaoui :: MOUSSAOUI-PC [administrator]

25.01.2015 15:05:55
mbar-log-2015-01-25 (15-05-55).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 367095
Time elapsed: 5 minute(s), 4 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         
Code:
ATTFilter
15:13:36.0509 0x11f4  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
15:13:39.0140 0x11f4  ============================================================
15:13:39.0140 0x11f4  Current date / time: 2015/01/25 15:13:39.0140
15:13:39.0140 0x11f4  SystemInfo:
15:13:39.0140 0x11f4  
15:13:39.0140 0x11f4  OS Version: 6.1.7601 ServicePack: 1.0
15:13:39.0140 0x11f4  Product type: Workstation
15:13:39.0140 0x11f4  ComputerName: MOUSSAOUI-PC
15:13:39.0141 0x11f4  UserName: Moussaoui
15:13:39.0141 0x11f4  Windows directory: C:\Windows
15:13:39.0141 0x11f4  System windows directory: C:\Windows
15:13:39.0141 0x11f4  Running under WOW64
15:13:39.0141 0x11f4  Processor architecture: Intel x64
15:13:39.0141 0x11f4  Number of processors: 8
15:13:39.0141 0x11f4  Page size: 0x1000
15:13:39.0141 0x11f4  Boot type: Normal boot
15:13:39.0141 0x11f4  ============================================================
15:13:39.0172 0x11f4  KLMD registered as C:\Windows\system32\drivers\96056931.sys
15:13:39.0192 0x11f4  System UUID: {660BBEDB-CBF0-5F0E-99A7-8BB8CB590865}
15:13:39.0420 0x11f4  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:13:39.0441 0x11f4  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:13:39.0447 0x11f4  ============================================================
15:13:39.0447 0x11f4  \Device\Harddisk0\DR0:
15:13:39.0447 0x11f4  MBR partitions:
15:13:39.0447 0x11f4  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xDF93800
15:13:39.0447 0x11f4  \Device\Harddisk1\DR1:
15:13:39.0447 0x11f4  MBR partitions:
15:13:39.0447 0x11f4  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x30D40000
15:13:39.0447 0x11f4  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x30D40800, BlocksNum 0x1E848000
15:13:39.0447 0x11f4  \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x4F588800, BlocksNum 0x2517D000
15:13:39.0447 0x11f4  ============================================================
15:13:39.0448 0x11f4  C: <-> \Device\Harddisk0\DR0\Partition1
15:13:39.0516 0x11f4  D: <-> \Device\Harddisk1\DR1\Partition1
15:13:39.0549 0x11f4  E: <-> \Device\Harddisk1\DR1\Partition2
15:13:39.0562 0x11f4  F: <-> \Device\Harddisk1\DR1\Partition3
15:13:39.0563 0x11f4  ============================================================
15:13:39.0563 0x11f4  Initialize success
15:13:39.0563 0x11f4  ============================================================
15:14:28.0487 0x1aa0  ============================================================
15:14:28.0487 0x1aa0  Scan started
15:14:28.0487 0x1aa0  Mode: Manual; SigCheck; TDLFS; 
15:14:28.0488 0x1aa0  ============================================================
15:14:28.0488 0x1aa0  KSN ping started
15:14:42.0130 0x1aa0  KSN ping finished: true
15:14:42.0665 0x1aa0  ================ Scan system memory ========================
15:14:42.0665 0x1aa0  System memory - ok
15:14:42.0665 0x1aa0  ================ Scan services =============================
15:14:42.0700 0x1aa0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
15:14:42.0760 0x1aa0  1394ohci - ok
15:14:42.0789 0x1aa0  [ 4365CCAB66CEB1B831ABEF450A23176B, 0DF09643D5103B9577DAE87491771C17449351F6AE27219E548BF2168EBD7B01 ] A5AGU           C:\Windows\system32\DRIVERS\AGUx64.sys
15:14:42.0830 0x1aa0  A5AGU - ok
15:14:42.0843 0x1aa0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
15:14:42.0863 0x1aa0  ACPI - ok
15:14:42.0868 0x1aa0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
15:14:42.0890 0x1aa0  AcpiPmi - ok
15:14:42.0895 0x1aa0  [ 4C72FDD915D62EAEF149BD9C73AB9CF4, 8EA45A1B88DFD819F0ADA3AF36D464E1BF52574269592370E0CC8D0490680E1F ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:14:42.0908 0x1aa0  AdobeARMservice - ok
15:14:42.0929 0x1aa0  [ A2A9C100FE1BE20A76C0B80D4CA44103, C34B4A31C8563E29EC6A3D318C40075F43C891C23D156F53EE2102C959B7887F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:14:42.0945 0x1aa0  AdobeFlashPlayerUpdateSvc - ok
15:14:42.0961 0x1aa0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
15:14:42.0984 0x1aa0  adp94xx - ok
15:14:42.0997 0x1aa0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
15:14:43.0017 0x1aa0  adpahci - ok
15:14:43.0024 0x1aa0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
15:14:43.0038 0x1aa0  adpu320 - ok
15:14:43.0045 0x1aa0  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
15:14:43.0103 0x1aa0  AeLookupSvc - ok
15:14:43.0117 0x1aa0  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
15:14:43.0143 0x1aa0  AFD - ok
15:14:43.0149 0x1aa0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
15:14:43.0161 0x1aa0  agp440 - ok
15:14:43.0166 0x1aa0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
15:14:43.0184 0x1aa0  ALG - ok
15:14:43.0188 0x1aa0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
15:14:43.0198 0x1aa0  aliide - ok
15:14:43.0205 0x1aa0  [ 2998362D1E550F0C990D77E34415BEB6, 36BBC575DFE0CBD5BC4AF9AD8B54DCEF950E93AF48884D6523457071296514CC ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:14:43.0231 0x1aa0  AMD External Events Utility - ok
15:14:43.0234 0x1aa0  AMD FUEL Service - ok
15:14:43.0237 0x1aa0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
15:14:43.0248 0x1aa0  amdide - ok
15:14:43.0253 0x1aa0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
15:14:43.0268 0x1aa0  AmdK8 - ok
15:14:43.0642 0x1aa0  [ A8C65E019B5BB43670BBCB3BA725813C, 0EB1F5EAB02336690F36E6431EE916778431B79540DAC3DFC0C1A5821EE2DCFC ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
15:14:44.0259 0x1aa0  amdkmdag - detected UnsignedFile.Multi.Generic ( 1 )
15:14:46.0654 0x1aa0  amdkmdag ( UnsignedFile.Multi.Generic ) - warning
15:14:49.0055 0x1aa0  [ 971F3B12C24BB83B48F8CCA2ED019906, E4757480DFF2678E3C7897F6E720EEFF76D452707FC87401B209FE533BFC3210 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
15:14:49.0086 0x1aa0  amdkmdap - ok
15:14:49.0092 0x1aa0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
15:14:49.0106 0x1aa0  AmdPPM - ok
15:14:49.0112 0x1aa0  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
15:14:49.0125 0x1aa0  amdsata - ok
15:14:49.0133 0x1aa0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
15:14:49.0148 0x1aa0  amdsbs - ok
15:14:49.0152 0x1aa0  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
15:14:49.0162 0x1aa0  amdxata - ok
15:14:49.0168 0x1aa0  [ 033D09CD953C40B4AFBA9DCB1D1DFB8E, 629BE54E64C8B3FFE9F52820F6BF2802D50F719F63A621C998865FFD61C9F84E ] amd_sata        C:\Windows\system32\DRIVERS\amd_sata.sys
15:14:49.0180 0x1aa0  amd_sata - ok
15:14:49.0184 0x1aa0  [ F32F762E54137925E185E5FDA5F73826, A9CC747C0886628F8A5145FBE09FFCA6B5E4EFC0F4457E4824E004A329DFC765 ] amd_xata        C:\Windows\system32\DRIVERS\amd_xata.sys
15:14:49.0195 0x1aa0  amd_xata - ok
15:14:49.0199 0x1aa0  [ C3D487827E48CC5EC17994FEC5BDFF87, 5FCEA3EEA583755D0C9F6005ED3032E9DFECB57F504DC67701AE7D2D2631C30E ] AODDriver4.3    C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys
15:14:49.0209 0x1aa0  AODDriver4.3 - ok
15:14:49.0214 0x1aa0  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys
15:14:49.0281 0x1aa0  AppID - ok
15:14:49.0285 0x1aa0  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
15:14:49.0316 0x1aa0  AppIDSvc - ok
15:14:49.0321 0x1aa0  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
15:14:49.0337 0x1aa0  Appinfo - ok
15:14:49.0342 0x1aa0  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
15:14:49.0352 0x1aa0  Apple Mobile Device - ok
15:14:49.0357 0x1aa0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
15:14:49.0369 0x1aa0  arc - ok
15:14:49.0375 0x1aa0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
15:14:49.0388 0x1aa0  arcsas - ok
15:14:49.0399 0x1aa0  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:14:49.0412 0x1aa0  aspnet_state - ok
15:14:49.0416 0x1aa0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:14:49.0448 0x1aa0  AsyncMac - ok
15:14:49.0452 0x1aa0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
15:14:49.0463 0x1aa0  atapi - ok
15:14:49.0469 0x1aa0  [ 33497249626E7787AA5CEA99B226CCA6, EF6213B79F83334CD95E4A58A4FE64190AA3FEFF590E41C4BF302FC4A8F6D6D6 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:14:49.0484 0x1aa0  AtiHDAudioService - ok
15:14:49.0504 0x1aa0  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:14:49.0539 0x1aa0  AudioEndpointBuilder - ok
15:14:49.0560 0x1aa0  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:14:49.0588 0x1aa0  AudioSrv - ok
15:14:49.0596 0x1aa0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
15:14:49.0621 0x1aa0  AxInstSV - ok
15:14:49.0635 0x1aa0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
15:14:49.0660 0x1aa0  b06bdrv - ok
