![]() |
| |||||||
Log-Analyse und Auswertung: Tastatur schreibt von selber nach "Entf" Taste - Virus ?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
| |
| | #1 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Hallo zusammen, habe seit einiger Zeit ein Problem mit dem PC / der Tastatur. Wenn ich auf die Entf Taste drücke dann schreibt der PC von selber Hallo "Enter Taste" 3mmmmmmmmmmmmmm.... Es ist eigentlich ein Benutzername + Passwort was er also immer wiedergibt. Hatte bisher Windows 7 64Bit und habe jetzt Windows 10 64Bit komplett frisch auf einer neuen SSD installiert. Zurzeit ist nur KIS 2015, Mozilla und Geforcetreiber installiert! Ich komme nichtmal in den Taskmanager da sich nichts tut mit der normalen Kombination. Die Tastatur ist über USB Verbunden.(es wurden auch schon verschiedene Ports benutzt) Hat sich diese Scheisse schon ins BIOS eingeschlichen? Im abgesichterten Modus ist das ebenfalls vorhanden!!! Habe auch 2 Scans von Farbar Recovery Scann Tool eingefügt: Code:
ATTFilter Gestartet von E:\Programme
Windows 10 Pro Version 1511 (X64) (2016-05-15 20:00:11)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-871847227-993053103-2275549740-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-871847227-993053103-2275549740-503 - Limited - Disabled)
Gast (S-1-5-21-871847227-993053103-2275549740-501 - Limited - Disabled)
Matthias (S-1-5-21-871847227-993053103-2275549740-1001 - Administrator - Enabled) => C:\Users\Matthias
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 365.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.19 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-871847227-993053103-2275549740-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-10-30 09:17 - 2015-10-30 09:17 - 02652784 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-10-30 09:17 - 2015-10-30 09:17 - 02652784 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-05-15 22:02 - 2016-05-15 22:02 - 00959168 _____ () C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2015-10-30 09:17 - 2015-10-30 09:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 09:17 - 2015-10-30 09:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-30 09:18 - 2015-10-30 20:46 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-30 09:18 - 2015-10-30 20:46 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-30 09:18 - 2015-10-30 20:46 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-30 09:18 - 2015-10-30 20:46 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll
2016-05-15 22:07 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-05-15 22:02 - 2016-05-15 22:02 - 00679624 _____ () C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-10-30 09:24 - 2015-10-30 09:21 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-871847227-993053103-2275549740-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{9015F27C-1DE7-42F6-87D1-6A485355FFBA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{05B1CCB8-24DF-4433-888D-37E1599ED3C8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{083C8E2F-E8F8-4464-8138-46DB8E943488}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2E48AC8E-362E-4EEF-9510-1AA551D396D4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0716D2CF-84CA-4AC8-B4AF-886F7FAB7B47}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{CD1F575B-54E2-4349-A5ED-64B2F865DCB3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{9294638A-A2C7-49E8-A466-413F1A58D740}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{CFA1046C-5590-4403-A451-1DBF2166363C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A5612A70-5594-4AD0-ABF8-64B11ECD1AAA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/15/2016 10:18:29 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ONA3995)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/15/2016 10:13:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ONA3995)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/15/2016 10:12:48 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (05/15/2016 10:12:47 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (05/15/2016 10:12:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 7.1.2071.1338, Zeitstempel: 0x5726e00c
Name des fehlerhaften Moduls: MessageBus.dll, Version: 0.0.0.0, Zeitstempel: 0x5726d98c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000010f73
ID des fehlerhaften Prozesses: 0x97c
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Vollständiger Name des fehlerhaften Pakets: NvStreamNetworkService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvStreamNetworkService.exe5
Error: (05/15/2016 10:07:34 PM) (Source: ESENT) (EventID: 489) (User: )
Description: firefox (6372) Der Versuch, die Datei "C:\Users\Matthias\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (05/15/2016 10:07:24 PM) (Source: ESENT) (EventID: 489) (User: )
Description: firefox (6372) Der Versuch, die Datei "C:\Users\Matthias\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (05/15/2016 10:00:47 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
Error: (05/15/2016 10:00:19 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Systemfehler:
=============
Error: (05/15/2016 10:12:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTNetzwerkdienstS-1-5-20LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/15/2016 10:12:20 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ONA3995)
Description: {0002DF02-0000-0000-C000-000000000046}
Error: (05/15/2016 10:12:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_59054" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/15/2016 10:12:20 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/15/2016 10:04:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) HD Graphics Control Panel Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/15/2016 10:04:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) HD Graphics Control Panel Service erreicht.
Error: (05/15/2016 10:00:36 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/15/2016 09:54:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Druckererweiterungen und -benachrichtigungen" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (05/15/2016 09:53:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Netzwerklistendienst" wurde mit folgendem Fehler beendet:
%%21
CodeIntegrity:
===================================
Date: 2016-05-15 21:59:51.988
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-15 21:53:25.791
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 24%
Installierter physikalischer RAM: 8070.64 MB
Verfügbarer physikalischer RAM: 6096.95 MB
Summe virtueller Speicher: 9990.64 MB
Verfügbarer virtueller Speicher: 7870.77 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:108.4 GB) (Free:89.15 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:357.36 GB) (Free:357.22 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2E5B3CF9)
Partition 1: (Active) - (Size=108.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=357.4 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Code:
ATTFilter Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{fbd9f1d0-af55-400b-bc41-3d0ff879a7ca}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
FireFox:
========
FF ProfilePath: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\wjf9hxcb.default
FF Extension: Adblock Plus - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\wjf9hxcb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-15]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-05-15]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-12-08] (Kaspersky Lab ZAO)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2015-12-19] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-08] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [227512 2015-12-08] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [934272 2015-12-08] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39608 2015-06-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-08] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87944 2015-12-08] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [202032 2016-01-19] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-15 22:53 - 2016-05-15 21:53 - 00000000 ____D C:\Windows\Panther
2016-05-15 22:52 - 2016-05-15 22:52 - 00008192 __RSH C:\BOOTSECT.BAK
2016-05-15 22:18 - 2016-05-15 22:18 - 00000000 ____D C:\FRST
2016-05-15 22:14 - 2016-05-15 22:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\Comms
2016-05-15 22:12 - 2016-05-15 22:12 - 00000000 __SHD C:\Users\Matthias\IntelGraphicsProfiles
2016-05-15 22:12 - 2016-05-15 22:12 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-15 22:10 - 2016-05-15 22:12 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-05-15 22:10 - 2016-05-15 22:10 - 00002519 _____ C:\Users\Matthias\Desktop\Sicherer Zahlungsverkehr.lnk
2016-05-15 22:10 - 2016-05-15 22:10 - 00002213 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2016-05-15 22:10 - 2016-05-15 22:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2016-05-15 22:10 - 2016-05-15 22:10 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-05-15 22:10 - 2015-12-08 21:34 - 00934272 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-05-15 22:10 - 2015-12-08 21:34 - 00227512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2016-05-15 22:10 - 2015-12-08 21:34 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2016-05-15 22:10 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2016-05-15 22:09 - 2016-05-15 22:09 - 163129352 _____ (Kaspersky Lab) C:\Users\Matthias\Downloads\kis16.0.0.614abcdde_9992.exe
2016-05-15 22:08 - 2016-05-15 22:08 - 00000000 ____D C:\Users\Matthias\AppData\Local\NVIDIA Corporation
2016-05-15 22:07 - 2016-05-15 22:18 - 00000000 ____D C:\Users\Matthias\AppData\Local\Mozilla
2016-05-15 22:07 - 2016-05-15 22:08 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Mozilla
2016-05-15 22:07 - 2016-05-15 22:07 - 00001450 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-05-15 22:07 - 2016-05-15 22:07 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-15 22:07 - 2016-05-15 22:07 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-15 22:07 - 2016-05-15 22:07 - 00000000 ____D C:\Users\Matthias\AppData\Local\NVIDIA
2016-05-15 22:07 - 2016-05-15 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-15 22:07 - 2016-05-15 22:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-15 22:07 - 2016-05-15 22:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-15 22:07 - 2016-05-02 07:39 - 01377800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-05-15 22:07 - 2016-05-02 07:39 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-05-15 22:07 - 2016-05-02 07:38 - 01767944 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-05-15 22:07 - 2016-05-02 07:38 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-05-15 22:07 - 2016-05-02 07:38 - 00112032 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-05-15 22:07 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-05-15 22:06 - 2016-05-15 22:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-05-15 22:06 - 2016-05-15 22:07 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-15 22:06 - 2016-05-15 22:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-05-15 22:06 - 2016-05-15 22:06 - 00242320 _____ C:\Users\Matthias\Downloads\Firefox Setup Stub 46.0.1.exe
2016-05-15 22:06 - 2016-05-15 22:06 - 00242320 _____ C:\Users\Matthias\Downloads\Firefox Setup Stub 46.0.1 (1).exe
2016-05-15 22:06 - 2016-05-15 22:06 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-05-15 22:06 - 2016-05-13 06:58 - 12643392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-15 22:06 - 2016-05-10 20:11 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 42924088 _____ C:\Windows\system32\nvcompiler.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 31625272 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 25374776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 21380696 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 20922648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 20078656 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 17777016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 17370472 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 17370400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 17332320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 14227696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 10566520 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 08673880 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 03685280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 03262968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 02614208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 02258368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436519.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436519.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00960056 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00887744 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00786688 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00784640 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00753208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00695864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00678704 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00632152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00630592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00601752 _____ C:\Windows\system32\nvmcumd.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00545632 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00448824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00385080 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00379296 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00377792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00346560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00317472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-05-15 22:06 - 2016-05-10 06:05 - 00000592 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-05-15 22:06 - 2016-05-10 06:05 - 00000592 _____ C:\Windows\system32\nv-vk64.json
2016-05-15 22:06 - 2016-05-10 01:35 - 06369728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 02993088 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 01201600 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-05-15 22:06 - 2016-05-10 01:35 - 00530880 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-05-15 22:06 - 2016-05-10 01:35 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-05-15 22:06 - 2016-05-07 23:24 - 06423191 _____ C:\Windows\system32\nvcoproc.bin
2016-05-15 22:06 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-05-15 22:06 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-05-15 22:06 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-05-15 22:06 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-05-15 22:06 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-05-15 22:06 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-05-15 22:06 - 2016-04-14 07:38 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-05-15 22:05 - 2016-05-15 22:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-05-15 22:04 - 2016-05-15 22:12 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-15 22:04 - 2016-05-15 22:12 - 00000000 ____D C:\Intel
2016-05-15 22:04 - 2016-05-15 22:04 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2016-05-15 22:04 - 2016-05-15 22:04 - 00000000 ____D C:\Program Files (x86)\Intel
2016-05-15 22:04 - 2015-12-19 01:08 - 00099848 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-05-15 22:03 - 2016-05-15 22:07 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-05-15 22:03 - 2016-05-15 22:06 - 363226232 _____ (NVIDIA Corporation) C:\Users\Matthias\Downloads\365.19-desktop-win10-64bit-international-whql.exe
2016-05-15 22:03 - 2016-05-15 22:03 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Macromedia
2016-05-15 22:03 - 2016-05-15 22:03 - 00000000 ____D C:\Program Files\Intel
2016-05-15 22:02 - 2016-05-15 22:02 - 00002392 _____ C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-15 22:02 - 2016-05-15 22:02 - 00000000 ___RD C:\Users\Matthias\OneDrive
2016-05-15 22:02 - 2016-05-15 22:02 - 00000000 ____D C:\Users\Matthias\AppData\Local\MicrosoftEdge
2016-05-15 22:02 - 2016-05-15 22:02 - 00000000 ____D C:\Users\Matthias\AppData\Local\ActiveSync
2016-05-15 22:02 - 2016-05-15 22:02 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-05-15 22:00 - 2016-05-15 22:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\Packages
2016-05-15 22:00 - 2016-05-15 22:12 - 00000000 ____D C:\Users\Matthias
2016-05-15 22:00 - 2016-05-15 22:00 - 00000020 ___SH C:\Users\Matthias\ntuser.ini
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Vorlagen
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Startmenü
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Netzwerkumgebung
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Lokale Einstellungen
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Eigene Dateien
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Druckumgebung
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Documents\Eigene Videos
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Documents\Eigene Musik
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Documents\Eigene Bilder
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\AppData\Local\Verlauf
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\AppData\Local\Anwendungsdaten
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 _SHDL C:\Users\Matthias\Anwendungsdaten
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Adobe
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\VirtualStore
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\TileDataLayer
2016-05-15 22:00 - 2016-05-15 22:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\Publishers
2016-05-15 21:58 - 2016-05-15 22:18 - 01708398 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-15 21:55 - 2016-05-15 21:55 - 00000000 ____D C:\ProgramData\USOShared
2016-05-15 21:54 - 2016-05-15 22:12 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Programme
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-05-15 21:54 - 2016-05-15 21:54 - 00000000 ____D C:\Windows\CSC
2016-05-15 21:54 - 2015-10-30 09:17 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-05-15 21:53 - 2016-05-15 21:53 - 00189344 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-15 21:53 - 2016-05-15 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-04 04:23 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1-1-0-11-1.dll
2016-05-04 04:22 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo-1-1-0-11-1.exe
2016-05-04 04:22 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo-1-1-0-11-1.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-05-15 22:52 - 2015-10-30 09:24 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-05-15 22:18 - 2015-10-30 20:35 - 00737872 _____ C:\Windows\system32\perfh007.dat
2016-05-15 22:18 - 2015-10-30 20:35 - 00147558 _____ C:\Windows\system32\perfc007.dat
2016-05-15 22:18 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-05-15 22:14 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-15 22:14 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-05-15 22:13 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\DevicesFlow
2016-05-15 22:12 - 2015-10-30 08:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-15 22:10 - 2015-10-30 09:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-05-15 22:10 - 2015-10-30 08:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-05-15 22:06 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\Help
2016-05-15 22:00 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\PurchaseDialog
2016-05-15 22:00 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\PrintDialog
2016-05-15 22:00 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\MiracastView
2016-05-15 22:00 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-05-15 21:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\oobe
2016-05-15 21:55 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-05-15 21:54 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-05-15 21:54 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows NT
2016-05-15 21:54 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2016-05-15 21:53 - 2015-10-30 20:58 - 00000000 ____D C:\Windows\ServiceProfiles
2016-05-15 21:53 - 2015-10-30 08:28 - 00000000 ____D C:\Windows\system32\Sysprep
2016-05-10 20:11 - 2015-11-10 03:14 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-05-10 20:11 - 2015-11-10 03:14 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-05-10 06:05 - 2015-11-10 01:12 - 00038050 _____ C:\Windows\system32\nvinfo.pb
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-05-15 21:53
==================== Ende von FRST.txt ============================
Danke Geändert von park757 (15.05.2016 um 21:59 Uhr) |
| | #2 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Weiß keiner was ?
__________________ |
| | #3 |
| /// Malwareteam ![]() ![]() | Tastatur schreibt von selber nach "Entf" Taste - Virus ?![]() Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen. Bitte beachte, dass es ein paar Regeln gibt:
Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM! Posten in CODE-Tags Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Los gehts! Hast du schon mal versucht von einer Linux Live-DVD zu booten? Besteht das Problem dort auch? Also nur damit ichs richtig versteh: Wenn du die "Entf"-Taste drückst kommt "Hallo <Username> <Passwort>"?
