| |
| |||||||
Log-Analyse und Auswertung: Keylogger / Hacker auf meinem Rechner ?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
03.11.2015, 22:27
| #1 |
 |  Keylogger / Hacker auf meinem Rechner ? Hey Trojaner-Board Community ! Gibt es eine Möglichkeit, das ein Hacker über Masnahmen gegen ihn bescheid weiß ? Nehmen mir an ein Hacker ist auf meinem PC und ich bekomme Hilfe von diesem Forum.. kann er sich dagegen wehren ? Denn ich hatte hier bereits Hilfe von cosinus bekommen, bezüglich eines Hackers auf meinem PC. Laut den Files war ja alles sicher, doch heute hat soebend jemand auf meinem Freund seinem Facebook Profil einen Chronik Post hinterlassen, indem sowas wie eine "Selbstmord"Nachricht steht und dann im Binde strich mein realer Name (Also quasi "..... - Mustername". Ich war der einzige dem er seine Email, die auf diesen Facebook Account verknüpft war anvertraut hatte, dazu wohnt er nicht in meiner Nähe das heißt niemand von seiner Seite aus kennt mich. Meine Befürchtung ist das ein Hacker immernoch auf meinem Rechner hockt und die Email ausnutzte. Hab soebend mal ein Scan mit Anti Malwarebytes durchgeführt und folgende Malware wurde gefunden : RiskWare.Injector.DC Es läuft nebenbei noch ein Scan mit Microsoft Security Essentials.. werde dies hier editieren falls dieser auch fand. Microsoft Security Essentials hat keine Bedrohungen gefunden. LOGFILE VON MBAM = Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 03.11.2015 Suchlaufzeit: 17:53 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2015.11.03.06 Rootkit-Datenbank: v2015.10.28.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jurij Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 370116 Abgelaufene Zeit: 2 Std., 18 Min., 49 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 147 PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_GB, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_US, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_BR, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_PT, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_CN, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_TW, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ar, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\bg, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ca, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\cs, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\da, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\de, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\el, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_GB, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_US, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es_419, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\et, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\eu, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fil, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\he, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hu, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\id, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\it, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ja, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ko, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lt, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lv, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ms, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\nl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\no, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_BR, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_PT, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ro, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ru, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sk, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sv, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\th, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\tr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\uk, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\vi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_CN, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_TW, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_metadata, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\audio, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_metadata, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], Dateien: 167 RiskWare.Injector.DC, C:\$Recycle.Bin\S-1-5-21-3664667551-2409294277-1249802818-1002\$REOCD9R.rar, In Quarantäne, [7c266910117ad165eb37c7533fc22bd5], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\manifest.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_128.png, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_16.png, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.html, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_GB\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_US\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_BR\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_PT\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_CN\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_TW\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\computed_hashes.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\verified_contents.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\manifest.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\128.png, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ar\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\bg\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ca\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\cs\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\da\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\de\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\el\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_GB\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_US\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es_419\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\et\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\eu\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fil\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\he\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hu\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\id\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\it\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ja\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ko\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lt\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lv\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ms\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\nl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\no\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_BR\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_PT\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ro\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ru\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sk\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sv\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\th\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\tr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\uk\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\vi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_CN\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_TW\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_metadata\verified_contents.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\manifest.json, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_de.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_en-au.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_en-gb.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_es.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_fr.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_it.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ja.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ko.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_pt-br.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ru.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\audio\chime.wav, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_metadata\verified_contents.json, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de\hotword-x86-64.nexe, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de\hotword.data, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\manifest.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_background.js, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_window.js, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css\craw_window.css, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html\craw_window.html, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\flapper.gif, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_128.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_16.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_close.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_hover.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_maximize.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_pressed.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata\verified_contents.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
04.11.2015, 07:44
| #2 |
| /// the machine /// TB-Ausbilder    | Keylogger / Hacker auf meinem Rechner ? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
04.11.2015, 13:27
| #3 |
| | Keylogger / Hacker auf meinem Rechner ? Hi schrauber !
__________________Hier die Logs (Musste 2x scannen da es sich beim 1x aufhing und nichtsmehr geschah) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
durchgeführt von Jurij (Administrator) auf JURIJ-PC (04-11-2015 13:20:35)
Gestartet von C:\Users\Jurij\Desktop
Geladene Profile: Jurij (Verfügbare Profile: Jurij)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\puush\puush.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Akamai Technologies, Inc.) C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
(Razer, Inc.) C:\Users\Jurij\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [593216 2015-08-11] (Razer Inc.)
HKLM-x32\...\Run: [RoccatIskuFX] => C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [540672 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Spotify Web Helper] => C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-16] (Spotify Ltd)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2901584 2015-10-14] (Valve Corporation)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Google Update] => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] ()
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57987712 2015-09-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Spotify] => C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-10-16] (Spotify Ltd)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\MountPoints2: {f0d86f61-9947-11e2-bbee-806e6f6e6963} - D:\CheckID.exe
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\MountPoints2: {f90d2151-cf62-11e2-ad4b-50e549d5d956} - I:\pushinst.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2012-03-08]
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML64.lnk [2012-03-08]
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9106BDDB-C90E-4647-9C55-A5FBB5383351}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E7CD1151-626B-4E98-A821-DAF3118EE00B}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002 -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-03-09] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jurij\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @talk.google.com/O1DPlugin -> C:\Users\Jurij\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @tools.google.com/Google Update;version=3 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @tools.google.com/Google Update;version=9 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jurij\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jurij\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
Chrome:
=======
CHR Profile: C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-04]
CHR Extension: (Google-Suche) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-29]
CHR Extension: (Google Mail) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Profile: C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Adblock Plus) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-23]
CHR Extension: (Google-Suche) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR Extension: (Google Mail) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1225216 2015-10-02] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-06] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96768 2013-02-14] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-06-09] (Windows (R) Win 7 DDK provider)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129472 2015-06-27] (Razer, Inc.)
S3 RZSURROUNDVADService; C:\Windows\System32\drivers\RzSurroundVAD.sys [40640 2015-07-29] (Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Datei ist nicht signiert]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-11-04 13:19 - 2015-11-04 13:21 - 00021151 _____ C:\Users\Jurij\Desktop\FRST.txt
2015-11-04 13:18 - 2015-11-04 13:18 - 02198016 _____ (Farbar) C:\Users\Jurij\Downloads\FRST64.exe
2015-11-04 13:18 - 2015-11-04 13:18 - 02198016 _____ (Farbar) C:\Users\Jurij\Desktop\FRST64.exe
2015-11-03 17:52 - 2015-11-03 22:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-03 17:52 - 2015-11-03 17:52 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-11-03 17:52 - 2015-11-03 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-11-03 17:52 - 2015-11-03 17:52 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-11-03 17:52 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-03 17:52 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-03 17:52 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-03 15:45 - 2015-11-03 15:46 - 22908888 _____ (Malwarebytes ) C:\Users\Jurij\Downloads\mbam-setup-2.2.0.1024.exe
2015-11-03 15:45 - 2015-11-03 15:45 - 00000000 ____D C:\Users\Jurij\AppData\Local\niemiro
2015-11-03 12:32 - 2015-11-03 12:32 - 02546102 _____ C:\Users\Jurij\Downloads\CrystalDiskInfo6_1_12.zip
2015-10-27 12:23 - 2015-10-27 12:24 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Infamous GTAV Menu
2015-10-27 12:21 - 2015-10-27 12:21 - 01198013 _____ C:\Users\Jurij\Downloads\Infamous_mpgh.net.rar
2015-10-20 13:18 - 2015-10-20 13:18 - 00000000 _____ C:\Users\Jurij\Desktop\Neues Textdokument.txt
2015-10-15 17:34 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-15 17:34 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-15 17:34 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 12:50 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 12:50 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 12:50 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 12:50 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 12:49 - 2015-09-18 20:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 12:49 - 2015-09-18 19:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 12:49 - 2015-09-16 05:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 12:49 - 2015-09-16 05:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 12:49 - 2015-09-16 05:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 12:49 - 2015-09-16 05:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 12:49 - 2015-09-16 05:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 12:49 - 2015-09-16 05:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 12:49 - 2015-09-16 05:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 12:49 - 2015-09-16 05:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 12:49 - 2015-09-16 05:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 12:49 - 2015-09-16 05:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 12:49 - 2015-09-16 05:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 12:49 - 2015-09-16 04:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 12:49 - 2015-09-16 04:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 12:49 - 2015-09-16 04:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 12:49 - 2015-09-16 04:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 12:49 - 2015-09-16 04:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 12:49 - 2015-09-16 04:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 12:49 - 2015-09-16 04:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 12:49 - 2015-09-16 04:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 12:49 - 2015-09-16 04:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 12:49 - 2015-09-16 04:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 12:49 - 2015-09-16 04:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 12:49 - 2015-09-16 04:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 12:49 - 2015-09-16 04:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 12:49 - 2015-09-16 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 12:49 - 2015-09-16 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 12:49 - 2015-09-16 04:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 12:49 - 2015-09-16 04:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 12:49 - 2015-09-16 04:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 12:49 - 2015-09-16 04:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 12:49 - 2015-09-16 04:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 12:49 - 2015-09-16 04:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 12:49 - 2015-09-16 04:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 12:49 - 2015-09-16 04:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 12:49 - 2015-09-16 04:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 12:49 - 2015-09-16 04:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 12:49 - 2015-09-16 04:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 12:49 - 2015-09-16 04:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 12:49 - 2015-09-16 04:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 12:49 - 2015-09-16 04:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 12:49 - 2015-09-16 04:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 12:49 - 2015-09-16 04:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 12:49 - 2015-09-16 04:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 12:49 - 2015-09-16 04:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 12:49 - 2015-09-16 04:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 12:49 - 2015-09-16 03:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 12:49 - 2015-09-16 03:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 12:49 - 2015-09-16 03:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 12:49 - 2015-09-16 03:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 12:49 - 2015-09-16 03:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 12:49 - 2015-09-16 03:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 12:49 - 2015-09-16 03:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 12:49 - 2015-09-16 03:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 12:49 - 2015-09-16 03:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 12:49 - 2015-09-16 03:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 12:47 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 12:47 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 12:47 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 12:47 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 12:47 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 12:47 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 12:47 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 12:47 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 12:47 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 12:47 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 12:47 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 12:47 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 12:47 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 12:47 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 12:47 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 12:47 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 12:47 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 12:47 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 12:47 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 12:47 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 12:47 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 12:47 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 12:47 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 12:47 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 12:47 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 12:47 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 12:47 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 12:47 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 12:47 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 12:47 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 12:47 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 12:47 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 12:46 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 12:46 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 12:46 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 12:46 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 12:46 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 12:46 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 12:45 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-10 09:33 - 2015-10-03 03:18 - 00102520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-10-10 09:31 - 2015-10-03 06:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-10-10 09:31 - 2015-10-03 06:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-10-09 18:59 - 2015-11-03 17:52 - 00000080 _____ C:\Users\Jurij\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-11-04 13:21 - 2013-03-30 15:47 - 01940252 _____ C:\Windows\WindowsUpdate.log
2015-11-04 13:20 - 2015-09-14 15:23 - 00000000 ____D C:\FRST
2015-11-04 13:18 - 2014-01-02 02:02 - 00000000 ____D C:\Users\Jurij\AppData\Local\Akamai
2015-11-04 13:17 - 2013-03-30 16:23 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Skype
2015-11-04 13:16 - 2014-04-13 18:09 - 00000000 ____D C:\Users\Jurij\AppData\Local\LogMeIn Hamachi
2015-11-04 13:16 - 2013-10-19 18:32 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Spotify
2015-11-04 13:15 - 2013-10-19 18:35 - 00000000 ____D C:\Users\Jurij\AppData\Local\Spotify
2015-11-04 13:14 - 2015-09-15 20:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf.job
2015-11-04 13:14 - 2013-03-30 16:22 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-04 13:14 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-04 13:13 - 2013-12-29 13:42 - 00000000 ____D C:\ProgramData\NVIDIA
2015-11-04 13:13 - 2010-11-21 04:47 - 01011252 _____ C:\Windows\PFRO.log
2015-11-04 13:13 - 2009-07-14 05:51 - 00026264 _____ C:\Windows\setupact.log
2015-11-03 22:09 - 2015-09-15 20:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11.job
2015-11-03 21:58 - 2015-09-14 19:53 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e.job
2015-11-03 21:25 - 2013-03-31 15:38 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\TS3Client
2015-11-03 20:58 - 2015-09-14 19:53 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12.job
2015-11-03 12:53 - 2013-04-07 16:54 - 00000000 ____D C:\Users\Jurij\Desktop\Bilder
2015-11-03 12:53 - 2011-04-12 08:43 - 00645116 _____ C:\Windows\system32\perfh007.dat
2015-11-03 12:53 - 2011-04-12 08:43 - 00130686 _____ C:\Windows\system32\perfc007.dat
2015-11-03 12:53 - 2009-07-14 06:13 - 01516610 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-03 10:50 - 2009-07-14 05:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-03 10:50 - 2009-07-14 05:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-03 10:34 - 2013-03-30 15:56 - 00000000 ____D C:\Users\Jurij
2015-11-03 10:33 - 2015-04-04 16:25 - 00000000 ___SD C:\Windows\system32\GWX
2015-11-03 10:33 - 2014-10-05 17:19 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-03 10:33 - 2014-01-27 15:17 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\puush
2015-11-03 10:33 - 2013-11-03 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-03 10:33 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-11-03 10:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-11-01 17:50 - 2015-07-03 15:48 - 00000948 _____ C:\Users\Jurij\Desktop\Accs.txt
2015-10-26 15:53 - 2013-04-04 14:51 - 00000000 ____D C:\Users\Jurij\AppData\Local\CrashDumps
2015-10-24 09:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-10-23 09:46 - 2015-07-23 15:44 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-10-21 20:58 - 2013-11-13 14:29 - 01464566 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-10-21 16:40 - 2015-07-06 13:38 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-10-21 16:40 - 2015-07-06 13:36 - 00000000 ____D C:\Program Files\Rockstar Games
2015-10-21 10:12 - 2013-10-21 10:39 - 00000000 ____D C:\ProgramData\Oracle
2015-10-21 09:44 - 2014-04-19 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-21 09:43 - 2015-08-27 12:28 - 00000000 ____D C:\Users\Jurij\.oracle_jre_usage
2015-10-21 09:43 - 2015-05-20 16:06 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-21 09:42 - 2015-05-20 16:06 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-20 15:48 - 2015-09-13 16:46 - 00000000 ____D C:\AdwCleaner
2015-10-19 15:43 - 2015-01-02 16:23 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\.minecraft
2015-10-18 14:50 - 2015-07-15 20:44 - 00000169 _____ C:\Users\Jurij\Documents\ClownfishForTeamspeak.ini
2015-10-15 19:53 - 2014-12-11 13:29 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-15 19:53 - 2014-05-06 19:29 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-12 04:05 - 2014-06-03 15:46 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-10-12 04:05 - 2013-12-28 15:56 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-10-12 04:04 - 2014-06-03 15:46 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-10-12 04:04 - 2013-12-28 15:56 - 01710752 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-10-10 09:34 - 2013-12-28 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-10-10 09:34 - 2013-12-28 15:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-10-09 14:36 - 2013-03-30 16:23 - 00000000 ____D C:\ProgramData\Skype
2015-10-08 19:39 - 2015-04-04 16:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-08 16:13 - 2015-02-19 13:26 - 00000000 ____D C:\Users\Jurij\AppData\Local\Steam
2015-10-07 14:28 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-01-24 19:34 - 2015-01-24 19:34 - 0000096 _____ () C:\Users\Jurij\AppData\Roaming\version2.xml
2015-08-14 12:34 - 2015-08-14 12:34 - 0001464 _____ () C:\Users\Jurij\AppData\Local\recently-used.xbel
2014-10-31 20:03 - 2014-10-31 20:03 - 0000017 _____ () C:\Users\Jurij\AppData\Local\resmon.resmoncfg
2015-05-06 12:43 - 2015-05-06 12:44 - 0000800 _____ () C:\Users\Jurij\AppData\Local\Temp-log.txt
2011-05-22 14:09 - 2011-05-22 14:09 - 0019624 _____ () C:\ProgramData\iml.xml
Einige Dateien in TEMP:
====================
C:\Users\Jurij\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\Jurij\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jurij\AppData\Local\Temp\nvStInst.exe
C:\Users\Jurij\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-11-02 15:39
==================== Ende von FRST.txt ============================
|
|
04.11.2015, 13:28
| #4 |
| | Keylogger / Hacker auf meinem Rechner ? Addition Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-10-2015
durchgeführt von Jurij (2015-11-04 13:22:16)
Gestartet von C:\Users\Jurij\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2013-03-30 14:56:38)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3664667551-2409294277-1249802818-500 - Administrator - Disabled)
Gast (S-1-5-21-3664667551-2409294277-1249802818-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3664667551-2409294277-1249802818-1008 - Limited - Enabled)
Jurij (S-1-5-21-3664667551-2409294277-1249802818-1002 - Administrator - Enabled) => C:\Users\Jurij
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Akamai) (Version: - Akamai Technologies, Inc)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Drakonia Black (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version: - )
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
IM Lock (HKLM-x32\...\IMLock) (Version: - Comvigo, Inc.)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA nView 136.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 136.53 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.20.5318 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)
Pixlr-o-matic (HKLM-x32\...\Pixlromatic) (Version: 2.1 - UNKNOWN)
Pixlr-o-matic (x32 Version: 2.1 - UNKNOWN) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27405 - Razer Inc.)