15:14:49.0671 0x1aa0  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
15:14:49.0692 0x1aa0  b57nd60a - ok
15:14:49.0699 0x1aa0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
15:14:49.0715 0x1aa0  BDESVC - ok
15:14:49.0718 0x1aa0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
15:14:49.0747 0x1aa0  Beep - ok
15:14:49.0766 0x1aa0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
15:14:49.0800 0x1aa0  BFE - ok
15:14:49.0825 0x1aa0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
15:14:49.0881 0x1aa0  BITS - ok
15:14:49.0887 0x1aa0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
15:14:49.0900 0x1aa0  blbdrive - ok
15:14:49.0911 0x1aa0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
15:14:49.0930 0x1aa0  Bonjour Service - ok
15:14:49.0936 0x1aa0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:14:49.0950 0x1aa0  bowser - ok
15:14:49.0953 0x1aa0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
15:14:49.0970 0x1aa0  BrFiltLo - ok
15:14:49.0973 0x1aa0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
15:14:49.0988 0x1aa0  BrFiltUp - ok
15:14:49.0993 0x1aa0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
15:14:50.0010 0x1aa0  Browser - ok
15:14:50.0021 0x1aa0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
15:14:50.0048 0x1aa0  Brserid - ok
15:14:50.0053 0x1aa0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
15:14:50.0069 0x1aa0  BrSerWdm - ok
15:14:50.0072 0x1aa0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
15:14:50.0087 0x1aa0  BrUsbMdm - ok
15:14:50.0091 0x1aa0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
15:14:50.0106 0x1aa0  BrUsbSer - ok
15:14:50.0111 0x1aa0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
15:14:50.0128 0x1aa0  BTHMODEM - ok
15:14:50.0134 0x1aa0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
15:14:50.0167 0x1aa0  bthserv - ok
15:14:50.0172 0x1aa0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:14:50.0205 0x1aa0  cdfs - ok
15:14:50.0211 0x1aa0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
15:14:50.0226 0x1aa0  cdrom - ok
15:14:50.0232 0x1aa0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
15:14:50.0263 0x1aa0  CertPropSvc - ok
15:14:50.0267 0x1aa0  [ 08D4BD3F12DFF3A11E4F2C09745DA0FA, 99A19D3B43F5B21A3E23B9A91D9443ED2710C14B954C769B837626181FC4F630 ] CGVPNCliService C:\Program Files\CyberGhost 5\Service.exe
15:14:50.0279 0x1aa0  CGVPNCliService - ok
15:14:50.0283 0x1aa0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
15:14:50.0299 0x1aa0  circlass - ok
15:14:50.0310 0x1aa0  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
15:14:50.0330 0x1aa0  CLFS - ok
15:14:50.0337 0x1aa0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:14:50.0349 0x1aa0  clr_optimization_v2.0.50727_32 - ok
15:14:50.0355 0x1aa0  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:14:50.0367 0x1aa0  clr_optimization_v2.0.50727_64 - ok
15:14:50.0376 0x1aa0  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:14:50.0390 0x1aa0  clr_optimization_v4.0.30319_32 - ok
15:14:50.0395 0x1aa0  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:14:50.0409 0x1aa0  clr_optimization_v4.0.30319_64 - ok
15:14:50.0413 0x1aa0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
15:14:50.0427 0x1aa0  CmBatt - ok
15:14:50.0431 0x1aa0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:14:50.0441 0x1aa0  cmdide - ok
15:14:50.0456 0x1aa0  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys
15:14:50.0484 0x1aa0  CNG - ok
15:14:50.0488 0x1aa0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
15:14:50.0499 0x1aa0  Compbatt - ok
15:14:50.0503 0x1aa0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
15:14:50.0518 0x1aa0  CompositeBus - ok
15:14:50.0521 0x1aa0  COMSysApp - ok
15:14:50.0527 0x1aa0  cpuz134 - ok
15:14:50.0531 0x1aa0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
15:14:50.0542 0x1aa0  crcdisk - ok
15:14:50.0550 0x1aa0  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:14:50.0568 0x1aa0  CryptSvc - ok
15:14:50.0586 0x1aa0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:14:50.0632 0x1aa0  DcomLaunch - ok
15:14:50.0643 0x1aa0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
15:14:50.0682 0x1aa0  defragsvc - ok
15:14:50.0688 0x1aa0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:14:50.0720 0x1aa0  DfsC - ok
15:14:50.0731 0x1aa0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
15:14:50.0761 0x1aa0  Dhcp - ok
15:14:50.0765 0x1aa0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
15:14:50.0796 0x1aa0  discache - ok
15:14:50.0802 0x1aa0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
15:14:50.0813 0x1aa0  Disk - ok
15:14:50.0964 0x1aa0  [ 579E6D1904188CC5EF81CF8B82E2A235, 5D1EC9D287BF3267ED0F85A01F2CB3AE514222E433B777560A06B818B1073A58 ] DisplayFusionService E:\DisplayFusion\DisplayFusionService.exe
15:14:51.0120 0x1aa0  DisplayFusionService - ok
15:14:51.0137 0x1aa0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:14:51.0156 0x1aa0  Dnscache - ok
15:14:51.0165 0x1aa0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
15:14:51.0202 0x1aa0  dot3svc - ok
15:14:51.0209 0x1aa0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
15:14:51.0244 0x1aa0  DPS - ok
15:14:51.0247 0x1aa0  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
15:14:51.0261 0x1aa0  drmkaud - ok
15:14:51.0286 0x1aa0  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
15:14:51.0321 0x1aa0  DXGKrnl - ok
15:14:51.0328 0x1aa0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
15:14:51.0362 0x1aa0  EapHost - ok
15:14:51.0439 0x1aa0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
15:14:51.0551 0x1aa0  ebdrv - ok
15:14:51.0561 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS             C:\Windows\System32\lsass.exe
15:14:51.0577 0x1aa0  EFS - ok
15:14:51.0597 0x1aa0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
15:14:51.0633 0x1aa0  ehRecvr - ok
15:14:51.0639 0x1aa0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
15:14:51.0657 0x1aa0  ehSched - ok
15:14:51.0662 0x1aa0  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\Windows\system32\Drivers\ElbyCDIO.sys
15:14:51.0674 0x1aa0  ElbyCDIO - ok
15:14:51.0690 0x1aa0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
15:14:51.0714 0x1aa0  elxstor - ok
15:14:51.0718 0x1aa0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:14:51.0731 0x1aa0  ErrDev - ok
15:14:51.0747 0x1aa0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
15:14:51.0790 0x1aa0  EventSystem - ok
15:14:51.0798 0x1aa0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
15:14:51.0833 0x1aa0  exfat - ok
15:14:51.0841 0x1aa0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
15:14:51.0876 0x1aa0  fastfat - ok
15:14:51.0895 0x1aa0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
15:14:51.0931 0x1aa0  Fax - ok
15:14:51.0935 0x1aa0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
15:14:51.0949 0x1aa0  fdc - ok
15:14:51.0953 0x1aa0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
15:14:51.0984 0x1aa0  fdPHost - ok
15:14:51.0988 0x1aa0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
15:14:52.0020 0x1aa0  FDResPub - ok
15:14:52.0025 0x1aa0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:14:52.0038 0x1aa0  FileInfo - ok
15:14:52.0042 0x1aa0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
15:14:52.0073 0x1aa0  Filetrace - ok
15:14:52.0077 0x1aa0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
15:14:52.0090 0x1aa0  flpydisk - ok
15:14:52.0101 0x1aa0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:14:52.0119 0x1aa0  FltMgr - ok
15:14:52.0150 0x1aa0  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
15:14:52.0198 0x1aa0  FontCache - ok
15:14:52.0203 0x1aa0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:14:52.0214 0x1aa0  FontCache3.0.0.0 - ok
15:14:52.0218 0x1aa0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
15:14:52.0229 0x1aa0  FsDepends - ok
15:14:52.0233 0x1aa0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:14:52.0243 0x1aa0  Fs_Rec - ok
15:14:52.0251 0x1aa0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
15:14:52.0270 0x1aa0  fvevol - ok
15:14:52.0275 0x1aa0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
15:14:52.0286 0x1aa0  gagp30kx - ok
15:14:52.0323 0x1aa0  [ 3E6633BC8C43E9878FBD772394A222B2, 31180DC8968FAFFD0BB773881445455F5F3B5F99E8D9053B2A1CC6780537A3CD ] GaUpdateService C:\ProgramData\gaupdt\service\0\gaupsvc.exe
15:14:52.0372 0x1aa0  GaUpdateService - ok
15:14:52.0379 0x1aa0  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
15:14:52.0388 0x1aa0  GEARAspiWDM - ok
15:14:52.0410 0x1aa0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
15:14:52.0462 0x1aa0  gpsvc - ok
15:14:52.0466 0x1aa0  GPU-Z - ok
15:14:52.0474 0x1aa0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:14:52.0486 0x1aa0  gupdate - ok
15:14:52.0491 0x1aa0  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:14:52.0501 0x1aa0  gupdatem - ok