__________________ |
| | #4 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Hallo, nein von einer Linux CD habe ich nocht nicht gebootet und geschaut ob es funktioniert. Hast du einen ISO Link dafür? JA richtig wenn ich auf "Entf" Taste drücke dann kommt: <username> Enter(nächste Zeile) <passwort>mmmmmm...... Bis ich die ESC-Taste drücke dann hört es auf. Habe es mit der Virtuellen Windows Tastatur versucht und da ging Entf ganz normal ohne diesem seltsamen Verhalten. Denke meine Freundin hat auf irgendwas geklickt - aber wie immer "Ich hab nichts angeklickt" -_- da es ihr Benutzername + PW ist. Geändert von park757 (18.05.2016 um 17:11 Uhr) |
| | #5 |
| /// Malwareteam ![]() ![]() | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Hi, LinuxDVD gibts zum Beispiel Ubuntu: Download Ubuntu Desktop | Download | Ubuntu. ISO auf DVD oder USB-Stick geben, dann auf "Betriebssystem testen" oder so ähnlich klicken (auf keinen Fall installieren). Wir machen aber mal Scans mit TDSSKILLER und MBAM. Schritt # 1: TDSS-Killer Downloade dir bitte
Schritt # 2: Bitte Posten
|
| | #6 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Ok. Werde ich jetzt testen. TDSSKiller hat leider nichts gefunden. Auf welches Format muss der USB Stick formatiert werden? NTFS oder FAT32? Und wie bekomme ich die ISO auf den USB Stick - mit welchem Programm? PS: Habe die Sucheinstellungen etwas erweitert und nun hat er eines gefunden: Edit2: Auf Ubuntu das gleiche Problem : (((((((((((((((((((((((((((( Code:
ATTFilter 19:20:14.0342 0x1588 TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
19:20:14.0342 0x1588 UEFI system
19:20:17.0640 0x1588 ============================================================
19:20:17.0640 0x1588 Current date / time: 2016/05/18 19:20:17.0640
19:20:17.0640 0x1588 SystemInfo:
19:20:17.0640 0x1588
19:20:17.0640 0x1588 OS Version: 10.0.10586 ServicePack: 0.0
19:20:17.0640 0x1588 Product type: Workstation
19:20:17.0640 0x1588 ComputerName: DESKTOP-CKLBVBG
19:20:17.0640 0x1588 UserName: Matthias
19:20:17.0640 0x1588 Windows directory: C:\Windows
19:20:17.0640 0x1588 System windows directory: C:\Windows
19:20:17.0640 0x1588 Running under WOW64
19:20:17.0640 0x1588 Processor architecture: Intel x64
19:20:17.0640 0x1588 Number of processors: 8
19:20:17.0640 0x1588 Page size: 0x1000
19:20:17.0640 0x1588 Boot type: Normal boot
19:20:17.0640 0x1588 ============================================================
19:20:17.0715 0x1588 KLMD registered as C:\Windows\system32\drivers\17258686.sys
19:20:18.0672 0x1588 System UUID: {C778CA93-FD14-26D2-F2D1-FFD345E2AFEB}
19:20:21.0230 0x1588 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:20:21.0230 0x1588 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:20:21.0232 0x1588 ============================================================
19:20:21.0232 0x1588 \Device\Harddisk0\DR0:
19:20:21.0232 0x1588 GPT partitions:
19:20:21.0233 0x1588 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {FD0437B8-6D22-4D56-86B0-496FC68D42B0}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
19:20:21.0233 0x1588 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {9A2D9906-975D-401D-AC42-32EED5808CAE}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000
19:20:21.0233 0x1588 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {D7B9F595-B4A3-499D-ABF3-7EBD6979EA2D}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x74BE000
19:20:21.0233 0x1588 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {E4D10EC5-8B73-4243-BF70-189721247E39}, Name: Basic data partition, StartLBA 0x7530800, BlocksNum 0x32E55000
19:20:21.0233 0x1588 MBR partitions:
19:20:21.0233 0x1588 \Device\Harddisk1\DR1:
19:20:21.0233 0x1588 GPT partitions:
19:20:21.0233 0x1588 \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {83501074-9CC0-46E0-9847-6273EA104CA7}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xD8CC000
19:20:21.0233 0x1588 \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {043833C2-E38E-4F59-8AAF-33E79F61BA62}, Name: Microsoft reserved partition, StartLBA 0xD8CC800, BlocksNum 0x8000
19:20:21.0233 0x1588 \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {4910BA6C-8AE6-4B73-92A4-29A4BB5DA9DA}, Name: Basic data partition, StartLBA 0xD8D4800, BlocksNum 0x2CAB1800
19:20:21.0233 0x1588 MBR partitions:
19:20:21.0233 0x1588 ============================================================
19:20:21.0234 0x1588 C: <-> \Device\Harddisk1\DR1\Partition1
19:20:21.0234 0x1588 D: <-> \Device\Harddisk0\DR0\Partition3
19:20:21.0235 0x1588 E: <-> \Device\Harddisk0\DR0\Partition4
19:20:21.0235 0x1588 H: <-> \Device\Harddisk1\DR1\Partition3
19:20:21.0235 0x1588 ============================================================
19:20:21.0235 0x1588 Initialize success
19:20:21.0235 0x1588 ============================================================
19:20:31.0229 0x0a08 ============================================================
19:20:31.0229 0x0a08 Scan started
19:20:31.0229 0x0a08 Mode: Manual; SigCheck; TDLFS;
19:20:31.0229 0x0a08 ============================================================
19:20:31.0229 0x0a08 KSN ping started
19:20:33.0907 0x0a08 KSN ping finished: true
19:20:34.0256 0x0a08 ================ Scan system memory ========================
19:20:34.0256 0x0a08 System memory - ok
19:20:34.0256 0x0a08 ================ Scan services =============================
19:20:34.0300 0x0a08 [ DF1C3D7E6C7929AD83BE22852B5B08CB, 9ECF6211CCD30273A23247E87C31B3A2ACDA623133CEF6E9B3243463C0609C5F ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
19:20:34.0326 0x0a08 1394ohci - ok
19:20:34.0338 0x0a08 [ 2C5B3035B86770ADD2FE9BFBAF5B35A4, 19E16F9144FE3E33B5FF248CF0040AB079ACAE22290B1369CC72AE4CB5FE3A90 ] 3ware C:\Windows\system32\drivers\3ware.sys
19:20:34.0348 0x0a08 3ware - ok
19:20:34.0358 0x0a08 [ 469441BAE3FF8A16826FC62C51EF5E18, E1204677B87F47222D05F670F8DF3DB65EA0881782A8DCFBE0103478ED71187C ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:20:34.0373 0x0a08 ACPI - ok
19:20:34.0378 0x0a08 [ 7EADED8087C392876521F7EBCE846EF4, 99BF1BD948F97C1ECBC049C7F949B71D73D0B41FB505B2F75B208E655F7DC8A3 ] acpiex C:\Windows\system32\Drivers\acpiex.sys
19:20:34.0386 0x0a08 acpiex - ok
19:20:34.0390 0x0a08 [ C498887123327CDFD73A05E7A2780920, B45392C46254FCB8D79B6C3A82C8D894063199E6167D8E5F7EA7D60C75CD16EA ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
19:20:34.0397 0x0a08 acpipagr - ok
19:20:34.0400 0x0a08 [ C8DBE6EFFCF014CAA010B9BDDAC833EC, 96FC29340C62A6B0910DCCBF8945F32089FC300F45B451A540B8854D53734298 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
19:20:34.0407 0x0a08 AcpiPmi - ok
19:20:34.0410 0x0a08 [ 17039DBEB3B7B9ADCDB4B4533AA9771F, A4D38B144639A20B8B31E4F35FB776A028DB502FAC849FC73EECEB3CCD91830B ] acpitime C:\Windows\System32\drivers\acpitime.sys
19:20:34.0417 0x0a08 acpitime - ok
19:20:34.0421 0x0a08 [ 36114214BF8D7C464D1E92E4EB6B2DD3, 8E7CB266D4ABCDF332A3D4D341753811D51B72985E36F24A7E757DCA11A65A2A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:20:34.0429 0x0a08 AdobeARMservice - ok
19:20:34.0447 0x0a08 [ F7D0CD345D2DA42E7042ABCD73662403, 03183F90A994D69066F15C3DFC1D7D7514AEAF46A5AAC059B1FB327F8C30A35C ] ADP80XX C:\Windows\system32\drivers\ADP80XX.SYS
19:20:34.0469 0x0a08 ADP80XX - ok
19:20:34.0482 0x0a08 [ 70148EFA9A562E7185B75BBE7D376BF7, 8200E3349A1AFA1040B3D956A17BAF3CDC784A1A3CA396125E7872B36C03D84A ] AFD C:\Windows\system32\drivers\afd.sys
19:20:34.0499 0x0a08 AFD - ok
19:20:34.0504 0x0a08 [ 870F1A2C936F92B5D053DF7EC75B352F, D617524FD5886D6D3BC2EFBBB5EA310E906454CD7CA7257C3D7BDEA8C4F2DA71 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:20:34.0512 0x0a08 agp440 - ok
19:20:34.0518 0x0a08 [ 3DF7751D5DC6525E7DC6617FBB45054F, 8E6D4C809DB3B66E7558C4829E01F5C227EE614AC82F33FD99DCC629770D1BE3 ] ahcache C:\Windows\system32\DRIVERS\ahcache.sys
19:20:34.0530 0x0a08 ahcache - ok
19:20:34.0533 0x0a08 [ 19707ECBCEA71080A85DB2336580DB39, A09AE69C9DE2F3765417F212453B6927C317A94801AE68FBA6A8E8A7CB16CED7 ] AJRouter C:\Windows\System32\AJRouter.dll
19:20:34.0542 0x0a08 AJRouter - ok
19:20:34.0545 0x0a08 [ AA91A5E156D0364ABA7B01658C2EB014, F61055D581745023939C741CAB3370074D1416BB5A0BE0BD47642D5A75669E12 ] ALG C:\Windows\System32\alg.exe
19:20:34.0554 0x0a08 ALG - ok
19:20:34.0558 0x0a08 [ B70F0F2F54B4A4DB6E9C830454752F5A, C882DEAC30812E5FA4479A8CB688603C6AF269EF08236688F4C5E7EBED1D4572 ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
19:20:34.0567 0x0a08 AmdK8 - ok
19:20:34.0571 0x0a08 [ 35E890482C9728DD5C552B85DA8A5AB2, 1E0EB7D902AB4C38E23CAFC0BEA250E7F6E180E8814385B4F29730BFC373A191 ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
19:20:34.0582 0x0a08 AmdPPM - ok
19:20:34.0586 0x0a08 [ 5B30BCFE6E02E45D3EE268FF001BC5E0, 9901DB728885CE36911F79998629B2DD42D56AF9633B5277834F498CC59B0346 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:20:34.0593 0x0a08 amdsata - ok
19:20:34.0599 0x0a08 [ F20B30F35A5C7888441B4DCA001ECF8E, 695A5BC1F18B65992EB06A202AD3CBFA17228E76DDFD1AE6977FD315724F75C2 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
19:20:34.0608 0x0a08 amdsbs - ok
19:20:34.0611 0x0a08 [ AFE838D7576C581D6483529621AB10CC, 14476A04CC64E7A0F1BBFDACCBD7A87F384BE1877C27656DBB973AF3975D4AE2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:20:34.0618 0x0a08 amdxata - ok
19:20:34.0622 0x0a08 [ EDDB0D726DBECDFC1DBCC6DB464E5A13, 98D128D1E6FA270ED9ADBFE50078F68A794C00D4CBB86E28EC6161FFAD0CA8FF ] AppID C:\Windows\system32\drivers\appid.sys
19:20:34.0632 0x0a08 AppID - ok
19:20:34.0635 0x0a08 [ 7A55F9237F726D1667073A47B0D1B90F, 7C2D9AA84F1D4CC6C1FAF6848DF9479A534E01029C4387E8C0647745F1E74603 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:20:34.0646 0x0a08 AppIDSvc - ok
19:20:34.0649 0x0a08 [ 56E219DF92BE16F62308F884739BE022, FE189EE8A52BC5A0E6B76C632021F84F60307A182F2A67C0C0C7CAA72DEFC723 ] Appinfo C:\Windows\System32\appinfo.dll
19:20:34.0660 0x0a08 Appinfo - ok
19:20:34.0665 0x0a08 [ 3B3774C868868257533EC7E715BB6D53, 4AF1DADCEDBD80BE6EDEC696DF59E65B51D31E33F4C84413CA03C7BD959FF4E5 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:20:34.0671 0x0a08 Apple Mobile Device Service - ok
19:20:34.0676 0x0a08 [ B4AE5296C9597F45E1CFE0B1DBE7739E, C9DCA8EF32720D68119CC23DF4BCD783FFB5F999D14EDCC7937D17C590323B4B ] AppMgmt C:\Windows\System32\appmgmts.dll
19:20:34.0686 0x0a08 AppMgmt - ok
19:20:34.0695 0x0a08 [ 610499A73DF3599608EBB6B3F9929052, A9CA49C4A39A825916AB3791090BCFC7044FDB6B2C3538E01F0CFBC2A9931152 ] AppReadiness C:\Windows\system32\AppReadiness.dll
19:20:34.0712 0x0a08 AppReadiness - ok
19:20:34.0745 0x0a08 [ 087FBBC026DCC0F693E91079B9901B7E, 544DEC1255923DBDC8351B6CE2220FBC9929F2FFE52C91062C23DE7734DA7A2F ] AppXSvc C:\Windows\system32\appxdeploymentserver.dll
19:20:34.0794 0x0a08 AppXSvc - ok
19:20:34.0800 0x0a08 [ E3FE8F610B1CC12BC3B2E6BC43DC97E2, 0E18542CF2095A9ADA1759AB8F986E78B0A50A3C6B2AD4EACD80A23D832A2C6D ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:20:34.0811 0x0a08 arcsas - ok
19:20:34.0814 0x0a08 [ 5E00748A1AD246CAECBBB7553BED36CC, DAD2C93F0894E7BB5E5D8D767D8286A909086B49172C504A01097C3A180998C6 ] AsyncMac C:\Windows\System32\drivers\asyncmac.sys
19:20:34.0824 0x0a08 AsyncMac - ok
19:20:34.0832 0x0a08 [ 492B99D2E3D5D7BFD5F0AE1BE7BD37DD, A3F6BFC4FDC1933FBF3145019B118689A414108B04F43E2563946B2673C89324 ] atapi C:\Windows\system32\drivers\atapi.sys
19:20:34.0838 0x0a08 atapi - ok
19:20:34.0844 0x0a08 [ 42BF7FA295F453618104B5A50BEE105B, AB44BA2AD2FC5AF3B6BE4489C444C03FD1AB02C22109BF5F39BE459294C4CB18 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
19:20:34.0857 0x0a08 AudioEndpointBuilder - ok
19:20:34.0873 0x0a08 [ 2A2C0983B6FE62F02E7183335B1F5C20, 07845269FE72894D31D3FC927EECE26333AE9A2149A995DA4AE007276B05C647 ] Audiosrv C:\Windows\System32\Audiosrv.dll
19:20:34.0903 0x0a08 Audiosrv - ok
19:20:34.0913 0x0a08 [ 50C3C62FFE6337E6E4F2F01CB07DF63C, CC9C7D2827E872F22A2A79D42195530F61DF6EA6A1C8F520E25DB35537574FAB ] AVP16.0.0 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
19:20:34.0923 0x0a08 AVP16.0.0 - ok
19:20:34.0928 0x0a08 [ 7062CE507814D5306DCA5D6A15B7B6B6, 9D60506003A66C2E516B1FCB70CC5B26FB3A9948B95D97C828DD0328E76F2C91 ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:20:34.0946 0x0a08 AxInstSV - ok
19:20:34.0956 0x0a08 [ 6447BA6FA709514B6C803D159B4C7D1E, 549DDCEAD93DF333F6BBD56A9258A867E4DA219741C00D48C68F8F230A87B11A ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
19:20:34.0970 0x0a08 b06bdrv - ok
19:20:34.0974 0x0a08 [ B4AC08B1D04D0CE085435E5CD0E663C5, 61E641388E5692B2EB351E44BA1DB86B5305DD105EE56865D59072CA9407C8AC ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
19:20:34.0982 0x0a08 BasicDisplay - ok
19:20:34.0985 0x0a08 [ 25B5BB369DEE2BAE4BF459C978FF9035, DBC2157B2AC0BC92B4011CE5E01F2DCDAAE71E37D9D21102503C6455FAAC4DCA ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
19:20:34.0994 0x0a08 BasicRender - ok
19:20:34.0998 0x0a08 [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\Windows\System32\drivers\bcmfn.sys
19:20:35.0006 0x0a08 bcmfn - ok
19:20:35.0009 0x0a08 [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\Windows\System32\drivers\bcmfn2.sys
19:20:35.0016 0x0a08 bcmfn2 - ok
19:20:35.0023 0x0a08 [ F374C27099807E99A156953F8416D34A, D267B8CD837290F9FC6B4FFD2DB8F54867D808FB155698FC7713BCAB3AE475B5 ] BDESVC C:\Windows\System32\bdesvc.dll
19:20:35.0038 0x0a08 BDESVC - ok
19:20:35.0041 0x0a08 [ 5A88834AEE15D97695FAE0837B73B3E4, 03035FB51DE218B8EDB15129A0376DDED0C7E7B6DA58DD95B12E4E5C8D852ED8 ] Beep C:\Windows\system32\drivers\Beep.sys
19:20:35.0049 0x0a08 Beep - ok
19:20:35.0066 0x0a08 [ 37F5E2385CB4D10AB42186974B9C241A, D38FA2B8CE19AC32056060F04B04D031F1621C07528DEDCCD5A8C01AB0A35995 ] BFE C:\Windows\System32\bfe.dll
19:20:35.0090 0x0a08 BFE - ok
19:20:35.0108 0x0a08 [ 64582C924C48175D52AED0D0E64AB413, 75DC6BC01D26A4BABEDB8013F0C106780F0991CA63075798C7C24B66022F58E3 ] BITS C:\Windows\System32\qmgr.dll
19:20:35.0145 0x0a08 BITS - ok
19:20:35.0155 0x0a08 [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:20:35.0164 0x0a08 Bonjour Service - ok
19:20:35.0169 0x0a08 [ DA2C6F7ACE392193C424FEA975C5BFFB, 668F91F3E5F8EA170C10823D6959E0EDB32434C51FAA68BEA782EDDF5618690E ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:20:35.0179 0x0a08 bowser - ok
19:20:35.0190 0x0a08 [ 492FB85E61768950CDD27C87AED6E8FA, 1BFF11D899581E406D1AB5F2C66C9D816161ECF4B81AAACCCA3663875E86C0A5 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
19:20:35.0210 0x0a08 BrokerInfrastructure - ok
19:20:35.0217 0x0a08 [ A617BE5E429A035A1CA8217C1B16F0BB, 197EE6C6EB22FF8A626540886F5A2163CC4CB177504C5423856F54BF01EB0FF1 ] Browser C:\Windows\System32\browser.dll
19:20:35.0227 0x0a08 Browser - ok
19:20:35.0230 0x0a08 [ CAEC7BC11AF69A181AF7932E636E09E4, 503C69045F1E025CBEE2405043BB71CC58478985ECAF6587F73FCB57860F5709 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
19:20:35.0239 0x0a08 BthAvrcpTg - ok
19:20:35.0243 0x0a08 [ 5F2B4B32E986C058525D3BA2A475A16C, CEC5BB0B025DD9525CFBBEDF6EB6F63336534798495A4F95763CE112DF915088 ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
19:20:35.0252 0x0a08 BthHFEnum - ok
19:20:35.0254 0x0a08 [ 5406289E8AE2CB52FC408154E0A64BA7, 0A3795F2E6E2B51198452CF69A99159D8E11650E95F41DF0B575CB72F9C6C6B5 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
19:20:35.0262 0x0a08 bthhfhid - ok
19:20:35.0271 0x0a08 [ BAB101E7826BE287F79C4BA721621989, E6DD25C89267FE87253B8226292F2894F5E702075D3B23B09339D3B28744C060 ] BthHFSrv C:\Windows\System32\BthHFSrv.dll
19:20:35.0287 0x0a08 BthHFSrv - ok