ROCCAT Isku FX Keyboard Driver (HKLM-x32\...\{DC69933C-E7B0-455D-8E54-FAC1EEF046FF}) (Version: - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.8 - Rockstar Games)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Spotify) (Version: 1.0.16.104.g3b776c9e - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{0F659036-14C7-4622-9505-35A0DC93526A}) (Version: 6.1.3.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.5.0 - Tweaking.com)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
VPNAutoconnect (HKLM-x32\...\{D0D7FF19-F218-4783-B79F-01CD1EF19900}) (Version: 1.13 - globalip)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Worms Revolution (HKLM-x32\...\Steam App 200170) (Version: - Team17 Digital Ltd.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei
==================== Wiederherstellungspunkte =========================
25-10-2015 12:49:58 Windows Update
01-11-2015 11:28:04 Windows Update
02-11-2015 20:02:47 Steam wird entfernt
02-11-2015 20:03:40 Steam wird entfernt
03-11-2015 10:29:05 Wiederherstellungsvorgang
03-11-2015 10:46:08 Windows Update
03-11-2015 21:27:35 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2015-09-13 20:47 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {11FFD156-2EE3-4DCC-ADFF-98D441BF269F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {16463BB4-D28B-4484-BBA6-EEAE23FC9B1B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2127EFE1-23E7-4762-8DCF-D98075DDC605} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {2B373424-CA34-4B8C-8E10-AD8B09FE2B89} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {3649336E-8152-42C7-A634-A8215271B19D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {43C7EA40-B179-4551-B1DB-A9B01C5F3E9C} - System32\Tasks\{A0DCBDCC-CAA7-4887-9272-AB1E7BDE046B} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup"
Task: {4DE9AF9D-4B7E-40BB-B7EC-978FBEA258A0} - System32\Tasks\{DF2A0920-5625-4042-8956-BC43D1CA1DD4} => C:\Riot Games\League of Legends\lol.launcher.exe [2014-01-21] ()
Task: {568F9AFA-FBAE-4324-8A94-BC6086BA9E49} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e1ace4cbd36f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {58C05B7F-023D-400F-927C-89EB80E6E50E} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-12] (Tweaking.com)
Task: {6B8D57A3-CE09-440F-8753-6FECE4169244} - System32\Tasks\{ECEB1B52-2FAF-4205-9CB0-AF6A9EE23077} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/42750
Task: {6E85957A-5BA3-4686-906C-0F2C9F9D3E89} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)
Task: {8940148E-E8BB-4AA6-8AD0-E931EFD67DC5} - System32\Tasks\{99B73145-1ADA-4E9B-A9A1-C539C7E93135} => pcalua.exe -a "D:\C-Media 8738\setup.exe" -d "D:\C-Media 8738"
Task: {8ACD8B4C-6304-40A1-B642-84AA7D4E3BC8} - System32\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {8B5ECB26-B9F5-415B-BB86-5A32C3F0E004} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {982E0444-0C37-4651-8C0C-4C28B7DE42CE} - System32\Tasks\{5072EFEC-2C38-4B0B-99F5-B6D36CA91D5C} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\BEsetup\setup_BattlEyeARMA2.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\BEsetup"
Task: {9B609740-21E9-4D9F-B2CD-8D53C2D73C3A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {A9827B2D-BDA2-4955-88AC-8874AF828ED7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {B6830BC3-5F57-4A39-B066-A50F979DCDF4} - System32\Tasks\{15F2937B-77D6-41CD-B182-4EEA27F80DA1} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {CCA18C70-0B14-4911-8CE6-4CEC08EF9DF5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0e0fc50430e90 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {DD23C88E-38CD-4596-A453-324E477AA93E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0e0fc4f448696 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {E4FFE34E-EBF0-4B4B-A3F4-DEE0639F43D0} - System32\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {E944DF1D-4256-40DE-9A43-AEB72483C617} - System32\Tasks\{177D1D1B-2979-455A-9D14-328B4C413B45} => pcalua.exe -a C:\Users\Jurij\Downloads\vcredist_x64.exe -d C:\Users\Jurij\Downloads
Task: {EDCF6C86-BBA8-45D2-B8AC-26F875F6DBA9} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {F782E641-9EF3-4901-9E76-5861D27B0589} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e1ace40aa37b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e1ace40aa37b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e1ace4cbd36f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0e0fc4f448696.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0e0fc50430e90.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2013-12-29 13:42 - 2015-10-03 03:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 10:24 - 2012-01-17 10:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2014-05-22 16:42 - 2014-07-06 11:55 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-06-23 20:11 - 2015-06-23 20:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-01-10 14:41 - 2015-03-30 10:49 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2014-10-29 10:50 - 2013-10-29 14:49 - 00248832 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2014-10-29 10:50 - 2013-06-26 17:01 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2015-07-08 07:58 - 2015-07-08 07:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-03-31 13:10 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-11-02 20:19 - 2015-10-05 17:18 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 16:21 - 2015-07-03 17:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-11-02 20:19 - 2015-07-03 17:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-11-02 20:19 - 2015-07-03 17:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-22 12:33 - 2015-10-14 21:56 - 02423376 _____ () C:\Program Files (x86)\Steam\video.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-11-03 10:48 - 2015-10-14 21:56 - 00705104 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-09-05 02:42 - 2015-09-05 02:42 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2014-07-17 11:56 - 2012-07-08 15:31 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\hiddriver.dll
2014-10-29 10:50 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2014-10-29 10:50 - 2013-11-05 16:31 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2013-11-03 10:48 - 2015-10-08 23:20 - 45010208 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-11-29 22:59 - 2012-11-29 22:59 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-10-25 18:11 - 2015-10-20 15:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-25 18:11 - 2015-10-20 15:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jurij\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: Clownfish => "C:\Program Files (x86)\Clownfish\Clownfish.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{9440AE1D-5CCE-4725-9F24-CCE8EA4B5808}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{1ED63443-2D7A-4A43-90CA-74DE8CFDAA87}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{F0445F39-E63B-4C51-ADEF-C441609864D1}] => (Allow) LPort=1542
FirewallRules: [{A7FFF58D-DA77-4334-A893-157D883F7176}] => (Allow) LPort=1542
FirewallRules: [{E4B0C635-94DE-49E3-935F-D07EA0304FD5}] => (Allow) LPort=53
FirewallRules: [{5A164349-1D22-4807-9DB5-0BBEFC0C4AB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\icr0wz\counter-strike source\hl2.exe
FirewallRules: [{F6686B74-F2DB-49CB-8C8A-E1B25E59596B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\icr0wz\counter-strike source\hl2.exe
FirewallRules: [{37B7B5D9-FEBC-45A8-8E9F-F0E50D185180}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AMD Driver Updater, Vista and 7, 64 bit\Setup.exe
FirewallRules: [{129946BB-128C-4748-A96D-CAFB7BF470E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AMD Driver Updater, Vista and 7, 64 bit\Setup.exe
FirewallRules: [TCP Query User{337725AD-5C54-41B5-A1C1-6885D8F5F8DA}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A2A7E334-E92C-40A4-BCBF-60FCD25ADDC8}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{7090FCC1-A810-40A8-B62E-3F1723447F72}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{2AD6FF17-77CC-435B-A645-6ACBFB76150D}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{A0522974-AB40-406F-8474-8A537F3470A6}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{D49F32A9-3370-43DE-8C73-FAD60BCB9E0F}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [{31402ED2-A53E-4178-B8D6-4931C77F7744}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4AA9F9F3-AF00-467C-92C1-03FE7457EE08}] => (Allow) LPort=2869
FirewallRules: [{4DA70384-07DB-4573-9D15-B55F4E3655E3}] => (Allow) LPort=1900
FirewallRules: [{3DC0D551-09C9-4269-9B0D-AC4D589EC617}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{C8EC8459-BC04-4C65-85DC-CC60686EAB9A}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{A17F7107-BEE0-4CD2-AF84-ECF58BE3A828}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{47D30931-EBC7-4DF8-A233-D1D870162895}C:\users\jurij\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jurij\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C2A32B53-6B3D-442E-99C5-96E9838679C7}C:\users\jurij\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jurij\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{5DC440DC-5312-4105-8E6B-0EEA459DA13E}] => (Allow) C:\Program Files (x86)\eFusion\BlackShot\system\blackshot.exe
FirewallRules: [{447C528C-1B33-4C1A-AEE8-98C8ACDC74AB}] => (Allow) C:\Program Files (x86)\eFusion\BlackShot\system\blackshot.exe
FirewallRules: [TCP Query User{F48BE1C0-95C5-451E-967F-96736D649FF8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat
FirewallRules: [UDP Query User{E60ED45E-2604-4098-99C1-5D2011269AB1}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat
FirewallRules: [TCP Query User{DB5B79DD-F3E4-4202-9CB7-0AF7D5B421C8}C:\users\jurij\desktop\hardcore reloaded\metin2client.bin] => (Allow) C:\users\jurij\desktop\hardcore reloaded\metin2client.bin
FirewallRules: [UDP Query User{C16E7D0F-2451-4557-9D20-F9357DB87B4F}C:\users\jurij\desktop\hardcore reloaded\metin2client.bin] => (Allow) C:\users\jurij\desktop\hardcore reloaded\metin2client.bin
FirewallRules: [TCP Query User{872B1634-2D2B-4249-9740-1813ABB7E58A}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [UDP Query User{7E5D2371-607C-463A-AB3C-7148E3B32BFA}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [TCP Query User{F1B9C1D3-E908-4B6A-8AB4-4E39C342F62A}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [UDP Query User{2AAE00C7-3869-4581-80DC-31A952862849}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [{31433860-7F0B-4709-A367-A5A1B7BCBFE6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ECCA9167-7DA9-41E1-9648-374F7AFF1EA0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{E195C404-3126-4FBA-B8A1-DE51DEA38CDF}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [UDP Query User{370CE28E-3DAA-4CB4-98B5-480BA2EA81E0}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [TCP Query User{40ED4D4C-60FE-476D-BC65-452E703A534D}C:\users\jurij\desktop\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{1EC97667-69B9-449C-B436-02383578F981}C:\users\jurij\desktop\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terrariaserver.exe
FirewallRules: [{9AA7BF97-C365-4EF7-806F-0DF918761C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{5FFB472D-F895-4EDB-99AE-35151EA879F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{4F43019F-C471-4799-84FC-84F07731EAF8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E80D235E-3A6D-4D59-A61A-BD2D664C622A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{3E123C52-E541-41FF-B74E-1DE0088F9CE5}C:\users\jurij\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jurij\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F47C00B5-BD81-488E-AE18-B0D86D9C72FD}C:\users\jurij\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jurij\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FC82470D-BD3E-46C1-9A81-23A9E936B66D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{DDC8FA0F-E692-4637-950F-715956FA785B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [TCP Query User{FD3DC54B-998C-4E40-B1BB-0AD8494CBC57}C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin
FirewallRules: [UDP Query User{BC28CB7D-32DA-48D1-B928-F0A389B72AAD}C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin
FirewallRules: [TCP Query User{E04ADE5C-9F85-45C9-B48F-0B8B89A7BB9F}C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe] => (Allow) C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe
FirewallRules: [UDP Query User{1FC56ADF-78BE-4178-88EE-77BAB5C976B1}C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe] => (Allow) C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe
FirewallRules: [TCP Query User{38C87281-5E8B-46F0-9A55-CA4AE94771BB}C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin
FirewallRules: [UDP Query User{712B2CEF-66B4-4536-988C-2B28DA620B9D}C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin
FirewallRules: [{18A72D97-FD5F-44F9-A036-CF2EF92A214E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{807B1347-2F6D-437D-BF7C-FE6E6A2AE29B}C:\program files (x86)\survivors beta\survivers_beta_3.exe] => (Allow) C:\program files (x86)\survivors beta\survivers_beta_3.exe
FirewallRules: [UDP Query User{B16D0BB5-4D25-4E42-8A39-2F1CF5277310}C:\program files (x86)\survivors beta\survivers_beta_3.exe] => (Allow) C:\program files (x86)\survivors beta\survivers_beta_3.exe
FirewallRules: [{93EF5C39-F335-4B56-80CF-FE6324D7AC82}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{C9D53C96-C110-4E7B-9D3C-B64A2D5C8ED6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{D21F8F5E-4136-4FD8-81EF-A62F41641219}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{E58082E1-79F1-4638-AC18-FB0CD6D21D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{5852FA68-3899-43FC-A254-FD9B9C79FDE6}] => (Allow) C:\Users\Jurij\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{75EF04F5-004F-4A2F-B556-34A1A710443F}] => (Allow) C:\Users\Jurij\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{17441DC5-3C7D-43A3-833D-9D83087C2CE7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{07A4A857-989C-4D78-9E03-A762744AE3B2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C4A0EE93-9D8D-462E-9137-1125E69508E3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5EE35CA8-2692-43CA-B649-C21979C224CA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{9299A908-8BBC-4404-8EF8-0CB1F3C83292}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{6B73F492-83F8-4F58-B57C-2FB64EB2CFD7}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{1ACBC3A2-CE77-4184-B5E4-75DB71743B8B}C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{9D9D92AF-7EC9-46DC-ADF1-D7D75FA10E5B}C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{49810CE9-49C2-40D8-AD42-7ADC97D658A7}C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe
FirewallRules: [UDP Query User{75D8668B-FAFA-46FF-999D-ACD2C46B4358}C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe
FirewallRules: [TCP Query User{16768DAF-90FD-4F41-9AC7-EA84001C6109}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{4F1439CB-1232-4E80-BDFB-B14F88CE92E4}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{C0D299E5-B807-4203-83C2-5916D23C1FD4}C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [UDP Query User{B06D04B5-7CB7-4144-904D-F68FA698F2BD}C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [{F27267F3-2C69-4A4E-A602-FC10A8CB8C8D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8B374E23-33C5-411E-AD53-A757A415C0EE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D1D694FB-14FB-4E0B-9245-4621BDFED750}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{EB59254B-2966-4C0A-AE47-1635313C254C}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [TCP Query User{E73266D5-419B-4495-BAC5-5305B07162EA}C:\users\jurij\desktop\lavanda2-client\lavanda.exe] => (Block) C:\users\jurij\desktop\lavanda2-client\lavanda.exe
FirewallRules: [UDP Query User{5F4D30A1-0BFB-4FF0-AE82-AFAE0B02F373}C:\users\jurij\desktop\lavanda2-client\lavanda.exe] => (Block) C:\users\jurij\desktop\lavanda2-client\lavanda.exe
FirewallRules: [{259F8433-87BD-4F0A-9FDF-6E0FE820031B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{6AB2A8DC-C0EE-47A8-AD36-BB387FBC9141}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [TCP Query User{B3D104D9-5A17-41E3-8F6E-24DDA39EB71B}C:\users\jurij\desktop\terraria server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria server\terrariaserver.exe
FirewallRules: [UDP Query User{1BF6B589-E0E8-45E9-A222-EA9AAF649C7E}C:\users\jurij\desktop\terraria server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria server\terrariaserver.exe
FirewallRules: [TCP Query User{7691EB8F-5CBF-40E1-B32E-CD79B81AEB17}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{771AE757-DC86-475F-B03F-F6C9C24EC8D7}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{B3570E80-B416-4B51-98B7-CEA1D112DC0C}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{268F7F6E-39FF-4927-947F-2C8F3D445B03}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{DFB5696E-9042-4E1C-ACD9-9699CF5C5001}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{577374F2-D1E6-4127-B414-3BEC186D3339}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{B424F1BD-6DC5-4B73-94A6-38D6902FD53B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{71D7BF62-ECB6-447C-B1B6-66130B904D61}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A5133026-5048-4C70-85A2-3F7818058FBF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0E5681F3-FFA2-4071-B49B-22DFCE7F5618}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{4E072B08-BBE1-4513-BC81-B9A571C51877}C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{7532A9A4-4B27-4527-BCE5-729EE001A971}C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B8ACACEC-0BFD-40F6-8941-6B70A4F86AF6}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{944F2439-1120-4E53-B2AA-81FFE2855CBE}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{5E29FF06-46AA-48F3-B3BC-9E8203D34398}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [{B74D0AE2-892D-4202-9978-5D9CB696AD5A}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [TCP Query User{5A757047-D79A-4EAB-963F-FA0A602DCF6F}C:\nexon\combat arms eu\engine.exe] => (Allow) C:\nexon\combat arms eu\engine.exe
FirewallRules: [UDP Query User{CCFD899D-A82B-48DC-98E4-84BB2EFF6860}C:\nexon\combat arms eu\engine.exe] => (Allow) C:\nexon\combat arms eu\engine.exe
FirewallRules: [TCP Query User{F0E0F93A-D92E-4944-BCB7-CF69318F884A}C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{F4A4E20F-5F77-4102-BFED-58918C8ABD33}C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{0CC08BCB-3EBB-451F-B34F-0117C9E9B800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{A7D6AC67-7C31-470F-9C49-DB02A36E0A2A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{CBF14AD4-EEFA-4CA9-9115-4DB18C5974C5}C:\users\jurij\desktop\dark-fusion\fusion-network.exe] => (Block) C:\users\jurij\desktop\dark-fusion\fusion-network.exe
FirewallRules: [UDP Query User{52112552-7679-4C95-B21E-A1A5424D9571}C:\users\jurij\desktop\dark-fusion\fusion-network.exe] => (Block) C:\users\jurij\desktop\dark-fusion\fusion-network.exe
FirewallRules: [TCP Query User{3C391BBA-FD1C-4E5A-B4A6-542202BF37CC}C:\users\jurij\desktop\dark-fusion\metin2client.exe] => (Allow) C:\users\jurij\desktop\dark-fusion\metin2client.exe
FirewallRules: [UDP Query User{B527AF9C-A739-41B3-9BD6-688BF8CFEFDA}C:\users\jurij\desktop\dark-fusion\metin2client.exe] => (Allow) C:\users\jurij\desktop\dark-fusion\metin2client.exe
FirewallRules: [{F1A4AE15-66E1-4649-B8BC-9FFA99192E03}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{BD65FEBC-A791-4A55-AC5D-190BC8067E91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{B14EB856-B1A9-4E30-84C4-88233BB75AF8}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{2D26A3C0-9020-4148-816A-081831415066}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{825B5C0F-4FBC-4B05-AB86-4D7D9AECC9D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{ED505CE2-DE95-4BFE-8F4B-2E8BC62733A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{A6EDF869-F097-4CE3-BAFC-B2F378AC96AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{165C8D21-FF45-4C80-933C-5ACE4AA75916}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{46C186E4-5E64-4F1A-B2BE-A788DE4B23C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{5CC77AD5-64C3-41BB-8DE5-C23AAC69CEDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5848585C-91AB-437F-B7D3-77BBC9D28290}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7FA2A4E0-971A-4D61-BCEF-601245AABDB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe
FirewallRules: [{412434D4-C9DA-4B58-B4E4-2AB92D5B1F13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe
FirewallRules: [{90CCFF52-AC3A-41D5-96DC-B79ECF453D4E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{7ADAC114-7E9A-4D91-B465-C234D701B583}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{E58C4458-2442-470F-855D-0902ED32B7D2}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{58B37A27-707E-465F-88D2-9B3C03C6AFAA}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{49225AB4-B4DB-4AB6-A338-46347F54359F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{FEA1409F-51B4-43F6-8E49-0E4F8D8B3517}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [TCP Query User{9F739448-F913-4F32-9E33-EB3E4FED8EB1}C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe] => (Allow) C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe
FirewallRules: [UDP Query User{FA4E0AC7-30B9-4486-BB83-E722D0B27F73}C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe] => (Allow) C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe
FirewallRules: [{7241226E-732C-4A80-8751-2412867BE5C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{9E70E24D-9346-4F22-A8FA-319AEB1F6221}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{945BB8E4-53D4-4825-89DE-EE6670D02DED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{47EF494B-07A1-47E3-83E6-32E52E7AEA6E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{B3413B33-2E37-4F13-BEC7-661B2CE3E451}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{756CFB43-F347-45C4-A9C4-65B5953EDDDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{5A9D03C2-758A-4498-93C5-2EE6DE71FE35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{31FF4CA9-23AB-466F-92BF-DE534D865B90}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1729BE53-2934-480D-A111-AC9EB58BF3B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D9429D79-A8E0-4EC9-BE66-2FEBB54B042B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{496C1ABD-CAA1-4D84-B139-170792B3C4A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{DB7902F4-E98B-4BA9-8B7B-D54840D76979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{B72EE9A1-286D-4635-936B-1612A32308DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{CEA29E4F-9B53-4011-8022-CD0532BE1D0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{93B2FE6C-B0B4-4DFA-B886-B46EBCE11AB9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/04/2015 01:20:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 31.10.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: b98
Startzeit: 01d116faf8b46bc4
Endzeit: 0
Anwendungspfad: C:\Users\Jurij\Desktop\FRST64.exe
Berichts-ID: 66913d90-82ee-11e5-a1b3-246511c21be8
Error: (11/04/2015 01:18:25 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (11/04/2015 01:17:58 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (11/04/2015 01:14:34 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet. 0x0.
Error: (11/04/2015 01:14:33 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (11/04/2015 01:14:33 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
Error: (11/03/2015 06:44:21 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (11/03/2015 06:43:47 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (11/03/2015 02:43:07 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (11/03/2015 02:42:23 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Systemfehler:
=============
Error: (11/04/2015 01:14:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/04/2015 01:14:06 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.
Error: (11/03/2015 10:40:16 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (11/03/2015 10:35:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (11/03/2015 10:35:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.
Error: (11/03/2015 10:35:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/03/2015 10:34:49 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.