15:14:52.0505 0x1aa0  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
15:14:52.0515 0x1aa0  hamachi - ok
15:14:52.0520 0x1aa0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
15:14:52.0535 0x1aa0  hcw85cir - ok
15:14:52.0547 0x1aa0  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:14:52.0573 0x1aa0  HdAudAddService - ok
15:14:52.0579 0x1aa0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
15:14:52.0599 0x1aa0  HDAudBus - ok
15:14:52.0603 0x1aa0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
15:14:52.0618 0x1aa0  HidBatt - ok
15:14:52.0624 0x1aa0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
15:14:52.0642 0x1aa0  HidBth - ok
15:14:52.0647 0x1aa0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
15:14:52.0663 0x1aa0  HidIr - ok
15:14:52.0666 0x1aa0  [ 3C278BE81CF405B7E635D0563EAB8F30, 8ACECF6D337F711E647ACCFDCA2CC2726793F1828F30517E41D20F50F99DAA79 ] hidkmdf         C:\Windows\system32\DRIVERS\hidkmdf.sys
15:14:52.0679 0x1aa0  hidkmdf - ok
15:14:52.0683 0x1aa0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
15:14:52.0715 0x1aa0  hidserv - ok
15:14:52.0719 0x1aa0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:14:52.0732 0x1aa0  HidUsb - ok
15:14:52.0738 0x1aa0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:14:52.0774 0x1aa0  hkmsvc - ok
15:14:52.0783 0x1aa0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:14:52.0802 0x1aa0  HomeGroupListener - ok
15:14:52.0810 0x1aa0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:14:52.0829 0x1aa0  HomeGroupProvider - ok
15:14:52.0835 0x1aa0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
15:14:52.0849 0x1aa0  HpSAMD - ok
15:14:52.0869 0x1aa0  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:14:52.0922 0x1aa0  HTTP - ok
15:14:52.0928 0x1aa0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
15:14:52.0938 0x1aa0  hwpolicy - ok
15:14:52.0944 0x1aa0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
15:14:52.0959 0x1aa0  i8042prt - ok
15:14:52.0971 0x1aa0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
15:14:52.0993 0x1aa0  iaStorV - ok
15:14:53.0016 0x1aa0  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:14:53.0051 0x1aa0  idsvc - ok
15:14:53.0055 0x1aa0  IEEtwCollectorService - ok
15:14:53.0060 0x1aa0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
15:14:53.0073 0x1aa0  iirsp - ok
15:14:53.0094 0x1aa0  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
15:14:53.0131 0x1aa0  IKEEXT - ok
15:14:53.0218 0x1aa0  [ FA2B7507CD49908B2260949E52F8B9FE, 0EA0B3B25A3B668CA18313E34138DADA5C9835E476A1BFC56588B946DF0A92E0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:14:53.0321 0x1aa0  IntcAzAudAddService - ok
15:14:53.0331 0x1aa0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
15:14:53.0341 0x1aa0  intelide - ok
15:14:53.0347 0x1aa0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys
15:14:53.0361 0x1aa0  intelppm - ok
15:14:53.0366 0x1aa0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
15:14:53.0399 0x1aa0  IPBusEnum - ok
15:14:53.0405 0x1aa0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:14:53.0437 0x1aa0  IpFilterDriver - ok
15:14:53.0453 0x1aa0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:14:53.0485 0x1aa0  iphlpsvc - ok
15:14:53.0491 0x1aa0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
15:14:53.0507 0x1aa0  IPMIDRV - ok
15:14:53.0513 0x1aa0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
15:14:53.0547 0x1aa0  IPNAT - ok
15:14:53.0565 0x1aa0  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
15:14:53.0590 0x1aa0  iPod Service - ok
15:14:53.0596 0x1aa0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:14:53.0613 0x1aa0  IRENUM - ok
15:14:53.0617 0x1aa0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:14:53.0628 0x1aa0  isapnp - ok
15:14:53.0637 0x1aa0  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
15:14:53.0655 0x1aa0  iScsiPrt - ok
15:14:53.0661 0x1aa0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
15:14:53.0673 0x1aa0  kbdclass - ok
15:14:53.0677 0x1aa0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
15:14:53.0690 0x1aa0  kbdhid - ok
15:14:53.0695 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso          C:\Windows\system32\lsass.exe
15:14:53.0709 0x1aa0  KeyIso - ok
15:14:53.0715 0x1aa0  [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:14:53.0729 0x1aa0  KSecDD - ok
15:14:53.0736 0x1aa0  [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
15:14:53.0751 0x1aa0  KSecPkg - ok
15:14:53.0755 0x1aa0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
15:14:53.0788 0x1aa0  ksthunk - ok
15:14:53.0801 0x1aa0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
15:14:53.0846 0x1aa0  KtmRm - ok
15:14:53.0855 0x1aa0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:14:53.0893 0x1aa0  LanmanServer - ok
15:14:53.0900 0x1aa0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:14:53.0935 0x1aa0  LanmanWorkstation - ok
15:14:53.0942 0x1aa0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:14:53.0973 0x1aa0  lltdio - ok
15:14:53.0985 0x1aa0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
15:14:54.0025 0x1aa0  lltdsvc - ok
15:14:54.0029 0x1aa0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
15:14:54.0061 0x1aa0  lmhosts - ok
15:14:54.0068 0x1aa0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
15:14:54.0082 0x1aa0  LSI_FC - ok
15:14:54.0087 0x1aa0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
15:14:54.0100 0x1aa0  LSI_SAS - ok
15:14:54.0105 0x1aa0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
15:14:54.0117 0x1aa0  LSI_SAS2 - ok
15:14:54.0123 0x1aa0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
15:14:54.0136 0x1aa0  LSI_SCSI - ok
15:14:54.0142 0x1aa0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
15:14:54.0175 0x1aa0  luafv - ok
15:14:54.0181 0x1aa0  [ 092D1A5D2C763F9820AC5FD4C9F23662, 3AFFACDD0D3F838F7E29F6BDA253B6A730D43C3BCAB1228A78CD90877FEECFAC ] mbamchameleon   C:\Windows\system32\drivers\mbamchameleon.sys
15:14:54.0193 0x1aa0  mbamchameleon - ok
15:14:54.0198 0x1aa0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
15:14:54.0214 0x1aa0  Mcx2Svc - ok
15:14:54.0218 0x1aa0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
15:14:54.0229 0x1aa0  megasas - ok
15:14:54.0239 0x1aa0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
15:14:54.0257 0x1aa0  MegaSR - ok
15:14:54.0263 0x1aa0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
15:14:54.0296 0x1aa0  MMCSS - ok
15:14:54.0300 0x1aa0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
15:14:54.0331 0x1aa0  Modem - ok
15:14:54.0335 0x1aa0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
15:14:54.0350 0x1aa0  monitor - ok
15:14:54.0354 0x1aa0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:14:54.0365 0x1aa0  mouclass - ok
15:14:54.0369 0x1aa0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:14:54.0383 0x1aa0  mouhid - ok
15:14:54.0389 0x1aa0  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
15:14:54.0402 0x1aa0  mountmgr - ok
15:14:54.0407 0x1aa0  [ 8446B9C86C11F94502BC55321637FDE9, D04BAF2FB69526BB6B4182FB7284F61E311CEB313142C3A46BD2741D515457CF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
15:14:54.0419 0x1aa0  MozillaMaintenance - ok
15:14:54.0428 0x1aa0  [ 6439D1E559D08BD8A1465A8943357053, 0E300508C22D12FBA3BE566B722F574CBE1B4A1A305356B92B8EA8B86267071B ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys
15:14:54.0446 0x1aa0  MpFilter - ok
15:14:54.0454 0x1aa0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:14:54.0468 0x1aa0  mpio - ok
15:14:54.0473 0x1aa0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:14:54.0506 0x1aa0  mpsdrv - ok
15:14:54.0527 0x1aa0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:14:54.0581 0x1aa0  MpsSvc - ok
15:14:54.0588 0x1aa0  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:14:54.0604 0x1aa0  MRxDAV - ok
15:14:54.0611 0x1aa0  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:14:54.0628 0x1aa0  mrxsmb - ok
15:14:54.0638 0x1aa0  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:14:54.0658 0x1aa0  mrxsmb10 - ok
15:14:54.0665 0x1aa0  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:14:54.0680 0x1aa0  mrxsmb20 - ok
15:14:54.0685 0x1aa0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:14:54.0696 0x1aa0  msahci - ok
15:14:54.0703 0x1aa0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
15:14:54.0718 0x1aa0  msdsm - ok
15:14:54.0725 0x1aa0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
15:14:54.0745 0x1aa0  MSDTC - ok
15:14:54.0751 0x1aa0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:14:54.0782 0x1aa0  Msfs - ok
15:14:54.0785 0x1aa0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
15:14:54.0816 0x1aa0  mshidkmdf - ok
15:14:54.0819 0x1aa0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:14:54.0829 0x1aa0  msisadrv - ok
15:14:54.0837 0x1aa0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