19:20:35.0291 0x0a08 [ A76F20CCCA31895A1DA78A875E50F946, ECD4B3670DA5984AA24F4354457B4E45983938A89FF6DB03B556A633B4B37E3C ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
19:20:35.0299 0x0a08 BTHMODEM - ok
19:20:35.0303 0x0a08 [ 7A177E18AA6A6A6365E6351C2BF8EDAE, A35224A20014B1215A6824AE5E17B8869A775EA272EF7F25EAFFA18733F8D09D ] bthserv C:\Windows\system32\bthserv.dll
19:20:35.0313 0x0a08 bthserv - ok
19:20:35.0317 0x0a08 [ BF89BDBA5D3A0B4256D3F6FC8D31880D, 940F3BF55B88261C9E9A951A092331559FC5B24FE3BA0F1E1AB3450D2CA364C1 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
19:20:35.0324 0x0a08 buttonconverter - ok
19:20:35.0329 0x0a08 [ C24C27FDF93B85A4EFCF25F830253AA2, 35C87518BB59663B57C2361A13AD4E57E37392598F1EB9F07F86CA5A6321AF5A ] CapImg C:\Windows\System32\drivers\capimg.sys
19:20:35.0340 0x0a08 CapImg - ok
19:20:35.0344 0x0a08 [ 7F9C7226D743B232907ED2537B8A574F, 2211AFC30E8F8FA03020DB48EE14914CD31E50BB6A63FF20AC7C6FA481E72C18 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:20:35.0351 0x0a08 cdfs - ok
19:20:35.0363 0x0a08 [ 0A92DC116CFC7F6BE8167DD25CB925CC, 50CAC7BE14FF69B10C029E049F7C441A5572540F027F95F940B185C76C689409 ] CDPSvc C:\Windows\System32\CDPSvc.dll
19:20:35.0376 0x0a08 CDPSvc - ok
19:20:35.0381 0x0a08 [ 82D97776BF982AA143BDC7DFB5054EA8, 954F56728371E6B3514586DCEAF15C4727BAED6CAFBF788654C4E03BD702942C ] cdrom C:\Windows\System32\drivers\cdrom.sys
19:20:35.0392 0x0a08 cdrom - ok
19:20:35.0397 0x0a08 [ 4E9158CECF77A029AB98E8FBB43FCED5, AFF8BDB8F8F8DDF4FC0D65712E031DC360856CD3CE5C8A4C8FF960388F37462F ] CertPropSvc C:\Windows\System32\certprop.dll
19:20:35.0411 0x0a08 CertPropSvc - ok
19:20:35.0414 0x0a08 [ 0505C1D991D0F9D47F3353BB98597C7E, 3B801CCF4980256327A4A9FBD98007DA1E3ACE9C94E5A4C23AB21303B46E8B5A ] circlass C:\Windows\System32\drivers\circlass.sys
19:20:35.0422 0x0a08 circlass - ok
19:20:35.0430 0x0a08 [ 8B4B39C507ABA09AAFE8E3932D1B392C, 734700155A658BC08FC96E8F99A01DE7F7251D7DDEFA79D258B2EEB370BA7AA8 ] CLFS C:\Windows\system32\drivers\CLFS.sys
19:20:35.0442 0x0a08 CLFS - ok
19:20:35.0482 0x0a08 [ 2D2F62706FB1929B926B0C70FFFE1BB0, 9F9544DE94BD0E13205647E58D48297A77BCE128B74C9E78FF4A3E74B2ECE201 ] ClickToRunSvc C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
19:20:35.0527 0x0a08 ClickToRunSvc - ok
19:20:35.0540 0x0a08 [ F7526C133AC265F283012E9CD751F873, 6AABDD92FD880F49F63C1CC478C3D8291AF670802CEC58B32730E7675D858D88 ] ClipSVC C:\Windows\System32\ClipSVC.dll
19:20:35.0556 0x0a08 ClipSVC - ok
19:20:35.0561 0x0a08 [ 95832B049E2833B9F5189823CDF946C7, 72773A42A89220B4A6AC72D1633B16F11191A44D876A44FAB5CEFB717CE3223D ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
19:20:35.0569 0x0a08 CmBatt - ok
19:20:35.0577 0x0a08 [ B2A6D2A30E93B6F215F74AC7E1733C9C, 960299F7BF2501B46296EDEA050BF30313C17A9B785574B56B79C070BD1B6E1A ] cm_km C:\Windows\system32\DRIVERS\cm_km.sys
19:20:35.0586 0x0a08 cm_km - ok
19:20:35.0597 0x0a08 [ 3B866F8CB10719A5AF9E410B1B149714, B0A32B526290ED8E1DD93C70AB49DD417B82CA23D6B815163131247091D61DBA ] CNG C:\Windows\system32\Drivers\cng.sys
19:20:35.0613 0x0a08 CNG - ok
19:20:35.0616 0x0a08 [ 58D640BC2294C71BDE0953F12D4B432F, 0B3B7659FCB97791A2A1F895C8E6F9078F855C94C13EB47464492588C4B02B85 ] cnghwassist C:\Windows\system32\DRIVERS\cnghwassist.sys
19:20:35.0622 0x0a08 cnghwassist - ok
19:20:35.0629 0x0a08 [ 14F9883588398A1BDE49C75098C75DE6, D9D82DE89FAFE60BC902683BC44C7555533A030150FD5E5A35A24542FACC5CAD ] CompositeBus C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys
19:20:35.0637 0x0a08 CompositeBus - ok
19:20:35.0640 0x0a08 COMSysApp - ok
19:20:35.0643 0x0a08 [ 02B8E49148DE5E0A2F6FDF28CE94A6AC, EEA405823F441CA604BEAA44EB71A1D20BC80E124FF7B27380D0201AAF2E0849 ] condrv C:\Windows\system32\drivers\condrv.sys
19:20:35.0653 0x0a08 condrv - ok
19:20:35.0666 0x0a08 [ 86BE19C6A177AEB93302EA5C4FBE2D11, 5404AB84D270549B1A46574EBDC857525F71B117BE3BA0098FA0A696E56D5C39 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
19:20:35.0684 0x0a08 CoreMessagingRegistrar - ok
19:20:35.0713 0x0a08 [ 137BC921135ECDA3E9917B56E3550D32, 6585F4FFEAB32583B867A14F7B7C09C563B1EA715AD9C3B850A7965C54A819A0 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
19:20:35.0725 0x0a08 cphs - ok
19:20:35.0729 0x0a08 [ 2CE0D74AED86A372997E9D77AE10B9F5, 1AFAA22C68FD0B81F73CE0EB763AD77AB97E78916752843A5056E1352F0FEA82 ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:20:35.0738 0x0a08 CryptSvc - ok
19:20:35.0748 0x0a08 [ 5D578EAAFB6FD4F59523E5878B541296, 73573124787B79179880AFAF9CB8427237A1605A9F13D7783228DE24D18963C0 ] CSC C:\Windows\system32\drivers\csc.sys
19:20:35.0765 0x0a08 CSC - ok
19:20:35.0778 0x0a08 [ 5F07CCEE514894C9474AEDCA50B6C2C7, 38F54897C91A2E7D80D00852CEB173B26E822D7C68F35D31228245F811E028A8 ] CscService C:\Windows\System32\cscsvc.dll
19:20:35.0799 0x0a08 CscService - ok
19:20:35.0803 0x0a08 [ 2619DC483579DB9FE804044C1ADFFD1A, 23A5420288735A980917091532BE7BB36EB51660AA4555C615AF736357EB02EC ] dam C:\Windows\system32\drivers\dam.sys
19:20:35.0809 0x0a08 dam - ok
19:20:35.0824 0x0a08 [ B339861C6A2A86FBCA67C2006B461473, 228ADC8A8603C0A4342C6CBC6F2CC919271D42391365061AF660E0D7151C66A4 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:20:35.0851 0x0a08 DcomLaunch - ok
19:20:35.0857 0x0a08 [ 620921E77351FB651632322AD2C195C4, 5A98971995D7A2B5AE6BEA69344FCC6687B582FEF74BDA206D32FB2E6CEB0478 ] DcpSvc C:\Windows\system32\dcpsvc.dll
19:20:35.0871 0x0a08 DcpSvc - ok
19:20:35.0881 0x0a08 [ 6129EA4294C5C69E4665801E95B16AB2, CE419186CF0F57434426FF925A09F13BE87639679CBB5F2074B0E1A243349D27 ] defragsvc C:\Windows\System32\defragsvc.dll
19:20:35.0902 0x0a08 defragsvc - ok
19:20:35.0911 0x0a08 [ D12B9B6A6C4885824876422AACC89954, 5853ED5CAF84B7AAFF3EDC5C71FE23EB121DB681D81267D77118424BA9AB6F88 ] DeviceAssociationService C:\Windows\system32\das.dll
19:20:35.0927 0x0a08 DeviceAssociationService - ok
19:20:35.0933 0x0a08 [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
19:20:35.0946 0x0a08 DeviceInstall - ok
19:20:35.0948 0x0a08 [ 5BF8BD9B19D665452494C8D56DF4B28D, E5FC649207EF42C04B6737D442FECD3383E82F8998B140319FF400773F1D0978 ] DevQueryBroker C:\Windows\system32\DevQueryBroker.dll
19:20:35.0956 0x0a08 DevQueryBroker - ok
19:20:35.0962 0x0a08 [ 935823F79CBEDB91637B63D37E3A5A36, BE9A46F1CA631B9252C71758901D55456DC3C143053003D9FA7D67811A1E5026 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
19:20:35.0971 0x0a08 Dfsc - ok
19:20:35.0980 0x0a08 [ 5841A361D28069DFC82E1E98040FDC3F, 3A48DB7ADE90654242CB54DAD07F5FF0CD5CABF372C50D5B2C4D7AED068986E1 ] Dhcp C:\Windows\system32\dhcpcore.dll
19:20:35.0995 0x0a08 Dhcp - ok
19:20:36.0005 0x0a08 [ 9F5AC03F5A0000DD96FA29CD68A6605B, 6964E077635E65DA902CA6C69E704A9DCD5856D22BA75E1CF823E63E62266AF7 ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
19:20:36.0012 0x0a08 diagnosticshub.standardcollector.service - ok
19:20:36.0035 0x0a08 [ 15D174719872A30F2FDD6B5B1B8BA5D9, B0E6FF6FC47B731C204F110D4B768231906B144B31F602ECE8EAC24D70BA880D ] DiagTrack C:\Windows\system32\diagtrack.dll
19:20:36.0066 0x0a08 DiagTrack - ok
19:20:36.0072 0x0a08 [ 4904B152E4942BF700F2D73228B4D477, 0E5646DCA05A24C71F057C9F9F64AE992D338DA72DF3126175C2FA178854C30F ] disk C:\Windows\system32\drivers\disk.sys
19:20:36.0080 0x0a08 disk - ok
19:20:36.0087 0x0a08 [ 49F069E2D22F33955A69D44DFD1B5179, 739C52C7B961BA683E8C7CCDB0E95423C17561B2F1F506BAE923DC53DB96B067 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
19:20:36.0102 0x0a08 DmEnrollmentSvc - ok
19:20:36.0106 0x0a08 [ 0197AE4B9790A4E73751CACFAA480126, 86BBB398F1A93754B2C329271F13A88FD2F285F30225C38F068F565CCA14EB9F ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
19:20:36.0113 0x0a08 dmvsc - ok
19:20:36.0116 0x0a08 [ 5EF8EC71A7A91F3DF7798BEFE6786B0E, A3A56B43C72926881C66B7A17C9EAA35C2D9603C8D3849438838536BCD3F4633 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
19:20:36.0126 0x0a08 dmwappushservice - ok
19:20:36.0132 0x0a08 [ 5839A317C25F70979433E0905DFABB1B, 7F1CD50C77A33A10259D8A208A355BE7ECAFEA69F810AD908EF8878A792741AF ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:20:36.0144 0x0a08 Dnscache - ok
19:20:36.0151 0x0a08 [ 1B15297A3A2CAB6BD586676154F389D8, 623D5F5FC8622B7D9AEEEB1787E6846C1570F0EEF94341239440B616D09D672A ] dot3svc C:\Windows\System32\dot3svc.dll
19:20:36.0164 0x0a08 dot3svc - ok
19:20:36.0169 0x0a08 [ 316C2D8B8E3C0727969F1C3790EF7193, 631F8578FDB26578C8436E4B9C4DF21E1F58FCFE6DA66E5769AAC3739005D465 ] DPS C:\Windows\system32\dps.dll
19:20:36.0180 0x0a08 DPS - ok
19:20:36.0182 0x0a08 [ 25FA06D3B49D6ADF8E874FFCDCD76B50, 9AF09B96ED79D94EA36581ABE6CC73313A72891779774B15860D018BEA2BBA0F ] drmkaud C:\Windows\System32\drivers\drmkaud.sys
19:20:36.0189 0x0a08 drmkaud - ok
19:20:36.0195 0x0a08 [ 16EE6701115BECF8C657D9D6E123F6A1, 16E115B5245C3C988F8B58B90D30F183021C7C7792D3D1C74BEC606E49672B2A ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
19:20:36.0212 0x0a08 DsmSvc - ok
19:20:36.0216 0x0a08 [ FBC8C56814642A7CA88ACBCA8DD1121F, 108690704A359991C3D6577477E232F5F2F46B36DF6B4B0738A893EF05D7D4EB ] DsSvc C:\Windows\System32\DsSvc.dll
19:20:36.0226 0x0a08 DsSvc - ok
19:20:36.0257 0x0a08 [ 48D8729FACC784900B831212AE56F824, 6AAE1E78B84D0C12B99BE050B787AA167E6BA0B5AA621BEE0DB5312A4771DA63 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:20:36.0294 0x0a08 DXGKrnl - ok
19:20:36.0300 0x0a08 [ 0CDF6B61D7F7FFCD195AF0113B9B2C16, 828D3FA31742B54075EAED2E67BBB5166D2EF4F84B791077E96DC0BD5557F11E ] Eaphost C:\Windows\System32\eapsvc.dll
19:20:36.0311 0x0a08 Eaphost - ok
19:20:36.0356 0x0a08 [ 491275B864B704B54EC08168344E0F38, B4849400C3F819CF7809A2001EA2ECB527022483F7DFE31C3930F951EAFE50CE ] ebdrv C:\Windows\system32\drivers\evbda.sys
19:20:36.0419 0x0a08 ebdrv - ok
19:20:36.0426 0x0a08 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] EFS C:\Windows\System32\lsass.exe
19:20:36.0434 0x0a08 EFS - ok
19:20:36.0438 0x0a08 [ CEF108FCE06892CFA5F1B49527D4BF49, FA337584024B6E6EE4AF519F57FFA4C0FCA19EDC148FF309336C4CCA8F9C9CE8 ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
19:20:36.0449 0x0a08 EhStorClass - ok
19:20:36.0453 0x0a08 [ 5B1EAAE3001A7A320C106FC3859F4111, 700BA2C7D4DFAFFEB78D3804B310A4EE5B4295C84600442665693FF661673951 ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
19:20:36.0461 0x0a08 EhStorTcgDrv - ok
19:20:36.0465 0x0a08 [ E34DEFC09F2843C2C24C2248F1ABE6D8, 1FD67EB5820A1D2F4402DE9D95DE288DB69D421A8473074FF23491D7CA8B5ACE ] embeddedmode C:\Windows\System32\embeddedmodesvc.dll
19:20:36.0475 0x0a08 embeddedmode - ok
19:20:36.0483 0x0a08 [ 062152DD5B225518A991DFCD8536770C, 5C8EF4E0C7DE3B24387FF239A8D0CDA39C2376826F16EAFF09739A6C7EDA01E0 ] EntAppSvc C:\Windows\system32\EnterpriseAppMgmtSvc.dll
19:20:36.0498 0x0a08 EntAppSvc - ok
19:20:36.0501 0x0a08 [ 7A2705148A4BB3CA255F81624338B461, 68AC8F8D2DD8AA4E8F2224A0054DE2AF67EA199217E87CD3C7299B021048F14F ] ErrDev C:\Windows\System32\drivers\errdev.sys
19:20:36.0508 0x0a08 ErrDev - ok
19:20:36.0520 0x0a08 [ 17BE4A35829B37C742084DC02D48E5F0, 7FDA62B56DF585C3F2C6FFB10AC7C0D8F70FA921C4DEA47B2789745CFE2618CE ] EventSystem C:\Windows\system32\es.dll
19:20:36.0536 0x0a08 EventSystem - ok
19:20:36.0544 0x0a08 [ DFE8A33FBCF6F38182631A4D6097B92D, F9D06780830E74FD5309E6DC5C3EEDB9334A8AE284F381FA91EF2729297F8632 ] exfat C:\Windows\system32\drivers\exfat.sys
19:20:36.0556 0x0a08 exfat - ok
19:20:36.0563 0x0a08 [ C330883C06E2D4CE4F6982F048265D37, 26044DE176056B7F5BF2A50A659243CFD7F25CFEE035B3A3C3165B3699872926 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:20:36.0574 0x0a08 fastfat - ok
19:20:36.0585 0x0a08 [ 952F10D2116B91BA433842D07879AE7A, 9E1EC0C719877EF198AA4DDBE896E9DDEAD360AAC1FC6DF305E7C5C73C7A761D ] Fax C:\Windows\system32\fxssvc.exe
19:20:36.0605 0x0a08 Fax - ok
19:20:36.0609 0x0a08 [ 9D299AE86D671488926126A84DF77BFD, C076EEDD0524B7D88BC56C97089E0A836CC1AD725E1A544CC4F8DDBB6670C366 ] fdc C:\Windows\System32\drivers\fdc.sys
19:20:36.0617 0x0a08 fdc - ok
19:20:36.0621 0x0a08 [ 47D09B8C312658ACE433E46DDF51C3A5, E76948DA0F51C7DC6D69B7E36D63CE6E98FDE619FA30E91637F75B5084107D22 ] fdPHost C:\Windows\system32\fdPHost.dll
19:20:36.0632 0x0a08 fdPHost - ok
19:20:36.0640 0x0a08 [ 177AC945B20C81400A1525ED7B49A425, FD215A2E718EA38A95D985F53AB3DD44B50C2549AA67F44BA98C4709E492051F ] FDResPub C:\Windows\system32\fdrespub.dll
19:20:36.0651 0x0a08 FDResPub - ok
19:20:36.0656 0x0a08 [ 3E78BEC276DA5A062E4D55F3291B3463, 62983457F506C70D1F89F527AB61C1C0F4D1B002631256A2708F9AF092A8C95E ] fhsvc C:\Windows\system32\fhsvc.dll
19:20:36.0668 0x0a08 fhsvc - ok
19:20:36.0672 0x0a08 [ 8F2523C9D8F1448FF2156452AF60FA00, 1D39CA54F5F1E62385D9EC041F9445BDDCB63740859B9418AE904FDF3D8388ED ] FileCrypt C:\Windows\system32\drivers\filecrypt.sys
19:20:36.0681 0x0a08 FileCrypt - ok
19:20:36.0685 0x0a08 [ 92ECCFA58C8195B8EA33ED942469D4E6, 8DB12E8CF80ECA22182F9A1F4CA922336A430297F1F596F204ECF4D9D19F30D9 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:20:36.0693 0x0a08 FileInfo - ok
19:20:36.0697 0x0a08 [ 87C51FDD50C17882BA93E28BBABB9847, 8987D80FB77D1D3F9E89B491B1287B027DA26FFC4E4BA7B01E07D4D4FC69E236 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:20:36.0707 0x0a08 Filetrace - ok
19:20:36.0710 0x0a08 [ E99261DD76D1C9E05AF575939CAE5AC5, A789724FD2E22AFB2F921836F5C19A21D17F4BBD604771E2908C2651BD31989C ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
19:20:36.0718 0x0a08 flpydisk - ok
19:20:36.0725 0x0a08 [ 25D7A58625E1453E40D36825DE74E4F1, 74119803D35E3C3CC349B44C6CD9EDF6B797F88584B847F0BF9EED542719B86B ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:20:36.0739 0x0a08 FltMgr - ok
19:20:36.0761 0x0a08 [ 4387DE200BF8DD0E2EE828E655434B9A, 9148D65E54663EEC139E754091F47ABF439A637BEA83F600D30736522DAA845D ] FontCache C:\Windows\system32\FntCache.dll
19:20:36.0801 0x0a08 FontCache - ok
19:20:36.0806 0x0a08 [ B4175E8BE60B099686FF55CA7D692316, 3158FC5B4D1A2F1FC1346754392AE24AE58999B9061B1CE78A65E785BFFADD52 ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:20:36.0814 0x0a08 FsDepends - ok
19:20:36.0817 0x0a08 [ CC71372CEB811A72F1DC99089C5CBF53, BB9DDE74D60E534A6F8A51B63DDBB441245F06A00A0AFD37DBBE86255690946D ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:20:36.0824 0x0a08 Fs_Rec - ok
19:20:36.0835 0x0a08 [ 50DFE05C698E9B0A63D95E3D669A105C, 3A7D5AE4A01B90C2ECF22AD2783A84C2329EAB9BACFA5237A7DCC3DC5995A864 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:20:36.0851 0x0a08 fvevol - ok
19:20:36.0856 0x0a08 [ B9981A4CB9F728B3312A3885BFAA7204, 12FB2EB2E5D2A912769823DD9C1B33DB358CD0B7FBFC788529EF83DD584334F8 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:20:36.0863 0x0a08 gagp30kx - ok
19:20:36.0866 0x0a08 [ 77555B11B264991DDC26872FFCF1AB97, D5F230EEF74EB869F771F8A4AB19C1E6C845BB0EF4A1234882EBDA4FDC431E44 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
19:20:36.0874 0x0a08 gencounter - ok
19:20:36.0876 0x0a08 [ F3AC9652D88BF87BA6596CBEA28CE10F, 115F3C0A5B9903B17ADEA80E1825FE927B7361F5BDDF80CE3685EF2D327EDF4F ] genericusbfn C:\Windows\System32\drivers\genericusbfn.sys
19:20:36.0884 0x0a08 genericusbfn - ok
19:20:36.0888 0x0a08 [ F802FBABF0C4DF1BAA733187B2E476F5, E2533284CEBBB872196B013DD1FBBCA794DB1CAAA37D64849BD9264ECDD2CEE6 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
19:20:36.0898 0x0a08 GPIOClx0101 - ok
19:20:36.0917 0x0a08 [ B55458A83395A2CFD4E745E9EC4AB5F2, EAB06B089D8A7DBC9AE2A1C919B489911690D341013A5F8F906819C68431CA85 ] gpsvc C:\Windows\System32\gpsvc.dll
19:20:36.0954 0x0a08 gpsvc - ok
19:20:36.0957 0x0a08 [ D011B0ADB15F4815310CE1BF4780B33E, 3860630917F83A89FE7A6407CC544505FA4BD754619CF273DD630ABFBAAE42EE ] GpuEnergyDrv C:\Windows\system32\drivers\gpuenergydrv.sys