Error: (11/03/2015 10:24:39 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005
Error: (11/03/2015 10:24:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/03/2015 10:24:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Razer Game Scanner" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
CodeIntegrity:
===================================
Date: 2014-01-03 14:57:10.596
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{78763763-3E17-4C48-8DCD-A259951E16A4}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-01-03 14:57:10.537
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{78763763-3E17-4C48-8DCD-A259951E16A4}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-01-03 14:50:00.571
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{A35007C3-ABE0-476E-9CB7-0D79ABC20480}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-01-03 14:50:00.494
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{A35007C3-ABE0-476E-9CB7-0D79ABC20480}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: AMD FX(tm)-4100 Quad-Core Processor
Prozentuale Nutzung des RAM: 41%
Installierter physikalischer RAM: 8173.54 MB
Verfügbarer physikalischer RAM: 4805.4 MB
Summe virtueller Speicher: 16345.28 MB
Verfügbarer virtueller Speicher: 12940.56 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:455.66 GB) (Free:207.23 GB) NTFS
Drive i: () (Removable) (Total:3.8 GB) (Free:1.73 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3DBBA2DC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=455.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)
========================================================
Disk: 1 (Size: 3.8 GB) (Disk ID: 32E6E468)
Partition 1: (Active) - (Size=3.8 GB) - (Type=0C)
==================== Ende von Addition.txt ============================
|
|
04.11.2015, 20:43
| #5 |
| /// the machine /// TB-Ausbilder | Keylogger / Hacker auf meinem Rechner ? hi, Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.11.2015, 16:21
| #6 |
| | Keylogger / Hacker auf meinem Rechner ? Hallo schrauber ! Danke für deine Antwort, die Logs werde ich morgen posten, doch ich habe noch eine Frage. Ich bin nun von MSE auf Avira Free Antivir umgestiegen, und Avira hatte einen Fund : "PUA/OpenCandy.Gen" hieß der Virus. Laut Antivir ist es ein Virus der Programme installiert (solch einen Virus mit einer ähnlichen Funktion,jedoch anderem Namen hatte ich bereits bei meinem altem Problem, als ich solch einen Hacker auf dem PC hatte) und meine Frage ist nun, ob ich ihn aus der Quarantäne löschen kann ? (Also ob ich auf das X in der Quarantäne drücken soll). Ich lasse den Virus erstmal in der Quarantäne, da er dort ja nichts anrichten kann und warte auf deine Antwort ! Laut Internet gibt es Viren die sich reproduzieren können, wenn man sie aus der Quarantäne entfernt... Darum die Nachfrage  Hallo schrauber ! Ist es wichtig welche Reinfolge bei den Scans ? MBAR lies sich anfangs nicht updaten, also hab ich mit TDSSKiller angefangen... Folgendes kam heraus : Code:
ATTFilter 15:30:00.0007 0x1ec8 TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
15:30:03.0378 0x1ec8 ============================================================
15:30:03.0378 0x1ec8 Current date / time: 2015/11/05 15:30:03.0378
15:30:03.0378 0x1ec8 SystemInfo:
15:30:03.0378 0x1ec8
15:30:03.0378 0x1ec8 OS Version: 6.1.7601 ServicePack: 1.0
15:30:03.0378 0x1ec8 Product type: Workstation
15:30:03.0379 0x1ec8 ComputerName: JURIJ-PC
15:30:03.0379 0x1ec8 UserName: Jurij
15:30:03.0379 0x1ec8 Windows directory: C:\Windows
15:30:03.0379 0x1ec8 System windows directory: C:\Windows
15:30:03.0379 0x1ec8 Running under WOW64
15:30:03.0379 0x1ec8 Processor architecture: Intel x64
15:30:03.0379 0x1ec8 Number of processors: 4
15:30:03.0379 0x1ec8 Page size: 0x1000
15:30:03.0379 0x1ec8 Boot type: Normal boot
15:30:03.0379 0x1ec8 ============================================================
15:30:06.0310 0x1ec8 KLMD registered as C:\Windows\system32\drivers\88403019.sys
15:30:06.0586 0x1ec8 System UUID: {913AC0BD-1E95-8274-67FA-1875EB7CF3E9}
15:30:07.0035 0x1ec8 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:30:07.0040 0x1ec8 Drive \Device\Harddisk1\DR1 - Size: 0xF3C00000 ( 3.81 Gb ), SectorSize: 0x200, Cylinders: 0x1F1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:30:07.0053 0x1ec8 ============================================================
15:30:07.0053 0x1ec8 \Device\Harddisk0\DR0:
15:30:07.0053 0x1ec8 MBR partitions:
15:30:07.0053 0x1ec8 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:30:07.0053 0x1ec8 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x38F53000
15:30:07.0053 0x1ec8 \Device\Harddisk1\DR1:
15:30:07.0054 0x1ec8 MBR partitions:
15:30:07.0054 0x1ec8 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x20, BlocksNum 0x79DFE0
15:30:07.0054 0x1ec8 ============================================================
15:30:07.0078 0x1ec8 C: <-> \Device\Harddisk0\DR0\Partition2
15:30:07.0078 0x1ec8 ============================================================
15:30:07.0078 0x1ec8 Initialize success
15:30:07.0078 0x1ec8 ============================================================
15:31:07.0805 0x4154 ============================================================
15:31:07.0805 0x4154 Scan started
15:31:07.0805 0x4154 Mode: Manual; SigCheck; TDLFS;
15:31:07.0805 0x4154 ============================================================
15:31:07.0805 0x4154 KSN ping started
15:31:38.0901 0x4154 KSN ping finished: true
15:31:40.0816 0x4154 ================ Scan system memory ========================
15:31:40.0816 0x4154 System memory - ok
15:31:40.0817 0x4154 ================ Scan services =============================
15:31:41.0157 0x4154 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
15:31:41.0293 0x4154 1394ohci - ok
15:31:41.0315 0x4154 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
15:31:41.0336 0x4154 ACPI - ok
15:31:41.0382 0x4154 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
15:31:41.0462 0x4154 AcpiPmi - ok
15:31:41.0617 0x4154 [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:31:41.0632 0x4154 AdobeARMservice - ok
15:31:41.0836 0x4154 [ 9B3355B29942AF67F014EA90CE1EA960, FBB155F72984045BCD99CC2059B9EDAABD3A52104C3864A290D8A355991F94D3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:31:41.0855 0x4154 AdobeFlashPlayerUpdateSvc - ok
15:31:42.0014 0x4154 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
15:31:42.0041 0x4154 adp94xx - ok
15:31:42.0064 0x4154 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
15:31:42.0083 0x4154 adpahci - ok
15:31:42.0103 0x4154 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
15:31:42.0120 0x4154 adpu320 - ok
15:31:42.0169 0x4154 [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
15:31:42.0253 0x4154 AeLookupSvc - ok
15:31:42.0321 0x4154 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
15:31:42.0402 0x4154 AFD - ok
15:31:42.0420 0x4154 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
15:31:42.0433 0x4154 agp440 - ok
15:31:42.0472 0x4154 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
15:31:42.0519 0x4154 ALG - ok
15:31:42.0551 0x4154 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
15:31:42.0562 0x4154 aliide - ok
15:31:42.0652 0x4154 [ 20C8A3E435A47F0408A1EA674AFA6194, 568EBB4EE65E6945024F4D67B541BD0170E35C32E7ED4D0AD59D33D933E430D5 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:31:42.0727 0x4154 AMD External Events Utility - ok
15:31:42.0767 0x4154 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
15:31:42.0779 0x4154 amdide - ok
15:31:42.0797 0x4154 [ 6A2EEB0C4133B20773BB3DD0B7B377B4, E4CB35C6937C70A145A13E5AE5B34A271B49101DA623171ACBFDA8601E5A70EA ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
15:31:42.0812 0x4154 amdiox64 - ok
15:31:42.0821 0x4154 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
15:31:42.0856 0x4154 AmdK8 - ok
15:31:43.0688 0x4154 [ 0B45C18B0F3EE996D25BAA4E74884B83, 9E9CE2E02A4E4BF8A87870EF23F8B7D6762785EE9959A64DF45E67B30DE3B63C ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:31:44.0105 0x4154 amdkmdag - ok
15:31:44.0180 0x4154 [ 0E57258E5CC4CC7A9A9A877AFDF0CEC6, 2C3DCB347CD6DAF6F2C8A2531D5165F776855F05D1675A36B9D78BC2C8E0B324 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
15:31:44.0220 0x4154 amdkmdap - ok
15:31:44.0240 0x4154 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
15:31:44.0257 0x4154 AmdPPM - ok
15:31:44.0305 0x4154 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
15:31:44.0331 0x4154 amdsata - ok
15:31:44.0350 0x4154 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
15:31:44.0367 0x4154 amdsbs - ok
15:31:44.0386 0x4154 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
15:31:44.0408 0x4154 amdxata - ok
15:31:44.0686 0x4154 [ 6B31C215750CD41567E962D22839EE44, FF0B92807296B88DE37F9F2EB27FF7B73AA998B98074AA54A949A2B79690AFE5 ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
15:31:44.0720 0x4154 AntiVirMailService - ok
15:31:44.0798 0x4154 [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
15:31:44.0820 0x4154 AntiVirSchedulerService - ok
15:31:44.0866 0x4154 [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirService C:\Program Files (x86)\Avira\Antivirus\avguard.exe
15:31:44.0887 0x4154 AntiVirService - ok
15:31:44.0933 0x4154 [ D84E576299C73B0B1DC477D2B99958C4, D6703C2B63B9FA87C2DA009CC7B6DF76C3603C6A9874B152D685A1B92EE2DF28 ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
15:31:44.0971 0x4154 AntiVirWebService - ok
15:31:45.0010 0x4154 [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID C:\Windows\system32\drivers\appid.sys
15:31:45.0073 0x4154 AppID - ok
15:31:45.0114 0x4154 [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc C:\Windows\System32\appidsvc.dll
15:31:45.0148 0x4154 AppIDSvc - ok
15:31:45.0178 0x4154 [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo C:\Windows\System32\appinfo.dll
15:31:45.0202 0x4154 Appinfo - ok
15:31:45.0215 0x4154 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
15:31:45.0229 0x4154 arc - ok
15:31:45.0239 0x4154 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
15:31:45.0253 0x4154 arcsas - ok
15:31:45.0286 0x4154 [ E536856E96A7605EBF580D62A868E5FE, 70D0F6ECB05E923C1B274605CB3320091D35D7622003FF7E4806645519C70F01 ] ASGT C:\Windows\SysWOW64\ASGT.exe
15:31:45.0310 0x4154 ASGT - detected UnsignedFile.Multi.Generic ( 1 )
15:31:51.0460 0x4154 Detect skipped due to KSN trusted
15:31:51.0460 0x4154 ASGT - ok
15:31:51.0569 0x4154 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:31:51.0593 0x4154 aspnet_state - ok
15:31:51.0606 0x4154 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
15:31:51.0809 0x4154 AsyncMac - ok
15:31:51.0856 0x4154 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
15:31:51.0871 0x4154 atapi - ok
15:31:51.0924 0x4154 [ ED3A041014FBBFDC23D6C04F9C7A5D79, A039D8F4C0EA2101898A253E13DFED5FA8500C412ACC47835415E27C9BD068FF ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:31:51.0986 0x4154 AtiHDAudioService - detected UnsignedFile.Multi.Generic ( 1 )
15:31:58.0092 0x4154 Detect skipped due to KSN trusted
15:31:58.0092 0x4154 AtiHDAudioService - ok
15:31:58.0466 0x4154 [ 0B45C18B0F3EE996D25BAA4E74884B83, 9E9CE2E02A4E4BF8A87870EF23F8B7D6762785EE9959A64DF45E67B30DE3B63C ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
15:31:58.0772 0x4154 atikmdag - ok
15:31:58.0827 0x4154 [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie C:\Windows\system32\drivers\AtiPcie64.sys
15:31:58.0837 0x4154 AtiPcie - ok
15:31:58.0901 0x4154 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:31:58.0990 0x4154 AudioEndpointBuilder - ok
15:31:59.0033 0x4154 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv C:\Windows\System32\Audiosrv.dll
15:31:59.0067 0x4154 AudioSrv - ok
15:31:59.0135 0x4154 [ 03C6DEB5C74C8140C2167677DBE2F79A, D5C727B007C5B486DECE1A1B83D8155299DD7CB46DC8208CE9185C5BAE5CC33A ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
15:31:59.0160 0x4154 avgntflt - ok
15:31:59.0175 0x4154 [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
15:31:59.0192 0x4154 avipbb - ok
15:31:59.0318 0x4154 [ 6C4B9A2FF6924405E9ABFB558049D4DD, 9AB314B9ECF41832589726556A93CEAAE2AE774B1738A46A027E833B73A72118 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
15:31:59.0357 0x4154 Avira.ServiceHost - ok
15:31:59.0367 0x4154 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
15:31:59.0382 0x4154 avkmgr - ok
15:31:59.0481 0x4154 [ C6F4C466B654C1BE98AF31418BB5AC30, 62AA4456F8E22A6E508EB44DE4309615057117AAF923C13BBED15AA39630E76B ] AVM WLAN Connection Service C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
15:31:59.0541 0x4154 AVM WLAN Connection Service - detected UnsignedFile.Multi.Generic ( 1 )
15:32:05.0667 0x4154 Detect skipped due to KSN trusted
15:32:05.0668 0x4154 AVM WLAN Connection Service - ok
15:32:05.0716 0x4154 [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject C:\Windows\system32\drivers\avmeject.sys
15:32:05.0742 0x4154 avmeject - ok
15:32:05.0793 0x4154 [ 080860E03F0219AF0A0377A02292741F, F0A151509BFEBFE639CC15388847EB2EDA298CFAE0AC4A1358A1472F42320249 ] avnetflt C:\Windows\system32\DRIVERS\avnetflt.sys
15:32:05.0806 0x4154 avnetflt - ok
15:32:05.0853 0x4154 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
15:32:05.0918 0x4154 AxInstSV - ok
15:32:05.0948 0x4154 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
15:32:06.0010 0x4154 b06bdrv - ok
15:32:06.0034 0x4154 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
15:32:06.0069 0x4154 b57nd60a - ok
15:32:06.0096 0x4154 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
15:32:06.0166 0x4154 BDESVC - ok
15:32:06.0183 0x4154 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
15:32:06.0247 0x4154 Beep - ok
15:32:06.0383 0x4154 [ 12A7660F0666033B98510A1C45EE0C34, 280350B3E960479A0CE4848916804950CF241846162955EB9D12E725CFF0ADD7 ] BEService C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
15:32:06.0450 0x4154 BEService - ok
15:32:06.0484 0x4154 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
15:32:06.0552 0x4154 BFE - ok
15:32:06.0617 0x4154 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
15:32:06.0770 0x4154 BITS - ok
15:32:06.0799 0x4154 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
15:32:06.0832 0x4154 blbdrive - ok
15:32:06.0858 0x4154 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
15:32:06.0880 0x4154 bowser - ok