15:14:54.0873 0x1aa0  MSiSCSI - ok
15:14:54.0877 0x1aa0  msiserver - ok
15:14:54.0880 0x1aa0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
15:14:54.0910 0x1aa0  MSKSSRV - ok
15:14:54.0914 0x1aa0  [ F0D5494D8B177C37E16966262F5D0F68, DD63427DFFD9DD2BEC8336F6AD1BEFE347012331631DC5FEC65E83B1EACDBC67 ] MsMpSvc         C:\Program Files\Microsoft Security Client\MsMpEng.exe
15:14:54.0926 0x1aa0  MsMpSvc - ok
15:14:54.0930 0x1aa0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:14:54.0959 0x1aa0  MSPCLOCK - ok
15:14:54.0963 0x1aa0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
15:14:54.0993 0x1aa0  MSPQM - ok
15:14:55.0005 0x1aa0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
15:14:55.0023 0x1aa0  MsRPC - ok
15:14:55.0028 0x1aa0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
15:14:55.0039 0x1aa0  mssmbios - ok
15:14:55.0042 0x1aa0  MSSQL$SQLEXPRESS - ok
15:14:55.0047 0x1aa0  [ 7A2A8C975356858EB38466A6B1592E8D, 97C3DFCCBE1BA92EE7E4848993D6F369D543A53344A6512C84EF03E7D737A482 ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE
15:14:55.0058 0x1aa0  MSSQLServerADHelper100 - ok
15:14:55.0062 0x1aa0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
15:14:55.0092 0x1aa0  MSTEE - ok
15:14:55.0096 0x1aa0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
15:14:55.0109 0x1aa0  MTConfig - ok
15:14:55.0113 0x1aa0  [ 19B006B181E3875FD254F7B67ACF1E7C, 1D68D19522E71F16B8B50F8CCFBC9D884CF2DAC40CC409BD5A40A4D4223ABC61 ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
15:14:55.0123 0x1aa0  MTsensor - ok
15:14:55.0127 0x1aa0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
15:14:55.0138 0x1aa0  Mup - ok
15:14:55.0152 0x1aa0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
15:14:55.0197 0x1aa0  napagent - ok
15:14:55.0209 0x1aa0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
15:14:55.0235 0x1aa0  NativeWifiP - ok
15:14:55.0259 0x1aa0  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:14:55.0294 0x1aa0  NDIS - ok
15:14:55.0300 0x1aa0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
15:14:55.0332 0x1aa0  NdisCap - ok
15:14:55.0336 0x1aa0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:14:55.0366 0x1aa0  NdisTapi - ok
15:14:55.0371 0x1aa0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
15:14:55.0402 0x1aa0  Ndisuio - ok
15:14:55.0409 0x1aa0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
15:14:55.0444 0x1aa0  NdisWan - ok
15:14:55.0451 0x1aa0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
15:14:55.0481 0x1aa0  NDProxy - ok
15:14:55.0486 0x1aa0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
15:14:55.0518 0x1aa0  NetBIOS - ok
15:14:55.0528 0x1aa0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
15:14:55.0566 0x1aa0  NetBT - ok
15:14:55.0570 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon        C:\Windows\system32\lsass.exe
15:14:55.0583 0x1aa0  Netlogon - ok
15:14:55.0595 0x1aa0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
15:14:55.0637 0x1aa0  Netman - ok
15:14:55.0643 0x1aa0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:14:55.0658 0x1aa0  NetMsmqActivator - ok
15:14:55.0663 0x1aa0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:14:55.0677 0x1aa0  NetPipeActivator - ok
15:14:55.0691 0x1aa0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
15:14:55.0736 0x1aa0  netprofm - ok
15:14:55.0742 0x1aa0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:14:55.0756 0x1aa0  NetTcpActivator - ok
15:14:55.0761 0x1aa0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:14:55.0776 0x1aa0  NetTcpPortSharing - ok
15:14:55.0782 0x1aa0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
15:14:55.0794 0x1aa0  nfrd960 - ok
15:14:55.0800 0x1aa0  [ F9EEFFC65C68A45001D1349E652B8B6F, E5F223129416083A12A85D48C65B2C8D1BF1124110399938E144308C89F9241D ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys
15:14:55.0815 0x1aa0  NisDrv - ok
15:14:55.0825 0x1aa0  [ 9690F420A99364C1E5C439914B0DE25C, 6C6E0B27C4255001FE5F1EAD911DE1A8BF922C405B0C8031A6BD253CEB1D02A6 ] NisSrv          C:\Program Files\Microsoft Security Client\NisSrv.exe
15:14:55.0846 0x1aa0  NisSrv - ok
15:14:55.0855 0x1aa0  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:14:55.0877 0x1aa0  NlaSvc - ok
15:14:55.0883 0x1aa0  [ F554C5FD7BD1EFA4DA5CFE2EED86391F, 808D16D4547FA332F52523BD40D55606E722BC441786040B6C26B28B323D249C ] nm3             C:\Windows\system32\DRIVERS\nm3.sys
15:14:55.0895 0x1aa0  nm3 - ok
15:14:55.0902 0x1aa0  [ DE7FCC77F4A503AF4CA6A47D49B3713D, 4BFAA99393F635CD05D91A64DE73EDB5639412C129E049F0FE34F88517A10FC6 ] npf             C:\Windows\system32\drivers\npf.sys
15:14:55.0913 0x1aa0  npf - ok
15:14:55.0917 0x1aa0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:14:55.0948 0x1aa0  Npfs - ok
15:14:55.0952 0x1aa0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
15:14:55.0984 0x1aa0  nsi - ok
15:14:55.0987 0x1aa0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:14:56.0018 0x1aa0  nsiproxy - ok
15:14:56.0060 0x1aa0  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:14:56.0106 0x1aa0  Ntfs - ok
15:14:56.0113 0x1aa0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
15:14:56.0143 0x1aa0  Null - ok
15:14:56.0149 0x1aa0  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:14:56.0163 0x1aa0  nvraid - ok
15:14:56.0170 0x1aa0  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:14:56.0186 0x1aa0  nvstor - ok
15:14:56.0192 0x1aa0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:14:56.0206 0x1aa0  nv_agp - ok
15:14:56.0211 0x1aa0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
15:14:56.0225 0x1aa0  ohci1394 - ok
15:14:56.0310 0x1aa0  [ EF8DA126239D08B7B4734256417AE702, 4BBA0577C20E851F5B30D0D0F19382AB32AF57EFF7AA5B394E0FF6358A7AB287 ] Origin Client Service D:\Origin\OriginClientService.exe
15:14:56.0385 0x1aa0  Origin Client Service - ok
15:14:56.0395 0x1aa0  [ B9C125314A025127FE562C116D614AA3, 79C46C0BACEBBB5B8E1C162766B21587365A100BBAD01171C77B995C514BC7D6 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:14:56.0410 0x1aa0  ose64 - ok
15:14:56.0528 0x1aa0  [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:14:56.0670 0x1aa0  osppsvc - ok
15:14:56.0692 0x1aa0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
15:14:56.0717 0x1aa0  p2pimsvc - ok
15:14:56.0731 0x1aa0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
15:14:56.0758 0x1aa0  p2psvc - ok
15:14:56.0764 0x1aa0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
15:14:56.0779 0x1aa0  Parport - ok
15:14:56.0785 0x1aa0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
15:14:56.0797 0x1aa0  partmgr - ok
15:14:56.0806 0x1aa0  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:14:56.0829 0x1aa0  PcaSvc - ok
15:14:56.0838 0x1aa0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
15:14:56.0854 0x1aa0  pci - ok
15:14:56.0857 0x1aa0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
15:14:56.0868 0x1aa0  pciide - ok
15:14:56.0876 0x1aa0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
15:14:56.0892 0x1aa0  pcmcia - ok
15:14:56.0897 0x1aa0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
15:14:56.0909 0x1aa0  pcw - ok
15:14:56.0931 0x1aa0  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:14:56.0985 0x1aa0  PEAUTH - ok
15:14:57.0005 0x1aa0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:14:57.0020 0x1aa0  PerfHost - ok
15:14:57.0060 0x1aa0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
15:14:57.0133 0x1aa0  pla - ok
15:14:57.0168 0x1aa0  [ 542D7B8CD0487DB1C5EEA7E46BB9F1C1, E7B778D1B5083B716B2AF37858728FB9D91F816094F5F33B8BC2E922A0D3D6C3 ] PlantronicsGC   C:\Windows\system32\drivers\PLTGC.sys
15:14:57.0218 0x1aa0  PlantronicsGC - ok
15:14:57.0233 0x1aa0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:14:57.0258 0x1aa0  PlugPlay - ok
15:14:57.0264 0x1aa0  [ CD421DDB5C6E5458CE52EDC36DE7DC5B, 7B9C0A8B2B86BBF5D7E02F2620B0015A2530CBBC99724BE20313DE53EB31D62E ] PnkBstrA        C:\Windows\system32\PnkBstrA.exe
15:14:57.0276 0x1aa0  PnkBstrA - ok
15:14:57.0281 0x1aa0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
15:14:57.0295 0x1aa0  PNRPAutoReg - ok
15:14:57.0305 0x1aa0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
15:14:57.0325 0x1aa0  PNRPsvc - ok
15:14:57.0341 0x1aa0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
15:14:57.0386 0x1aa0  PolicyAgent - ok
15:14:57.0396 0x1aa0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
15:14:57.0433 0x1aa0  Power - ok
15:14:57.0439 0x1aa0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:14:57.0473 0x1aa0  PptpMiniport - ok
15:14:57.0478 0x1aa0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
15:14:57.0492 0x1aa0  Processor - ok
15:14:57.0500 0x1aa0  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
15:14:57.0519 0x1aa0  ProfSvc - ok
15:14:57.0523 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:14:57.0537 0x1aa0  ProtectedStorage - ok