19:20:36.0968 0x0a08 GpuEnergyDrv - ok
19:20:36.0976 0x0a08 [ 0F93EBE9071A6BB1548BF0F816EEA24B, 79A99544C00F59996980D299BFACA0463D86158BFA51C8045CE4FF4951779A44 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
19:20:36.0992 0x0a08 HdAudAddService - ok
19:20:36.0996 0x0a08 [ 84BC034B6BB763733C1949B7B9BAF976, 18C2C0F15BAFA46197F0BB629C4F585D893C2A78324CA198F88A04527D524F23 ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
19:20:37.0007 0x0a08 HDAudBus - ok
19:20:37.0009 0x0a08 [ 6B8CB114B8E64C0636EB49F7B914D1FC, 1AD7A43CC5CD99DCEF60C61242B6843D4AD925CE93BA5D75CD8395C7125EF5A7 ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
19:20:37.0017 0x0a08 HidBatt - ok
19:20:37.0021 0x0a08 [ D1AD197CCDAAC0CB4819DA1D6EB17BAE, C370F974D0A1F7B60F47EAFF57B6CCABE82913187F8BFEE169B8237AE91247B1 ] HidBth C:\Windows\System32\drivers\hidbth.sys
19:20:37.0034 0x0a08 HidBth - ok
19:20:37.0039 0x0a08 [ 64909DECCFCC6FB5D9A5BAFDCCB31FEE, E19C91FD8D5102A8C4F6C6FF70CA058BB272FEC1B6E9CBA3A473C49948E6AC7E ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
19:20:37.0046 0x0a08 hidi2c - ok
19:20:37.0049 0x0a08 [ F510F7B7BF61DEAAC04E65C3B65E8D59, 11566086B06FB08B6A179E3068E022DA381C762DC8962D1E1D63DC646DD4D301 ] hidinterrupt C:\Windows\System32\drivers\hidinterrupt.sys
19:20:37.0057 0x0a08 hidinterrupt - ok
19:20:37.0060 0x0a08 [ 90F3ED42D423C942BA5EA54E2FFE7AC7, BF7DE0C8141CD20A6235657BA897A019ABEFF6A01AA3FB202C73C33433CDEAF8 ] HidIr C:\Windows\System32\drivers\hidir.sys
19:20:37.0069 0x0a08 HidIr - ok
19:20:37.0074 0x0a08 [ 46DE2EF6382DD9613CB506760648F262, 419555220794380134A64E1956B83B2FD1D1B6E403C5FC729A9107E14A12E968 ] hidserv C:\Windows\system32\hidserv.dll
19:20:37.0082 0x0a08 hidserv - ok
19:20:37.0085 0x0a08 [ 128DEDDD61915DBA4D451D91D21F0513, 961A0DDA02B0879989300C15E4FF9022882A4CD895D65335C263AC0DD1918314 ] HidUsb C:\Windows\System32\drivers\hidusb.sys
19:20:37.0094 0x0a08 HidUsb - ok
19:20:37.0100 0x0a08 [ 7CEC266216126BC9A0E1072E1A7E5702, 6B2C0768C8F2590E65B9520D266C07D1A9D89B9E185CC359B0453F399836759F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:20:37.0114 0x0a08 HomeGroupListener - ok
19:20:37.0130 0x0a08 [ E2145534FB853921788F52701BED0CAB, DF71F842772FAC21DD8994C97F578A78AC43D06C5F26F752FB69B47DFE3BB112 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:20:37.0147 0x0a08 HomeGroupProvider - ok
19:20:37.0150 0x0a08 [ FF442DCDCE1F6E9FAA9C8AD0CD1D199B, A239414E97B310C9545995B0E723B5E792B08D71F651450EB006AD4D1765E4F7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:20:37.0157 0x0a08 HpSAMD - ok
19:20:37.0161 0x0a08 [ D26D7D9D6B2B447BDC35ACE9ADBBE7E1, 7CFCF14CFCBF62AF5182A07642840BC78815360CA5143DBB7614F259021F2A17 ] HPSIService C:\Windows\system32\HPSIsvc.exe
19:20:37.0169 0x0a08 HPSIService - detected UnsignedFile.Multi.Generic ( 1 )
19:20:39.0169 0x182c Object required for P2P: [ 2619DC483579DB9FE804044C1ADFFD1A ] dam
19:20:40.0770 0x0a08 Detect skipped due to KSN trusted
19:20:40.0771 0x0a08 HPSIService - ok
19:20:40.0787 0x0a08 [ 63C3F74DC398A1C1A77E39DFB9C312CA, 283A13899838B4313BFBC406E832042696C549640A1AB11E23C0B9E499289836 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:20:40.0811 0x0a08 HTTP - ok
19:20:40.0814 0x0a08 [ CBA5E88A0F0475B7F49653BB72150BEF, 0F03560D9C30E069D117A555AEE729C81E6BCAE443FA25172D0E9E6903695C67 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:20:40.0820 0x0a08 hwpolicy - ok
19:20:40.0823 0x0a08 [ D668FAB4B0397B426EE3D41683B9A1C0, 66F3E3B2ABC3C9B25A0DADBF09818547ED301230374AC5302B4794629A95DDF8 ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
19:20:40.0830 0x0a08 hyperkbd - ok
19:20:40.0834 0x0a08 [ 53FDD9E69189E546DE4740F8C4D8AB2F, 45ED5B229ED5FD0CEE8BF52EFF88FD8B1889BF348ED7187926F290B3AD48A76D ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
19:20:40.0843 0x0a08 i8042prt - ok
19:20:40.0846 0x0a08 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\Windows\System32\drivers\iai2c.sys
19:20:40.0855 0x0a08 iai2c - ok
19:20:40.0860 0x0a08 [ 59A20F5AD9F4AE54098154359519408E, E27B7389C9D123CDDA4EC9CBDB06C4AA5000012391F940EE1492419B593608FE ] iaLPSS2i_I2C C:\Windows\System32\drivers\iaLPSS2i_I2C.sys
19:20:40.0870 0x0a08 iaLPSS2i_I2C - ok
19:20:40.0873 0x0a08 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
19:20:40.0878 0x0a08 iaLPSSi_GPIO - ok
19:20:40.0882 0x0a08 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\Windows\System32\drivers\iaLPSSi_I2C.sys
19:20:40.0891 0x0a08 iaLPSSi_I2C - ok
19:20:40.0902 0x0a08 [ 6B0029A0253098CCE28EACCFDB9E7208, E33AD69644E1683A971DA1169B704FBCFD9F715E9550816058E420BB5DE4D946 ] iaStorAV C:\Windows\system32\drivers\iaStorAV.sys
19:20:40.0918 0x0a08 iaStorAV - ok
19:20:40.0927 0x0a08 [ 9652E1E35A92D8C75710C17A63B15796, 72F8C4A49B874226DEE9B7C9704F0E0A98DAA2DF4EAE2F2258E8324ACBD242E4 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:20:40.0938 0x0a08 iaStorV - ok
19:20:40.0947 0x0a08 [ FFADF691F7BF727AF5C863454A372723, FCF5A5595E8C9C937BE9F1C3AB5D9BD0EFE82DE1298D12085E0CCD84A186D2F2 ] ibbus C:\Windows\System32\drivers\ibbus.sys
19:20:40.0959 0x0a08 ibbus - ok
19:20:40.0964 0x0a08 [ 80BF2990E01E774D64F6E13F30661942, ADFEA2280D29F2C7B0A556C61709301D6327C288064FF5A4D29358403DF41DCE ] icssvc C:\Windows\System32\tetheringservice.dll
19:20:40.0976 0x0a08 icssvc - ok
19:20:40.0979 0x0a08 IEEtwCollectorService - ok
19:20:41.0078 0x0a08 [ 34E103A5EFF7EADA5ADE6D61294FAA7F, 29AFF3C2C03D75B55D124EBA35534C1D7E2115748C23EAC79CF0FA6CBC994C1F ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
19:20:41.0184 0x0a08 igfx - ok
19:20:41.0198 0x0a08 [ 078DE1A9D9DB0BB617D4DCF1EF925928, 6E197785DE6F83FAB5E049F24CCC3838BB9B9EB20240BD48A2768103172B6242 ] igfxCUIService2.0.0.0 C:\Windows\system32\igfxCUIService.exe
19:20:41.0208 0x0a08 igfxCUIService2.0.0.0 - ok
19:20:41.0223 0x0a08 [ 95A03F67830FDCB950E70261128D540D, D052CB703500E2871CF51E015E444F2A99FA9A7579AC422104F0E411F6107BD0 ] IKEEXT C:\Windows\System32\ikeext.dll
19:20:41.0250 0x0a08 IKEEXT - ok
19:20:41.0261 0x0a08 [ 47577F77C8DD9CF4265B944CAFE1F172, A3F48F01ECFDF8E609D26754E517C06AD6382DA231F42BF64B6746D50F02FC6A ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
19:20:41.0271 0x0a08 IntcDAud - ok
19:20:41.0274 0x0a08 [ ECDB27420D3A98424666904525A8562A, BDA98C3C95F2AD79945EF8213D5C65064052C09C82DD36F0D6724E1D21DCC30A ] intelide C:\Windows\system32\drivers\intelide.sys
19:20:41.0281 0x0a08 intelide - ok
19:20:41.0285 0x0a08 [ 8FF1978643EFD219C5BA49690191D701, 6FD78A8490107C80090D7125644B8C910855374BE1373D1D6B199307C79680BA ] intelpep C:\Windows\system32\drivers\intelpep.sys
19:20:41.0292 0x0a08 intelpep - ok
19:20:41.0296 0x0a08 [ B61B60F36E1C8022FA8166ABF0F66B07, 23161F1DA51D44D936329E62DF4C2DAEE3DDD4B3D62CC501A888C0E149788968 ] intelppm C:\Windows\System32\drivers\intelppm.sys
19:20:41.0305 0x0a08 intelppm - ok
19:20:41.0308 0x0a08 [ CA0D42029AFFC4514D295E1EF823D02D, F2A05CB2B2E8C843FD02DC37E86F23CF928A4B2F9044424A60DE4E82B87DF5C3 ] IoQos C:\Windows\system32\drivers\ioqos.sys
19:20:41.0315 0x0a08 IoQos - ok
19:20:41.0318 0x0a08 [ 6E3F9D95235DFC9417384080A216F310, 6F13D72661038A91CFABB360621F4B169D78955C3EAD64956A7C825ABAEC5121 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:20:41.0329 0x0a08 IpFilterDriver - ok
19:20:41.0343 0x0a08 [ 6E75B731A8A7EFED0821327B08DAB46D, A77B746447824BD3C68B82D7329B82D62098B2409F8AEE4738FA23CB1561E629 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:20:41.0372 0x0a08 iphlpsvc - ok
19:20:41.0377 0x0a08 [ 4F527ECB5EAB47D8EAF34A469666C469, 8FFBEEF42515B6A7758BE579ED69E3911856CBF7710D9785011332C5E3DFE495 ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
19:20:41.0385 0x0a08 IPMIDRV - ok
19:20:41.0389 0x0a08 [ 9E5E8F2A1996F23B7E9687846AA81B01, 29E59384A4F92B3B4F2974942C91A12380113C13D3800900B5F44E2355D05455 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:20:41.0399 0x0a08 IPNAT - ok
19:20:41.0410 0x0a08 [ F96B9EDC032E61EB87652896E92ED526, F9E3CD2FA2D963C56034A4F606869467FDC6647B916CF457249270E6C337A8A5 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
19:20:41.0422 0x0a08 iPod Service - ok
19:20:41.0427 0x0a08 [ C317EB660138BC9CBFE37CCDE56351AE, F3AF6C573419D7F65C96A4841D4F056CA281CD5AFACDC7A5F586A390DC6E615B ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:20:41.0435 0x0a08 IRENUM - ok
19:20:41.0438 0x0a08 [ 531994A6D9399D9B74BE12B5BB58A81E, 6D5CF540C777F4828E1D4C5FE58EE41E6C2F5F399C554DC85F19D1E52229B094 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:20:41.0445 0x0a08 isapnp - ok
19:20:41.0451 0x0a08 [ 68D5354A4A9692EEC24664C60F47D4A2, 92124E98B6E286B6127DC6D0BFACC9C6D293D58EAE2B47B45532714CE6A6D0CD ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
19:20:41.0461 0x0a08 iScsiPrt - ok
19:20:41.0464 0x0a08 [ 701D7DB13B0815E7076EF4CB4CE981F8, 02585661656C0069AC318B82DE83DAC660451A0B970FDBCA0F7A8B4CBF7D93A9 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
19:20:41.0475 0x0a08 kbdclass - ok
19:20:41.0478 0x0a08 [ 884EBBDDBF5968003B40185BD96FF0E6, E3934D0FF0BEDDF5526AF529F7D15BA8BE479383894975B1AF1A1818C394A6E3 ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
19:20:41.0485 0x0a08 kbdhid - ok
19:20:41.0488 0x0a08 [ 6B3A0C7902811E6372643447E41F7048, 30667B56A306CFD5D15BC46F8E7D9E167612E71B6C8F554406E706A6330F5B94 ] kdnic C:\Windows\System32\drivers\kdnic.sys
19:20:41.0495 0x0a08 kdnic - ok
19:20:41.0498 0x0a08 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] KeyIso C:\Windows\system32\lsass.exe
19:20:41.0506 0x0a08 KeyIso - ok
19:20:41.0516 0x0a08 [ BEE1682DA217A4AD46C36896769AA580, 4D853D78E459F7BFE4F4217FCAD47CDACFAC19C2F6CF8261FBAA46BDB387FFDC ] kl1 C:\Windows\system32\DRIVERS\kl1.sys
19:20:41.0527 0x0a08 kl1 - ok
19:20:41.0531 0x0a08 [ 86F40D79CE80ACBE6BEBAC8CE89D75A0, 8B800425160D1AF3C32EF7B5CA794658EE09CD3EE782473D8D38E1C7706076B3 ] klbackupdisk C:\Windows\system32\DRIVERS\klbackupdisk.sys
19:20:41.0536 0x0a08 klbackupdisk - ok
19:20:41.0540 0x0a08 [ 2B4BC41223326FF440E2DB32B9239138, E95D5BB3388D6B219A4C175D5DA77CEB620A27A13F5AA4E7E2C05694B6E26947 ] klbackupflt C:\Windows\system32\DRIVERS\klbackupflt.sys
19:20:41.0546 0x0a08 klbackupflt - ok
19:20:41.0549 0x0a08 [ 80D7529E1CF09261FADF55E69EFDA90B, 2FE5EC38866E12D78AE3F4AD8CF647BDED616E8A36D9D737F9B6564DDA4685E7 ] kldisk C:\Windows\system32\DRIVERS\kldisk.sys
19:20:41.0554 0x0a08 kldisk - ok
19:20:41.0558 0x0a08 [ E2097C8F18F1E8E3B7D09F12B51843A3, 0506A99BD0962AAE64692BD7F080DB080F8B678DC59685CF22830A47B486430C ] klelam C:\Windows\system32\DRIVERS\klelam.sys
19:20:41.0566 0x0a08 klelam - ok
19:20:41.0571 0x0a08 [ BACE50477C184A3AA0755702C23B8B27, 5708A1B7C22702AD2E5DD4491A911A51D2FB768E46857639C0C5D8736E487D0F ] klflt C:\Windows\system32\DRIVERS\klflt.sys
19:20:41.0578 0x0a08 klflt - ok
19:20:41.0585 0x0a08 [ 0698A6918DAF5B1710F5A5170C34FC03, 15CBA4089950812A5815D7517B6C25959A793A55A66F8AA6746618D42A849351 ] klhk C:\Windows\system32\DRIVERS\klhk.sys
19:20:41.0595 0x0a08 klhk - ok
19:20:41.0609 0x0a08 [ 3DC953B77F13031C7763464FC0AD1E71, B0142B8A9FB5889D7F76E16EA26F1EA9BC7F1770226CD139B3C932671EBD802B ] KLIF C:\Windows\system32\DRIVERS\klif.sys
19:20:41.0625 0x0a08 KLIF - ok
19:20:41.0629 0x0a08 [ E62321376344231F5F488758ACC6D553, 1155C1FDD5C95B05EABBD4268A7D3FFF050D0C0921B61226179C312605AB46C3 ] KLIM6 C:\Windows\system32\DRIVERS\klim6.sys
19:20:41.0634 0x0a08 KLIM6 - ok
19:20:41.0637 0x0a08 [ DAE5768E6FD34A36E3B9D1AF1FCA682B, 24DA0B71E3B4AC0FABEE0BF687DF8D35283DBF808CA3AB6F86E72B37471F6B33 ] klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys
19:20:41.0641 0x0a08 klkbdflt - ok
19:20:41.0644 0x0a08 klkbdflt2 - ok
19:20:41.0647 0x0a08 [ FD47C92A63B6EADEA830BFA96C06EAEE, C15C39B6FA53CBD01A2F95243845C4B706B4229F8FFB75C7128819B9CEE5B2CB ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys
19:20:41.0652 0x0a08 klmouflt - ok
19:20:41.0657 0x0a08 [ F610F5F17BC87D61EF8954CCD793BAE4, A77FE26B4A474FE799C3D569BDD7858319C57FC14C1BB43ECFAB1FDB19AF5DC6 ] klpd C:\Windows\system32\DRIVERS\klpd.sys
19:20:41.0661 0x0a08 klpd - ok
19:20:41.0665 0x0a08 [ 26D3895A519220E94D241A8858D40CD9, CBDE2B937D2897FC2F356F73D983023F7CBE3C9E8A2873877E5CAF40F3D9A680 ] klwfp C:\Windows\system32\DRIVERS\klwfp.sys
19:20:41.0670 0x0a08 klwfp - ok
19:20:41.0675 0x0a08 [ 91234D71CEED29F2DBA16942CABDCA4F, 5D71BAC86C33BC77EEBF1ECB8F372DFE631991E4C5F36EAF0C8C957150BD6D52 ] Klwtp C:\Windows\system32\DRIVERS\klwtp.sys
19:20:41.0680 0x0a08 Klwtp - ok
19:20:41.0685 0x0a08 [ 1686DE8288052316EFDD49EEA8929065, AD43D6ACCD8693BD76F218E1A4EE088BA061C1309A3E7DAA7EC94D875985D895 ] kneps C:\Windows\system32\DRIVERS\kneps.sys
19:20:41.0692 0x0a08 kneps - ok
19:20:41.0701 0x0a08 [ 982C795DE20CED7AEDD2E7899B5D9BC1, 9F4E7536DB253CD83AA2AB89E9F3311714CD70F13AFD16F9B4D4CD86A70FC164 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:20:41.0709 0x0a08 KSecDD - ok
19:20:41.0718 0x0a08 [ 7D8B9214692C4D0F1646215D9984E19A, DC73503A8CA67F4E167DEA69AADDEA5F2D756E1C1F4FF42B6ECEA7E637BB80AB ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:20:41.0726 0x0a08 KSecPkg - ok
19:20:41.0729 0x0a08 [ E9BB0023D730701BB5D9839B44F5E6B5, 19D4BAC09424D331922472CFD2D0E32BEFA9188A6AF194C8D1F93FD77CE36691 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:20:41.0736 0x0a08 ksthunk - ok
19:20:41.0743 0x0a08 [ 71DE1AD9B23661EEC4F2A6EAA5A7D33D, 3219AEF3D6AE5933AE669FD2ED9ED95A8780612E39F31DB3DB9ED6B6244C5F7B ] KtmRm C:\Windows\system32\msdtckrm.dll
19:20:41.0758 0x0a08 KtmRm - ok
19:20:41.0764 0x0a08 [ 8BBB2B4429AF340481520C20C17FC5B6, 9E32815349195FC4B1BE213600FD407F2EAEEC8368289EB3E6B769125A739C08 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:20:41.0777 0x0a08 LanmanServer - ok
19:20:41.0783 0x0a08 [ 1F5D48B1DA1B812BD2411CA44D75DD32, D1BDB8142CB13E8C6DD6F42E07C9D19BBBF6410D5122A04C01B34B95B442DD95 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:20:41.0796 0x0a08 LanmanWorkstation - ok
19:20:41.0800 0x0a08 [ 02C54C5C7EBE371EC0C59795ED22213F, 712AFE0EDF40436124F3FD55ED9B5A3A33A8761A58F4D482BB65229741B1C270 ] lfsvc C:\Windows\System32\lfsvc.dll
19:20:41.0807 0x0a08 lfsvc - ok
19:20:41.0810 0x0a08 [ 01BF128CC327A2E53898F732AF52B3DB, D62ACDA69D9942F9CEF400874DBB6EAF9811D9657CBFEF89174F88D76BB8D8EA ] LicenseManager C:\Windows\system32\LicenseManagerSvc.dll
19:20:41.0818 0x0a08 LicenseManager - ok
19:20:41.0821 0x0a08 [ EC34EED89C34B27C292166B725AC7A7B, 58F1BA0CB7743314AC012A82F8CE4072CBDD05D9570C52BC18DC551882F5B1BA ] lltdio C:\Windows\system32\drivers\lltdio.sys
19:20:41.0831 0x0a08 lltdio - ok
19:20:41.0837 0x0a08 [ 2C23283A0815B048C06D8C0ED76AAD95, 4335546939C1A98CFE9A4403CC82D79CC713439E4DFD1F4760FDD867305151E0 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:20:41.0855 0x0a08 lltdsvc - ok
19:20:41.0858 0x0a08 [ CB6365E995F4DB856866500EDD8F61C1, 717ED387F245CAC68217B0F393D7B8AB3805721AB2C4D2D43430FE6E740F0856 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:20:41.0866 0x0a08 lmhosts - ok
19:20:41.0871 0x0a08 [ 961F28D879D345BFA50AF51285C90F2E, F9931A436651F695B746BC0C07E833D9C9F64126746DF976E691E6CAE26DAC9B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:20:41.0878 0x0a08 LSI_SAS - ok
19:20:41.0881 0x0a08 [ 6BFB8D1B3407518BE06B6F81F92FA0F5, DE0818DCC0D8D1D30A29AB167C65461A78100ABE2368637CEB9D0ED2B4E88D8E ] LSI_SAS2i C:\Windows\system32\drivers\lsi_sas2i.sys
19:20:41.0888 0x0a08 LSI_SAS2i - ok
19:20:41.0892 0x0a08 [ BE0E47988D78F731DEC2C0CB03E765CB, CA0015E87A3962611DBF714253FA618A6568346BAE640884432C1D44DE4C8684 ] LSI_SAS3i C:\Windows\system32\drivers\lsi_sas3i.sys
19:20:41.0899 0x0a08 LSI_SAS3i - ok