15:32:06.0892 0x4154 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
15:32:06.0932 0x4154 BrFiltLo - ok
15:32:06.0948 0x4154 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
15:32:06.0964 0x4154 BrFiltUp - ok
15:32:07.0010 0x4154 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
15:32:07.0043 0x4154 Browser - ok
15:32:07.0062 0x4154 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
15:32:07.0120 0x4154 Brserid - ok
15:32:07.0128 0x4154 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
15:32:07.0169 0x4154 BrSerWdm - ok
15:32:07.0173 0x4154 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
15:32:07.0197 0x4154 BrUsbMdm - ok
15:32:07.0218 0x4154 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
15:32:07.0232 0x4154 BrUsbSer - ok
15:32:07.0247 0x4154 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
15:32:07.0279 0x4154 BTHMODEM - ok
15:32:07.0301 0x4154 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
15:32:07.0338 0x4154 bthserv - ok
15:32:07.0355 0x4154 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
15:32:07.0394 0x4154 cdfs - ok
15:32:07.0409 0x4154 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
15:32:07.0428 0x4154 cdrom - ok
15:32:07.0462 0x4154 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
15:32:07.0521 0x4154 CertPropSvc - ok
15:32:07.0529 0x4154 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
15:32:07.0551 0x4154 circlass - ok
15:32:07.0594 0x4154 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS C:\Windows\system32\CLFS.sys
15:32:07.0617 0x4154 CLFS - ok
15:32:07.0702 0x4154 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:32:07.0725 0x4154 clr_optimization_v2.0.50727_32 - ok
15:32:07.0798 0x4154 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:32:07.0814 0x4154 clr_optimization_v2.0.50727_64 - ok
15:32:07.0881 0x4154 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:32:07.0927 0x4154 clr_optimization_v4.0.30319_32 - ok
15:32:07.0957 0x4154 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:32:07.0990 0x4154 clr_optimization_v4.0.30319_64 - ok
15:32:08.0008 0x4154 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
15:32:08.0023 0x4154 CmBatt - ok
15:32:08.0066 0x4154 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
15:32:08.0078 0x4154 cmdide - ok
15:32:08.0170 0x4154 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG C:\Windows\system32\Drivers\cng.sys
15:32:08.0220 0x4154 CNG - ok
15:32:08.0256 0x4154 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
15:32:08.0268 0x4154 Compbatt - ok
15:32:08.0281 0x4154 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
15:32:08.0297 0x4154 CompositeBus - ok
15:32:08.0302 0x4154 COMSysApp - ok
15:32:08.0313 0x4154 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
15:32:08.0324 0x4154 crcdisk - ok
15:32:08.0361 0x4154 [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc C:\Windows\system32\cryptsvc.dll
15:32:08.0393 0x4154 CryptSvc - ok
15:32:08.0496 0x4154 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
15:32:08.0551 0x4154 DcomLaunch - ok
15:32:08.0594 0x4154 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
15:32:08.0638 0x4154 defragsvc - ok
15:32:08.0654 0x4154 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
15:32:08.0709 0x4154 DfsC - ok
15:32:08.0759 0x4154 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
15:32:08.0813 0x4154 Dhcp - ok
15:32:08.0880 0x4154 [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack C:\Windows\system32\diagtrack.dll
15:32:08.0961 0x4154 DiagTrack - ok
15:32:08.0974 0x4154 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
15:32:09.0007 0x4154 discache - ok
15:32:09.0011 0x4154 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys
15:32:09.0026 0x4154 Disk - ok
15:32:09.0076 0x4154 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
15:32:09.0107 0x4154 Dnscache - ok
15:32:09.0142 0x4154 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
15:32:09.0195 0x4154 dot3svc - ok
15:32:09.0223 0x4154 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
15:32:09.0265 0x4154 DPS - ok
15:32:09.0299 0x4154 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
15:32:09.0328 0x4154 drmkaud - ok
15:32:09.0408 0x4154 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
15:32:09.0457 0x4154 DXGKrnl - ok
15:32:09.0463 0x4154 EagleX64 - ok
15:32:09.0515 0x4154 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
15:32:09.0602 0x4154 EapHost - ok
15:32:09.0770 0x4154 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
15:32:09.0895 0x4154 ebdrv - ok
15:32:09.0935 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] EFS C:\Windows\System32\lsass.exe
15:32:09.0980 0x4154 EFS - ok
15:32:10.0097 0x4154 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
15:32:10.0179 0x4154 ehRecvr - ok
15:32:10.0218 0x4154 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
15:32:10.0250 0x4154 ehSched - ok
15:32:10.0300 0x4154 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
15:32:10.0328 0x4154 elxstor - ok
15:32:10.0345 0x4154 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
15:32:10.0362 0x4154 ErrDev - ok
15:32:10.0395 0x4154 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
15:32:10.0464 0x4154 EventSystem - ok
15:32:10.0489 0x4154 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
15:32:10.0527 0x4154 exfat - ok
15:32:10.0543 0x4154 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
15:32:10.0582 0x4154 fastfat - ok
15:32:10.0639 0x4154 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
15:32:10.0690 0x4154 Fax - ok
15:32:10.0704 0x4154 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
15:32:10.0719 0x4154 fdc - ok
15:32:10.0735 0x4154 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
15:32:10.0769 0x4154 fdPHost - ok
15:32:10.0785 0x4154 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
15:32:10.0843 0x4154 FDResPub - ok
15:32:10.0869 0x4154 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
15:32:10.0883 0x4154 FileInfo - ok
15:32:10.0904 0x4154 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
15:32:10.0939 0x4154 Filetrace - ok
15:32:10.0951 0x4154 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
15:32:10.0965 0x4154 flpydisk - ok
15:32:10.0987 0x4154 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
15:32:11.0007 0x4154 FltMgr - ok
15:32:11.0064 0x4154 [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache C:\Windows\system32\FntCache.dll
15:32:11.0144 0x4154 FontCache - ok
15:32:11.0224 0x4154 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:32:11.0238 0x4154 FontCache3.0.0.0 - ok
15:32:11.0244 0x4154 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
15:32:11.0257 0x4154 FsDepends - ok
15:32:11.0294 0x4154 [ B16B626996C74B564005BA855C5DEE90, B432C669EB610C262B18F3F8308EEE1B910DE7F7BC2A8EB5483419DC52A07AE1 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
15:32:11.0330 0x4154 fssfltr - ok
15:32:11.0480 0x4154 [ 812E1BA5C52A78F13EA6AA10DF708B1D, CF1C4D8E072CF0D66C977DFA4C852E5CE757843BEAF5D29454D26A9AC5766E61 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
15:32:11.0559 0x4154 fsssvc - ok
15:32:11.0572 0x4154 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
15:32:11.0583 0x4154 Fs_Rec - ok
15:32:11.0642 0x4154 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
15:32:11.0675 0x4154 fvevol - ok
15:32:11.0779 0x4154 [ 4632BB93B668004965246D7911E2DD05, B4CCFFC488C94A0D82A6CC11A9BA2616B339217164719EABA3CF59913EA899FB ] fwlanusb4 C:\Windows\system32\DRIVERS\fwlanusb4.sys
15:32:11.0863 0x4154 fwlanusb4 - ok
15:32:11.0883 0x4154 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
15:32:11.0898 0x4154 gagp30kx - ok
15:32:12.0063 0x4154 [ B17D0BDBDDF4BD4709D6CA3147D409C0, B83F0D9891190226D2D7D50DE27B61B5FC04B6942C37B78856C45B3309527D9B ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
15:32:12.0101 0x4154 GfExperienceService - ok
15:32:12.0141 0x4154 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
15:32:12.0213 0x4154 gpsvc - ok
15:32:12.0289 0x4154 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:32:12.0315 0x4154 gupdate - ok
15:32:12.0331 0x4154 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:32:12.0346 0x4154 gupdatem - ok
15:32:12.0371 0x4154 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
15:32:12.0381 0x4154 hamachi - ok
15:32:12.0491 0x4154 [ 2ADED86ED9B92885378467CFEE9ABE8F, 78703B6E51C5E7DCFFBA9F15C404DB2A0054FE8F2F92B7AD470B08498995712A ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
15:32:12.0559 0x4154 Hamachi2Svc - ok
15:32:12.0605 0x4154 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
15:32:12.0625 0x4154 hcw85cir - ok
15:32:12.0647 0x4154 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:32:12.0673 0x4154 HdAudAddService - ok
15:32:12.0683 0x4154 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
15:32:12.0719 0x4154 HDAudBus - ok
15:32:12.0737 0x4154 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
15:32:12.0776 0x4154 HidBatt - ok
15:32:12.0795 0x4154 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
15:32:12.0837 0x4154 HidBth - ok
15:32:12.0868 0x4154 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
15:32:12.0904 0x4154 HidIr - ok
15:32:12.0943 0x4154 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
15:32:12.0980 0x4154 hidserv - ok
15:32:13.0023 0x4154 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
15:32:13.0051 0x4154 HidUsb - ok
15:32:13.0093 0x4154 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
15:32:13.0142 0x4154 hkmsvc - ok
15:32:13.0192 0x4154 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:32:13.0257 0x4154 HomeGroupListener - ok
15:32:13.0299 0x4154 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:32:13.0334 0x4154 HomeGroupProvider - ok
15:32:13.0358 0x4154 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
15:32:13.0371 0x4154 HpSAMD - ok
15:32:13.0455 0x4154 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\Windows\system32\drivers\HTTP.sys
15:32:13.0543 0x4154 HTTP - ok
15:32:13.0562 0x4154 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
15:32:13.0574 0x4154 hwpolicy - ok
15:32:13.0589 0x4154 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
15:32:13.0619 0x4154 i8042prt - ok
15:32:13.0659 0x4154 [ 8180A2392E732E8871589B54FAB6991F, 20FF47D16702925531AF55402A29062F359DD61D029690A02A5C191494B4E302 ] iaStor C:\Windows\system32\drivers\iaStor.sys
15:32:13.0689 0x4154 iaStor - ok
15:32:13.0711 0x4154 [ 3A2C1EBCC6E5A7540AF36C36208F87D2, 8B97521CAF158B74595286BA969024D5AC89CC40650482DB95EF654DC71CFCF3 ] iaStorA C:\Windows\system32\drivers\iaStorA.sys
15:32:13.0736 0x4154 iaStorA - ok
15:32:13.0834 0x4154 [ 1200D69DA2328EA64CDC448F08D5E57B, D81D6CBB6A4F61C8B134B06AFCEF5712524340CB972D9D6077912F8EDBB66C5E ] iaStorF C:\Windows\system32\drivers\iaStorF.sys
15:32:13.0870 0x4154 iaStorF - ok
15:32:13.0925 0x4154 [ E6A6A5462E693D63F7C6729945C48E9E, F6D278092F5CBF3A6C075839D4C937818A2C962884BF18C21C54243CC3AD6973 ] iaStorS C:\Windows\system32\drivers\iaStorS.sys
15:32:14.0018 0x4154 iaStorS - ok
15:32:14.0049 0x4154 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
15:32:14.0087 0x4154 iaStorV - ok
15:32:14.0178 0x4154 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:32:14.0226 0x4154 idsvc - ok
15:32:14.0231 0x4154 IEEtwCollectorService - ok
15:32:14.0245 0x4154 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
15:32:14.0258 0x4154 iirsp - ok
15:32:14.0316 0x4154 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
15:32:14.0364 0x4154 IKEEXT - ok
15:32:14.0531 0x4154 [ 8CAA2A543155675D09B0D5239E31EC99, 033CF96E110136A59E01C4D26FE3681862C0993938959059A37A34DC1C0E1D49 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:32:14.0665 0x4154 IntcAzAudAddService - ok
15:32:14.0712 0x4154 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
15:32:14.0741 0x4154 intelide - ok
15:32:14.0757 0x4154 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\drivers\intelppm.sys
15:32:14.0774 0x4154 intelppm - ok
15:32:14.0822 0x4154 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
15:32:14.0857 0x4154 IPBusEnum - ok
15:32:14.0870 0x4154 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:32:14.0906 0x4154 IpFilterDriver - ok
15:32:14.0981 0x4154 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
15:32:15.0028 0x4154 iphlpsvc - ok
15:32:15.0041 0x4154 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
15:32:15.0070 0x4154 IPMIDRV - ok
15:32:15.0094 0x4154 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
15:32:15.0152 0x4154 IPNAT - ok
15:32:15.0169 0x4154 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
15:32:15.0187 0x4154 IRENUM - ok
15:32:15.0201 0x4154 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
15:32:15.0214 0x4154 isapnp - ok
15:32:15.0263 0x4154 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
15:32:15.0303 0x4154 iScsiPrt - ok
15:32:15.0323 0x4154 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
15:32:15.0338 0x4154 kbdclass - ok
15:32:15.0342 0x4154 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
15:32:15.0364 0x4154 kbdhid - ok
15:32:15.0379 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] KeyIso C:\Windows\system32\lsass.exe
15:32:15.0408 0x4154 KeyIso - ok
15:32:15.0451 0x4154 [ 3A8C03156C3E31E70EF84E48CA179B46, E25E43D53BB6EE1B5F34C95B4FAD111B37A36367B8D047B10FC614DEE13658E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
15:32:15.0465 0x4154 KSecDD - ok
15:32:15.0515 0x4154 [ C6330F7C2E92A00E6773E82F79078AFC, D8B851BF4FCE85F2A269F0B46BC7EC5A118FCFDACE8460E7B54C1A7CE306774A ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
15:32:15.0550 0x4154 KSecPkg - ok
15:32:15.0563 0x4154 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
15:32:15.0627 0x4154 ksthunk - ok
15:32:15.0737 0x4154 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
15:32:15.0805 0x4154 KtmRm - ok
15:32:15.0862 0x4154 [ B8040D3B97B16B89701E31A17353856C, 41690ACB26536B0AA1CC3B5388F824C9C1CD9648957C8488BAE5F3D57BEE3D85 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
15:32:15.0877 0x4154 L1C - ok
15:32:15.0949 0x4154 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
15:32:15.0992 0x4154 LanmanServer - ok
15:32:16.0048 0x4154 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:32:16.0109 0x4154 LanmanWorkstation - ok
15:32:16.0130 0x4154 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
15:32:16.0192 0x4154 lltdio - ok