15:14:57.0544 0x1aa0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
15:14:57.0577 0x1aa0  Psched - ok
15:14:57.0581 0x1aa0  [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI             C:\Windows\system32\DRIVERS\psi_mf_amd64.sys
15:14:57.0591 0x1aa0  PSI - ok
15:14:57.0632 0x1aa0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
15:14:57.0686 0x1aa0  ql2300 - ok
15:14:57.0696 0x1aa0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
15:14:57.0710 0x1aa0  ql40xx - ok
15:14:57.0719 0x1aa0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
15:14:57.0744 0x1aa0  QWAVE - ok
15:14:57.0748 0x1aa0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:14:57.0767 0x1aa0  QWAVEdrv - ok
15:14:57.0774 0x1aa0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:14:57.0805 0x1aa0  RasAcd - ok
15:14:57.0810 0x1aa0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
15:14:57.0843 0x1aa0  RasAgileVpn - ok
15:14:57.0849 0x1aa0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
15:14:57.0884 0x1aa0  RasAuto - ok
15:14:57.0890 0x1aa0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
15:14:57.0924 0x1aa0  Rasl2tp - ok
15:14:57.0937 0x1aa0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
15:14:57.0977 0x1aa0  RasMan - ok
15:14:57.0983 0x1aa0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:14:58.0017 0x1aa0  RasPppoe - ok
15:14:58.0023 0x1aa0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
15:14:58.0056 0x1aa0  RasSstp - ok
15:14:58.0068 0x1aa0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
15:14:58.0106 0x1aa0  rdbss - ok
15:14:58.0110 0x1aa0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
15:14:58.0126 0x1aa0  rdpbus - ok
15:14:58.0130 0x1aa0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:14:58.0160 0x1aa0  RDPCDD - ok
15:14:58.0165 0x1aa0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:14:58.0209 0x1aa0  RDPENCDD - ok
15:14:58.0214 0x1aa0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
15:14:58.0244 0x1aa0  RDPREFMP - ok
15:14:58.0250 0x1aa0  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:14:58.0264 0x1aa0  RdpVideoMiniport - ok
15:14:58.0272 0x1aa0  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
15:14:58.0289 0x1aa0  RDPWD - ok
15:14:58.0299 0x1aa0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
15:14:58.0314 0x1aa0  rdyboost - ok
15:14:58.0321 0x1aa0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:14:58.0354 0x1aa0  RemoteAccess - ok
15:14:58.0361 0x1aa0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:14:58.0397 0x1aa0  RemoteRegistry - ok
15:14:58.0402 0x1aa0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
15:14:58.0435 0x1aa0  RpcEptMapper - ok
15:14:58.0438 0x1aa0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
15:14:58.0452 0x1aa0  RpcLocator - ok
15:14:58.0468 0x1aa0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
15:14:58.0510 0x1aa0  RpcSs - ok
15:14:58.0521 0x1aa0  [ C9FE05A63C500ABE3AFA5786504C4D36, F076B57B9EF6A179A37D5E00E1891236025D451CF067D2F1A1CBA2113218FEB6 ] RsFx0105        C:\Windows\system32\DRIVERS\RsFx0105.sys
15:14:58.0537 0x1aa0  RsFx0105 - ok
15:14:58.0544 0x1aa0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:14:58.0576 0x1aa0  rspndr - ok
15:14:58.0591 0x1aa0  [ EE082E06A82FF630351D1E0EBBD3D8D0, 537F1A4108BDA72E8DD271466E7B7FCF39D4D55E4129AB35A409AB7AF2E7D219 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
15:14:58.0613 0x1aa0  RTL8167 - ok
15:14:58.0648 0x1aa0  [ 7135C3E86471731D4977396AF692CDB6, 74E5F7C9CE02602FC9D5475EE5CF9D145AFCCEEDE603EF4710B0DB3A164DAB2D ] RtlWlanu        C:\Windows\system32\DRIVERS\rtwlanu.sys
15:14:58.0695 0x1aa0  RtlWlanu - ok
15:14:58.0702 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs           C:\Windows\system32\lsass.exe
15:14:58.0716 0x1aa0  SamSs - ok
15:14:58.0722 0x1aa0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:14:58.0735 0x1aa0  sbp2port - ok
15:14:58.0743 0x1aa0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:14:58.0781 0x1aa0  SCardSvr - ok
15:14:58.0786 0x1aa0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
15:14:58.0817 0x1aa0  scfilter - ok
15:14:58.0847 0x1aa0  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
15:14:58.0910 0x1aa0  Schedule - ok
15:14:58.0917 0x1aa0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
15:14:58.0948 0x1aa0  SCPolicySvc - ok
15:14:58.0955 0x1aa0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:14:58.0974 0x1aa0  SDRSVC - ok
15:14:58.0979 0x1aa0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:14:59.0009 0x1aa0  secdrv - ok
15:14:59.0014 0x1aa0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
15:14:59.0045 0x1aa0  seclogon - ok
15:14:59.0076 0x1aa0  [ 5E0E975998BF1612E18B898E5D17838B, 76C11C62DB8055F03F868685E8E2016D99D3FC48313CB51C69E7CEA589D80890 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe
15:14:59.0119 0x1aa0  Secunia PSI Agent - ok
15:14:59.0140 0x1aa0  [ 508DD2E1D5F272B2D3196335DEA2BC26, 2BDC828DB9D9766445C345E82751FA7EF94A089EC84565675EDADE3EC7EB5748 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe
15:14:59.0168 0x1aa0  Secunia Update Agent - ok
15:14:59.0174 0x1aa0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
15:14:59.0207 0x1aa0  SENS - ok
15:14:59.0212 0x1aa0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
15:14:59.0226 0x1aa0  SensrSvc - ok
15:14:59.0230 0x1aa0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
15:14:59.0244 0x1aa0  Serenum - ok
15:14:59.0250 0x1aa0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
15:14:59.0266 0x1aa0  Serial - ok
15:14:59.0270 0x1aa0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
15:14:59.0283 0x1aa0  sermouse - ok
15:14:59.0295 0x1aa0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
15:14:59.0328 0x1aa0  SessionEnv - ok
15:14:59.0332 0x1aa0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
15:14:59.0347 0x1aa0  sffdisk - ok
15:14:59.0351 0x1aa0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:14:59.0366 0x1aa0  sffp_mmc - ok
15:14:59.0370 0x1aa0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
15:14:59.0385 0x1aa0  sffp_sd - ok
15:14:59.0390 0x1aa0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
15:14:59.0402 0x1aa0  sfloppy - ok
15:14:59.0415 0x1aa0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:14:59.0456 0x1aa0  SharedAccess - ok
15:14:59.0469 0x1aa0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:14:59.0510 0x1aa0  ShellHWDetection - ok
15:14:59.0515 0x1aa0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
15:14:59.0527 0x1aa0  SiSRaid2 - ok
15:14:59.0532 0x1aa0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
15:14:59.0544 0x1aa0  SiSRaid4 - ok
15:14:59.0553 0x1aa0  [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
15:14:59.0572 0x1aa0  SkypeUpdate - ok
15:14:59.0579 0x1aa0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
15:14:59.0612 0x1aa0  Smb - ok
15:14:59.0619 0x1aa0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:14:59.0633 0x1aa0  SNMPTRAP - ok
15:14:59.0638 0x1aa0  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\Windows\syswow64\speedfan.sys
15:14:59.0650 0x1aa0  speedfan - ok
15:14:59.0654 0x1aa0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
15:14:59.0664 0x1aa0  spldr - ok
15:14:59.0680 0x1aa0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
15:14:59.0709 0x1aa0  Spooler - ok
15:14:59.0803 0x1aa0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
15:14:59.0941 0x1aa0  sppsvc - ok
15:14:59.0953 0x1aa0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
15:14:59.0987 0x1aa0  sppuinotify - ok
15:14:59.0999 0x1aa0  [ 2E21D0699F3DFFFFD141763E3AA99D9A, 60063207F002B67B3E2BC78BBD15A2725AE8CFBC3289D21BE598F13F53C929B1 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE
15:15:00.0021 0x1aa0  SQLAgent$SQLEXPRESS - ok
15:15:00.0030 0x1aa0  [ 10D936DCED9EACD1A1B3FCDDA6D7A4EB, EE66162AEAF6A583A04BB5AF1220318C9ADD3A62987CDCEE0505C6FF37AB30FF ] SQLBrowser      C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
15:15:00.0044 0x1aa0  SQLBrowser - ok
15:15:00.0051 0x1aa0  [ F92E5F93BE572B512DA3C016B675EDE0, 3BBE8B952A329E4BCD6F0C8D6225F809B99217A196301B6FE543B26C3689A37B ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
15:15:00.0063 0x1aa0  SQLWriter - ok
15:15:00.0076 0x1aa0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
15:15:00.0101 0x1aa0  srv - ok
15:15:00.0115 0x1aa0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:15:00.0139 0x1aa0  srv2 - ok
15:15:00.0148 0x1aa0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:15:00.0165 0x1aa0  srvnet - ok
15:15:00.0173 0x1aa0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
15:15:00.0210 0x1aa0  SSDPSRV - ok
15:15:00.0215 0x1aa0  [ E18127FA95EADD3BD31F37690894D2F7, E3C7FCB9EFD7616B51624B7A7343DA8AA812A8E3AB19375D1BC31D09147AE443 ] sshid           C:\Windows\system32\DRIVERS\sshid.sys
15:15:00.0228 0x1aa0  sshid - ok