19:20:41.0903 0x0a08 [ F99BF02BE9219986817BF094981EEB18, 4303C772366065885C5D937B2E9AC0BF80C84BFB2737716055AD57BF6AADD673 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
19:20:41.0913 0x0a08 LSI_SSS - ok
19:20:41.0924 0x0a08 [ FFAA37FBBDD161E8C200C83B40F7872E, 0637B3119FC220CB8E23EE6694A9F1F25CF8D61008B14F6E30FDC17DCF9E077E ] LSM C:\Windows\System32\lsm.dll
19:20:41.0946 0x0a08 LSM - ok
19:20:41.0952 0x0a08 [ 2FCF837196082864F66CFD9CAB256275, 8BE01C3BCBC1E6E5D1FD7F49E936482E61ACB805F397AB81B8D39C2F0F1083BD ] luafv C:\Windows\system32\drivers\luafv.sys
19:20:41.0963 0x0a08 luafv - ok
19:20:41.0967 0x0a08 [ 56B24B359838BE86B013C2CFD38BDFC4, 38EA2D320F0CD80E3654AA1A5CA1CCAB1CA5519A562EEE41DC2E5EDF47CEF3F4 ] MapsBroker C:\Windows\System32\moshost.dll
19:20:41.0979 0x0a08 MapsBroker - ok
19:20:41.0981 0x0a08 [ 2ED29B635F35E31A1C0D3DDB7DD2AD03, F70CC20B98C2DBCD13B0D509D92B3BC3828D1B88F3ACD60C860E163064844181 ] megasas C:\Windows\system32\drivers\megasas.sys
19:20:41.0989 0x0a08 megasas - ok
19:20:42.0000 0x0a08 [ 22E3CB85870879CBAE13C5095A8B12E3, 5FA5A8EFBA117089CFDBE09743A16BC3A7CC2042C96ABA1F57901747493106BF ] megasr C:\Windows\system32\drivers\megasr.sys
19:20:42.0015 0x0a08 megasr - ok
19:20:42.0021 0x0a08 [ 6D1671CB2E5402F01D2F13ECF764CAA1, 4778630F602FE8F9B9112DC5BB7A179632000D10D80C28E93711404108FCC6E0 ] MEIx64 C:\Windows\System32\drivers\TeeDriverW8x64.sys
19:20:42.0029 0x0a08 MEIx64 - ok
19:20:42.0032 0x0a08 [ F2C23E25636BCA3543E6AD7858E861B7, 0CAB0A037471B4858CE9477E49BF50A5E3E6685E05F8A4BD2D9238551D5073A6 ] MessagingService C:\Windows\System32\MessagingService.dll
19:20:42.0041 0x0a08 MessagingService - ok
19:20:42.0054 0x0a08 [ D41920FBFFF2BBCBBC69A5B383AD022E, E66218A8303422EA10C19BA12343740B9A1A70B11B39E185E805B4F74CD2B75E ] mlx4_bus C:\Windows\System32\drivers\mlx4_bus.sys
19:20:42.0071 0x0a08 mlx4_bus - ok
19:20:42.0075 0x0a08 [ 64BD0C87064EA20C2D3DC4199F9C239C, ED69706277A58ED2C5F2B1B4E9A4A9C7C20173D46EB57FB31D8B63340BA23193 ] MMCSS C:\Windows\system32\drivers\mmcss.sys
19:20:42.0082 0x0a08 MMCSS - ok
19:20:42.0085 0x0a08 [ 8D4B46FA84A3A3702EDADD37FAC6EDBA, E3B9E12BD324FE637C365FDC5E490C41889047004D4FC8F7D78339484F2F717B ] Modem C:\Windows\system32\drivers\modem.sys
19:20:42.0094 0x0a08 Modem - ok
19:20:42.0096 0x0a08 [ 78FEC1BDB168370F131BFBFEA0A04E9D, E07B1BC429C2CFBD6162F89A6502C67A4BAD904ADC05D3505D87A0B2BCE1061B ] monitor C:\Windows\System32\drivers\monitor.sys
19:20:42.0104 0x0a08 monitor - ok
19:20:42.0107 0x0a08 [ D1CC0833CFBC4222A95CAA5D0C8C78FF, 54F04374C6D3EFF5C1B794C069870458F10757E5773AEE911957089EAF51EC8D ] mouclass C:\Windows\System32\drivers\mouclass.sys
19:20:42.0117 0x0a08 mouclass - ok
19:20:42.0120 0x0a08 [ C2E05EC6B80BCF5AE362DA873E1BCE64, 4ABE5CA2005A54E92259EDB52205A5C59BDB83026FC0CD7CBB1E3A003C2B535B ] mouhid C:\Windows\System32\drivers\mouhid.sys
19:20:42.0127 0x0a08 mouhid - ok
19:20:42.0131 0x0a08 [ D5B7668A8F6C67C51FA5C6C513396D6C, 35985AD89344A8464BD78B8DA6A772E4E60A2EB93072AC23673A86EFD0B2270A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:20:42.0138 0x0a08 mountmgr - ok
19:20:42.0142 0x0a08 [ 5FBCB85D127BE21E3A9DAF11A13C00EA, D00AB99CC813E26B0BD2D39161D4138AB89A06B3E3A28712F2D5BCA60905BEC4 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:20:42.0150 0x0a08 mpsdrv - ok
19:20:42.0164 0x0a08 [ 0B28F2ACE5103586D322AD98FAA01309, CE3053DEB6E452C6DCDFD371CF113EB0D740DED6C1C537CB749D1BE5E97FAB09 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:20:42.0189 0x0a08 MpsSvc - ok
19:20:42.0195 0x0a08 [ BF6CA7EA5ECD6CF72D3D76652A9B8280, 8EC031D0D8E75CB583B129CBA518701097697498621307108388FA05FBF604BB ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:20:42.0205 0x0a08 MRxDAV - ok
19:20:42.0213 0x0a08 [ 0B3B0C1D86050355676640488FA897D3, DBED9D6F7AAFB11F4C00C1F69DB7A887A3058E5FA66615A1640242439822B60C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:20:42.0225 0x0a08 mrxsmb - ok
19:20:42.0233 0x0a08 [ 1A490555FD330CA2764D89191177C867, 1004AE2F80BEA9A6DBA3E6B5D2DDFA44FBA253F7137D60B000B094699DE1CB12 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:20:42.0245 0x0a08 mrxsmb10 - ok
19:20:42.0250 0x0a08 [ 0F47A6C09F0A7FB5513D322A2B9BE4EC, 00A17CB55D232E11F3D24D0B43FE4FA9E55F7EF5E5607B26ED84C13108AAC4FA ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:20:42.0260 0x0a08 mrxsmb20 - ok
19:20:42.0264 0x0a08 [ A4411C522D41707D5BCA817A5BB9E30B, EF7505BE475ECAB2B5E66A7419EDAF42A7E7A65BAD3BBE346A8CEE5DD69782CC ] MsBridge C:\Windows\system32\drivers\bridge.sys
19:20:42.0272 0x0a08 MsBridge - ok
19:20:42.0276 0x0a08 [ 807A6636828E5F43C10A01474B8907EE, F275645F4F0D0A796C33C03EA7FA563A0B890AB3A93E5F99C5EA166F91D249B1 ] MSDTC C:\Windows\System32\msdtc.exe
19:20:42.0286 0x0a08 MSDTC - ok
19:20:42.0290 0x0a08 [ D123343DDB02E372B02BF2C4293F835F, 8E02D9F7E5DA717B64538444B3FE1C55AA4B0F26F51DA20947E971D27EA09D12 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:20:42.0298 0x0a08 Msfs - ok
19:20:42.0301 0x0a08 [ B3358F380BA3F29F56BE0F7734C24D5F, 229D9E72C429AC51BF6E7C8306218620CB1AA50FE39BA6C11ED0F643E7AF90E5 ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
19:20:42.0307 0x0a08 msgpiowin32 - ok
19:20:42.0311 0x0a08 [ B2044D5D125F249680508EC0B2AAEFAC, 9631FF42DA5A7CEE1F2607AA8972EF0A67616F0EEEBC95F97B1C8F5A577ED5C4 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:20:42.0317 0x0a08 mshidkmdf - ok
19:20:42.0320 0x0a08 [ 36ABE7FC80BED4FE44754AE5CFB51432, FB89DF3A50C52B69D4E831A370157D1901810093A0D7D7120A120FC5C6E14BF5 ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
19:20:42.0328 0x0a08 mshidumdf - ok
19:20:42.0330 0x0a08 [ 59307FEAFC9E72EEEC56B7FD7D294F4C, 56576635870FC68980977FFA0E7F8E8D69A7981DECF5B52D0B2A82E3BA6685EA ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:20:42.0336 0x0a08 msisadrv - ok
19:20:42.0341 0x0a08 [ 236A38F5CB0A23BF0ACCD70ED0BD7F70, 8106B528458E6C8E4437D9064D58F10FF195E67CD308AEBBD5F860AD2D59DCC4 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:20:42.0353 0x0a08 MSiSCSI - ok
19:20:42.0355 0x0a08 msiserver - ok
19:20:42.0357 0x0a08 [ E9457EDFEBC774199F907395C6D09CA2, C3655CE83F4AD1258382722E9A99C33FDD3AA40B62CFEB8DFDD141E254E6DCE2 ] MSKSSRV C:\Windows\system32\DRIVERS\MSKSSRV.sys
19:20:42.0365 0x0a08 MSKSSRV - ok
19:20:42.0368 0x0a08 [ C85D79735641D27C5821C35ECDDC2334, C1BAFD98122B04665870171C143EC119181351D10777A83680A63BF305703FF3 ] MsLldp C:\Windows\system32\drivers\mslldp.sys
19:20:42.0380 0x0a08 MsLldp - ok
19:20:42.0381 0x0a08 [ EF75184B64356850D0F04D049C253526, 325476F53372BD70201347F044C8EFEC0DB939E1926454B6DCC0CF7864969650 ] MSPCLOCK C:\Windows\system32\DRIVERS\MSPCLOCK.sys
19:20:42.0389 0x0a08 MSPCLOCK - ok
19:20:42.0392 0x0a08 [ 543933D166C618E7588EA77707EC1683, 84A65D277E28FDD7CE2345188891093AC88B577E4C528AD39AB629E341199688 ] MSPQM C:\Windows\system32\DRIVERS\MSPQM.sys
19:20:42.0399 0x0a08 MSPQM - ok
19:20:42.0406 0x0a08 [ 182711E9DDF70121A20EBB61B2DFB9E8, 70606503F6280EA3175B9AEC8370A8F461575755DA86EF6E9C9D04EAD61481FA ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:20:42.0417 0x0a08 MsRPC - ok
19:20:42.0422 0x0a08 [ E887FFDD6734C496407E9219225CB6FF, 0EC9A79224BCE5D0A782E62CC38E3494E8FB65DFC07C66D25C5A1A351121C27D ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
19:20:42.0431 0x0a08 mssmbios - ok
19:20:42.0434 0x0a08 [ 83A2AB75951000D681FABDB80C07AEFC, 3B2F582F097E3F934C4587B27CB05525350F36924B74CA6BCD364878FA8EC273 ] MSTEE C:\Windows\system32\DRIVERS\MSTEE.sys
19:20:42.0441 0x0a08 MSTEE - ok
19:20:42.0444 0x0a08 [ 4FA0483896FC16583851EFB733FCB083, BB59243ABE32FBE92EC1B04D24239BE2DF7C2354A407C2EFF97623F07DCBDA35 ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
19:20:42.0452 0x0a08 MTConfig - ok
19:20:42.0456 0x0a08 [ 60F88248608315E13391C2F1C3B4473F, 99E8B74118A01FC281A1C6B323EFD1A8EA1997B81A013442205066F55327D555 ] Mup C:\Windows\system32\Drivers\mup.sys
19:20:42.0466 0x0a08 Mup - ok
19:20:42.0470 0x0a08 [ 218705233D02776AE4D19CC37D985C1B, 3D92925867B6B8FFAF78E4080139DCB3D45E1E6E1D0AFB6A4FE248B002BD8471 ] mvumis C:\Windows\system32\drivers\mvumis.sys
19:20:42.0477 0x0a08 mvumis - ok
19:20:42.0480 0x0a08 [ 705E9675014EB688BEDD967B1ABECF19, 7FA4B0A5120DD415C5D3F3BE56C69455647029332DC2E9B4E9874AF3C34F89AD ] mvusbews C:\Windows\System32\Drivers\mvusbews.sys
19:20:42.0486 0x0a08 mvusbews - ok
19:20:42.0497 0x0a08 [ AA4CD20708B7E0412A5316D7E2875103, 4E60A0865B7656735F3AB34AF5FE48304138F47DE961D4D16661617D711DEBC0 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:20:42.0513 0x0a08 NativeWifiP - ok
19:20:42.0518 0x0a08 [ A340A4B27CC7DEDDF953B7E2C9699747, 4C5AB23BD0C69B17E9BD29CAFEDC100A6EFC78BAB645B007FCAE4318C459D345 ] NcaSvc C:\Windows\System32\ncasvc.dll
19:20:42.0529 0x0a08 NcaSvc - ok
19:20:42.0536 0x0a08 [ 24146738C422814EEB2A98FF1FC5C6E1, 3C70C6768681CE63DED339822EFB36194037B987D92456B9E955061A3A3C63BC ] NcbService C:\Windows\System32\ncbservice.dll
19:20:42.0552 0x0a08 NcbService - ok
19:20:42.0555 0x0a08 [ 476466DC3AB2327E2DBFAEC11798E2EE, 9ACD74720664CF3F239601DF0BE80AC443AF0FBF666CBB8509169364FB22B95D ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
19:20:42.0570 0x0a08 NcdAutoSetup - ok
19:20:42.0573 0x0a08 [ B57CE307DA101C739885B7CC0678077F, F7F45DB6D306060F0FE0E59F39C3B95F6A9B6173930F22C5C41B2003895D6642 ] ndfltr C:\Windows\System32\drivers\ndfltr.sys
19:20:42.0580 0x0a08 ndfltr - ok
19:20:42.0597 0x0a08 [ E582DA849A58524E645545FB68B6625D, B74E2CF078F6C575EFC4A2E4293D03FE6BA933307D656E0E57FFA17EF324948D ] NDIS C:\Windows\system32\drivers\ndis.sys
19:20:42.0620 0x0a08 NDIS - ok
19:20:42.0624 0x0a08 [ 202260E7CDD731A32AF62ABD1ABEE008, 0E019FAE09B2659CC3267756DB962CCD69172BA67E3288B491F7B455287A5392 ] NdisCap C:\Windows\system32\drivers\ndiscap.sys
19:20:42.0633 0x0a08 NdisCap - ok
19:20:42.0636 0x0a08 [ A1D473D0CF10561F29B58EA7C5412A92, 3DBFC1D769E03E30C87FF4F30A9B523A69A7E0CD4EB87F8A9ECE190FEB84C569 ] NdisImPlatform C:\Windows\system32\drivers\NdisImPlatform.sys
19:20:42.0648 0x0a08 NdisImPlatform - ok
19:20:42.0651 0x0a08 [ 1A0AE283B8DE6BB76412A0F8213D45AC, 91AFFDC7A9277EB59CD54021049BEA715078F90470B8A12F3E9F1386DF068D2D ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:20:42.0661 0x0a08 NdisTapi - ok
19:20:42.0664 0x0a08 [ A74EE2D2C0BFF5EC3A6185791868C4CA, A346320DEBEAE890575B4C6594FB3A3A9890A0E86881ADD8376E442282C88D38 ] Ndisuio C:\Windows\system32\drivers\ndisuio.sys
19:20:42.0673 0x0a08 Ndisuio - ok
19:20:42.0675 0x0a08 [ 32A9BD1342640D48AD85C8B3E812B984, B702B05A0180472139B35B105DD3B6B6F75AEDC9DD1EE342FB576259076455AE ] NdisVirtualBus C:\Windows\System32\drivers\NdisVirtualBus.sys
19:20:42.0685 0x0a08 NdisVirtualBus - ok
19:20:42.0690 0x0a08 [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] NdisWan C:\Windows\System32\drivers\ndiswan.sys
19:20:42.0703 0x0a08 NdisWan - ok
19:20:42.0707 0x0a08 [ 6A6A8CF5EE61801375A38EBB871D4057, AE8EFF18D82BBE83101B380189A6889822891A993EB865E2E81C1D2F60B77C4C ] ndiswanlegacy C:\Windows\system32\DRIVERS\ndiswan.sys
19:20:42.0719 0x0a08 ndiswanlegacy - ok
19:20:42.0723 0x0a08 [ 50AEF8EF0064A91ABB08D858D039C9DE, 16F1CBE1EC3778D157CC054261068C8D7F8A72D85853CB70178F8DF81D238C8F ] ndproxy C:\Windows\system32\DRIVERS\NDProxy.sys
19:20:42.0732 0x0a08 ndproxy - ok
19:20:42.0736 0x0a08 [ D358DF634F52247CB43F0781218F4D6E, D375E9E681551467FC5F7AB2AC053C9F22AAC541C0BCBA57090211F45009342C ] Ndu C:\Windows\system32\drivers\Ndu.sys
19:20:42.0746 0x0a08 Ndu - ok
19:20:42.0749 0x0a08 [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl C:\Windows\System32\drivers\netaapl64.sys
19:20:42.0757 0x0a08 Netaapl - ok
19:20:42.0760 0x0a08 [ 026618ECF6C4BEBDCB7885D42EC0DBE4, 8E7E13361DCF8748FA3AD518B3DE0A3DCE932316EE32E5529E75785BC5395AD1 ] NetBIOS C:\Windows\system32\drivers\netbios.sys
19:20:42.0767 0x0a08 NetBIOS - ok
19:20:42.0775 0x0a08 [ F51C02D992A8D6BC5EC4D990F227D4C7, DBBDA422BFA82219403689637BE8D6B0D0A893895143E807FA5A007C166454CB ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:20:42.0788 0x0a08 NetBT - ok
19:20:42.0792 0x0a08 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] Netlogon C:\Windows\system32\lsass.exe
19:20:42.0800 0x0a08 Netlogon - ok
19:20:42.0806 0x0a08 [ 7FD4C3D32DAE890608F44074A3437CD8, 5B7D9E9AEE26896B818F3C5DBE4C96A33D43CE2CF7716B95AAB7203611C03BFE ] Netman C:\Windows\System32\netman.dll
19:20:42.0820 0x0a08 Netman - ok
19:20:42.0830 0x0a08 [ A059F75402710535A90A8D043674A514, E98536DF74A2B75FDBA6B866DC1909544292DFE5E14F984941470FBA6E8D810C ] netprofm C:\Windows\System32\netprofmsvc.dll
19:20:42.0849 0x0a08 netprofm - ok
19:20:42.0855 0x0a08 [ 9C6EE1DE9CF7B77FF550A737816EB6DB, 586D561E1A318778668D148B8367D1F7452E770D1743ED5F8EE6EAB03DB31916 ] NetSetupSvc C:\Windows\System32\NetSetupSvc.dll
19:20:42.0867 0x0a08 NetSetupSvc - ok
19:20:42.0874 0x0a08 [ 9E9BEB22644CE1DA521A1D7821BF891F, 5480D52AE1942205B513F916DBCBF5B5F2FFF92D927F4E598FBA618E75BBC2E9 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:20:42.0883 0x0a08 NetTcpPortSharing - ok
19:20:42.0890 0x0a08 [ 0FB83658FBB2C5A18AB98C5C94DB9FAF, 2D15A49F47D8185D7914D26916D1237FCBE2F8351A64877CDDDDE26E766C3D2F ] NgcCtnrSvc C:\Windows\System32\NgcCtnrSvc.dll
19:20:42.0904 0x0a08 NgcCtnrSvc - ok
19:20:42.0916 0x0a08 [ 7AAA9916AA10F4B0E9743798A5BA6549, 2E38EEF3F487A7DD0B719A048FFA0EB36B2487A1068BB322553E9DD2FCE46711 ] NgcSvc C:\Windows\system32\ngcsvc.dll
19:20:42.0941 0x0a08 NgcSvc - ok
19:20:42.0952 0x0a08 [ 1B8F07B59F7DAE02264FB8A16088C467, 1795DA9F72C34A9F47D9AAF5E95D40C3296948EB89D9600679AB4660671A5C65 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:20:42.0971 0x0a08 NlaSvc - ok
19:20:42.0977 0x0a08 [ 465DC580170CD844206D7E3EF1DBF2A1, 5A14001029BE154C708CCA34449B280905DB79978FC7F0BE0CF20B20E47752CF ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:20:42.0986 0x0a08 Npfs - ok
19:20:42.0990 0x0a08 [ 29395C214D2CD4C81F73166AB988A797, 3631EB2EA17E455ECD151C0BC9A3DF6EC87C75B15DC9B607CFB68D7C463E04B7 ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
19:20:42.0999 0x0a08 npsvctrig - ok
19:20:43.0011 0x0a08 [ AF8B7848E102A83AAECCD24B181CEBE5, B2AAE3567EE3A7975CDFCB3FE41D33C74D4486BFF35FF56E0516A01C744BA52B ] nsi C:\Windows\system32\nsisvc.dll
19:20:43.0022 0x0a08 nsi - ok
19:20:43.0027 0x0a08 [ 2871225495F832A8C8A7DD1A17EDB3DC, 2F6664C7F5FB2341B2AAF3C5A258FA0D7AEEE447562D7F39FD5A4EE905C18C6D ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:20:43.0037 0x0a08 nsiproxy - ok
19:20:43.0071 0x0a08 [ 19BD8A88AAC580592668B070AC0727D9, 60DB84895C40E6412BEB2D0E4D7F05891446B9DE992D70579CC90BA3FB27FC01 ] NTFS C:\Windows\system32\drivers\NTFS.sys
19:20:43.0112 0x0a08 NTFS - ok
19:20:43.0117 0x0a08 [ 6DBD703320484C37CEA9E4E2D266A8CE, 85D6F73C0E3FDE16829C9BC0D13DD89E64183EAE02F84607F6B8440CB7F366E6 ] Null C:\Windows\system32\drivers\Null.sys
19:20:43.0126 0x0a08 Null - ok
19:20:43.0131 0x0a08 [ 1F346E981A76BA8B98540B3481C1D659, 701F49AD67AD23A5B935F8A2A8A64CBEC194368889FE8CF09EEE44192D25E3E3 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
19:20:43.0139 0x0a08 NVHDA - ok
19:20:43.0286 0x0a08 [ E5613925525AEB14E5A479C5AD6C8ADB, 09782EE1D1B566DB2C1A90602D0A6795F226F22C75F41D9A0466584900AB3922 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:20:43.0365 0x182c Object send P2P result: true
19:20:43.0443 0x0a08 nvlddmkm - ok
19:20:43.0461 0x0a08 [ 604D27CC38CC23493F218D0BB834B3FF, EF5E5759CCF16DD97271C82DAF47FB2086EBCA5DE7D05177B70CA1197B95F41E ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:20:43.0469 0x0a08 nvraid - ok
19:20:43.0473 0x0a08 [ 8B50D897657AB4A15FD9E251BBF7D107, 36036130DD46D9BF105AC7176E219F3BE7D1168A660A0F8DFF76F61FBFA4B417 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:20:43.0483 0x0a08 nvstor - ok