15:32:16.0267 0x4154 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
15:32:16.0312 0x4154 lltdsvc - ok
15:32:16.0351 0x4154 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
15:32:16.0390 0x4154 lmhosts - ok
15:32:16.0443 0x4154 [ D6BF6FD055BD719F3D62E51B90857159, A7777D18E404164B4DA531AD94D2A712D9CC6A9288795B7388037752A558E96F ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
15:32:16.0463 0x4154 LMIGuardianSvc - ok
15:32:16.0487 0x4154 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
15:32:16.0503 0x4154 LSI_FC - ok
15:32:16.0509 0x4154 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
15:32:16.0523 0x4154 LSI_SAS - ok
15:32:16.0533 0x4154 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
15:32:16.0548 0x4154 LSI_SAS2 - ok
15:32:16.0556 0x4154 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
15:32:16.0571 0x4154 LSI_SCSI - ok
15:32:16.0585 0x4154 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
15:32:16.0640 0x4154 luafv - ok
15:32:16.0713 0x4154 [ 47701ECA633574E122687693B5C5D35C, 1DB12767462347504956450FAD0D90B6E682E2E8959A6C5DF3792C3C3DA289B1 ] mbamchameleon C:\Windows\system32\drivers\mbamchameleon.sys
15:32:16.0725 0x4154 mbamchameleon - ok
15:32:16.0798 0x4154 [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
15:32:16.0810 0x4154 MBAMProtector - ok
15:32:16.0910 0x4154 [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
15:32:16.0969 0x4154 MBAMService - ok
15:32:17.0014 0x4154 [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
15:32:17.0028 0x4154 MBAMSwissArmy - ok
15:32:17.0049 0x4154 [ D61070CFAD43038DC56AEAD9BFE9CE2A, BD77AEF60E7FD2015CB14A464799304359547146C14A47F8D25274ACFA2E42D5 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
15:32:17.0061 0x4154 MBAMWebAccessControl - ok
15:32:17.0088 0x4154 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
15:32:17.0106 0x4154 Mcx2Svc - ok
15:32:17.0120 0x4154 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
15:32:17.0132 0x4154 megasas - ok
15:32:17.0151 0x4154 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
15:32:17.0169 0x4154 MegaSR - ok
15:32:17.0207 0x4154 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
15:32:17.0241 0x4154 MMCSS - ok
15:32:17.0255 0x4154 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
15:32:17.0291 0x4154 Modem - ok
15:32:17.0328 0x4154 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
15:32:17.0344 0x4154 monitor - ok
15:32:17.0350 0x4154 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
15:32:17.0363 0x4154 mouclass - ok
15:32:17.0374 0x4154 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
15:32:17.0390 0x4154 mouhid - ok
15:32:17.0407 0x4154 [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
15:32:17.0423 0x4154 mountmgr - ok
15:32:17.0452 0x4154 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
15:32:17.0468 0x4154 mpio - ok
15:32:17.0485 0x4154 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
15:32:17.0521 0x4154 mpsdrv - ok
15:32:17.0551 0x4154 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
15:32:17.0618 0x4154 MpsSvc - ok
15:32:17.0669 0x4154 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
15:32:17.0740 0x4154 MRxDAV - ok
15:32:17.0794 0x4154 [ ACB6782973BD93760D597FC7BB37E692, 9B6EC2858D236DCE61FD5E0247F4D947A5DC484C9C0AABFDAF8270ABA392E787 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
15:32:17.0848 0x4154 mrxsmb - ok
15:32:17.0887 0x4154 [ 262BF7BB7D0E44CFAA9B12A1E0A6EDF1, CCC3A4CE929C7C8B07C1038BBE8425590CE14F5C37E1D5608978A3AD2F41519C ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:32:17.0926 0x4154 mrxsmb10 - ok
15:32:17.0968 0x4154 [ 8C0376974AA28398FF501E78C04ACB30, 81CE67BE933F67F760A72BF9B581F33BC151D98970765FE4425450A2EF450409 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:32:18.0008 0x4154 mrxsmb20 - ok
15:32:18.0047 0x4154 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
15:32:18.0060 0x4154 msahci - ok
15:32:18.0114 0x4154 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
15:32:18.0138 0x4154 msdsm - ok
15:32:18.0176 0x4154 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
15:32:18.0207 0x4154 MSDTC - ok
15:32:18.0239 0x4154 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
15:32:18.0277 0x4154 Msfs - ok
15:32:18.0313 0x4154 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
15:32:18.0345 0x4154 mshidkmdf - ok
15:32:18.0361 0x4154 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
15:32:18.0372 0x4154 msisadrv - ok
15:32:18.0418 0x4154 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
15:32:18.0456 0x4154 MSiSCSI - ok
15:32:18.0460 0x4154 msiserver - ok
15:32:18.0474 0x4154 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
15:32:18.0528 0x4154 MSKSSRV - ok
15:32:18.0546 0x4154 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
15:32:18.0596 0x4154 MSPCLOCK - ok
15:32:18.0621 0x4154 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
15:32:18.0655 0x4154 MSPQM - ok
15:32:18.0681 0x4154 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
15:32:18.0704 0x4154 MsRPC - ok
15:32:18.0721 0x4154 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
15:32:18.0734 0x4154 mssmbios - ok
15:32:18.0739 0x4154 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
15:32:18.0794 0x4154 MSTEE - ok
15:32:18.0822 0x4154 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
15:32:18.0836 0x4154 MTConfig - ok
15:32:18.0841 0x4154 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
15:32:18.0854 0x4154 Mup - ok
15:32:18.0916 0x4154 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
15:32:19.0000 0x4154 napagent - ok
15:32:19.0079 0x4154 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
15:32:19.0111 0x4154 NativeWifiP - ok
15:32:19.0209 0x4154 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
15:32:19.0245 0x4154 NDIS - ok
15:32:19.0260 0x4154 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
15:32:19.0293 0x4154 NdisCap - ok
15:32:19.0310 0x4154 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
15:32:19.0359 0x4154 NdisTapi - ok
15:32:19.0385 0x4154 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
15:32:19.0440 0x4154 Ndisuio - ok
15:32:19.0463 0x4154 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
15:32:19.0500 0x4154 NdisWan - ok
15:32:19.0509 0x4154 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
15:32:19.0546 0x4154 NDProxy - ok
15:32:19.0561 0x4154 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
15:32:19.0596 0x4154 NetBIOS - ok
15:32:19.0674 0x4154 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
15:32:20.0086 0x4154 NetBT - ok
15:32:20.0115 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] Netlogon C:\Windows\system32\lsass.exe
15:32:20.0154 0x4154 Netlogon - ok
15:32:20.0182 0x4154 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
15:32:20.0228 0x4154 Netman - ok
15:32:20.0259 0x4154 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0276 0x4154 NetMsmqActivator - ok
15:32:20.0293 0x4154 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0309 0x4154 NetPipeActivator - ok
15:32:20.0341 0x4154 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
15:32:20.0384 0x4154 netprofm - ok
15:32:20.0392 0x4154 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0409 0x4154 NetTcpActivator - ok
15:32:20.0415 0x4154 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0430 0x4154 NetTcpPortSharing - ok
15:32:20.0468 0x4154 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
15:32:20.0481 0x4154 nfrd960 - ok
15:32:20.0537 0x4154 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
15:32:20.0569 0x4154 NlaSvc - ok
15:32:20.0586 0x4154 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
15:32:20.0642 0x4154 Npfs - ok
15:32:20.0667 0x4154 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
15:32:20.0701 0x4154 nsi - ok
15:32:20.0717 0x4154 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
15:32:20.0777 0x4154 nsiproxy - ok
15:32:20.0878 0x4154 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
15:32:20.0954 0x4154 Ntfs - ok
15:32:20.0974 0x4154 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
15:32:21.0006 0x4154 Null - ok
15:32:21.0038 0x4154 [ EA4F586EC10A09E2514D03D3E7AB89BF, D9799CC66AEAFB3A83CE82BBC20082F5E3370AB7942B8426D71AA91B1FE2B5F7 ] NVFLASH C:\Windows\system32\drivers\nvflash.sys
15:32:21.0071 0x4154 NVFLASH - ok
15:32:21.0101 0x4154 [ B9E5A80F646DDFEF158773722A466EA3, 028979FE600D17DA70445F44D81FAE4EDA3478FCC81FA5506133CCAC37C4E2BF ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
15:32:21.0119 0x4154 NVHDA - ok
15:32:21.0485 0x4154 [ 36BAB895547EA82892292F05FA02142E, 224D165CE3ECB0EF35C18D09507AB43ADC4A7AD12E507F31230012943C83BEDB ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:32:21.0914 0x4154 nvlddmkm - ok
15:32:22.0096 0x4154 [ C2909BD26906E1D05D77B1D48B48E94A, 5642571FFDBDC63F0E3B1477337103517ABF7C50EBEDA63EF8E162E44C7B2538 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
15:32:22.0150 0x4154 NvNetworkService - ok
15:32:22.0177 0x4154 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
15:32:22.0192 0x4154 nvraid - ok
15:32:22.0203 0x4154 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
15:32:22.0219 0x4154 nvstor - ok
15:32:22.0337 0x4154 [ 60C9EC53F9CFBFBE38E9C79B88A6B19F, D89D6C62AB0A3224D850B639E4D7D7265BF183BEE0C60F27FEDDF0194504B078 ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
15:32:22.0350 0x4154 NvStreamKms - ok
15:32:22.0539 0x4154 [ 5A773713C332F8760ABB915C24675E8F, DA453D341529B34188D5B235B17BD0FDAE84129539FC212F34B9FCC42DC0549C ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
15:32:22.0682 0x4154 NvStreamSvc - ok
15:32:22.0763 0x4154 [ 6B245B7F96F901891636814B5A7A9088, BC6DF13929AEBA2CF5DC8449FF9D5F73497DF8E9760AFA93B56543D86BE940C3 ] nvsvc C:\Windows\system32\nvvsvc.exe
15:32:22.0798 0x4154 nvsvc - ok
15:32:22.0826 0x4154 [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
15:32:22.0840 0x4154 nvvad_WaveExtensible - ok
15:32:22.0850 0x4154 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
15:32:22.0864 0x4154 nv_agp - ok
15:32:22.0875 0x4154 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
15:32:22.0905 0x4154 ohci1394 - ok
15:32:23.0021 0x4154 [ 29B093BA6759118DB14AF41026385E03, 660176D122344A79E52FFD9FE3D32D1967D9B22BC4AD76549D839B09693D0713 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
15:32:23.0109 0x4154 Origin Client Service - ok
15:32:23.0131 0x4154 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
15:32:23.0169 0x4154 p2pimsvc - ok
15:32:23.0199 0x4154 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
15:32:23.0226 0x4154 p2psvc - ok
15:32:23.0245 0x4154 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys
15:32:23.0266 0x4154 Parport - ok
15:32:23.0304 0x4154 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
15:32:23.0320 0x4154 partmgr - ok
15:32:23.0366 0x4154 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc C:\Windows\System32\pcasvc.dll
15:32:23.0424 0x4154 PcaSvc - ok
15:32:23.0443 0x4154 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
15:32:23.0461 0x4154 pci - ok
15:32:23.0506 0x4154 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
15:32:23.0520 0x4154 pciide - ok
15:32:23.0562 0x4154 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
15:32:23.0579 0x4154 pcmcia - ok
15:32:23.0592 0x4154 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
15:32:23.0606 0x4154 pcw - ok
15:32:23.0654 0x4154 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
15:32:23.0705 0x4154 PEAUTH - ok
15:32:23.0803 0x4154 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
15:32:23.0837 0x4154 PerfHost - ok
15:32:23.0904 0x4154 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
15:32:24.0015 0x4154 pla - ok
15:32:24.0057 0x4154 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
15:32:24.0193 0x4154 PlugPlay - ok
15:32:24.0239 0x4154 PnkBstrA - ok
15:32:24.0326 0x4154 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
15:32:24.0421 0x4154 PNRPAutoReg - ok
15:32:24.0453 0x4154 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
15:32:24.0474 0x4154 PNRPsvc - ok
15:32:24.0551 0x4154 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
15:32:24.0618 0x4154 PolicyAgent - ok
15:32:24.0676 0x4154 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
15:32:24.0713 0x4154 Power - ok
15:32:24.0754 0x4154 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
15:32:24.0803 0x4154 PptpMiniport - ok
15:32:24.0843 0x4154 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
15:32:24.0879 0x4154 Processor - ok
15:32:24.0912 0x4154 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
15:32:24.0938 0x4154 ProfSvc - ok
15:32:24.0958 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:32:24.0971 0x4154 ProtectedStorage - ok
15:32:24.0989 0x4154 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
15:32:25.0025 0x4154 Psched - ok
15:32:25.0091 0x4154 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
15:32:25.0227 0x4154 ql2300 - ok
15:32:25.0258 0x4154 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
15:32:25.0276 0x4154 ql40xx - ok
15:32:25.0319 0x4154 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
15:32:25.0346 0x4154 QWAVE - ok
15:32:25.0361 0x4154 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
15:32:25.0383 0x4154 QWAVEdrv - ok
15:32:25.0392 0x4154 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
15:32:25.0447 0x4154 RasAcd - ok
15:32:25.0482 0x4154 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
15:32:25.0517 0x4154 RasAgileVpn - ok
15:32:25.0537 0x4154 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
15:32:25.0574 0x4154 RasAuto - ok
15:32:25.0597 0x4154 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
15:32:25.0632 0x4154 Rasl2tp - ok
15:32:25.0660 0x4154 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
15:32:25.0731 0x4154 RasMan - ok
15:32:25.0758 0x4154 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
15:32:25.0811 0x4154 RasPppoe - ok
15:32:25.0831 0x4154 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
15:32:25.0887 0x4154 RasSstp - ok
15:32:25.0990 0x4154 [ 170C5DE900F60768C380ECD8A812512F, BFD085C32CF25E8261EF4BCFA5903A496785BCDA08037F4EB580BBDEDF42B656 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
15:32:26.0005 0x4154 Razer Game Scanner Service - ok
15:32:26.0027 0x4154 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
15:32:26.0069 0x4154 rdbss - ok
15:32:26.0088 0x4154 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