15:15:00.0233 0x1aa0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
15:15:00.0267 0x1aa0  SstpSvc - ok
15:15:00.0287 0x1aa0  [ AC8B882D658AF3070167F59AE92E5CA3, 7781475B6A49DCE239FEE2B32767A7E58188EF04BC4BB29E04B40DAFD8214E85 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
15:15:00.0315 0x1aa0  Steam Client Service - ok
15:15:00.0320 0x1aa0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
15:15:00.0331 0x1aa0  stexstor - ok
15:15:00.0349 0x1aa0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
15:15:00.0384 0x1aa0  stisvc - ok
15:15:00.0389 0x1aa0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
15:15:00.0399 0x1aa0  swenum - ok
15:15:00.0414 0x1aa0  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
15:15:00.0438 0x1aa0  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
15:15:02.0765 0x1aa0  Detect skipped due to KSN trusted
15:15:02.0766 0x1aa0  SwitchBoard - ok
15:15:02.0781 0x1aa0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
15:15:02.0830 0x1aa0  swprv - ok
15:15:02.0873 0x1aa0  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
15:15:02.0942 0x1aa0  SysMain - ok
15:15:02.0951 0x1aa0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:15:02.0972 0x1aa0  TabletInputService - ok
15:15:02.0977 0x1aa0  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys
15:15:02.0989 0x1aa0  tap0901 - ok
15:15:03.0001 0x1aa0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
15:15:03.0041 0x1aa0  TapiSrv - ok
15:15:03.0046 0x1aa0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
15:15:03.0079 0x1aa0  TBS - ok
15:15:03.0124 0x1aa0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
15:15:03.0182 0x1aa0  Tcpip - ok
15:15:03.0230 0x1aa0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
15:15:03.0280 0x1aa0  TCPIP6 - ok
15:15:03.0289 0x1aa0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:15:03.0302 0x1aa0  tcpipreg - ok
15:15:03.0308 0x1aa0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:15:03.0321 0x1aa0  TDPIPE - ok
15:15:03.0325 0x1aa0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
15:15:03.0338 0x1aa0  TDTCP - ok
15:15:03.0345 0x1aa0  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
15:15:03.0360 0x1aa0  tdx - ok
15:15:03.0537 0x1aa0  [ C0C121B537DA3AD87481C0502CACE462, E0FC2AC71B60C796DCD03217A510C47425FB7783713FCCC477130E69715D2B8D ] TeamViewer      E:\Teamviewer\TeamViewer_Service.exe
15:15:03.0694 0x1aa0  TeamViewer - ok
15:15:03.0707 0x1aa0  [ F5520DBB47C60EE83024B38720ABDA24, B8E555D92440BF93E3B55A66E27CEF936477EF7528F870D3B78BD3B294A05CC0 ] teamviewervpn   C:\Windows\system32\DRIVERS\teamviewervpn.sys
15:15:03.0716 0x1aa0  teamviewervpn - ok
15:15:03.0723 0x1aa0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
15:15:03.0735 0x1aa0  TermDD - ok
15:15:03.0754 0x1aa0  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
15:15:03.0785 0x1aa0  TermService - ok
15:15:03.0790 0x1aa0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
15:15:03.0808 0x1aa0  Themes - ok
15:15:03.0814 0x1aa0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
15:15:03.0846 0x1aa0  THREADORDER - ok
15:15:03.0853 0x1aa0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
15:15:03.0889 0x1aa0  TrkWks - ok
15:15:03.0898 0x1aa0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:15:03.0933 0x1aa0  TrustedInstaller - ok
15:15:03.0940 0x1aa0  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:15:03.0953 0x1aa0  tssecsrv - ok
15:15:03.0958 0x1aa0  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
15:15:03.0973 0x1aa0  TsUsbFlt - ok
15:15:03.0978 0x1aa0  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
15:15:03.0992 0x1aa0  TsUsbGD - ok
15:15:04.0000 0x1aa0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:15:04.0034 0x1aa0  tunnel - ok
15:15:04.0039 0x1aa0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
15:15:04.0051 0x1aa0  uagp35 - ok
15:15:04.0063 0x1aa0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:15:04.0103 0x1aa0  udfs - ok
15:15:04.0111 0x1aa0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
15:15:04.0126 0x1aa0  UI0Detect - ok
15:15:04.0131 0x1aa0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:15:04.0142 0x1aa0  uliagpkx - ok
15:15:04.0147 0x1aa0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
15:15:04.0162 0x1aa0  umbus - ok
15:15:04.0166 0x1aa0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
15:15:04.0179 0x1aa0  UmPass - ok
15:15:04.0193 0x1aa0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
15:15:04.0237 0x1aa0  upnphost - ok
15:15:04.0243 0x1aa0  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
15:15:04.0257 0x1aa0  USBAAPL64 - ok
15:15:04.0263 0x1aa0  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
15:15:04.0279 0x1aa0  usbaudio - ok
15:15:04.0285 0x1aa0  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
15:15:04.0301 0x1aa0  usbccgp - ok
15:15:04.0307 0x1aa0  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:15:04.0322 0x1aa0  usbcir - ok
15:15:04.0327 0x1aa0  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
15:15:04.0340 0x1aa0  usbehci - ok
15:15:04.0346 0x1aa0  [ 5A4AC5D05A7C97C68596416C05D6F2B4, 1CDE5172B763D2D65379B9F3ABACC080AF676DB9354EC98A455E620C4CE3E18A ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys
15:15:04.0356 0x1aa0  usbfilter - ok
15:15:04.0368 0x1aa0  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
15:15:04.0391 0x1aa0  usbhub - ok
15:15:04.0396 0x1aa0  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
15:15:04.0409 0x1aa0  usbohci - ok
15:15:04.0414 0x1aa0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
15:15:04.0430 0x1aa0  usbprint - ok
15:15:04.0435 0x1aa0  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
15:15:04.0448 0x1aa0  usbscan - ok
15:15:04.0455 0x1aa0  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:15:04.0470 0x1aa0  USBSTOR - ok
15:15:04.0476 0x1aa0  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
15:15:04.0490 0x1aa0  usbuhci - ok
15:15:04.0496 0x1aa0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
15:15:04.0529 0x1aa0  UxSms - ok
15:15:04.0534 0x1aa0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc        C:\Windows\system32\lsass.exe
15:15:04.0547 0x1aa0  VaultSvc - ok
15:15:04.0554 0x1aa0  [ 95717FCA60876284568B5CD476A59C41, 9A360985F072448A89890ACC5DD2155DDA0FD1EC2FFAC4697F0CFE60548CC980 ] VBoxNetAdp      C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
15:15:04.0569 0x1aa0  VBoxNetAdp - ok
15:15:04.0573 0x1aa0  VBoxNetFlt - ok
15:15:04.0578 0x1aa0  [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone          C:\Windows\system32\DRIVERS\VClone.sys
15:15:04.0590 0x1aa0  VClone - ok
15:15:04.0596 0x1aa0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
15:15:04.0607 0x1aa0  vdrvroot - ok
15:15:04.0624 0x1aa0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
15:15:04.0672 0x1aa0  vds - ok
15:15:04.0677 0x1aa0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
15:15:04.0693 0x1aa0  vga - ok
15:15:04.0697 0x1aa0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
15:15:04.0729 0x1aa0  VgaSave - ok
15:15:04.0738 0x1aa0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
15:15:04.0754 0x1aa0  vhdmp - ok
15:15:04.0758 0x1aa0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
15:15:04.0768 0x1aa0  viaide - ok
15:15:04.0795 0x1aa0  [ 4E11F13C400F4721E38CFC12976057DE, A80196CB79856AB549BF2C055FFA494744C7AA0F35E5D8DD43B62F2F9070BC35 ] Virtual Router  E:\VirtualRouter\VirtualRouterService.exe
15:15:04.0799 0x1aa0  Virtual Router - detected UnsignedFile.Multi.Generic ( 1 )
15:15:07.0127 0x1aa0  Detect skipped due to KSN trusted
15:15:07.0128 0x1aa0  Virtual Router - ok
15:15:07.0133 0x1aa0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:15:07.0145 0x1aa0  volmgr - ok
15:15:07.0158 0x1aa0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
15:15:07.0178 0x1aa0  volmgrx - ok
15:15:07.0189 0x1aa0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
15:15:07.0207 0x1aa0  volsnap - ok
15:15:07.0215 0x1aa0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
15:15:07.0230 0x1aa0  vsmraid - ok
15:15:07.0271 0x1aa0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
15:15:07.0347 0x1aa0  VSS - ok
15:15:07.0353 0x1aa0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
15:15:07.0366 0x1aa0  vwifibus - ok
15:15:07.0371 0x1aa0  [ 13A0DECD1794DE60A8427862C8669D27, 4024AF9F2F052BC80C85F5B9A671499C20AF38838206CC649E6EFE37C380D3BF ] VWiFiFlt        C:\Windows\system32\DRIVERS\vwififlt.sys
15:15:07.0385 0x1aa0  VWiFiFlt - ok
15:15:07.0389 0x1aa0  [ 49003B357D101CDC474937437ECF5ABC, D3EC570D616DC39FE6BF02DA1CD6C30CD07C27CC5B4B6FD6DACB5D8A4F1596A6 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
15:15:07.0401 0x1aa0  vwifimp - ok
15:15:07.0413 0x1aa0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
15:15:07.0456 0x1aa0  W32Time - ok