19:20:43.0498 0x0a08 [ 1CD8D5BF5E4058A2E12949D74A7E27FD, EB99D0451F28E20A06B9E184217B8B968C1BA968C24E1DD223C3AC648D968641 ] nvsvc C:\Windows\system32\nvvsvc.exe
19:20:43.0514 0x0a08 nvsvc - ok
19:20:43.0519 0x0a08 [ 31F990B2B6B91E9D7A667405CE12FCB1, 907E095D1E83CDAFF34BE789FC41CDD7BB4DEE23261E1D03C1CF0D4D030534AC ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:20:43.0527 0x0a08 nv_agp - ok
19:20:43.0534 0x0a08 [ 7F3A0D052B8E00E730316210B1DD092F, 14BD026EA759F6C81ED6B4DBB04E0584B7F6456725503FC73CD4347B7743005F ] OneSyncSvc C:\Windows\System32\APHostService.dll
19:20:43.0551 0x0a08 OneSyncSvc - ok
19:20:43.0582 0x0a08 [ 7D006FC340B301A1DEAFB5878C078A12, 245A4647DEB2CD5D0C3FF07B45D50D6EE039733000C7F7FEC0A1B58162594B9D ] Origin Client Service H:\Programme\Origin\OriginClientService.exe
19:20:43.0613 0x0a08 Origin Client Service - ok
19:20:43.0620 0x0a08 [ 877434CB68245171EEC946C203CB2DFD, 9CC8BEC12BA2371BD5B35F968470C93E30E6B2363F7BF46D601747663106F833 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:20:43.0634 0x0a08 ose64 - detected UnsignedFile.Multi.Generic ( 1 )
19:20:46.0105 0x0a08 ose64 ( UnsignedFile.Multi.Generic ) - warning
19:20:48.0641 0x0a08 [ 334131C162B118EF49930D41B0E17825, 10EF08870B6E118AED2E0E3F45E06BA8A485439823BE98F44E34E7D2B65AA2EF ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:20:48.0656 0x0a08 p2pimsvc - ok
19:20:48.0664 0x0a08 [ 4A5634915AF62C983E08425905D0C04C, 09BC3F7AD9F79C5FF59520933D06FE155AC21CD0ABAFE66B81C9F87D83A2339F ] p2psvc C:\Windows\system32\p2psvc.dll
19:20:48.0681 0x0a08 p2psvc - ok
19:20:48.0686 0x0a08 [ 7D0FC96264C0F8F2C1321E33E8EB646C, 82A06437B9B096BCCF5CE31BDF3539696E2E41DFA9870C358566EEE2F7D3B447 ] Parport C:\Windows\System32\drivers\parport.sys
19:20:48.0695 0x0a08 Parport - ok
19:20:48.0700 0x0a08 [ 24AC0FD10325FBC2303B29A5F237AEB0, D94B26A36EBE4EFE8EA270FA6600811206830480BE953809F74FAB80628DF879 ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:20:48.0708 0x0a08 partmgr - ok
19:20:48.0721 0x0a08 [ 0ECA2ADD5FBCE73183A68935C71B40B7, 08CC5F2F10D1DD1A1396CC29196314003491D3AF3DE59CADB281F252577F1860 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:20:48.0737 0x0a08 PcaSvc - ok
19:20:48.0746 0x0a08 [ CFFE69B6C276A3418687109EA8AC9E7D, A516B2F4BFB0CD8B38219E3BF783C0BD99CD9EA1BACBE2284987F6DC0976BD36 ] pci C:\Windows\system32\drivers\pci.sys
19:20:48.0759 0x0a08 pci - ok
19:20:48.0762 0x0a08 [ 2B4D98DF0CA57FB9536DBC80D2449D1F, AB34FA8585A20854369C0FAEB18BF5C7734D7E3C791F644B0576E40D609FCD09 ] pciide C:\Windows\system32\drivers\pciide.sys
19:20:48.0770 0x0a08 pciide - ok
19:20:48.0773 0x0a08 [ F4D5793BF2E58AF15C6CF2FEEF9E73EB, 9B5A40AF8838063F8F0A2B1480B39A2711AAE78BD972CDA60CCA0EB2BA211A87 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:20:48.0781 0x0a08 pcmcia - ok
19:20:48.0785 0x0a08 [ 22A53744CEEADFFFD33BA010FAD95229, 30B775EC9795105B8BF785BD63115C160955E7EFF74B995D3EC288138D1825A3 ] pcw C:\Windows\system32\drivers\pcw.sys
19:20:48.0793 0x0a08 pcw - ok
19:20:48.0797 0x0a08 [ 67B9684B8272D5EBD1CCBB1DBD425EC8, 09BE2A2EB3A71E594D08B8D817820965DEEAD283029EBB0B74CCC658A2706233 ] pdc C:\Windows\system32\drivers\pdc.sys
19:20:48.0806 0x0a08 pdc - ok
19:20:48.0819 0x0a08 [ E2F8376F9731D12A009C522036C6073A, 5B8B68D3C013AAA8ED368C97042984C35E8D023542DBA404E7A03E89F2357E66 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:20:48.0845 0x0a08 PEAUTH - ok
19:20:48.0883 0x0a08 [ C7D210982B6C8454E52191D0DCF6DC52, D53D575CD9A0AB7EA94E7D1B9730ABE0A582CA3460AEAC4680D01034D69D3949 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
19:20:48.0936 0x0a08 PeerDistSvc - ok
19:20:48.0943 0x0a08 [ 1398A85E59698067CBBE1D66A9C13ADF, E3609F183068BFAED756B2F9237181D60A6F6D78691248B8BF5B0AEB6A367E3D ] percsas2i C:\Windows\system32\drivers\percsas2i.sys
19:20:48.0949 0x0a08 percsas2i - ok
19:20:48.0954 0x0a08 [ 35F7C7AD709D909D618D9EDF987FC3ED, EE713E33688E74C5A2546CC58EBD8EA8F8116F25E42DCF8DA21DCBC7C7590E0E ] percsas3i C:\Windows\system32\drivers\percsas3i.sys
19:20:48.0961 0x0a08 percsas3i - ok
19:20:48.0974 0x0624 Object required for P2P: [ 9A2A2F3C69B9A30B6E78536F6D258BAD ] iai2c
19:20:48.0984 0x0a08 [ 0DAF7B7D85F7AF38E29161460899C63F, F2609F2BD02C714857F5D5E6EF580643429C54E175AA72D38467F8F3A4E7F59F ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:20:48.0992 0x0a08 PerfHost - ok
19:20:49.0006 0x0a08 [ 57606281E23B0F53347527691E947B2B, 7030182E706CEBE6BD52BDC71CA8F2230AD445AE6554188E76F09A5E2612BD2E ] PhoneSvc C:\Windows\System32\PhoneService.dll
19:20:49.0029 0x0a08 PhoneSvc - ok
19:20:49.0037 0x0a08 [ 04F7878E7017105AB782353231561749, FB2811D98216720D4FDF0AC0EDF16C6CD33D7224B4CAFA752B4D2A839E6DD88A ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
19:20:49.0049 0x0a08 PimIndexMaintenanceSvc - ok
19:20:49.0071 0x0a08 [ A546F72EFFE5CBBC98003A0CA19DA0F8, 89AE396676A37D851F46427E421E8E8ED5B4BADC33023F1E215CC352A4110F44 ] pla C:\Windows\system32\pla.dll
19:20:49.0110 0x0a08 pla - ok
19:20:49.0115 0x0a08 [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:20:49.0128 0x0a08 PlugPlay - ok
19:20:49.0131 0x0a08 PnkBstrA - ok
19:20:49.0134 0x0a08 PnkBstrB - ok
19:20:49.0138 0x0a08 [ 6BF7093B27EA90FD9222845D19C1BE5F, CF8A6764BB6B369258F21FD303E4CAE08632195620A0BD66B62F62F5D7B762B8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:20:50.0791 0x0a08 srvnet - ok
19:20:50.0797 0x0a08 [ 8C1786C073A496B8C0C8A5450A4FFD5B, 13BF3B42A63CE6C461259D4CE767FB0DE1F10433512A11D2B2C033E36E652542 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:20:50.0811 0x0a08 SSDPSRV - ok
19:20:50.0817 0x0a08 [ 217A982201052EFC8C3C0C88D229791C, 11509E3446ED7B75C9A05CDC4A7AF18926CB463E0D98BAE1CD5DB43E88F94F90 ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:20:50.0831 0x0a08 SstpSvc - ok
19:20:50.0868 0x0a08 [ 58863C57E4598C4F9DA967C5C36CFA5D, BB34FBC324E84E05128258CE3755241ECB63F7F2AE7F96716AC373931FAF92A8 ] StateRepository C:\Windows\system32\windows.staterepository.dll
19:20:50.0930 0x0a08 StateRepository - ok
19:20:50.0941 0x0a08 [ 044C02B6E0359B310C5881261DD9C484, 3ACAB69FC87E262C9C273EE81038F1291A1E019B309C4727E5AE4E26A855BBB2 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:20:50.0950 0x0a08 Stereo Service - ok
19:20:50.0954 0x0a08 [ CCDA497C880AD16D87EDFAEFCFB2EDF5, 622599AA35ACFF0375DA252210BE42E7E90F30EDFEFF2F62FDB14AE6E45B5F88 ] stexstor C:\Windows\system32\drivers\stexstor.sys
19:20:50.0961 0x0a08 stexstor - ok
19:20:50.0972 0x0a08 [ 75476CAA8FA0A4E573948CDE8C7F0304, 68C4405CACA77AEED71761875A9AF60BCFBDD39E356BEA1BA8226E099BAA5FA4 ] stisvc C:\Windows\System32\wiaservc.dll
19:20:50.0996 0x0a08 stisvc - ok
19:20:51.0001 0x0a08 [ BF8EA6FC3358C2F69678E3E94F764F84, D274DAD7B5756DD49CA44277C73497F1EC465C8E365CC730CD194932C3825920 ] storahci C:\Windows\system32\drivers\storahci.sys
19:20:51.0009 0x0a08 storahci - ok
19:20:51.0013 0x0a08 [ 32FF460DA8C1F370F5C08B7654899B73, 0C9D5D38D033109BA672ABAFEF0F0CD295E9FFA108ACFCA9044429D9B2CA9057 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
19:20:51.0019 0x0a08 storflt - ok
19:20:51.0023 0x0a08 [ CC21DB3EF619B9480FE31A4EFE92CBEB, 256EFCA2F231F41D34250E1460BF88894D943EAE83A0B153FCADE700AB4DE11E ] stornvme C:\Windows\system32\drivers\stornvme.sys
19:20:51.0031 0x0a08 stornvme - ok
19:20:51.0036 0x0a08 [ 390B8A75768E2689586539C224520895, D72F52E6D7AC5DC318FF9C1DF1F4E8A435D65B6BB59D7F1642222EC026BC54DB ] storqosflt C:\Windows\system32\drivers\storqosflt.sys
19:20:51.0045 0x0a08 storqosflt - ok
19:20:51.0058 0x0a08 [ FE42F8A07885E518ED1E846C93E4B78C, 264B21A5E07654F159A3E324F3B38A8C11AF619F61B5779A46367DD99EBD00A6 ] StorSvc C:\Windows\system32\storsvc.dll
19:20:51.0079 0x0a08 StorSvc - ok
19:20:51.0082 0x0a08 [ 770A92D9D3A0BF61C97C3AFCB36847D9, 21A8CC3F8E63B971C4FF8DDED5C7032E093A7B0F16E2128A9BD2E890BA76A1D9 ] storufs C:\Windows\system32\drivers\storufs.sys
19:20:51.0088 0x0a08 storufs - ok
19:20:51.0092 0x0a08 [ 736A2418E3E7F3DB3CF6EB0A55D1D581, 2D3BBC4E0C7B51EDE7479A978E4BCD5F47A7257745179F01D2D9ECFD83CCCC82 ] storvsc C:\Windows\system32\drivers\storvsc.sys
19:20:51.0100 0x0a08 storvsc - ok
19:20:51.0104 0x0a08 [ FA8F6E3AD3F92B35D2673CC9FD20429C, 62F81CBACF7E16FEF9DE3BE95FA5C9BDB51BAE4667AE5AE71399864A390FF6D5 ] svsvc C:\Windows\system32\svsvc.dll
19:20:51.0118 0x0a08 svsvc - ok
19:20:51.0121 0x0a08 [ BD98B0225BCD49E8A62F4F8EE1D1F613, CDAD11969B2DA417079547724BECC3DB4FC4711B3C01590EB0D02774B69B6D90 ] swenum C:\Windows\System32\drivers\swenum.sys
19:20:51.0128 0x0a08 swenum - ok
19:20:51.0137 0x0a08 [ 22E539A9B96C66A713583EC017562616, 210DA61DFC7AA9AD23277D9CC0239B781F4EABD322D0803AEC9434D68B81FABD ] swprv C:\Windows\System32\swprv.dll
19:20:51.0160 0x0a08 swprv - ok
19:20:51.0164 0x0a08 [ CAE4B27B469C583131EA5AAE622F5D76, 3979006EB22489D1AAD2EC2E9F32C286EEDCDB83B37B97E58BA831263EC33B84 ] Synth3dVsc C:\Windows\System32\drivers\Synth3dVsc.sys
19:20:51.0174 0x0a08 Synth3dVsc - ok
19:20:51.0192 0x0a08 [ 34A3EB84B2A830E6F450B8F885AE4E6E, E61AC6D17B815CB71F26D71CA3CCAFD9E66A170E3ED2E64A4F20D097A0C683B5 ] SysMain C:\Windows\system32\sysmain.dll
19:20:51.0225 0x0a08 SysMain - ok
19:20:51.0233 0x0a08 [ AF2C8D7C1D4DCFD5C31501F009DF42B7, 3DDF9353F014EE99B031BBC969620CA07647FBB8D78EB4697C8D633021B46B11 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
19:20:51.0250 0x0a08 SystemEventsBroker - ok
19:20:51.0258 0x0a08 [ 6979A147C0D5C5CAB621ADC394D32B80, C30B8E3D271A1591D965559EA4A11A1BE63A34D832ED53B26CE91799C888DF77 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:20:51.0272 0x0a08 TabletInputService - ok
19:20:51.0278 0x0a08 [ 86B62FC8CB89946446F9B24FE49A66FD, 7B095310D1C78B82E5ACAC4713E101DD1323A3CF6FB39218C2E78ABE2B0385B5 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:20:51.0294 0x0a08 TapiSrv - ok
19:20:51.0327 0x0a08 [ 083A727D784009F9CCFB120C7841B7AF, 14242ECC3EB17154AD856A2C5229324BA6914291F4E2CD93E6AE251A31130448 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:20:51.0370 0x0a08 Tcpip - ok
19:20:51.0403 0x0a08 [ 083A727D784009F9CCFB120C7841B7AF, 14242ECC3EB17154AD856A2C5229324BA6914291F4E2CD93E6AE251A31130448 ] Tcpip6 C:\Windows\system32\drivers\tcpip.sys
19:20:51.0448 0x0a08 Tcpip6 - ok
19:20:51.0454 0x0a08 [ 17F37EC9042D84561C550620643D9A85, B01620BA319A1383D403E6E50C7724879520F3267654556D975CAFFF91A82C78 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:20:51.0464 0x0a08 tcpipreg - ok
19:20:51.0470 0x0a08 [ 91D3F2A6253EF83EFBD7903028F58C4D, C15768CCCF734093B0F8A5E76882B35927B716E4F14D91ACEE897E1C078D43D1 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:20:51.0479 0x0a08 tdx - ok
19:20:51.0482 0x0a08 [ E730D0EB1B84EBC98423FC8D285EDBC0, 442DD433F9D22304E64EC7ACFC4E04892D4D92D8AC545A3530FC932A2EEC4767 ] terminpt C:\Windows\System32\drivers\terminpt.sys
19:20:51.0489 0x0a08 terminpt - ok
19:20:51.0505 0x0a08 [ 14307D4801C8CEF0A615907C09E886B3, C7F34C294D70DE689F673E0B5E9253B27EFEBBE6FA38B68B3B0B0374A896407E ] TermService C:\Windows\System32\termsrv.dll
19:20:51.0534 0x0a08 TermService - ok
19:20:51.0539 0x0a08 [ D009D1BC14FD5F2AC93D1878735F6C39, D8BCE505B66E05BC00075E46B38359CA4D0FA484EB7981A74221885E8A1FFB87 ] Themes C:\Windows\system32\themeservice.dll
19:20:51.0555 0x0a08 Themes - ok
19:20:51.0562 0x0a08 [ 5F27DE2082E16D4C1D6C627C8ECBD341, 08DA3EB3EF2B2006B6F9F2C8C149DF55DE6738975D556206A814096CAB5C1411 ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
19:20:51.0580 0x0a08 TieringEngineService - ok
19:20:51.0589 0x0a08 [ 82BC3D304654F8EBEFABDDC2AD70AFE3, 466334A46F6579E7C3F619B15243B270AACE9D04FE06E5228B4759FD619BDDD9 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
19:20:51.0608 0x0a08 tiledatamodelsvc - ok
19:20:51.0613 0x0a08 [ 7E81E3E0D7F83BFE3C3975020B6C7F12, 316F9415646CC7A4E9A5F1E07310D433457E623B3E589543E4A6C73C4F77712C ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
19:20:51.0625 0x0a08 TimeBroker - ok
19:20:51.0630 0x0a08 [ 169B0A246067457FEF8A18EED7EED9D5, BF5AC0CB29E1E456253B881CD0608B578D7343E9DFE1738A14598D1DFFE1AB66 ] TPM C:\Windows\System32\drivers\tpm.sys
19:20:51.0640 0x0a08 TPM - ok
19:20:51.0644 0x0a08 [ AA84AF93CE5AF1F05838B51D20295419, 85B3EE773C691EEDFA080CD9C59D31CB58A5BC577AEE91A929F5DFBE1368AB6D ] TrkWks C:\Windows\System32\trkwks.dll
19:20:51.0655 0x0a08 TrkWks - ok
19:20:51.0659 0x0a08 [ E50DD57F496CED8873FA3E7D38BCCD42, 36B95F6F2CF48078C6B19FB452C87BB07E95C8804A5C6B526D349AC6227CAB26 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:20:51.0668 0x0a08 TrustedInstaller - ok
19:20:51.0672 0x0a08 [ 48E828C66AB016E48F2CB4DD585315FD, 063809B610F6B177B65D62D12605FB94F108DB26A9FD3067E6D6C51F0D92E774 ] tsusbflt C:\Windows\system32\drivers\TsUsbFlt.sys
19:20:51.0681 0x0a08 tsusbflt - ok
19:20:51.0685 0x0a08 [ 267C76EE60736EA5A1811A53FA02AABE, 28D4C4CB972534204B8336D0403B70E4EFE4F8369ABDE7401FFCCF7D4E3EA165 ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
19:20:51.0693 0x0a08 TsUsbGD - ok
19:20:51.0697 0x0a08 [ 8CE72F094B822AD5EE9C3A3AFC0C16B6, 827CCD849544E1DA364B03DBC82A848D2F93AD32BA14ED52709C609BC70CE5CA ] tunnel C:\Windows\System32\drivers\tunnel.sys
19:20:51.0708 0x0a08 tunnel - ok
19:20:51.0712 0x0a08 [ 56C238ACFE4CB020D3E38508249039EA, 172868080F07D98175229A02410FE751B5958ED5A3D567D4AE5736F4025DF432 ] tzautoupdate C:\Windows\system32\tzautoupdate.dll
19:20:51.0721 0x0a08 tzautoupdate - ok
19:20:51.0725 0x0a08 [ 42C546414F80BD6C0137FC3A106F8A69, 067FFCAF0059935851888BD984E848E4E1A6CC1941A8F4534067CCF0B2A3B2E6 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:20:51.0734 0x0a08 uagp35 - ok
19:20:51.0738 0x0a08 [ 1686DBC81748B096232B15F16C302985, 63D72D1838C42A95599AF3C0B19A069E310ADB091208011D7D6FBAC968D1A59A ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
19:20:51.0745 0x0a08 UASPStor - ok
19:20:51.0749 0x0a08 [ 82D3B1F4D80057826AA649D78147DE36, 344A738F6866BFD3095BB802206DDB2F9E9AD89DC39CAA7DE96455F410683829 ] UcmCx0101 C:\Windows\system32\Drivers\UcmCx.sys
19:20:51.0760 0x0a08 UcmCx0101 - ok
19:20:51.0763 0x0a08 [ 1C95F7CE37D9EFB90EBE987A9712356C, B9EE7743ADA50276F05D735C5C29E44039D630A7DC93766A0EAF400DA037E4AF ] UcmUcsi C:\Windows\System32\drivers\UcmUcsi.sys
19:20:51.0772 0x0a08 UcmUcsi - ok
19:20:51.0778 0x0a08 [ AED081772091C98173905E2DF28C223B, 08541CF3354EBB634BD590E0019128F70A6FCA9075B7E785A9E9BD82EC234DD3 ] Ucx01000 C:\Windows\system32\drivers\ucx01000.sys
19:20:51.0790 0x0a08 Ucx01000 - ok
19:20:51.0794 0x0a08 [ DCA34A111C29E4578DF2B8CEA3C7CDBD, 86BCE4C8EC228724D5896067A85A4768B6069D10A482ECC51A8F828DBD3880C9 ] UdeCx C:\Windows\system32\drivers\udecx.sys
19:20:51.0802 0x0a08 UdeCx - ok
19:20:51.0809 0x0a08 [ 718A956AE00CE086F381044AB66CC29C, E4EED1600C72CECE1D4507827C329A93D356BBA027470FCF6C4B5C1651DED643 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:20:51.0827 0x0a08 udfs - ok
19:20:51.0829 0x0a08 [ BA760F8E66428BA9FF1E8BFBC6248136, BE7DCBB293B12672CB3653E640C46F669BD738D320F34F4FA4A26F6B248561F0 ] UEFI C:\Windows\System32\drivers\UEFI.sys
19:20:51.0837 0x0a08 UEFI - ok
19:20:51.0843 0x0a08 [ 28B8E1C6CBCF9FFE2FABFF3160C26ADF, 1C90E6C4E17C9B5555151943970BB6CC196E7EFC6665D9B9DCBB1EC51C70C715 ] Ufx01000 C:\Windows\system32\drivers\ufx01000.sys
19:20:51.0853 0x0a08 Ufx01000 - ok
19:20:51.0857 0x0a08 [ 2B1DABA97DDF5365FC66EE7DEDD86A13, 2FF3355862938B37EE63FCA149415CE5032BF54747B07517BB21460733B65AD8 ] UfxChipidea C:\Windows\System32\drivers\UfxChipidea.sys
19:20:51.0866 0x0a08 UfxChipidea - ok
19:20:51.0873 0x0a08 [ 2A87EA182EA333D79AA0B03833EA67F2, 227792A8B4E63CF60A3DEECF829448C8FD59A40DEF3F42414E432820F8D34F64 ] ufxsynopsys C:\Windows\System32\drivers\ufxsynopsys.sys