15:32:26.0104 0x4154 rdpbus - ok
15:32:26.0117 0x4154 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
15:32:26.0157 0x4154 RDPCDD - ok
15:32:26.0173 0x4154 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
15:32:26.0206 0x4154 RDPENCDD - ok
15:32:26.0212 0x4154 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
15:32:26.0244 0x4154 RDPREFMP - ok
15:32:26.0331 0x4154 [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:32:26.0370 0x4154 RdpVideoMiniport - ok
15:32:26.0419 0x4154 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
15:32:26.0448 0x4154 RDPWD - ok
15:32:26.0474 0x4154 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
15:32:26.0491 0x4154 rdyboost - ok
15:32:26.0527 0x4154 Realtek11nSU - ok
15:32:26.0553 0x4154 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
15:32:26.0612 0x4154 RemoteAccess - ok
15:32:26.0643 0x4154 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
15:32:26.0705 0x4154 RemoteRegistry - ok
15:32:26.0727 0x4154 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
15:32:26.0762 0x4154 RpcEptMapper - ok
15:32:26.0801 0x4154 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
15:32:26.0820 0x4154 RpcLocator - ok
15:32:26.0841 0x4154 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
15:32:26.0892 0x4154 RpcSs - ok
15:32:26.0905 0x4154 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
15:32:26.0941 0x4154 rspndr - ok
15:32:26.0945 0x4154 RTL8192cu - ok
15:32:26.0949 0x4154 RTL8192su - ok
15:32:26.0990 0x4154 [ 2ADA9F126235A56EDC9F90C888E4D142, 4CE692D045F6F8A7A1D309376648E81066F6EBAF94580F2ED0B0FFC1FE6FE44E ] RZMAELSTROMVADService C:\Windows\system32\drivers\RzMaelstromVAD.sys
15:32:27.0039 0x4154 RZMAELSTROMVADService - ok
15:32:27.0078 0x4154 [ 0C90E6CEA576095888E779E5BD9DD060, 8A13A92D5A8E577E2B919CC879FA8CFA1FAD0A6BFF0CF4FCC59B8E74AB22A673 ] rzpmgrk C:\Windows\system32\drivers\rzpmgrk.sys
15:32:27.0094 0x4154 rzpmgrk - ok
15:32:27.0139 0x4154 [ 288471F132C7249F598032D03575F083, 9E3430D5E0E93BC4A5DCCC985053912065E65722BFC2EAF431BC1DA91410434C ] rzpnk C:\Windows\system32\drivers\rzpnk.sys
15:32:27.0159 0x4154 rzpnk - ok
15:32:27.0192 0x4154 [ ED82FB8A5330D728193644D7F136B865, D5D3DFD1934B6EF373C20A346D130EEFFB6B493045B6A89EA2EBDF45B05F5372 ] RZSURROUNDVADService C:\Windows\system32\drivers\RzSurroundVAD.sys
15:32:27.0209 0x4154 RZSURROUNDVADService - ok
15:32:27.0225 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] SamSs C:\Windows\system32\lsass.exe
15:32:27.0238 0x4154 SamSs - ok
15:32:27.0253 0x4154 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
15:32:27.0267 0x4154 sbp2port - ok
15:32:27.0308 0x4154 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
15:32:27.0362 0x4154 SCardSvr - ok
15:32:27.0387 0x4154 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
15:32:27.0441 0x4154 scfilter - ok
15:32:27.0551 0x4154 [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule C:\Windows\system32\schedsvc.dll
15:32:27.0624 0x4154 Schedule - ok
15:32:27.0663 0x4154 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
15:32:27.0696 0x4154 SCPolicySvc - ok
15:32:27.0709 0x4154 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
15:32:27.0735 0x4154 SDRSVC - ok
15:32:27.0747 0x4154 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
15:32:27.0819 0x4154 secdrv - ok
15:32:27.0834 0x4154 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
15:32:27.0909 0x4154 seclogon - ok
15:32:27.0938 0x4154 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
15:32:28.0001 0x4154 SENS - ok
15:32:28.0008 0x4154 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
15:32:28.0043 0x4154 SensrSvc - ok
15:32:28.0066 0x4154 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\drivers\serenum.sys
15:32:28.0081 0x4154 Serenum - ok
15:32:28.0098 0x4154 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\drivers\serial.sys
15:32:28.0126 0x4154 Serial - ok
15:32:28.0155 0x4154 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
15:32:28.0216 0x4154 sermouse - ok
15:32:28.0243 0x4154 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
15:32:28.0288 0x4154 SessionEnv - ok
15:32:28.0313 0x4154 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
15:32:28.0329 0x4154 sffdisk - ok
15:32:28.0356 0x4154 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
15:32:28.0397 0x4154 sffp_mmc - ok
15:32:28.0435 0x4154 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
15:32:28.0453 0x4154 sffp_sd - ok
15:32:28.0497 0x4154 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
15:32:28.0511 0x4154 sfloppy - ok
15:32:28.0561 0x4154 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
15:32:28.0606 0x4154 SharedAccess - ok
15:32:28.0670 0x4154 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:32:28.0730 0x4154 ShellHWDetection - ok
15:32:28.0757 0x4154 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
15:32:28.0769 0x4154 SiSRaid2 - ok
15:32:28.0778 0x4154 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
15:32:28.0792 0x4154 SiSRaid4 - ok
15:32:28.0838 0x4154 [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
15:32:28.0860 0x4154 SkypeUpdate - ok
15:32:28.0879 0x4154 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
15:32:28.0917 0x4154 Smb - ok
15:32:28.0938 0x4154 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
15:32:28.0953 0x4154 SNMPTRAP - ok
15:32:28.0969 0x4154 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
15:32:28.0981 0x4154 spldr - ok
15:32:29.0040 0x4154 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
15:32:29.0114 0x4154 Spooler - ok
15:32:29.0233 0x4154 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
15:32:29.0393 0x4154 sppsvc - ok
15:32:29.0451 0x4154 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
15:32:29.0511 0x4154 sppuinotify - ok
15:32:29.0682 0x4154 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
15:32:29.0728 0x4154 srv - ok
15:32:29.0757 0x4154 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
15:32:29.0782 0x4154 srv2 - ok
15:32:29.0795 0x4154 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
15:32:29.0813 0x4154 srvnet - ok
15:32:29.0834 0x4154 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
15:32:29.0873 0x4154 SSDPSRV - ok
15:32:29.0889 0x4154 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
15:32:29.0927 0x4154 SstpSvc - ok
15:32:30.0020 0x4154 [ D31201BD8782752BD69DBE1E5DDF9AC5, 98B72690B4E6CC1B694C655DD31CB1FB56B76B62A32CFB748AF78F4C072D9740 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
15:32:30.0049 0x4154 Steam Client Service - ok
15:32:30.0162 0x4154 [ C368FAF3084E3978462159F1DDAFF54F, F7DD88038E002EF3D2BCA648FE7CF0F92347E901C5F495D8D8E4D24076E895CD ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
15:32:30.0181 0x4154 Stereo Service - ok
15:32:30.0189 0x4154 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
15:32:30.0202 0x4154 stexstor - ok
15:32:30.0262 0x4154 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
15:32:30.0325 0x4154 stisvc - ok
15:32:30.0347 0x4154 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys
15:32:30.0363 0x4154 swenum - ok
15:32:30.0409 0x4154 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
15:32:30.0476 0x4154 swprv - ok
15:32:30.0569 0x4154 [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain C:\Windows\system32\sysmain.dll
15:32:30.0689 0x4154 SysMain - ok
15:32:30.0708 0x4154 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:32:30.0731 0x4154 TabletInputService - ok
15:32:30.0748 0x4154 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
15:32:30.0792 0x4154 TapiSrv - ok
15:32:30.0812 0x4154 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
15:32:30.0871 0x4154 TBS - ok
15:32:30.0968 0x4154 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
15:32:31.0057 0x4154 Tcpip - ok
15:32:31.0118 0x4154 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
15:32:31.0173 0x4154 TCPIP6 - ok
15:32:31.0205 0x4154 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
15:32:31.0236 0x4154 tcpipreg - ok
15:32:31.0254 0x4154 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
15:32:31.0278 0x4154 TDPIPE - ok
15:32:31.0292 0x4154 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
15:32:31.0326 0x4154 TDTCP - ok
15:32:31.0360 0x4154 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys
15:32:31.0392 0x4154 tdx - ok
15:32:31.0650 0x4154 [ C0C121B537DA3AD87481C0502CACE462, E0FC2AC71B60C796DCD03217A510C47425FB7783713FCCC477130E69715D2B8D ] TeamViewer C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
15:32:31.0792 0x4154 TeamViewer - ok
15:32:31.0822 0x4154 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys
15:32:31.0834 0x4154 TermDD - ok
15:32:31.0920 0x4154 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
15:32:31.0993 0x4154 TermService - ok
15:32:32.0022 0x4154 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
15:32:32.0072 0x4154 Themes - ok
15:32:32.0109 0x4154 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
15:32:32.0146 0x4154 THREADORDER - ok
15:32:32.0189 0x4154 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
15:32:32.0229 0x4154 TrkWks - ok
15:32:32.0309 0x4154 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:32:32.0378 0x4154 TrustedInstaller - ok
15:32:32.0428 0x4154 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
15:32:32.0442 0x4154 tssecsrv - ok
15:32:32.0485 0x4154 [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
15:32:32.0515 0x4154 TsUsbFlt - ok
15:32:32.0555 0x4154 [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
15:32:32.0574 0x4154 TsUsbGD - ok
15:32:32.0588 0x4154 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
15:32:32.0644 0x4154 tunnel - ok
15:32:32.0665 0x4154 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
15:32:32.0679 0x4154 uagp35 - ok
15:32:32.0704 0x4154 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
15:32:32.0749 0x4154 udfs - ok
15:32:32.0765 0x4154 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
15:32:32.0788 0x4154 UI0Detect - ok
15:32:32.0807 0x4154 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
15:32:32.0822 0x4154 uliagpkx - ok
15:32:32.0834 0x4154 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
15:32:32.0857 0x4154 umbus - ok
15:32:32.0875 0x4154 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
15:32:32.0893 0x4154 UmPass - ok
15:32:32.0918 0x4154 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
15:32:32.0973 0x4154 upnphost - ok
15:32:33.0023 0x4154 [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
15:32:33.0046 0x4154 USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
15:32:43.0134 0x4154 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
15:32:55.0742 0x4154 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
15:32:55.0768 0x4154 usbaudio - ok
15:32:55.0817 0x4154 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
15:32:55.0881 0x4154 usbccgp - ok
15:32:55.0934 0x4154 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
15:32:55.0967 0x4154 usbcir - ok
15:32:56.0003 0x4154 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
15:32:56.0033 0x4154 usbehci - ok
15:32:56.0079 0x4154 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
15:32:56.0124 0x4154 usbhub - ok
15:32:56.0160 0x4154 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
15:32:56.0175 0x4154 usbohci - ok
15:32:56.0214 0x4154 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
15:32:56.0241 0x4154 usbprint - ok
15:32:56.0264 0x4154 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\drivers\usbscan.sys
15:32:56.0311 0x4154 usbscan - ok
15:32:56.0327 0x4154 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:32:56.0369 0x4154 USBSTOR - ok
15:32:56.0405 0x4154 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
15:32:56.0443 0x4154 usbuhci - ok
15:32:56.0475 0x4154 [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
15:32:56.0493 0x4154 usbvideo - ok
15:32:56.0536 0x4154 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
15:32:56.0594 0x4154 UxSms - ok
15:32:56.0615 0x4154 [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] VaultSvc C:\Windows\system32\lsass.exe
15:32:56.0630 0x4154 VaultSvc - ok
15:32:56.0641 0x4154 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
15:32:56.0653 0x4154 vdrvroot - ok
15:32:56.0682 0x4154 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
15:32:56.0742 0x4154 vds - ok
15:32:56.0762 0x4154 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
15:32:56.0779 0x4154 vga - ok
15:32:56.0793 0x4154 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
15:32:56.0847 0x4154 VgaSave - ok
15:32:56.0874 0x4154 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
15:32:56.0892 0x4154 vhdmp - ok
15:32:56.0938 0x4154 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
15:32:56.0950 0x4154 viaide - ok
15:32:56.0971 0x4154 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:32:56.0984 0x4154 volmgr - ok
15:32:57.0006 0x4154 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:32:57.0033 0x4154 volmgrx - ok
15:32:57.0054 0x4154 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:32:57.0075 0x4154 volsnap - ok
15:32:57.0099 0x4154 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
15:32:57.0115 0x4154 vsmraid - ok
15:32:57.0199 0x4154 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
15:32:57.0315 0x4154 VSS - ok
15:32:57.0337 0x4154 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
15:32:57.0353 0x4154 vwifibus - ok
15:32:57.0367 0x4154 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
15:32:57.0408 0x4154 vwififlt - ok
15:32:57.0475 0x4154 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
15:32:57.0521 0x4154 W32Time - ok
15:32:57.0537 0x4154 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
15:32:57.0573 0x4154 WacomPen - ok
15:32:57.0597 0x4154 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
15:32:57.0631 0x4154 WANARP - ok
15:32:57.0636 0x4154 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
15:32:57.0670 0x4154 Wanarpv6 - ok
15:32:57.0731 0x4154 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
15:32:57.0814 0x4154 wbengine - ok
15:32:57.0833 0x4154 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:32:57.0874 0x4154 WbioSrvc - ok
15:32:57.0907 0x4154 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:32:57.0937 0x4154 wcncsvc - ok
15:32:57.0944 0x4154 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:32:57.0996 0x4154 WcsPlugInService - ok