15:15:07.0464 0x1aa0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
15:15:07.0477 0x1aa0  WacomPen - ok
15:15:07.0483 0x1aa0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
15:15:07.0515 0x1aa0  WANARP - ok
15:15:07.0520 0x1aa0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:15:07.0551 0x1aa0  Wanarpv6 - ok
15:15:07.0588 0x1aa0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
15:15:07.0646 0x1aa0  wbengine - ok
15:15:07.0657 0x1aa0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
15:15:07.0680 0x1aa0  WbioSrvc - ok
15:15:07.0693 0x1aa0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
15:15:07.0721 0x1aa0  wcncsvc - ok
15:15:07.0726 0x1aa0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:15:07.0742 0x1aa0  WcsPlugInService - ok
15:15:07.0746 0x1aa0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
15:15:07.0757 0x1aa0  Wd - ok
15:15:07.0780 0x1aa0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:15:07.0813 0x1aa0  Wdf01000 - ok
15:15:07.0821 0x1aa0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:15:07.0856 0x1aa0  WdiServiceHost - ok
15:15:07.0861 0x1aa0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
15:15:07.0880 0x1aa0  WdiSystemHost - ok
15:15:07.0890 0x1aa0  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
15:15:07.0912 0x1aa0  WebClient - ok
15:15:07.0921 0x1aa0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:15:07.0959 0x1aa0  Wecsvc - ok
15:15:07.0965 0x1aa0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
15:15:08.0000 0x1aa0  wercplsupport - ok
15:15:08.0006 0x1aa0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
15:15:08.0040 0x1aa0  WerSvc - ok
15:15:08.0045 0x1aa0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
15:15:08.0075 0x1aa0  WfpLwf - ok
15:15:08.0079 0x1aa0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
15:15:08.0090 0x1aa0  WIMMount - ok
15:15:08.0094 0x1aa0  WinDefend - ok
15:15:08.0105 0x1aa0  WinHttpAutoProxySvc - ok
15:15:08.0119 0x1aa0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
15:15:08.0161 0x1aa0  Winmgmt - ok
15:15:08.0207 0x1aa0  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
15:15:08.0281 0x1aa0  WinRM - ok
15:15:08.0295 0x1aa0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
15:15:08.0312 0x1aa0  WinUsb - ok
15:15:08.0338 0x1aa0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
15:15:08.0385 0x1aa0  Wlansvc - ok
15:15:08.0392 0x1aa0  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
15:15:08.0403 0x1aa0  wlcrasvc - ok
15:15:08.0462 0x1aa0  [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:15:08.0532 0x1aa0  wlidsvc - ok
15:15:08.0542 0x1aa0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
15:15:08.0555 0x1aa0  WmiAcpi - ok
15:15:08.0566 0x1aa0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:15:08.0586 0x1aa0  wmiApSrv - ok
15:15:08.0590 0x1aa0  WMPNetworkSvc - ok
15:15:08.0595 0x1aa0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:15:08.0609 0x1aa0  WPCSvc - ok
15:15:08.0617 0x1aa0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:15:08.0640 0x1aa0  WPDBusEnum - ok
15:15:08.0645 0x1aa0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
15:15:08.0677 0x1aa0  ws2ifsl - ok
15:15:08.0684 0x1aa0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
15:15:08.0705 0x1aa0  wscsvc - ok
15:15:08.0708 0x1aa0  WSearch - ok
15:15:08.0715 0x1aa0  wStLibG64 - ok
15:15:08.0776 0x1aa0  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll
15:15:08.0851 0x1aa0  wuauserv - ok
15:15:08.0861 0x1aa0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:15:08.0876 0x1aa0  WudfPf - ok
15:15:08.0885 0x1aa0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
15:15:08.0902 0x1aa0  WUDFRd - ok
15:15:08.0907 0x1aa0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
15:15:08.0923 0x1aa0  wudfsvc - ok
15:15:08.0933 0x1aa0  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
15:15:08.0953 0x1aa0  WwanSvc - ok
15:15:08.0975 0x1aa0  [ 4A5CE13408945E525503B5F73D29B9C5, D58BB31AF17752508EA67931BF170CE46877DC204FC5DA7EED5A078AEB0CA0FD ] xnacc           C:\Windows\system32\DRIVERS\xnacc.sys
15:15:09.0009 0x1aa0  xnacc - ok
15:15:09.0016 0x1aa0  [ 2EE48CFCE7CA8E0DB4C44C7476C0943B, 2C324592F3F2D50BABA7123B6F9FC922667CC132777E019FF615F2D6F273A45E ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys
15:15:09.0029 0x1aa0  xusb21 - ok
15:15:09.0043 0x1aa0  ================ Scan global ===============================
15:15:09.0047 0x1aa0  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
15:15:09.0055 0x1aa0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
15:15:09.0066 0x1aa0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
15:15:09.0075 0x1aa0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
15:15:09.0086 0x1aa0  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
15:15:09.0095 0x1aa0  [ Global ] - ok
15:15:09.0095 0x1aa0  ================ Scan MBR ==================================
15:15:09.0097 0x1aa0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:15:09.0157 0x1aa0  \Device\Harddisk0\DR0 - ok
15:15:09.0190 0x1aa0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
15:15:09.0278 0x1aa0  \Device\Harddisk1\DR1 - ok
15:15:09.0278 0x1aa0  ================ Scan VBR ==================================
15:15:09.0280 0x1aa0  [ 2F69EA16BAF93CA38C8FED97ABC89A44 ] \Device\Harddisk0\DR0\Partition1
15:15:09.0281 0x1aa0  \Device\Harddisk0\DR0\Partition1 - ok
15:15:09.0283 0x1aa0  [ 628D2D0317520AFD82F325C5081B175E ] \Device\Harddisk1\DR1\Partition1
15:15:09.0330 0x1aa0  \Device\Harddisk1\DR1\Partition1 - ok
15:15:09.0332 0x1aa0  [ FD8C37EA334248D71DFBB0BED6D4F5FF ] \Device\Harddisk1\DR1\Partition2
15:15:09.0333 0x1aa0  \Device\Harddisk1\DR1\Partition2 - ok
15:15:09.0335 0x1aa0  [ B27AF384E9E6C6FC8CBDABF4A43157CC ] \Device\Harddisk1\DR1\Partition3
15:15:09.0336 0x1aa0  \Device\Harddisk1\DR1\Partition3 - ok
15:15:09.0336 0x1aa0  ================ Scan generic autorun ======================
15:15:09.0489 0x1aa0  [ CF161C7C6B23A8827C41292F60E6B078, 5A5BCA8AD6D5CE7CB92C2A65173A2DE0D17C1404747C2BF751687DDA0C728FEA ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
15:15:09.0674 0x1aa0  RTHDVCPL - ok
15:15:09.0706 0x1aa0  [ E5A22701F5AA0FEA791E19007F93E9BD, DD65B9F420F38A19D0661B859D45CC957E4DC12248A7868F3DE8ED6B13C059A2 ] C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
15:15:09.0736 0x1aa0  GamecomSound - ok
15:15:09.0762 0x1aa0  [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
15:15:09.0809 0x1aa0  XboxStat - ok
15:15:09.0867 0x1aa0  [ A6AAD37CDCAE75CB62D039E3A4D8F5E3, 4FF763B0D129175BA1B1E794BA313E6C63F7A89D377C786BF5E730AF2A1D95D1 ] C:\Program Files\Microsoft Security Client\msseces.exe
15:15:09.0931 0x1aa0  MSC - ok
15:15:09.0946 0x1aa0  [ 158208ED871F0F6C5C748B9E4DDA72B9, 13EA02EF9B2E4C8C90E60A0EDB38A651FE86979D15B5F5040FF18CD267DCAAAF ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
15:15:09.0967 0x1aa0  AdobeAAMUpdater-1.0 - ok
15:15:09.0990 0x1aa0  [ 07A37CB5C5A01E73FB69F138FAE2DB0E, 9E8B5D78D7EAB8FA35133763EDA91AFE5CDEE275D604F02CDB56FB00A0D5AA0F ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
15:15:10.0023 0x1aa0  Adobe ARM - ok
15:15:10.0044 0x1aa0  [ 5FC6AD6AE07F8827F954C4C6B73568E2, 6A2C1328BFBFB8D41CE268C2D1C26B1E2FCF2E426A98A740536689FB568ACFE9 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe
15:15:10.0071 0x1aa0  StartCCC - ok
15:15:10.0102 0x1aa0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:15:10.0152 0x1aa0  Sidebar - ok
15:15:10.0158 0x1aa0  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:15:10.0177 0x1aa0  mctadmin - ok
15:15:10.0209 0x1aa0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:15:10.0251 0x1aa0  Sidebar - ok
15:15:10.0262 0x1aa0  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:15:10.0281 0x1aa0  mctadmin - ok
15:15:10.0494 0x1aa0  [ B2BAE2D76FBE9FDC3F6E0D1F886DF367, 964EBF736891BE252C68FCE1F9EAD5E60E6E0C2119D21C6DF49FBD30FBB678EF ] E:\CCleaner\CCleaner64.exe
15:15:10.0704 0x1aa0  CCleaner Monitoring - ok
15:15:10.0718 0x1aa0  Adobe Speed Launcher - ok
15:15:10.0718 0x1aa0  Waiting for KSN requests completion. In queue: 108
15:15:11.0718 0x1aa0  Waiting for KSN requests completion. In queue: 108
15:15:12.0718 0x1aa0  Waiting for KSN requests completion. In queue: 108
15:15:13.0729 0x1aa0  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.6.305.0 ), 0x60000 ( disabled : updated )
15:15:13.0733 0x1aa0  Win FW state via NFP2: disabled
15:15:16.0072 0x1aa0  ============================================================
15:15:16.0072 0x1aa0  Scan finished
15:15:16.0072 0x1aa0  ============================================================
15:15:16.0079 0x19f8  Detected object count: 1
15:15:16.0079 0x19f8  Actual detected object count: 1
15:16:08.0666 0x19f8  amdkmdag ( UnsignedFile.Multi.Generic ) - skipped by user
15:16:08.0666 0x19f8  amdkmdag ( UnsignedFile.Multi.Generic ) - User select action: Skip
         