19:20:51.0881 0x0a08 ufxsynopsys - ok
19:20:51.0887 0x0a08 [ 63451BD694651307254B8DD37A3D79C7, C781E2D876AF42D5972CCDCF86B7A59F6AF8AF0C6350647F3FA1B209119B5EF9 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:20:51.0898 0x0a08 UI0Detect - ok
19:20:51.0903 0x0a08 [ 6DE78C04BF32ECA7AF3064F53687C9A5, 164D3BB24EBA3EAF613799928063FE75220A4E583D985F53A895017782C18600 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:20:51.0911 0x0a08 uliagpkx - ok
19:20:51.0914 0x0a08 [ 67D1E0E6E4D5D33AF0AEF0E33B4DA0F4, BA2E6F16B6B3B54C943F1E7B9F79A6D1332A7ED228D754CC5AE70E3CD78B1F37 ] umbus C:\Windows\System32\drivers\umbus.sys
19:20:51.0922 0x0a08 umbus - ok
19:20:51.0925 0x0a08 [ 11680607944A719EF20E0E740785712A, 1567C2B3AAD702DCC2DC9C6B7B92EE5B681C06701A39DAC3AA7E2BE9E1E04F47 ] UmPass C:\Windows\System32\drivers\umpass.sys
19:20:51.0933 0x0a08 UmPass - ok
19:20:51.0939 0x0a08 [ FD949725D9EB52C0B87435CDE1134668, 96E2B3D3379E9AE225E5A4C5251207F1E7DA573901F4F026758EDE9FAEF4F2C5 ] UmRdpService C:\Windows\System32\umrdp.dll
19:20:51.0953 0x0a08 UmRdpService - ok
19:20:51.0971 0x0a08 [ CB902A15DD21B363FECA5DCCF34F5C57, 6A0836A12A410EBD5C667982852B58CA9E9EDB11EA666C413CC0F811E01A549D ] UnistoreSvc C:\Windows\System32\unistore.dll
19:20:52.0004 0x0a08 UnistoreSvc - ok
19:20:52.0016 0x0a08 [ B85A8CF2BE74DFF1E80097AC94584112, B1DBACC33A4143FEE2CF54E567590A69580312AD7A053BCC85B487C4D451FBDA ] upnphost C:\Windows\System32\upnphost.dll
19:20:52.0036 0x0a08 upnphost - ok
19:20:52.0039 0x0a08 [ 2410A0C20D21A25E6C01979FA886BE90, DD3F92D8CF110D47B9E36BA0EB10EB34C0FDD28FE0D57E4B60F9326703388F75 ] UrsChipidea C:\Windows\System32\drivers\urschipidea.sys
19:20:52.0049 0x0a08 UrsChipidea - ok
19:20:52.0052 0x0a08 [ 6E59CE43B6BA5AA1ADCF36A4DBBB92BB, 647D66775A90F67D803043DE8C8AE8BC2F7A042A8DCF9C95BF5458C79609481B ] UrsCx01000 C:\Windows\system32\drivers\urscx01000.sys
19:20:52.0062 0x0a08 UrsCx01000 - ok
19:20:52.0065 0x0a08 [ E8A59FA109A22FC07E44BDFCC9727DBD, 0DC5928C0FF7E5B38917660D6EFECCC22172DB0BB9B23216F33E750790529C16 ] UrsSynopsys C:\Windows\System32\drivers\urssynopsys.sys
19:20:52.0071 0x0a08 UrsSynopsys - ok
19:20:52.0074 0x0a08 [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64 C:\Windows\System32\Drivers\usbaapl64.sys
19:20:52.0082 0x0a08 USBAAPL64 - ok
19:20:52.0087 0x0a08 [ D8A44550ECE102B6443F5D54DCE7DAB3, 97F5AE7B17DAC4A4F3186C77116BC8E49874FB0018C99D8E2CDA29D89E8B0912 ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
19:20:52.0095 0x0a08 usbccgp - ok
19:20:52.0098 0x0a08 [ 66B3D22DAB5312FF238ABF5C6D9F8FAB, 4A644AFC1C27D692D352BEB8801398A00EA5B4055476063AF905A0A46DDBF8BB ] usbcir C:\Windows\System32\drivers\usbcir.sys
19:20:52.0108 0x0a08 usbcir - ok
19:20:52.0112 0x0a08 [ 3E4F20DB902D2E2914F3FF3DB9772200, F3D32BE06A26164B5F6E8DB67160D1DBBDC6D14666EEF84EA43C78CB7706E31C ] usbehci C:\Windows\System32\drivers\usbehci.sys
19:20:52.0120 0x0a08 usbehci - ok
19:20:52.0130 0x0a08 [ 41F7F00D76904416EF1F9EFA1A4C37A2, 7A4250EB2E2E0037B3AE1480C13B229ECFF5C575E68E4F934EE011DB1833B46A ] usbhub C:\Windows\System32\drivers\usbhub.sys
19:20:52.0143 0x0a08 usbhub - ok
19:20:52.0155 0x0a08 [ E7463CE8579A0418A98BE9BE42C647D7, 923CD51C82FCF9DC4E9EEA99E53634EE07EBF62FB5DFC337F01309D7D5C7622C ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
19:20:52.0172 0x0a08 USBHUB3 - ok
19:20:52.0175 0x0a08 [ DAB35CCA86F5FBE77D870A40089BC4A1, 4A47D59D882D0F2B93F2EE7F10995E7D68B58009434E2CBD04C659E0D1F059D8 ] usbohci C:\Windows\System32\drivers\usbohci.sys
19:20:52.0183 0x0a08 usbohci - ok
19:20:52.0187 0x0a08 [ 21162F65C7756AAECAEBED9E67D0A5FE, DE3B43964171DB5B0464DA5E7A674A5D200A8695E6EF1AE2030681066ABA2688 ] usbprint C:\Windows\System32\drivers\usbprint.sys
19:20:52.0195 0x0a08 usbprint - ok
19:20:52.0198 0x0a08 [ 4AAD6547953D373A1EB5B2DF583D868B, 4E3DCEC9644550996C314FCC39F885DDE4AA7AD821B8596D96C5BEA5D60795F7 ] usbser C:\Windows\System32\drivers\usbser.sys
19:20:52.0207 0x0a08 usbser - ok
19:20:52.0212 0x0a08 [ 8949F77132A4F8F3BA17C6727099F002, 86AD4A2263B34983335180FDAE775D1744E042D2A11300D27DF546F15F285A25 ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS
19:20:52.0223 0x0a08 USBSTOR - ok
19:20:52.0226 0x0a08 [ 8B3E458A8851F9A3B2109B1680EE1159, 753AC8F82F65564F00EA2F60B43E4B815FEAABE0DA35B6356210A5F4B1CA3EFC ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
19:20:52.0233 0x0a08 usbuhci - ok
19:20:52.0241 0x0a08 [ 9E9D58F5E1702955B2F4D62996F80E8E, 6C21C250B9D98346D0D5CB7D6C11AB120A1D195C28313BDB0CE532663F0114E2 ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
19:20:52.0254 0x0a08 USBXHCI - ok
19:20:52.0277 0x0a08 [ 2771EBB565F5C121E66060B173991D4D, 1EB34A6262A18E47ADCA392FDB2D58E8428A1CA43EB4196D76A897F74A03CA7F ] UserDataSvc C:\Windows\System32\userdataservice.dll
19:20:52.0315 0x0a08 UserDataSvc - ok
19:20:52.0332 0x0a08 [ 36EC82F0E399F36BD25F593D63DC144A, 2A9E916A098ACD5A5074A5FD053ECAB027A0932A348C728F20CD63EF16289533 ] UserManager C:\Windows\System32\usermgr.dll
19:20:52.0359 0x0a08 UserManager - ok
19:20:52.0368 0x0a08 [ 05F4CB5991D897E4253BF61FA5E828F8, 25B5B6751B4455491E9A050DF5C12F788B5677F70FB4844E0BF851090AC1F74C ] UsoSvc C:\Windows\system32\usocore.dll
19:20:52.0369 0x0624 Object send P2P result: true
19:20:52.0369 0x0624 Object required for P2P: [ 59A20F5AD9F4AE54098154359519408E ] iaLPSS2i_I2C
19:20:52.0385 0x0a08 UsoSvc - ok
19:20:52.0388 0x0a08 [ 889459F1FDDC5EC58B437AA6C436F33F, 8ACC32C88D81943A8A90FDAF4772C3EDE06CAB5F489F59525BEA7AAB99DAAE73 ] VaultSvc C:\Windows\system32\lsass.exe
19:20:52.0396 0x0a08 VaultSvc - ok
19:20:52.0399 0x0a08 [ E1BE37312785A71862516F66B3FD24CE, D248C513DBEACB192653C6E46809209F341771B146544BBF43B86369280B4F8B ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:20:52.0406 0x0a08 vdrvroot - ok
19:20:52.0420 0x0a08 [ 67A6E949395A09914AD8B38FE14B8D15, 593F2FAA880B2E0468F98BD58B5214A170E5890907B25294D7A47C66505A3D45 ] vds C:\Windows\System32\vds.exe
19:20:52.0446 0x0a08 vds - ok
19:20:52.0453 0x0a08 [ E42C0F2850735FF9D908B9DB581E6314, E2204A56BF37FC57CD2ED96E3F908882D72B4BFF1BFB97C5172C851F1E4F9650 ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
19:20:52.0463 0x0a08 VerifierExt - ok
19:20:52.0475 0x0a08 [ EC15FD6A28757793E2DA394CD94ABD52, DC758BBEE9C6952D7B3F7171EF67B037B4068E88189A2C4A894122D1D1209468 ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
19:20:52.0493 0x0a08 vhdmp - ok
19:20:52.0497 0x0a08 [ D0C9632C350F46786643A069251BC249, CF65BA0D3F3D2B821C10E2D4F53F5B6BF6236CA9767419392A561CFA79254C3B ] vhf C:\Windows\System32\drivers\vhf.sys
19:20:52.0506 0x0a08 vhf - ok
19:20:52.0511 0x0a08 [ E886CB75DA2B6EB35469EF10135624C7, 3AFC59A0709B984F517A918D5BBEBEB1C80001BEC87C133447DCEAEDE00E516D ] vmbus C:\Windows\system32\drivers\vmbus.sys
19:20:52.0519 0x0a08 vmbus - ok
19:20:52.0522 0x0a08 [ 46D2EC27820EC0F798F85821E53C2942, D298A7D6AC16F76A069F843C8DD323ECB340D361733CB9B076BCDE8FC5F1FEFC ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
19:20:52.0530 0x0a08 VMBusHID - ok
19:20:52.0539 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicguestinterface C:\Windows\System32\ICSvc.dll
19:20:52.0559 0x0a08 vmicguestinterface - ok
19:20:52.0568 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicheartbeat C:\Windows\System32\ICSvc.dll
19:20:52.0586 0x0a08 vmicheartbeat - ok
19:20:52.0595 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmickvpexchange C:\Windows\System32\ICSvc.dll
19:20:52.0613 0x0a08 vmickvpexchange - ok
19:20:52.0621 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicrdv C:\Windows\System32\ICSvc.dll
19:20:52.0638 0x0a08 vmicrdv - ok
19:20:52.0646 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicshutdown C:\Windows\System32\ICSvc.dll
19:20:52.0665 0x0a08 vmicshutdown - ok
19:20:52.0673 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmictimesync C:\Windows\System32\ICSvc.dll
19:20:52.0691 0x0a08 vmictimesync - ok
19:20:52.0699 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvmsession C:\Windows\System32\ICSvc.dll
19:20:52.0716 0x0a08 vmicvmsession - ok
19:20:52.0725 0x0a08 [ 9AFCCEBFC4D311B62EF0C5457FBB405C, 965736DD97D7BF23AA62D4DFB4563534B252E26C66A3FDD1461024FD2315C53A ] vmicvss C:\Windows\System32\ICSvc.dll
19:20:52.0742 0x0a08 vmicvss - ok
19:20:52.0746 0x0a08 [ B9265F47E7A354BAAA0AF5CBA3F8F7CE, F836E7BEDC7CAB1C01225164D171A0210D8F909F52992E4C0BF3C92B365BCD52 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:20:52.0753 0x0a08 volmgr - ok
19:20:52.0760 0x0a08 [ BEE9C8B72AB752B794F69C2B9B3678AA, 49A5093C26F3CDCD60577F7F2D7F936C7B2BD010B27F2C49A7B6AA41E42DF98D ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:20:52.0773 0x0a08 volmgrx - ok
19:20:52.0781 0x0a08 [ E1F91A727A04C9F8199D04FF3BBBF63C, 076CAEE621DBF7DE24ED92BA239C440879FDB674CF3213DF3E35AEC03D0D2031 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:20:52.0793 0x0a08 volsnap - ok
19:20:52.0797 0x0a08 [ F7B1B1101271E31F43CC76E890704F51, 2282D82B220C3D13FF980ED8E40443C83816D3DA9557EACEA137873F92BB9CF4 ] vpci C:\Windows\System32\drivers\vpci.sys
19:20:52.0805 0x0a08 vpci - ok
19:20:52.0809 0x0a08 [ D48ED0A08BD2FD25A833E6AC99623091, 6CA7580878D3893E14B4938023A00CDFC9BE215A0CE4ED59A94F95DFD9FDF4D8 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:20:52.0817 0x0a08 vsmraid - ok
19:20:52.0839 0x0a08 [ 4CF5A1E0C4FCA956ACD6C654E2A8610E, 57F3C7200C25E8717AF92AF2ED7615C6605179D3514B432220FA6EA94CAB4F2E ] VSS C:\Windows\system32\vssvc.exe
19:20:52.0886 0x0a08 VSS - ok
19:20:52.0895 0x0a08 [ 79F4D90FAA0ACC1866F2F3E03E39CA89, EE08BCBF29A7E4AFFF520B8DF067281425F433EC275F8C86CE8F20F000E92E3D ] vssbrigde64 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe
19:20:52.0900 0x0a08 vssbrigde64 - ok
19:20:52.0907 0x0a08 [ 6990D4AFDF545669D4E6C232F26DE1FB, 9B8F99A035188FD96BA79E935E8EF387BEA2223ECA0B74CF64AB993DABAA5722 ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
19:20:52.0919 0x0a08 VSTXRAID - ok
19:20:52.0922 0x0a08 [ 1EE11F0508C58EF081F4176E66D6970B, 9069B3FC8850C7CF617909C6DBFC3753FEB59A9E708379CC57190F4097FB374E ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
19:20:52.0930 0x0a08 vwifibus - ok
19:20:52.0935 0x0a08 [ 938E4EF58E42D252B742B0E243011B90, AC0C21FBAF15924CB271CA43ACB7A86287936C78B4852BCFC59EC7EC703E036C ] vwififlt C:\Windows\system32\drivers\vwififlt.sys
19:20:52.0945 0x0a08 vwififlt - ok
19:20:52.0955 0x0a08 [ 48C1A256591297C43ECFC4E30D144EAA, 8E66833ED2CEB6D7E499EB2E4282B4F9DFA28B6D21757BB88EC52FD069D7FACE ] W32Time C:\Windows\system32\w32time.dll
19:20:52.0976 0x0a08 W32Time - ok
19:20:52.0979 0x0a08 [ 00C27B64C758C111E5D78A70DE6CA2B6, C99761B9B671B3A1FF1C52796CCA3F4F825BF50D9657D13B551E849CDD82055D ] WacomPen C:\Windows\System32\drivers\wacompen.sys
19:20:52.0988 0x0a08 WacomPen - ok
19:20:52.0998 0x0a08 [ D76D1AC4F2C642D09A68227D129A4726, D14D6C4D94E9660848C74B220359683D91A4A3D70750E781A20B6D86D46794CE ] WalletService C:\Windows\system32\WalletService.dll
19:20:53.0016 0x0a08 WalletService - ok
19:20:53.0020 0x0a08 [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarp C:\Windows\system32\DRIVERS\wanarp.sys
19:20:53.0030 0x0a08 wanarp - ok
19:20:53.0033 0x0a08 [ 8CB53620B2C2F0641DD7563EA0FDF491, D62FE75C908409A54949F0E3C39558DC7A8F11AF7496ED7B0872D80D08CB67A7 ] wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:20:53.0043 0x0a08 wanarpv6 - ok
19:20:53.0067 0x0a08 [ 2598BBF11C9E7D0885DCA52E7FD5BCBD, 46B1FB080A2CD88C89A0EB8BA2594A1FA2C341ED77A6C6835CBFFE42907FAC55 ] wbengine C:\Windows\system32\wbengine.exe
19:20:53.0106 0x0a08 wbengine - ok
19:20:53.0118 0x0a08 [ 642EFABF900374FA85639D83B5533AFD, 292692D6AAC2A785D237ADFBC7CA3D379E8FC79FA366A8CE7D06F5CA5CE6866B ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:20:53.0140 0x0a08 WbioSrvc - ok
19:20:53.0150 0x0a08 [ 0BF8D8C7EC9FB15D6480A12101E88B71, E7BC6A4E53D8C9D73BF83097DFE43ED8038B7BED0AE56E5AF7983F74562F15A3 ] Wcmsvc C:\Windows\System32\wcmsvc.dll
19:20:53.0173 0x0a08 Wcmsvc - ok
19:20:53.0181 0x0a08 [ 53A036CED1270F2459E708A05922FD49, 2F281A72E4B0408DE6C8153F5988C9AA38591FB1E72558767D389637D0666A85 ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:20:53.0201 0x0a08 wcncsvc - ok
19:20:53.0204 0x0a08 [ 965B6197A659782B6A0F68411A180AAD, 5541AB78B71E4FA655BCBF2D80D574B2A3B4AA8871F65D26620BDE549FA5459A ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:20:53.0213 0x0a08 WcsPlugInService - ok
19:20:53.0216 0x0a08 [ 069D3D6E20AD753B34FCE856F0436869, CF8C12295DDAA56E7350019AADBA533D7857CFB3F20DEE14E557963645A9331B ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
19:20:53.0223 0x0a08 WdBoot - ok
19:20:53.0236 0x0a08 [ 6CC727E94CD84E9720FDCDA8089CABCC, BCF66056B06DED6BC2D329E910FCD3E685D627BAD3B5D7F4B0E970B45CD9CEF4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:20:53.0252 0x0a08 Wdf01000 - ok
19:20:53.0260 0x0a08 [ E3E97151A1D1E87BB2D5371F66C5F169, 0ED0B9852FE0533816F5EE2F06045B3964A00FD749A7011DB3C663AB6FA369E2 ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
19:20:53.0272 0x0a08 WdFilter - ok
19:20:53.0276 0x0a08 [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiServiceHost C:\Windows\system32\wdi.dll
19:20:53.0290 0x0a08 WdiServiceHost - ok
19:20:53.0293 0x0a08 [ 75DC67553051103547B693898CB32D08, 4FCF2C3DBBE85461364B1F3A3F3629B52C8664487D30142D15937A4C96EF6A8F ] WdiSystemHost C:\Windows\system32\wdi.dll
19:20:53.0306 0x0a08 WdiSystemHost - ok
19:20:53.0317 0x0a08 [ 2BC2E99623119521EEF7910A11D0FDE0, 3F3E48A79534F0F65F961D9B170D534562E04901B630127B16DF02E6D42F2BBF ] wdiwifi C:\Windows\system32\DRIVERS\wdiwifi.sys
19:20:53.0338 0x0a08 wdiwifi - ok
19:20:53.0343 0x0a08 [ 07B043160399AF4009054E2EA3464BF4, 8D652D7CD75F8FB2B5414155355F0C970015914E1AC6522DBB8387BB8662F542 ] WdNisDrv C:\Windows\system32\Drivers\WdNisDrv.sys
19:20:53.0350 0x0a08 WdNisDrv - ok
19:20:53.0353 0x0a08 WdNisSvc - ok
19:20:53.0359 0x0a08 [ 9972D395DBD05D91DA5EDADEB9325680, 9382D846793F285721A1A0FED42F914035A53D856B902FADB0B7144C471BDA91 ] WebClient C:\Windows\System32\webclnt.dll
19:20:53.0375 0x0a08 WebClient - ok
19:20:53.0381 0x0a08 [ B6BF579761489720BCE787F723F596E5, 879B17F6A4F23F5E85A09126B7B407955DDCEB1BA4A8FFC0A418B7F47311C056 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:20:53.0395 0x0a08 Wecsvc - ok
19:20:53.0398 0x0a08 [ 10C9CF8771A2A87F575F9FB56821474E, 15E3DFFE9CF6777F67E426ECF797D2DF743EA152DEE336DCC9C2F92A0E6EB9A3 ] WEPHOSTSVC C:\Windows\system32\wephostsvc.dll
19:20:53.0409 0x0a08 WEPHOSTSVC - ok
19:20:53.0413 0x0a08 [ 357C083FE35D030D991D163AAF622A06, F301852D49DBDEF0D28F56CD74CBDC71CA003EBD07D3F46EA5C870DC1BD07896 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:20:53.0427 0x0a08 wercplsupport - ok
19:20:53.0431 0x0a08 [ 2235AF716D15D9DFE4C59DC2AC0C440C, 2DCFCEBEA77E7E40CEF9A785BE1A794B390B36E40FBCF49B494F9CEA3F6A28C4 ] WerSvc C:\Windows\System32\WerSvc.dll
19:20:53.0445 0x0a08 WerSvc - ok
19:20:53.0449 0x0a08 [ C11272713719922DE5711094333BD166, 61D4F07E02AECF04964FF51EEA31069A2B0EAA549AD2B29B5FD3E1E6BB543593 ] WFPLWFS C:\Windows\system32\drivers\wfplwfs.sys
19:20:53.0460 0x0a08 WFPLWFS - ok
19:20:53.0465 0x0a08 [ 205A1FAE910F5C493D236245850BB62A, DBA4D1D734BAA3CDEB8A7F9C81A8DAA88CEA55AF5C4C5908E76FB8E522C5EC8A ] WiaRpc C:\Windows\System32\wiarpc.dll
19:20:53.0475 0x0a08 WiaRpc - ok
19:20:53.0478 0x0a08 [ EF536C54AB9281FDC4E83B07279FCFC4, 22E4F133170682EE14413CA8FDC2DBE73AB31960D6ACB728A6B398229FDDFD3B ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:20:53.0485 0x0a08 WIMMount - ok
19:20:53.0487 0x0a08 WinDefend - ok
19:20:53.0491 0x0a08 [ D8966A76408107224C6013993135DD78, 6159F69BC26FF817078E68C70E6DFC9075FEBF9EF9F4F046C7A65BC377544AE6 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