15:32:58.0009 0x4154 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
15:32:58.0021 0x4154 Wd - ok
15:32:58.0077 0x4154 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:32:58.0129 0x4154 Wdf01000 - ok
15:32:58.0168 0x4154 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:32:58.0217 0x4154 WdiServiceHost - ok
15:32:58.0222 0x4154 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:32:58.0237 0x4154 WdiSystemHost - ok
15:32:58.0278 0x4154 [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient C:\Windows\System32\webclnt.dll
15:32:58.0307 0x4154 WebClient - ok
15:32:58.0327 0x4154 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:32:58.0367 0x4154 Wecsvc - ok
15:32:58.0388 0x4154 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:32:58.0426 0x4154 wercplsupport - ok
15:32:58.0442 0x4154 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
15:32:58.0479 0x4154 WerSvc - ok
15:32:58.0488 0x4154 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
15:32:58.0522 0x4154 WfpLwf - ok
15:32:58.0543 0x4154 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:32:58.0555 0x4154 WIMMount - ok
15:32:58.0594 0x4154 WinDefend - ok
15:32:58.0614 0x4154 WinHttpAutoProxySvc - ok
15:32:58.0695 0x4154 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:32:58.0768 0x4154 Winmgmt - ok
15:32:58.0860 0x4154 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
15:32:58.0989 0x4154 WinRM - ok
15:32:59.0042 0x4154 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\drivers\WinUsb.sys
15:32:59.0059 0x4154 WinUsb - ok
15:32:59.0098 0x4154 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
15:32:59.0151 0x4154 Wlansvc - ok
15:32:59.0344 0x4154 [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:32:59.0429 0x4154 wlidsvc - ok
15:32:59.0450 0x4154 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
15:32:59.0490 0x4154 WmiAcpi - ok
15:32:59.0549 0x4154 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:32:59.0580 0x4154 wmiApSrv - ok
15:32:59.0624 0x4154 WMPNetworkSvc - ok
15:32:59.0638 0x4154 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:32:59.0667 0x4154 WPCSvc - ok
15:32:59.0686 0x4154 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
15:32:59.0713 0x4154 WPDBusEnum - ok
15:32:59.0731 0x4154 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:32:59.0784 0x4154 ws2ifsl - ok
15:32:59.0817 0x4154 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\system32\wscsvc.dll
15:32:59.0862 0x4154 wscsvc - ok
15:32:59.0866 0x4154 WSearch - ok
15:32:59.0974 0x4154 [ 291778E1A36716182AFBC1731B2DFEAB, C0B928CCCE8C496C90C42E0D294BAB51DC67C02B0D20CFB6A16B0AE1F51CC497 ] wuauserv C:\Windows\system32\wuaueng.dll
15:33:00.0120 0x4154 wuauserv - ok
15:33:00.0170 0x4154 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:33:00.0211 0x4154 WudfPf - ok
15:33:00.0233 0x4154 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\drivers\WUDFRd.sys
15:33:00.0267 0x4154 WUDFRd - ok
15:33:00.0307 0x4154 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:33:00.0324 0x4154 wudfsvc - ok
15:33:00.0371 0x4154 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
15:33:00.0430 0x4154 WwanSvc - ok
15:33:00.0447 0x4154 ================ Scan global ===============================
15:33:00.0496 0x4154 [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
15:33:00.0610 0x4154 [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
15:33:00.0645 0x4154 [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
15:33:00.0772 0x4154 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
15:33:00.0826 0x4154 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
15:33:00.0843 0x4154 [ Global ] - ok
15:33:00.0843 0x4154 ================ Scan MBR ==================================
15:33:00.0856 0x4154 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:33:01.0139 0x4154 \Device\Harddisk0\DR0 - ok
15:33:01.0144 0x4154 [ E5FA06ACA0D60BA9C870D0EF3D9898C9 ] \Device\Harddisk1\DR1
15:33:01.0213 0x4154 \Device\Harddisk1\DR1 - ok
15:33:01.0214 0x4154 ================ Scan VBR ==================================
15:33:01.0216 0x4154 [ 966EF2D42AB9FDC284879B73B54370FC ] \Device\Harddisk0\DR0\Partition1
15:33:01.0237 0x4154 \Device\Harddisk0\DR0\Partition1 - ok
15:33:01.0240 0x4154 [ D1BF9184093D35D8CD4A914017F276BF ] \Device\Harddisk0\DR0\Partition2
15:33:01.0242 0x4154 \Device\Harddisk0\DR0\Partition2 - ok
15:33:01.0245 0x4154 [ 6B294BA0225077CD07100F968D8B8449 ] \Device\Harddisk1\DR1\Partition1
15:33:01.0247 0x4154 \Device\Harddisk1\DR1\Partition1 - ok
15:33:01.0247 0x4154 ================ Scan generic autorun ======================
15:33:01.0247 0x4154 Nvtmru - ok
15:33:01.0287 0x4154 [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe
15:33:01.0302 0x4154 ShadowPlay - ok
15:33:01.0467 0x4154 [ 6BE70A935DFD72F47C29757305B50B1E, 6E76D7CA8C417750C2AFAD45344F5863CEA7798A2993716E21DE1997789D1746 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
15:33:01.0537 0x4154 NvBackend - ok
15:33:01.0566 0x4154 Adobe Reader Speed Launcher - ok
15:33:01.0677 0x4154 [ 504C916D52ABA407FD4DC1E709AEA71E, 8F279620247481F28DF7D9FD4A81173396E39EB807E24587E89CAF1172CC846C ] C:\Program Files (x86)\avmwlanstick\wlangui.exe
15:33:01.0821 0x4154 AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 )
15:33:07.0956 0x4154 Detect skipped due to KSN trusted
15:33:07.0956 0x4154 AVMWlanClient - ok
15:33:08.0049 0x4154 [ 9CD2CE59011503579C102E4BA12968BE, A52469C8E272A319F56654BB72719050AAEF3484A67B4E6F598EBF707BFF1C06 ] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
15:33:08.0072 0x4154 Razer Synapse - ok
15:33:08.0168 0x4154 [ 3ED4B26BD399D9328A770B16113057A9, 9C1408559C08B8D531E21E4D2D7B1DBEB0B012F8AFE1AC4362FD59FA210D9769 ] C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
15:33:08.0187 0x4154 RoccatIskuFX - detected UnsignedFile.Multi.Generic ( 1 )
15:33:14.0312 0x4154 RoccatIskuFX ( UnsignedFile.Multi.Generic ) - warning
15:33:20.0191 0x4154 [ 5E7601CCBC2A98A4457E50612E0AEE73, 3F5FDCF1BEC5B134433F62ADD5C2931F700F2B7CBEDB0A98EF1362BF6E9FAC03 ] C:\Program Files (x86)\Drakonia Configurator\hid.exe
15:33:20.0203 0x4154 GamingMouse - detected UnsignedFile.Multi.Generic ( 1 )
15:33:26.0359 0x4154 GamingMouse ( UnsignedFile.Multi.Generic ) - warning
15:33:32.0395 0x4154 [ 02B8BC2531917B205D509E6D8661DAFF, 9466DADD36A6B7FA4FB2C84B3F268CCEE65AA05D6DC93E70DE6F47F98D396B06 ] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
15:33:32.0609 0x4154 LogMeIn Hamachi Ui - ok
15:33:32.0665 0x4154 [ FCEC6F664FA7E5FE323165FBC9314470, 4E5AB1E6C3D2881D95E74F2F28649A7DBC4919CA249829A0E4CD9804E401A025 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
15:33:32.0691 0x4154 SunJavaUpdateSched - ok
15:33:32.0780 0x4154 [ A8E69DA21AEEB9DAA55D90E87AC1A549, 175AF750A1DF53555D0CB6C61312CEE37E2CB182873041A8AE38C57EA01DC2F5 ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
15:33:32.0808 0x4154 Avira SystrayStartTrigger - ok
15:33:33.0035 0x4154 [ C1A86A6D6847DEFF009EAE85BA0C1F20, 7DC2A823FA281117B335B74876469C788A5C81534251179BE86F3FB35F1B6D67 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
15:33:33.0065 0x4154 avgnt - ok
15:33:33.0386 0x4154 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:33.0552 0x4154 Sidebar - ok
15:33:33.0608 0x4154 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:33.0630 0x4154 mctadmin - ok
15:33:33.0661 0x4154 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:33.0703 0x4154 Sidebar - ok
15:33:33.0709 0x4154 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:33.0728 0x4154 mctadmin - ok
15:33:34.0018 0x4154 [ 9D0D72B696B8CDF9AE368E542FD042CE, 8CD19E8B609041A6C226D57D40509175827C75DEF93378B53A814060BB7A9E0B ] C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe
15:33:34.0074 0x4154 Spotify Web Helper - ok
15:33:34.0241 0x4154 [ D5218EE66173405B26B716EBA68133F6, 265820925538A075E753701DC36F89702B3E4C0BE73B8166138495092F339E43 ] C:\Program Files (x86)\Steam\steam.exe
15:33:34.0316 0x4154 Steam - ok
15:33:34.0425 0x4154 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
15:33:34.0453 0x4154 Google Update - ok
15:33:34.0706 0x4154 [ D6E2ED7F1F7BE7CCB8676491BF950B57, CBF07EE746F2C27ACC532E83ADC43FBE954DC3C598C4333F13B1A7615AEA9AD5 ] C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
15:33:34.0824 0x4154 Akamai NetSession Interface - ok
15:33:34.0901 0x4154 [ 42CD0245D2BE7184E774BC89DAA4F6C2, EDF4942E9A27478241CB33ECC8F75239AD0E294D1CD2202DB9F707BD6873B2FC ] C:\Program Files (x86)\puush\puush.exe
15:33:34.0926 0x4154 puush - ok
15:33:34.0970 0x4154 Skype - ok
15:33:35.0259 0x4154 [ DC8DC7ED86A259614D3B2186B2F841EB, 6F305431EE35849D637AF41F213B716D936311015483422FA294E9435B82AB2A ] C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe
15:33:35.0535 0x4154 Spotify - ok
15:33:35.0576 0x4154 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:35.0618 0x4154 Sidebar - ok
15:33:35.0625 0x4154 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:35.0647 0x4154 mctadmin - ok
15:33:35.0676 0x4154 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:35.0718 0x4154 Sidebar - ok
15:33:35.0725 0x4154 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:35.0744 0x4154 mctadmin - ok
15:33:35.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:36.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:37.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:38.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:39.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:40.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:41.0746 0x4154 Waiting for KSN requests completion. In queue: 18
15:33:41.0839 0x09b8 Object required for P2P: [ D5218EE66173405B26B716EBA68133F6 ] C:\Program Files (x86)\Steam\steam.exe
15:33:42.0746 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:43.0746 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:44.0746 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:45.0746 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:46.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:47.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:48.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:49.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:50.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:51.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:52.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:53.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:54.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:55.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:56.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:57.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:58.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:33:59.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:34:00.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:34:01.0747 0x4154 Waiting for KSN requests completion. In queue: 5
15:34:01.0849 0x09b8 Object send P2P result: false
15:34:01.0849 0x09b8 Object required for P2P: [ DC8DC7ED86A259614D3B2186B2F841EB ] C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe
15:34:02.0747 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:03.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:04.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:05.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:06.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:07.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:08.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:09.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:10.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:11.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:12.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:13.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:14.0748 0x4154 Waiting for KSN requests completion. In queue: 1
15:34:15.0294 0x09b8 Object send P2P result: true
15:34:15.0763 0x4154 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\wsctool.exe ( 15.0.13.202 ), 0x41000 ( enabled : updated )
15:34:15.0774 0x4154 Win FW state via NFP2: enabled ( trusted )
15:34:21.0569 0x4154 ============================================================
15:34:21.0569 0x4154 Scan finished
15:34:21.0569 0x4154 ============================================================
15:34:21.0576 0x101c Detected object count: 3
15:34:21.0576 0x101c Actual detected object count: 3
15:35:13.0732 0x101c USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0732 0x101c USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:13.0732 0x101c RoccatIskuFX ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0732 0x101c RoccatIskuFX ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:13.0733 0x101c GamingMouse ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0733 0x101c GamingMouse ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:56.0908 0x3c6c Deinitialize success
 Geändert von icrowz (05.11.2015 um 16:19 Uhr) |
|
05.11.2015, 21:53
| #7 | |
| /// the machine /// TB-Ausbilder | Keylogger / Hacker auf meinem Rechner ?Zitat:
Logs sehen alle gut aus.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.11.2015, 11:12
| #8 |
| | Keylogger / Hacker auf meinem Rechner ? Hi schrauber ! Danke für die Antwort Findest du es aber nicht seltsam?Natürlich glaub ich dir doch hab ich halt eine Frage. Nun die Logs sagen aus es ist sauber.. aber es müsste doch theoretisch was auftauchen wenn doch etwas auf meinem PC ist/war.. oder nicht? Denn ich hab ja nichts weiter gemacht als Virenscan und erstellen vom Log via FRST. TDSS Killer hatte 3 Funde (Warum auch immer meine Tastatur und Mausdriver als Problem angesehen wurden.. und noch irgendwas ohne Namen) Denn dieser Virus den ich da in der Quarantän hab hat ja die Aufgabe andere Programme zu installieren Werde den Virus heute aus der Quarantäne löschen. |
|
07.11.2015, 12:53
| #9 |
| /// the machine /// TB-Ausbilder | Keylogger / Hacker auf meinem Rechner ? Der Fund der bei dir in Quarantäne ist ist nur eine PUP Datei. Emsisoft erweitert Ihr Wissen: Was ist ein PUP? | Emsisoft Blog
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Keylogger / Hacker auf meinem Rechner ? |
| appdata, erkannt, google, hacker, keylogger, malwarebytes, microsoft, pup.optional.hijackmodifiedextension, quarantäne, rechner, riskware.injector.dc, security, websites, windows |
Linear-Darstellung