__________________

Alt 25.01.2015, 18:46   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Router auf Werkseinstellungen zurücksetzen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 25.01.2015, 18:57   #5
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Gerade den Router auf Werkeinstellungen zurückgesetzt und das Problem besteht immer noch.


Alt 26.01.2015, 09:19   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Und immer noch an mehreren Geräten?
__________________
--> Verbindungsabrüche bei verschiedenen Servicen

Alt 26.01.2015, 17:03   #7
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Hey Schrauber,

mit dem Laptop geht das jetzt ohne Disconnects habe zunächst einen anderen Lan Kabel benutzt am Laptop und dann auch den an meinem Rechner und es geht mit beiden einwandfrei. Versuche ich das ganze mit dem Rechner bekomme ich die Verbindungsabbrüche.

Alt 26.01.2015, 18:31   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



What?
Zitat:
und dann auch den an meinem Rechner und es geht mit beiden einwandfrei
Zitat:
Versuche ich das ganze mit dem Rechner bekomme ich die Verbindungsabbrüche.
Ich nix verstehn
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 26.01.2015, 18:59   #9
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Sorry wurde mit Smartphone geschrieben..

Ich sagte, dass ich mit meinem Laptop eine reibungslose Verbindung zu den Servicen habe. Mit zwei Lankabeln habe ich das ganze getestet, einmal ein unbenutztes Lankabel und mein Lankabel am Rechner habe ich auch an meinem Laptop getestet und mit beiden hatte ich eine reibungslose Verbindung. Allerdings konnte man das nicht von meinem Rechner behauptet, der hat immernoch die selben Probleme.

Alt 26.01.2015, 22:41   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Und als Du das LAN Kabel amLaptop getestet hast, hast Du da auch den gleichen LAN Port am Router benutzt wie mit dem Rechner?


Gewusst wie: Durchführen eines sauberen Neustarts in Windows

Bitte einen Clean Boot machen. Wenn das Problem dann weg ist, einzeln wieder Dienste aktivieren, dazwischen immer einen Reboot machen. Solange bis Du weißt welcher Dienst die Probleme macht.

Diesen dann hier benennen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 26.01.2015, 23:23   #11
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Ich bin nicht sofort an dem Router verbunden sondern über einen Netgear Splitter falls das seine Wichtigkeit hat und ja ich habe den selben Port benutzt. Clean Boot wurde durchgeführt, dass Problem besteht noch.

Alt 27.01.2015, 11:38   #12
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Das Problem besteht, obwohl alle Dienste deaktiviert sind??


Dann ist das ein Windows-internes Problem.


  • Lade Dir bitte Windows Repair - All in one von tweaking.com hier herunter und installiere es.
  • Deaktiviere bitte (wenn möglich) Dein Antivirusprogramm.
  • Bedenke, dass die einzelnen Reparaturen einige Zeit benötigen. Starte keine anderen Anwendungen in dieser Zeit.
  • Starte das Programm und führe die Punkte 1-5 durch. (Siehe Bildanleitung)
  • Achte darauf, dass bei Dir die Häkchen so gesetzt sind wie unter Punkt 4.
  • Setze auch ein Häkchen bei "Restart/Shutdown System" und klicke "Restart System" an bevor Du Punkt 5 durchführst.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.01.2015, 18:20   #13
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Sorry habe mich zu früh gefreut beide Geräte haben immernoch regelmäßige Verbindungsabbrüche zu den genannten Servicen. Getestet habe ich es mit verschiedenen Lan-Kabel an verschiedenen Ports, Problem besteht immernoch.

Oh, und ja das Problem besteht mit allen Diensten deaktiviert.

Alt 27.01.2015, 20:24   #14
schrauber
/// the machine
/// TB-Ausbilder
 

Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Zitat:
Sorry habe mich zu früh gefreut beide Geräte haben immernoch regelmäßige Verbindungsabbrüche
was für beide Geräte? Ich denke du hast nen Laptop wo alles geht und nen Rechner wo es nicht geht???
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.01.2015, 21:56   #15
Bob Ross
 
Verbindungsabrüche bei verschiedenen Servicen - Standard

Verbindungsabrüche bei verschiedenen Servicen



Code:
ATTFilter
was für beide Geräte? Ich denke du hast nen Laptop wo alles geht und nen Rechner wo es nicht geht???
         
Nein. Wie gesagt ich habe nachdem ich den Router auf Werkeinstellungen zurückgesetzt habe, versucht mit dem Laptop die Service zu benutzen. Anscheinend habe ich aber beim ersten Versuch nicht lange genug gewartet, denn als ich heute versucht habe mit dem Laptop die Service zu benutzen, hatte ich Verbindungsabbrüche genauso wie am Rechner.

Also nochmal zu der aktuellen Situation:

Laptop hat Verbindungsabbrüche zu den Servicen. (Getestet mit dem Lan-Kabel vom Rechner und ein anderen ungebrauchten Lan-Kabel, jeweils am selben Port und einmal an einem anderen Port)
Rechner hat Verbindungsabbrüche zu den Servicen.

Sorry falls ich unverständlich war.

Antwort

Themen zu Verbindungsabrüche bei verschiedenen Servicen
adware, bonjour, browser, cyberghost, failed, fehler, firefox, flash player, helper, home, homepage, installation, league of legends, mozilla, newtab, realtek, registry, scan, security, sekunden, server, software, spamhaus, svchost.exe, system, teredo, trackid, updates, usb, windows



Ähnliche Themen: Verbindungsabrüche bei verschiedenen Servicen


  1. Bildschirm flimmert in verschiedenen Farben!
    Plagegeister aller Art und deren Bekämpfung - 18.05.2015 (42)
  2. Windows 7 mit verschiedenen Trojanerdateien
    Plagegeister aller Art und deren Bekämpfung - 30.11.2014 (15)
  3. Probleme mit der Grafik bei verschiedenen Spielen
    Alles rund um Windows - 01.08.2014 (2)
  4. svchost.exe in verschiedenen Ordnern gefunden
    Log-Analyse und Auswertung - 24.12.2013 (7)
  5. Truecrypt auf verschiedenen Partitionen
    Alles rund um Windows - 06.11.2011 (1)
  6. Probleme mit verschiedenen Funden
    Plagegeister aller Art und deren Bekämpfung - 25.10.2011 (30)
  7. https-Seiten und die verschiedenen Internetbrowser
    Überwachung, Datenschutz und Spam - 12.02.2011 (2)
  8. Fehlermeldung 0xc000007b bei verschiedenen Programmen
    Alles rund um Windows - 05.12.2010 (6)
  9. Probleme mit scheinbar verschiedenen Vieren
    Plagegeister aller Art und deren Bekämpfung - 01.09.2010 (43)
  10. Probleme mit MSN und verschiedenen Seiten - Virus???
    Log-Analyse und Auswertung - 03.03.2009 (1)
  11. SDFix ändert die falschen Einträge in meinen Servicen
    Plagegeister aller Art und deren Bekämpfung - 23.08.2008 (8)
  12. Problem mit verschiedenen Viren
    Plagegeister aller Art und deren Bekämpfung - 21.05.2007 (8)
  13. Problem mit verschiedenen Viren!
    Plagegeister aller Art und deren Bekämpfung - 23.12.2006 (1)
  14. Befall mit verschiedenen Trojanern!
    Plagegeister aller Art und deren Bekämpfung - 26.04.2006 (8)
  15. Probleme bei der Darstellung von verschiedenen Internetseiten
    Alles rund um Windows - 02.03.2006 (7)
  16. Problem mit verschiedenen Trojanern und Exploits
    Plagegeister aller Art und deren Bekämpfung - 18.03.2005 (6)
  17. bluescreen mit verschiedenen fehlermeldungen
    Alles rund um Windows - 23.02.2005 (1)

Zum Thema Verbindungsabrüche bei verschiedenen Servicen - Guten Tag, ich habe seit ca. 3 Monaten Verbindungsabrüche mit bestimmten Servicen (Skype und League of Legends) im ca. 20 Sekunden abstand. Interessant ist hier, dass die die Verbindungsabrüche weniger - Verbindungsabrüche bei verschiedenen Servicen...
Archiv
Du betrachtest: Verbindungsabrüche bei verschiedenen Servicen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.