19:20:53.0499 0x0a08 WindowsTrustedRT - ok
19:20:53.0502 0x0a08 [ 8B102A7B6CE326FD4208CC7C2D183343, E47C1D76CBFD2A382C3A7BB048D752FB6DD4616FADDEB1C3ADD5DDAE149742AF ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
19:20:53.0508 0x0a08 WindowsTrustedRTProxy - ok
19:20:53.0521 0x0a08 [ FFD04E8263FC9CDB89BAD8C27C337223, 7021161D354F1536DA261D001524B92301466631DCFA161A7C6355AAC86BBE40 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
19:20:53.0546 0x0a08 WinHttpAutoProxySvc - ok
19:20:53.0550 0x0a08 [ 4A53441C1C4D2878BEF27E381138BB2D, C221E74491E6FD2AF472B53876B46788D5CF62F4E645457F3B3816FD0ED2BAA1 ] WinMad C:\Windows\System32\drivers\winmad.sys
19:20:53.0557 0x0a08 WinMad - ok
19:20:53.0565 0x0a08 [ 1033C37122C7404C3B926ADF84874832, 163B3A7112F13AE7BB2655A28C6B19AF9B263F2AD2FF1B75314BE3E2B9118903 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:20:53.0578 0x0a08 Winmgmt - ok
19:20:53.0615 0x0a08 [ 703D0F62C5AA4D08EE8756516C0D125D, 02015A5E62490C11EC968160C528C2AFD1D7194AACA27F407B06EB462657511F ] WinRM C:\Windows\system32\WsmSvc.dll
19:20:53.0676 0x0a08 WinRM - ok
19:20:53.0685 0x0a08 [ 260907CE034FE327AC99BDA4153AB22F, B96501F43248713C2E153B9D22B78D51412A3C6989A2FB5F53A406C6CDC98D30 ] WINUSB C:\Windows\System32\drivers\WinUSB.SYS
19:20:53.0694 0x0a08 WINUSB - ok
19:20:53.0697 0x0a08 [ 40A3E8D729F458B2C9A8BD9380FF83D5, CD42FFC138969EF8C9588FD113F0B9A98FBA282D46A5B6BCFA765F55ED6E97A1 ] WinVerbs C:\Windows\System32\drivers\winverbs.sys
19:20:53.0704 0x0a08 WinVerbs - ok
19:20:53.0736 0x0a08 [ 453740989239803FE363FF8B40EA2E08, 25499705627C38D3431B3C336E0CF3BF55ABB0C461B88DA6D3767CAAE1E2B893 ] WlanSvc C:\Windows\System32\wlansvc.dll
19:20:53.0795 0x0a08 WlanSvc - ok
19:20:53.0828 0x0a08 [ E48BBF1363F843E030757EC190DD33E6, B37199495115ED423BA99B7317377CE865BB482D4E847861E871480AC49D4A84 ] wlidsvc C:\Windows\system32\wlidsvc.dll
19:20:53.0881 0x0a08 wlidsvc - ok
19:20:53.0886 0x0a08 [ 8F010BF65238F3F822D22BA12831796E, 2CA830F259B742D2F5CDD0437960BF512D40FB4A4C2342E3BABB38D468F79694 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
19:20:53.0893 0x0a08 WmiAcpi - ok
19:20:53.0899 0x0a08 [ 74ACA5A7880C1F0BB9D60E32E1705A70, A89817BCCBFF94D7394614DA81D1C6C4F53AF47A539E674EEF6DC3FC496BF702 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:20:53.0910 0x0a08 wmiApSrv - ok
19:20:53.0912 0x0a08 WMPNetworkSvc - ok
19:20:53.0917 0x0a08 [ 2A9650FCC696DB28E45EA8B33B99B8E6, FBEBC6C05D50F578C6EEE0A7285EBE1DEADB08DD21FA3232630FD8D5A68FC3FB ] Wof C:\Windows\system32\drivers\Wof.sys
19:20:53.0926 0x0a08 Wof - ok
19:20:53.0952 0x0a08 [ 4090C6738AA92B428220857B4D44F638, 4A3EE47494051E5BA8393F2AC8226EF434DA3AA1895CF4BADC9BC1BC378647C6 ] workfolderssvc C:\Windows\system32\workfolderssvc.dll
19:20:54.0015 0x0a08 workfolderssvc - ok
19:20:54.0020 0x0a08 [ 22C52D7EE7C7D0E02C8EFD8CAE8E3A71, 126605A12CEC9CC07DE3050F12E43CECABEAF0D00DF12300AF70F34700F7FE8E ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
19:20:54.0027 0x0a08 wpcfltr - ok
19:20:54.0031 0x0a08 [ 45FA01F8B7971ACB65202038E34D04A3, 9B2C2ABC7DB716295B0BD0AF04DA08E6B4200D7CF1C7DB59DD8FD8FEBD56D94C ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:20:54.0042 0x0a08 WPDBusEnum - ok
19:20:54.0044 0x0a08 [ 1C08E424CBDD5065BB7266F8C048C1B1, 0452C85EDA6CBAB75C2617886C5D8117ED25D91F1BE0F8377B08D55B6629B028 ] WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr.sys
19:20:54.0051 0x0a08 WpdUpFltr - ok
19:20:54.0055 0x0a08 [ 2C6EEFFBB7FB1C51CCD3737C77AB9109, 8C2ED309FAF4312512E7BCCBBC51B1353603A3499077A1DE21991F0692AF1620 ] WpnService C:\Windows\system32\WpnService.dll
19:20:54.0066 0x0a08 WpnService - ok
19:20:54.0069 0x0a08 [ 638B43D39A3D0B47024555CF1095E6F1, C7EA0A6ED227A5256EB02CA76FEC538DF196B8DC38DA2A567757D2B221C9473E ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:20:54.0079 0x0a08 ws2ifsl - ok
19:20:54.0085 0x0a08 [ 9C17CF2D05F8DA5AC66880B6BEE64E7D, 8930079A1AFA97657BE567038EE57C988D3DE9A6C24EA46160E2974837082535 ] wscsvc C:\Windows\System32\wscsvc.dll
19:20:54.0097 0x0a08 wscsvc - ok
19:20:54.0100 0x0a08 WSearch - ok
19:20:54.0149 0x0a08 [ 6E04BBE242E2889B37300C4DF5CE1126, FBDAEAC62C48A4FC5EF412AE47FF10590AE83E8871412F76F6F9BAE910542DFA ] WSService C:\Windows\System32\WSService.dll
19:20:54.0213 0x0a08 WSService - ok
19:20:54.0249 0x0a08 [ 8A88DBA247BFF23BD284C2189F41FDA5, 86A617CB7C7473306DA2889AA30B488ABB9B824F7DCA31AA675DA6EB3974887C ] wuauserv C:\Windows\system32\wuaueng.dll
19:20:54.0306 0x0a08 wuauserv - ok
19:20:54.0312 0x0a08 [ A928F25CB62232F413EE655352856E10, 1D2B278A24DDDE8792ADE7649FF90A98E186B79F13AA296C30E4180293BE906A ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:20:54.0321 0x0a08 WudfPf - ok
19:20:54.0327 0x0a08 [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFRd C:\Windows\system32\drivers\WudfRd.sys
19:20:54.0342 0x0a08 WUDFRd - ok
19:20:54.0346 0x0a08 [ 1336DA39FE006EAB2733CA4DE5B3560C, F0D6C71ADCB66D4D14EC6D09FD43F5521A3A8CA53F248DFD01696FB4F033BE77 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:20:54.0358 0x0a08 wudfsvc - ok
19:20:54.0364 0x0a08 [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFWpdFs C:\Windows\system32\DRIVERS\WUDFRd.sys
19:20:54.0375 0x0a08 WUDFWpdFs - ok
19:20:54.0380 0x0a08 [ A932391623D5CEC4EF4A2A17D3CEBFCD, 54AA17F385347DED262BDA84F2D99106DC5D9BF8765D647BD76265356193BDFA ] WUDFWpdMtp C:\Windows\system32\DRIVERS\WUDFRd.sys
19:20:54.0391 0x0a08 WUDFWpdMtp - ok
19:20:54.0410 0x0a08 [ 5DA95027DF2317174E8C39B4A8D1FCD8, 99B356411CB08B8BCCF2348DBF1FD5D4F417EA509D9C7CE23E5877C333F4D304 ] WwanSvc C:\Windows\System32\wwansvc.dll
19:20:54.0443 0x0a08 WwanSvc - ok
19:20:54.0459 0x0a08 [ 5DFAF8BE5A3CABAABF6795BC09EB7876, 1AFD0BC50EA5C2CCB2874E97FE5205175C80849BD6C9BDAF9FBC49174D478997 ] XblAuthManager C:\Windows\System32\XblAuthManager.dll
19:20:54.0486 0x0a08 XblAuthManager - ok
19:20:54.0504 0x0a08 [ 7118498F6E48758A2EF5A7D1982E2B62, 1FF75AE64CB6DB263E8B35515E092B325AA71A6B2210F8F2B0AD087B3BA33345 ] XblGameSave C:\Windows\System32\XblGameSave.dll
19:20:54.0535 0x0a08 XblGameSave - ok
19:20:54.0541 0x0a08 [ F279536122B83FD0D8E158AA753E1B7C, 6A542F28E24B30DBDC2EEE24DA33C2F4ADB3596AEDDD71DC1495DD40577CE4BB ] xboxgip C:\Windows\System32\drivers\xboxgip.sys
19:20:54.0554 0x0a08 xboxgip - ok
19:20:54.0571 0x0a08 [ 69E727F94BEA64E66C284F3C482F33E6, B3E0F287E7A251E0FC17C41089C45737027E54F0213BDE847356AC882B4D3700 ] XboxNetApiSvc C:\Windows\system32\XboxNetApiSvc.dll
19:20:54.0600 0x0a08 XboxNetApiSvc - ok
19:20:54.0604 0x0a08 [ DA0807D87A62D076C29C4E30F1E84F46, CA3079350038091AEE04D4DA7C06865E9DB3095120AE61AAB575AA77E86A6223 ] xinputhid C:\Windows\System32\drivers\xinputhid.sys
19:20:54.0611 0x0a08 xinputhid - ok
19:20:54.0612 0x0a08 ================ Scan global ===============================
19:20:54.0615 0x0a08 [ 82E25186617BA6C15010F0D47C705705, 5BF9E38918E6EAE86448137E2D120B80318AA1143CDDF539A2BFBEE227646816 ] C:\Windows\system32\basesrv.dll
19:20:54.0621 0x0a08 [ E2899695BD30B5F93EC626EBBEF2CB69, B190D2903A109D2C146D881F90769060A0E971942F4AA61AEAD81861032D89C3 ] C:\Windows\system32\winsrv.dll
19:20:54.0628 0x0a08 [ 09E92888FFF86F3334E59778724DCA6F, 2344763B52395EF565A9DE5F55BEDCA026AD2E8072FFD06F826BF366B3BA2AB4 ] C:\Windows\system32\sxssrv.dll
19:20:54.0638 0x0a08 [ 6FF8248F3A9D69A095C7F3F42BC29CB2, 9077B1AA0AFB8DB329FDED0E51085DE1C51B22A986162F29037FCA404A80D512 ] C:\Windows\system32\services.exe
19:20:54.0644 0x0a08 [ Global ] - ok
19:20:54.0644 0x0a08 ================ Scan MBR ==================================
19:20:54.0645 0x0a08 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
19:20:54.0683 0x0a08 \Device\Harddisk0\DR0 - ok
19:20:54.0686 0x0a08 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
19:20:54.0710 0x0a08 \Device\Harddisk1\DR1 - ok
19:20:54.0710 0x0a08 ================ Scan VBR ==================================
19:20:54.0712 0x0a08 [ 38C4EB34D6DE70AC54B677A3A3581420 ] \Device\Harddisk0\DR0\Partition1
19:20:54.0713 0x0a08 \Device\Harddisk0\DR0\Partition1 - ok
19:20:54.0714 0x0a08 [ 422ED27FF2C247438FDD681B27A63872 ] \Device\Harddisk0\DR0\Partition2
19:20:54.0714 0x0a08 \Device\Harddisk0\DR0\Partition2 - ok
19:20:54.0716 0x0a08 [ E411C8EBB489DE28FDD797D934705B97 ] \Device\Harddisk0\DR0\Partition3
19:20:54.0717 0x0a08 \Device\Harddisk0\DR0\Partition3 - ok
19:20:54.0718 0x0a08 [ 3CFC8EE278EBBC80EAACD2410784B61D ] \Device\Harddisk0\DR0\Partition4
19:20:54.0719 0x0a08 \Device\Harddisk0\DR0\Partition4 - ok
19:20:54.0721 0x0a08 [ 12182CAAA8CAC2DB07B668889B780112 ] \Device\Harddisk1\DR1\Partition1
19:20:54.0722 0x0a08 \Device\Harddisk1\DR1\Partition1 - ok
19:20:54.0724 0x0a08 [ 33AF541345FCC03A6CF6B6BAD5CC5BC5 ] \Device\Harddisk1\DR1\Partition2
19:20:54.0724 0x0a08 \Device\Harddisk1\DR1\Partition2 - ok
19:20:54.0725 0x0a08 [ 416505D5178B6E105A130793DE3EF462 ] \Device\Harddisk1\DR1\Partition3
19:20:54.0727 0x0a08 \Device\Harddisk1\DR1\Partition3 - ok
19:20:54.0727 0x0a08 ================ Scan generic autorun ======================
19:20:54.0752 0x0a08 [ 9A88F3C9B1773A676420F0F7922DD847, 01411F25DB7B981AAC8705EFD47A56CE43D84D178D629E45FC3974FAE7235997 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
19:20:54.0782 0x0a08 NvBackend - ok
19:20:54.0787 0x0a08 [ CC9823AA6E3F6229CD6DA193551314A5, 76BCD2BCA391C2114BF9D28FA290D9B39D16379C410070E0E3A6376FDEE51CE1 ] H:\Programme\iTunes\iTunesHelper.exe
19:20:54.0793 0x0a08 iTunesHelper - ok
19:20:54.0915 0x0a08 [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:20:55.0023 0x0a08 OneDriveSetup - ok
19:20:55.0133 0x0a08 [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:20:55.0240 0x0a08 OneDriveSetup - ok
19:20:55.0257 0x0a08 [ 2010CA459E5EC8F9D5FC8B000D130294, 058FF215A3AAD04F2A4CF23B2CC62A5EA28F5A705EFA689DCE9126720CF33229 ] C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:20:55.0270 0x0a08 OneDrive - ok
19:20:55.0281 0x0a08 [ 41E25E514D90E9C8BC570484DBAFF62B, E6C49F7CE186DC4C9DA2C393469B070C0F1B95A01D281AE2B89538DA453D1583 ] C:\Windows\system32\cmd.exe
19:20:55.0300 0x0a08 Uninstall C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 - ok
19:20:55.0305 0x0a08 Waiting for KSN requests completion. In queue: 381
19:20:55.0650 0x0624 Object send P2P result: true
19:20:55.0656 0x0624 Object required for P2P: [ 807A6636828E5F43C10A01474B8907EE ] MSDTC
19:20:56.0306 0x0a08 Waiting for KSN requests completion. In queue: 304
19:20:57.0307 0x0a08 Waiting for KSN requests completion. In queue: 304
19:20:58.0308 0x0a08 Waiting for KSN requests completion. In queue: 304
19:20:58.0330 0x0728 Object required for P2P: [ 7C58AFEC26E9F7730A8AA7FD40225937 ] sppsvc
19:20:59.0153 0x0624 Object send P2P result: true
19:20:59.0159 0x0624 Object required for P2P: [ 1CD8D5BF5E4058A2E12949D74A7E27FD ] nvsvc
19:20:59.0308 0x0a08 Waiting for KSN requests completion. In queue: 171
19:21:00.0309 0x0a08 Waiting for KSN requests completion. In queue: 171
19:21:01.0309 0x0a08 Waiting for KSN requests completion. In queue: 171
19:21:02.0265 0x0728 Object send P2P result: true
19:21:02.0268 0x0728 Object required for P2P: [ 34A3EB84B2A830E6F450B8F885AE4E6E ] SysMain
19:21:02.0309 0x0a08 Waiting for KSN requests completion. In queue: 150
19:21:03.0275 0x0624 Object send P2P result: true
19:21:03.0275 0x0624 Object required for P2P: [ 7D006FC340B301A1DEAFB5878C078A12 ] Origin Client Service
19:21:03.0310 0x0a08 Waiting for KSN requests completion. In queue: 147
19:21:04.0310 0x0a08 Waiting for KSN requests completion. In queue: 147
19:21:05.0311 0x0a08 Waiting for KSN requests completion. In queue: 147
19:21:06.0209 0x0728 Object send P2P result: true
19:21:06.0217 0x0728 Object required for P2P: [ 4CF5A1E0C4FCA956ACD6C654E2A8610E ] VSS
19:21:06.0312 0x0a08 Waiting for KSN requests completion. In queue: 70
19:21:07.0279 0x0624 Object send P2P result: true
19:21:07.0312 0x0a08 Waiting for KSN requests completion. In queue: 69
19:21:08.0312 0x0a08 Waiting for KSN requests completion. In queue: 69
19:21:09.0313 0x0a08 Waiting for KSN requests completion. In queue: 69
19:21:10.0194 0x0728 Object send P2P result: true
19:21:10.0203 0x0728 Object required for P2P: [ 9A88F3C9B1773A676420F0F7922DD847 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
19:21:10.0313 0x0a08 Waiting for KSN requests completion. In queue: 6
19:21:11.0314 0x0a08 Waiting for KSN requests completion. In queue: 6
19:21:12.0314 0x0a08 Waiting for KSN requests completion. In queue: 6
19:21:13.0003 0x0728 Object send P2P result: true
19:21:13.0003 0x0728 Object required for P2P: [ 2010CA459E5EC8F9D5FC8B000D130294 ] C:\Users\Matthias\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:21:13.0315 0x0a08 Waiting for KSN requests completion. In queue: 2
19:21:14.0316 0x0a08 Waiting for KSN requests completion. In queue: 2
19:21:15.0316 0x0a08 Waiting for KSN requests completion. In queue: 2
19:21:15.0990 0x0728 Object send P2P result: true
19:21:15.0990 0x0728 Object required for P2P: [ 41E25E514D90E9C8BC570484DBAFF62B ] C:\Windows\system32\cmd.exe
19:21:16.0317 0x0a08 Waiting for KSN requests completion. In queue: 1
19:21:17.0318 0x0a08 Waiting for KSN requests completion. In queue: 1
19:21:18.0318 0x0a08 Waiting for KSN requests completion. In queue: 1
19:21:19.0061 0x0728 Object send P2P result: true
19:21:19.0328 0x0a08 AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\wmiav.exe ( 16.0.0.614 ), 0x41000 ( enabled : updated )
19:21:19.0329 0x0a08 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.9.10586.0 ), 0x60100 ( disabled : updated )
19:21:19.0329 0x0a08 FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\wmiav.exe ( 16.0.0.614 ), 0x41010 ( enabled )
19:21:21.0913 0x0a08 ============================================================
19:21:21.0913 0x0a08 Scan finished
19:21:21.0913 0x0a08 ============================================================
19:21:21.0918 0x1a28 Detected object count: 1
19:21:21.0918 0x1a28 Actual detected object count: 1
19:21:42.0046 0x1a28 ose64 ( UnsignedFile.Multi.Generic ) - skipped by user
19:21:42.0046 0x1a28 ose64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
Geändert von park757 (18.05.2016 um 18:37 Uhr) |
| | #7 |
| /// Malwareteam ![]() ![]() | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Hi, puh, ich werd auf jeden Fall mal intern im Team nachfragen. Hast du schon mal eine andere Tastatur probiert? |
| | #8 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? ok da werde ich noch probieren. Hat sich dieser Virus schon in den Tastaturtreiber engeschlichen? |
| | #9 |
| /// Malwareteam ![]() ![]() | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Also was anderes würde mir dazu nicht mehr wirklich einfallen. Hast du eine Tastatur wo man Makros definieren kann? |
| | #10 |
| | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Habe diese hier : Speedlink Virtuis Advanced Gaming Tastatur: Amazon.de: Computer & Zubehör DANKE DAS WARS! EIN BEHINDERTES MAKRO. jetzt geht wieder alles. Mein Freundin hat irgendwas gedrückt eh klar. Danke nochmal!!! |
| | #11 |
| /// Malwareteam ![]() ![]() | Tastatur schreibt von selber nach "Entf" Taste - Virus ? Na freut mich dass es nichts allzu ernstes war |
![]() |
| Themen zu Tastatur schreibt von selber nach "Entf" Taste - Virus ? |
| cpu, defender, desktop, dnsapi.dll, explorer, firefox, firewall, internet, internet explorer, kaspersky, kis, mozilla, neustart, problem, problem mit dem pc, realtek, registry, rundll, security, services.exe, svchost.exe, taskmanager, tastatur, usb, virus, windows, winlogon.exe |